ssh TOTP connection with jump host forwarding

How can I simplify this? Perhaps using agent forwarding?

I have an SSH jump host with 2FA via TOTP x2 and a machine which uses 2FA as well(jump host and machine):

ssh [email protected] -L 22222:my_machine.corp.com:22
# requires password + 2FA TOTP code
ssh myuser@localhost -p 22222
# requires password + 2FA TOTP code

How can I ideally simplify this (via SSH config or so) to simply call ssh myhost and then if needed be asked for the 2FA and password 2x - but not having to connect 2x


You can use the ProxyJump option of the ssh client to achieve that:

ssh -J [email protected] my_machine.corp.com

or as an entry in ~/.ssh/config:

Host my_machine.corp.com
  ProxyJump [email protected]