In the past I was using HTC USB Modem to connect my laptop trought the internet 3G of my TYTN that's working very well, then I use an IPSEC utility like the Linksys QuickVPN or the SafeNet SoftRemote LT to establish connection to my office ! All that was working very well for long times ;-)
Now since the new Internet Sharing I have a problem ! The connection to the Internet with the laptop is very easy to establish but when I connect my QuickVPN or SafeNet, they says that connection are established but it is impossible to communicate with the office network !!!
The solution is maybe behind the configuration of the router or the QuickkVPN or SafeNet software but because all was working before AKU 3.3 I have the feeling that Internet Sharing are a bit responsible ;-)
Probaby because it make a private network more 192.168.0.x in the course to the office, but why VPN connection can establish correctly and that I can't connect to computer of the network, neither to the router itself
I am using WM6 Pro Black 3.0.1 very nice an stable version and all BT connection and Wifi seems to work well better sinds upgrade, but I and still very dissapointed that I can't connect my laptop to my Office via VPN/IPSEC.
I have try a second approach, installing Bluefire VPN on my TYTN, I can connect my TYTN to my office network, so then I have try to establish the Internet SHaring with my laptop to connect also to the office network, but when BluefireVPN are connected, it is simply impossible to access any location on the Internet or the Office network with the laptop, IP is well given 192.168.0.102 like without the VPN connection of bluefire, but unable to go to the Internet ! If I disconnect BlueFireVPN on the TYTN, the internet goes back to the laptop ;-)
Can somebody help me to find a solution to better understand the working of Internet Sharing and/or How to fix the connection problem with VPN and Internet Sharing ;-)
Thanks a lot for JasJamming for your very stable Rom WM6PB3.0.1
Please Help Me ;-)
Please anybody can help me ;-)
Hi,
not sure if i can help, BUT if anyone can we prob need to see some network settings.
1) load cmd and do: ipconfig /all>c:\normal_net.txt
2) connect to internet on phone NOT VPN at this point
3) @ cmd do: ipconfig /all>C:\conn_net_no_vpn.txt
3b) @ cmd do: route print>c:\conn_no_vpn_route.txt
3c) @ cmd do: tracert bbc.co.uk>c:\conn_no_vpn_trace.txt
4) connect to the vpn at your work
5) @ cmd do: ipconfig /all>c:\conn_net_and_vpn.txt
5b) @ cmd do: route print>c:\conn_net_and_vpn_route.txt
5c) @ cmd do: tracert bbc.co.uk>c:\conn_net_and_vpn_trace.txt
If you can let us know the subnet settings of each network and attach all those txt files to your next post and I'll see if there is anything i can spot...
gd luck
Thanks Acuum2
I have check all you say, It seems like no inbound traffic can come, only Outbound, I suppose that is because of the process of Internet SHaring that operate like a NAT but not really because I have try with a friend that have a router with NAT and it work very well for him with they internal network 192.168.1.0 so no NAT-T problem.
Here are the information you ask:
Before Any Connection:
Configuration IP de Windows
Nom de l'hôte . . . . . . . . . . : Neptune
Suffixe DNS principal . . . . . . : MYDOM.local
Type de nœud . . . . . . . . . . : Hybride
Routage IP activé . . . . . . . . : Non
Proxy WINS activé . . . . . . . . : Non
Carte Ethernet Connexion réseau Bluetooth:
Statut du média . . . . . . . . . : Média déconnecté
Description . . . . . . . . . . . : Périphérique Bluetooth (réseau personnel) #8
Adresse physique . . . . . . . . .: 00-10-60-D1-66-47
With INternet Sharing:
Configuration IP de Windows
Nom de l'hôte . . . . . . . . . . : Neptune
Suffixe DNS principal . . . . . . : MYDOM.local
Type de nœud . . . . . . . . . . : Mixte
Routage IP activé . . . . . . . . : Non
Proxy WINS activé . . . . . . . . : Non
Liste de recherche du suffixe DNS : MYDOM.local
mydom.local
Carte Ethernet Connexion réseau Bluetooth:
Statut du média . . . . . . . . . : Média déconnecté
Description . . . . . . . . . . . : Périphérique Bluetooth (réseau personnel) #8
Adresse physique . . . . . . . . .: 00-10-60-D1-66-47
Carte Ethernet Connexion au réseau local 18:
Suffixe DNS propre à la connexion : mydom.local
Description . . . . . . . . . . . : Windows Mobile-based Internet Sharing Device #2
Adresse physique . . . . . . . . .: 80-00-60-0F-E8-00
