Database Users

VPN over WiFi connection

Hi
I searched the forums for info, seems that others have had issues trying to connect a VPN session over WiFi. Basically, my wifi (internet) is connected, the 'Connect VPN' option appears in the 'Connectivity' bubble, but tapping 'connect vpn results in the unit trying for a while to connect and then giving up with no error.
Probably yet another XDA bug. My device is the XDA IIs (Blue Angel).
Anyone got a VPN going over wifi?
For the record, it (VPN) works fine over GPRS, although the implementation is shockingly bad. You cant hit boxes on yr lan via IP, it drops the VPN the moment you try. I guess i'll have to set up some hosts file to fool the sack of crap into realising that it needs to head down the VPN to get to said ip.
Nigel
Nigel

Check your ip's, they must be in different subnets at each end of the vpn eg (192.168.1.--- >>>><<<<192.168.0.---). If they are both in the the same range then packets won't be routed correctly.
I use vpn over a wifi lan every day, and it works like a dream (on an xda2 with soket wifi card).

Hi
Yeah, they are in different subnets, still refuses to connect. God knows. The wifi implementation on the Blue Angel is bugged to hell so I suspect this is just another bug.
Nigel

I can get my VPN to connect.
My M2000 is connected to my local lan via wifi (192.168.0.0) and I have set up a VPN to my work lan (172.16.0.0).
The vpn connects and shows as connected in the connection dialog bubble.
However, I can't see/ping anything on my work network.
The PPTP NDISWAN Miniport adapter shows as not connected.
Using xvIpconfig i can see that there are two active adapters.
One is my wifi card...all ok there.
The other is called RAS VPN Line 0.
It seems to have a correct IP address, subnet mask and default gateway for my work network but it says that DHCP is disabled.
Also the adapter address is 00-00-00-00-00-00...that can't be right can it ?

VPN
hi guys, have you made any progress with the vpn and the blue angel. I am having the same problem - VPN appears to connect fine and then drops without any errors etc. to make matters worse i deleted all 02 connections so now i can't even see the vpn connection. Help!!!
yanni

Has anyone got a VPN connection to work with a T Mobile MDA?

I am trying to establish a VPN connection but cannot get the connection to work.
I am using the built in MS VPN client of Win Mobile v5.0 (5.1.1700 build 14352.0.1.0)
I am having real problems getting a VPN connection set up with our network.
I have tried both PPTP and L2PT
When L2TP, I was authenticating with a preshared key
Firewall logs show PPTP negotiation successful, and issues a VPN IP address to the device
It can ping the firewall external interface, but times-out trying to reach an internal address
The VPN session is established, but the firewall logs don't register either deny or allow traffic for each internal ping request, rather the firewall packet error count increments for each failed attempt.
Any help is greatly appreciated.

I had problems with PPTP - gave up
I hate the way Windows mobile labels connections.
I connect to many customers with PC Anywhere, VNC, SSH etc and I have access via serveral different windows PPTP VPN.
Like you I setup the details in connections and try to dial.
Nothing seems to happen. The connect option does not change to disconnect. So I assume it is not connected.
I have a feeling these connection do not work over WIFI. and perhaps work over T-mobile 3g only, to maximise data revenues.
Seems very buggy to me. I would really like someone to post a working example/Instructions. Can I get a refund on my MDA PRo?
MS please note it is not a connection to my work or an internet connection it is to a customer for remote support, likewise I often connect remotely to my home via PPTP from my office.

confirmed VPN works over t-mobile 3g not Wifi
SEems the VPN links only work over 3g not Wi FI.

I'm using a PPTP connection over either 3G of WIFI depending on te active connection.
- When WIFI is active the PPTP connection connects using WIFI (I can switch off the phone, so it must be using that one)
- When no WIFI connection is active it automatically connects to 3G first, and than starts the PPTP session
In network management I'v set:
Internet:
Internet (the one containing the 3G connection)
select 'this network connects to the Internet' on the proxy tab.
private network:
My Work (the one that contains the vpn connection)
do NOT select 'this network connects to the Internet' on the proxy tab.
So as you can see, nothing special (I'm using a Qtek 9000 with standard Wm5 ROM)

Success with L2TP/IPSec VPNs?

