Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to access the VMs without having to forward the remote port and VNC to the localhost? I'd like to be able to VNC into the KVM server and see the VMs display.

share|improve this question
up vote 9 down vote accepted

I found the answer after some searching and found the following in /etc/libvirt/qemu.conf

# VNC is configured to listen on by default.
# To make it listen on all public interfaces, uncomment
# this next option.
# NB, strong recommendation to enable TLS + x509 certificate
# verification when allowing public access
vnc_listen = ""

I uncommented the above line and restarted libvirtd to find that I was still not able to access VNC over the network. This time the culprit was iptables. On Centos, I used system-config-firewall-tui to allow VNC access.

share|improve this answer
Exactly what i was looking for. – Heiko Rupp Oct 9 '13 at 11:14

if you VNC to the KVM host, it means it should have an X server running (completely redundant thing to do on a hypervisor, but that's your choice). Since you already have a desktop, there's nothing to stop you from running virt-viewer or virt-manager to get access to a guest console directly. On the other hand, if the qemu-kvm VM is running with VNC support, you can simply connect to the VM's VNC console directly

share|improve this answer
I don't have an X server running on the KVM host. You can create VMs with vnc output forcing the hypervisor to create a vnc server to view the console of the VM. This is very useful in non-unixy OSes like Windows. But by default the vnc server listens only to localhost. – Shoan Oct 4 '11 at 11:53
This is exactly what I meant in the second part of my post. Guess you could have formulated the question a little better, to address the problem of the default VNC listener being pointed to localhost and not to the catchall. This is of course done for security reasons – dyasny Oct 4 '11 at 12:44
At time of asking, it wasn't obvious what I was looking for till I found the answer. You are right, that the question should have been better. – Shoan Oct 4 '11 at 13:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.