# How to access CSR1000v API hosted on AWS via a bastion host/jump box?

**URL:** https://forum.networklessons.com/t/how-to-access-csr1000v-api-hosted-on-aws-via-a-bastion-host-jump-box/11737
**Category:** Network Automation
**Created:** [July 9, 2020, 3:14pm UTC](https://forum.networklessons.com/t/how-to-access-csr1000v-api-hosted-on-aws-via-a-bastion-host-jump-box/11737 "2020-07-09T15:14:04Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![gary391](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/b5e925/32.png) [@gary391](https://forum.networklessons.com/u/gary391)
#### Post date: [July 9, 2020, 3:14pm UTC](https://forum.networklessons.com/t/how-to-access-csr1000v-api-hosted-on-aws-via-a-bastion-host-jump-box/11737/1 "2020-07-09T15:14:05Z")

</div>

Hi,

I am trying to access my Cisco CSR1000v using API. CSR1000v is hosted in AWS, which I can presently access via bastion host/jump box. I am looking for pointers as to how can I access the CSR1000v from my local m/c using API.

Present SSH Setup:  
Local Dev → AWS Bastion(Linux Box) → AWS Hosted CSR1000v

Note: AWS Hosted CSR1000v uses a private key for login.

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [July 13, 2020, 7:10am UTC](https://forum.networklessons.com/t/how-to-access-csr1000v-api-hosted-on-aws-via-a-bastion-host-jump-box/11737/2 "2020-07-13T07:10:34Z")

</div>

Hello Gaurav

You are accessing jumpbox using SSH. This means that you have a few options to achieve what you need:

One option is to use SSH port forwarding. Take a look at the following lesson for more info on that:

> **[How to configure port forwarding with SSH](https://networklessons.com/miscellaneous/how-to-configure-port-forwarding-with-ssh)**
>
> Besides remote access SSH can also be used to forward ports. This way you can tunnel traffic to devices that are in the same network as the SSH server.

Another option is to connect to jumpox using SSH and then connect to the router directly, by using a Python script for example.

Finally, you can eliminate the use of SSH all together and simply use a VPN to connect.

I hope this has been helpful!

Laz
