Using SSH Through A Bastion Host Transparently (Is the topic)

HI,

I am trying to get this script working using cygin and ssh through a bastion host to an internal server with a script.  This is what i have:

Host bastion
User user1
Hostname 54.22.200.12 -i certificate.pem

Host appserver
User1
Hostname 192.168.3.2 -i certificate.pem
ProxyCommand ssh -W %h:%p bastion


The user is authenticating with a private key cert, but dont want these left on the server.

This is not working yet, does anyone have info on this?

Thanks