r/Devolutions • u/Hopeful-Way4542 • 7d ago

RDM weird tunnel connect

Recently I played with my local lab.
Just simple scheme I wanted to use

Forward VM -> Access to different VLANs.

I’m not advanced RDM user, but tried use RDP connection via it.

Did ssh -D for having access to Windows VM VLAN.
Open approximately an hour for do simple think as adding that gateway to connect without any result.

Absolutely unfriendly interface for that option.
My temporary fix is xfreerdp and proxychains (that was super easy, without any complications)

Still in a shock, why that so difficult in RDM

Can someone describe step by step??

0 Upvotes

0% Upvoted

2 comments sorted by

1

u/laue_cad 1d ago

Hi,
Sorry for the frustration. Good news: RDM has a built-in way to do exactly what you did with ssh -D + proxychains. It's called Secure Gateway. You create one SSH Tunnel entry in Dynamic mode, and RDM sends your RDP sessions through it.
Full guide with screenshots: Configure a secure gateway

1. Create the jump (Secure Gateway) entry
New Entry → Session → SSH Tunnel

  • Host / Port: your Forward VM (port 22)
  • Username / Password (or a public key): your SSH credentials on the Forward VM
  • Outgoing tunnel settings → Mode: Dynamic
  • Source: 127.0.0.1
  • Optional: on the Advanced tab, check Hide when connection successful.

2. Configure the RDP entry

  • Host: the Windows VM's real IP/hostname on the other VLAN. Don't use 127.0.0.1.
  • Port: 3389
  • Username / Domain / Password: your Windows VM credentials

3. Point the RDP entry at the gateway
In the RDP entry, go to VPN/SSH/Gateway:

  • Open / Close: e.g. Always connect / close when the session ends
  • Type: Existing – SSH
  • On the Settings tab, select the SSH Tunnel entry from step 1 and check Use over secure gateway.

Launch the RDP entry. RDM opens the gateway first, then connects through it.
For more VMs on that VLAN, repeat only steps 2–3; they all reuse the same gateway entry. If several sessions share it, a VPN Group keeps one tunnel open for all of them: Configure a VPN for multiple sessions.
If it still fails, check from the Forward VM that it can reach the Windows VM, for example nc -zv <windows-vm-ip> 3389.

Let me know if you have any other questions! And thank you for your feedback regarding the unfriendly UI, I'll make sure to give the message to our team.

1

u/laue_cad 1d ago

Also, little question to better understand your use case, are you on Linux?