jump host

Also written: jump server, bastion host

One hardened machine in the management zone that admins log into first. Only from it can they reach admin ports, so there is one door to watch and protect.