Remote Access to multiple PC's on a network

[Guest]

I neeed remote access to multiple PC's running XP behing a Linksys router. I
think Windows Remote Desktop (RTP) used port 6830, however I need to be able
to access eight Peer to Peer Networked PC's that all access the internet
through a Linksys router and T1 with 10 static IP's.

I've already put a static IP on each PC. How to I remotely connect to each
individual PC behind the router with Remote Desktop?

Thanks,

Tony

 

[Robert L [MVP - Networking]]

RD uses port 3389. You may have two options.

1. You can assign different port for example 3390 and forward it to a remote computer if the router allow you to do so.

2.Modify the RD port. This how to may help,

How to modify Terminal Server's accessing portHow to modify Terminal Server's accessing port. By default Terminal Server and Windows 2000 Terminal Services uses TCP port 3389 for client connections. ...
www.howtonetworking.com/RemoteAccess/tsport1.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
I neeed remote access to multiple PC's running XP behing a Linksys router. I
think Windows Remote Desktop (RTP) used port 6830, however I need to be able
to access eight Peer to Peer Networked PC's that all access the internet
through a Linksys router and T1 with 10 static IP's.

I've already put a static IP on each PC. How to I remotely connect to each
individual PC behind the router with Remote Desktop?

Thanks,

Tony

 

[Sooner Al [MVP]]

I neeed remote access to multiple PC's running XP behing a Linksys router.
I
think Windows Remote Desktop (RTP) used port 6830, however I need to be
able
to access eight Peer to Peer Networked PC's that all access the internet
through a Linksys router and T1 with 10 static IP's.

I've already put a static IP on each PC. How to I remotely connect to each
individual PC behind the router with Remote Desktop?

Thanks,

Tony

As Bob noted you can open multiple holes on your router...

http://theillustratednetwork.mvps.org/RemoteDesktop/Multiple_PC_RD.html

Or you could setup a VPN or SSH tunnel and only open one hole on the router
and access any PC through that. Here is a SSH method that uses copSSH (the
server package) and PuTTY (a free SSH client).

http://theillustratednetwork.mvps.org/Ssh/RemoteDesktopSSH.html

If you use Tunnelier (another free SSH client) versus PuTTY...

http://theillustratednetwork.mvps.org/Ssh/Configure-Tunnelier.html
http://theillustratednetwork.mvps.org/Ssh/Private-publicKey-Tunnelier.html

An added benefit of using a SSH tunnel (or a VPN for that matter) is you can
use a private/public key pair protected by a strong password for
authentication.
--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[Guest]

Hi Sooner Al

Well apart from establishing the secure connection. Is it possible to
enforce it?

Actually i want my users can connect ONLY through tunnel .

I want to block the direct access of rdp. Is it possible to do it ?


Regards,
Y Iguchi

 

[Sooner Al [MVP]]

Hi Sooner Al

Well apart from establishing the secure connection. Is it possible to
enforce it?

Actually i want my users can connect ONLY through tunnel .

I want to block the direct access of rdp. Is it possible to do it ?


Regards,
Y Iguchi

You only allow access to your network from outside through a VPN or SSH
tunnel. That is what I do. In my case I only allow certain users to access
my home LAN via a PPTP VPN tunnel. Once those users are connected through
the VPN tunnel access to specific desktops with Remote Desktop is limited to
users with administrator permissions on the particular desktop or to members
of the Remote Desktop Users Group on the particular desktop.

If your talking about local access to a particular desktop with Remote
Desktop then you could configure the Windows Firewall (or any other software
firewall for that matter) so Remote Desktop will only accept incoming
connections from specific IP addresses. Those addresses could be limited to
the IP range you assign to your VPN clients for example.

This example is for File & Print Sharing but it would be the same for Remote
Desktop. In the example the 10.8.0.31 address is an IP assigned to a VPN
client PC. The 10.8.0.12 and 10.8.0.101 addresses are other local PCs on the
LAN. You might configure to only allow access to the 10.8.0.31 address. Of
course you need to substitute your VPN client and/or LAN IP addresses.

http://theillustratednetwork.mvps.org/ScreenShots/SP2WindowsFirewall/FirewallCustomScope.JPG

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[Guest]

Hi Sooner,

The solution you are suggesting is either user or IP specific.

I dont want to make it User specific or IP Specific.

I want that if the user is coming through tunnel he is allowed to access.

If user is not coming through tunnel , i want to disallow the connection.
How can i block the connection which are not coming through the tunnel.

Please help me in deciding how this can be accomplished. In tight VNC it can
be done using the "Allow only loop back connections" . Is it possible to do
some similar kind of configuration.


Regards,
Y Iguchi

 

[Sooner Al [MVP]]

Hi Sooner,

The solution you are suggesting is either user or IP specific.

I dont want to make it User specific or IP Specific.

I want that if the user is coming through tunnel he is allowed to access.

If user is not coming through tunnel , i want to disallow the connection.
How can i block the connection which are not coming through the tunnel.

Please help me in deciding how this can be accomplished. In tight VNC it
can
be done using the "Allow only loop back connections" . Is it possible to
do
some similar kind of configuration.


Regards,
Y Iguchi

I believe the options I gave you are the only ones available in a simple
work group environment. Its possible a server/domain type environment might
give you more options but I don't know...

Good luck...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[Guest]

Hi Sooner,

Please see the following link. Does not following will work in my case.

http://groups.google.com/group/comp...y+iguchi+packet&rnum=1&hl=en#15c57eb04e7b6d56

Please suggest me if they are wrong.