Remote Desktop Services

[RAStar_1]

I have tried everything in terms of firewall on Server 2k8 R2 enterprise, enabling port 3389 on the router and still cannot connect to via Remote desktop via external internet.

I can connect via remote desktop via clients on the same doamin though?

Any ideas what I need to do to enable remote desktop over the internet please?

[Johan Guldmyr]

"enable" port 3389 - what do you mean? Did you just open it in the firewall?

Is your win2k8 machine in a NAT? Then you need to forward the port as well.

Is it in a VM? Then maybe you need to do some extra magic?

Please describe the IP network(s) you have configured/are running more in depth.

[RAStar_1]

"enable" port 3389 - what do you mean? Did you just open it in the firewall? -

I have opened it in windows firewall, in the modem and the router.

Is your win2k8 machine in a NAT? Then you need to forward the port as well. -

Unless the NAT is a pre-configured feature, then no.
All I have done since installing win 2k8 r2 enterprise is install AD, File Share and Desktop Services.



Is it in a VM? Then maybe you need to do some extra magic? -

Nope not a VM

Please describe the IP network(s) you have configured/are running more in depth.

Ok the Setup is -

Internet ---> Modem (WAN IP 81.10.127.11, LAN IP 192.168.1.1)----> Wireless Router -----> (IP 192.168.1.2, DHCP Pool 192.168.2.2) ----> Server (IP 192.168.2.10)

[Johan Guldmyr]

Hey!

Internet ---> Modem (WAN IP 81.10.127.11, LAN IP 192.168.1.1)----> Wireless Router -----> (IP 192.168.1.2, DHCP Pool 192.168.2.2) ----> Server (IP 192.168.2.10)

So - the Modem has a 81.x IP and a 192.168.1 ip? Can you configure the modem? To me it looks like the modem has a router inside it.

1/ You are running NAT. NAT enables a private IP (192.168.x.x) to connect to the Internet. If your modem has a router inside it, you may have a NAT inside the NAT :)
2/ Can something from your 192.168.1.1 connect to the Win2k8 server? Can anything on your 192.168.2.x network access the Internet?
3/ You need to do a port forward from the router to the IP of your win2k8. What kind of router do you have?
4/ Do you have to have the DHCP pool in a separate IP subnet? If you run into problems, consider having eveything in the 192.168.1.0/255.255.255.0 subnet.

[RAStar_1]

The Modems IP (which starts with 81 as an example) is what it pulls from the ISP and its a dynamic IP address.

The Modem does have a built in NAT and so does the router (sorry I thought your inital question was related to the server only).

The Modem has DHCP enabled which then connects to the router and assigns it the 192.168.1.2 IP Address.

The Router (192.168.1.2) also has a NAT and DHCP enabled, which then connects to the server (192.168.2.10) and shares internet to the rest of the clients.

The Modem has the firewall disabled and wireless Router has firewall enabled.

I ahve port forwaded on the modem to the ip address of my router and then port forwarded from the router to the Server.

I am able to connect to the IIS splash page when connecting to the modems Internet IP address e.g. http://80.10.127.11 and also the modems remote managment page http://80.10.127.11:8080

[Johan Guldmyr]

And the IIS splash page is on port 80 on the win2k8 server you want to remote desktop to?

[RAStar_1]

It must be on port 80 as I didn't configure IIS, it was auto installed when installing remote desktop services web apss.

[RAStar_1]

Sorry it is on port 80, as regardless if I confuigured or not, its working.

[Johan Guldmyr]

Cool!

I think you can chose security on remote desktop - who can log on. Have you tried changing that?

[Johan Guldmyr]

I have a 2k8 R2 machine as well I'll try to set that up (but I don't have the extra step so I only have to do one port forward).

And this worked for me.

Just forwarded 3389 to the IP of my VM.

If you right-click on "computer" and then click on "remote settings" - what setting do you have there? Mine is on the lowest one.

Question: when you try this, do you try it from the Internet (like somebody elses internet) or are you trying to access the external IP from inside your NAT?

I tried from within the NAT.

[RAStar_1]

Its on the lowest setting as well.

Internally I can connect via RDP, its only externally I am having the issue.

[Johan Guldmyr]

Firewall on the server enabled?

Do you have to do double-nat?

[Johan Guldmyr]

Maybe this link can sched some insight?

http://www.fwbuilder.org/4.0/docs/users_guide/double_nat.html

[RAStar_1]

Firewall is enabled on the server but with port forwarding enabled as well.

I am thinking, it may, be the modem while connected to the router.

When I go back home now, which is in 2 days, I will try modem only to the server and see if that makes any difference.