Topic: VNC Access To Local Network

[toby]

I want to allow VNC access to the local network to control some of my windows machines remotely. I have tried a number of things but have not found a solution that I can understand or implement. I tried using the e-smith port forwarding module but it does not work for connecting outside my network. I believe the configuration is ok as when I use lynx on another machine on the same subnet it brings up VNC to the machine i want to connect to.

[Terry Brummell]

In a default install of VNC you need to forward 2 ports to the internal machine.  Default ports 5800 and 5900.  If you change the listening port in VNC then you have to change the ports respectively.  I do remember it being a little tricky in the port numbering convention.  They reference everything to the default port (5800).  So, if you want to run on 5600, you have to set the Display Number to -200 I believe.  Check the VNC documentation, they go through port numbering there.
So, to sum it up, if you are running more then 1 machine with VNC they all need to have a different Display Number in VNC:
Display Number 0-forward ports 5800 & 5900 to that internal IP
Display Number 1-forward ports 5801 & 5901 to that internal IP
and so on...
Note: port forwarding only works on the external interface, so you cannot test this yourself unless you have another internet connection.

From tightvnc.org's website:
"The server listens for HTTP connections on port 5800 + display number. (Remember a WinVNC machine defaults to the display 0.) So to connect to the display 2 on machine "myhost", you would point your web browser at: http://myhost:5802/ . The applet will prompt you for your password, and should then display the desktop. "

Maybe port 5900 doesn't have to forwarded, but I believe I found on vnc's site that it did.  Anyway, mine works and I forward 5800 & 5900, give it a try and see what you get.

Terry

[Nate]

I do this on my network through my e-smith server using port forwarding.  If you are just using the VNC program to connect to the computer on the LAN, all you need to forward is 5900.  5800 is if you want to connect using your browser.  Like he said above, give each computer on the lan a unique display number.  Then the port to forward is 5900, 5901, (adding the display number to 5900).

[Mark Signal]

have you tried connecting via vpn to the sme firewall which would give you complete access to the local network - you should be able to connect to the remote machines as if they were on your own network

cheers

Mark

[Rob wellesley]

here's what we do to provide "help" to remote clients

1. Install MS-netmeeting on the windows clients and "activate remote desktop sharing" (netmeeting is included in XP but hidden - type CONF at a command line to activate it)
2. VPN to sme server in the same "workgroup"
3. Initiate a netmeeting call to the client and - bobs your uncle.

simple