Hi, not really practical. WNs on a private subnet with outbound IP thru NAT. SE, CE need inbound IP so they go on a different subnet. You can probably do it via a single subnet but I would not want to be the person managing the router rules in that case :( JT Dan Schrager wrote: > I would put ALL host in the same private network... > > Massimo Biasotto wrote: > >> In our site we have all WNs on a private subnet and in order to >> allow them to access the SE via rfio we had to create on the >> server the file /etc/shift.localhost. >> Since upgrading to LCG-2.5.0 this is not working anymore: rfio >> connections from WNs are refused with the error >> isremote(): client is in another site >> >> How can it be configured to accept connections from a >> different subnet? >> >> Thanks, >> Massimo Biasotto >>