Related
While I was looking for a *working* VPN client solution to work with a Cisco concentrator, I found a couple of potential solutions:
1. Bluefire VPN client (http://www.bluefiresecurity.com/)
2. AnthaVPN (http://www.anthavpn.com/webmaker/portal/wmlink_360)
Both claim to work with the Cisco concentrator (3000 series to be precise). Before I go ahead and install either/both on my MDA Pro (with Imate ROM), I was wondering if anyone had any good/bad things to say about the software?
Any help would be appreciated.
here's an update:
I went ahead and installed the BlueFire VPN client. In general, the installation was a breeze. The UI is also nice and elegant. The configuration isn't too obtruse, either, except I can't get it to work with my Cisco concentrator! It would authenticate with the server fine, but would always choke on "IKE phase 2", which I think is when the client and server negotiate on the IPSec security association (SA) parameters.
I've tried several combination of IPSec configuration on both client and server to no avail. The server throws the following error on every login attempt:
39019 03/29/2006 14:04:59.840 SEV=4 IKE/0 RPT=575 192.168.51.120
Group [***obfuscated***] User [***obfuscated***]
All IPSec SA proposals found unacceptable!
Anyone got any suggestions on how to get around this?
rukna said:
here's an update:
I went ahead and installed the BlueFire VPN client. In general, the installation was a breeze. The UI is also nice and elegant. The configuration isn't too obtruse, either, except I can't get it to work with my Cisco concentrator! It would authenticate with the server fine, but would always choke on "IKE phase 2", which I think is when the client and server negotiate on the IPSec security association (SA) parameters.
I've tried several combination of IPSec configuration on both client and server to no avail. The server throws the following error on every login attempt:
39019 03/29/2006 14:04:59.840 SEV=4 IKE/0 RPT=575 192.168.51.120
Group [***obfuscated***] User [***obfuscated***]
All IPSec SA proposals found unacceptable!
Anyone got any suggestions on how to get around this?
Click to expand...
Click to collapse
Did you uncheck PFS (Perfect forward secrecy) flag ? I can connect with this flag unchecked and compression algorithm=none
rukna said:
here's an update:
I went ahead and installed the BlueFire VPN client. In general, the installation was a breeze. The UI is also nice and elegant. The configuration isn't too obtruse, either, except I can't get it to work with my Cisco concentrator! It would authenticate with the server fine, but would always choke on "IKE phase 2", which I think is when the client and server negotiate on the IPSec security association (SA) parameters.
I've tried several combination of IPSec configuration on both client and server to no avail. The server throws the following error on every login attempt:
39019 03/29/2006 14:04:59.840 SEV=4 IKE/0 RPT=575 192.168.51.120
Group [***obfuscated***] User [***obfuscated***]
All IPSec SA proposals found unacceptable!
Anyone got any suggestions on how to get around this?
Click to expand...
Click to collapse
Did you uncheck PFS (Perfect forward secrecy) flag ? I can connect with this flag unchecked and compression algorithm=none
Did you try the VPN client from APANI
There is a trial version for CISCO VPN 3000 Series for PDA and Mac
http://www.apani.com/vpnclients.html
italos said:
Did you uncheck PFS (Perfect forward secrecy) flag ? I can connect with this flag unchecked and compression algorithm=none
Click to expand...
Click to collapse
I tried that already, didn't work. It may just be issues with the configuration on the concentrator. I'm going to play with it this weekend to see if I get anywhere. Thanks for the reply, nonetheless.
pierrelp1 said:
Did you try the VPN client from APANI
There is a trial version for CISCO VPN 3000 Series for PDA and Mac
http://www.apani.com/vpnclients.html
Click to expand...
Click to collapse
I filled out an eval request yesterday with Apani and got the instructions to download the client this morning. I'll install it over the weekend to see if it works "out of the box". Thanks for the suggestion, dude!
It appears that Apani doesn't really support the universal. Got the following from one of their support reps. Back to the drawing board, I guess.
