connection to the remote computer ended

[tdubb123]

I setup a new security server in the dmz. from the dmz I can connect and bhring up a list of vms to connect to with the view client. but when i connect to the vm it tries to connect bring up the window and exits

The connection the the remote computer ended.

any idea?

[mittim12]

That sounds like one of your ports is blocked.   What version of View and what protocol are using?

[tdubb123]

i have opened up all access between the connection server and the security server. I am using 4.6 pcoip

[mittim12]

You would also need 4172 from the security server to the VDI desktop.   I would double check everything against this document, http://communities.vmware.com/docs/DOC-14974.   If everything is set per this document then PCOIP should work with no problems.  

[tdubb123]

are you saying I should open up 4172 to the entire vdi desktop network?

[eeg3]

If you want to use PCoIP, yes. It is not required for RDP. The guide that mittim12 posted is a great resource to follow.

[tdubb123]

from the view client in the public internet. I should open up 4172 to the entire public?

[markbenson]

The information you need is in step 3 here http://communities.vmware.com/docs/DOC-14974

Don't expose your virtual desktops directly to the Internet. The worked example of how to set this up is in the video (about 18 mins in).

Mark

[mittim12]

If you check out the document listed earlier it will give you all of the ports and which ways to allow access.

Also keep in mind that PCOIP is already encrypted.

Sent from my iPhone

[tdubb123]

i opened tcp/udp 4172 from the security server to the vdi desktop lan. but still cannot pcoip from dmz to my vdi desktop

[spgoeh]

Hi,

I have face the same problem before, after i configure the PCoIP security gateway URL in VMware view management console to https://<Public_IP>:4172 then it work perfectly.

Hope it help.

Thanks.

[tdubb123]

you cannot enter https in there.

I tried cheking the box USe PCoIP Secure gateway for pcOIP connections to desktop but now I cannot even pcoip from the same lan as the view connection server. It says connection timed out. same things from dmz.

when i uncheck that box I can pcoip from view connection server lan

[tdubb123]

where are the logs located?

[spgoeh]

Hi,

My mistake, is only IP and port number.

What IP you assign to PCoIP secure gateway is external/internal IP?

[tdubb123]

its dmz ip

[npeter]

Where did you set up PCoIP ExternalURL with dmz ip in Admin UI? for connection server entry or Security server entry?

It should be for security server entry. Leave the connection server PCoIP ExternalURL entry with its own ip:4172.

Also make sure you have firewall rules set as mentioned in the doc shared above.

-noble

[tdubb123]

yes I changed it on the vcs to its own ip and the security server to its dmz ip. but still cannot connect from dmz. it brings up the window and dies

[npeter]

Do you have these firewall rules in place ?

Client to Security/Connection Server

HTTP(S) TCP 80 /443 from View Client to View Security Server.

TCP 4172 from View Client to View Security Server.

UDP 4172 in both directions

Security/Connection Server to Agents

TCP 4172 from View Security Server to View Agents.

UDP 4172 in both directions

-noble

[tdubb123]

since client and security server are on the same dmz net, there is no firewall between them.

I allowed all traffice from security server to view connection server. I verified that it works by telnetting to the ports and they di respond

for outbound udp from vm to outbound I am not sure. how can i test this?

In the vdm log on the client

I see this

error raising port: unable to connect to: ip of the vdi vm:4172

[npeter]

That error indicated client cannot connect to view desktop vm for pcoip connection.

->I allowed all traffice from security server to view connection server. I  verified that it works by telnetting to the ports and they di respond

You should allow traffic on 4172  from/to security server from view desktop vm.

Also you should enable PCoIP Secure Gateway option. as Mark Benson pointed out below

Message was edited by: npeter