Has anyone had any success with L2TP/IPSec VPNs and Windows Mobile 5 or 6? I have no problems with getting PPTP to work but have NEVER had any success with L2TP/IPSec. I have valid Client & Server Certificates but I have never been able to get a connection; in fact the HTC Wizard I have never even attempts to make a connection (I have a sniffer on the Ethernet port my Wireless AP is connected to). I have tried using Certificates & Pre-Shared Keys but the results are the same - The Wizard never attempts to connect, with PPTP it works every time.
The Server I am using is a Windows 2003 RRAS server and I have verified with a Windows XP Client that L2TP/IPSec works.
I have asked the question before but have not had any helpful replies. I would be grateful if anyone who has set this up successfully can let me know and maybe give me a run-down of the steps you used. I am not interested in any 3rd party VPN clients, it must be the built-in one.
Thanks
Andy

Hi
Yes I have had the same issue with both the wizard and now hermes tried wm5 and wm6. I think it maybe related to NAT-T translation as am unsure from my reading weather MS supports NAT-T on the mobile end. If data session is being NATed by your provider then this may be the cause. Probably need to check the ip packets comming from the phone to see what it is sending out. Is that what you did or is the sniffer at the other end.

sebjepb said:
Hi
Yes I have had the same issue with both the wizard and now hermes tried wm5 and wm6. I think it maybe related to NAT-T translation as am unsure from my reading weather MS supports NAT-T on the mobile end. If data session is being NATed by your provider then this may be the cause. Probably need to check the ip packets comming from the phone to see what it is sending out. Is that what you did or is the sniffer at the other end.
Click to expand...
Click to collapse
It has nothing to do with NAT traversal. WM5 (and WM6 probably?) does NOT support NAT-T, however I am not attempting to get this working over NAT. As I said I have a put a sniffer on the Ethernet port my Wireless AP is connected to and my Wizard does not transmit anything when configured for L2TP/IPSec (except a DNS lookup for the VPN server name if I enter it's DNS name as opposed to it's IP address). With PPTP it works and I can happily see the packets it transmits on the sniffer.
This is really frustrating as it looks like no one has ever got this to work
I had a HP iPAQ 6365 previously with Windows Mobile 2003 and I managed to get it working on this quite easily
Andy

Andy
I now have this working on both the wizard and the hermes.
I am a bit confused with your last response as ipsec port 4500 is nat-t and is required and is being transmitted by both the wizard and hermes in my case.
My setup maybe somewhat different to yours as I have a windows sbs2003 server running isa and rras. It is sitting behind an adsl modem router connected to the internet. The data connection on my phone is edge network on the wizard and HSDPA on the Hermes. Also have tried this via WiFi as well.
Steps I used
On server side router
On adsl modem router setup forwarding udp ports 500 ipsec, 4500 nat-t and 1701 l2tp and protocol 50 IPsec ESP. I selected l2tp/ipsec from its predefined list but noticed it missed udp 1701 so added this manually.
On Server.
ISA management selected Network Configuration right click and selected Allow vpn connections. This essentially setups the ip filters to allow incomming protocols and then sets up rras for pptp and l2tp ports.
In rras configure a preshared key by right click server/properties/security tick allow custome ipsec policy... and added preshared key.
On mobile
settings/connections
My Work Network
Edit my vpn servers and added new IPsec/L2TP connection.
Works a treat hope this helps
I did notice on another forum something about disabling the phone skin but I did not have to do this.
Regards
Stephen

