SSH Jumpbox behind firewall
Can an SSH jump box be installed behind a firewall?
What will the IP address be when the SSH gateway is installed in the LAN?
Overview: This article describes how an SSH jump host can function behind a firewall within a LAN and provides commands to find your public IP address if the host is behind NAT.
Yes, an SSH jump host can be behind a firewall and would work within a LAN.
Run the command on the SSH gateway server, and it will display the IP address for which the license needs to be issued if your SSH gateway is behind a NAT.
root@gateway:~# wget -qO-http://ezeelogin.com/myip
or
root@gateway:~# curl ifconfig.me
Refer to detailed articles to install and configure SSH gateway: