VNC thru VPN - problems
Hello I use VPN in Win XP Pro sp2 to connect to my computer at work. And realvnc for using the computer. But, I have recently formattet my home computer and I'am having some trouble with getting realvnc to work again. I have done a few times before and it has never been a problem. It easily connect to the computer thru vpn, but when I try vnc it just timeouts. I have disabled all firewall and such and I am using the exact same setup as I have used before. Does anybody know a way I can test the connection? or find out what the problems is. Or does anybody have a idea of what could be wrong. Please help me out, I need it for work. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: VNC thru VPN - problems
Tobias: The easiest way to ensure that the VNC server is correctly configured is to visit http://www.gotomyvnc.com from the 'server' computer. Then, if the website finds a server listening, at least you know it's configured correctly. Based on your description, it sounds like the server is a) not listening or b) listening on a non-standard port. Double-check the server settings and at least you'll be a step closer to getting connected. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tobias M Ruby Sent: Monday, August 22, 2005 10:41 AM To: vnc-list@realvnc.com Subject: VNC thru VPN - problems Hello I use VPN in Win XP Pro sp2 to connect to my computer at work. And realvnc for using the computer. But, I have recently formattet my home computer and I'am having some trouble with getting realvnc to work again. I have done a few times before and it has never been a problem. It easily connect to the computer thru vpn, but when I try vnc it just timeouts. I have disabled all firewall and such and I am using the exact same setup as I have used before. Does anybody know a way I can test the connection? or find out what the problems is. Or does anybody have a idea of what could be wrong. Please help me out, I need it for work. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: VNC thru VPN - problems
Thanks forr the answer. But nothing has changed on the server computer, so I am 99 % sure its not the server. When I am connected to the VPN I cant ping the server ip. Also when I disconnect the VPN, it sometimes disconnect my MSN Messenger. Does that make any sense? It did not do these things when I used it last. Tobias John Aldrich wrote: Tobias: The easiest way to ensure that the VNC server is correctly configured is to visit http://www.gotomyvnc.com from the 'server' computer. Then, if the website finds a server listening, at least you know it's configured correctly. Based on your description, it sounds like the server is a) not listening or b) listening on a non-standard port. Double-check the server settings and at least you'll be a step closer to getting connected. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tobias M Ruby Sent: Monday, August 22, 2005 10:41 AM To: vnc-list@realvnc.com Subject: VNC thru VPN - problems Hello I use VPN in Win XP Pro sp2 to connect to my computer at work. And realvnc for using the computer. But, I have recently formattet my home computer and I'am having some trouble with getting realvnc to work again. I have done a few times before and it has never been a problem. It easily connect to the computer thru vpn, but when I try vnc it just timeouts. I have disabled all firewall and such and I am using the exact same setup as I have used before. Does anybody know a way I can test the connection? or find out what the problems is. Or does anybody have a idea of what could be wrong. Please help me out, I need it for work. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: VNC thru VPN - problems
Sounds like your VPN is misconfigured. Do you have a separate internal DNS server on the network you are connecting to via VPN? Also, are you using the PPTP VPN or IPSEC. I don't know much about IPSEC VPNs, but when we connect to the PPTP VPN, it just works. One thing I've learned, though, is that you have to use the FQDN of the machine you're trying to reach, just putting mymachine in there won't work (at least not for us.) You have to use mymachine.mydomain.tld and that should work. Alternatively, you can try using just the IP address (assuming it's a static IP) to try and ping/connect. If you can't ping the server machine, then it's NOT a VNC problem, it's a lower-level problem somewhere, probably either in the TCP/IP settings or in the VPN settings. I can't stress enough that if you can't ping the server machine, then you won't be able to VNC to it, in all likelihood. -Original Message- From: Tobias M Ruby [mailto:[EMAIL PROTECTED] Sent: Monday, August 22, 2005 11:57 AM To: John Aldrich Cc: vnc-list@realvnc.com Subject: Re: VNC thru VPN - problems Thanks forr the answer. But nothing has changed on the server computer, so I am 99 % sure its not the server. When I am connected to the VPN I cant ping the server ip. Also when I disconnect the VPN, it sometimes disconnect my MSN Messenger. Does that make any sense? It did not do these things when I used it last. Tobias John Aldrich wrote: Tobias: The easiest way to ensure that the VNC server is correctly configured is to visit http://www.gotomyvnc.com from the 'server' computer. Then, if the website finds a server listening, at least you know it's configured correctly. Based on your description, it sounds like the server is a) not listening or b) listening on a non-standard port. Double-check the server settings and at least you'll be a step closer to getting connected. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tobias M Ruby Sent: Monday, August 22, 2005 10:41 AM To: vnc-list@realvnc.com Subject: VNC thru VPN - problems Hello I use VPN in Win XP Pro sp2 to connect to my computer at work. And realvnc for using the computer. But, I have recently formattet my home computer and I'am having some trouble with getting realvnc to work again. I have done a few times before and it has never been a problem. It easily connect to the computer thru vpn, but when I try vnc it just timeouts. I have disabled all firewall and such and I am using the exact same setup as I have used before. Does anybody know a way I can test the connection? or find out what the problems is. Or does anybody have a idea of what could be wrong. Please help me out, I need it for work. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: VNC thru VPN - problems
Tobias: It really sounds like there's a network problem because you stated that you can't ping the server machine from your home machine once you've connected to the VPN. I would doublecheck all the settings, especially the IP address you're getting from the VPN server. It may not be getting you the correct netmask or you might be getting the wrong gateway or something like that. Suffice it to say I'm about 99% sure it's NOT a VNC problem. You said you got a new NIC driver. Try uninstalling that and installing the old one and maybe that'll work better... -Original Message- From: Tobias M Ruby [mailto:[EMAIL PROTECTED] Sent: Monday, August 22, 2005 12:54 PM To: John Aldrich Subject: Re: VNC thru VPN - problems I use realvnc and it is configured completely like I used it before. I have a static ip I connect to, and that has always worked before. The only differense from before is I am using a new Realvnc version and that I have installed a newer driver for my ethernet card. And it runs and have allways been running on PPTP, and its true that always connect. I am 99.9 % sure that the VPN and VNC is configured like it has always been, I was just wondering if anybody had a way of testing it or knew something that could be wrong with my other configuration. Tobias John Aldrich wrote: Sounds like your VPN is misconfigured. Do you have a separate internal DNS server on the network you are connecting to via VPN? Also, are you using the PPTP VPN or IPSEC. I don't know much about IPSEC VPNs, but when we connect to the PPTP VPN, it just works. One thing I've learned, though, is that you have to use the FQDN of the machine you're trying to reach, just putting mymachine in there won't work (at least not for us.) You have to use mymachine.mydomain.tld and that should work. Alternatively, you can try using just the IP address (assuming it's a static IP) to try and ping/connect. If you can't ping the server machine, then it's NOT a VNC problem, it's a lower-level problem somewhere, probably either in the TCP/IP settings or in the VPN settings. I can't stress enough that if you can't ping the server machine, then you won't be able to VNC to it, in all likelihood. -Original Message- From: Tobias M Ruby [mailto:[EMAIL PROTECTED] Sent: Monday, August 22, 2005 11:57 AM To: John Aldrich Cc: vnc-list@realvnc.com Subject: Re: VNC thru VPN - problems Thanks forr the answer. But nothing has changed on the server computer, so I am 99 % sure its not the server. When I am connected to the VPN I cant ping the server ip. Also when I disconnect the VPN, it sometimes disconnect my MSN Messenger. Does that make any sense? It did not do these things when I used it last. Tobias John Aldrich wrote: Tobias: The easiest way to ensure that the VNC server is correctly configured is to visit http://www.gotomyvnc.com from the 'server' computer. Then, if the website finds a server listening, at least you know it's configured correctly. Based on your description, it sounds like the server is a) not listening or b) listening on a non-standard port. Double-check the server settings and at least you'll be a step closer to getting connected. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tobias M Ruby Sent: Monday, August 22, 2005 10:41 AM To: vnc-list@realvnc.com Subject: VNC thru VPN - problems Hello I use VPN in Win XP Pro sp2 to connect to my computer at work. And realvnc for using the computer. But, I have recently formattet my home computer and I'am having some trouble with getting realvnc to work again. I have done a few times before and it has never been a problem. It easily connect to the computer thru vpn, but when I try vnc it just timeouts. I have disabled all firewall and such and I am using the exact same setup as I have used before. Does anybody know a way I can test the connection? or find out what the problems is. Or does anybody have a idea of what could be wrong. Please help me out, I need it for work. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: VNC thru VPN
Thanks for the info John. But can you tell me how to do this exactly? Many Thanks, Romel Wall, John [EMAIL PROTECTED] wrote: If you want the VPN user to automatically be seen in the LAN network you can include the DNS/WINS in the dial up profile. We do this within our network and the VPN logon appears straight away instead of waiting for them to open and application that points to your Company IP address. Just a thought but it works for us. We also use Checkpoint as our VPN software. John -Original Message- From: Romel Ornedo [mailto:[EMAIL PROTECTED] Sent: Saturday, 20 November 2004 07:24 To: Angelo Sarto; [EMAIL PROTECTED] Subject: Re: VNC thru VPN We are using Check Point VPN-1. I just run the test a couple of hours ago if I could remote control the remote PC when they are connected to the VPN. Here are the results... After the authenctication thru a VPN client I was able to connect the remote machine to the VPN. I tried to VNC the remote machine from the office but no luck. I tried to ping the IP (the local assigned dhcp ip under broadband connection in a wireless lan) of the remote machine connection but it says host unreachable. I was thinking it shouldnt be, coz once login they can check their mail from outlook fetching the mails in the exchange server in my office lan. so i did open outlook from the remote machine to check if can login to the exhange server, and it was. then i tried pinging the remote machine again (same ip - the local assigned dhcp ip under broadband connection in a wireless lan) from one pc in my office lan. VOILA! its pinging then i was thinking then that its more than possible that VNC should work. and it worked! i can now do VNC'ing when they are connected to the VPN! couple of things.. after logging in to the VPN client they have to initiate a connection first to the office lan like opening outlook first or accessing shared resources in the office lan. that way, their pc will be hooked up virtually present and identified inside the office lan and from that point I can take it from there to VNC their machine. In summary the VPN is using the local ip of the remote machine was using as its identity in our lan and not assigning a special ip address to the remote machine. Even if both ends are on the different subnet. (my office 10.54.X.X and remote machine 192.168.1.X). It seems to me that our VPN acts like a bridge to make communications pass at both ends. Many thanks. Angelo Sarto wrote: The question I ment to ask was is each remote PC assigned a different IP. e.g. - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.201 - PC3-Remote - 192.168.0.202 some vpns do this - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.200 - PC3-Remote - 192.168.0.200 --Angelo On Fri, 19 Nov 2004 17:05:13 + (GMT), Romel Ornedo wrote: do you mean VPN is assingning a different IP when communicating to the remote PC's? or its just the local internal ip is being used by the remote pc during the communication in VPN. Angelo Sarto wrote: So you would like to be able to control the remote computers when they are active in the vpn? this should be possible, but the remote computer will need to be running vncserver. You would have to have them install vnc server on each of the remote machines. In this case (if it is running as a service) you wouldn't even need a reverse connect, simply connect to them by there VPN IP. e.g. xxx.xxx.xxx.yyy ---|VPN|--(192.168.11.254)-- when someone logs in with a vpn server they are given an inside IP, i.e. an ip on the lan. If the remote computer is running vncserver then you should be able to connect to it's inside IP. The pitfalls you will need to avoid are: VPN Server and VPN Client Security settings-I believe in most VPN defaults all traffic is allowed in both directions. Client Firewall - e.g. windows XP service Pack2, software firewalls, some AV (hardware firewalls are usually being bypassed already via VPN) VPN's that do PAT - do your VPN clients share an IP? If you can give them each there own that would work a lot better. otherwise you would have to do some fancy tricks on the VPN. I'm not much of an expert on vpn, but I think this list will cover a lot of them. --Angelo On Fri, 19 Nov 2004 10:07:19 + (GMT), Romel Ornedo wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources
RE: VNC thru VPN
If you want the VPN user to automatically be seen in the LAN network you can include the DNS/WINS in the dial up profile. We do this within our network and the VPN logon appears straight away instead of waiting for them to open and application that points to your Company IP address. Just a thought but it works for us. We also use Checkpoint as our VPN software. John -Original Message- From: Romel Ornedo [mailto:[EMAIL PROTECTED] Sent: Saturday, 20 November 2004 07:24 To: Angelo Sarto; [EMAIL PROTECTED] Subject: Re: VNC thru VPN We are using Check Point VPN-1. I just run the test a couple of hours ago if I could remote control the remote PC when they are connected to the VPN. Here are the results... After the authenctication thru a VPN client I was able to connect the remote machine to the VPN. I tried to VNC the remote machine from the office but no luck. I tried to ping the IP (the local assigned dhcp ip under broadband connection in a wireless lan) of the remote machine connection but it says host unreachable. I was thinking it shouldnt be, coz once login they can check their mail from outlook fetching the mails in the exchange server in my office lan. so i did open outlook from the remote machine to check if can login to the exhange server, and it was. then i tried pinging the remote machine again (same ip - the local assigned dhcp ip under broadband connection in a wireless lan) from one pc in my office lan. VOILA! its pinging then i was thinking then that its more than possible that VNC should work. and it worked! i can now do VNC'ing when they are connected to the VPN! couple of things.. after logging in to the VPN client they have to initiate a connection first to the office lan like opening outlook first or accessing shared resources in the office lan. that way, their pc will be hooked up virtually present and identified inside the office lan and from that point I can take it from there to VNC their machine. In summary the VPN is using the local ip of the remote machine was using as its identity in our lan and not assigning a special ip address to the remote machine. Even if both ends are on the different subnet. (my office 10.54.X.X and remote machine 192.168.1.X). It seems to me that our VPN acts like a bridge to make communications pass at both ends. Many thanks. Angelo Sarto [EMAIL PROTECTED] wrote: The question I ment to ask was is each remote PC assigned a different IP. e.g. - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.201 - PC3-Remote - 192.168.0.202 some vpns do this - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.200 - PC3-Remote - 192.168.0.200 --Angelo On Fri, 19 Nov 2004 17:05:13 + (GMT), Romel Ornedo wrote: do you mean VPN is assingning a different IP when communicating to the remote PC's? or its just the local internal ip is being used by the remote pc during the communication in VPN. Angelo Sarto wrote: So you would like to be able to control the remote computers when they are active in the vpn? this should be possible, but the remote computer will need to be running vncserver. You would have to have them install vnc server on each of the remote machines. In this case (if it is running as a service) you wouldn't even need a reverse connect, simply connect to them by there VPN IP. e.g. xxx.xxx.xxx.yyy ---|VPN|--(192.168.11.254)-- when someone logs in with a vpn server they are given an inside IP, i.e. an ip on the lan. If the remote computer is running vncserver then you should be able to connect to it's inside IP. The pitfalls you will need to avoid are: VPN Server and VPN Client Security settings-I believe in most VPN defaults all traffic is allowed in both directions. Client Firewall - e.g. windows XP service Pack2, software firewalls, some AV (hardware firewalls are usually being bypassed already via VPN) VPN's that do PAT - do your VPN clients share an IP? If you can give them each there own that would work a lot better. otherwise you would have to do some fancy tricks on the VPN. I'm not much of an expert on vpn, but I think this list will cover a lot of them. --Angelo On Fri, 19 Nov 2004 10:07:19 + (GMT), Romel Ornedo wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present
RE: VNC thru VPN
Yes, it can be done. The hard part is identifying what IP address the remote PCs are getting on your LAN, when they connect via VPN. As long as they are on the LAN, even through VPN, assuming no XP firewall or something like that, you should be able to VNC into them. John -Original Message- From: Romel Ornedo [mailto:[EMAIL PROTECTED] Sent: Friday, November 19, 2004 5:07 AM To: [EMAIL PROTECTED] Subject: VNC thru VPN Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: VNC thru VPN
