How to setup RDP port forwarding with and w/o VPN

[xplatinum 0]

I used to always have 3389 forwarded to access my PC from remote locations. So I had 3389 (WAN) forwarded to 3389 (LAN).

 

But now that I subscribed to AirVPN I would like to be able to reach my PC both with and without VPN. The VPN is configured at the PC level.

 

I saw the following notice on this site : "do NOT forward on your router the same ports you use on your listening services while connected to the VPN".

 

Does that mean I can no longer forward WAN 3389 to LAN 3389 in my router while using AVPN forwarding XXXX>3389?

 

I think the notice means that I can't use the same WAN port on both AVPN and router but I just want to make sure.

[zhang888 1066]

You can forward any available port, in this case you will have to forward a high port, for example 54321 to your WAN,

and on the router forward 54321 to LAN:3389.

[xplatinum 0]

You can forward any available port, in this case you will have to forward a high port, for example 54321 to your WAN,

and on the router forward 54321 to LAN:3389.

Why does it have to be a high port?

 

So the notice means I shouldn't do 3389>3389 in the router. WAN port needs to be different than the LAN port on the listening service.

 

So I would have 54321>3389 in the router for when I'm not connected to the VPN.

And have 2000>3389 in AVPN Port Forwarding for when I'm connected to the VPN.

 

And both forwarding can be enabled at the same time without any "correlation attacks" risks.

 

Correct?

[zhang888 1066]

Keep 3389>3389 for when you don't use a VPN, actually it's up to you.

You cannot use 3389 with AirVPN since this port is reserved, so choose any other high port

and forward it to LAN 3389 as well. There is no limit for how many ports you can forward to the same LAN 3389.

[xplatinum 0]

Alright that's perfect.

Keep 3389>3389 for when you don't use a VPN, actually it's up to you.

You cannot use 3389 with AirVPN since this port is reserved, so choose any other high port

and forward it to LAN 3389 as well. There is no limit for how many ports you can forward to the same LAN 3389.

 

Can you tell me a little more about the notice "do NOT forward on your router the same ports you use on your listening services while connected to the VPN" ?

 

If possible give me a concrete exemple of what I shouldn't be doing? I'm not exactly sure what it means in practice. Does it mean that if I choose port 2000 on AirVPN I shouldn't also use it on my router?

 

AVPN : 2000 > 3389

No VPN (router) : 2000 > 3389

 

Thanks again