diff --git a/roles/basessh/templates/sshd_config.j2 b/roles/basessh/templates/sshd_config.j2
index 3bb3d5f71e..fdb4eca656 100644
--- a/roles/basessh/templates/sshd_config.j2
+++ b/roles/basessh/templates/sshd_config.j2
@@ -40,8 +40,8 @@ UsePAM yes
 AllowAgentForwarding no
 X11Forwarding no
 PermitTunnel no
-{% if ansible_hostname.startswith(('bastion')) %}
-# This is a bastion host, we need tcp forwarding here.
+{% if ansible_hostname.startswith(('bastion')) or ansible_hostname.startswith(('noc')) %}
+# This is a bastion or noc host, we need tcp forwarding there.
 AllowTcpForwarding yes
 {% else %}
 AllowTcpForwarding no