[[Include(WikiToC)]]
== Remote Access

=== To User account and Files
Users with an account can always access their Home Directories, and files, and run basic scripts, by connecting to {{{ ssh YOUR_USERNAME@gw.cosmos-lab.org }}}

Detailed Instructions are at [wiki:./Console Connecting to a Console]

=== To Consoles
The [wiki:UserGuide/RemoteAccess/Console consoles] can be connected to the same way as above, with the following differences:
1. Consoles can be connected to only during a [wiki:GettingStarted#MakeaReservation].
1. Consoles can run OMF commands to control [wiki:Resources] within their [wiki:Architecture/Domains Domain]
1. Consoles share a [wiki:Architecture/Network#ControlPlane Control] network with [wiki:Resources] within their [wiki:Architecture/Domains Domain]

=== To Resources via console

* Resources can be interacted with by running commands from a Console.
* For example:
* Using [wiki:UserGuide/OmfQuickStart OMF commands] to
 * Turn resources on/off
 * Load and save images
 * Run OEDL Scripts with OMF exec
* Use SSH from a console to open an interactive session with a compute resource.
* Use SSH with X11 Forwarding to view a graphical window from a resource on your local machine

=== To Resources directly
This is an advanced topic. In the event that bridging through a console adds unacceptable overhead too your use case, the following options are available:

* Use SSH [https://www.redhat.com/sysadmin/ssh-proxy-bastion-proxyjump ProxyJump] and similar commands to automate the connection though the console
* Use the [wiki:UserGuide/RemoteAccess/VPN VPN] to route arbitrary network traffic from the [wiki:Architecture/Network#ControlPlane Control Network] to or from your local machine.

=== Using SSH
The most common method of connecting to the testbed is via SSH. The SSH protocol is quite powerful, and allows interactive shell sessions, file transfer, port forwarding, and even graphical display if configured properly with other utilities.

==== Configuring SSH Keys
See [wiki:UserGuide/RemoteAccess/SSH#ConfiguringSSHKeys]

==== SSH tunneling and X11
See [wiki:UserGuide/RemoteAccess/SshTunnel#SshTunnel]

==== Common SSH Tips and FAQ
See [wiki:UserGuide/RemoteAccess/SshTips#tips]

=== Using a VPN
In cases where SSH is insufficient or inconvenient, an IPSEC VPN is available.

See [wiki:UserGuide/RemoteAccess/VPN#setup] For client set up info

Common cases include:
* A need to tunnel many, or ephemeral ports.

=== Site to Site Connection
If you have a need to bridge a remote network with the testbed, this must be arranged with the testbed maintainers manually. This is usually done to provide connectivity between a Vendor's test device and some testbed experiment, or something special for a Demo.

See [wiki:UserGuide/RemoteAccess/VPNpersist#sitetosite] for our recommended connection parameters, but they will need to be customized per-connection.

Please contact us for more information.