So you would like to be able to control the remote computers when they are active in the vpn? this should be possible, but the remote computer will need to be running vncserver. You would have to have them install vnc server on each of the remote machines. In this case (if it is running as a service) you wouldn't even need a reverse connect, simply connect to them by there VPN IP. e.g. xxx.xxx.xxx.yyy ---|VPN|--(192.168.11.254)-- when someone logs in with a vpn server they are given an inside IP, i.e. an ip on the lan. If the remote computer is running vncserver then you should be able to connect to it's inside IP. The pitfalls you will need to avoid are: VPN Server and VPN Client Security settings-I believe in most VPN defaults all traffic is allowed in both directions. Client Firewall - e.g. windows XP service Pack2, software firewalls, some AV (hardware firewalls are usually being bypassed already via VPN) VPN's that do PAT - do your VPN clients share an IP? If you can give them each there own that would work a lot better. otherwise you would have to do some fancy tricks on the VPN. I'm not much of an expert on vpn, but I think this list will cover a lot of them. --Angelo On Fri, 19 Nov 2004 10:07:19 + (GMT), Romel Ornedo [EMAIL PROTECTED] wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: VNC thru VPN
Make sure you get the IP of the VPN adapter, not the NIC. -Original Message- From: Romel Ornedo [mailto:[EMAIL PROTECTED] Sent: Friday, November 19, 2004 12:02 PM To: John Aldrich; [EMAIL PROTECTED] Subject: RE: VNC thru VPN if i tell the guy on the remote computer to do ipconfigon his computer then it should work. is that right? is it the internal ip or the external ip of the remote computer im going to use? logically from the vpn point of view it should be the internal ip. i will give it a try.. i will let you know.. thanks.. John Aldrich [EMAIL PROTECTED] wrote: Yes, it can be done. The hard part is identifying what IP address the remote PCs are getting on your LAN, when they connect via VPN. As long as they are on the LAN, even through VPN, assuming no XP firewall or something like that, you should be able to VNC into them. John -Original Message- From: Romel Ornedo [mailto:[EMAIL PROTECTED] Sent: Friday, November 19, 2004 5:07 AM To: [EMAIL PROTECTED] Subject: VNC thru VPN Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all res! ources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: VNC thru VPN
do you mean VPN is assingning a different IP when communicating to the remote PC's? or its just the local internal ip is being used by the remote pc during the communication in VPN. Angelo Sarto [EMAIL PROTECTED] wrote:So you would like to be able to control the remote computers when they are active in the vpn? this should be possible, but the remote computer will need to be running vncserver. You would have to have them install vnc server on each of the remote machines. In this case (if it is running as a service) you wouldn't even need a reverse connect, simply connect to them by there VPN IP. e.g. xxx.xxx.xxx.yyy ---|VPN|--(192.168.11.254)-- when someone logs in with a vpn server they are given an inside IP, i.e. an ip on the lan. If the remote computer is running vncserver then you should be able to connect to it's inside IP. The pitfalls you will need to avoid are: VPN Server and VPN Client Security settings-I believe in most VPN defaults all traffic is allowed in both directions. Client Firewall - e.g. windows XP service Pack2, software firewalls, some AV (hardware firewalls are usually being bypassed already via VPN) VPN's that do PAT - do your VPN clients share an IP? If you can give them each there own that would work a lot better. otherwise you would have to do some fancy tricks on the VPN. I'm not much of an expert on vpn, but I think this list will cover a lot of them. --Angelo On Fri, 19 Nov 2004 10:07:19 + (GMT), Romel Ornedo wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: VNC thru VPN
if i tell the guy on the remote computer to do ipconfigon his computer then it should work. is that right? is it the internal ip or the external ip of the remote computer im going to use? logically from the vpn point of view it should be the internal ip. i will give it a try.. i will let you know.. thanks.. John Aldrich [EMAIL PROTECTED] wrote:Yes, it can be done. The hard part is identifying what IP address the remote PCs are getting on your LAN, when they connect via VPN. As long as they are on the LAN, even through VPN, assuming no XP firewall or something like that, you should be able to VNC into them. John -Original Message- From: Romel Ornedo [mailto:[EMAIL PROTECTED] Sent: Friday, November 19, 2004 5:07 AM To: [EMAIL PROTECTED] Subject: VNC thru VPN Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: VNC thru VPN
