RDP to Server with the XG WAN having a private IP

Hello Davox,

Thank you for contacting the Sophos Community!

You would need to open the RDP Port on your upstream server, basically do a DNAT, and then do the same on the XG.

In the XG you can create the DNAT rule using the Server Access Assistance (DNAT), however, first you will need to create the RDP service

Go to System >> Hots and Services >> Services >> Add 

Name = RDP_3389

Type = TCP/UDP

Protocol = TCP 

Source Port = 1:65535

Destination Port = 3389

Once it is saved go to Rules and policies >> NAT rules >> Add NAT Rule >> Server Access Assistant (DNAT)

Internal IP = 192.168.206.10

Public IP address = #PortX = 192.168.1.55

Services = RDP_3389 (the one created)

External Source = Any

To confirm if the XG is receiving the communication from  your upstream Router, you can do a tcpdump on the XG by using the Advanced Shell (5>3)

# tcpdump -eni Port2 port 3389

Regards,

Thanks. The XG configuration i am fine with. On the wifi router, assuming my ISP address is 205.25.200.10.

What will the the rule on the router be to allow the translation to he XG.

 On my router i did. is that correct ?

205.25.200.10 port 3389 TCP

to 

192.168.1.55 port 3389 TCP

Hello Davox,

Thank you for the follow-up.

Yes, that should be fine. 

Regards,

I am still not able to RDP

I am still not able to RDP

Hello Davox1,

Did you do confirm if the XG is receiving the communication from your upstream device by doing the TCPdump?

Regards,