[[Include(WikiToC)]]
== Remote Access

=== To User account and Files
Users with an account can always access their Home Directories, and files, and run basic scripts, by connecting to {{{ ssh YOUR_USERNAME@gw.cosmos-lab.org }}}

Detailed Instructions are at [wiki:./Console Connecting to a Console]

=== To Consoles
The [wiki:UserGuide/RemoteAccess/Console consoles] can be connected to the same way as above, with the following differences:
1. Consoles can be connected to only during a [wiki:GettingStarted#MakeaReservation].
1. Consoles can run OMF commands to control [wiki:Resources] within their [wiki:Architecture/Domains Domain]
1. Consoles share a [wiki:Architecture/Network#ControlPlane Control] network with [wiki:Resources] within their [wiki:Architecture/Domains Domain]

=== To Resources

* Resources can be interacted with by running commands from a Console.
* For example:
* Using [wiki:UserGuide/OmfQuickStart OMF commands] to
 * Turn resources on/off
 * Load and save images
 * Run OEDL Scripts with OMF exec
* Use SSH from a console to open an interactive session with a compute resource.
* Use SSH with X11 Forwarding to view a graphical window from a resource on your local machine

=== Direct Access to Resources
This is an advanced topic. In the event that bridging through a console adds unacceptable overhead too your use case, the following options are available:

* Use SSH [https://www.redhat.com/sysadmin/ssh-proxy-bastion-proxyjump ProxyJump] and similar commands to automate the connection though the console
* Use the [wiki:UserGuide/RemoteAccess/VPN VPN] to route arbitrary network traffic from the [wiki:Architecture/Network#ControlPlane Control Network] to or from your local machine.

=== SSH
The most common method of connecting to the testbed is via SSH. The SSH protocol is quite powerful, and allows interactive shell sessions, file transfer, port forwarding, and even graphical display if configured properly with other utilities.

[[CollapsibleStart(Configuring SSH Keys)]]
![[Include(UserGuide/RemoteAccess/SshTips#Tips)]]
[[CollapsibleEnd]]

==== SSH tunneling and X11
[[Include(UserGuide/RemoteAccess/SshTunnel#SshTunnel)]]

==== Common SSH issues
[[Include(UserGuide/RemoteAccess/SshTips#tips)]]

=== VPN
In cases where SSH is insufficient or inconvenient, an IPSEC VPN is available. 

Common cases include:
* A need to tunnel many, or ephemeral ports.
* A need for a persistent connection joining two networks.