Network Route problem

Hi,

I wonder if anyone could help me out of this simple network problem. I have successfully setup a vnc for remote login to a host (VNC host) on my private network. Also, on the same host i have successfully setup a dynamic DNS called "csuk.dnsl.com". I know the VNC works because I tested it within the same subnet and it works. I have added port forwarding to my router and that works too.

The problem;
I have 3 subnets One is the ADSL public address (SUBNET1) connect to my ISP and through this channel i get internet to my local network. The second subnet is the private network operated by my router which is 192.168.1.0 (SUBNET2) and my router IP is 192.168.254. The third subnet is a local network where all my PCs are connected to and the network address is 192.168.0.0 (SUBNET3).

In order to share my internet, my server has 2 NICs; NIC#1 has IP address 192.168.1.64 and NIC#2 has IP address 192.168.0.1.  So NIC#1 is connected directly to the router while NIC#2 is connected to an internal hub.

The VNC host with the VNC server installed has NIC#3 with IP address 192.168.0.136.

Now, if i remote connected from any of host within subnet3 e.g. 192.168.0.73 and use NIC#3 IP address, no problem it connects and all is well.

However, if i use the dynamic DNS address which is csuk.dnsl.com, it fails to connect. The only way I could get my VNC host to receive external remote connections is if i move it from subnet#3 to subnet#2, that is, connect vnc host directly to the router and NIC#3 assumes an IP 192.168.1.68. Then no problem external remote connection to vnc is possible. Now, this is a pain, inconvenient and impractible since it only limits me to justs 3 VNC connections. And i know that most ISP public services buried in private subnets.  So at this present time the vnc host is connected to subnet3 hence anyone who tries to connect will get a failed connection.

I hope someone can help me resolve this problem. What do i need to do.

Thanks
honest64Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KimputerCommented:
Who sets this 3 max VNC limit on NIC2? How come there's no limit on NIC3? I'm not aware that VNC server had this limit?
Anyway, even then, having multiple NICs on one server, and then having 2 on the same subnet is a nightmare to begin with.
Your server acts as the router, how did you NAT rule for VNC look like?
0
dhoffman_98Commented:
What you're looking to do is have external connections go to your first router, and then forward their connections to the inside. However, you then have another router before it gets to your third network where your destination is.

You need to enable port forwarding on your public facing router first, and have that router direct incoming connections on a particular port... and set the destination to be your internal router (192.168.1.254). Then on that router, do another port forwarding configuration that forwards the connection to your internal host on subnet 3.

Of course, this does require that the application is allowed to traverse a NAT connection... actually 2 NAT connections.
0
BigPapaGottiCommented:
What IP address are you forwarding the ports to?

I had to draw a diagram to get a better understanding and if I did this correctly I believe you need to add a route on your router to know how to get to the subnet of 192.168.0.XXX.

The command would look something like this (assuming you have a cisco router)

"ip route 192.168.0.0 255.255.255.0 192.168.1.64"

Is this what your network looks like?


ISP
|
|
Router
192.168.1.XXX
|
|
192.168.1.64
Server
192.168.0.1
|
|
|
192.168.0.136
VNC Server
0
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

Fred MarshallPrincipalCommented:
What happens if you connect VNC using the IP address instead of using DNS at all?
0
honest64Author Commented:
Kimputer, the 3 limit is because if I connect vnc host directly to the router which I don't and looking for a way around. My router has 5 ethernet ports. 1 already taken by NIC#1 and another taken by another concern leaves 3 vacant ports - 3 limit. So this is physical limit and not VNC limit hence i don want to go down this path.

I'm uisng a 2wire gateway router supplied by BT in the UK one of the biggest telcom company's in the UK
0
dhoffman_98Commented:
The 2wire gateway can do port forwarding.
That's what I am using, and my setup is very similar to yours.

See my earlier suggestion, that's how I do it.

I hit the external 2wire, and forward the port to the internal router, which in my case is a linux gateway with dual nics. Then that machine receives the incoming connection and again does port forwarding so I can connect to the internal machine.

Of course, this is all assuming that you MUST use VNC.
Another alternative, that is secure, and does not require you to reconfigure everything is to go get a free LogMeIn account at logmein.com and then install the client on the machine you want to connect to. Then from anywhere in the world, you log into logmein, and click on your machine, and you have a secure remote connection.
0
honest64Author Commented:
BigpapaGotti, yes your diagram is spot on. Attached is my port forwarding screen shot from my router interface.

I'm uisng a 2wire gateway router supplied by BT in the UK one of the biggest telcom company's in the UK. Does that change the route creation command line.

Second question is ; I need to add this route to the server which host NIC#1 and NIC#2?

Since my server is a Windows 2k8 32-bit should the new route command be
"route ADD 192.168.0.0 MASK 255.255.255.0 192.168.1.64 METRIC 1"

I await your reply.
portforward.jpg
0
BigPapaGottiCommented:
You should not need to add any routes to the server. You need to add a route on the router which my command will not work since it is not Cisco.

Based on your screen shot I am guessing you need to go to Settings>LAN and then create a static route there.
0
dhoffman_98Commented:
Yep your screen shot looks very much like mine. But go to the next tab (pinholes) and create an entry there that forwards incoming connections for a particular port to the destination of the internal router.

What is that second router? Can it do port forwarding?
0
honest64Author Commented:
dhoffman_98, yes i'm aware that I can use logmein or teamviewer but they are not options for me. There is no physical second router just a ICS (internet connection sharing) on subnet3.

BigPapaGotti, I will implement your suggestion on Monday, sounds logical and I know the static route screen. I will let you know the outcome.
0
honest64Author Commented:
Sorry for being a day late.

BigPapaGotti/dhoffman, I have added the new route suggest and the router accepted it but I still can not connect to the VNC server host from outside subnet3. I can not even connect whilst on subnet2. The only time when i can connect to the VNC server host is when i am on subnet3. See a few screen shots if it could help.

Still need your help.
new-route.jpg
tvnc-server-connections.jpg
0
Fred MarshallPrincipalCommented:
Are the firewall settings such that inter-subnet traffic such as that that's needed is allowed?  Is the scope set appropriately (i.e. subnets)?
0
KimputerCommented:
You should just go back to the working condition of 2 NICs.
You explained you have a 3 VNC connection limit that way, because you have 3 unused LAN ports on your router, but this is not the case. Unused LAN ports do not determine the VNC limits. The 3NICs, where 2 NICs are on the same subnet are causing massive unpredictable problems.
0
honest64Author Commented:
Fmarshall,  I set a firewall rule to let ports 5800 and 5900 through but still didn't work. The host PC for NIC#1 and NIC#2 is W2k8 (32-bit). I hope that answers your question.
0
honest64Author Commented:
I  couldn't get a solution to my problem because my host PC was on a private network 192.168.0.0. This network got internet through two NICs on nominted host using ICS. I had to move my private network over to the same private network to where my router was, then my port forwarding worked.

So i am closing this question and not awarding anyone any points.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
honest64Author Commented:
It was a compromise solution not what I hope would happen.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.