SSH

For CERN

For connecting to CERN from off-site (see also Telework), use sshuttle (GitHub repo).

• See instructions for configuring sshuttle in the Teleworking Tips & Tricks document. Add this to a cernproxy script, chmod it and move it to /usr/local/bin:

   #!/bin/sh
   
   case $1 in
       connect)
           sshuttle --dns -vr achintya@lxplus.cern.ch 137.138.0.0/16 128.141.0.0/16 128.142.0.0/16 188.184.0.0/15 --daemon --pidfile /tmp/sshuttle.pid
           shift
       ;;
       disconnect)
           kill `cat /tmp/sshuttle.pid`
           shift
       ;;
       *)
           # unknown option
       ;;
   esac

• Make sure Firefox is configured correctly: Proxy DNS when using SOCKS v5 must be selected, under Network Settings.

European Organization for Nuclear Research

European Laboratory for Particle Physics (unofficial)