Experimental Physics and
Industrial Control System

Till Straumann <[email protected]> · Wed, 20 Jun 2012 15:54:55 -0500

The definite prerequisites for my solution were

- only ssh access is possible
- no root access on inside, preferably no root on outside

On 06/20/2012 03:41 PM, Martin Konrad wrote:

Don't I need root access to do that (mess with a tap interface)?

Yes, that's right. This is another downside of using a VPN. But if
everything is configured on a modern Linux machine (using network
manager) it only takes two clicks to establish the connection (no root
password needed).

I bet at many sites this is absolutely no, no, no. Definitely
at our lab.

If I had root access then I can to a lot of fancy things,
of course (at some point I even used quick-and-dirty ppp over ssh).

Also, what if everything besides ssh is firewalled?

The best way would be to talk to your network administrator... But if
you really need to you can use OpenVPN on TCP port 22 as well.

Probably not because ssh is already listening there.

Martin

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System