x
all questions login
General DNS & Domains Dyn Email Update Clients Dyn Developer

Hello all,

Looking for any advice in setting up a remote desktop connection.

I have been using remote desktop for quite some time across my local network. Works great for that purpose. Lately, I've wanted to set it up to run over the internet. Here's what I have done:

  1. Set up a DynDNS account, and established a sub-domain for the computer at http://dondesk.dyndns.org

  2. Installed the updater software.

  3. Opened up port 3389 on the router.

  4. I confirmed that I can ping the computer from outside the local network. Seems to work.

  5. When setting up the remote desktop host, I set it to use any version of remote desktop.

  6. When setting up the client, I set it to "use these TS Gateway Settings", and entered http://dyndns.org. I also unchecked "Bypass TS Gateway for local addresses". Everything else is currently unchecked at the moment, but I've tried most combinations (at least, all of them I can think of).

  7. When I log in, I get the following error, "This computer can't connect to the Remote computer because the Terminal Services Gateway server address requested and subject name do not match

That's where I'm stuck. I don't have a clue about what to do from here. Does anyone have any ideas?

Thanks in advance,

more ▼

asked Feb 07 at 04:07 PM

Don Fink\'s gravatar image

Don Fink
1 1 2 2

Well, I appreciate the answer below. When I turned off TS Gateway, I then get the "This computer can't connect to the remote computer" error window. I tried it on two different machines, and two different networks to be sure. I can still ping the machine in question, and I can still connect to it locally.

Still at a complete loss. I hate to have to go to the commercial stuff when this is supposed to be built right in...

Feb 07 at 08:46 PM Don Fink

Ping simply pings your router, not the computer. As for the TS Gateway, I have never needed to set that (indeed until you mentioned it I didn't know it existed).

However your problem may be related to your use of satellite. What is your inbound connection type?

Feb 08 at 06:55 AM Cry Havok ♦

This is where my limited knowledge begins to break down, and is probably the cause of my siiue here. My connection type is, I think, "Dynamic IP (DHCP)". At least, that's how the router is set. The only reason I know this is because that's where the router is set for "Connection Type". The router is the DHCP server for the LAN.

I guess that what I'm not getting is how an internal ip address is resolved by the router. It seems that when I ask for my IP address from the various web sites, I get the same IP from each machine behind the firewall. I need to figure out how it resolves to 1 computer

Feb 08 at 01:50 PM Don Fink
10|600 characters needed characters left

5 answers:

Have you tried the Open Port Tool to check if the port seems to be correctly forwarded to your computer?

Do you have several routers/modems or just the one?

more ▼

answered Feb 08 at 01:15 AM

VikingTiger\'s gravatar image

VikingTiger ♦
11.6k 2 10 124

The Open Port Tool shows it open. I have one router; a D-Link DIR-655. the computer is running Vista Ultimate, SP2. My internet connection is a Hughes satellite system. My second connection is a verizon (tethered phone/modem).

Feb 08 at 04:13 AM Don Fink
10|600 characters needed characters left

Comments:

  1. You confirmed here that you can ping the router ;)

  2. Don't set "TS Gateway Settings", you shouldn't need to set those and they're almost certainly causing your problems

more ▼

answered Feb 07 at 07:06 PM

Cry Havok\'s gravatar image

Cry Havok ♦
52.2k 13 26 222

10|600 characters needed characters left

Try TELNETTing to the computer on port 3389 telnet yourdomain 3389

Check that your router is port forwarding port 3389.

more ▼

answered Feb 08 at 03:54 AM

JHPArizona\'s gravatar image

JHPArizona
46 1

I don't think I'm using this forum correctly, so I apologize. I don't think Vista has telnet. I know my XP netbook has it, but none of my Vista machines do. There's another program out there (forget its name off hand) that I could install and try.

Feb 08 at 04:24 AM Don Fink

You can install telnet via the instructions in this web link: http://www.tech-recipes.com/rx/1793/vista_install_telnet_client/

Feb 08 at 05:18 AM JHPArizona

Adding telnet in the Windows components list, takes forever to complete. Personally I would much rather just download and use Puttytel instead.

Feb 08 at 11:05 AM VikingTiger ♦
10|600 characters needed characters left

On your PC, check your Remote Desktop & Windows Firewall settings. They should be set ALLOW incomming connections on Port 3389 from "Anybody" (not just your local LAN). Also you might try turning "off" Windows Firewall TEMPORARILY and/or physically connecting the PC directly to the WAN or using your router's "DMZ" feature, if available. If that works, you can then concentrate on setting your router, Windows Firewall and Remote Desktop to allow only "YOU" (or others you authorize) from your location outside the LAN.

more ▼

answered Feb 08 at 06:39 AM

dm90621\'s gravatar image

dm90621
1

Some good ideas here. My Windows firewall is off, preferring instead to use the router's firewall. I placed the computer in question in the DM

Good comments. My Windows firewall is off, preferring instead to use the router's firewall. I did place the computer in question in the DMZ. It made no difference.

My issue appears to be that I don't understand how IP addresses resolve to individual computers when data moves from outside the LAN to inside, through the router. I believe I need to learn that part of networking before this can be solved. I'll read on...

Feb 08 at 01:55 PM Don Fink

Regarding your question about IP address. The capability of a router to direct (route) IP packets to/from selected LAN-side PC (hosts/clents) is referred to as NAT from from the phrase "Network Address Translation".

Rather than explan the details of NAT in this comment, I'll gladly recommend this excellent place to learn more: Go to http://www.grc.com
Scroll down to "Sheilds Up" and read on from there. You can use that site to confirm if port 3389 (or other depending on your configuration) is OPEN when Remote Desktop is enabled and waiting for an incomming connection.

Feb 12 at 05:39 AM dm90621
10|600 characters needed characters left

I had a similar experience with Hughes. Since they also use NAT on their satellites, I will be impossible to use Remote Desktop from outside your local network since your system's IP address changes with each and every session. You need to purchase a static IP address from them. With a static IP address, you won't need DynDns, or the updater software. Just connect to the static IP address they give you. Do not use the TS gateway option on your client.

Another less expensive option is to use a third-party remote access server that supports an RPC service. http://access-remote-pc.com comes to mind.

more ▼

answered Oct 15 at 03:02 PM

tbrimm\'s gravatar image

tbrimm
1 2

If Hughes do not provide public and routable IP addresses, then it is impossible to connect to them from the Internet. That has however nothing to do with the fact that the IP address is dynamic (changing regularly). Most home users have dynamic IPs, and with the help of dynamic DNS, that's not an issue.

Oct 15 at 05:26 PM VikingTiger ♦
10|600 characters needed characters left
Your answer
osqa.question.ask.tags.preview.show

© 1998-2012  Dynamic Network Services Inc.  -  Legal Notices  -  Privacy Policy  -  Contacts     

Powered by AnswerHub - Enterprise Social Q&A