# Remote access/ Behind a NAT **URL:** https://community.thinlinc.com/t/remote-access-behind-a-nat/577 **Category:** Community Support **Tags:** linux, thinlinc, tlserver, tlclient **Created:** [16 March 2023 21:21 UTC](https://community.thinlinc.com/t/remote-access-behind-a-nat/577 "2023-03-16T21:21:27Z") **Posts on this page:** 1 **Showing post:** 2
### Author: ![martin](https://dub1.discourse-cdn.com/flex005/user_avatar/community.thinlinc.com/martin/32/41_2.png) [@martin](https://community.thinlinc.com/u/martin) #### Post date: [22 March 2023 16:01 UTC](https://community.thinlinc.com/t/remote-access-behind-a-nat/577/2 "2023-03-22T16:01:10Z")
Hello @garrom, and welcome to the forum! First of, sorry for letting you wait this long for a response from us. I think the easiest way forward for you is to set up HOST\_ALIASES. This set up requires three steps to be taken. - 1. Configure HOST\_ALIASES in ~/.thinlinc/tlclient.conf - 1. Start an ssh tunnel from your laptop to your internal server (over the forwarded port in xfinity) - 1. Connect with ThinLinc client, utilizing step 1 and 2 1. Configure HOST\_ALIASES in ~/.thinlinc/tlclient.conf ```auto HOST_ALIASES=192.168.0.1:22=localhost:2222 ``` Replace `192.168.0.1` with the actual internal IP address of your Ubuntu server. Save tlclient.conf and exit 1. Before launching ThinLinc client, set up the ssh tunnel to your internal server from your laptop: ```auto ssh -L 2222:192.168.0.1:22 username@your.public.ip ``` Again, replace `192.168.0.1` with the actual internal IP address of your Ubuntu server. Also replace `your.public.ip` with the public ip address of your xfinity router. 1. Start ThinLinc Client. For the `Server:` field, you’ll enter the internal IP address of your Ubuntu server. This connection will now look up the HOST\_ALIAS parameter in tlclient.conf, and utilize the local tunnel on port 2222 to reach your internal server at. Kind regards, Martin --- _[View the full topic](https://community.thinlinc.com/t/remote-access-behind-a-nat/577)._