Setting up the RDP Listener

This section describes how to setup RDP listener. To learn first steps of creating listener, please follow Creating a listener section.


  1. Go to Settings tab and press the RDP button in the Protocol field.

  2. Select the TLS enabled option to enable encryption.

  3. Check the NLA enabled option for additional security.

../../_images/6-0-listener-rdp.png

Note

Security mode must match the security mode setting in the RDP server configuration.


In case the TLS enabled option is chosen, select Legacy crypto option to allow negotiating older encryption algorithms (DSA(1024), RSA(1024)) when establishing RDP connections.

  1. Select Announcement option to enable it’s field and type in the notification that will be presented to the user on the login screen.

  1. In the Connection mode section, select desired connection mode.

Mode: bastion

Note

  • User connects to the target host by including name along with account login on the target server and target server address in the login string, e.g. john_smith#root#192.168.0.110.

  • For details on bastion connection mode, refer to Connection modes topic.

  • Select bastion button in the Connection mode field.

  • Select the IP address from the Local address drop-down list and enter port number.

  • Select External address option to enable its field and enter an IP address (or FQDN name) along with the port number, under which Fudo can be accessed from outside the local network.

Note

  • The Local address drop-down list elements are IP address defined in the Network configuration menu (Network Interfaces Configuration) or labeled IP addresses (Labeled IP Addresses).

  • Selecting the Any option will result in Fudo listening on all configured IP addresses.

  • When a Listener is configured with User Access Gateway as the local address, only one connection option is displayed after login to User Access Gateway for clarity, and the connection uses the address from the browser’s address bar together with the listener’s configured port.

  • In case of cluster configuration, select a labeled IP address from the Local address drop-down list and make sure that other nodes have IP addresses assigned to this label. For more information refer to the Labeled IP Addresses topic.

Mode: proxy

Note

User connects to the target host by providing Fudo Enterprise IP address and port number which unambiguously identifies target host.

  • Select proxy button in the Connection mode field.

  • Select the the IP address from the Local address drop-down list and enter port number.

Note

  • The Local address drop-down list elements are IP address defined in the Network configuration menu (Network Interfaces Configuration) or labeled IP addresses (Labeled IP Addresses).

  • Selecting the Any option will result in Fudo listening on all configured IP addresses.

  • When a Listener is configured with User Access Gateway as the local address, only one connection option is displayed after login to User Access Gateway for clarity, and the connection uses the address from the browser’s address bar together with the listener’s configured port.

  • In case of cluster configuration, select a labeled IP address from the Local address drop-down list and make sure that other nodes have IP addresses assigned to this label. For more information refer to the Labeled IP Addresses topic.

  • Select External address option to enable its field and enter an IP address (or FQDN name) along with the port number, under which Fudo can be accessed from outside the local network.

Note

The RDP config domain field can be used to define a custom hostname shown in the RDP client title bar for connections started from the User Access Gateway using the native RDP client. For a full configuration example, refer to Custom RDP Hostname in the Session Title.

  1. In the Server certificate field, click Generate certificate to generate TLS certificate by choosing key algorithm and providing Common Name (server name where the certificate is installed), or click Upload to upload server certificate file with private key pasted at the end of the file. The rest of the required fields will be filled automatically. Allowed format of the server certificate file is PEM, although besides .pem, accepted file extensions are .txt and .cert.

../../_images/5-4-listener-http-cert.png

  1. Click Save.


Related topics: