RESOLVED: 1 WindowsXP Host; Mult XP Guests for external VPN

[ryanjmurphy87]

We have about 12 machines in our server room taking up way too much space for the sole purpose of allowing remote-only users VPN into them. I was hoping to create VMs for these users instead of having them VPN into physical machines.

I didn't have any trouble created and cloning the VMs, nor joining our domain. So far, I have two virtual machines ready to go: Windows XP host, both guests are also Windows XP.

I can VPN and ping these VMs from the network, but I can't RDP or VPN into them.

I'm going to leave any mention of the second VM out for now, but for the first VM I have:
- In Virtualbox: Settings > Display > Remote Display > Enable Server (port 3389)
(as per documentation)
- On guest: Manage computer > Services > Started all Remote services
- On guest: Manage computer > Local Users and Groups > Groups > Added myself to the list of Remote Users
- I tried running "netstat -a", but don't see anything listed for port 3389.

No change. Still able to VNC and ping from within network, but can't RDP or VPN into the machines.

Unfortunately, this basically exhausts my knowledge of troubleshooting such an issue...I was hoping someone with more experience might be able to help.

[noteirak]

Are you trying to RDP on the guest and use the Remote Desktop Service of Windows or are you trying to access the console (screen) of the VM?
It looks like you've enabled the Remote Display in Virtualbox but not in the guest.

Can you do a "netstat -an" on both the guest and the host, and show the output please?

Finally, what mode do you use on the network interface of the guest? Bridged, NAT, Host-only?

[martyscholes]

I got confused by all of this as well. Enabling remote access in VB allows VB on the host to have an RDP session routed to the guest, which is wholly different than the guest itself providing an RDP session.

[ryanjmurphy87]

Are you trying to RDP on the guest and use the Remote Desktop Service of Windows or are you trying to access the console (screen) of the VM?
It looks like you've enabled the Remote Display in Virtualbox but not in the guest.

Can you do a "netstat -an" on both the guest and the host, and show the output please?

Finally, what mode do you use on the network interface of the guest? Bridged, NAT, Host-only?

Sorry, missed that: the network is set to Bridged network adapter.

And sorry for the confusion: I'm trying to VPN into the guests (I was just testing the RDP because VPN wasn't working while VNC was, to help isolate the issue's source). The goal is to have multiple users VPN into separate guest VMs located on the same host.

Host netstat -a:

Active Connections

Proto Local Address Foreign Address State
TCP pierce1562:epmap pierce1562.removeddomain:0 LISTENING
TCP pierce1562:microsoft-ds pierce1562.removeddomain:0 LISTENING
TCP pierce1562:1051 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:1052 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:2123 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:2701 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:3389 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:4265 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:5800 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:5900 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:8192 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:8193 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:8194 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:1043 localhost:1044 ESTABLISHED
TCP pierce1562:1044 localhost:1043 ESTABLISHED
TCP pierce1562:1045 localhost:1046 ESTABLISHED
TCP pierce1562:1046 localhost:1045 ESTABLISHED
TCP pierce1562:1075 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:1120 localhost:1121 ESTABLISHED
TCP pierce1562:1121 localhost:1120 ESTABLISHED
TCP pierce1562:1122 localhost:5939 ESTABLISHED
TCP pierce1562:1156 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:2138 localhost:2139 ESTABLISHED
TCP pierce1562:2139 localhost:2138 ESTABLISHED
TCP pierce1562:4080 localhost:4081 ESTABLISHED
TCP pierce1562:4081 localhost:4080 ESTABLISHED
TCP pierce1562:5152 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:5939 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:5939 localhost:1122 ESTABLISHED
TCP pierce1562:62066 pierce1562.removeddomain:0 LISTENING
TCP pierce1562:netbios-ssn pierce1562.removeddomain:0 LISTENING
TCP pierce1562:1050 pierce1562.removeddomain:8194 ESTABLISHED
TCP pierce1562:1052 pierce1562.removeddomain:1053 ESTABLISHED
TCP pierce1562:1053 pierce1562.removeddomain:1052 ESTABLISHED
TCP pierce1562:1204 franklin.removeddomain:1352 ESTABLISHED
TCP pierce1562:1243 franklin.removeddomain:1352 ESTABLISHED
TCP pierce1562:1256 a63.110.246.59.deploy.akamaitechnologies.co
m:htt
p CLOSE_WAIT
TCP pierce1562:1257 a65.197.244.210.deploy.akamaitechnologies.co
m:htt
p CLOSE_WAIT
TCP pierce1562:1747 stlouis.removeddomain:52571 TIME_WAIT
TCP pierce1562:1780 172.23.2.26:3306 TIME_WAIT
TCP pierce1562:1781 172.23.2.26:3306 TIME_WAIT
TCP pierce1562:1782 172.23.2.26:3306 TIME_WAIT
TCP pierce1562:1783 172.23.2.26:3306 TIME_WAIT
TCP pierce1562:2144 norfolk.removeddomain:microsoft-ds ESTABLISHED
TCP pierce1562:3339 as400.removeddomain:8475 ESTABLISHED
TCP pierce1562:3341 as400.removeddomain:8473 ESTABLISHED
TCP pierce1562:3342 as400.removeddomain:446 ESTABLISHED
TCP pierce1562:3886 as400.removeddomain:8475 ESTABLISHED
TCP pierce1562:3888 as400.removeddomain:8473 ESTABLISHED
TCP pierce1562:3889 as400.removeddomain:446 ESTABLISHED
TCP pierce1562:3892 pierce1562.removeddomain:4265 ESTABLISHED
TCP pierce1562:4060 stlouis.removeddomain:52571 ESTABLISHED
TCP pierce1562:4076 chicago.removeddomain:1533 ESTABLISHED
TCP pierce1562:4265 pierce1562.removeddomain:3892 ESTABLISHED
TCP pierce1562:4807 server15025.teamviewer.co
m:5938 ESTABLISHED
TCP pierce1562:4982 dallas.removeddomain:8194 ESTABLISHED
TCP pierce1562:5900 mars.removeddomain:49422 ESTABLISHED
TCP pierce1562:8194 pierce1562.removeddomain:1050 ESTABLISHED
TCP pierce1562:netbios-ssn pierce1562.removeddomain:0 LISTENING
UDP pierce1562:microsoft-ds *:*
UDP pierce1562:1054 *:*
UDP pierce1562:1055 *:*
UDP pierce1562:1125 *:*
UDP pierce1562:1126 *:*
UDP pierce1562:20830 *:*
UDP pierce1562:20831 *:*
UDP pierce1562:20832 *:*
UDP pierce1562:20833 *:*
UDP pierce1562:51235 *:*
UDP pierce1562:ntp *:*
UDP pierce1562:1025 *:*
UDP pierce1562:1069 *:*
UDP pierce1562:1140 *:*
UDP pierce1562:1608 *:*
UDP pierce1562:2130 *:*
UDP pierce1562:4479 *:*
UDP pierce1562:ntp *:*
UDP pierce1562:netbios-ns *:*
UDP pierce1562:netbios-dgm *:*
UDP pierce1562:ntp *:*
UDP pierce1562:netbios-ns *:*
UDP pierce1562:netbios-dgm *:*

