Connect to Home from outside

[Emdy]

Connect to Home (or Home-Office) from Outside (office) Location :

Legend :
Rtr = Rt = Router.
FW = Firewall. Like, Windows Firewall, ZoneAlarm, Outpost, etc. Most Router also have builtin firewall.
Mdm = Mod = MD = Modem (Modulator Demodulator Device).
Router = a regular Router . (NAT, PAT).
Router (with Builtin Modem) = Router(with Modem) = Rtr(w/Mdm).
Router (w/o Modem) = Router (without Builtin Modem) = Rtr(no-Mdm).
Inet = Internet.
IP = Internet Protocol.

•1　Office <---> Internet <---> Router (with Builtin Modem) <---> Home.
　　　　　　　　　　　　　　　192.168.1.1　　　　　　　　　　　192.168.1.3
configure your home computer 1st, 　goto its network adapter's Tcp/Ip properties / configuration window, allow it to obtain ip & dns & gateway IP automatically (through DHCP), 　then connect ur computer behind your router, 　then type in the "Command prompt" (cmd.exe) window, this : "ipconfig /all" (do not type the quote symbols), 　to find the gateway ip address. 　write down router gateway ip address. 　IP address (IPv4) have 4 groups of numbers divided with three "."(dot) symbols. 　if the gateway IP is 192.168.1.x (where "x" can be anything 1~254), 　then change your network adapter's IP address to a fixed ip by manually entering 192.168.1.3, (or just change the 4th group # starting from the left side of IP's number groups, keep it different than the gateway IP's 4th number), 　if gateway ip is 192.168.0.x, then specify 192.168.0.3 as static/fixed IP for your home computer. 　But, if "ipconfig /all" command shows no gateway ip, then try manually set the gateway ip to these commonly known gateway ip addresses 192.168.1.1, 192.168.1.100, 192.168.1.254, 192.168.0.1, 192.168.0.100, 192.168.0.254, 192.168.254.254, 192.168.100.1 . 　if u have to specify a dns server, keep it same as gateway ip for now. 　each time u change the gateway IP, try the ipconfig command again too. 　if u see the network interface adapter has connected properly, then write down that Router gateway IP, and change network interface adapter's IP to a static/fixed IP (see above). 　you should connect your wall tel ph line (or broadband / RF / cable line) behind your router's "Line/Tel/RJ11" port (or broadband / RF / cable port), 　and then connect one of the "local" or "1", "2", "3", "4" number port, or "LAN/RJ45" port, to your computer's Lan/Rj45 port. 　many router uses USB cable+port instead of CAT/LAN cable + RJ-45 port.

•2　Inet <--> Router <---v---> Port 5900~5910 <---v---> Home_1
　　　　　192.168.1.1　　^-----> 5800~5810 <-----^　　　192.168.1.3
in your home, go inside your Router's administration settings configuration pages, by typing in that gateway ip address in your web-browser, example http://192.168.1.1 . 　create port forwarding rules, to forward port 5800~5810 to that specific static ip 192.168.x.3 (replace the "x" with # 0 or 1 or match it to the 3rd group number of your gateway IP). 　also create another port forwarding rules for port 5900~5910 to that same ip/computer. 　we are using port range(s) here, instead of one or two port, so if you do setup a repeater in future, it will still function properly. 　goto its "status" or "connection info" type of pages to find dns server address, there should be two Dns server listed, write them down. 　keep those as pri(primary) and sec(secondary) dns address in ur net adapter's tcp/ip settings, and keep the 3rd dns same as as gateway ip, for now.

•3　Office <--> Inet <--> Modem <--> Router(w/o Modem) <--> Home.
　　　　　　　　　　　192.168.0.1　　　192.168.1.1　　　　192.168.1.3
if ur router & the (dsl/cable/broadband) modem are two separate unit device, 　then do this extra setup, 　otherwise skip this paragraph. 　find gateway ip of the modem also (see above steps, similar to finding Router's gateway IP : put ur net adapter in "auto" / dhcp mode 1st, then try the ipconfig command, 　if that doesn't work then try manually with different common gateway), 　write down modem gateway ip. 　use web-browser to go inside modem, example http://192.168.0.1 . 　create two port-forwarding rules (see the range above) inside the modem also, toward the LAN side's IP, 　not toward your computer's static ip. 　goto its "status" or "connection info" type of page to find its Lan side IP. 　also write down dns servers ip address from there. 　if modem have no port forwarding option/features, try to setup it to stay in "Bridge" mode. 　also try to keep gateway IP different for modem than the router, by having a bit different number in the 3rd group number (from left side) of gateway IP. 　if your router is 192.168.1.1 then change/keep modem's gateway ip to 192.168.0.1, the 3rd group # in the IP should be different. 　if u have setup the modem to be in "Bridge" mode, 　unplug modem, plug in router, if ur computer did not obtained ip automatically or connected properly, 　then change ur computer's network adapter's gateway to router's gateway and also set matching adapter (static) IP (where only the 4th group # should be different), 　then re-setup your Router again, enter your user dsl/broadband/ISP account #/email, password, (if needed also specify dns servers), 　in your router's WAN or "Internet" side configuration, 　this extra setup is needed for when modem is in "Bridge" mode Only, not otherwise. 　some routers cannot use the same protocol as the modem uses to verify account info with your ISP, 　so then fallback / change to previous settings in modem, 　get a better router, or better router with Builtin Modem. 　finally, connect wall tel ph line (or connect your broadband/RF cable line), behind your modem's "RJ11/Line/Tel/ Broadband/RF/Cable" port, 　then connect a Lan cable from behind the modem's "LAN/RJ45" port to the router's "WAN" port, 　then connect router's one of the local or 1, 2, 3, 4 number port to your home computer's Lan/RJ45 port. 　many router uses USB stuff, instead of LAN.

