Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Tue Hellstern on March 31, 2003, 09:48:44 PM

Title: VNC and VPN
Post by: Tue Hellstern on March 31, 2003, 09:48:44 PM
Hi,
I have two problem/tasks.

VNC problem
On my local network I have 3 pc, running Windows, that I want to use VNC on, from a computer on the Internet. I have installed portforwarding on the E-smith server, and that works on one computer/one IP address. How do I get it to work on all my computers?

VPN problem
On my local network I also have a file server that I would like to connect to using VPN from a computer on the Internet. How do I do that?

Regards
Tue
Title: Re: VNC and VPN
Post by: David S. Helmuth on March 31, 2003, 10:26:46 PM
RE:  VNC Problem.  I am sorry I have not really looked in to this but:

http://sourceforge.net/projects/vnc-reflector/

Might be interesting.   I am thinking you load it on the SME Server and in some way shape or form, it can control which of the 3 pc's you connect to.

Hope that helps a little!

-Dave
Title: Re: VNC and VPN
Post by: Bill Talcott on March 31, 2003, 10:32:38 PM
Tue Hellstern wrote:
>
> VNC problem
> On my local network I have 3 pc, running Windows, that I want
> to use VNC on, from a computer on the Internet. I have
> installed portforwarding on the E-smith server, and that
> works on one computer/one IP address. How do I get it to work
> on all my computers?

Forward other ports to the other PCs. Use whatever port you forwarded (instead of the default) when you make the connection.

> VPN problem
> On my local network I also have a file server that I would
> like to connect to using VPN from a computer on the Internet.
> How do I do that?

http://edocs.mitel.com/6000_SME_Server/smeserveruserguide/English/admin-remoteaccess.html#pptp

With WinXP, you can create the PPTP DUN connection by clicking a few settings in their wizard. With Win98, you'll need to choose the VPN Adapter as your "modem" when you create the connection.
Title: Re: VNC and VPN
Post by: Terry Brummell on March 31, 2003, 11:27:25 PM
To elaberate on Bill's VNC answer:
In the properties of VNC on the clients set the "Display Number" to something other then 0.  0=port 5900, to figure out the other ports add the display number to 5900.  IE: Display Number 1=port 5901.  You can even use negative numbers, IE: Display Number -1=port 5899.  Then forward each port to the respective IP of the machines with VNC.
If you're using the built in http dameon then you will also need to follow the same rules for port 5800 too.

Terry
Title: Re: VNC and VPN
Post by: Tue Hellstern on March 31, 2003, 11:30:51 PM
Hi Bill,
Thank for the fast answer :-)

Bill Talcott wrote:
> Forward other ports to the other PCs. Use whatever port you
> forwarded (instead of the default) when you make the
> connection.
I want port 98 and 99 to be forwarded to 192.168.0.5 and 192.168.0.6.
In the server manager it look like I only can have one portforward at the time, if I make an new one the old is overwritten?

> With WinXP, you can create the PPTP DUN connection by
> clicking a few settings in their wizard. With Win98, you'll
> need to choose the VPN Adapter as your "modem" when you
> create the connection.
I have no problem with the connection itself, but I ’am only able to see the server and not my fileserver there are behind the E-smith server (IP 192.168.0.4)

/Tue
Title: Re: VNC and VPN
Post by: Bill Talcott on April 01, 2003, 12:16:56 AM
Tue Hellstern wrote:
>
> I want port 98 and 99 to be forwarded to 192.168.0.5 and
> 192.168.0.6.
> In the server manager it look like I only can have one
> portforward at the time, if I make an new one the old is
> overwritten?

Nope, you can have as many as you want.

> I have no problem with the connection itself, but I ’am only
> able to see the server and not my fileserver there are behind
> the E-smith server (IP 192.168.0.4)

I'm not sure about the details of it, but WINS doesn't always work for VPN connections. We have a separate NT4 PDC running our network, and the SME just handles "internet stuff", so it may work differently on my network compared to yours... If you can, try specifying the SME's IP in the VPN connection as the WINS server. Have you tried accessing the other file server via IP address? When a client makes a PPTP connection, it should act exactly like any other PC on the SME's LAN...
Title: Re: VNC and VPN
Post by: pat on April 01, 2003, 04:12:53 AM
Sorry Bill,

Not all configurations allow for multiple IP destinations for specified port numbers.
Mine, as does Tue's from what I can gather, does over-write the previous  port to IP configuration. for example if I already have port 98 forwarded to IP 192.168.0.5 and then add another port forwarding rule for example port 98 forwarded to IP 192.168.0.6 the end result is that I only have one rule in place, the last one entered. If there is a way to add more IP destinations for a specific port I would like to hear about it too.

