Use these instructions to connect to both classified and unclassified HPC machines at LANL.

Classified Machine Access

Complete instructions are available at https://hpc.lanl.gov/networks/red-network/red-network-tri-lab-user-acce… (requires LANL CRYPTOcard authentication). Abbreviated instructions are provided below for convenience.

  1. Login to a classified (SCF) LC machine.
  2. Make sure you have a valid kerberos credential - use the klist -l command. If in doubt, get a forwardable kerberos credential by authenticating with the kinit -f command.
  3. SSH to a front-end login machine of your choice. Current front-end login machines are listed on the LANL webpage at  https://hpc.lanl.gov/networks/red-network/red-network-tri-lab-user-acce…; For convenience (as of Nov 2023):
  • Cyclone: cy-fe  (retiring Jan 2024)
  • Fire:  fi-fe  (retiring Jan 2024)
  • Ice: ic-fe  (retiring Jan 2024)
  • Redcap: redcap
  • Trinity: tr-fe
  • Tycho: ty-fe
  • Crossroads: xr-fe



    For example, connecting to a trinity front-end machine:

    ssh -l lanl_userid tr-fe.lanl.gov

    You should then be logged into the front end machine without the need for a password.

Copying Files between LLNL and LANL Classified Machines

After logging in to a classified machine at either site, and authenticating with kinit -f, you can use optimized Tri-lab file transfer scripts, including file transfer to storage systems. These scripts use hsi, htar, and pftp protocols. For details see Tri-lab high bandwidth file transfers over SecureNet.

Unclassified Machine Access

LANL's unclassified machines reside on either the turquoise or the yellow network, and login procedures are different for each network.

Accessing the LANL Turquoise (Collaborative Unclassified) Network

Complete instructions are available at https://hpc.lanl.gov/networks/turquoise-network/turquoise-network-hpc-a… (requires LANL CRYPTOcard authentication). Abbreviated instructions are provided below for convenience.

  1. From any location, use your LANL user name and LANL CRYPTOcard to SSH to the LANL gateway, wtrw.lanl.gov. For example:

    ssh -l lanlmoniker wtrw.lanl.gov

    password: from LANL CRYPTOcard
  2. Successfully logging in to wtrw.lanl.gov provides you with credentials that allow you to SSH to a LANL HPC front-end node. Example Turquoise network front-end nodes are:
    • Badger: ba-fe
    • Grizzly: gr-fe
    • Kodiak: ko-fe
    • Lightshow: ls-fe
    • Pinto: pi-fe
    • Snow: sn-fe
    • Wolf: wf-fe
    • Rocinante: ro-fe

Accessing Trinitite on the LANL Yellow (Restricted Unclassified) Network via iHPC Gateway

Tri-Lab users from Sandia or LLNL can utilize the iHPC gateway to remotely access LANL HPC resources like Trinitite. Complete instructions are available at https://hpc.lanl.gov/networks/yellow-network/ihpc.html (requires LANL CRYPTOcard authentication). Abbreviated instructions are provided below for convenience.

From LLNL:

  1. Log into an LLNL unclassified machine such as oslic.llnl.gov or rzslic.llnl.gov and get a forwardable Kerberos credential using:
    kinit -f <lanl_userid>@lanl.gov
    You will need to authenticate your LANL CRYPTOcard.
     
  2. Use a compound SSH command that connects to a LANL Trinitite front end node via the LANL iHPC gateway. Syntax:

    ssh -l <lanl_userid> ihpc-gate.lanl.gov -t ssh tt-rfe

Accessing Other Clusters on the LANL Yellow (Unclassified Protected) Network

Please consult the LANL documentation at: https://hpc.lanl.gov/networks/yellow-network/index.html (requires LANL CRYPTOcard authentication).

Contact LANL HPC Support

consult@lanl.gov