WiFi + VPN + ActiveSync / Internet Explorer - Networking

Hi all !
look next post for solution
I've been trying to get this thing to work for ages (on both WM5 and WM6) but have been totally unsuccessfull. So far I cannot get the VPN to be dialed over WiFi (!!!).
The idea is to log on a public WiFi hotspot (behind nat) and to be able to "dial" a VPN connection back to my office via PPTP (as it works reliably behind nat) and use that connection for ActiveSync and other needs.
I tried following this howto: http://kb.iu.edu/data/atcn.html
The idea being here is to use "Work Connection" which allows VPN for everything and direct all connections to "work" with an "exception" rule (*.*/*).
Here's a brief summary of the things I did:
1. Create a "dummy" internet connection (My ISP) and select it as the "internet connection" in "connections"
2. Create the "real" connection (My Work) and setup the VPN server with username and password (tested and working with XP). Type PPTP, the rest of the options are default (excluding compression and header compression which are disabled).
3. The "My Work" connection is set as default for "programs that automatically connect to a private network".
4. Create a rule for "exception for intranet addresses" under the "Advanced" tab in Connection settings. Add "*" and "*.*/*" to the URLs which are supposed to use the Work connection (and VPN).
5. Under the "network adapter" settings, select "My network adapter connects to The Internet".
Result: Explorer and ActiveSync don't even try to dial the VPN connection (i.e.... the firewall logs show no activity from the PDA).
It seems that the exceptions is never used, and also that ActiveSync (which is supposed to dial the work + Vpn connection) ignores it completely.
Traceroute/pings (from vxUtil) work to the VPN server. The WiFi connection can be used to surf the internet, so that works too. The VPN server accepts connections from a notebook connected to the same wifi (and it's outlooks syncs properly to the exchange server in the office). I have the same behaviour with both WM5 and WM6 on a Tytn and a Universal...
What am I missing???
Thanks for helping.

Solved.
Oops... the solutions was rather simple and embarassing.
The problem lies in the way WM5 handles the Wireless Profiles. Once you connect a WiFi card to an AP a "profile" is saved for future use. The profile contains the WEP/WPA credentials and the type of network: being either work or internet.
This is where the solution lies: You cannot change the type of network once you save the profile. WM5 (and WM6 as long as I know) remembers the work/internet status but never shows it in any screen.
If the selected type was "WORK" then the VPN is never dialed (because we're already in the WORK network). To get the VPN to be dialed you must select the "internet" network type.
What beats me is:
1. Why you cannot change the type of network (instead of having to delete and recreate the profile.
2. The "network card type" setting in the "network adapters page" is not used for WiFi connections, because it's always overwritten by the WiFi profile.
We have 1 setting that never works and 1 setting that works but which is never shown and cannot be changed.
Beats me!

Related

What is difference between Internet+Work? And VPN?

I have installed the Sandisk WIFI on my XDAII for internet and network (Resco Explorer). All is connected to my Wi-fi ADSL Modem/Router with a network cable to my PC. It all works fine.
I do have two questions, just to make myself sure:
Settings > Connections.
1. I set the connection as "Internet". What is the meaning of "Work"?
2. Why should I set up a VPN? And what is it? I set up a VPN with info from my ADSL provider.
Bart
It aint very well explained in the manual and is not intuative at all. An 'internet' connection is one through wish you can obtain internet access, A 'work' connection is one through which you can access your internal servers, but not obtain internet access. In a 'work' profile, you can make a change in the proxy server settings such that you can, through a 'work' profile obtain internet access.
VPN is 'virtual private network' this is a secure connection to your work/home network that is routed over the internet. Via a VPN, you can for instance browse network shares on your work network, or connect to the company intranet. To use a VPN connection, you need to have a VPN server to connect. A VPN server may be provided by your company or your router may support it. NB: A VPN Passthrough on a router is not a VPN server - it simply means that you can VPN out from a natted machine on your LAN, or, in some cases, place a VPN server within your lan.
My device is setup as follows in connections --> Network Management
Under the first drop down for internet I have a profile 'My ISP' with a single GPRS connection to APN: mobile.o2.co.uk defined
Under the second drop down for work, I have a profile 'VPN Settings' which simply has 2 VPN settings defined 'Work VPN' and 'Home VPN' (all other settings, eg 'modem' are left blank).
When I connect via GPRS to mobile.o2.co.uk, I get 2 VPN options appear the connected GPRS connection (in the 'connectivity' speech bubble that appears when you click the connections icon in the bar @ the top). These are 'Work VPN' and 'Home VPN' with a 'connect vpn' option next to them. I just manually connect these as required.
For WiFi, I make sure that my wifi adapter and wifi network I am connected to is labeled as 'internet' rather than 'work'. I then get the VPN options mentioned above appearing below my wifi connection in the 'connectivity' speech bubble. Unfortunately they refuse to connect!! I dont know why. Looking through the forums, it seems that no one is able to get the VPN to connect over an existing wifi connection.
Hope this helps
Nigel

Connection settings: My Work Network vs. My ISP?

I'm confused about network settings in my Exec (but I guess this question applies to all WM devices).
What's the functional difference between My Work Network and My ISP? When I'm browsing WiFi networks and a new one is discovered, the notification says:
"Wireless Node 2" network connects me to:
O The Internet (or work via a VPN)
O Work
What's the correct answer? Why do I have a choice? In some cases I'll want the WiFi network to allow me to only access the Internet and in other cases (like the WiFi networks in my house) I want to be able to access the Internet AND browse files on other PCs + use Terminal Services. Should these situations require different settings or are they essentially the same?
Second question: If I'm using a program that needs an internet connection, what settings must I choose to ensure that the system uses WiFi if it can, and then GPRS only if WiFi isn't available? I've changed the option in Settings > Connections > Connections > Advanced > Select Networks so that both drop-down boxes show 'My Work Network' (since I don't want to choose a default of My ISP - i.e. GPRS - for network activity if a WiFi connection is available) but now I can't seem to find any GPRS connection options. How do you all connect to GPRS manually? If I tap the signal status icon at the top of the screen I have no 'Connect GPRS' option like I did on my XDA2.
I'm confused by it all. Thanks in advance for any help you can provide, especially links to pages with how-to guides for idiots
PS. Tried searching these forums, but the subject is too generic and there are hundreds of results.
Hi
In my opinion WM2003SE's handling of connections is horrible. I understand you, being confused.
I'll decribe WM2003SE way...
Your exec has WM2005, but as far as I know, the rules are similar.
The general difference between "Internet" and "Work" is that connection set as "internet" allows you to surf web and give your program access to internet. While connections set as "work" should be used only when you connect to your home/office network (and optionally internet).
About disappearing "Connect GPRS". It's pain in the ass really
You can create as many "connection profiles" as you want (like "My ISP" "My Work Network" "My other freakin' ISP" "Etc")
Then you add some connections to certain profile....
eg.: create gprs connection (named "O2 GPRS inet" for internet in "my ISP" profile.
That means that when you change default Internet profile to "My other freakin' ISP", you won't be able to use "O2 GPRS inet"...
Ok.. answering your first, main question.
If you want to use inet, browse shared folders and use Terminal Services you should edit "My work network" properties and check "This network connects me to the Internet".
When at home. Select (in settings->connections->connections) "My work network" for both auto internet and auto private network.
When roaming around, you should change auto inet to "My ISP" which will have a configured GPRS connection inside.
Your phone will use Wifi first (before GPRS) when activated and available.
OMG.. my fingers hurt.
Have fun fighting with WM
Thanks for your reply, robal. It's a big help but I'm still not 100% sure of the situation.
robal said:
The general difference between "Internet" and "Work" is that connection set as "internet" allows you to surf web and give your program access to internet. While connections set as "work" should be used only when you connect to your home/office network (and optionally internet).
Click to expand...
Click to collapse
But I want both types to connect to the Internet. I still don't really see the difference. Does My Work Network apply to connections for which a VPN is necessary? If I choose 'The Internet' as the option when connecting to a new WiFi network, will that change any aspect of the way in which the connection works? Perhaps I should just try it and see. Trouble is, if I screw it up I'll never be able to get it working again!
robal said:
If you want to use inet, browse shared folders and use Terminal Services you should edit "My work network" properties and check "This network connects me to the Internet".
When at home. Select (in settings->connections->connections) "My work network" for both auto internet and auto private network.
When roaming around, you should change auto inet to "My ISP" which will have a configured GPRS connection inside.
Click to expand...
Click to collapse
Perhaps I'm expecting the impossible. I want to set it up and forget about it, so that wherever I am my device can access the Internet. If I'm connected to a WiFi network then that's the connection but if not then it dials up GPRS automatically when a program demands a connection.
Does everybody else use robal's method and change the settings depending on the availability of a friendly WiFi access point?
If this is the case then Windows Mobile has a long way to go before the connectivity is seamless...
I was largely having probs connecting to 02's 3G network as I couldn't find the settings.. now I kind of understand. Kind of.
--O2 Contract 3G settings--
Name of connection: O2 Internet
Select a modem: Cellular Line (GPRS, 3G)
Access Point Name: mobile.02.co.uk
Username: mobileweb
password: *** (it was prefilled for me..)
Advanced Button should be set to auto-assign IPs
--
With regards the original post, I have mine setup so that if I connect to my local WiFi, then I get the internet through that. If I disconnect, or not in range, etc, then it will use the 3G settings.
I'm still a little in the dark with regards WM5.0s handling of network connections, but here's what I think is right:
Start > Settings > Connections Tab > Connections
[Tasks Tab]
You can only have *2* active connections