The Client does not support the use of Windows Mobile 5. We currently
support Windows Mobile 2003 only.
Sincerely,
Janet
Apani Networks
[email protected]
714-674-1700
Click to expand...
Click to collapse
Bluefire VPN
be careful when installing Bluefire... It is a mess if you install it on the SD card..
it's a nuisance to uninstall it... all advice i got from "Bluefire support" was to try a hard reset.... most helpfull
(apparently this problem is well explained in their "product documentation"... but no solution has been found.. yet
NCP Secure Entry Client works
Have a working environment against a CISCO-PIX with NCP
http://www.ncp.de/english/services/testsoftware/index_entry.html
=) Georg
I got the BlueFire client to work finally! I had to enable the PFS (Perfect Forward Secracy) on the concentrator along with the encryption set to 1024 bits on my group profile.
After I got past that, I got the DirectPush client to work with my exchange server! Now I can confidently say this phone has been worth it for me!
OpenVPN
FYI - I just came across this openVPN port for windows mobile and thought it might be of interest for some of you guys:
http://www.ziggurat29.com/OVPNPPCAlpha/OVPNPPCAlpha.htm
Its still in the alpha stage and is continually being worked on by the author, David G. Lemley, III
I am in the same boat - need to use IPsec VPN to connect to our corporate Exchange server.
I am testing BlueFire 2.3.0 client for more than a week now. Overall it is very good - it does its job done. But after running it extensively for a week I discovered several issues with it, mostly cosmetic, but they are really annoying. Especially, if you want to have Direct Push. Those issues are:
1. "Save credentials for auto-reauthentication" does not work - you have to enter your password every time you connect.
2. It does not reconnect on its own, if it looses the connection (i.e. EDGE/GPRS goes down temporarily)
3. Detection of disconnect is not very reliable - sometimes when you loose signal and GPRS connection wants to disconnect, it cannot do it because of VPN still thinks it is connected and prevents GPRS from reconnecting.
4. Extensive use of on-screen push-buttons instead of soft-keys. And soft-keys are mapped to rarely used functions, like About - poor interface design. It woldn't be so bad, if the VPN client was not requiring user interaction to reconnect and authenticate...
5. After several minutes of standby, it brings its window on top of Today screen, kinda like letting user know that he better check his tunnel/connection, because it could be already disconnected... In most cases it is not true, because the unit wakes half the way up every several minutes to check email or sent a heat-beat packet, which keeps connection up (this only applies to GPRS/EDGE connection and not WiFi, unfortunatelly). But sometimes the VPN tunnel becomes dead, and you have to click "Disconnect", "Connect" and enter your password again.
Ok, that is my impression about BlueFire VPN client. Now the question is - is there any better IPsec client for PPC (WM5), which allows you to have Direct Push email over IPsec all day long without your intervention to check the connection status and reconnect manually?
Thanks for your time.
Im also trying to connect to our corporate network using a vpn client.
with my laptop i usually do this with the cisco vpn client and a very simple configuration.
My target is doing the same with the universal.
I tried Bluefire VPN, and AnthaVPN.
Eventhough i tried a lot of times, i couldn't make a connection with bluefire
With Antha, the results were better. I could connect , but after installing it, wifi stop working, and the active sync, sometimes doesnt recognize the device ( i saw in this forum somebody with exactly the same problem).
Is there anybody that use Antha in Universal without problems?
I checked the official web of Antha, and universal is not supported.
Do you know any other vpn software that works with Cisco?
Thanks
I recently purchased a tmobile mda and was trying to access my campus's network. But when I logged on, the only page I could view was about downloading a vpn client for multiple os's (but no windows mobile) to use the network.
Is there a vpn client for windows mobile?
Any help would be great.
Thanks!
There's a built-in client that will handle L2TP and PPTP VPNs. If you go into Settings/Connections and click "Edit my VPN servers" you can configure the client for your VPN. It's worth a try.
Tried that, didn't work... I decided to ask my University about their network, they said it was a cisco 3000 or something... And also informed me that "to their knowledge" the windows mobile 5 built in client isn't compatible...
