ssh passthrough from mac or linux client

on mac/linux client
ssh-add <pem-file>
ssh -A -i <pem-file> user@<bastion>

from bastion host

ssh -A user@<internal server>