You can have multiple profiles under each connection.
So, I renamed my O2 Internet connection to something other than "My ISP", I chose "O2 3G Network" to make things a tiny bit less confusing. (This is the network with your 3G settings in as above.)
The second option I renamed to "My Wireless Network", and as far as I can tell, you do not need to change anything in there - unless you want to add VPN information.
[Advanced Tab]
Click "Select Networks"
Here you can choose between your 2 active connections. For the top option I chose "O2 3G Network", the second option "My Wireless Network".
Click OK
--
Now you have two networks setup. Open Internet Explorer..
If you do not have WiFi switched on, it should automagically dial your "O2 3G Network" when you start browsing.
If you're at home, or near a WiFi network, switch it on by holding your stylus on the "U" in the taskbar. This should give you the option to switch on WiFi.
A few handshakes later (this took about 2-3 mins to actually connect to my WiFi) and your "U" should change to the WiFi antenna icon.
*Check you have fully connected to WiFi before browsing!*
Do this by again, holding the stylus on the antenna icon and checking that your WiFi name is displayed, along with the signal strength.
*If you try to browse the web before your WiFi is ready, it will just attempt to dial O2 3G Network!* - Patience is required...
So, whether this answers the original post or not, I mean, it isn't exactly Automatic, but I guess if you leave WiFi switched on, then in theory it will use it, else it will dial your 3G network.
Well, thats my brain dump for my own benefit, hope it helps out others.
That will be very helpful, thanks gaspx. I'll try your suggestions later on and let you know how I get on.
So with those settings when your Exec finds a new wireless network and invites you to set up your connection, which do you choose? "The Internet" or "Work"? I think :?: that those two options are independent of your renaming of "My ISP" to "O2 3G Network"...
I guess I can get it set up right like you have, but I hate not understanding this. It should be so simple but it's not!
"The Internet" or "Work"? I think that those two options are independent of your renaming of "My ISP" to "O2 3G Network"...
Click to expand...
Click to collapse
Yes, they are independant and are accessible when you choose Start > Settings > Connections Tab > Network Cards
Then select Network Adaptors tab.
What I'm not fully understanding is how these two options differ(!):
For instance, I have a static IP address on my WiFi, so I choose Network Adaptor Profile "Work", then configure "tiacxwin Compatible Wireless Ethernet" and enter in my static IP and DNS etc..
What I would *expect* to be able to do is choose between "Work" profile and have my static IP, or "The Internet" profile, and have dynamic IP.
But it doesn't appear to work that way.. if I add static IP address, it uses it for both Work and The Internet. Confused ? Me too.
which do you choose? "The Internet" or "Work"?
Click to expand...
Click to collapse
So from my initial playing around, it doesn't appear to make any difference! - Otherwise i'd expect to add a roaming WiFi Hotspot to "The Internet" (and dynamic IP) and any Work related (static IP) to "Work".
Must be missing something fundamental here, but O2 Exec manual (pg.92) isn't especially forthcoming with an answer.. :?
This might help you a bit.
I connect to work with a vpn connection over the internet. the address for the vpn is a url.
1. I set up a gprs connection under internet
2. I set up a vpn connection under work to vpndomain.com.au
3. in the advanced tab of connections I add *.vpndomain.com.au to the exceptions list for work connections
4. I start a terminal session to terminal.vpndomain.com.au
the device connects to internet then connects to work over internet.
if you don't need one connection to occur via another then make them all internet
hope that helps
Okay, a bit more braindumping to understand the differences between "Work" and "The Internet" courtesy of ActiveSync Help..
ActiveSync > File > Connection Settings
This computer is connected to: Auto/Work/The Internet
---
Use ActiveSync to "pass through" this computer. That means the connected device can use the computer's network connection as if it were its own. You can use this feature to perform tasks such as downloading non-Outlook e-mail messages, to connect directly with Exchange Server, or to browse the Internet.
---
So, from that, I set the connection type to "The Internet" in ActiveSync, and I was able to browse the internet on my XDA.
I then set the connection type to "Work Network" in ActiveSync and was *not* able to use the internet.
What does it all mean ?
Well, at the moment all I can think of is that if don't set it to "The Internet", you er, don't get Internet access. :roll:
Applying that to the original question of which do I choose:
"Wireless Node 2" network connects me to:
O The Internet (or work via a VPN)
O Work
Click to expand...
Click to collapse
I would holeheartedly recommend (if its a wireless network you've found whilst walking the streets) that you choose "The Internet" !!
--
Functional Differences
I'm thinking/believing/speculating that the functional difference between the two is that the "Work" option is for connecting to local or internal IP's only, for instance anything on your 10.x.x IP range if that is the subnet you're on.
The "Internet" option allows any *external* IP address to be accessed, and no access to the local IP range. This would then require the VPN option to be used to access local/intranet resources. (This is the passthrough option as mentioned above in the ActiveSync help)
I'm literally typing as i'm testing, and so far it kinda makes more sense to me now.. kinda.

