Re: Gateway on machine with two network cards and running many IOCs?

["Hartman, Steven M." <hartmansm@ornl.gov>]

> On Jan 22, 2016, at 7:15 AM, Isabella Rey <isa.hellen@gmail.com> wrote:
> 
> In an ideal world, I would like to have read-write access to PVs from any machine within the lab network, but read-only access from the site network.

Hello Isabella—

We implemented this by running the gateway on a non-standard port. The IOCs use the standard CA network ports and local clients connect that way for read/write access. The gateway provides read-only monitoring from the office network and clients there are configured to use the non-standard port. A perimeter firewall prevents the office network clients from reaching the IOCs on the standard ports. The gateway configuration prevents loops. 

-- 
Steven Hartman
hartmansm@ornl.gov