Configuring RDP Access with an RV042

Hello,
I am trying to allow RDP access to my server through my RV042.
I added an access rule:
Action: Allow
Service: RDP [3389]
Source Interface: WAN1
Source: Any
Destination: 192.168.2.10
Time: Always
192.168.2.10 being the internal IP address of my server.
But, when I try to RDP in, I cannot connect.
Any suggestions as to what I am doing wrong?
Many thanks,
Chris

Hi Christopher, to add to Juan's post, did you create a port-forwarding rule?
If you want redirect the RDP service to a specific ip, you have to create this rule.
In order to do this, follow these instruction:
1. Go Firewall>Access rule
2. Click on Service Management> and configure each space like this.
Service name : RDP
Protocol:TCP
Port Range: 3389 to: 3389
Add to list > Save Settings > Exit
3. Configure each space like this
Action:Allow
Service: RDP [TCP/ 3389-3389]
Source IP:any
Destination IP: 192.168.2.10
4. Save settings
I hope you find this answer useful, if it was satisfactory for you, please mark the question as Answered.
Please rate post you consider useful.
Greetings,
Johnnatan Rodriguez Miranda.
Cisco network support engineer.

Similar Messages

I need helping!!! configuring RDP access to my local server from a remote location on my Cisco ASA 5505 Firewall.

I need helping configuring RDP access to my local server from a remote location on my Cisco ASA 5505 Firewall.
I have attempted to configure rdp access but it does not seem to be working for me Could I please ask someone to help me modify my current configuration to allow this? Please do step by step as I could use all the help I could get.
I need to allow the following IP addresses to have RDP access to my server:
66.237.238.193-66.237.238.222
69.195.249.177-69.195.249.190
69.65.80.240-69.65.80.249
My external WAN server info is - 99.89.69.333
The internal IP address of my server is - 192.168.6.2
The other server shows up as 99.89.69.334 but is working fine.
I already added one server for Static route and RDP but when I try to put in same commands it doesnt allow me to for this new one. Please take a look at my configuration file and give me the commands i need in order to put this through. Also please tell me if there are any bad/conflicting entries.
THE FOLLOWING IS MY CONFIGURATION FILE
Also I have modified IP information so that its not the ACTUAL ip info for my server/network etc... lol for security reasons of course
Also the bolded lines are the modifications I made but that arent working.
ASA Version 7.2(4)
hostname ciscoasa
domain-name default.domain.invalid
enable password DowJbZ7jrm5Nkm5B encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Vlan1
nameif inside
security-level 100
ip address 192.168.6.254 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address 99.89.69.233 255.255.255.248
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
ftp mode passive
dns server-group DefaultDNS
domain-name default.domain.invalid
object-group network EMRMC
network-object 10.1.2.0 255.255.255.0
network-object 192.168.10.0 255.255.255.0
network-object 192.168.11.0 255.255.255.0
network-object 172.16.0.0 255.255.0.0
network-object 192.168.9.0 255.255.255.0
object-group service RDP tcp
description RDP
port-object eq 3389
object-group service GMED tcp
description GMED
port-object eq 3390
object-group service MarsAccess tcp
description MarsAccess
port-object range pcanywhere-data 5632
object-group service MarsFTP tcp
description MarsFTP
port-object range ftp-data ftp
object-group service MarsSupportAppls tcp
description MarsSupportAppls
port-object eq 1972
object-group service MarsUpdatePort tcp
description MarsUpdatePort
port-object eq 7835
object-group service NM1503 tcp
description NM1503
port-object eq 1503
object-group service NM1720 tcp
description NM1720
port-object eq h323
object-group service NM1731 tcp
description NM1731
port-object eq 1731
object-group service NM389 tcp
description NM389
port-object eq ldap
object-group service NM522 tcp
description NM522
port-object eq 522
object-group service SSL tcp
description SSL
port-object eq https
object-group service rdp tcp
port-object eq 3389
access-list outside_1_cryptomap extended permit ip 192.168.6.0 255.255.255.0 object-group EMRMC
access-list inside_nat0_outbound extended permit ip 192.168.6.0 255.255.255.0 192.168.0.0 255.255.0.0
access-list inside_nat0_outbound extended permit ip 192.168.6.0 255.255.255.0 object-group EMRMC
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 host 99.89.69.334 eq pcanywhere-data
access-list outside_access_in extended permit udp 69.16.158.128 255.255.255.128 host 99.89.69.334 eq pcanywhere-status
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 host 99.89.69.334 object-group RDP
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq ftp
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq ldap
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq h323
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq telnet
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq www
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 host 99.89.69.334 object-group SSL
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 object-group NM522
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 object-group NM1731
access-list outside_access_in extended permit tcp 173.197.144.48 255.255.255.248 host 99.89.69.334 object-group RDP
access-list outside_access_in extended permit tcp any interface outside eq 3389
access-list outside_access_in extended permit tcp host 66.237.238.194 host 99.89.69.333
access-list outside_access_in extended permit tcp host 66.237.238.194 host 99.89.69.333 object-group rdp
access-list outside_access_in extended permit tcp any host 99.89.69.333 object-group rdp
access-list out_in extended permit tcp any host 192.168.6.2 eq 3389
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-524.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp 99.89.69.334 3389 192.168.6.1 3389 netmask 255.255.255.255
static (inside,outside) tcp interface 3389 192.168.6.2 3389 netmask 255.255.255.255
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 99.89.69.338 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http 192.168.6.0 255.255.255.0 inside
http 0.0.0.0 0.0.0.0 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set peer 68.156.148.5
crypto map outside_map 1 set transform-set ESP-3DES-MD5
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash md5
group 1
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
tunnel-group 68.156.148.5 type ipsec-l2l
tunnel-group 68.156.148.5 ipsec-attributes
pre-shared-key *
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
service-policy global_policy global
prompt hostname context
Cryptochecksum:f47dfb2cf91833f0366ff572eafefb1d
: end
ciscoasa(config-network)#

