Multiple RDP access on one Inet line

[Jordan]

I want to give a bunch of users RDP access to their work computer. I have
one static Inet IP at my location. I could probably change all the XP
computers to respond to unique IP ports and configure my firewall to
redirect those ports to each computer but I would rather leave the XP
computers as is.

Is there a device that will do something like the following:

External port 10001 redirect to 3389 for Internal IP 192.168.1.1
External port 10002 redirect to 3389 for Internal IP 192.168.1.2
External port 10003 redirect to 3389 for Internal IP 192.168.1.3
External port 10004 redirect to 3389 for Internal IP 192.168.1.4

 

[Sooner Al [MVP]]

Most any firewall/router will allow that...Its called "port redirection"...I
do that with my consumer grade routers including my current Buffalo
WBR-G54...

With that said a better solution, IMHO, is to use a Virtual Private Network
(VPN) or Secure Shell (SSH) tunnel and access any PC through one hole in
your firewall/router. Personally I have done both using either OpenVPN or
SSH. I currently use SSH...

How is your network connected to the internet? Is through a router and if so
what brand and model? That information will help others help you.

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[Sooner Al [MVP]]

Here is an example of port redirection from my old Linksys BEFSR41 router...

http://theillustratednetwork.mvps.org/RemoteDesktop/Router/RdUPnPForwarding.JPG

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[Jordan]

That is exactly what I need. What model is that router? Do you know another
brand that will let me do 50 or more?


I have some other brands that will allow me to forward port to an internal
IP, but they don't allow me to do what you have done and say port XXXX is to
redirect to 3389 internally @ IP 0.0.0.0.

 

[Sooner Al [MVP]]

A better solution is to use a VPN or Secure Shell (SSH) tunnel. That way you
can access multiple PCs through one hole in your firewall or router.

OpenVPN is one solution. I have that running on an XP Pro box now to access
my two XP Pro boxes behind my home router...

http://openvpn.net/

I have also used SSH to do the same thing... The copSSH server package...

http://www.itefix.no/phpws/index.ph...er_op=view_page&PAGE_id=12&MMN_position=22:22
http://www.itefix.no/phpws/index.php?module=faq&FAQ_op=view&FAQ_id=62

The Tunnelier SSH client. Its good because you can configure it to
automatically start a Remote Desktop session when the tunnel is connected...

http://www.bitvise.com/tunnelier.html

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[Jordan]

Thank you again. The OpenVPN looks good but my problem is my users. We
have RRAS setup and IMHO it is very easy for them to open the VPN connection
I have already setup for them on their home computer and then fire up the
RDP file that will connect them to their desktop computer, but this two step
process seems to be to difficult for them.

I want to go with the a hardware port forwarding solution like you showed
earlier because I can then make a web page based on each port number that
will use the ActiveX RDP client to redirect them to their computer. They
will only need to know the web address and their phone extension to get to
their computer for instance:


http://www.mydomain.com:2345 - Redirect to 10.10.10.x
http://www.mydomain.com:2351 - Redirect to 10.10.10.y
http://www.mydomain.com:2356 - Redirect to 10.10.10.z

This way they only need to be able to use a web browser.