DHCP activé. . . . . . . . . . . : Oui
Configuration automatique activée . . . . : Oui
Adresse IP. . . . . . . . .*. . . : 192.168.0.102
Masque de sous-réseau . . .*. . . : 255.255.255.0
Passerelle par défaut . . .*. . . : 192.168.0.1
Serveur DHCP. . . . . . . . . . . : 192.168.0.1
Serveurs DNS . . . . . . . . . . : 192.168.0.1
Bail obtenu . . . . . . . .*. . . : dimanche 13 mai 2007 19:24:06
Bail expirant . . . . . . .*. . . : mercredi 16 mai 2007 19:24:06
Route Print Without VPN:
===========================================================================
Liste d'Interfaces
0x1 ........................... MS TCP Loopback interface
0x10005 ...00 10 60 d1 66 47 ...... Périphérique Bluetooth (réseau personnel) #8
0x30002 ...80 00 60 0f e8 00 ...... Windows Mobile-based Internet Sharing Device #2 - Miniport d'ordonnancement de paquets
===========================================================================
===========================================================================
Itin‚raires actifsÿ:
Destination r‚seau Masque r‚seau Adr. passerelle Adr. interface M‚trique
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.102 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.102 192.168.0.102 30
192.168.0.102 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.0.255 255.255.255.255 192.168.0.102 192.168.0.102 30
224.0.0.0 240.0.0.0 192.168.0.102 192.168.0.102 30
255.255.255.255 255.255.255.255 192.168.0.102 10005 1
255.255.255.255 255.255.255.255 192.168.0.102 192.168.0.102 1
Passerelle par d‚fautÿ: 192.168.0.1
===========================================================================
Itin‚raires persistantsÿ:
Aucun
Tracert Without VPN:
1 * * * D‚lai d'attente de la demande d‚pass‚.
2 * 1078 ms 658 ms 192.168.22.8
3 236 ms 260 ms * 192.168.159.129
4 997 ms * 1415 ms 212.65.33.209
5 640 ms 260 ms 278 ms gi10-2.brubb1.Brussels.opentransit.net [193.251.251.13]
With VPN:
Configuration IP de Windows
Nom de l'hôte . . . . . . . . . . : Neptune
Suffixe DNS principal . . . . . . : MYDOM.local
Type de nœud . . . . . . . . . . : Mixte
Routage IP activé . . . . . . . . : Non
Proxy WINS activé . . . . . . . . : Non
Liste de recherche du suffixe DNS : MYDOM.local
mydom.local
Carte Ethernet Connexion réseau Bluetooth:
Statut du média . . . . . . . . . : Média déconnecté
Description . . . . . . . . . . . : Périphérique Bluetooth (réseau personnel) #8
Adresse physique . . . . . . . . .: 00-10-60-D1-66-47
Carte Ethernet Connexion au réseau local 18:
Suffixe DNS propre à la connexion : mydom.local
Description . . . . . . . . . . . : Windows Mobile-based Internet Sharing Device #2
Adresse physique . . . . . . . . .: 80-00-60-0F-E8-00
DHCP activé. . . . . . . . . . . : Oui
Configuration automatique activée . . . . : Oui
Adresse IP. . . . . . . . .*. . . : 192.168.0.102
Masque de sous-réseau . . .*. . . : 255.255.255.0
Passerelle par défaut . . .*. . . : 192.168.0.1
Serveur DHCP. . . . . . . . . . . : 192.168.0.1
Serveurs DNS . . . . . . . . . . : 192.168.0.1
Bail obtenu . . . . . . . .*. . . : dimanche 13 mai 2007 19:24:06
Bail expirant . . . . . . .*. . . : mercredi 16 mai 2007 19:24:06
Route Print With VPN:
===========================================================================
Liste d'Interfaces
0x1 ........................... MS TCP Loopback interface
0x10005 ...00 10 60 d1 66 47 ...... Périphérique Bluetooth (réseau personnel) #8
0x30002 ...80 00 60 0f e8 00 ...... Windows Mobile-based Internet Sharing Device #2 - Miniport d'ordonnancement de paquets
===========================================================================
===========================================================================
Itin‚raires actifsÿ:
Destination r‚seau Masque r‚seau Adr. passerelle Adr. interface M‚trique
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.102 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.102 192.168.0.102 30
192.168.0.102 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.0.255 255.255.255.255 192.168.0.102 192.168.0.102 30
224.0.0.0 240.0.0.0 192.168.0.102 192.168.0.102 30
255.255.255.255 255.255.255.255 192.168.0.102 10005 1
255.255.255.255 255.255.255.255 192.168.0.102 192.168.0.102 1
Passerelle par d‚fautÿ: 192.168.0.1
===========================================================================
Itin‚raires persistantsÿ:
Aucun
Tracert With VPN:
1 * * * D‚lai d'attente de la demande d‚pass‚.