Using more than two proxies

I have a WM5 device (HTC Wizard) and have the following situation:
My "Home" connection uses a proxy to connect to the internet over GPRS (from phone company) -- this works fine.
My "Work" connection uses a different proxy to connect to the internet over wifi (from my work) -- this works fine.
If I want to connect to a third network (my home wifi connection, an internet cafe) that doesn't use a proxy (or uses a different proxy) I need to modify the "Home" connection to remove the phone company proxy settings -- then this works fine. But when I want to get back on my GPRS connection, I need to go modify the proxy configuration again to put the settings back in.
Is there an easier way to move between >2 proxy configurations than setting/clearing/modifying the proxy configuration every time I move between networks? I'm looking for solutions native in the device - I'm sure there are hacks like setting up my own proxy and screwing with the forwarding rules to identify "phone is on WLAN, go directly to internet" vs. "phone is connecting from GPRS, chain through phone company proxy" which will cause me about as many headaches as just manually entering the information. Thanks in advance for any replies.
easist way is to set up a third connection with no proxy....
Have you actually tried doing this? WM5 supports two connections - one for automatic connections (which by default it calls "Home"), one for VPN (which by default it calls "Work"). I could create another network connection profile, but that trade-off is between a) reconfiguring the single network connection profile that my "Home" connection uses (via my provider's proxy or not) for b) reconfiguring which of two network connections the "Home" network connection selects. I don't want another bunch of clicks to jump through as I move from network to network, I want it to Just Work. I'd like the decision tree to go:
if (secured resource)
..use VPN ("Work")
else
..if (preferred network available)
....// this would be my 802.11 nets
....// each of which may have proxy information associated with it
....use that network (afaict, NYI)
..else
....use GPRS ("Home")
But it appears to be:
if (secured resource)
..use VPN ("Work")
else
..use GPRS ("Home")
A bit of an ugly workaround would be to use Opera Mobile - you can manually specify HTTP and/or HTTPS proxies in its own Preferences, as well as any proxy info you might have set up in your work profile.
As of yet, I've not found a way to have more than one proxied profile preconfigured, which is annoying as different buildings in my Uni use different wifi networks with their own proxies and ports typical.

