Re: [Condor-users] Route all communication through vpn for some nodes

[Hermann Fuchs <hermann.fuchs@xxxxxxxxxxxxxxxx>]

Hello Tim

Thank you for your tip.
Do I have to set this at the client side?
The master has to be available on the other network interface as well, 
so I fear changing the network interface to tun0 is not an option there.
We need the master to handle clients BOTH from the public IP as well as 
from the vpn network. All communications from vpn clients should go 
through the vpn tunnel only.

Cheers,
Hermann

On 26.04.2012 15:23, Tim St Clair wrote:
> One option is to set:
>
> NETWORK_INTERFACE = tun0 or whatever your vpn adapter is.
>
> Cheers,
> Tim
>
> ----- Original Message -----
> > From: "Hermann Fuchs"<hermann.fuchs@xxxxxxxxxxxxxxxx>
> > To: condor-users@xxxxxxxxxxx
> > Sent: Thursday, April 26, 2012 7:29:57 AM
> > Subject: [Condor-users] Route all communication through vpn for some nodes
> >
> > Hello
> >
> > We have a small grid using the SharedPort server and CCB in order to
> > use
> > only one port due to firewall restrictions.
> > All nodes connect to the condor master through LAN.
> > Now we wanted to increase our grid and add some nodes which connect
> > via
> > OpenVPN. I have successfully installed OpenVPN server and client
> > respectively and communicating over the vpn network works.
> >
> > At the moment on condor master the following is set
> > the VPN network IP is set as a private_network_ip and a
> > private_network_name is set "VPNnetwork".
> > The guest is configured similar. The condor_master configuration
> > value
> > targets the pulic ip (not the vpn ip) of the master server.
> > Therefore one connection is done to the public IP and then the rest
> > of
> > the communication is done through the vpn network.
> >
> > Is there a way to route all condor traffic comming/going to such a
> > vpn
> > connected node through the vpn?
> > Simply changing condor_master to the vpn Ip of the master server did
> > not
> > work.
> >
> > Best regards,
> > Hermann
> > --
> > -------------
> > DI Hermann Fuchs
> > Christian Doppler Laboratory for Medical Radiation Research for
> > Radiation Oncology
> > Department of Radiation Oncology
> > Medical University Vienna
> > Währinger Gürtel 18-20
> > A-1090 Wien
> >
> > Tel.  + 43 / 1 / 40 400 7271
> > Mail. hermann.fuchs@xxxxxxxxxxxxxxxx
> >
> > _______________________________________________
> > Condor-users mailing list
> > To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx
> > with a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> >
> > The archives can be found at:
> > https://lists.cs.wisc.edu/archive/condor-users/
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/condor-users/