I then went to the College of computer science help desk to see if some peers could help me. They said someone had bought a $100 program to be able to connect to the concentrator but didn't know who made it or where to get it.
Does anyone know of such a thing? Or a cheaper alternative?
AnthaVPN
I have found AnthaVPN wich is about from 40$ to 100$ depending what you need.
I'm trying also to open VPN without this IMHO too expensive solution. But if it's the only way - then I need to buy....
Maybe some kind of tunneling from own Linux-server (With Swan) might be the free solution....
I have been testing Bluefire Security's VPN and it works great, but my employer is using a Nortel system sio I cannot comment on the Cisco compatibility. It costs $79. I have also tries Antha but is cause problems enabling Wifi and Gprs.
John
Long time I could’t make connection with the built-in VPN client. After the latest ROM update from Qtek it works (I tested only PPTP). I can make VPN to SBS server and Windows XP. Also I can use Terminal Services true VPN connection.
The only thing I can’t get working is to access network shares (I tried GSFinder+ and NetUse).
Guka
Hi,
I'm currently on a HTC Trinity using Mary's 3.3.5 ROM and want to be able to connect to my universities WiFi network but to do so I need to use a VPN tunnel, anyone recommend a good PPC App that will allow me to connect to my universities VPN?
Cheers,
Mike
mikecsmith said:
Hi,
I'm currently on a HTC Trinity using Mary's 3.3.5 ROM and want to be able to connect to my universities WiFi network but to do so I need to use a VPN tunnel, anyone recommend a good PPC App that will allow me to connect to my universities VPN?
Cheers,
Mike
Click to expand...
Click to collapse
WM6 Pro includes both a PPTP & a L2TP/IPSec VPN client. This will work with most VPN routers & firewalls, however they may not be configured to support it. If you can connect using Windows 2000/XP's built-in PPTP or L2TP/IPSec VPN Client then you can almost certainly connect with WM6's.
A lot if VPN Routers & Firewalls are supplied with a 'free' Windows client that has the documentation geared around it. However most (if not all?) of these products will work with the native VPN client in Windows 2000+ (and WM5/6). I would try and stick with the L2TP/IPSec client but this requires some additional steps over setting up PPTP - on both the client & server (router). It is worth the extra steps in my opinion though.
Andy
I have the same problem ... I am not able to connect using the default VPN client ...
Hi,
There's a great review of vpn clients by Menneisyys in the Wiki. It's entitled:
'Access Your Desktop PC From Your Pocket PC!'
I'm sure you'll find it very useful because it would point you in the right direction as regards VPN tunnelling to your Uni's server.
kiwi992.
kiwi992 said:
Hi,
There's a great review of vpn clients by Menneisyys in the Wiki. It's entitled:
'Access Your Desktop PC From Your Pocket PC!'
I'm sure you'll find it very useful because it would point you in the right direction as regards VPN tunnelling to your Uni's server.
kiwi992.
Click to expand...
Click to collapse
HI!
Thank you for your reply, but this articles are about "Remote desktop" - like solutions for WM - based devises. Not for connecting to VPN.
Did anybody have had any success so far?
Any working 3-rd party VPN clients / Solutions?
Thank you in advance.
Dmitry.
====
keyword list: VPN; connection; VNP over WIFI; VPN WM5; VPN WM6; VPN problem; VPN client;
Hi,
You might find Manneisyys' review very long but if you take your time to read it, you'll see that he talks about the various VPN clients and how they compare. VNC, VNC+, etc are all mentioned there.
Just take your time to read it.
kiwi992.
Nice article, is the VPN working?
Do you have the WM6 VPN client working? Specifically the ActiveSync -> VPN -> MS Exchange functionality that was there under WM5?
kiwi992 said:
Hi,
You might find Manneisyys' review very long but if you take your time to read it, you'll see that he talks about the various VPN clients and how they compare. VNC, VNC+, etc are all mentioned there.
