Re: Gateway on machine with two network cards and running many IOCs?

[Isabella Rey <isa.hellen@gmail.com>]

Hi Steven,

Thanks for your reply.

As it turns out, we will have a server dedicated to running the archiver, so we'll try to use that for the gateway, and see how it goes, but we'll keep in mind the solution of using different ports.

Cheers,

Isabella

On 22 January 2016 at 14:40, Hartman, Steven M. <hartmansm@ornl.gov> wrote:

> On Jan 22, 2016, at 7:15 AM, Isabella Rey <isa.hellen@gmail.com> wrote:
>
> In an ideal world, I would like to have read-write access to PVs from any machine within the lab network, but read-only access from the site network.

Hello Isabella—

We implemented this by running the gateway on a non-standard port. The IOCs use the standard CA network ports and local clients connect that way for read/write access. The gateway provides read-only monitoring from the office network and clients there are configured to use the non-standard port. A perimeter firewall prevents the office network clients from reaching the IOCs on the standard ports. The gateway configuration prevents loops.

--
Steven Hartman
hartmansm@ornl.gov