2 807 ms 660 ms 496 ms 192.168.22.8
3 497 ms 264 ms 335 ms 192.168.159.129
4 * * * D‚lai d'attente de la demande d‚pass‚.
5 * * * D‚lai d'attente de la demande d‚pass‚.
6 249 ms * * so-0-3-0-0.loncr4.London.opentransit.net [193.251.241.194]
ALL seems Identical !
It seems that there are no route for the Office Network, but in fact SafeNet SoftRemote LT intercept packet destinate to 192.168.123.x my office subnet and send to the tunel, but it seems that packet can't return.
Probably because a NAT-T problem with Internet SHaring !!!
Do you have any other idea ?
Have a nice day.
;-) Thanks a lot
Just something more:
2 * 1078 ms 658 ms 192.168.22.8
3 236 ms 260 ms * 192.168.159.129
Theses networks are not form my side but probably form Internet Sharing, It is extremely strange that Internet Sharing Need so much network to work:
192.168.0.x for the laptop connection, and 192.168.22.8 after and 192.168.159.129 after !!!
Any idea ?
How Can We know how works Internet Sharing how can we change the IP network private like 192.168.0.x ! or other 22.8 and 159.129 ?
hi,
how many machines are there in your office network?
i havn't looked too closly at the results your sent me YET (i will do)
i think the problem is almost certainly a routing issue, not caused by NAT it's self, but caused by the subnets selected for each network at the end of the tunnel.
I think your office is on the same subnet that is setup by your phone when you try to use ICS.
this would, it seems be confirmed by it working on your firends network that that is on a diff subnet.
I know of no way to change the subnet settings that ICS creates, so would assume the only solution would be to change the network settings that get used at your office.
putting them on 192.168.10.X for instance i think would solve the routing issues as the subnets at each end of the tunnel would not be the same.
but obviously if your not the IT admin, or you have 10+ machines then its a pain to setup....
let me know how many machine, and ill have a CLOSE look at the results you posted me...
regards.
A
no problem for me to try, I have only 3 PCs and I have already try with an other subnet like 192.168.111.x and 192.168.234.X no way same problem I think that something are diffrent in the process of ICS face to a normal NAT router .
Thanks for your help.
;-)
arh in that case, you mat be right.
if it were me, i'd consider changing your VPN solution
purhaps use openVPN in full bridging mode.
this should get arround all your routing issues, although it could be more expensive in terms of bandwidth.
The problem stay that we don't know how work ICS on WM6 (or WM5) I think that there is something wrong in Internet Sharing, but it seems that there are not a lot of people are have this problem or maybe that simply use VPN with there TyTN via Internet SHaring ;-)
Have you and idea on how to install the old process with the MOdem Link on WM6 or WM5 AKU3.3+
Thanks for your help
I am having the same problem
I am having the same problem with VPN. My company uses a Cisco VPN client and since I upgraded my cingular phone to the latest official release with Internet Sharing, I have no way to get traffic through the VPN.
The connection is done quickly but it looks like there is a problem in routing the traffic trough the VPN.
I called Cingular and they have no clues and so my IT department. They see the connection but no traffic.
Any gurus out there that can help?
Thank you
Maybe this is the answer
The following article from Microsoft mybe the answer to the problem:
"Establishing a VPN Connection with an ICS Host
You should establish VPN connections on clients of an Internet Connection Sharing (ICS) Host.
MORE INFORMATION
Establishing a VPN connection on the ICS Host modifies the Routing Table on the ICS Host and forces all clients that try to connect to the Internet to use the VPN routing table instead of the routing table used to connect to the Internet service provider (ISP). This can create the following issues:
1. Clients may not be able to resolve the names of Internet resources and must use the Name Resolution services of the network where the ICS Host is connected using VPN. In Microsoft Internet Explorer, client computers may receive the following error message:
Error: Page Can Not be Displayed.
You may receive other error messages that say the VPN server can not be located when you try to establish a second VPN connection from the client.
2. Depending upon the network, all clients may be able to connect to the secure network as the same account that initially established the VPN connection. For example, if you establish a VPN connection to a corporate network on a computer running ICS, all the clients connected to the ICS Host may be able to connect to all the network resources on your corporate network.
The issues listed in this article do not occur if you establish the VPN connection on a client ICS Host computer connected to the Internet."
It looks like that in order for the thing to work, the VPN must be established on the phone/PDA and then shared through ICS.
