<div dir="auto"><div><div class="gmail_extra"><div class="gmail_quote">On Mar 10, 2017 2:09 AM, "Anish Mangal" <<a href="mailto:anishmg@umich.edu">anishmg@umich.edu</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div class="quoted-text">On Fri, Mar 10, 2017 at 12:30 PM, Tony Anderson <span dir="ltr"><<a href="mailto:tony_anderson@usa.net" target="_blank">tony_anderson@usa.net</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
<div bgcolor="#FFFFFF">
Hi, Anish <br>
<br>
That would be helpful. Behind a router means, I believe, that the
internet connection is made through the router's firewall. As I
understand it, that firewall uses NAT to return the response to the
correct client. So I am not sure how the presence of a proxy would
interfere even in this case with setting up an ssh session to the
schoolserver. <br></div></blockquote><div><br></div></div><div>OpenVPN is _meant_ to work in such a setting. And many other settings. It doesnt depend on an external router NATting. Thats the whole point of it.<br></div><div class="quoted-text"><div> </div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><div bgcolor="#FFFFFF">
<br>
My understanding of an appliance is that it works without
administration, so I am not clear on how such a configuration fits
into this discussion.<span class="m_5072883161402812417gmail-HOEnZb"><font color="#888888"><br>
<br></font></span></div></blockquote><div><br></div></div><div>'Appliance' here means that the XSCE doesn't control the network, rather is just another device on it.<br><br><a href="https://github.com/iiab/iiab/blob/6.3-wip/docs/NETWORKING.rst" target="_blank">https://github.com/iiab/iiab/<wbr>blob/6.3-wip/docs/NETWORKING.<wbr>rst</a></div></div></div></div></blockquote></div></div></div><div dir="auto"><br></div><div dir="auto">Updated version of the above doc:</div><div dir="auto"><a href="https://github.com/xsce/xsce/wiki/IIAB-Networking">https://github.com/xsce/xsce/wiki/IIAB-Networking</a><br></div><div dir="auto"><br></div><div dir="auto">This will eventually be moved to:</div><div dir="auto"><a href="https://github.com/iiab/iiab/wiki">https://github.com/iiab/iiab/wiki</a><br></div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div><br></div><div class="elided-text"><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><div bgcolor="#FFFFFF"><span class="m_5072883161402812417gmail-HOEnZb"><font color="#888888">
Tony</font></span><div><div class="m_5072883161402812417gmail-h5"><br>
<br>
<div class="m_5072883161402812417gmail-m_-5310646466698652230moz-cite-prefix">On 03/10/2017 02:38 PM, Anish Mangal
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">There are cases where the schoolserver is setup as
a network appliance too and typically behind a router. I think,
that is why VPN was chosen so it covers more bases. Perhaps
George can elaborate.<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Mar 10, 2017 at 11:15 AM, Tony
Anderson <span dir="ltr"><<a href="mailto:tony_anderson@usa.net" target="_blank">tony_anderson@usa.net</a>></span>
wrote:<br>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
<div bgcolor="#FFFFFF"> Hi, Anish<br>
<br>
In school server situations I am familiar with, the access
to the internet would be by GSM dongle or an ISP. In both
cases, the connecton would not be through a router or even
a proxy firewall. If a firewall were present, it normally
arranges for clients to access external sites using dhcp
so that shouldn't be a problem. <br>
<span class="m_5072883161402812417gmail-m_-5310646466698652230HOEnZb"><font color="#888888"> <br>
Tony</font></span>
<div>
<div class="m_5072883161402812417gmail-m_-5310646466698652230h5"><br>
<br>
<div class="m_5072883161402812417gmail-m_-5310646466698652230m_2647248997064126263moz-cite-prefix">On
03/10/2017 01:28 PM, Anish Mangal wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">I guess one reason could be that with
VPN you dont have any issues around NATting. What
Tony is saying requires the schoolserver to have a
public IP address when connected, which wont be
the case many times (for example, if you are
behind a router etc.) vpn makes that relatively
easier.</div></blockquote></div></div></div></blockquote></div></div></blockquote></div></div></div></blockquote></div></div></div></div></blockquote></div></div></div></div>