Just take your time to read it.
kiwi992.
Click to expand...
Click to collapse
Thank you for your answer!
But. Once again: the article talks about REMOTE CONTROL with the use of things like: RAdmin, MS RDP, etc.
This sofware - are remote desktops, so called VNC, not VPN clients in a classic way.
There is a little mess we get at the moment. (I've defenetelly got)
Let me describe in detail:
People need VPN here for many reasons, for me it is:
- to connect to some VPN through WIFI with our WM5 \ 6 device.
In my case- this is a public WIFI internet provider, which has a wifi coverage in the city.
Wifi is open PPTP. I need to type in a login \ pass on the web page I get, to start using the internet in current wifi session.
The ALTERNATIVE way to conect to internet - is to establish a VPN connection over the wifi.
I can successfully do in on the laptop.
With my UNI, WM5, AKU 3.5 - I can connect to VPN with the built-in VPN Client, but the first request to internet (via browser or Messaging send-receive) - drops my VPN connection, as it described here in the forum.
So: we need some software that can work.
I tried so far:
1. BlueFire VPN - just can't connect.
2. Antha VPN - just doesn't work.
I have heard thah on some other ROMs there is no problem with the built-in VPN client for PPTP, will try with some other WM6 ROMs later.
Any solution so far?
Thank you, kiwi992
Thanks to everybody!
Hi, im sorry for my bad english.
I have the same Problem. I search for an VPN tool. I have wm6. I know ther ist an VPN client but it doesn't work. To connect to the VPN in my University I need the L2TP/IPSec "safety andcertificate" but I don't kwon where I can load this.
thank's for helping
IronMaster1987 said:
Hi, im sorry for my bad english.
I have the same Problem. I search for an VPN tool. I have wm6. I know ther ist an VPN client but it doesn't work. To connect to the VPN in my University I need the L2TP/IPSec "safety andcertificate" but I don't kwon where I can load this.
thank's for helping
Click to expand...
Click to collapse
Hi! The L2TP/IPSec is a special story.
It is widely discussed here at forum: xda-developers > General discussion > Networking >
Search for *VPN* string on this forum.
This is the: http://forum.xda-developers.com/showthread.php?t=302520&page=2&highlight=*VPN* one of the success stories.
You need to obtain the certificate from the system administrators of your network. You may also have some "magic" URL in your campus network, where you can download the required certificate. This URL should point to the inranet web page of the web interface of the VPN server.
If your goal is to securely connect to some specific computer on the network, you should use one of the VNC programs: the VNC server part on the computer, and the VNC client on your device.
In any case - first check your certificate \ settings on, say, Windows XP laptop, connected through WIFI, first, then continue with the device.
Good luck!
Dmitry
VPN problems
I don't know if this issue is specific to my device (pharos gps 600 gps phone), or to windows mobile 6 which I'm running.
I can't connect to my vpn through wifi, the reason being is that I cannot associate any connections through the wifi card with the vpn info.
Wifi card doesn't show as a selectable modem in the modem tab next to the vpn tab in the vpn config. Only modems are cellular line modems, bluetooth, and one "hayes compatible com1" which is my usb I would guess.
Does anybody know how I might get around this?
I'm an IT guy and I just got into smartphone PPCs for the first time after a long-time hiatus from PDAs when I used to be a Palm owner. After my last palm, a LifeDrive, got stolen I moved to a Moto Q wich was a big dissapointment OS wise, and I never really got into modding it or anything, just set my POP3 e-mail server and used it like that for 2 years (draw back was that I didn't have contact sync nore internal e-mail sync that got handled by my exchange server). My contract with that Q expired and I made the move to a Sprint Mogul with WM 6.1 Pro and I'm NEVER LOOKING BACK!!!
Anyways, enough about me, this is my first contribution so I wanted to do the little intro.
