Login servers

This article explains:

  • Available login servers 
  • Features of login servers
  • Contingency route for users with network difficulties
  • How to use the login servers to access resources within JASMIN

Available login servers 

There are three login (bastion or gateway) servers available to access resources within JASMIN. Users with the  jasmin-login access role can access the following servers via SSH:

Login server name 
jasmin-login1.ceda.ac.uk

jasmin-login2.ceda.ac.uk 
Contingency, see notes below
cems-login1.cems.rl.ac.uk

A new set of servers is now available based on the CentOS7 operating system. These will eventually replace those listed above

login1.jasmin.ac.uk

login2.jasmin.ac.uk
Contingency, see notes below
login4.jasmin.ac.uk

If you require more detailed instructions on how to log in from different types of computer refer to  the getting started category

Features of login servers

Login servers have minimal resources and software installed.  They provide:

  • Access to your home directory (/home/users/<username>).
  • Access over SSH to other hosts within JASMIN (inside the RAL firewall)
  • No analysis software is installed on the login servers.
  • No access to group workspaces or other volumes (but see notes on contingency route, below)

"Contingency" login servers

There are requirements on your local network which apply to accessing the login servers and the transfer servers via SSH. If you cannot meet these requirements, even after discussion with your local network admin team, a contingency route is provided in the form of login server login2.jasmin.ac.uk (which will replace jasmin-login2.ceda.ac.uk in this role).

However you will be limited in what you can access within JASMIN from this server. Specifically:

  • You will only be able to other SSH-based resources on JASMIN via this server
  • You cannot set up SSH tunnelling to other other hosts within JASMIN
  • You will not be able to access the transfer servers via SSH directly from an external host
    • You can access the transfer servers via this server as a "hop", but can then only initiate an inward pull of data from an external SSH server, if available at your institution. You cannot push data directly to the transfer servers via SSH from outside in this case.
  • Data transfers using Globus Online are still possible: this is the recommended method in this case.
  • As an exception (compared to the other login machines), and for reasons of providing lightweight data access only, group workspaces and other volumes are mounted on this server. But you should not carry out large data transfers via this route. You are advised to use Globus Online in this case as an alternative.

How to use the login servers

For full details of how to log in, including making onward connections to other machines, please see the article "How to login"

Still need help? Contact Us Contact Us