External connections to ORBIT / COSMOS

We maintain point to point connections to link various resources to the testbed, mostly at layer 2 for networking experiments.

This consists of dialable links over internet2, as well as tunnels over the public internet.

User access

SSH tunneling

This will allow you to connect to anything that the console can

IKEv2 VPN

Connect to the following endpoints using your orbit/cosmos username and password. This will only be active during your reservation.

server	allowed subnet	Description
vpn.bed.cosmos-lab.org	10.110.0.0/16	sb1.cosmos control
vpn.sb1.cosmos-lab.org	10.113.0.0/16	sb1.cosmos control
vpn.sb2.cosmos-lab.org	10.116.0.0/16	sb1.cosmos control
vpn.grid.orbit-lab.org	10.10.0.0/16	control
vpn.outdoor.orbit-lab.org	10.40.0.0/16	control
vpn.sb1.orbit-lab.org	10.11.0.0/16	control
vpn.sb2.orbit-lab.org	10.12.0.0/16	control
vpn.sb3.orbit-lab.org	10.13.0.0/16	control
vpn.sb4.orbit-lab.org	10.14.0.0/16	control
vpn.sb5.orbit-lab.org	10.15.0.0/16	control
vpn.sb6.orbit-lab.org	10.16.0.0/16	control
vpn.sb7.orbit-lab.org	10.17.0.0/16	control
vpn.sb8.orbit-lab.org	10.18.0.0/16	control
vpn.sb9.orbit-lab.org	10.19.0.0/16	control
vpn.sb10.orbit-lab.org	10.30.0.0/16	control

Instructions

Replace $SERVER with the server fqdn above, replace $SUBNET with the subnet above

• Windows
  1. Add-VpnConnection -Name $SERVER -ServerAddress $SERVER -DnsSuffix "cosmos-lab.org" -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru
  2. Add-VpnConnectionRoute -ConnectionName "$SERVER -DestinationPrefix $SUBNET -PassThru