make vnc behind a cisco router

[tomim]

I have a dsl connection and a cisco router. i’m going to make vnc on my pc.
I know that I should make ports 5800 and 5900 accesible on my router but I don’t
Know how?
Which commands i should use to make the vnc server from outside accessible?

thanks

 

[DanInRaleigh]

statically map the ports to inside IP address of machine hosting service..
...access-list allowing outside traffic into that port..
...and access-group applying access-list in the in direction



#ip nat inside source static tcp IP_inside_server 5800 interface Dialer1 5800
#ip nat inside source static tcp IP_inside_server 5900 interface Dialer1 5900

#access-list 100 permit tcp any host inside_ip_address eq 5800
#access-list 100 permit tcp any host inside_ip_address eq 5900

interface Dialer1
ip access-group 100 in

http://daniel-white.com

 

[tomim]

do i needany protocol(udp) and ports more ?

 

[DanInRaleigh]

..i havent used the vnc so i'm not totally sure about anything..

..but what i'm seeing is your main VNC server port is using TCP 5900.

...so open 5900 and see what happens..

...also i think you can change the port on the VNC application itself
...so you could have several VNC servers located in your lan accessible by different ports over WWW

http://www.cl.cam.ac.uk/research/dtg/attarchive/vnc/faq.html#q53

http://www.daniel-white.com

 

[tomim]

thanke you, it works now! i did the same configuration and
it works with the ports 5800, 5900.
regards

 

[foruns]

I, i need some help configuring vnc ports on router.

my actual configuration is:

interface ATM0
description == ADSL ==
no ip address
ip nat inside
ip virtual-reassembly
load-interval 30
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
pvc 0/35
pppoe max-sessions 1
pppoe-client dial-pool-number 1
!
!
interface Dialer1
mtu 1498
ip ddns update hostname xxxxx.dyndns.org
ip ddns update DynDNS host members.dyndns.org
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
load-interval 30
dialer pool 1
dialer-group 1
no cdp enable
ppp pap sent-username asxxxxx@xxx password xxxxxxxxxxx!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
no ip http server
no ip http secure-server
ip nat inside source list 99 interface Dialer1 overload
ip nat inside source static udp 192.168.0.2 13000 interface Dialer1 13000
ip nat inside source static tcp 192.168.0.2 13000 interface Dialer1 13000
ip nat inside source static udp 192.168.0.2 23273 interface Dialer1 23273
ip nat inside source static tcp 192.168.0.2 23273 interface Dialer1 23273
ip nat inside source static tcp 192.168.0.2 5900 interface Dialer1 5900
ip nat inside source static tcp 192.168.0.3 13500 interface Dialer1 13500
ip nat inside source static udp 192.168.0.3 13500 interface Dialer1 13500
!
access-list 99 permit 192.168.0.0 0.0.0.255
!



The dyndns updates is sucessfull. but when i try to access realvnc it doesnt work.

I put a configuration that i saw:

#ip nat inside source static tcp IP_inside_server 5900 interface Dialer1 5900


#access-list 100 permit tcp any host inside_ip_address eq 5900

interface Dialer1
ip access-group 100 in

----------

and if i put access group 100 in, my internet stops to work.

can anybody help me configuring vnc server ports on cisco?

tkx