Cisco router RDP configuration

Hi EEs,

We have a Cisco router and want to be able to configure to access our server externally. We want to be able to RDP to the server anywhere we want externally.

How do we go about enabling/configuring RDP in the cisco router to achieve this? And what steps are required to have it working.....?

Thanks,
Goraek
LVL 2
goraekAsked:
Who is Participating?
 
woolnoirConnect With a Mentor Commented:
ip nat inside source static tcp internal_address 3389 external_address 3389 extendable

that will translate any traffic coming to the external interface on port 3389 to the internal IP port 3389

apologies for any slight typos... its early here :)
0
 
DMTechGrooupCommented:
You need port 3389 opened as you have stated in your tag.  But this wouldn't be a router issue but a firewall issue.  What firewall device are you using?
0
 
woolnoirCommented:
as DMTechGrooup has mentioned, this depends on your network configuration as to what device is responsible. Also this assumes that NAT has already been setup on the router, as in internal and experience interfaces defined.
0
IT Degree with Certifications Included

Aspire to become a network administrator, network security analyst, or computer and information systems manager? Make the most of your experience as an IT professional by earning your B.S. in Network Operations and Security.

 
goraekAuthor Commented:
we have a cisco router 1812, unsure if we have a firewall or not....
will need to review the infrastructure setup....
0
 
nblancpainConnect With a Mentor Commented:
To check if 1812 is configured as a firewall, check for 'ip inspect' commands in the config.
To test RDP, you may 'telnet 3389' to check if the port is reachable.
0
 
Pete LongTechnical ConsultantCommented:
- 3389 is a well known port Id get the server to listen on on a different port and forward that instead :)
http://www.petenetlive.com/KB/Article/0000166.htm
0
 
goraekAuthor Commented:
Port 3389 is not opened.

I can ping the IP externally, however not able to listen to 3389.

What command line should I perform in the cisco router?
0
 
nblancpainCommented:
You need to add it to the access-list or to the inspect-list.
Can you post your config ?
It sould look to something like :
access-list 100 permit tcp any 10.x.x.x eq 3389
0
 
woolnoirCommented:
Did you add my ip nat stuff that i posted above ?

ip nat inside source static tcp internal_address 3389 external_address 3389  ?

An access list like nblancpain mention is needed, but you need the nat definitions, i can see where you have confirmed adding them or not ?
0
 
goraekAuthor Commented:
hi woolnoir,

is that the exact command?

ip nat inside source static tcp 192.168.32.23 3389 201.143.23.34 3389

can please verify?
0
 
goraekAuthor Commented:
how do i add the access list? do i add it after i done the ip nat command?
0
 
nblancpainCommented:
Is there already an access-list ? it should be added to the one in place if applicable.
If not, this is not needed.

can you pls post a "show run interface xxx" where xxx is your external interface
same for external interface
+"show ip access-list"

for me to help on this part

Also pls post a "show ip nat translation" would help to verify if your nat rule was correctly applied.
0
 
ullas_unniConnect With a Mentor Commented:
Hi,

ip nat inside source static tcp 192.168.32.23 3389 201.143.23.34 3389

is all you need unless you have firewall configuration on your Router (CBAC or ZBF)
0
 
woolnoirCommented:
Hiya - confirmed, ip nat inside source static tcp 192.168.32.23 3389 201.143.23.34 3389. That does assume you have no access control lists. Try that confirm addition, and see if it helps.
0
 
goraekAuthor Commented:
sorry guys, not really sure what ya mean...

i log in to the cisco router then enter en to enable then type

ip nat inside source static tcp 192.168.32.23 3389 201.143.23.34 3389

is that right?

also should i check the settings such as the access list and interface first?

can someone please provide a step by step?
0
 
ullas_unniCommented:
goraek,

attach the show run output of your device.. it would really help troubleshoot the issue faster.
0
 
goraekAuthor Commented:
ok, i will try to get the output result for you..

so i enter 'sh run' or 'show run' and it will give me the info?
0
 
ullas_unniCommented:
both should give the same output
0
 
goraekAuthor Commented:
How do I output the result into text format?

For example I want to do sh run > c:\config.txt

It doesnt seem to like it, whats the command to output in cisco?
0
 
goraekAuthor Commented:
Anyone knows a way to output the cisco command to a txt file?
0
 
goraekAuthor Commented:
Worked.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.