-4 | Forces ssh to use IPv4 addresses only. | man |
-6 | Forces ssh to use IPv6 addresses only. | man |
-A | Enables forwarding of connections from an authentication agent such as ssh-agent(1). | man |
-a | Disables forwarding of the authentication agent connection. | man |
-B bind_interface | Bind to the address of bind_interface before attempting to connect to the destination host. | man |
-b bind_address | Use bind_address on the local machine as the source address of the connection. | man |
-C | Requests compression of all data (including stdin, stdout, stderr, and data for forwarded X11, TCP and UNIX-domain connections). | man |
-c cipher_spec | Selects the cipher specification for encrypting the session. | man |
-D bind_address:]port | Specifies a local “dynamic” application-level port forwarding. | man |
-E log_file | Append debug logs to log_file instead of standard error. | man |
-e escape_char | Sets the escape character for sessions with a pty (default: ‘~’). | man |
-F configfile | Specifies an alternative per-user configuration file. | man |
-f | Requests ssh to go to background just before command execution. | man |
-G | Causes ssh to print its configuration after evaluating Host and Match blocks and exit. | man |
-g | Allows remote hosts to connect to local forwarded ports. | man |
-I pkcs11 | Specify the PKCS#11 shared library ssh should use to communicate with a PKCS#11 token providing keys for user authentication. | man |
-i identity_file | Selects a file from which the identity (private key) for public key authentication is read. | man |
-J destination | Connect to the target host by first making an ssh connection to the jump host described by destination and then establishing a TCP forwarding to the ultimate destination from there. | man |
-K | Enables GSSAPI-based authentication and forwarding (delegation) of GSSAPI credentials to the server. | man |
-k | Disables forwarding (delegation) of GSSAPI credentials to the server. | man |
-L bind_address:]port:host:hostport | | man |
-l login_name | Specifies the user to log in as on the remote machine. | man |
-M | Places the ssh client into “master” mode for connection sharing. | man |
-m mac_spec | A comma-separated list of MAC (message authentication code) algorithms, specified in order of preference. | man |
-N | Do not execute a remote command. | man |
-n | Redirects stdin from /dev/null (actually, prevents reading from stdin). | man |
-O ctl_cmd | Control an active connection multiplexing master process. | man |
-o option | Can be used to give options in the format used in the configuration file. | man |
-P tag | Specify a tag name that may be used to select configuration in ssh_config(5). | man |
-p port | Port to connect to on the remote host. | man |
-Q query_option | Queries for the algorithms supported by one of the following features: | man |
-q | Quiet mode. | man |
-R bind_address:]port:host:hostport | | man |
-S ctl_path | Specifies the location of a control socket for connection sharing, or the string “none” to disable connection sharing. | man |
-s | May be used to request invocation of a subsystem on the remote system. | man |
-T | Disable pseudo-terminal allocation. | man |
-t | Force pseudo-terminal allocation. | man |
-V | Display the version number and exit. | man |
-v | Verbose mode. | man |
-W host:port | Requests that standard input and output on the client be forwarded to host on port over the secure channel. | man |
-w local_tun[:remote_tun | Requests tunnel device forwarding with the specified tun(4) devices between the client (local_tun) and the server (remote_tun). | man |
-X | Enables X11 forwarding. | man |
-x | Disables X11 forwarding. | man |
-Y | Enables trusted X11 forwarding. | man |
-y | Send log information using the syslog(3) system module. | man |
-Z | List the public keys that would be attempted for authentication to the specified destination in preferred order and exit. | man |