You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Defaults like PubkeyAuthentication=yes, PasswordAuthentication=yes, ForwardAgent=yes, ForwardX11=yes, and ForwardX11Trusted=yes are omitted.
31
31
32
-
Once the connection is established, on Windows App or similar use pc name: `localhost:39001`. When prompted, the username will be 'u666' with corresponding password.
32
+
Once the connection is established, on Windows App or similar use pc name: `localhost:23001`. When prompted, the username will be 'u666' with corresponding password.
33
33
34
34
### SSH Configuration
35
35
@@ -52,7 +52,71 @@ host eidf666_rdp
52
52
ForwardAgent yes
53
53
ForwardX11 yes
54
54
ForwardX11Trusted yes
55
-
LocalForward 39001 localhost:3389
55
+
LocalForward 23001 localhost:3389
56
56
```
57
57
58
58
Can then use the command 'ssh eidf666_rdp' to create the connection.
59
+
60
+
## Using RDP Tunnelling to connect to VMs Remote Desktops via a RDP client
61
+
62
+
The Guacamole web interface makes it easy to connect to a remote desktop. This page details how to connect with a dedicated remote desktop client application, which can be useful for longer work. Dedicated remote desktop viewer programs allow better support for copy and pasting, file sharing and other features that may not be available on the web interface.
63
+
64
+
!!! warning "Prerequisites"
65
+
It is recommended to connect to the host machine via Guacamole **first** as this process is simpler see instructions in [Virtual Machines (VMs) and the EIDF Virtual Desktop Interface (VDI)](../../access/virtualmachines-vdi.md)
66
+
67
+
We refer to a **Host** machine as the machine with an RDP server running on it, within EIDF infrastructure this is the Virtual machine.
68
+
69
+
The **Client** machine is any machine that you are using to connect to the host machine via the RDP protocol and remote desktop viewing software.
70
+
71
+
!!! warning
72
+
Opening a remote connection means having full access to the host machines as though it was unlocked on your desk. You should not provide access credentials to other users you would not want using the machine or leave your client machine unattended and unlocked whilst connected as this risks the EIDF Virtual Machine being accessed by unauthorized users!
73
+
74
+
Using RDP tunnelling allows you to connect to a remote desktop machine securely through an SSH tunnel. This is particularly useful when accessing Virtual Desktop Infrastructure (VDI) machines on the EIDF.
75
+
76
+
!!! note
77
+
Port forwarding is needed to get through the EIDF gateway. Whilst some remote desktop viewers support gateways they do not always support all the required features for connection to the EIDF gateway (e.g. the Windows app for macOS does not support SSH keys)
78
+
79
+
Instructions specific to the operating system in use are given in the below sections. If you have your own preferred remote desktop viewing software or cannot use the below instructions for whatever reason then the key details to be configured are:
80
+
81
+
```text
82
+
PC or server name and port: localhost:23001
83
+
VDI account credentials: We recommend leaving this blank or as 'Ask when
84
+
required' until you have successfully connected to the machine. If prompted for
85
+
credentials you will need those which you have for VDI connections, the same as
86
+
in Guacamole
87
+
Protocol: RDP
88
+
Friendly Name: <ProjectID> Remote Connection via local port
89
+
```
90
+
91
+
### Windows
92
+
93
+
The Microsoft Windows documentation [Remote Desktop Connection](https://support.microsoft.com/en-gb/windows/how-to-use-remote-desktop-5fe128d5-8fb1-7a23-3b8a-41e636865e8c) is relevant from step 2 "_Use Remote Desktop to connect to the PC you set up_" onwards. The Remote Desktop Connection program is preinstalled on Windows machines.
94
+
95
+
1. Open the 'Remote Desktop Connection' program (`mstsc` in Run)
96
+
2. Input `localhost:<port forwarded to>` e.g. `localhost:23001` as the connection name
97
+
3. Click 'Connect'
98
+
4. Input VDI login credentials once prompted at the login screen
99
+
100
+
### macOS
101
+
102
+
These instructions use the [Microsoft Windows App](https://learn.microsoft.com/en-us/windows-app/) a free program available from the [Apple App Store](https://apps.apple.com/us/app/windows-app/id1295203466?mt=12).
103
+
104
+
1. Open the Windows App -> Click '+' -> Add PC
105
+
2. Input into 'PC Name' the forwarded port on the local machine `localhost:<port forwarded to>` e.g. `localhost:23001`
106
+
3. Also add a 'friendly name' to describe the device being connected to
107
+
4. Leave all other options as defaults at this stage
108
+
5. Click Add
109
+
6. Double-click on the newly created PC to connect
110
+
7. You will be prompted for the VDI username and password
111
+
112
+
### Linux
113
+
114
+
The following uses [Remmina](https://remmina.org), a stable Linux RDP client available via most package managers.
115
+
116
+
1. Install and open Remmina
117
+
2. Select "Add a new connection profile" in the top right for the connection profile window to appear
118
+
3. Ensure that 'Protocol' is set to RDP
119
+
4. In the 'Server' field input the localhost and forwarded port `localhost:<port forwarded to>` e.g. `localhost:23001`
120
+
5. Enter a 'Friendly Name' to describe the device being connected to
121
+
6. Leave the 'Username' and 'Password' fields blank at this stage. After your first successful connection, save your VDI credentials here for easier connection in the future
122
+
7. Click Save and Connect to start the remote desktop connection. You will be able to double-click on the friendly name in the main Remmina pane the next time you want to connect to the machine
0 commit comments