Project

General

Profile

Task #3012

Story #3010: Create a VPN between the production CNs

Firewall change: UCSB (7621 and 7631)

Added by Andrew Pippin over 12 years ago. Updated about 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Support Operations
Target version:
-
Start date:
2012-06-22
Due date:
% Done:

100%

Milestone:
CCI-1.0.3
Product Version:
*
Story Points:
Sprint:

Description

Allow UCSB and UNM machines to communicate to ORNL via ports 7621 and 7631.

+Development+ cn-dev.dataone.org
* Connect from cn-dev-2.dataone.org on port 7621
** @sudo ufw allow to 128.111.36.71 port 7621 from 129.24.0.48@
* Connect from cn-dev-3.dataone.org on port 7631
** @sudo ufw allow to 128.111.36.71 port 7631 from 160.36.13.153@

+Sandbox+ cn-sandbox-ucsb-1.dataone.org
* Connect from cn-sandbox-unm-1.dataone.org on port 7621
** @sudo ufw allow to 128.111.36.77 port 7621 from 64.106.40.7@
* Connect from cn-sandbox-orc-1.dataone.org on port 7631
** @sudo ufw allow to 128.111.36.77 port 7631 from 160.36.13.152@

+Production+ cn-ucsb-1.dataone.org
* Connect from cn-unm-1.dataone.org on port 7621
** @sudo ufw allow to 128.111.36.80 port 7621 from 64.106.40.6@
* Connect from cn-orc-1.dataone.org on port 7631
** @sudo ufw allow to 128.111.36.80 port 7631 from 160.36.13.150@


Related issues

Related to Infrastructure - Task #3011: Firewall change: ORC (7613 and 7623) Closed 2012-06-22
Related to Infrastructure - Task #3013: Firewall change: UNM (7612 and 7632) Closed 2012-06-22

History

#1 Updated by Andrew Pippin over 12 years ago

  • Assignee set to Nick Outin
  • Milestone changed from CCI-1.0.0 to CCI-1.0.3

Moving to version 1.0.3.

#2 Updated by Andrew Pippin over 12 years ago

  • Subject changed from Firewall change: UCSB (7612 and 7632) to Firewall change: UCSB (7621 and 7631)

Updated title and description to reflect change in node id sequence.

#3 Updated by Andrew Pippin over 12 years ago

Please open cn-dev.dataone.org:

Allow connections from cn-dev-2.dataone.org (129.24.0.48) on port 7621
Allow wonnections from cn-dev-3.dataone.org (160.36.13.153) on port 7631.

#4 Updated by Andrew Pippin over 12 years ago

Update description.

#5 Updated by Dave Vieglais over 12 years ago

  • Status changed from New to Closed

Rules in place, but may need to be revoked depending on final firewall solution.

#6 Updated by Dave Vieglais about 12 years ago

  • Target version deleted (Sprint-2012.39-Block.5.4)

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)