Connection modes


In transparent mode, users connect to destination server using given server’s IP address.



In gateway mode, users connect to destination server using the server’s actual IP address. Wheel Fudo PAM mediates connection with the server using own IP address. This ensures that the traffic from the server to the user goes through Wheel Fudo PAM.



In proxy mode, administrator connects to destination server using combination of Wheel Fudo PAM IP address and unique port number assigned to given server. Uniqueness of this combination enables establishing connection with a particular resource.


Such approach enables concealing actual IP addressing and allows configuring servers to only accept requests sent from Wheel Fudo PAM.


In bastion mode, the account on the target host, or the host itself, is specified within the string identifying the user, e.g. ssh john_smith#admin@ This enables facilitating access to a group of monitored servers through the same IP address and port number combination.



  • The bastion mode is supported when connecting over SSH, RDP, VNC, Telnet, Telnet 3270, Telnet 5250, MS SQL and ICA protocols.
  • In case the specified account is not found, Wheel Fudo PAM will try to match the name with a server object. If a matching server is not found, system tries to match the string to a host’s DNS name.
  • The string specifying the target object must unambiguously identify an account or a server.

Related topics: