I think this would be doable with: ssh -oProxyCommand="ssh -D 1080 localhost -W %h:%p" -R /sshvpn/gateway-xxxx:localhost:1080 sshvpn at central -D doesn't support local_socket, so a regular port is used.