---
Introduction
Overview:
1. Most services at LBL are available directly from the internet and require only a web browser to access.
2. For services that are not available to the global internet, the
Laboratory supports three types of remote access described below.
Get Ready:
1. Know your LDAP Username/Password & Your Workstation Username/Password - Don't know them? Contact the helpdesk!
2. Know your Voicemail Remote Access Password. Don't know it? Set it from within voicemail from your deskphone, or contact [email protected]
Services Available to the Global Internet
Most lifeline and collaboration services are available from anywhere on the internet with a web browser - no special configuration required.
The following chart shows key services. Generally, use of the Web Access is recommended.
Service |
Web Access (Recommended) |
Additional Access |
|---|---|---|
Email |
IMAP is available from offsite. Configuration information is here. |
|
Calendar |
The Oracle Calendar client can connect from offsite directly as well. Download is available from software.lbl.gov |
|
LETS |
N/A |
|
eRoom |
N/A |
|
Webspace |
WebDAV and Xythos Drive connections are available from offsite. |
|
Google Docs and Sites |
N/A |
|
TREX |
N/A |
|
|
|
|
Note that this list is not exhaustive. Other services are available from the outside world too.
Second Level Remote Access Methods
If you need to access a service like a Windows Shared Folder (CIFS), or a financial or other institutional business system, you need to use a remote access method to access the Berkeley Lab Network. The Laboratory supports three basic kinds of remote access:
Service |
Description |
Pre-Configuration |
Discussion |
|---|---|---|---|
VPN |
Connects your laptop or desktop computer at home or on the road directly to the LBL network. |
You can download the software from software.lbl.gov |
When you connect your computer via VPN, all your traffic is tunneled to the Laboratory. This traffic must comply with Laboratory acceptable use policies and you must take special care to secure the system you are using. |
Remote Desktop |
The Laboratory supports direct remote desktop for Windows systems. This gives you access to your desktop system from any computer. |
Your Lab system must have remote deskop turned on, and you must have a remote desktop client (available from microsoft). Configuration information is availablehere. |
Leaving remote desktop on at all times and not using it is an unnecessary security risk. Unless you plan to use it, don't turn it on. |
SSH |
Connect securely to Linux and other systems with SSH turned on and properly configured. |
Your server must support SSH. |
If you know what this is, you probably don't need any help from this page. |
Unexpected Remote Access
Under some scenarios we can contemplate (like a pandemic) large numbers of individuals may be unexpectedly telecommuting, possibly from systems they have never used before to conduct lab business. While our approach may change as the situation develops, here are some tips to handle "unexpected" remote access.
1. Do you need Second Level Remote Access at all? If you just need to check email and access web-based document stores, you don't need anything but your LDAP password and your web browser.
2. If you need Second Level Remote Access, consider which solution above you need. If you already have Remote Desktop turned on on your work computer, this is almost certainly the easiest way to go. If your home computer doesn't have the remote desktop client, you can get it here: Windows (note that it's probably already installed if you have a recent version of Windows) Mac
3. If you don't have Remote Desktop turned on on your work computer, you can still access other "inside" resources.
1. Visit software.lbl.gov and login with your LDAP username and password.
2. If your home computer doesn't have up to date antivirus protection, download Sophos first and install it on your home computer.
3. Download the Cisco VPN client appropriate for your platform from software.lbl.gov
4. Follow the directions and install the software.
5. Use your LBL LDAP username and password to authenticate.
6. Congratulations, once you connect you're "inside" the LBL network and can access resources from your home or other system that are not normally available to the global internet. Remember that everything you do while connected is subject to monitoring and LBL policies.
