[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 911
  • Last Modified:

is my router / switch forwarding port 3389 for remote desktop?

Hey experts,
   I've had a problem that's finally just confused me.
I'm running a network with an SBS 2003 server and 7 Win XP Pro machines. The internet connection is ADSL and comes in via a CISCO 800 router. It then goes through a Surecom EP-816x switch to all the computers.
Currently i've set up remote desktop on the sbs server and it's no problem connecting via remote desktop from another computer on the LAN. However, when I try to connect externally from home, i get :

"The client could not connect to the remote computer. Remote connections might not be enabled or the computer might be too busy to accept new connections. It is also possible that network problems are preventing your connection. Please try your connection again later. If the problem continues to occur, contact your administrator."

I'm assuming my problem isn't with the way i've set up remote desktop on the server and i've checked that it is listening on port 3389.
The problem is I think that the ISP owns the router and i dont have access to it, i wrote to them saying please forward these ports, and they replied with:

"We provide you an ADSL service, with no NATing running…ie we pass all traffic through. We don’t block any traffic.
More importantly we don’t do any Port forwarding on the routers we provide…in this case it is really just an NTU.  You will need to do this on your firewall."

So if that's the case I guess that the Surecom switch is my problem? I have no idea whether i can access it via an IP address and  have no documentation or manuals on it =S   would there be some way to find if it has an ip?

oh and btw, remote desktop is enabled on all computers so perhaps the switch doesn't know where to pass a port 3389 request, however at night, when only the server is on, i get the same error.

Any suggestions / comments would be greatly appreciated.

Cheers
Phram3z

0
phram3z
Asked:
phram3z
  • 5
  • 4
  • 2
  • +3
2 Solutions
 
zephyr_hex (Megan)DeveloperCommented:
it sounds like you need to get your own router.  a switch can not port forward.  you must port forward 3389 so it is bound to your SBS server.

moreover, it is not very secure to lack a router you can log into and configure.  from what your ISP has said, it sounds like your network is a wide open door.

by the way, you can check to see if 3389 is open by going to http://www.canyouseeme.org  .  you want to do this on a computer inside your LAN.  it may be that your ISP has 3389 open, but not forwarded.

it is good practice to keep all unused ports closed... another reason to get your own router.  your router should sit behind the ISP router, before the switch.
0
 
phram3zAuthor Commented:
thx zephyr, i went to canyouseeme.org and it couldn't see 3389 so i'm going to do what you recommended and pick up a router. i'll get back to you soon on how it's going.
Thanks
0
 
zephyr_hex (Megan)DeveloperCommented:
do the port forwarding in your new router, and then check canyouseeme again.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
bhatiamanujCommented:
The work of switch is to forward everything that it recieves, so it can be nothing wrong with it .. first of all you got to check whether this service is being provided by your ISP. and again check your public IP whether it is in the first place accessable from the internet or not. and if you think your SBS is creating troubles then instead of connecting it with RDC (Remote Desktop Connection) try any other computer from your network.
0
 
Keith AlabasterCommented:
The forwarding needs to be done on your Cisco 800 router. I assume this is your equipment?


 


0
 
MCPJoeCommented:
I agree wiht Keith, the port forward should be setup in your cisco router.  Don't bother getting another hardware device, it will just overcomplcate the situation.  I'm not a cisco expert so I don't really the line you would need to add to your cisco config to do the port forward, but thats definately where you want to set it.
0
 
Keith AlabasterCommented:
We can help with the Cisco once we know it is yours, not the ISP's :)
0
 
phram3zAuthor Commented:
Thanks guys for your suggestions, unfortunately tho i can't do anything with the Cisco as it's password protected and the only way around that would be with a console cable and i dont think my isp would want me doing that  ><
I managed to get my hands on a fvs318 netgear and was going to try today to put it behind the cisco and infront of the switch. I'll let you guys know how it went.
Cheers
phram3z
0
 
carl_legereCommented:
The ISP said the router doesn't perform nat, so where is your firewall and connection sharing occuring?  Does your server have a public IP address.
0
 
phram3zAuthor Commented:
Hey Carl, at the moment there isn't a firewall and the server doesn't have a public ip address, although i do know the public ip of the cisco, if that makes sense. For ex. i can access services on the server such as Outlook exchange mail by going to that ip.
0
 
Keith AlabasterCommented:
Are you running ISA server on your SBS install?
0
 
phram3zAuthor Commented:
hi guys, no im not running ISA atm.
I finally managed to get some time where ppl wouldn't be hassling me while I was configuring the netgear so i've just hooked it up behind the cisco and infront of the switch. Under the rules section of the netgear i've set it to forward port 3389 requests to the server (192.168.10.20). However, if i run the port tool at canyouseeme.org the connection on 3389 is refused.
Is there something i've overlooked ?

Thanks
phram3z
0
 
phram3zAuthor Commented:
Well as it so happens it seems my ISP is forwarding 2 ports 5631 & 5632. So i've managed to work around my problem by having Tight VNC as the remote access program and have set it to listen on those ports.

Thanks everyone for your help, much appreciated!!
phram3z
0
 
Keith AlabasterCommented:
Welcome. For info, PC Anywhere also usesthese two ports.

Regards
Keith
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 5
  • 4
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now