On Friday 19 November 2004 11:07, Romel Ornedo wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. Short answer Yes, no problem. Long: vnc uses a tcp connection. Nothing special about it. if you can ping the machine, and you don't block the vnc ports along the way, you can vnc to him. As to what your unspecified vpn software sets up, and the IP configuration of your vpn clients? We can't answer that. But then again, you don't need to know all of that if you are doing the reverse connection stuff.. all you need to know is your address which I assume is static. To help your clients you can make an icon (or menu position) on thier desktop to connect to you... Jerry ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: VNC thru VPN
The question I ment to ask was is each remote PC assigned a different IP. e.g. - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.201 - PC3-Remote - 192.168.0.202 some vpns do this - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.200 - PC3-Remote - 192.168.0.200 --Angelo On Fri, 19 Nov 2004 17:05:13 + (GMT), Romel Ornedo [EMAIL PROTECTED] wrote: do you mean VPN is assingning a different IP when communicating to the remote PC's? or its just the local internal ip is being used by the remote pc during the communication in VPN. Angelo Sarto [EMAIL PROTECTED] wrote: So you would like to be able to control the remote computers when they are active in the vpn? this should be possible, but the remote computer will need to be running vncserver. You would have to have them install vnc server on each of the remote machines. In this case (if it is running as a service) you wouldn't even need a reverse connect, simply connect to them by there VPN IP. e.g. xxx.xxx.xxx.yyy ---|VPN|--(192.168.11.254)-- when someone logs in with a vpn server they are given an inside IP, i.e. an ip on the lan. If the remote computer is running vncserver then you should be able to connect to it's inside IP. The pitfalls you will need to avoid are: VPN Server and VPN Client Security settings-I believe in most VPN defaults all traffic is allowed in both directions. Client Firewall - e.g. windows XP service Pack2, software firewalls, some AV (hardware firewalls are usually being bypassed already via VPN) VPN's that do PAT - do your VPN clients share an IP? If you can give them each there own that would work a lot better. otherwise you would have to do some fancy tricks on the VPN. I'm not much of an expert on vpn, but I think this list will cover a lot of them. --Angelo On Fri, 19 Nov 2004 10:07:19 + (GMT), Romel Ornedo wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: VNC thru VPN
We are using Check Point VPN-1. I just run the test a couple of hours ago if I could remote control the remote PC when they are connected to the VPN. Here are the results... After the authenctication thru a VPN client I was able to connect the remote machine to the VPN. I tried to VNC the remote machine from the office but no luck. I tried to ping the IP (the local assigned dhcp ip under broadband connection in a wireless lan) of the remote machine connection but it says host unreachable. I was thinking it shouldnt be, coz once login they can check their mail from outlook fetching the mails in the exchange server in my office lan. so i did open outlook from the remote machine to check if can login to the exhange server, and it was. then i tried pinging the remote machine again (same ip - the local assigned dhcp ip under broadband connection in a wireless lan) from one pc in my office lan. VOILA! its pinging then i was thinking then that its more than possible that VNC should work. and it worked! i can now do VNC'ing when they are connected to the VPN! couple of things.. after logging in to the VPN client they have to initiate a connection first to the office lan like opening outlook first or accessing shared resources in the office lan. that way, their pc will be hooked up virtually present and identified inside the office lan and from that point I can take it from there to VNC their machine. In summary the VPN is using the local ip of the remote machine was using as its identity in our lan and not assigning a special ip address to the remote machine. Even if both ends are on the different subnet. (my office 10.54.X.X and remote machine 192.168.1.X). It seems to me that our VPN acts like a bridge to make communications pass at both ends. Many thanks. Angelo Sarto [EMAIL PROTECTED] wrote: The question I ment to ask was is each remote PC assigned a different IP. e.g. - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.201 - PC3-Remote - 192.168.0.202 some vpns do this - PC1-Remote - 192.168.0.200 - PC2-Remote - 192.168.0.200 - PC3-Remote - 192.168.0.200 --Angelo On Fri, 19 Nov 2004 17:05:13 + (GMT), Romel Ornedo wrote: do you mean VPN is assingning a different IP when communicating to the remote PC's? or its just the local internal ip is being used by the remote pc during the communication in VPN. Angelo Sarto wrote: So you would like to be able to control the remote computers when they