diff --git a/tests/infrastructure/default.nix b/tests/infrastructure/default.nix
index 8d97be8..9650038 100644
--- a/tests/infrastructure/default.nix
+++ b/tests/infrastructure/default.nix
@@ -159,9 +159,9 @@
       with subtest("SSH access restricted by role"):
         client1.succeed("ssh ${sshOptions} seb@server 'echo Hello'")
         client1.succeed("ssh ${sshOptions} seb@client2 'echo Hello'")
-        server.fail("ssh ${sshOptions} seb@client2 'echo Hello'")
+        server.fail("timeout 5 ssh ${sshOptions} seb@client2 'echo Hello'")
 
       with subtest("SSH not reachable on underlay"):
-        client1.fail("ssh ${sshOptions} seb@${serverNetCfg.underlay.address} 'echo Hello'")
+        client1.fail("timeout 5 ssh ${sshOptions} seb@${serverNetCfg.underlay.address} 'echo Hello'")
     '';
 }