sebjepb said:
Andy
I now have this working on both the wizard and the hermes.
I am a bit confused with your last response as ipsec port 4500 is nat-t and is required and is being transmitted by both the wizard and hermes in my case.
My setup maybe somewhat different to yours as I have a windows sbs2003 server running isa and rras. It is sitting behind an adsl modem router connected to the internet. The data connection on my phone is edge network on the wizard and HSDPA on the Hermes. Also have tried this via WiFi as well.
Steps I used
On server side router
On adsl modem router setup forwarding udp ports 500 ipsec, 4500 nat-t and 1701 l2tp and protocol 50 IPsec ESP. I selected l2tp/ipsec from its predefined list but noticed it missed udp 1701 so added this manually.
On Server.
ISA management selected Network Configuration right click and selected Allow vpn connections. This essentially setups the ip filters to allow incomming protocols and then sets up rras for pptp and l2tp ports.
In rras configure a preshared key by right click server/properties/security tick allow custome ipsec policy... and added preshared key.
On mobile
settings/connections
My Work Network
Edit my vpn servers and added new IPsec/L2TP connection.
Works a treat hope this helps
I did notice on another forum something about disabling the phone skin but I did not have to do this.
Regards
Stephen
Click to expand...
Click to collapse
What ROM are you running on the Wizard? I am currently running a WM6 ROM but I previously used the official QTEK update (AKU 2.3 I think?) and then various WM5 AKU 3.3 ROMs. I have tested this with all of them and none have worked. If I could just see it attempt to connect I would be happy The fact is it doesn't transmit anything at all and all I see is the dialogue box on the Wizard saying 'Cannot Connect'....
With regards to NAT-T I read that the VPN Client in Windows Mobile 5 was not capable of this, I could be wrong however?
Andy

Sorry didn't have signature updated I'm running WM6 MBE on the wizard and WM6 Black on the Hermes
Ok I am still confused can you tell me exactly how you are connecting to your work network. Wifi or gprs.
Can you check also.
Under settings/connections/advanced/select networks make sure you have a separate ie different connections for the internet and private network. The Intenet settings will be your service provider grps settings.
For the private network mine is set as My Work Network. Edit this and make sure sure you do not have any modem connection listed ie we want to make sure it goes out over our existing connection and does not try to make a new connection. Make sure the vpn tab has your vpn settings as required they must be listed here and not under the Internet connection.
If you are using WiFi you must make sure the network setup is Connects to: The Internet and not set to Work. If it is work the VPN will not connect. You can not change this on the fly need to disconnect and setup again.
PM Me When you get to work given time diff I should be home. Might be able to test connection to my server at home then can check logs etc
Also use Task manger v2.7 to view netsats on phone to confirm udp ports and ip routes etc. It will show you if the phone is indeed sending should see upd ports 500 4500 and 1701 being used.
Stephen

sebjepb said:
Sorry didn't have signature updated I'm running WM6 MBE on the wizard and WM6 Black on the Hermes
Ok I am still confused can you tell me exactly how you are connecting to your work network. Wifi or gprs.
Can you check also.
Under settings/connections/advanced/select networks make sure you have a separate ie different connections for the internet and private network. The Intenet settings will be your service provider grps settings.
For the private network mine is set as My Work Network. Edit this and make sure sure you do not have any modem connection listed ie we want to make sure it goes out over our existing connection and does not try to make a new connection. Make sure the vpn tab has your vpn settings as required they must be listed here and not under the Internet connection.
If you are using WiFi you must make sure the network setup is Connects to: The Internet and not set to Work. If it is work the VPN will not connect. You can not change this on the fly need to disconnect and setup again.
PM Me When you get to work given time diff I should be home. Might be able to test connection to my server at home then can check logs etc
Also use Task manger v2.7 to view netsats on phone to confirm udp ports and ip routes etc. It will show you if the phone is indeed sending should see upd ports 500 4500 and 1701 being used.
Stephen
Click to expand...
Click to collapse
I am using WiFi, this is all in a test environment so I have full control over everything. Under Connections I have 'My ISP' and 'My Work Network' listed. 'My ISP' has a modem entry, 'My Work Network' has no modem but has a VPN listed with the IP Address of the VPN server and set to L2TP/IPSec using a certificate on the device (I have tried with pre-shared key also). The WiFi entry is configured as 'Connects to The Internet'.
I enable the WiFi and verify I have connectivity, I then go to Connections, click on My Work Network, 'Manage existing connections' select the VPN tab, hold down the stylus on the entry and click connect and I almost immediately get the dialogue box saying 'cannot connect'. If I edit the VPN entry so it is PPTP it works every time. As I said I have a sniffer on so I can see what the Wizard transmits and it when set to L2TP/IPSec it doesnt transmit anything whatsoever, with PPTP I can capture the whole conversation.
Thanks for any help you can give me.
Andy

