If your network doesn’t allow connections into the default VNC port 5901, you can tunnel it through SSH.
