Update ..

roles/common/templates/etc/ssh/sshd_config.j2

@@ -83,7 +83,7 @@ MaxSessions 10
 #
 #UsePrivilegeSeparation sandbox
 {% else %}
-UsePrivilegeSeparation sandbox
+UsePrivilegeSeparation {{ sshd_use_privilege_separation }}
 {% endif %}
 
 # The server disconnects after this time if the user has not
@@ -326,6 +326,17 @@ TCPKeepAlive yes
 # The default is “yes”.
 PrintLastLog yes
 
+# Specifies whether remote hosts are allowed to connect to ports forwarded for the client. 
+# By default, sshd(8) binds remote port forwardings to the loopback address. This prevents 
+# other remote hosts from connecting to forwarded ports. 
+#
+# GatewayPorts can be used to specify that sshd should allow remote port forwardings to 
+# bind to non-loopback addresses, thus allowing other hosts to connect.  The argument may be 
+# no to force remote port forwardings to be available to the local host only, yes to force 
+# remote port forwardings to bind to the wildcard address, or clientspecified to allow the 
+# client to select the address to which the forwarding is bound.  The default is no.
+GatewayPorts {{ sshd_gateway_ports }}
+
 
 #-----------------------------
 # Kerberos options