Knocking port

Hello,

For some security reason... I have to close the ssh port from all managment network and only allow from 2 jump host. But if something goes wrong with this host, I will be in the mess. Is possible to add a custom script before the connection ?

The idea behind (cisco solution, rotary ssh and log deny) :

[script before ssh]

telnet port 2268

telnet port 2269

telnet port 2277

[On Cisco]

I detect this sequence with deny log

Open ssh from everywhere for 5 seconds [change the access-class]

Can you help me ?

Fabrice