•4　Office <---> Inet <---> Router <---> FW <---> Home
now in ur home computer's M$ Win Firewall (FW), 　add "winvnc.exe" as an exceptions/allowed/approved program. 　also add (these four, or at least first two) 5900, 5800, 5901, 5901 port (TCP) as service ports. 　now go inside, "Advanced" configuration of the Lan/Wireless Connection Interface that your home computer uses, and again add (those four, or at least first two) ports 5900, 5800, 5901, 5901 (tcp) as a (inbound/server) service ports for internet user. 　even if Win Firewall is in Disabled state, you should still do this setup.

•5　now setup your 3rd party firewall (if u have any, like zonealarm, outpost, etc) also, 　allow the "winvnc.exe" to take inbound connection from internet, 　on those port range(s).

•6　Internet <---> Router <---> FW <---> Home <---> vnc-server (5901)
setup the vnc server (winvnc.exe) to listen to inbound connection on port 5900 or 5901.

•7　whatismy.com <---> Public IP <---> Internet <---> Home
if u know your home's internet connection's "Public" side IP address (goto website whatismyip.com), 　then Skip this paragraph, 　but keep your-self uptodate everyday before leaving home, 　know ur IP from that website.

　HostName <------------> DDNS-SP <----> Pub IP <---> Inet <--> Home
　myhome1.dyndns.org　　dyndns.org　78.47.118.186　　　　192.168.1.3
Otherwise goto "dyndns.org" or "no-ip.com" type of Dynamic DNS (DDNS) Service Provider (SP) website, 　register for a free account, create a host name (example : myhome1) for your home computer, write down (FQDN) your host's complete name along with its ending domain name portions, 　download their "client" software, install it, specify your full host name, 　let it keep on running on your home computer. 　that software will automatically connect/map/pair your chosen online "host" name with your home's dynamic/variable "Public" side IP address.

•8　Vnc-Vwr <--> Office <--> Inet <--> Rtr <--> FW <--> Home <--> Vnc-Srvr.
　　myhome1.dyndns.org::5901　　　　　　　　　　　　　　　　　　　　　5901
　　(or use ur public ip) 78.47.118.186::5901　　<-- just an example pub ip
in your office, use the full host/node name that you registered at dyndns type of website or service provider, 　(or use your home's inet connection's "Public" IP, if u know) 　in the vnc viewer (vncviewer.exe), 　and add the port number "::5900" or "::5901" at the end (do not use the quote symbols), 　then start / initiate the connection.

•9　Vnc-Srvr1 <--> 192.168.1.3 <--> Home1 <--> 5901 <---v--> Rtr <---> Inet.
　　Vnc-Srvr2 <--> 192.168.1.4 <--> Home2 <--> 5911 <---/
　　Vnc-Srvr3 <--> 192.168.1.5 <--> Home3 <--> 5921 <--^
if u have 2 (or more) computer in home you want to connect to, 　then both (or all computers) should be configured to have different static/fixed ip. 　only the 4th group number part (from left side) of the IP address should be different. 　in the router specify port-forwarding rule 5911 toward the 2nd computer IP (example, 192.168.1.4), 　forwaord port 5921 for the 3rd (example, 192.168.1.5), and so on. 　in the second computer's software firewall (both win & 3rd party) 　specify port 5911 as a service port for internet users. 　in firewall, also allow winvnc.exe to take inbound connection. 　then in vnc-viewer specify the public IP address or the host name (that you got from dyndns type of website) & add the port "::5911" at the end of it, 　to connect to the 2nd computer, (see above pattern, for other computers).

See also :
[topic=3859]Port forwarding NAT/router/firewall for any VNC flavor[/topic], by redge.
[topic=4660]how to remote control my home computer over Internet[/topic], by redge.

~ Emdy . 10-13-2008,Mon,1:00A,Gmt-08:00.

[Emdy]

Use winvnc as a service to keep it on Listening mode. Use password for connection verification and dsm plugin to encrypt the connection stream.
Use "Filter" module in between wall tel line and your Modem/Router's RJ11/Line port.

~ Emdy.

[Emdy]

Alternatively you can also use/setup a "repeater" in that Home1 (or Home-Office1) computer to connect to other computers in your LAN (Local Area Network) side.

~ Emdy.