You can now connect to targets on the subnet using a FQDN or IP address, or you can connect dynamically by SOCKS5 proxy. See  Managing Bastions for steps to create a bastion enabled with DNS or SOCKS5 support, and Session Types for a description of the Dynamic Port Forwarding (SOCKS5) session.