Ok I have now also tried using certificates and your right it does not seem to sending any info at all. It might ahve something to do with checking the certificate store first I ahve had issues before with Cisco vpn and certificates you have to get the nameing and certification justs right before it even starts the connection.
So first thing lets try pre shared keys as I have got that working. I will PM you my server details if you wish to try that first.
Stephen

sebjepb said:
Ok I have now also tried using certificates and your right it does not seem to sending any info at all. It might ahve something to do with checking the certificate store first I ahve had issues before with Cisco vpn and certificates you have to get the nameing and certification justs right before it even starts the connection.
So first thing lets try pre shared keys as I have got that working. I will PM you my server details if you wish to try that first.
Stephen
Click to expand...
Click to collapse
I have just re-tested this and using a pre-shared key - same result
There is a brief flash of 'connecting' when you click connect but then the 'Cannot Connect' dialogue box appears, nothing gets transmitted. I have tried entering different IP addresses (public, private etc) just to see if it will transmit anything - it doesn't regardless of the IP address I enter.....
Andy

Andy
check your pm
Are you sure the wireless ap is actually passing the ipsec/l2tp traffic.

Working, well sort of.....
After a lot of messing around I now have this working, at least partially........
Following a soft-reset I can connect to a Wireless network OK (either a new one or one that is pre-configured), I can then connect the VPN using L2TP/IPSec. I can also manually disconnect the VPN and re-connect without any issues. However, when the wireless is disconnected (i.e. turned off from CommManager) and then re-connected the VPN will never work again, unless the Wizard is soft-reset.
Does anyone know what is likely to be causing this? some application in memory or a registry 'state' entry
Does anyone else see this behaviour?
Andy

I had exactly this with L2TP/IPSec on the MDA Vario II, but the same settings work as they should on my Athena.

ADB100 said:
After a lot of messing around I now have this working, at least partially........
Following a soft-reset I can connect to a Wireless network OK (either a new one or one that is pre-configured), I can then connect the VPN using L2TP/IPSec. I can also manually disconnect the VPN and re-connect without any issues. However, when the wireless is disconnected (i.e. turned off from CommManager) and then re-connected the VPN will never work again, unless the Wizard is soft-reset.
Does anyone know what is likely to be causing this? some application in memory or a registry 'state' entry
Does anyone else see this behaviour?
Andy
Click to expand...
Click to collapse
HI!
How can you DISCONNECT?? Do you get a "Disconnect" button or menu item somewhere??
How do you know you are connected to VPN?
Thank you,
Dmitry.

A bit late but...
I have a possible solution to the fact it doesn't send ANY traffic on a connect attempt - on my XDA mini S (HTC Wizard) it requires me to put something in the 'domain' field on the username/pwd screen before it will start the IPSec negotiation....
Now I just have to get it o complete the process with the sonicwall...
David

Revisiting this
I can't get PPTP going on my HD2. Thoughts?

bumping this message

I have tried all the usual vpn software (for 3g connectivity) the only third party software that connects is the ncp software, but I get stuck because it wont accept a challenge response grid.
Symantic - won't auth
Green something - doesn't connect
MS VPN - doesn't connect
I have been able to connect in the past with an iPhone, but without a java i can't connect to most motorola hardware devices at work so it's useless. I'm testing a G1 on 1.6 now and it fails to connect also. Going to try openvpn today sometime. MY friend has his Eris working, so I know droid OS works.
I work for a large company and switching vpn hardware is out of the question, so if anyone has a 3g resolution for winmo, I won't have to trade my HD2.

