SSH over VPN?

R

Robert Dodier

Hello,

I am trying to access a computer which is on a remote VPN.
I am running Windows XP on my local host (desktop box) and
I have a SSH client on it (namely OpenSSH).

I can open the VPN connection successfully.
How can I open an SSH session to the remote host from
my desktop box? I know the address of the remote host
on the remote network; it is an address which is local to the
remote network.

Is it necessary to modify the VPN configuration in order to
allow SSH into the remote host? (It seems possible that port
forwarding or address translation or something is required,
but I don't know what.)

Thanks for any light you can shed on this problem.

Robert Dodier
 
D

Doug McIntyre

Robert Dodier said:
I am trying to access a computer which is on a remote VPN.
I am running Windows XP on my local host (desktop box) and
I have a SSH client on it (namely OpenSSH).
I can open the VPN connection successfully.
How can I open an SSH session to the remote host from
my desktop box? I know the address of the remote host
on the remote network; it is an address which is local to the
remote network.

Umm, ssh to the IP address of the remote host?

If it doesn't work, can you ping the remote host? Can you telnet to
port 22 on the remote host? Does 'ssh -v' give you any info?
Is it necessary to modify the VPN configuration in order to
allow SSH into the remote host? (It seems possible that port
forwarding or address translation or something is required,
but I don't know what.)

On the client end? You never need to configure anything, assuming
the network admin has given you the proper settings, or profile to
use for the VPN setup.

On the VPN concentrator end? Maybe. It all depends on how your network
admin has setup the VPN setup.

VPN is usually pretty transparent. You start up the VPN, it connects,
and you can get to the machines on the other end of the VPN via
whatever policy the network admin has setup.
 
T

Todd H.

Robert Dodier said:
Hello,

I am trying to access a computer which is on a remote VPN.
I am running Windows XP on my local host (desktop box) and
I have a SSH client on it (namely OpenSSH).

I can open the VPN connection successfully.
How can I open an SSH session to the remote host from
my desktop box? I know the address of the remote host
on the remote network; it is an address which is local to the
remote network.

Is it necessary to modify the VPN configuration in order to
allow SSH into the remote host? (It seems possible that port
forwarding or address translation or something is required,
but I don't know what.)

Thanks for any light you can shed on this problem.

Hi Robert,

Should be able to just SSH to the local-to-that-network IP, assuming
the vpn client and server are correctly configured. Part of the magic
VPN clients should be doing for you would be providing routes to that
private network out a virtual network interface.

After all, the whole point of a VPN is to make a remote network "look"
local to the client computer.

Usualy debugging applies - somehow verify ssh is actually listening on
the target server on the port you think it is (default 22), see if a
real local user can get to it, then see why your VPN connection might
be any different.

Best Regards,
 
R

Robert Dodier

Should be able to just SSH to the local-to-that-network IP, assuming
the vpn client and server are correctly configured.  Part of the magic
VPN clients should be doing for you would be providing routes to that
private network out a virtual network interface.

Yes, you're right. Sorry, I'm clueless. It works just the way you
described.

Thanks for your help, I appreciate it.

best

Robert Dodier
 
T

Todd H.

Robert Dodier said:
Yes, you're right. Sorry, I'm clueless. It works just the way you
described.

Thanks for your help, I appreciate it.

No worries. First times I was messing with private remote ip's and a
VPN, I recall having the "how the hell's this gonna work?" thoughts
myself until I looked at what the VPN client added to route table and
figured out what was in the VPN secret sauce.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top