Unclear what did not work. In your original post you include said some commands were added but don't work:
static (inside,outside) tcp interface 3389 192.168.6.2 3389 netmask 255.255.255.255
and later you state you add another command that gets an error:
static (inside,outside) tcp 99.89.69.333 3389 192.168.6.2 3389 netmask 255.255.255.255
You also stated that 99.89.69.333 (actually 99.89.69.233, guessing from the rest of your config and other posts) is your WAN IP address.
The first static statement matches Cisco's documentation, which states that a static statement must use the 'interface' directive when you are trying to do static PAT utilizing the IP address of the interface. Since 99.89.69.333 is the assigned IP address of your WAN interface, that may explain why the second statement fails.
Any reason why you are using static PAT (including the port number 3389) instead of just skipping that directive? Static PAT usually makes sense when you need to change the TCP port number. In your example, you are not changing the TCP port 3389.

How do I configure clearcase access with JDEVELOPER 10.1.3.36.73

How do I configure Jdeveloper version 10.1.3.36.73 (the latest download) to use clearcase for scm? There is no clearcase plugin in the extensions directory.
I am currently evaluating Jdeveloper for use on a large project, and not having clearcase support is a dealbreaker. I have tried help->update, and it tells me that there are no updates (or, the port it uses is blocked by my company's firewall).
Anyone know where I can get the clearcase extension?
Thanks
Bill

Hi Bill,
Clearcase support is on the update center which can be difficult to access from behind a firewall with authentication. Do you know if this is the case? You can check the proxy settings in Tools -> Preferences : Web browser and Proxy.
If you still having trouble try http://www.oracle.com/technology/products/jdev/101/update/center.xml and downloading the clearcase extension for JDev 10.1.3.36.73 directly. Then you can install it by pointing Help -> Check for updates at the downloaded file.
Hope this helps,
Geoff

Configuring Mobile Access with single public ip in test environment

Hi to all, I'm trying to configure a test lab environment for Lync 2013. Actually I installed DC+FE in 2 separate servers and domain and off-domain pc (with exported CA chain ad certificate) works perfectly. My goal is now to configure access for mobiles
(iphone\ipad). In my country (Italy) Lync is not really diffused like in USA. Now my question. I've a lone public ip for testing, is it possible to make it works? What have i to install now? Edge? Reverse Proxy? Both?? I wanna have less resource possibile
implicated in this lab environment also if this means "not supported".
Thank you for the support.
A.

Edge server is needed when you need to support audio/video modality and push notification.
You can deploy Lync mobility service without Edge Server in a lab environment.
Lisa Zheng
TechNet Community Support

RDP access and licenses in cloud environment

friends i am trying to understand couple of things from licensing and access to virtual cloud server in a hoster environment and want to get your views if we are doing this correct or there is better way to do this.
1. we give windows based virtual cloud server to your clients. and most of the time they want to have RDP to this server with multi people sessions at a time. so do i have to configure terminal service on each VM which we provide to client or is there a
better way.. because think of this scenario if client starts with 10 CALs today and i take the license from Microsoft then in some time if they increase, it will be a problem for client to give the access to their VM to again install the extra RDP cals.
2. I am not sure if this can be answered here.. what is the right way to get the TS license from a SPLA point of view.. currently i have to call microsoft licensing team each time we get a client who wants RDP access but i knw this is not the right way i
guess..so whats the right way of doing this..
is there a way that all the VMs which we provide to our client can already have RDP access with unlimited user sessions because what i have seen with other cloud providers they dont have this issue of sessions we can have unlimited people doing RDP so definitely
i am doing some mistake somewhere. please if someone can share the right way.
Thanks
Happiness Always
Jatin

Hi Jatin,
Thank you for posting in Windows Server Forum.
To enable more than 2 simultaneous sessions you will need to purchase RDS Subscriber Access Licenses (SALs) through the Microsoft Services Provider Licensing Agreement (SPLA) for each user or device that will access your solution on Windows Azure.
Please check below article for more details.
Remote Desktop Services are now allowed on Windows Azure
Step-by-Step: Remote Desktop Services on Windows Azure
– A cost-effective alternative to Desktop as a Service ( Part 1 )
Hope it helps!
Thanks.
Dharmesh Solanki

How to configure the wifi access with specific time slot for kids?

how to configure the wifi access with specific time slot for kids?

Which model of AirPort base station do you have? Which version of OS X is your MacBook Pro running?
Wi-Fi access can be limited using the Timed Access feature of the AirPort routers. You would do so using the AirPort Utility.

Can cisco MSE(mobility service engine) configured to work with non-cisco access points?

I understand that access points can be configured to forwards all the probe requests to cisco wifi controller. cisco MSE(mobility service engine) gets the probes from wifi controller to find the location of the mobile devices.
My question, can cisco MSE(mobility service engine) be configured to work with non-cisco access points?

No and the reason why is the NMSP communication from the MSE to the WLC. Other vendors don't support this so there is no communication happening.
-Scott

How-To Delete Boot Camp Partition with Parallels Configure to Access It

Hi Everyone,
I would like to delete my boot camp partition from my MB to reclaim some space due to the increasing storage demand from iTunes library? (I need to find out what can I do when the library is getting larger than my HD too, but that's another topic...)
I also have Parellels Desktop configure to access the boot camp partition instead of creating its own virtual hard drive. I'd like to know if there's any problem with my parallels after I delete the boot camp hard drive? Will I have to reinstall my Windows XP OS again after deleting the partition?
Thank you,
Nacintosh520

Hi Eric
Are you saying that I have to reinstall my Windows XP OS all over again, with the patch and everything after deleting the BC partition? Is there a way to create a virtual hard drive from the BC partition of what I have? It's such a time-consuming process that I have to tweak the OS to the way I'd like it.
I wonder what solution will Apple offer when they offer more and more content, and space for each computer is limited. I did some research on this issue and it turns out that the solution is the set the option in iTunes to "Manually manage my music files" in the Preferences panel. I don't want to do this because if I set this option, my files won't be organized any more, and it's gonna be all over the places. But I guess I have to do this until Apple offer an option such as "Move my Podcasts file to _ external hard drive" to keep everything stay organized.
Thank you,
Nacintosh520

Secure RD Web Access with Azure MFA

We are keen to deploy RD Web Access for external users but can't find any guidance on securing it with Multi-Factor Authentication (MFA - formerly PhoneFactor).
We currently use MFA with our RD Gateway for users who connect directly to VMs via RDP but want to give other users access to RemoteApps via RD Web Access with the same two factor authentication.
Cheers for now
Russell

