OptionsOn ssh itself
-1
Forces ssh to try protocol version 1 only
-2
Forces ssh to try protocol version 2 only
-4
Forces ssh to use IPv4 addresses only
-6
Forces ssh to use IPv6 addresses only
-A
Enables forwarding of the authentication agent connection
-a
Disables forwarding of the authentication agent connection
-b
Use bind_address on the local machine as the source address of the connection <bind address>
-C
Requests compression of all data (including stdin, stdout, stderr, and data for forwarded X11 and TCP connections)
-c
Selects the cipher specification for encrypting the session <cipher spec>
-D
Specifies a local 'dynamic' application-level port forwarding <port>
-e
Sets the escape character for sessions with a pty (default: '~') <escape char>
-F
Specifies an alternative per-user configuration file <configfile>
-f
Requests ssh to go to background just before command execution
-g
Allows remote hosts to connect to local forwarded ports
-I
Specify the PKCS#11 shared library ssh should use to communicate with a PKCS#11 token providing the user's private RSA key <pkcs11>
-i
Selects a file from which the identity (private key) for public key authentication is read <identity file>
-K
Enables GSSAPI-based authentication and forwarding (delegation) of GSSAPI credentials to the server
-k
Disables forwarding (delegation) of GSSAPI credentials to the server
-L
Specifies that the given port on the local (client) host is to be forwarded to the given host and port on the remote side <port:host:hostport>
-l
Specifies the user to log in as on the remote machine <login name>
-M
Places the ssh client into ``master'' mode for connection sharing
-m
Additionally, for protocol version 2 a comma-separated list of MAC (message authentication code) algorithms can be specified in order of preference <mac spec>
-N
Do not execute a remote command
-n
Redirects stdin from /dev/null (actually, prevents reading from stdin)
-O
Control an active connection multiplexing master process <ctl cmd>
-o
Can be used to give options in the format used in the configuration file <option>
-p
Port to connect to on the remote host <port>
-q
Quiet mode. Causes most warning and diagnostic messages to be suppressed
-R
Specifies that the given port on the remote (server) host is to be forwarded to the given host and port on the local side <port:host:hostport>
-S
Specifies the location of a control socket for connection sharing, or the string 'none' to disable connection sharing <ctl_path>
-s
May be used to request invocation of a subsystem on the remote system
-T
Disable pseudo-tty allocation
-t
Force pseudo-tty allocation
-V
Display the version number and exit
-v
Verbose mode. Causes ssh to print debugging messages about its progress
-W
Requests that standard input and output on the client be forwarded to host on port over the secure channel <host:port>
-w
Requests tunnel device forwarding with the specified tun(4) devices between the client (local_tun) and the server (remote_tun) <local tun>
-x
Disables X11 forwarding
-Y
Enables trusted X11 forwarding
-y
Send log information using the syslog(3) system module
