If you have set up public key authentication for one or more of the secure front ends (SFEs), you are ready to do this two-step connection from your local system to a system inside the secure enclave, such as a PFE or LFE.

Before You Begin: If you have not yet set up public key authentication, complete the steps in Setting Up Public Key Authentication.

Step 1: Accessing the SFEs

Access one of the SFEs from your local system by running SSH as follows:

your_local_system% ssh username@sfeX.nas.nasa.gov 

where username is your NAS username and sfeX represents sfe[6-8].

Notes:

• You can omit username@ from the command line if you have the same username for your local system and the NAS systems.
• If you have any issues connecting to one of the four SFEs, try logging into a different one.

After typing the command, you will be connected to the SFE and prompted for your private key passphrase followed by your RSA SecurID passcode.

Step 2: Accessing NAS Systems

Access a front-end system inside the enclave (for example, an LFE) from the SFE by running SSH as follows

sfeX% ssh lfeX 

where sfeX represents sfe[6-8] and lfeX represents lfe[5-8]. You will be prompted for your RSA SecurID passcode.

If you want to avoid a two-step login for future sessions, you can set up SSH Passthrough.

SSH Connection Timeouts: SSH connections to front ends inside the enclave are disconnected after 15 minutes of inactivity. For more information, including best practices for minimizing the impact to your interactive sessions, see Using the Screen or tmux Commands.