1. How To – Allow access of VNC server hosted on the
Internet from a specific LAN IP address
Assumption:
1. LAN IP address Range: 10.10.10.20 – 10.10.10.50
2. Allow access of VNC server only from 10.10.10.20 and block access from rest of the
LAN IP addresses.
To allow access of VNC server from 10.10.10.20 and block access from rest of the LAN IP
addresses, we have to drop the entire traffic from LAN to VNC server while allow VNC
traffic only from the specific host.
For this, create below given two firewall rules with the following parameters:
Note: Firewall Rule 1 should always precede Firewall rule 2
Rule 1. Create firewall rule to allow access from IP address 10.10.10.20
Parameters Value
Source Zone - LAN
Host – 10.10.10.20
Destination Zone - WAN
Host – VNC Server’s IP Address
Services/Service Group VNC services (if custom port for server)
Apply Schedule All the Time
Action Accept
Apply Source NAT MASQ
Rule 2. Create firewall to drop the traffic from LAN to VNC server
Parameters Value
Zone - LAN
Source
Host - Any Host
Zone – WAN
Destination
Host – VNC Server’s IP Address
Services/Service Group VNC Services (if custom port for server)
Apply Schedule All the Time
Action Drop
Document version – 1.0-25/08/2007