RDM Jump: Connect Client VPN on Jumphost

RDM Jump: Connect Client VPN on Jumphost

avatar

Hi there,

is it possible to configure the following:

I want to connect to a customers server via rdp. Before I can do that I need to connect a client VPN connection. But the client VPN connection need to be started on the jumphost - not on my workstation. How and where do I configure that?

my local workstation -> rdm local -> rdp to jumphost (via feature) -> open and dial in to client vpn -> continue rdp to external customer host

Thanks!

All Comments (5)

avatar

Hello,

Sorry for the late reply. I had in mind to test your scenario prior to respond but we are all working from home since we are in hard lockdown here in Quebec, Canada and it's not possible for me to reproduce your infrastructure.

That being said, your scenario should work. On your workstation, if you edit the JumpHost session and configure the VPN to connect on in the VPN section should allow you to perform your scenario. Could you give it a try?

Best regards,

Jeff Dagenais

avatar

Hello Jeff,

thanks for your reply. I give it a try and post the result later on.

avatar

Hi jeff,

if I edit the jumphost connection (inside my RDM which is installed on my workstation), it browses for VPN Clients on my local workstation and not on the jumphost (example cisco vpn-client). But that is exactly not what I want. We don't use customers client-vpn connection on our local workstations - we use it on our jumphosts (which are also marked as jumphost in RDM).

So if I want to connect to a customers maschine using rdp, today I go to my jumphost, start and login to the client-vpn and then open the rdp to the customer's maschine.

We hoped with using RDM it can be seamlessly like this:

1) I start the RDM Client on my local workstation (datasource is sql-enterprise by the way)
2) I go to the customers folder where I can find the connection to the customers maschine and double click it
3) the connection to the customers maschine uses the jump feature, so rdm connects first to the jumphost (jumphost runs the RDM agent)
4) on the jumphost it opens and connects the vpn-client automatically using the settings I configured in RDM VPN section
5) on the jumphost it connects seamlessly over rdp to the customers maschine which is now reachable over client-vpn

In other (I hope more simple) words we DONT WANT this:

local workstation -> client-vpn -> jumphost -> customers maschine

but we DO WANT this:

local workstation -> jumphost -> client-vpn -> customers maschine

Please exscuse my poor english but I hope you understand now what we want to achieve using rdm :)

avatar
local workstation -> jumphost -> client-vpn -> customers maschine


Should work, make sure you configure the VPN on the jump session not the jumphost session.

I don't have a VPN to test with but I set my session to start a custom VPN (aka notepad.exe) on the jump session and notepad was running within the jumphost not locally.

Best regards,

Stéfane Lavergne

avatar

Sample session (exported)

<?xml version="1.0"?>
<ArrayOfConnection>
  <Connection>
    <Url>10.0.1.2</Url>
    <ConnectionType>RDPConfigured</ConnectionType>
    <ID>a110f002-beb6-402e-95e3-cb5678145adb</ID>
    <Name>jumphost</Name>
    <OpenEmbedded>true</OpenEmbedded>
    <Stamp>9dc1d1d8-c219-448f-a42b-9343aa7bb3ae</Stamp>
    <MetaInformation>
      <IsJumpHost>true</IsJumpHost>
    </MetaInformation>
    <RDP>
      <KeyboardLayoutText>Default</KeyboardLayoutText>
    </RDP>
  </Connection>
  <Connection>
    <Url>10.0.1.1</Url>
    <ConnectionType>RDPConfigured</ConnectionType>
    <ID>cc02bdfc-3ba2-4d7a-8896-99101828b58f</ID>
    <Name>jump session with VPN (notepad)</Name>
    <OpenEmbedded>true</OpenEmbedded>
    <Stamp>80de11b4-ab81-4aa0-8503-3295befb5d10</Stamp>
    <JumpConnection>
      <ConnectionID>a110f002-beb6-402e-95e3-cb5678145adb</ConnectionID>
      <JumpType>LinkedConnection</JumpType>
    </JumpConnection>
    <RDP>
      <KeyboardLayoutText>Default</KeyboardLayoutText>
    </RDP>
    <VPN>
      <Application>Custom</Application>
      <AutoClose>false</AutoClose>
      <CloseMode>Manually</CloseMode>
      <Enabled>true</Enabled>
      <ExecutableFileName>C:\Windows\notepad.exe</ExecutableFileName>
      <Mode>AlwaysConnect</Mode>
      <Name>localhost</Name>
    </VPN>
  </Connection>
</ArrayOfConnection>


Stéfane Lavergne