[INSTRM-532] Tweak Subaru observing machine access to PFS core machines

Tue, 3 Dec 2019 22:21:02 +0000

Also,

According to the ACL, GEN2 is permitted to those nodes, on IP level so no TCP control.

Kiaina

To all,

hope this is proper way to respond. Please define Summit networks? Is this common dhcp network provided in the observation room? I have below a list of summit networks and purpose.

Sum-inst - dhcp available only for instrumentation
Visitor - dhcp available in staff, obs room (general usage by all users)

Kiaina

We need a couple of changes made to access control from the main Subaru observing machines to the main PFS machines. To wit, please open access

From the 133.40.166/23 OCS network, which contains the observing and simulator Gen2 hosts, and only other OCS hosts.
To 133.40.164. {17,64,86}: gen2-ics, mhs-ics, and shell-ics. No port controls.

Also, to make observing more sane, we ask that the Hilo base and Summit networks be allowed to connect directly to pfs-gw, but ONLY to port 22.

Kiaina Schubert eric philip

PFS-JIRA

[INSTRM-532] Tweak Subaru observing machine access to PFS core machines