This posts assumes that you already have a SSH tunnel in place. If you do not, read this first.

Once you have an SSH tunnel in place, adding services to the tunnel is very simple. I prefer tunneling the traffic instead of opening up numerous ports on my router firewall.


We are going to need Putty, and a VNC client. When it comes to VNC clients I do not really prefer one over the other. This one works fine for me.

Of course, you will also need a working SSH tunnel.


Configuring Putty and VNC are pretty straight forward. If you followed the SSH Tunnel from Windows post, then this will be familiar.


You should already have your Host Name (or IP Address) and Port filled under the Session category.

To add a service to tunnel through Putty we just need to add the port and destination to

SSH > Tunnels

You can find this in the left pane in Putty, labeled Category.

Here we will need to add a Source port, which can be whatever you want. Then a Destination which will need to be the internal IP address or hostname of the client you are trying to reach and the port your VNC server is listening on. In most cases the default port is 5900. If you changed the server to listen on a different port, you will need to adjust that here.

Last thing for Putty is to make sure that the Local radio button is selected, select Add and then select Open. You should now be asked to log in to your SSH server with your credentials. You will need to do this before connecting over VNC.

VNC Client

Next we need to establish our connection to our VNC server. Open your VNC viewer of choice and for the VNC server address you will enter localhost:8081, substiture 8081 for whatever port you used while configuring Putty.

Now connect.

That should get you prompted for your VNC password, if you have one, and allow you to manage your workstation remotely through a SSH tunnel.


All of this traffic is encrypted and no additional ports were required to be opened on your router’s firewall.

⤧  Next post Create a Microsoft Online shell to manage Office 365 ⤧  Previous post SSH Tunnel from Windows