Regards,
Pat
Title: Re: VNC and VPN
Post by: Dan Brown on April 01, 2003, 06:03:17 AM
No, Pat, you've misunderstood Bill's answer.  You're right, it's only possible to forward a given port to one IP address--that's just the way the TCP protocol works.  That's why Bill wrote, "forward _other_ ports".
Title: Re: VNC and VPN
Post by: Kelvin on April 01, 2003, 03:57:26 PM
To spell it out better :-

If VNC needs 2 ports to work (and I don't know if it does, but let's assume it does), and let's say you can specify the port numbers.

On WinPC#1 (IP: 192.168.100.100), specify to use say ports 5000 and 5001.
On WinPC#2 (IP: 192.168.100.110), specify to use say ports 5010 and 5011.
On WinPC#3 (IP: 192.168.100.120), specify to use say ports 5020 and 5021.

Then, on SME, portforward Ports 5000 and 5001 to IP address 192.168.100.100, forward ports 5010 and 5011 to IP address 192.168.100.110 and ports 5020 and 5021 to IP address 192.168.100.120.

You cannot have one port being forwarded to 2 IP addresses (it does not make sense if you think about it for a moment - just like you cannot have two houses on the same street with the same address - how can the postman know which house a particular mail should go to ??).

Kelvin
Title: Re: VNC and VPN
Post by: Tue Hellstern on April 01, 2003, 04:22:23 PM
HI Kelvin
You misunderstand me, I don’t want to have 2 port forwarded to on IP.
But I cant create 2 port forward!!!
The first one is Ok, 192.168.0.5 to port 97
When I create the next on, 192.168.0.6 to port 98, the first one I deleted or at least gone from the server manager!!

Tue
Title: Re: VNC and VPN
Post by: Kelvin on April 01, 2003, 04:26:21 PM
Hi Tue,

I have not used portforwarding on SME 5.6 before and I don't use SME 5.5 at all. However, I have used the portforwarding module on quite a number of 5.1.2 servers and they work just fine.

I would suggest uninstalling and then reinstalling your portforwarding add-on and try again.

Kelvin
Title: Re: VNC and VPN
Post by: Dan Brown on April 01, 2003, 04:47:41 PM
Tue, something's wrong here.  I'd never messed with the port forwarding until last night (just to test), but I installed e-smith-portforwarding-0.1.0-20 from Darrell May (?), and it doesn't behave at all as you describe.
Title: Re: VNC and VPN
Post by: Charlie Brady on April 01, 2003, 10:47:57 PM
Dan Brown wrote:

> Tue, something's wrong here.  I'd never messed with the port
> forwarding until last night (just to test), but I installed
> e-smith-portforwarding-0.1.0-20 from Darrell May (?)

.... or maybe from Charlie Brady. :-)

Charlie
Title: Re: VNC and VPN
Post by: Bill Talcott on April 01, 2003, 11:00:13 PM
I concur with them. I've used the "old" version on both 5.0 and 5.5 with no problems at all, but I have no experience with 5.6. If adding a new rule overwrites the other one, that's a bug. You should be able to enter as many as you want.
Title: Re: VNC and VPN
Post by: Dan Brown on April 01, 2003, 11:08:08 PM
Well, I got it from contribs.org, in Darrell's directory, and you weren't listed as the packager (nor was anybody else)--but looking at the changelog, I see you, Darrell, and a few others.
Title: Re: VNC and VPN
Post by: Grub on April 02, 2003, 02:44:26 AM
Why forwarding when you will have all services (machines)  within a vpn connection???!!!
Title: Re: VNC and VPN
Post by: Shawn on April 02, 2003, 10:16:52 AM
A good point about the VPN, but if you still need VNC advice, here it is.

If you are planning to use VNC for remote desktop support of these workstations, you don't need to port forward.

You can start the VNC viewer in Listen mode and give the user your IP address. The user starts the VNC server, right-clicks the icon, selects "Add new client", then enters your ip address. The viewer starts on your desktop. No port forwarding on the client side, and you don't need to remember their password.

Shawn
Title: Re: VNC and VPN
Post by: Tue Hellstern on April 02, 2003, 09:50:08 PM
Hi,
Regarding my port forward, I will upgrade my server to 5.6 and install the new port forward.rpm for that server. I hope that will make it possible to have more than one port forward at the time.

I still have some problems with the VPN connection.
I can connect to the E-smith server and see the other Pc on the network, from a pc on the Internet. But how do I get a file on one of Pc?
The Pc all has shared folders, but I can’t get in contact with them?

From one Pc on the Internet the connection goes very well, but from and other Pc it doesn’t work. I have a little theory, that the connection time is longer from this Pc and the server times out. Is it possible to set the “time out” time on the E-smith server? Or could there bee another reason to this problem?

Thanks a lot for the help so fare
Tue