Cannot run XP over WAN

I am having difficulty running Remote Desktop through my WAN. I am running
XP pro, and can access the host via a client on my LAN, but not over the WAN.
I have a Westell Wirespeed 2200 modem/router, and a Motorola WR850G wireless
router between the modem and the network. I have port 3389 forwarded from
the Westell to the Motorola, and from the Motorola to the Windows XP machine
on my LAN. I have port 3389 open in Windows XP, Remote Desktop enabled with
a designated user, and have even tried turning off all software firewalls
completely, as well as all virus and anti-spyware software. Still I cannot
get it to work. Clicking on canyouseeme.org and entering port 3389 still
generates an error that 3389 cannot be seen on my system. Terminal services
is started, and netstat -a shows that 3389 is listening. I'm at a loss as to
what to try next.

If the canyouseeme.org test fails it comes down to a port forwarding issue
on either the Westell or the router or both. You could try isolating
(between a problem with the Westell or the router forwarding) a bit by
connecting the PC directly to the Westell modem and see if you can get it to
work...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

"Mike Hardin" <Mike Hardin@discussions.microsoft.com> wrote in message
news:8341F946-4C81-4062-85E2-4CD23707E55E@microsoft.com...
>I am having difficulty running Remote Desktop through my WAN. I am running
> XP pro, and can access the host via a client on my LAN, but not over the
> WAN.
> I have a Westell Wirespeed 2200 modem/router, and a Motorola WR850G
> wireless
> router between the modem and the network. I have port 3389 forwarded from
> the Westell to the Motorola, and from the Motorola to the Windows XP
> machine
> on my LAN. I have port 3389 open in Windows XP, Remote Desktop enabled
> with
> a designated user, and have even tried turning off all software firewalls
> completely, as well as all virus and anti-spyware software. Still I
> cannot
> get it to work. Clicking on canyouseeme.org and entering port 3389 still
> generates an error that 3389 cannot be seen on my system. Terminal
> services
> is started, and netstat -a shows that 3389 is listening. I'm at a loss as
> to
> what to try next.

Additional help...

http://portforward.com/english/route...te_Desktop.htm

http://portforward.com/english/route...te_Desktop.htm
http://portforward.com/english/route...te_Desktop.htm

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

"Sooner Al [MVP]" <SoonerAl@somewhere.net.invalid> wrote in message
news:O58JZJ36FHA.2264@TK2MSFTNGP11.phx.gbl...
> If the canyouseeme.org test fails it comes down to a port forwarding issue
> on either the Westell or the router or both. You could try isolating
> (between a problem with the Westell or the router forwarding) a bit by
> connecting the PC directly to the Westell modem and see if you can get it
> to work...
>
> --
>
> Al Jarvi (MS-MVP Windows Networking)
>
> Please post *ALL* questions and replies to the news group for the mutual
> benefit of all of us...
> The MS-MVP Program - http://mvp.support.microsoft.com
> This posting is provided "AS IS" with no warranties, and confers no
> rights...
>
> "Mike Hardin" <Mike Hardin@discussions.microsoft.com> wrote in message
> news:8341F946-4C81-4062-85E2-4CD23707E55E@microsoft.com...
>>I am having difficulty running Remote Desktop through my WAN. I am
>>running
>> XP pro, and can access the host via a client on my LAN, but not over the
>> WAN.
>> I have a Westell Wirespeed 2200 modem/router, and a Motorola WR850G
>> wireless
>> router between the modem and the network. I have port 3389 forwarded
>> from
>> the Westell to the Motorola, and from the Motorola to the Windows XP
>> machine
>> on my LAN. I have port 3389 open in Windows XP, Remote Desktop enabled
>> with
>> a designated user, and have even tried turning off all software firewalls
>> completely, as well as all virus and anti-spyware software. Still I
>> cannot
>> get it to work. Clicking on canyouseeme.org and entering port 3389 still
>> generates an error that 3389 cannot be seen on my system. Terminal
>> services
>> is started, and netstat -a shows that 3389 is listening. I'm at a loss
>> as to
>> what to try next.
>
>

Thanks, I isolated it to the Westell as you suggested. Depending on where
you look for forwarding instructions for the Westell, it gives two different
methods for forwarding the ports. One says put 3389 for the base port, and
then the range above should reflect starting with 3389 and going up, for
example, if I wanted to open 3389 through 3399 i would enter

global range 1-10
base 3389

this makes sense, because if the last number of your global range and your
base are more than 65535, you will get an error that they add to more than
that.

Other manuals show entering global range 3389-3399
with base 3389

I had put it in the first way, and it wasn't forwarding. Instead of just
switching to the second, I put it in BOTH ways, and also added the UDP ports,
which I had not forwarded before. This may open up more ports than I wanted,
but only 3389 is forwarded once it gets to my motorola router, and I also
have a software firewall, so I'm not too concerned about open ports on the
Westell. Thanks for your help!

