That is Microsoft Windows XP connecting to MAC OS X Server machine.
| In general, we can split a remote, over internet, connection into about 4 phases :- | |
| Phase | Description |
|---|---|
| i. connection | the remote address is located on internet. |
| ii. authentication | password (and username) acceptance |
| iii. initialization | registration and initial phase |
| iv. running | operational phase |
So what have we got working?
From the site - http://www.portforward.com/ - and others, we understand, this uses port 5900, which we have enabled with the following line in the Router -
| Service
Name |
External
Port |
Protocol | Internal
Port |
|---|---|---|---|
| VPN |
5900 |
TCP/UDP |
5900 |
Although we have labelled this line in the router 'VPN', VNC does NOT actually use VPN. After connection, and authentication it uses Remote Frame Buffer (RFB) protocol to transfer the screen to the viewer, and the mouse and keyboard to the server.
This required some small code tweaks of the UltraVNC VNC Viewer software. The UltraVNC 'release' product was passing through phases i. and ii., and aborting for some reason on phase iii.
But after the changes, this is now working fine. And by changing the UltraVNC options, using an option called [ ] Tight, it seems I am now getting quite reasonable screen updates, thus this make this (almost) workable ... of course you still need some few seconds of PATIENCE before you see the screen update, but it is ok ...
The site - http://www.portforward.com/ - and others, show MSRD as using port 3389, and ARD as using ports 3283, 5900, and 5988, which we have enabled with the following lines in the Router -
| Service
Name |
External
Port |
Protocol | Internal
Port |
|---|---|---|---|
| RD1 |
3389 |
UDP |
3389 |
| RD |
3389 |
TCP |
3389 |
| VPN |
5900 |
TCP/UDP |
5900 |
| APR1 |
3283 |
TCP |
3283 |
| APR3 |
3283 |
UDP |
3283 |
| APR2 |
5988 |
TCP |
5988 |
While this 'connection' works perfectly and smoothly across my LAN between two XP machines, we are not getting any connection over internet.
The important point is that we are not even getting through Phase i. - the connection phase. For some reason MSRD can not even FIND the OS X Server on internet. What more to do or try here?
The site - http://www.portforward.com/ - does not specifically list VPN as a 'Service', but it does list 3 named VPN items, and each uses a different port. Shiva VPN shows 2233 UDP, Secure Planet VPN shows 9555 TCP, and Bay VPN shows 500 TCP and UDP. We have only enabled the 500 with the following line in the Router -
| Service
Name |
External
Port |
Protocol | Internal
Port |
|---|---|---|---|
| IPSEC |
500 |
TCP/UDP |
500 |
Windows XP has a setup procedure to establish a VPN connection. Sites like this - http://www.noc.ucf.edu/VPN/winxp_vpn.htm - or - http://www.publicvpn.com/support/WindowsXP.php - and others - show the steps required to create a new connection ...
Selecting this connection, and clicking 'connect' brings up a username and password dialog. Entering these, and the 'connection' passes through each of the phases correctly, and places a now connection icon in my system tray, but what to do with this VPN connection, now it is running?
Clicking on the system tray icon brings up a connection status window. This shows traffic is being sent and received between the two machines, and there is a [Disconnect] button.
| The details tab of this status window shows the following information: | |
| Device Name | WAN Miniport (PPTP) |
| Device Type | vpn |
| Server Type | PPP |
| Transports | TCP/IP |
| Authentication | MS CHAP V2 |
| Encryption | MPPE 128 |
| Compression | (none) |
| PPP multilink framing | Off |
| Server IP Address | 192.168.1.3 |
| Client IP address | 192.168.1.18 |
After being 'connected' for about 10 minutes, it show more that 30 KB sent, and 6 KB received, BUT THIS IS DOING WHAT?
WHAT APPLICATION CAN I USE THROUGH THIS TUNNEL?
Still many mysteries here ;=))
Another way to 'open' this connection, is to open a browser, and in the address line type - http://admin1/tsweb/ - then GO ... This brings up the same authentication dialog, and after entering the username and password the connection proceeds, but eventually the browser shows 'Page can not be displayed', and after a few minutes, the computer 'freezes' ...
It seems the server I am connecting to does not offer http services, and that is true in that that is not the intention of the server, and we have not configured it to act as a web server ... it seems in this circumstances Internet Explorer some how 'freezes' the machine, and only through a power re-boot can I get the machine back.
But, without using a browser, the connection seems stable, but what to do with such a neat VPN tunnel IS THE 64,000 DOLLAR QUESTION!