Tomorrow I will try with the IT department...
I have try to start first vpn with the Phone with Bluefire and then start ICS with the notebook, but It seems that the problem are identical, no more internet connection possible nor to the office vpn network, effectively it could be a routing issue, but sinds the Ipsec software I use don't modify the routing table, I don't know how how to force traffic throw the IPSEC channel created :-(
And probably IP packets don't know also where to go ;-)
Yesterday I have try to connect via Bluetooth PAN in place of USB thinking that could be a little different, but in that case I have an other problem, the Laptop connect to the NAP but don't receive any IP adress, so IP stay at 0.0.0.0 and no connection are possible, so I haven't be able of course to test VPN in this way ;-)
Have somebody resolve this DHCP problem with Bluetooth PAN ?
Thanks for your help.
Is there somebody that can't obtain IP adresse when connecting via ICS via Bluetooth PAN ?
I progress,
First my problem of IP adress in connection with Bluetooth PAN is due to Bluefire VPN that add a key in registry under the bluetooth parameter UpperBind linkink to Bluefire I have remove this key and ICS with Bluetooth PAN works now and you can change the IP adress in the TCPIP param of bluetooth that's the second point of interest asked by Accum2
But changing the IP adress in the ICS don't seem to improve the VPN problem
I have know the reason why It is impossible to etablishe VPN on the phone and then share with the laptop, it is because when you connect the ICS, it take always the Cellular Line as PublicConnection, If we find a way so that ICS use the VPN connection already connected that could permit to NAT between VPN(Phone) and USB or Bluetooth PAN with ICS. I have try to change the registry key of the publicconnection of ICS while it is connected but it is not working and every time you run ics it change the key.
If Somebody know how we could change the publicconnection, so that we can set an previously active VPN or a WLAN connection that could be nice
I hope I am not alone in the dark
I have the same problem with establishing a VPM when using Internet sharing.
In talking to HTC they say that the way Internet sharing works, your laptop is on the Cingular Network and they block the ports the VPN needs to connect.
The solution is to go back and use the Wireless Modem. This way you do not go the same path and VPN connections will work.
Is there anyone out there that has the source of the old Wireless Modem and can make it installable on WM6 or the WM5 update that has Internet sharing?
This would fix the problem.
I updated to Black 3.0.1 and love it. However, since then I have not been able to connect via Internet Sharing. I too would like to see if Modem Link will work with Black v3.
My solution
In WM6 you need to change the USB ActiveSync Connection under
Start > Settings > Connections > USB to PC
to RNDIS
This solved the "no traffic" problem with a ncp vpn client for a cisco connection on a hp ipaq 514 with wm6 for me.
marxx
hi,
i don't know what's happen, i have this bad message and i can't connect IE to internet.
My connection is ok ; MSN weather is uptodate.
please do you have an idea ? (may be user agent ?)
thx.
Regx.
Had similar problems with 98 rom in france, in netherlands no problem. In the post from chanvi93:
Recommandations :
* "Move to up" Tools; Utility; Short cut; all you need folders .
* Only FRA version : "Region settings" ( Paramètres régionaux) is set in Belgium and don't change it , because France is not in WM 6.5 test country .
Can it be that this has something to do with it?
Did you installed the Corr._STKServices.cab from the post install folder and did you properly set up the provider?
Adejager1 : thanks for your answer.
the settings are ok.
The connection doesn't start when i click on IE but if i start RSS and i click on a link IE is connected.
Hi.
I am trying to install Thawte primary root certificate so that I can connect to our corporate wifi.
I have HTC HD2 running MIUI android version 18.2
I go to settings -> Personal -> Security and Privacy -> Credential storage - Install from SD card
Clicking on "Install from SD card" gives error - "Impossible de trouver le certificat sur la carte SD."
I am running english not french. This seems to be the only message I have received in french. Also phone is not hooked up to PC while I am doing this.
Also use secure credentials is turned ON after I entered a credential storage password and nothing is greyed out.
Does someone know how to install certificate on MIUI or how to bring on the certificate manager.
I installed certificates with success. Android recognizes private certificate with .p12 extension
Sorry to re-open this thread, but how do you go about installing a root certificate? When I opened the .cer it says install successfull, but when adding a WiFi network it doesnt show any 'AS certificates' (using MIUI 1.11.18)
External. CER Certificate
sanderrx said:
Sorry to re-open this thread, but how do you go about installing a root certificate? When I opened the .cer it says install successfull, but when adding a WiFi network it doesnt show any 'AS certificates' (using MIUI 1.11.18)
Click to expand...
Click to collapse
Same problem here with MIUI 11