Cades.md

@@ -8,13 +8,31 @@ Questions? [email](mailto:doakpw@ornl.gov).
 If your usage is abusive, purposefully or not, and you do not respond promptly to queries your jobs will be held or killed. 
 
 ## login
-You will need to use you UCAMS password or if you are an XCAMS only user that password.  This is not an RSA token login.
+You will need to use you UCAMS password or if you are an XCAMS only user that password.  Logging into CADES CONDO itself is not an RSA token login.
+
+### Onsite login
 ```shell-session
 bash $ ssh or-slurm-login01.ornl.gov
 [you@or-slurm-login01 ~]$ module load env/cades-cnms
 ```
 The [env/cades-cnms](env-cades-cnms) gives you some standard environment variables and puts the CNMS modules in your `$MODULEPATH`
 
+### Offsite login
+If you have a UCAMS account and an RSA token you should be getting to cades via the VPN or `login1.ornl.gov`
+
+If you are using the VPN while it is up your experience should be just as onsite + some additional latency. This can make X11 forwarding require patience.
+
+If you don't have an ORNL machine offsite to run the VPN on you'll need to come through `login1.ornl.gov`
+The best way to do this is by jumping through the login1 node.
+
+```shell
+$ ssh -X -J your-uid@login1.ornl.gov your-uid@or-slurm-login01
+```
+
+to copy files
+```
+$ scp -J your-uid@login1.ornl.gov your-uid@or-slurm-login01:/path/to/files ./your/local/path
+```
 
 # The facts