"Sooner Al [MVP]" wrote:

> Additional help...
>
> http://portforward.com/english/route...te_Desktop.htm
>
> http://portforward.com/english/route...te_Desktop.htm
> http://portforward.com/english/route...te_Desktop.htm
>
> --
>
> Al Jarvi (MS-MVP Windows Networking)
>
> Please post *ALL* questions and replies to the news group for the mutual
> benefit of all of us...
> The MS-MVP Program - http://mvp.support.microsoft.com
> This posting is provided "AS IS" with no warranties, and confers no
> rights...
>
> "Sooner Al [MVP]" <SoonerAl@somewhere.net.invalid> wrote in message
> news:O58JZJ36FHA.2264@TK2MSFTNGP11.phx.gbl...
> > If the canyouseeme.org test fails it comes down to a port forwarding issue
> > on either the Westell or the router or both. You could try isolating
> > (between a problem with the Westell or the router forwarding) a bit by
> > connecting the PC directly to the Westell modem and see if you can get it
> > to work...
> >
> > --
> >
> > Al Jarvi (MS-MVP Windows Networking)
> >
> > Please post *ALL* questions and replies to the news group for the mutual
> > benefit of all of us...
> > The MS-MVP Program - http://mvp.support.microsoft.com
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights...
> >
> > "Mike Hardin" <Mike Hardin@discussions.microsoft.com> wrote in message
> > news:8341F946-4C81-4062-85E2-4CD23707E55E@microsoft.com...
> >>I am having difficulty running Remote Desktop through my WAN. I am
> >>running
> >> XP pro, and can access the host via a client on my LAN, but not over the
> >> WAN.
> >> I have a Westell Wirespeed 2200 modem/router, and a Motorola WR850G
> >> wireless
> >> router between the modem and the network. I have port 3389 forwarded
> >> from
> >> the Westell to the Motorola, and from the Motorola to the Windows XP
> >> machine
> >> on my LAN. I have port 3389 open in Windows XP, Remote Desktop enabled
> >> with
> >> a designated user, and have even tried turning off all software firewalls
> >> completely, as well as all virus and anti-spyware software. Still I
> >> cannot
> >> get it to work. Clicking on canyouseeme.org and entering port 3389 still
> >> generates an error that 3389 cannot be seen on my system. Terminal
> >> services
> >> is started, and netstat -a shows that 3389 is listening. I'm at a loss
> >> as to
> >> what to try next.
> >
> >
>
>
>

You don't need UDP Port 3389 forwarded only TCP Port 3389.

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

"Mike Hardin" <MikeHardin@discussions.microsoft.com> wrote in message
newsA3A0B6C-E6A5-4426-8C3D-867EC877D1FC@microsoft.com...
> Thanks, I isolated it to the Westell as you suggested. Depending on where
> you look for forwarding instructions for the Westell, it gives two
> different
> methods for forwarding the ports. One says put 3389 for the base port,
> and
> then the range above should reflect starting with 3389 and going up, for
> example, if I wanted to open 3389 through 3399 i would enter
>
> global range 1-10
> base 3389
>
> this makes sense, because if the last number of your global range and your
> base are more than 65535, you will get an error that they add to more than
> that.
>
> Other manuals show entering global range 3389-3399
> with base 3389
>
> I had put it in the first way, and it wasn't forwarding. Instead of just
> switching to the second, I put it in BOTH ways, and also added the UDP
> ports,
> which I had not forwarded before. This may open up more ports than I
> wanted,
> but only 3389 is forwarded once it gets to my motorola router, and I also
> have a software firewall, so I'm not too concerned about open ports on the
> Westell. Thanks for your help!
>
> "Sooner Al [MVP]" wrote:
>
>> Additional help...
>>
>> http://portforward.com/english/route...te_Desktop.htm
>>
>> http://portforward.com/english/route...te_Desktop.htm
>> http://portforward.com/english/route...te_Desktop.htm
>>
>> --
>>
>> Al Jarvi (MS-MVP Windows Networking)
>>
>> Please post *ALL* questions and replies to the news group for the mutual
>> benefit of all of us...
>> The MS-MVP Program - http://mvp.support.microsoft.com
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights...
>>
>> "Sooner Al [MVP]" <SoonerAl@somewhere.net.invalid> wrote in message
>> news:O58JZJ36FHA.2264@TK2MSFTNGP11.phx.gbl...
>> > If the canyouseeme.org test fails it comes down to a port forwarding
>> > issue
>> > on either the Westell or the router or both. You could try isolating
>> > (between a problem with the Westell or the router forwarding) a bit by
>> > connecting the PC directly to the Westell modem and see if you can get
>> > it
>> > to work...
>> >
>> > --
>> >
>> > Al Jarvi (MS-MVP Windows Networking)
>> >
>> > Please post *ALL* questions and replies to the news group for the
>> > mutual
>> > benefit of all of us...
>> > The MS-MVP Program - http://mvp.support.microsoft.com
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights...
>> >
>> > "Mike Hardin" <Mike Hardin@discussions.microsoft.com> wrote in message
>> > news:8341F946-4C81-4062-85E2-4CD23707E55E@microsoft.com...
>> >>I am having difficulty running Remote Desktop through my WAN. I am
>> >>running
>> >> XP pro, and can access the host via a client on my LAN, but not over
>> >> the
>> >> WAN.
>> >> I have a Westell Wirespeed 2200 modem/router, and a Motorola WR850G
>> >> wireless
>> >> router between the modem and the network. I have port 3389 forwarded
>> >> from
>> >> the Westell to the Motorola, and from the Motorola to the Windows XP
>> >> machine
>> >> on my LAN. I have port 3389 open in Windows XP, Remote Desktop
>> >> enabled
>> >> with
>> >> a designated user, and have even tried turning off all software
>> >> firewalls
>> >> completely, as well as all virus and anti-spyware software. Still I
>> >> cannot
>> >> get it to work. Clicking on canyouseeme.org and entering port 3389
>> >> still
>> >> generates an error that 3389 cannot be seen on my system. Terminal
>> >> services
>> >> is started, and netstat -a shows that 3389 is listening. I'm at a
>> >> loss
>> >> as to
>> >> what to try next.
>> >
>> >
>>
>>
>>