ASA 8.x Import RDP Plug-in for use with WebVPN Configuration Example

Available Languages

Download Options

  • PDF     (224.2 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (73.2 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (75.0 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:August 31, 2007
Document ID:98667

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Introduction

This document describes how to import the Remote Desktop Protocol (RDP) plug-in for use with WebVPN.

Prerequisites

Requirements

Configure basic WebVPN before you attempt the procedures described in this document.

Components Used

This document uses an ASA 5510 that runs software version 8.0(2) and ASDM version 6.0(2). A Windows 2003 server is used to connect to the RDP plug-in via WebVPN. The client desktop has JRE 1.4.2_05-b04 installed. A TFTP server is used to import the plug-in through the command line.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to the Cisco Technical Tips Conventions for more information on document conventions.

Configure

In order to import and use the RDP plug-in, complete these steps:

Step 1. Obtain the RDP Java Plug-in

You can download the RDP plug-in, along with other WebVPN compatible plug-ins, from the Cisco Software Center. For more information about the RDP plug-in, refer to this URL: http://properjavardp.sourceforge.net/ leavingcisco.com

Note: The RDP plug-in provided on the Cisco website is optimized for JRE 1.4. You might experience usability problems if you use the RDP plug-in with other JRE releases. To resolve issues with the RDP plug-in, use the ssl server-version any command instead of the ssl server-version tlsv1-only command, which is used by default.

Step 2. Import the RDP Plug-in

In order to use the RDP plug-in with WebVPN, you must import the plug-in to the ASA.

ASDM Example

  1. In the ASDM application, click Configuration, and then click Remote Access VPN.

  2. Expand Clientless SSL VPN Access, expand Portal, and then choose Client-Server Plug-ins.

  3. Click Import.

    asa_import_rdp01.gif

  4. Select rdp from the Plug-in Name (Protocol) drop-down list.

  5. Click the Local computer radio button, and click Browse Local Files.

  6. Browse to the location in which you saved the RDP plug-in, and select the file.

  7. Click Import Now.

    This Information dialog box appears.

    asa_import_rdp02.gif

  8. Click OK.

Command-Line Example

This command-line example uses TFTP in order to import the WebVPN plug-in.

ciscoasa 
ciscoasa#import webvpn plug-in protocol rdp tftp://192.168.50.5/rdp-plugin.jar


!--- Use the import webvpn plug-in protocol command in order to import WebVPN !--- plug-ins. This example uses tftp in order to import the RDP plug-in.


!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ciscoasa#

Step 3. Define RDP Connection Parameters (Optional)

When you connect with the RDP plugin, you can define connection parameters within the URL.

In order to define RDP connection parameters within the URL, complete these steps:

  1. Within the VPN Service browser, select rdp:// from the Address drop-down list within your browser.

    asa_import_rdp05.gif

  2. Insert a forward slash (/) and question mark (?) after the host name or IP address, and separate individual parameters with the ampersand symbol (&) as shown in this image:

    asa_import_rdp03.gif

  3. Define the port parameter directly after the host name or IP address. This example uses port 5587.

    asa_import_rdp04.gif

For a full list of connection parameters, click Terminal Servers located on the left side of the VPN Service browser. This table lists some of the more common parameters:

WebVPN RDP Plug-in Variables
Parameter Argument Definition
console yes Enters the current console session if defined.
username string User name used to log in to the RDP server.
password string Password used to log in the RDP server (not recommended).
domain string Domain name used to log in to RDP server.
geometry widthxhieght Defines the height and width of the screen (for example: 800x600 or 1024x768).
port integer RDP port number. The default RDP port number is 3389.

Note: You can use RDP connection parameters in RDS bookmark entries as well. This image shows an example of an RDP bookmark entry:

asa_import_rdp06.gif

Step 4. Connect to an RDP Server

In order to connect to an RDP server, complete these steps:

  1. Establish a WebVPN session, and choose rdp:// from the Address drop-down list.

    asa_import_rdp07.gif

  2. Enter the IP address of the RDP server or the connection parameters you defined in Step 3, and click Browse.

    The RDP session appears in a new window.

    asa_import_rdp08.gif

Step 5. Verify the Configuration

Use these procedures in order to verify that the RDP plug-in was imported successfully.

  • Use the show import webvpn plug-in command in order to display the current WebVPN plug-ins, and verify rdp is listed in the ouput of the command.

  • Verify that rdp:// is available as a URI option in the Address drop-down list when you are connected to WebVPN.

Troubleshoot

Use these procedures in order to troubleshoot errors when you use the RDP plug-in:

  • Clear Browser Cache

    This procedure deletes all files that are currently stored in the cache of your browser.

    1. In Internet Explorer, choose Tools > Internet Options.

    2. In the Temporary Internet Files section, click the General tab, and then click Delete Files.

  • Clear JRE Cache

    This procedure deletes all files that are currently stored in the Java cache.

    1. In Windows, click Start, and choose Settings > Control Panel.

    2. In the Control Panel, double-click Java Plug-in.

    3. Click the Cache tab, and click Clear.

  • Uninstall/Reinstall JRE

    1. In Windows, click Start, and choose Settings > Control Panel > Add or Remove Programs.

    2. Choose the Java Runtime Environment program, and click Remove.

    3. Download the new JRE from the Java website (http://www.java.com/en/download/ leavingcisco.com), and install the new JRE.

      Note: The RDP plug-in runs best and is optimized for JRE 1.4.

  • Uninstall the RDP Plug-in

    If the RDP option is not listed as a URI in the address field when you are logged into WebVPN, uninstall and reinstall the RDP plug-in. In order to remove the RDP plug-in from WebVPN, complete one of these procedures:

    • WebVPN—Navigate to Configuration > Remote Access VPN > Clientless SSL VPN Access > Portal > Client-Server Plug-ins, select the RDP plug-in, and click Delete.

    • CLI—Use the revert webvpn plug-in rdp command in order to remove the plug-in.

Related Information

Revision History

Revision Publish Date Comments
1.0
31-Aug-2007
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products