Guest netstat -a:

Active Connections

Proto Local Address Foreign Address State
TCP piercevm1:epmap piercevm1.removeddomain:0 LISTENING
TCP piercevm1:microsoft-ds piercevm1.removeddomain:0 LISTENING
TCP piercevm1:5800 piercevm1.removeddomain:0 LISTENING
TCP piercevm1:5900 piercevm1.removeddomain:0 LISTENING
TCP piercevm1:1038 piercevm1.removeddomain:0 LISTENING
TCP piercevm1:5152 piercevm1.removeddomain:0 LISTENING
TCP piercevm1:netbios-ssn piercevm1.removeddomain:0 LISTENING
TCP piercevm1:1061 a23-59-192-60.deploy.akamaitechnologies.co
m:htt
ps CLOSE_WAIT
UDP piercevm1:microsoft-ds *:*
UDP piercevm1:isakmp *:*
UDP piercevm1:4500 *:*
UDP piercevm1:ntp *:*
UDP piercevm1:1025 *:*
UDP piercevm1:1042 *:*
UDP piercevm1:1900 *:*
UDP piercevm1:ntp *:*
UDP piercevm1:netbios-ns *:*
UDP piercevm1:netbios-dgm *:*
UDP piercevm1:1900 *:*

Anything involving VPNing or RDPing into the host would be fruitless in terms of the intent of the project, as the users must be able to VPN into the guests concurrently (and the guests are located on the same host). When I initially took the project, I thought all I would have to do is configure the network settings as Bridged and, once the machines were on the domain and visible to other machines on the network, simply set the user to VPN into them. I read through the documentation, but couldn't find anything directly relating to my goal with this project -- I greatly apologize for any confusion my lack of knowledge might cause and am very, very grateful for your patience and help.

[noteirak]

Maybe a silly question but did you disable your guest firewall or allowed the port into it ?

And could you please put a screenshot of the remote services status in the guest as well as a screenshot of the Remote tab in Computer Properties?

[ryanjmurphy87]

Maybe a silly question but did you disable your guest firewall or allowed the port into it ?

And could you please put a screenshot of the remote services status in the guest as well as a screenshot of the Remote tab in Computer Properties?

Nothing is a silly question when OP openly admits networking ignorance.
This is very embarrassing...after several hours of reading/troubleshooting and having done everything else referenced, I just hadn't enabled Remote access in Computer Properties.

Thank you so much!

[noteirak]

It's fixed, that's what matters