If you use ssh to log interactively into an instance, the banner:
| If you are having access problems, please see:https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances |
is perfectly ignorable in between the motds; if you run a command on several instances (for HOST in tools-{a,b,c}.pmtpa.wmflabs; do ssh $HOST $COMMAND; done), it becomes very irritating and makes it harder than necessary to see what the command has actualy done :-).
There are probably lots of ways to set up a second ssh instance on a different port or a different address or even another physical host, but looking at the existing bastions' utilization, I think declaring bastion3 (for example) to be banner-free would be enough. If someone skipped over the first two bastions, that should be enough proof that they know what they're doing.
Version: unspecified
Severity: enhancement