Inbound file transfers through the secure front ends (SFEs) require RSA SecurID token authentication. Files cannot be transferred directly to the SFEs, so transfers must be done using either SSH passthrough or using scp with the ‑oProxyCommand option.

Note: While this article covers file transfers through the SFEs only, you can also transfer files through the Secure Unattended Proxy.

To simplify the instructions, the approaches are described in terms of transfers to or from one of the NAS compute resources front ends, such as pfe21, but they also apply to any of the other systems that are in the secure enclave—such as other PFEs, or the Lou front ends (LFEs).

For some of the methods described, two commands are provided. The first command (a) is used if you have identical usernames on your local system and on the NAS systems, or if the usernames are different but you have set up your local ~/.ssh/config file to include the NAS username. To learn how to set this up, download the NAS ssh_config.txt template. The second command (b) is used if your usernames are different and you do not include the NAS username in your local ~/.ssh/config file.

File Transfers Using scp with -oProxyCommand

The scp command is not recommended for files over 1 GB; see Remote File Transfer Commands for a comparison of commands. If you have not set up SSH passthrough, you must use scp with the ‑oProxyCommand option for inbound file transfers through the SFEs.

Note: Because of a formatting issue, the commands in this section are broken into two lines. Each should be on only one line.

Using scp with the ‑oProxyCommand option to push files out of your local system:

(a) your_local_system% scp -oProxyCommand='ssh sfe6.nas.nasa.gov 
                 ssh-proxy %h' filename pfe21.nas.nasa.gov:

or 

(b) your_local_system% scp -oProxyCommand='ssh nas_username@sfe6.nas.nasa.gov 
                 ssh-proxy %h' filename nas_username@pfe21.nas.nasa.gov:

Using scp with the ‑oProxyCommand option to pull files into your local system:

(a) your_local_system% scp -oProxyCommand='ssh sfe6.nas.nasa.gov 
                 ssh-proxy %h' pfe21.nas.nasa.gov:filename .

or 

(b) your_local_system% scp -oProxyCommand='ssh nas_username@sfe6.nas.nasa.gov 
                 ssh-proxy %h' nas_username@pfe21.nas.nasa.gov:filename .

File Transfers Using SSH Passthrough

If you have set up SSH passthrough correctly, you can use scp or shiftc to transfer files between your local system and a NAS host. You can transfer files directly into the NAS host and avoid the need to double-authenticate. The passage through the SFEs is transparent.

Using scp

Using scp to push files out of your local system:

(a) your_local_system% scp filename pfe21.nas.nasa.gov:

or

(b) your_local_system% scp filename nas_username@pfe21.nas.nasa.gov:

Using scp to pull files into your local system:

(a) your_local_system% scp pfe21.nas.nasa.gov:filename .

or

(b) your_local_system% scp nas_username@pfe21.nas.nasa.gov:filename .

Using shiftc

See Shift File Transfer Overview for shiftc examples.

More About File Transfers

See the list of links in the File Transfer Overview.