Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    RDP from outside to LAN through PIA

    Scheduled Pinned Locked Moved Firewalling
    6 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      cobrahead
      last edited by

      I apologize if this has been extensively covered, a quick search did not turn up a 'how-to' on this subject. There were some post where people tried this and had problems and then started asking questions.

      I would like to RDP to a machine on my LAN, which is behind Pf router, and is being tunneled through PIA. First off, what is considered the 'safest' way to do this? Is it some port forwarding/opening on pfsense and PIA? Or is it recommended to setup some sort of tunnel between my laptop on the outside and my desktop on the inside?

      Thanks

      "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

      1 Reply Last reply Reply Quote 0
      • DerelictD Offline
        Derelict LAYER 8 Netgate
        last edited by

        VPN

        https://doc.pfsense.org/index.php/OpenVPN_Remote_Access_Server

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • C Offline
          cobrahead
          last edited by

          Ok, will I need to configure anything with PIA? Or will this VPN connection bypass PIA servers and hit my ISP provided IP address?

          "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

          1 Reply Last reply Reply Quote 0
          • DerelictD Offline
            Derelict LAYER 8 Netgate
            last edited by

            It should work fine. You will connect from the outside directly to your WAN port and have access to your LAN. The states should take care of the reply traffic as long as you are establishing the connection to the host that is routed out the VPN. If you want that host to establish connections you'll need firewall rules.

            This is assuming you are using "don't pull routes" on the PIA client and policy routing specific traffic out to PIA.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • C Offline
              cobrahead
              last edited by

              I used this tutorial when I first got started about a year ago. https://forum.pfsense.org/index.php?topic=76015.0

              Then I started a thread to get advice on how to send only specific devices on my LAN through PIA, and the rest out through my ISP. There was some back and forth and I never got a clear answer. Nobody could say do this, this, and that. In the end I got it working, with help from several people and they seemed to not totally agree on how to do it.  I ended up following directions from mauroman33 the most. https://forum.pfsense.org/index.php?topic=116626.msg646514#msg646514

              "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

              1 Reply Last reply Reply Quote 0
              • DerelictD Offline
                Derelict LAYER 8 Netgate
                last edited by

                Probably because there is no one way to do things. And the particulars of any installation dictate what is required there.

                You should have no trouble with an OpenVPN remote access server in that case.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
                Privacy Policy · Cookie Policy