Koozali.org: home of the SME Server

VNC and VPN

Tue Hellstern

VNC and VPN
« on: March 31, 2003, 09:48:44 PM »
Hi,
I have two problem/tasks.

VNC problem
On my local network I have 3 pc, running Windows, that I want to use VNC on, from a computer on the Internet. I have installed portforwarding on the E-smith server, and that works on one computer/one IP address. How do I get it to work on all my computers?

VPN problem
On my local network I also have a file server that I would like to connect to using VPN from a computer on the Internet. How do I do that?

Regards
Tue

David S. Helmuth

Re: VNC and VPN
« Reply #1 on: March 31, 2003, 10:26:46 PM »
RE:  VNC Problem.  I am sorry I have not really looked in to this but:

http://sourceforge.net/projects/vnc-reflector/

Might be interesting.   I am thinking you load it on the SME Server and in some way shape or form, it can control which of the 3 pc's you connect to.

Hope that helps a little!

-Dave

Bill Talcott

Re: VNC and VPN
« Reply #2 on: March 31, 2003, 10:32:38 PM »
Tue Hellstern wrote:
>
> VNC problem
> On my local network I have 3 pc, running Windows, that I want
> to use VNC on, from a computer on the Internet. I have
> installed portforwarding on the E-smith server, and that
> works on one computer/one IP address. How do I get it to work
> on all my computers?

Forward other ports to the other PCs. Use whatever port you forwarded (instead of the default) when you make the connection.

> VPN problem
> On my local network I also have a file server that I would
> like to connect to using VPN from a computer on the Internet.
> How do I do that?

http://edocs.mitel.com/6000_SME_Server/smeserveruserguide/English/admin-remoteaccess.html#pptp

With WinXP, you can create the PPTP DUN connection by clicking a few settings in their wizard. With Win98, you'll need to choose the VPN Adapter as your "modem" when you create the connection.

Terry Brummell

Re: VNC and VPN
« Reply #3 on: March 31, 2003, 11:27:25 PM »
To elaberate on Bill's VNC answer:
In the properties of VNC on the clients set the "Display Number" to something other then 0.  0=port 5900, to figure out the other ports add the display number to 5900.  IE: Display Number 1=port 5901.  You can even use negative numbers, IE: Display Number -1=port 5899.  Then forward each port to the respective IP of the machines with VNC.
If you're using the built in http dameon then you will also need to follow the same rules for port 5800 too.

Terry

Tue Hellstern

Re: VNC and VPN
« Reply #4 on: March 31, 2003, 11:30:51 PM »
Hi Bill,
Thank for the fast answer :-)

Bill Talcott wrote:
> Forward other ports to the other PCs. Use whatever port you
> forwarded (instead of the default) when you make the
> connection.
I want port 98 and 99 to be forwarded to 192.168.0.5 and 192.168.0.6.
In the server manager it look like I only can have one portforward at the time, if I make an new one the old is overwritten?

> With WinXP, you can create the PPTP DUN connection by
> clicking a few settings in their wizard. With Win98, you'll
> need to choose the VPN Adapter as your "modem" when you
> create the connection.
I have no problem with the connection itself, but I ’am only able to see the server and not my fileserver there are behind the E-smith server (IP 192.168.0.4)

/Tue

Bill Talcott

Re: VNC and VPN
« Reply #5 on: April 01, 2003, 12:16:56 AM »
Tue Hellstern wrote:
>
> I want port 98 and 99 to be forwarded to 192.168.0.5 and
> 192.168.0.6.
> In the server manager it look like I only can have one
> portforward at the time, if I make an new one the old is
> overwritten?

Nope, you can have as many as you want.

