how to forward/redirect SSH/telnet traffic to a specific host?

[Jahan Pahlavani]

Hello team, I want to redirect ssh traffic to a server for analyzing and reviewing (to PAM server), before go to real switches.for example when I ssh to 10.10.88.1, traffic go to PAM server and then go to 10.10.88.1;;

I write an ACL for filtering ssh traffic and assign it to a route-map and set ip next-hop to this server (PAM), on the distribution and core switches. and set ip policy on interface connected to core.

dist are 3750x and 3850-x and core is 4500 series.

but this scenario doesn't work.

all configs are correct and I review them many times, but I wonder if route-map ip next-hop can point to a host beyond some routers or it is for pointing to next hop router only.

many thanks.

[paul driver]

Hello
you could span/mirror or insert a tap to capture the traffic 
Can you elaborate of this PAM server?

[Jahan Pahlavani]

thanks to replay,

using span is not a long-term solution and using tap is costly.

privileged access management (PAM) is for restriction of access rights and permissions for users and accounts and computing processes. but pam is not my problem, my problem is route map and ip next hop config and how they work.

[paul driver]

Hello

---

@Jahan Pahlavani wrote:

but pam is not my problem, my problem is route map and ip next hop config and how they work.

---

What you are describing is policy-based routing, which i not sure would be applicable regards your query, as using PBR this would send all ssh traffic via the next-hop destination you specify (be it next-hop ip/interface or next hop recursive ip address) which would mean ssh would fail.
Now in your case (unless that is i am mistaken ) what you seem to want is to capture ssh traffic as it is being initiated and the ways to do that is to span/mirror or tap that traffic.