Hi,
Thank you for posting in Windows Server Forum.
I am afraid that still there is no direct MFA for RD Web but need to login through RD Gateway which can access as follow. A Remote Desktop login request to RD Gateway that includes Azure MFA looks like this:
1. User logs into RD Web Access and double clicks a RemoteApp (or desktop connection)
2. The user’ login credentials for the website are used to validate the user (Web SSO), so no need to give them again.
3. The user then gets an SMS text message on their smart device that provides them a 6 digit numeric code (the one-time password).
4. The user replies to the text message by inputting this 6 digit code and adding their unique pre-defined PIN to the end of the sequence – Azure MFA includes the option to require the user know a predefined unique PIN as well, so that replies to a text message
have to come from the user.
5. The user is authenticated, and the RemoteApp (or desktop connection) opens.
More information.
Step By Step – Using Windows Server 2012 R2 RD Gateway with Azure Multifactor Authentication
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Dharmesh,
I owe you an apology, I'd forgotten that when you access RD Web Access you're only downloading an RDP file which then uses the RD Gateway to connect the client to the RemoteApp. If we already have the RD Gateway in place and configured with MFA this will
produce the required result.
Sorry
Russell

ISE Admin Access with AD Credentials fails after upgrade 1.2.1 to 1.3.0

Hello,
After upgrading ISE VM from 1.2.1 to 1.3.0.876, I can't connect on ISE with AD Credentials (Invalid Username or Password). It worked find before upgrading to 1.3.
On another ISE VM in 1.3.0.876 version (w/o upgrade) with this kind of configuration, it's OK.
I have double check the Post-upgrade tasks (particularly rejoining Active Directory). Everything worked find after this upgrade except the admin access with AD credentials.
I don't use user certificate-based authentication for admin access. So I didn't execute application start ise safe CLI.
My 802.1x wireless users passed authentication with AD credentials. So the ISE had correctly join my AD.
I didn't find anything related to this admin access with AD credentials failure in the output of show logging application ise and show logging.
I don't find anything related to this in bug search on Cisco tools.
I tried to :
- update the SID of my Admin AD Group, the result is still the same.
- delete my admin access with AD credentials configuration then make this configuration again, but still the same error.
Any ideas on this ? Could I find elements in another log ?
Regards.

Dear Markus,
After logging as user "prdadm"
su - prdadm
bssltests% bash-3.00$ ls -a
.                            .dbenv_bssltests.sh-old      .sapenv_bssltests.sh         startdb.log
..                           .dbenv_bssltests.sh-old10    .sapenv_bssltests.sh-new     startsap_.log
.bash_history                .dbsrc_bssltests.csh         .sapenv_bssltests.sh-old10   startsap_DVEBMGS00.log
.cshrc                       .dbsrc_bssltests.sh          .sapsrc_bssltests.csh        startsap_DVEBMGS01.log
.dbenv_bssltests.csh         .login                       .sapsrc_bssltests.sh         stopdb.log
.dbenv_bssltests.csh-new     .profile                     dev_sapstart                 stopsap_.log
.dbenv_bssltests.csh-old     .sapenv_bssltests.csh        local.cshrc                  stopsap_DVEBMGS00.log
.dbenv_bssltests.csh-old10   .sapenv_bssltests.csh-new    local.login                  stopsap_DVEBMGS01.log
.dbenv_bssltests.sh          .sapenv_bssltests.csh-old    local.profile                trans.log
.dbenv_bssltests.sh-new      .sapenv_bssltests.csh-old10 sqlnet.log
bash-3.00$
bash-3.00$
I have changed envt settings in .dbenv_bssltests.csh & .dbenv_bssltests.sh
.sapenv_bssltests.sh & .sapenv_bssltests.csh [4 files]
Regards,
Ankita

How to configure MS-Access 2010 DB details on weblogc using DBAdapter

Hi Experts,
Can any one help me how to configure MS-Access 2010 DB details on weblogic 11g using DBAdapters.
If you provide step by step instuction, it is very usful to me.
If you have any screen shots you can any one please send a file to my mail ID:[email protected]
My Requirement:
I need to fetch 3 columns data (product code/ serial numer and serial status) from MS-Access 2010 and store it on oracle 11g, for that I have wrote a web service code and I need to make it automation. I don't have any IDEA, how to make this web serevice as automation (automation means, when ever new record stored in MS-Access data I need to fetch newly created record from MS-Access 2010 and send it to Oracle 11g)
Note: MS- Access 2010 present at vision system and Oracle 11g installed in linux server.
Thanks,
Phani

