Update: I now need a solution to this problem ASAP. I sort of understand that I could probably set something up in iptables
for NAT and port forwarding but I really don't know enough about the tool or its syntax to come up with my own rules.
- I have a machine with a static IP on my local network:
192.168.1.166
. (A Hyper-V VM running Debian 10) - The machine runs Cisco AnyConnect to connect to my work VPN.
This VPN client sets up a 2nd network interface so that I have two:
eth0
(my LAN), andcscotun0
- I want to be able to put
192.168.1.166
into the RDP client on my personal desktop and have it connect through the VM to the remote desktop at my work.
The only question I really need answered:
How can I route TCP & UDP connections on port 3389 from my personal desktop, though the VM, to the remote system at work?
I'm guessing that the VM needs to "masquerade" the RDP connection as if were coming from the VPN client which gets a dynamic IP on the work network, so I know that I need NAT. Is the masquerade
tool also necessary for that?
Original Question:
I need to use RDP over a Cisco AnyConnect full-tunnel VPN for work from home.
The IT department at my work hasn't configured the VPN server to support split-tunnel for just RDP, and I may find myself needing other network services at work anyways so I would like to work around using a full-tunnel connection. However, I don't want to use AnyConnect VPN client on my personal computer since I am under the impression that would route all of my internet traffic through the VPN as well.
I have set up a Debian 10 virtual machine that is running the VPN client. I want to have this VM masquerade as the remote RDP server on my LAN. That way I could avoid running the VPN client on my personal computer and just connect with the RDP client to the VM, which then forwards the RDP connection over the VPN to the actual RDP server.
So, how can I accomplish this?
I only have administrative access to:
- My Windows 10 desktop at home.
- My "proxy" VM
- My home router
- My Windows 10 desktop at work. (Although IT can block/undo any changes I make if they are a security risk)
I am currently using a combination of VNC and RDP to hop through the VM for remote desktop, but it is limited in resolution by the VM hypervisor and combining the disadvantages of both protocols.
anyconnect-linux64-4.6.01103-core-vpn-webdeploy-k9.sh
that my work provides to set up Cisco AnyConnect on linux. 100% certain the client is "AnyConnect".