VNC and VPN

Matblack · 15-06-2007, 11:30

Can anyone give me a step by step guide to VPNing into my home machine and contolling it via VNC?

I know a few of you are doing this and with Virgin changing their traffic shaping policy it would be useful to kick off downloads during the day

Thanks

MB

Daz · 15-06-2007, 11:32

If you're using an XP or above machine, then use Remote Desktop, it's much more bareable over a WAN link. Firstly, does your router have any VPN server functionality, and if not, are you sure it support VPN pass-through?

Matblack · 15-06-2007, 11:43

Seems to support it, its a WRT54GS but looking up VPN and WRT54GS on Google doesn't look promising :/

http://www.google.co.uk/search?hl=en&q=WRT54GS+vpn&meta=

MB

Daz · 15-06-2007, 11:47

Windows XP has the ability to answer 1 incoming VPN connection, what you need to setup is your router passing the packets properly internally. Now, it's not as simple as a basic port mapping. While port 1723 does need to be mapped to your XP box, GRE (IP protocol 47) needs to be mapped also, and this is where a lot of consumer grade kit falls short.

Ideally, in your forwarding options you want to select a pre-configured option for PPTP VPN's. If there isn't one you're likely out of luck. Netgear's in particular were a bitch for this, even when they supposedly fixed the GRE mapping, it still didnt work for a firmware release or two. I'm not sure how Linksys fair, so suck it and see I guess.

[edit] To setup the VPN server side on XP, go to network connection, create a new connection, advanced connection, accept incoming connection, dont add a device, allow virtual private connection, allow your own user account, leave the protocols alone, click finish.

Should also say of course your router/proxy at work must allow the connection through, which if it's been setup by a seasoned techie, it shouldn't.

Mark · 15-06-2007, 11:57

Quote:

Originally Posted by Daz

Should also say of course your router/proxy at work must allow the connection through, which if it's been setup by a seasoned techie, it shouldn't.

This is the key point. I spent a few days trying to troubleshoot a VPN connection I'd set up only to discover this. However, they didn't block SSH (as it's a point-to-point rather than network-to-network protocol) so I still have a way in, though I've yet to be able to figure out a way to tunnel Remote Desktop over SSH (I'm sure there is one).

Desmo · 15-06-2007, 12:19

Why do you need a VPN? Just connect to the VNC server and fire away. OK, so it's not as secure but if you just want to start a couple of downloads and then do that and disconnect.

Mark · 15-06-2007, 12:24

As a purely personal opinion, it's the security that would bother me. VNC is well-known for being vulnerable and I'd never have it on an internet-facing connection.

Matblack · 15-06-2007, 12:28

Now I am confused :/

I have my media machine connected to the net via the Linksys router and the cable modem, whats the best way to 'dial' in.

Its only running normal XP not pro and I don't have pro at work.

MB

Dymetrie · 15-06-2007, 12:28

I run VNC on Phoenix and connect to it from work.

Pretty simple, download and install VNC server, set password and desired port number (defaults to 5900) forward the port on your router...

I use the standalone .exe at work as I can't install stuff, just double click, enter IP and port, enter password, skive off work

Matblack · 15-06-2007, 12:31

That sounds ideal, right now I use VNC locally to operate the downstairs machine without needing to switch the projector on, so I just need to open the port and write down my IP address, that shouldn't change to often I presume?

MB

15-06-2007, 11:30	#1
Matblack Baby Bore Join Date: Jun 2006 Location: Svalbard Posts: 9,770	VNC and VPN Can anyone give me a step by step guide to VPNing into my home machine and contolling it via VNC? I know a few of you are doing this and with Virgin changing their traffic shaping policy it would be useful to kick off downloads during the day Thanks MB __________________ "we had roots that grew towards each other underground, and when all the pretty blossom had fallen from our branches we found that we were one tree and not two"

15-06-2007, 11:32	#2
Daz The Stig Join Date: Jun 2006 Location: Swad! Posts: 10,713	If you're using an XP or above machine, then use Remote Desktop, it's much more bareable over a WAN link. Firstly, does your router have any VPN server functionality, and if not, are you sure it support VPN pass-through? __________________ apt-get moo

15-06-2007, 11:43	#3
Matblack Baby Bore Join Date: Jun 2006 Location: Svalbard Posts: 9,770	Seems to support it, its a WRT54GS but looking up VPN and WRT54GS on Google doesn't look promising :/ http://www.google.co.uk/search?hl=en&q=WRT54GS+vpn&meta= MB __________________ "we had roots that grew towards each other underground, and when all the pretty blossom had fallen from our branches we found that we were one tree and not two"

15-06-2007, 11:47	#4
Daz The Stig Join Date: Jun 2006 Location: Swad! Posts: 10,713	Windows XP has the ability to answer 1 incoming VPN connection, what you need to setup is your router passing the packets properly internally. Now, it's not as simple as a basic port mapping. While port 1723 does need to be mapped to your XP box, GRE (IP protocol 47) needs to be mapped also, and this is where a lot of consumer grade kit falls short. Ideally, in your forwarding options you want to select a pre-configured option for PPTP VPN's. If there isn't one you're likely out of luck. Netgear's in particular were a bitch for this, even when they supposedly fixed the GRE mapping, it still didnt work for a firmware release or two. I'm not sure how Linksys fair, so suck it and see I guess. [edit] To setup the VPN server side on XP, go to network connection, create a new connection, advanced connection, accept incoming connection, dont add a device, allow virtual private connection, allow your own user account, leave the protocols alone, click finish. Should also say of course your router/proxy at work must allow the connection through, which if it's been setup by a seasoned techie, it shouldn't. __________________ apt-get moo

15-06-2007, 12:19	#6
Desmo The Last Airbender Join Date: Jun 2006 Location: Pigmopad Posts: 11,915	Why do you need a VPN? Just connect to the VNC server and fire away. OK, so it's not as secure but if you just want to start a couple of downloads and then do that and disconnect. __________________

15-06-2007, 12:24	#7
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	As a purely personal opinion, it's the security that would bother me. VNC is well-known for being vulnerable and I'd never have it on an internet-facing connection.

15-06-2007, 12:28	#8
Matblack Baby Bore Join Date: Jun 2006 Location: Svalbard Posts: 9,770	Now I am confused :/ I have my media machine connected to the net via the Linksys router and the cable modem, whats the best way to 'dial' in. Its only running normal XP not pro and I don't have pro at work. MB __________________ "we had roots that grew towards each other underground, and when all the pretty blossom had fallen from our branches we found that we were one tree and not two"

15-06-2007, 12:28	#9
Dymetrie A large glass of Merlot Join Date: Jun 2006 Location: Letchworth with a Lightsaber Posts: 5,819	I run VNC on Phoenix and connect to it from work. Pretty simple, download and install VNC server, set password and desired port number (defaults to 5900) forward the port on your router... I use the standalone .exe at work as I can't install stuff, just double click, enter IP and port, enter password, skive off work __________________ Khef, Ka and Ka-Tet....

15-06-2007, 12:31	#10
Matblack Baby Bore Join Date: Jun 2006 Location: Svalbard Posts: 9,770	That sounds ideal, right now I use VNC locally to operate the downstairs machine without needing to switch the projector on, so I just need to open the port and write down my IP address, that shouldn't change to often I presume? MB __________________ "we had roots that grew towards each other underground, and when all the pretty blossom had fallen from our branches we found that we were one tree and not two"