Difference between revisions of "Reverse ssh bridge"

From mn.fysikk.laglivlab
Jump to: navigation, search
(Created reverse ssh bridge page)
 
(Started reverse ssh brigde)
Line 1: Line 1:
 +
== Usage of a reverse ssh bridge at UiO ==
 +
At UiO, for security reasons, the computers which are not managed by the university should be placed on a separate network which is "deeper", it is called the 802.1X network, .1X in short. Some of our computational resources (fys-lab-flow, datacenter computer…) are on this network.
 +
As of now (Nov. 2023), it is no longer possible to ssh a computer on the .1X from a computer which is not on the .1X, which means that it is '''not''' possible to connect to fys-lab-flow from login. But, the inverse is possible: fys-lab-flow can connect to login.
 +
As an SSH connection works both ways once connected (the remote computer can send information to the connecting computer), a way to connect to computers on the .1X network is to keep an SSH connection from the computer on the .1X and login
 +
 +
 
== Setting up a reverse ssh bridge ==
 
== Setting up a reverse ssh bridge ==

Revision as of 15:43, 15 November 2023

Usage of a reverse ssh bridge at UiO

At UiO, for security reasons, the computers which are not managed by the university should be placed on a separate network which is "deeper", it is called the 802.1X network, .1X in short. Some of our computational resources (fys-lab-flow, datacenter computer…) are on this network. As of now (Nov. 2023), it is no longer possible to ssh a computer on the .1X from a computer which is not on the .1X, which means that it is not possible to connect to fys-lab-flow from login. But, the inverse is possible: fys-lab-flow can connect to login. As an SSH connection works both ways once connected (the remote computer can send information to the connecting computer), a way to connect to computers on the .1X network is to keep an SSH connection from the computer on the .1X and login


Setting up a reverse ssh bridge