Experimental Physics and
Industrial Control System

Till Straumann <[email protected]> · Wed, 20 Jun 2012 15:22:04 -0500

Don't I need root access to do that (mess with a tap interface)?

Also, what if everything besides ssh is firewalled?

- T.

On 06/20/2012 03:07 PM, Martin Konrad wrote:

Hi Till,

http://www.slac.stanford.edu/~strauman/epics/caxy/

I think there is another way how you can access your IOCs from the
outside that is no on your list: You can use a VPN tunnel.

If you use OpenVPN you need to make sure that you use the TAP interface
on server and client. On the server side (inside machine) you can simply
bridge the tapX interface together with your ethX interface (if you
configure OpenVPN correctly this should happen automatically).

+you should not need to patch your JCA/CAJ/CSS for this - everything
should be transparent
+OpenVPN is widely supported (even on smartphone)
-once you are connected you can access everything (not restricted to CA,
this might be a security issue)

Did you try this approach as well?

Best regards

Martin

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System