# Access route

Operator shell:

    ops@router-ops

Verified route from router-ops:

    router-ops -> pve-mgts -> VM101 10.71.100.2

Verified outer alias:

    ssh -T -o BatchMode=yes -o ConnectTimeout=10 pve-mgts

Verified inner access from pve-mgts:

    ssh -T \
      -o BatchMode=yes \
      -o ConnectTimeout=10 \
      -o StrictHostKeyChecking=yes \
      -i /root/.ssh/pve_to_openwrt_mgts_ed25519 \
      root@10.71.100.2

Do not run `ssh router-ops` when already logged in as `ops@router-ops`.
On router-ops that name may resolve to localhost and the local account
does not use the phone SSH private key.