Jason Bell
2013-05-15 04:16:41 UTC
Neil
You mentioned that you were using the APAG AG Bridge. I assume you have tried other bridges?
In regards to your "firewall" rules, would it be possible to have something like
Source 130.102.78.178 (This is the IP Address for the AGAP Unicast Bridge)
Destination 10.*.*.* (Basically allow access to any system in the 10.x.x.x range)
Port Range 50000 to 52000
If this would be possible, it would be good to add another AG bridge for failover purposes.
Regards,
Jason.
-----Original Message-----
From: David Allingham [mailto:***@newcastle.edu.au]
Sent: Wednesday, 15 May 2013 10:30 AM
To: accessgrid-***@lists.sourceforge.net; Neil Wood
Subject: Re: [AG-TECH] FW: Access Grid use from behind a NAT firewall on privateaddress.
Hi Neil,
the way we do this at Newcastle is to run a unicast bridge server on a public addressed machine, and point the internal machines at that. However, this really only works due to an artefact of our network set-up, in that one of our internal networks (10.1.x.x, say) is "closer" to the public machines that others (10.2.x.x, say), so we move any PC that needs to reach the bridge to the 10.1.x.x network.
I guess that the proper way to do it is as your network people say, and open ports 50000-52000 on a per-machine basis; this could probably be done for a single machine that was running a bridge server, and the data thus distributed internally. Maybe :)
David
Greetings,
I am having difficulty in running Access Grid from behind a Firewall on a Private IP Address.
The PC works fine on a public address from behind the same firewall, but as soon as I put the PC on a 10.x.x.x IP Address I can no longer see other nodes in both RAT and VIC, I can see my own there by nothing else.
I have checked the firewall network activity and while on the Public address can see at the firewall traffic coming back from the bridge in to the address.
But while on the public address there is no return traffic from the bridge (APAG for both tests) to the firewall even, so nothing.
It does not seem to matter if I put in Proxy settings in Access Grid same issue.
It is as if the bridge isn't even trying to return traffic to the private address at all.
Can anyone please advise on how the Access Grid protocols work for setting up a session, we are only using unicast here.
Our network guys comments below.
You mentioned that you were using the APAG AG Bridge. I assume you have tried other bridges?
In regards to your "firewall" rules, would it be possible to have something like
Source 130.102.78.178 (This is the IP Address for the AGAP Unicast Bridge)
Destination 10.*.*.* (Basically allow access to any system in the 10.x.x.x range)
Port Range 50000 to 52000
If this would be possible, it would be good to add another AG bridge for failover purposes.
Regards,
Jason.
-----Original Message-----
From: David Allingham [mailto:***@newcastle.edu.au]
Sent: Wednesday, 15 May 2013 10:30 AM
To: accessgrid-***@lists.sourceforge.net; Neil Wood
Subject: Re: [AG-TECH] FW: Access Grid use from behind a NAT firewall on privateaddress.
Hi Neil,
the way we do this at Newcastle is to run a unicast bridge server on a public addressed machine, and point the internal machines at that. However, this really only works due to an artefact of our network set-up, in that one of our internal networks (10.1.x.x, say) is "closer" to the public machines that others (10.2.x.x, say), so we move any PC that needs to reach the bridge to the 10.1.x.x network.
I guess that the proper way to do it is as your network people say, and open ports 50000-52000 on a per-machine basis; this could probably be done for a single machine that was running a bridge server, and the data thus distributed internally. Maybe :)
David
Greetings,
I am having difficulty in running Access Grid from behind a Firewall on a Private IP Address.
The PC works fine on a public address from behind the same firewall, but as soon as I put the PC on a 10.x.x.x IP Address I can no longer see other nodes in both RAT and VIC, I can see my own there by nothing else.
I have checked the firewall network activity and while on the Public address can see at the firewall traffic coming back from the bridge in to the address.
But while on the public address there is no return traffic from the bridge (APAG for both tests) to the firewall even, so nothing.
It does not seem to matter if I put in Proxy settings in Access Grid same issue.
It is as if the bridge isn't even trying to return traffic to the private address at all.
Can anyone please advise on how the Access Grid protocols work for setting up a session, we are only using unicast here.
Our network guys comments below.