I had searched around a bit about how to get ActiveSync to sync my company's Exchange server through PPTP VPN (we don't have it published with a certificate for an actual push config) but all I found was info on how to setup the VPN itself, being an IT guy that was like pointing out the obvious to me as I had already got that running and connecting but couldn't get anything but the OWA site opening in IE and Opera.
Basically what I figured out was that I had to program a work URL exception in the Connections control panel under the Advanced tab. There I added my exchange server's IP address as a URL and used that IP to program the server under ActiveSync with all the usual credentials. I can't configure it to receive as items arrive, instead I had to let the configuration run on a 10 minute schedule. Every time the schedule is up I see the VPN connecting pop up and it syncs PERFECTLY and disconnects the VPN. (It doesn't turn on my screen each time, it just pops up if I'm using it; but that pop up can be turned off if it gets to annoying).
I don't know if anyone else knew about this but I though I'd share this info as I searched for a few days and found nothing, ended up figuring this out myself. If this is new info I'll post more detailed configuration information for those who desire it.
BTW, this is working over the Data Plan and WiFi as well.
Wow. your a god...
I been trying to figure why it kept disconnecting the vpn when it synced up.
Adding the work url exception works perfect...
(Im using WM6.1 on a Samsung Omnia)
Many Many thanks!
No problem dude! I'm surprised no one else has really found this helpful. Glad I could help!
BTW, those exceptions work very well for internal web sites as well. I use it to log in to web-based management consoles such as Symantec's Mail Security for Exchange, Symantec Endpoint, basically if you got an internal website of some sort you can access it through VPN using a Work URL Exception.
I was looking for this info too, i would like more detailed configuration information about this.
Thanx in advance...
Roland hendriks
What part of the configuration are you having trouble with? Configuring the VPN, the Exchange Server or the URL Exception?
Thanks
I personally am thankful for your information. Even if none of the other 1000s of readers out there say anything...
Thank you for sharing your knowledge.
Tim
Glad I could help! I know I broke my head over this one during the first week of me having a WM phone. I figured it out thanks to the Fdc Soft Task Manager using the Netstat utility. It let me know exactly what the network stack of the phone was trying to do and the URL exclussion I just stumbled upon and reading what the page said it lead me to believe that it might be a routing table for configured "WORK" connections. And it worked.
During the past month or two of using my exchange like this and switching around ROMs and cooking my own ones now I've noticed that having TCP Data Reconnect and Transmission Retry settings in your registry set to high will cause Active Sync to take a long ass time for it to actually route communications through the VPN connection. I noticed this after using custom ROMs wich some have these settings increased to ensure communications go through but they raise connection timeouts way to much. On my own custom ROM I've set these to defaults (2 and 4 respectively) and Active Sync only takes about 1 minute to start syncing onces you hit sync while you wait for it to dial the cellular line and the VPN.
you talk about the vpn..
i think you are in the very small percentage of ppl who can get that to work.
i have the activesync set to manual and have tried the vpn type to both IPSec/L2TP and PPTP
w/o success..i always get a UN PW error which i know cant be so..
i set the host ip to what was shown from "whatsmyip"..
searching for quite awhile, i see thousands of ppl who cant get it to work and have
never found a reliable method that works for anyone but the person who posted it.
if you could back track a little and post how to do it, there are probly
thousands of ppl who would find it very useful and really appreciate it.
thanx
Well one thing is how to setup a WM device's VPN client to connect to your VPN server and another is actually configuring your VPN server. Do you have a working VPN setup in your corporate network already? This usually is setup by having a static IP assigned to your corporate internet connection and a firewall configured to allow VPN access with all the necessary traffic and authentication routes.
If you don't have a static IP in your office and use a lower cost DSL or Cable connection you aren't SOL, for these types of connections you can use a service like dyndns.org to dynamically upadate your dynamic IP into a static dns name like: mycompany.dyndns.org for example. This requires you to setup your firewall or ISP modem to communicate with dyndns.org to report the changes. Most firewalls come with this funcionality already built-in, but most of them also call them by different names so you'd have to look up your equipment's documentation on how to report a dynamic dns service.