are active in the vpn? this should be possible, but the remote computer will need to be running vncserver. You would have to have them install vnc server on each of the remote machines. In this case (if it is running as a service) you wouldn't even need a reverse connect, simply connect to them by there VPN IP. e.g. xxx.xxx.xxx.yyy ---|VPN|--(192.168.11.254)-- when someone logs in with a vpn server they are given an inside IP, i.e. an ip on the lan. If the remote computer is running vncserver then you should be able to connect to it's inside IP. The pitfalls you will need to avoid are: VPN Server and VPN Client Security settings-I believe in most VPN defaults all traffic is allowed in both directions. Client Firewall - e.g. windows XP service Pack2, software firewalls, some AV (hardware firewalls are usually being bypassed already via VPN) VPN's that do PAT - do your VPN clients share an IP? If you can give them each there own that would work a lot better. otherwise you would have to do some fancy tricks on the VPN. I'm not much of an expert on vpn, but I think this list will cover a lot of them. --Angelo On Fri, 19 Nov 2004 10:07:19 + (GMT), Romel Ornedo wrote: Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this
RE: VNC thru VPN
Romel, I use VPN extensively to connect from Home PC (WinME) to our LAN at work, so I have learnt quite a lot about it. Answers are after the sections in your original message. Alan. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Romel Ornedo Sent: Friday, November 19, 2004 2:07 AM To: [EMAIL PROTECTED] Subject: VNC thru VPN Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. You are right about how you view the remote computer; it behaves exactly as if it was on the LAN. Any resources (files, printers, etc.) you want to use on that computer have to be shared. As a matter of fact I would first make sure I could do what I wanted to do using two systems connected directly to the LAN. If it works, without contending with a firewall etc. then try it with a remote computer; you will at least then be able to work with a much smaller number of variables if you have a problem. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? You ask about IP addresses. I just use names (not IP addresses) on my LAN. The reason is simple; the LAN has dynamic addressing enabled so if I specify a specific IP, I'm not sure I will get the system I want ; with the name I always get the system I expect. Running 'ipconfig' on the target system gives you the local IP address but the VPN server on the LAN uses a different one (my guess is that you are using a server on the LAN to implement the VPN server considerably more complex than the VPN client which runs on the remote system); the remote systems probably connect via a RAS system which has its own set of IP addresses). I use VNC over VPN all the time so I know it works but not quite the way you want to use it (I use it to log into specific systems as the console on that system; that way I don't have to 'share' folders or printers to 'see' them if I was using another system on the LAN). I realise this was long-winded but I hope it helped. This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
VNC thru VPN
Need some clarifications regarding VPN. Scenario: Assuming I am the one of the administrator of the local area network in our office. We have VPN setup in our office to make users connect to the internal network remotely when they are out of the office. With the VPN connection they can all access network resources in my office LAN remotely (shared files, printers, all resources which they are permitted using their access/permission rights, etc). My Question: When they are connected to the VPN, assuming I'm the Administrator of the LAN, is it possible to use the REMOTE COMPUTER resources connected to our VPN? It's like when the remote computer is connected and being virtually present inside the LAN then it should be possible also for me (INSIDE the LAN) to see his computer and use the shared files in his computer. The reason I ask this question is I want to remotely control the roaming computers when they are connected to the VPN. Since they already established a remote connection I should be able to initiate a connection also in reverse. But what will be his IP address or the VPN identification is using during the communication to address the request from-and-to the remote sites. Is this possible to use VNC under our VPN to remote computers even if they are under a broadband connection or inside a firewalled lan? What are the things to put in considerations? What could be possible problems I will encounter for unsuccessful connection? This is a shot in the dark, im not that techie specifically regarding VPN. Thanks in advanced. - Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now ___ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
