
Signature
Al Jarvi (MS-MVP Windows Networking)
Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
Hi,
'This presumes you have TCP Port 3389 forwarded through any firewall/router
> (including the XP SP2 Windows Firewall) between your office PC and the
> public internet.'
I have disconnected my work PC's firewall (McAfee) and I do not have a
router...I am connected to the internet via a Motorola modem. However, I have
accessed 'netstat -a' and Port 3389 is 'listening'.
'> You don't need a VPN in order to use Remote Desktop although some folks do
> including myself for various reasons. For addressing help see this...'
My ISP told me that I needed a commercial account and a VPN in order to set
up RDC. I can't see why that would be?? If this is not the case, what the
heck am I doing wrong?
From my understanding, after enabling the host pc to accept remost hosting,
forwarding Port 3389 (if you have a router) and either placing an exception
in your firewall to accept RDC or disabling completely...all that should need
to be done is start up RDC on a client pc, type in the ip address of the host
pc and log in to the host pc. Am I missing something?
If we don't speak again tonight...Have a safe and happy New Year!!
> > If that is the case...my natural next question is - how do I set up a VPN?
>
[quoted text clipped - 12 lines]
> are for an account on your office PC not your home PC. You need to use a
> *STRONG* password.
Shenan Stanley - 31 Dec 2006 21:58 GMT
> I have disconnected my work PC's firewall (McAfee) and I do not
> have a router...I am connected to the internet via a Motorola
[quoted text clipped - 13 lines]
>
> If we don't speak again tonight...Have a safe and happy New Year!!
This all started with:
> I am trying to connect to my work PC (WINXP PRO) from my home PC
> (WINXP PRO).
And lead to the fact that your computer at work (the one you are trying to
remote to) *is* behind a NAT device/router:
> I am using the ip address I got from going to ipconfig
> 192.168.1.xxx (according to my isp, it's not a static ip address)
... as the 192.168.1.xxx address is a PRIVATE IP address assigned by some
NAT device or router - not by any ISPs I know of.
What that means is that your work machine is behind a router or NAT device
and you do not currently know its public IP. You need to know the public IP
address of your work system (it is not unique - it will be the public IP
address for every machine that is behind that same NAT device/router) and
then you need to configure that router to forward port 3389 requests to your
particular machine (along with all the other stuff you claim to have already
done on your work computer.)
You home computer - it's all ready to go. As long as you have an Internet
connection (normally) and it has the Remote Desktop Client - not much else
matters with the client machine (your home machine.)
To get the actual public IP address of your work computer - you need to be
on it and usually visiting:
http://whatismyip.com/
Will give you that IP address. It should *not* be 192.168.xxx.xxx. It
should be something else.
As for how tro configure the work router to allow port forwarding - that
will depend on the router in question and what it has in its manual.

Signature
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
Sooner Al [MVP] - 31 Dec 2006 22:17 GMT
> Hi,
>
[quoted text clipped - 28 lines]
>
> If we don't speak again tonight...Have a safe and happy New Year!!
On the work PC open IE and go to the http://www.canyouseeme.org site. Run
the test for TCP Port 3389. If the test fails you have a firewall or router
blocking incoming requests. If it passes see the following...
As noted by Shenan also go to the http://www.whatismyip.com site while at
work. This will give you your public internet IP address, the one you need
to use when calling from home...
Help us understand something...
You say you have two PCs at work connected straight to a cable modem, is
that correct? What model Motorola modem? How are the PCs connected to the
modem, ie. is there a switch between the modem and the two PCs? If you go to
the http://www.whatismyip.com site on both PC's do they report different IP
addresses or different IP addresses? If you go to "Start -> Run" and type
cmd at the command line then type "ipconfig /all" at the prompt on each PC
do you get a public IP address, ie. an address that does not start with an
address in the private address space meaning 192 or 172 or 10 for example?
http://www.ietf.org/rfc/rfc1918.txt
Happy New Year to you and yours also...

Signature
Al Jarvi (MS-MVP Windows Networking)
Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
nycnc - 31 Dec 2006 23:04 GMT
This is the way my 2 workstations at my office are setup:
2 WINXP PRO PC's hooked up to the internet via a SURFboard® Cable Modem
SB5101. One end of the cable is going into the modem from the wall and coming
out the other end into a Linksys WPS54G Wireless-G Print Server. From there,
I have one ethernet wire each going into either PC.
So, unless the print server is the 'NAT Device/router' to which you are
referring, I again am not sure what i am doing wrong.
By the way, since one of my past posts, I did realize that I provided you
with an incorrect ip address (192.168.x.xxx). I have since been on
checkip.dyndns.org and found out the correct ip address for my work PC.
I did go on to www.canyouseeme.org to check Port 3389 and it came back
saying 'Error, Connection Timed Out'.
Curious if I am taking the cake for being the most 'difficult' person on
this newsgroup needing help?
> > Hi,
> >
[quoted text clipped - 51 lines]
>
> Happy New Year to you and yours also...
Shenan Stanley - 31 Dec 2006 23:22 GMT
> This is the way my 2 workstations at my office are setup:
>
[quoted text clipped - 3 lines]
> Print Server. From there, I have one ethernet wire each going into
> either PC.
There's a problem with this.
Someplace their is a router or some other device (NAT) giving out the
private IPs and providing you with the multiple connections.
The modem you quote has ONE ethernet connection:
http://broadband.motorola.com/consumers/products/sb5101/
Where does the one ethernet line become two or three? Back of a computer?
A switch (networking device)?
> So, unless the print server is the 'NAT Device/router' to which you
> are referring, I again am not sure what i am doing wrong.
It is not..
http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayou
t&cid=1114037289494&packedargs=site%3DUS&pagename=Linksys%2FCommon%2FVisitorWrap
per
> By the way, since one of my past posts, I did realize that I
> provided you with an incorrect ip address (192.168.x.xxx). I have
> since been on checkip.dyndns.org and found out the correct ip
> address for my work PC.
You provided that to me - not to Al. ;-)
> I did go on to www.canyouseeme.org to check Port 3389 and it came
> back saying 'Error, Connection Timed Out'.
Sounds like it is blocked someplace -- assuming you meant you did that on
the work machine.
> Curious if I am taking the cake for being the most 'difficult'
> person on this newsgroup needing help?
Nope.

Signature
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
Sooner Al [MVP] - 31 Dec 2006 23:29 GMT
> This is the way my 2 workstations at my office are setup:
>
[quoted text clipped - 17 lines]
> Curious if I am taking the cake for being the most 'difficult' person on
> this newsgroup needing help?
LOL... NO, your not the most difficult, maybe second place...:-)
Just kidding of course...
Well you print server is simply another device on a network and your modem
only has one Ethernet port so its not a router. Your PCs are behind a
firewall or router of some sort based on the IP address, ie. a 192.168
address for the PC, and the fact that the http://www.canyouseeme.org test
failed. Are you in an office building of some sort that provides internet
access? There is definitely something between your work PC and the cable
modem...
One other test is to try connecting to the PC you want to eventually
remotely access/control from your other PC. See this illustration...
http://theillustratednetwork.mvps.org/RemoteDesktop/TroubleshootingDiagrams/Basi
c.html

Signature
Al Jarvi (MS-MVP Windows Networking)
Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...