I would be happy to help you setup your VPN correctly but its more practicall for me to help you setup a checklist on which type of VPN you want to setup (IPSec or PPTP) and what your corporate network's infrastructure looks like and let you know what to look for in google; there is PLENTY of very helpful information on the web on how to setup VPN but first you have to know what you need and how you are going to achieve it and then you'll know what to look for.
Each setup is very particular to the customer's needs and the network infrastructure that is setup and how much security you want to use (IPSec is a naturally secured VPN tunnel protocol while PPTP is not secured by nature but can be secured with a Radius server in your DMZ validating authentication in an encruypted manner to your Active Directory service).
What I posted above will work for an already existing and working PPTP VPN connection wich I already had running for years in my office and I regularly use with my laptop to connect to my exchange server while on the road or at home. What I posted above is what is need to get your WM device to connect to an already functioning PPTP VPN server.
Hope this helps. And if I'm to help you make a checklist I need a lot of information:
Type of ISP (static IP or dynamic IP)
Type/Brand of firewall device
How the devices are connected together (dumb modem or internet router from your ISP to your firewall's WAN port or a full blown router provided by your ISP wich is patched into your firewall's WAN port)
Internal network configuration (both AD and Exchange on same server (SBS) or separated)
What amount of security you are looking for.
Send me some PMs and maybe I could at least point you in the right direction.
nttdemented: I'm doing the PPTP shuffle at the moment, and wanted to pick your brains..
The basic connection is running fine - e.g. when I add 192.168.0.1 as an Exception and go to http://192.168.0.1 in Pocket IE the VPN fires up and I see the page just fine.
I've also added '10.6.1.8' as an exception, but if I go to that address in PIE, I don't see any network activity (using ethereal/tcpdump) on the 'ppp0' server interface (I use Ubuntu server's pptpd) ...
Can I assume that your Exchange server is hosted on the same machine as your PPTP server? Some MS SBS or similar?
Even if I configure an http proxy (on the 192.168.0.1 IP) I see no activity when I try the 10.6.1.8 address. :/
thanks so much!!
that i didn't find/read about the "exceptions" option in WM before...
Somehow, when i got my phone, i got it to work without this workaround, it just worked, out of the box, no exception setting required. (VPN settings + exchange server location were enough)
But yesterday, from the one moment to the next, it suddenly stopped working.
In my efforts to get it to work again i deleted the exchange settings, but doing that, I deleted all my contacts and my agenda! I was in big trouble because I really needed those , but after reading your post, i got it working again! my phone is synching "as we speak" and i'm very happy!
don't know how it worked before, don't know why it stopped working, all I know is, it's working now!
you made my day
Good to know!
Cheers!
I've since stopped using this method as we got around to publishing our Exchange server with an SSL certificate so I'm actually using SSL enabled ActiveSync push on my phone now.
Excuse me but perhaps you can help me too.
My problem is that I can get/sync my mails using WIFI.
If I connect thru GPRS, y go to send/receive and I get all the mails. If I'm on my office and connect thru WIFI to the work net I also get all the mails from the exchange server.
The problem is when I'm outside my office and connect to other wifi net and try to sync my mails. I have an HTC TOUCH CRUISE with WM 6.1 original from HTC without any flash.
Thanks in advance.
VPN connection doesn't always connect for ActiveSync synchronization?
I have had ActiveSync working with an Exchange server over a PPTP VPN connection for years now, but there has been one nagging issue I can't figure out. For the most part it works, but sometimes when ActiveSync tries to sync it will not make the VPN connection. There is only one connection listed when I tap on the icon on the notification bar - the phone's data connection. So in activesync, the icon with the arrows spins for a while but nothing synchronizes. I think it ends up saying "waiting for network" or something like that. It seems to always work when I manually hit "sync", but sometimes it fails on scheduled synchronizations.
Any idea why this happens sometimes?
oh...cheers...got my brain back...
The exceptions rule has almost fixed mine now. I'm getting mail but not through Activesync (just sits waiting for network).