WIFI Internet Connection

Hi guys,
I've got a netopia router (Irish "eircom" broadband) and while normal internet connections via laptop or PC (with USB Wifi dongle) work fine I just can't get my XDA Mini S to actually access the internet. I have managed to actually get it to connect via WIFI however when I launch internet explorer and click on a link it says it can't access using this connection.
"Can't connect with current connection settings. To change you connection settings, tap Settings".
Under connections I'm not sure what to select as I don't believe I need to setup a modem connection or VPN - am I wrong here??
It shows "connected" in the WIFI settings, indicating my SSID etc. Could someone advise me on what else I need to set. Basically I'm obtaining an IP address and my laptop etc work fine, just wondering what more I need to do to bash internet explorer into submission on the XDA. Is is just me or are Microsoft making this very hard on the normal user..
Start--> settings -->Wireless Lan
SSID is correct.. i.e my Wireless LAN
Mode : infrastructure
BSSID is set (though I don't know what this indicates)
TX Rate :auto
Channel :7
Start--> settings -->Wireless Lan - Advanced Tab
Status : Associated to Network
MAC number given
IP address given (so I guess DHCP is working fine)
Leap tab and Enroll tab - all settings blank.
------------------------------------------------
Start --> settings --> system --. Network cards
SSID shows Connected
Under Network Adapters tab : My network card connects to the Internet.
Adapter NE2000 Compatible Ethernet Driver. (not sure what difference this makes????)
I temporarily disabled WEP for the purposes of simplifying things.
Simple yet very annoying problem:
Go to Settings->connections->connections->advanced->network selection and make sure both combos read 'My ISP'.
Then, when connecting to your WiFi network select 'This network connects to the internet' (as I understand you already have this set under 'network adapters' so it should be ok).
THANK YOU!
levenum said:
Simple yet very annoying problem:
Go to Settings->connections->connections->advanced->network selection and make sure both combos read 'My ISP'.
Then, when connecting to your WiFi network select 'This network connects to the internet' (as I understand you already have this set under 'network adapters' so it should be ok).
Click to expand...
Click to collapse
Thank you so very much I have been look for this forever!!!
thanks so much for the tip too. i've been trying to fix my wifi ever since i upgraded to windows mobile 6 and this did the trick.

Internet via VPN & WIFI

I nerver really understood Microsofts concept behind the Internet / Private Network differentiation in WM, therefore i got a small problem right now.
What i would like to do is browsing the internet using PIE in the following network environment:
An accesspoint provides access to an unsecured wifi containing nothing but a pptp vpn server. The vpn then allows accessing the internet.
Currently i got managed to connect to the wifi and to properly set up the vpn under the "my work connection" settings. when i manualy connect to the vpn the connection gots established. The problem is that this only works if:
"Programms that automatically connect to the Internet should connect using:" is set to "my isp" and
"Programms that automatically connect to a provate should connect using:" is set to "my work network".
this of course lets the vpn collapse when the pie is running, because it is configured to use "my isp" instead of "my work connection".
When both options are set to "My work connection" mannually connecting to the vpn leads to a "cannot connect with current connection settings[...]" error.
any ideas?
Hi
go to connections then advanced, then go to exceptions and add a new url
add
*
and
*.*
then it should route the connections via the VPN and not disconnect it
Regards
works for PIE!
thank you!
(is there also a solution for the messaging (email) application?)
should do emails too
I havent used VPN for a while so might set it up and try it again if i get some time

Categories

Resources