Need Help from the experts

ULWiz

I recently added a line to my config so i could remote into it.
ip nat inside source static tcp 192.168.1.119 3389 interface Ethernet1/0 3389

192.168.1.119 is my server
192.168.1.201 is my own computer

Is there anyway i can add a line to my router so i can also reach my own pc.


Can you post the line or explain what i need to do.


THanks Again ahead of time

dtlokee

You can't map the port 3389 on the outside interface to another inside local address but you can use a different port number. That would also require you to change the RDP port on the client.

ULWiz

So if i changed the port to something else i would be able to access my home machine.

WOuld i just go into the firewall and add tcp 8888 for remote and then just add the same line as before but with 8888 as the port?

It currently runs vista how would i go about that?

ajs1976

You have to open the firewall for the new port, but you also have to change it in the registry.

I have never done it for Vista, but here are the instructions for XP: http://support.microsoft.com/kb/306759

jmoorse

Do you only have an assignment of one WAN address? (Usually this is the case.)

If you have multiples you can create a static nat to the secondary IP

Also I recommend a dyndns registration so you don't have to remember those pesky IPs

Alternately you could use something like VNC (TCP 5900)or logmein (web based)

ULWiz

I got its changed in the registry to 3391 and i also changed my router for the same line. Firewall was also updated to allowed TCP 3391 in . It still does not work though.

Anyone got a idea.

Humper

Do some packet capturing on your PC and troubleshoot!!!

ajs1976

What error message are you getting? When you try to remote in using the RDP client are using IPAddress:3391? Did you reboot the computer after changing the port? Is Redesktop enabled?

ULWiz

No error messages at all my friend that is trying to connect just says it kicks him back to the main rdp screen.


Yes it is enabled.

And yes i am adding the :3391 to the end of my ip to connect

BeaverC32

Here is a good article:
http://articles.techrepublic.com.com/5100-10877_11-6174999.html?tag=rbxccnbtr1

Edit: Another link for Vista/RDP: http://articles.techrepublic.com.com/5100-10877-6166676.html

ULWiz

THis is settings from my router

My server is ip 192.168.1.119 and i can remote to that just fine.
my pc upstairs is 192.168.1.201 and i can not remote to that.

RDP port on vista was opened on both the firewall and in the registry under its oroginal 3389 port

ip nat pool ovrld x.x.x.x x.x.x.x netmask 255.255.255.128
ip nat inside source list 1 pool ovrld overload
ip nat inside source static tcp 192.168.1.201 3391 interface Ethernet1/0 3391
ip nat inside source static tcp 192.168.1.150 80 interface Ethernet1/0 80
ip nat inside source static tcp 192.168.1.119 3389 interface Ethernet1/0 3389

ajs1976

ULWiz wrote:

THis is settings from my router

my pc upstairs is 192.168.1.201 and i can not remote to that.

RDP port on vista was opened on both the firewall and in the registry under its oroginal 3389 port

ip nat inside source static tcp 192.168.1.201 3391 interface Ethernet1/0 3391

You mentioned that RDP for Vista is set to 3389, but the NAT statement in the firewall is pointing to 3391. They have to match.

ULWiz

I have to machine i want to be able to rdp into and from what i understand they cant both be on the same port.

So 192.168.1.119 is the server and that is set for 3389. I can rdp into this just fine from the outside.

192.168.1.201 is my pc upstairs and i set that to 3391.


Hope this makes sense

dtlokee

The inside local address can use the same port (because there are two of them), it's the inside global one that can not.

ip nat inside source static tcp 192.168.1.201 3389 interface ethernet1/0 3391 extendable
ip nat inside source static tcp 192.168.1.119 3389 interface Ethernet1/0 3389 extendable

then when you make the RDP connection from outside, 3389 is to the server and 3391 is to the workstation.

also why ae you using a dynamic pool and translating to the interface IP address? Are they the same address?

SWM

From the Vista computer you want to rdp onto try to rdp onto itself, i.e xxx.xxx.xxx.xxx:3391 where xxx is the local ip. Does the PC answer ?? if so, then its your local Vista firewall tahs blocking external rdp.

Then try and RDP from the other internal computer onto the Vista PC with 3391, if it works your problems is your cisco.

ULWiz

I just found out that Vista Home Premium does not allow remote connections. Only Business, Ultimate and enterprise editions allow this.


Just so you all know.