Hi Leo users,
I would like to configure my Leo so as to use a VPN.
With my Laptop, I use a free VPN that we can find at http://www.itshidden.com.
And it works fine for surf. at home or on publicWiFi...
My problem is that I try and try to configure it on my Leo, but it's not working.
I saw a tutorial on IPhone3 and it seems to work !!! and it works on one XP computer and another one on Vista.
We can find an explanation "How to" for Windows XP at : http://www.itshidden.com/Support/VPNXP.html
We can find an explanation (in french, sorry) for IPhone3 at the end of http://free.korben.info/index.php/Configuration_d'une_connexion_PPTP_(VPN)#Sous_un_OS_mobile .
Please, would you like to explain me how to configure?
just some precision on what I do, and what can be done...
With Leo :
I select "Comm Manager"/Menu/Connexions
then "new VPN connexion"
Name : My VPN
Host Name: vpn.itshidden.com
User Name : my_login
password : my_password
Domain : -nil-
the pictures for Leo:
With Iphone :
Settings/Network/VPN
select for a new one
"PPTP" protocole
Description : My VPN
Server : vpn.itshidden.com
Account : my_login
password : my_password
and that's all.
pictures for IPhone :
So, I'm sure that it can be done on our Leo as it seems very simple on IPhone... but I'm not able to do it.
Please, may I have your help.
you can use a proxycab program to do it for you
civilization said:
you can use a proxycab program to do it for you
Click to expand...
Click to collapse
Hi civilization,
thanks for your answer.
I'm not sure to well understand.
I think "proxycab" is to use a proxy...
if it's that, this is not exactly what I expect because a proxy doesn't encrypt data as VPN do.
I want to use a VPN because public Network (or Network of a competitor) are not safe.
It's really easy to configure a VPN connexion on a XP or Vista laptop, but hard (for me) to configure it on Leo.
Hi all VPNers
I have unfortunate and official information for anyone hoping to use PPTP VPN connections. Apparently Microsoft implementation of MPPE is not compatible with microsoft's very own mobile OS...shocking.
A supplier who was dealing with MS told me:
> The VPN product doesn't work with Windows Mobile 6. Well, it kind of
> does, but it doesn't right now, and I think we're going to remove the
> setup instructions.
>
> Windows Mobile 6 doesn't actually support the encryption part of the
> tunnel. What you're reading is correct: Windows Mobile doesn't
> support Microsoft's own encryption protocol. That's why you're
> getting disconnected immediately when you try to browse.
Click to expand...
Click to collapse
LT2P/IPSEC work perfectly with WinMo 6+ however.
There are 2 ways around this:
1: Find a software client that works with Windows Mobile and supports PP2P MPPE (none exist that I am aware of)
2: Find a VPN supplier who will provide you with LT2P connections. Though in my experience those are quite rare and expensive
Hi jagnet,
Arghhh
like in your signature, I hope I might say "I reject your reality and substitute my own"...
but what you answer is incredible.
it's so easy to configure a VPN (PPTP) in a laptop (OS Windows, or Ubuntu, or Mac OS X), or a mobile like IPhone OS 3.
I can't imagine that it's not possible in our Windows Mobile 6.5 as we have an option to choose between IPSec/L2TP and PPTP !!!
see :
Arghhhh, Windows kill me.
did you find another solution, not too expensive?
have tried surfing the web on 3G network?
fredcom2 said:
Hi jagnet,
Arghhh
like in your signature, I hope I might say "I reject your reality and substitute my own"...
but what you answer is incredible.
it's so easy to configure a VPN (PPTP) in a laptop (OS Windows, or Ubuntu, or Mac OS X), or a mobile like IPhone OS 3.
I can't imagine that it's not possible in our Windows Mobile 6.5 as we have an option to choose between IPSec/L2TP and PPTP !!!
did you find another solution, not too expensive?
Click to expand...
Click to collapse
Yes you can select PPTP in WinMo but it still won't allow any data to pass on a PPTP connection with MPPE (i.e. 99% of routers, services and providers) A major oversight at the Windows Mobile Developers Lab.
