Skip to content

NoMachine - Design

Remote Access (nx.psi.ch)

sketch

  • The rules for merlin-nx and ra-nx are not managed by rama.psi.ch. They need to be setup "manually".
  • Access to nx.psi.ch is only possible with PSI accounts (internal, external), no e-accounts, gac-, etc. are supported.

Security Policy

The remote access server must only give access to systems/nodes that are located in secured networks (i.e. networks that are not directly reachable from the PSI Intranet).

Agreed exception to this rules are the two login clusters: - merlin-nx.psi.ch - ra-nx.psi.ch

Access must only be granted to personal accounts.

Terminal Server

Nomachine Proxy

sketch

  • The AD group svc-nx defines who can login to the nomachine proxy service
  • The attached nodes only provide a minimal desktop with a browser but no additional tools

ra-nx

  • ra-nx is administered by Ivano Talamo / Leonardo Sala

merlin-nx

  • merlin-nx is administered by Marc Caubet