> I have no problem with the connection itself, but I ’am only
> able to see the server and not my fileserver there are behind
> the E-smith server (IP 192.168.0.4)

I'm not sure about the details of it, but WINS doesn't always work for VPN connections. We have a separate NT4 PDC running our network, and the SME just handles "internet stuff", so it may work differently on my network compared to yours... If you can, try specifying the SME's IP in the VPN connection as the WINS server. Have you tried accessing the other file server via IP address? When a client makes a PPTP connection, it should act exactly like any other PC on the SME's LAN...

pat

Re: VNC and VPN
« Reply #6 on: April 01, 2003, 04:12:53 AM »
Sorry Bill,

Not all configurations allow for multiple IP destinations for specified port numbers.
Mine, as does Tue's from what I can gather, does over-write the previous  port to IP configuration. for example if I already have port 98 forwarded to IP 192.168.0.5 and then add another port forwarding rule for example port 98 forwarded to IP 192.168.0.6 the end result is that I only have one rule in place, the last one entered. If there is a way to add more IP destinations for a specific port I would like to hear about it too.

Regards,
Pat

Dan Brown

Re: VNC and VPN
« Reply #7 on: April 01, 2003, 06:03:17 AM »
No, Pat, you've misunderstood Bill's answer.  You're right, it's only possible to forward a given port to one IP address--that's just the way the TCP protocol works.  That's why Bill wrote, "forward _other_ ports".

Kelvin

Re: VNC and VPN
« Reply #8 on: April 01, 2003, 03:57:26 PM »
To spell it out better :-

If VNC needs 2 ports to work (and I don't know if it does, but let's assume it does), and let's say you can specify the port numbers.

On WinPC#1 (IP: 192.168.100.100), specify to use say ports 5000 and 5001.
On WinPC#2 (IP: 192.168.100.110), specify to use say ports 5010 and 5011.
On WinPC#3 (IP: 192.168.100.120), specify to use say ports 5020 and 5021.

Then, on SME, portforward Ports 5000 and 5001 to IP address 192.168.100.100, forward ports 5010 and 5011 to IP address 192.168.100.110 and ports 5020 and 5021 to IP address 192.168.100.120.

You cannot have one port being forwarded to 2 IP addresses (it does not make sense if you think about it for a moment - just like you cannot have two houses on the same street with the same address - how can the postman know which house a particular mail should go to ??).

Kelvin

Tue Hellstern

Re: VNC and VPN
« Reply #9 on: April 01, 2003, 04:22:23 PM »
HI Kelvin
You misunderstand me, I don’t want to have 2 port forwarded to on IP.
But I cant create 2 port forward!!!
The first one is Ok, 192.168.0.5 to port 97
When I create the next on, 192.168.0.6 to port 98, the first one I deleted or at least gone from the server manager!!

Tue

Kelvin

Re: VNC and VPN
« Reply #10 on: April 01, 2003, 04:26:21 PM »
Hi Tue,

I have not used portforwarding on SME 5.6 before and I don't use SME 5.5 at all. However, I have used the portforwarding module on quite a number of 5.1.2 servers and they work just fine.

I would suggest uninstalling and then reinstalling your portforwarding add-on and try again.

Kelvin

Dan Brown

Re: VNC and VPN
« Reply #11 on: April 01, 2003, 04:47:41 PM »
Tue, something's wrong here.  I'd never messed with the port forwarding until last night (just to test), but I installed e-smith-portforwarding-0.1.0-20 from Darrell May (?), and it doesn't behave at all as you describe.

Charlie Brady

Re: VNC and VPN
« Reply #12 on: April 01, 2003, 10:47:57 PM »
Dan Brown wrote:

> Tue, something's wrong here.  I'd never messed with the port
> forwarding until last night (just to test), but I installed
> e-smith-portforwarding-0.1.0-20 from Darrell May (?)

.... or maybe from Charlie Brady. :-)

Charlie

Bill Talcott

Re: VNC and VPN
« Reply #13 on: April 01, 2003, 11:00:13 PM »
I concur with them. I've used the "old" version on both 5.0 and 5.5 with no problems at all, but I have no experience with 5.6. If adding a new rule overwrites the other one, that's a bug. You should be able to enter as many as you want.

Dan Brown

Re: VNC and VPN
« Reply #14 on: April 01, 2003, 11:08:08 PM »
Well, I got it from contribs.org, in Darrell's directory, and you weren't listed as the packager (nor was anybody else)--but looking at the changelog, I see you, Darrell, and a few others.