Aaaaanyhow, I found perhaps a complex but free method which works if your don't mind some of your connection being insecure.
1: You'll need a spare server (I have too many at home )
2: Set that server up to act as a proxy
3: Set that server to connect to your VPN Provider
4: Setup your phone to use your Server as a Proxy
5: All data will then pass onto your proxy which will pass on to the VPN.
Another much more secure, though complex method is:
1: You'll need a spare server
2: Set that server up to act as a L2TP SERVER
3: Set that server to connect as a CLIENT to your VPN Provider
4: Setup your phone to connect to YOUR server with the L2TP connection (which works in WinMo and is more secure than PPTP anyway)
5: Your phone will then send all that to your server which will securely pass all data to your VPN provider.
Et voilà, your phone will pass all data through your VPN. Not secure but it works. If you need a more detailed walk-through let me know
You could also try any of the L2TP VPN providers but they're rare and usually more expensive.
What do mean by "a spare server"? how can i do that?
thanks
Hi jagnet,
thanks for your solutions.
the first one seems to be "unsecure" as datas are not encrypted between the phone and the spare server (and be sniffed).
the second seems good... but though complex.
In fact, I don't know how to create a spare server at home, I don't know the material that can and should be use... and yes I'm a noob and I need help;-)
arghh, why its not as easy as for a windows netbook... or for an Iphone
Hello all,
I also tried PPTP VPN connections via my HTC HD2 with WM 6.5.
The connection works fine:
- I can see on the W2K3 server, in the event log, that a new VPN client connected well (and I can also see the IP that has been attributed to the client)
- I can see in the active connection lists on the HTC HD2 the VPN connected
BUT, as soon as I try to transfer data, using VNC or Opera (for example), the VPN connection is closed!
What's wrong with this VPN implementation in WM6.5?
I'm really frustrated... Do you think it's linked to the unsupported PPTP MPPE?
Thanks for your advice.
Hello Mrhankry,
I am looking for a PPTP VPN connection at HD2.
I try here:
Settings / Connections / Connections / Manage existing connections
It doesnt have VPN Tab on this wm6.5....
It did have on wm6.1....
Can you explain where do you do this connection???
ROM version: 1.66.405.2
OS version: 5.2.21869
Manila version: 2.5.19211619.0
thanks,
Joao Claudio
mrhankey_ch said:
Hello all,
I also tried PPTP VPN connections via my HTC HD2 with WM 6.5.
The connection works fine:
- I can see on the W2K3 server, in the event log, that a new VPN client connected well (and I can also see the IP that has been attributed to the client)
- I can see in the active connection lists on the HTC HD2 the VPN connected
BUT, as soon as I try to transfer data, using VNC or Opera (for example), the VPN connection is closed!
What's wrong with this VPN implementation in WM6.5?
I'm really frustrated... Do you think it's linked to the unsupported PPTP MPPE?
Thanks for your advice.
Click to expand...
Click to collapse
It's so strange that I can use VPN over wifi, but it does not work over UMTS. Anyone has it work?
namth56 said:
It's so strange that I can use VPN over wifi, but it does not work over UMTS. Anyone has it work?
Click to expand...
Click to collapse
Normally unless you have a Business account from TMO you cannot use VPN , because you are NAT'd and behind their proxy server, now it seems in some places it will work, due to different configs at that data endpoint, but, for reliable VPN on TMO you need their Business internet/VPN package ..
watcher64 said:
Normally unless you have a Business account from TMO you cannot use VPN , because you are NAT'd and behind their proxy server, now it seems in some places it will work, due to different configs at that data endpoint, but, for reliable VPN on TMO you need their Business internet/VPN package ..
Click to expand...
Click to collapse
Hi watcher64,
I dont think it's a carrier problem, because when I use my PC with dial-up connection on my phone, the VPN client on my PC works.
I have tried some provider and got the same problem.
Thanks,