Hi,
I am also facing the same issue, not sure about what url to use. And also the login webservice doesn't work while I am testing using http://localhost:81/RTC/RTCService.asmx. It always throwing the following error
" Unable to cast COM object of type 'RTCLib.RTCClientClass' to interface type 'RTCLib.IRTCClient'. This operation failed because the QueryInterface call on the COM component for the interface with IID '{07829E45-9A34-408E-A011-BDDF13487CD1}' failed due to the following error: No such interface supported (Exception from HRESULT: 0x80004002 (E_NOINTERFACE))."
Is the current owc_lcs.zip support MS Office Communication Server 2007?
Please share the configuration step if anyone already integrated OCS 2007.
Thanks,
-Mukesh.
Edited by: user9127933 on Feb 19, 2010 4:05 AM

Boot data configuration missing or with errors

I have a Satelllite L870-15W, and no way to turn the system on.
All it says is "Toshiba" (the welcome screen) and then (after having pressed f8 or f9):
file: efi/micorsoft/boot/bcd,
status 0x0000001;
the boot configuration data for your or is missing or contains errors.
I have only recovery partition at D: but cannot access it. What shall I do?

Satellite L870-15W (PSKFNE-00700CHU) <- Hungarian version
Spec here too.
boot data configuration missing or with errors
It probably means the BCD is missing or corrupt.
To repair this, you need to access the recovery environment. Microsoft says Windows 8 will eventually take you there if it fails to boot many times. You can also get there using a System Repair Disc or a Windows 8 installation DVD like this downloadable one. You need the 64-bit disc.
It's possble this will also work on your Toshiba machine. Restart the computer by pressing the power button and immediately start tapping the F12 key until the Boot Menu appears. Using the arrow keys, select <HDD Recovery>.
WinRE looks like this. Select Troubleshoot and then Advanced options.
Lots of things to try. See KB2622803 for boot sector problems. The article assumes Windows Vista/7. The same fixes look different in Windows 8, but are all available.
If Automatic Repair (Startup Repair in 8.1) and System Restore fail, use the bootrec tool at the command prompt. This applies to Windows 8 also.
   Use the Bootrec.exe tool in the Windows Recovery Environment to troubleshoot and repair startup issu...
Don't give up until you have tried replacing the BCD itself as follows. (Sometimes the partition is not named "c" and you need to try another letter.)
   c:
   cd boot
   attrib bcd -s -h -r
   ren c:\boot\bcd bcd.old
   bootrec /RebuildBcd
-Jerry

Using POP access with Gmail

I just got a 3GS and I am trying to configure my Gmail with the Mail app in the manner that's best for me and I'm hitting a bit of a snag.
I know that the iPhone will "archive" emails in Gmail when using the Mail app and moves them into the All Mail folder but I find that a bit inconvenient.
I would like for the Mail app to work in a manner that pulls email from my Gmail account but leaves the original messages in the Webmail account as my wife and I share an email address. So I don't want to delete an email on my iPhone and have it deleted in Gmail.
It appears that if I enable POP in Gmail it will keep a copy of the downloaded messages in the Gmail account but what will occur if I delete a message on the iPhone?
Does anyone use iPhone/Gmail in this manner???
Thanks for the help!

Have you tried deleting a message from the phone to see what happens?
My similar issue is that after the iphone checks gmail POP, mail.app doesn't retrieve the emails. The emails are still marked unread at www.gmail.com.
I also want to be able to access my emails from different devices. I look forward to hearing solutions.

Configure Universal Access? what is it..

I have iPhone attached, and in lower portion of pane on computer from summary/options is button 'Configure Universal Access'.
What is this?
I tried every search option in iTune help menu, and they don't bother listing it.
I'm not going to experiment with unknowns, thanks'
Also the iTunes welcome to Itunes page is up, and again nothing there in sync iPhone video.

Philscbx wrote:
Someone at http://forums.macrumors.com/showthread.php?t=725859&highlight=configureuniversalaccess found the altered term of it.
Don't know how link got messed up, but this is corrected.
http://www.apple.com/iphone/iphone-3gs/accessibility.html
Its a bit more direct than a Google list / http://www.google.com/search?btnG=1&pws=0&q=iphoneconfigure+universalaccess
Message was edited by: Philscbx

Can't configure airport express with laptop after 10.5.6 update

I can't configure airport express with laptop after 10.5.6 update
the airport express is seen but can't access configuration screen, I get the spinning wheel forever.
Other computer gets to the configuration screen without problem.
And the airport utility describes the airport express like this: syAP.802.11format

I downloaded the airport utility and re-installed
and the problem was solved

Configuring RDP Access with an RV042

Similar Messages

Maybe you are looking for