Hi,
L2TR VPN with the Windows Mobile is working !!
The trick with L2TR VPN on WM is to use: a IP address (and NOT a hostname)
Strange, because using a hostname with PPTP VPN on the Windows Mobile it works.
With the trick L2TR works perfectly.
Chris

Hello. This is my first foray into VPN on Win Mo. I can establish a PPTP connection between my Imagio (stock Win Mo 6.5 R1) and my SBS 2008 server. I can ping the server and can browse the company web page. But I am having no luck accessing file shares. I have Schaps Network Plugin installed, but it doesn't see/can't access the shares. Will switching to IpSec VPN work? If so, any guidance on how to set it up on SBS 2008.

tilt and vpn issues over edge

i have isp.cingular provisioned and can connect some of the time.
1 vpn which goes to my home network works using vista as the vpn server connection. It does not always connect the first time though.
My work vpn which is pptp on a watchguard firewall, has 5% chance of actually connecting. Most of the error messages are talking about packets missing etc... When it does connect i cannot ping servers on the network but i see that the phone has a correct ip address and dns servers from the vpn. the gateway is the same as the ip assigned to the connection.
I have the same issue using the tilt over wifi from home where the vpn does not always connect at work.
I know the work vpn is fine since i use it all the time with vista's vpn dialup stuff.
Anyone got answers or ideas?

VPN Pptp over wifi in HTC Leo

Hi!
I have been trying to connect to my to vpn pptp server (witopia.net) for 2 days. I tried every combination that i could think, but there must be something i am doing wrong. I think the mobile is trying to connect to the vpn server through gsm because everytime i try to connect the gsm signal bars disappear for a few moments. How can i make sure that the vpn connection goes through wifi?
I have managed to actually connect to the vpn server, but i cannot access websites like facebook and youtube from the Leo (I live in China and they are blocked). I am able to access blocked services through my iphone and laptop through the same vpn connection.
Any suggestions?
Thanks

PPTP on WM6 is a major problem. Especially if the server (and most do) required MPPE. Its one of the few niggles I have about WM. If you own the server your best setting up the conection using L2TP/IPSEC.
Or if you dont own the VPN server, and have a server laying around the house (as I do) you could set up your server to use the PPTP VPN then set there server as a Proxy, and connect WM6 to the server via proxy...so basically WM6>Proxy>VPN>interwebs

Hi Jagnet, Thank you for your reply.
Unfortunately i am not able to use Ipsec/L2TP in China, only PPTP works fine with blocked sites.
After trying many combinations, there is a step that i havent been able to figure it out.
Once i am in Start > Settings > Connections (tab) > Connections (icon) > Advanced (tab) > Select Networks, How do i select the WIFI connection in "Programs that automatically connect to the internet should connect using" opcion? . On the modem tab i only can choose "celullar line", "Celullar line (GPRS)" or "Hayes Compatible on COM1:", there is nothing about WIFI there, so when i try to connect at the vpn server specified in "Programs that automatically connect to a private network should connect using", the phone seems to be trying to connect via GPRS.
¿Any ideas?
Thanks

joaquinmora said:
Hi!
I have been trying to connect to my to vpn pptp server (witopia.net) for 2 days. I tried every combination that i could think, but there must be something i am doing wrong. I think the mobile is trying to connect to the vpn server through gsm because everytime i try to connect the gsm signal bars disappear for a few moments. How can i make sure that the vpn connection goes through wifi?
I have managed to actually connect to the vpn server, but i cannot access websites like facebook and youtube from the Leo (I live in China and they are blocked). I am able to access blocked services through my iphone and laptop through the same vpn connection.
Any suggestions?
Thanks
Click to expand...
Click to collapse
having similar issues with HD2. CMCC as well, in China.
I am getting a proxy IP address if I check on ipchicken.com, etc
but I am not able to open FB.
I am not using the PPTP option, but using their SSL service with
openVPN. but STILL not working..
right now on support chats with witopia.

VPN PPTP is simply broken in WM. It will work, but only with no encryption at all, which beats the purpose.

First of all sorry for bumping this old thread. But I have been looking and it seems kinda close to what I`m doing, oh a little new to vpn.
I have managed to sucessfully connect the HD2 via VPN in connections only when on the lan (outwith I need to contact O2 to get it enabled apparently). I setup a dialup connection in Win 7; HD2 says I`m connected to the VPN.
However heres the thing. Am I right in thinking that folders by default have to be shared. Therefore when using resco I can see network folders anyway, when connected to wifi.
So how would I prove that I can see folders shared to the VPN and not on the LAN as I cant seem to prove whether I`m seeing the folder via LAN and not on the VPN?
Sorry if its confusing but perhaps you get my drift? Or am I missing the point entirely....