Database Users

I can't VPN with GPRS anywhere!

I'm trying to VPN using GPRS to several networks which I have access to but I can't seem to be able to VPN them with my PDA2K. I can VPN them easily with no special configuration with my XP.
My i-mate keeps trying "Connectioning XX VPN..." and then aborts after about half a minute saying to check the username and password. The username and password are correct.
I called my cellular provider and they said that I should be able to connect to a VPN only if 'UDP Encapsulation' is defined on the VPN server?!?!? Well.. What is this thing? I'm trying to connect to big corp VPN, they wouldn't even listen to 'special requests'. I tried to connect to 4 different VPNs and I could not connect to any single one of them!
I really need that VPN connection via GPRS with my PDA2K. Any help would be more than appreciated. Maybe a different client than the built in VPN client of the WM2003SE ?
Thanks in advance.
Sorci

anyone?
bump for help. this gotta be a common prob.

Your GPRS connection will be subject to some form of NAT (Network Adress Translation) through your provider. VPNs don't get along well with NAT as the firewall doing the address translation modifies the packet header after it has had it's hash value calculated by the client (in this case your PDA). The receiving firewall will reject the packet as the hash values for the (now modified) packet don't match.
UDP encapsulation gets around this by encapsulating the encrypted and authenticated (secure) packet in a UDP packet which will be happily modified by the NAT'ing firewall. The receiving firewall will decapsulate(is that even a word?) the UDP packet and process secure packet inside as normal.
James

Thanks a lot Jamz for the thorough detailed info. I appreciate it.
So what's the fix? I tried several other VPNs and was unable to access them as well.. I can't just call all these providers and make some strange requests for a 'one guy with a pda2k and a gprs connection' that wants them to change their VPNs, enabling or disabling protocols or port.
Any other solution?

sorci said:
Any other solution?
Click to expand...
Click to collapse
Are you sure you're using the built-in VPN client in Windows, and not something like a Cisco VPN client?
You could try something like the Movian VPN client (not sure this is still made). I've used this previously with a Cisco VPN and it is fully configurable to handle multiple VPN types.

I've got a similar problem. Am trying to set up a temporary GPRS connection into my work LAN (I work for myself but 2nd child due shortly so want to be able to connect in from home for a couple of weeks only). I've got MS Win2000 Server set up to accept incoming VPN connections and it works fine on a dial-up connection but refuses to authenticate my username/pasword whenever I try to get the GPRS working.
As it's only going to be used for a short period of time, I'm loathe to spend out on any specific hardware/software but if anyone's got any suggestions, I'd be grateful.
If it helps, the LAN is behind a Netgear DG834GT ADSL modem/router/firewall and VPN PPTP and IPSEC are allowing in and out on it. The server is on a static IP address in the range 192.168.99.x.

GPRS Connections and VPN
With O2 you have to aks for VON connectivity to be enabled and connect to vpn.o2.co.uk instead of mobile.o2.co.uk. (by the way you can't access the web whilst connected to the vpn.o2.co.uk AP)
I suspect that most providers have simalair requirements
Dave

XDA IIi VPN over WiFi problem

Hope some one can help with this - I am sure I've seen posts on the subject but can't seem to find them
Set up a PPTP VPN connection to use the wifi connection, all advanced setting set to enable this (same settings work on and ipaq with 2003se)
what happens is the xda connects to the vpn server receives an ip address and then drops
the logging on the server shows no errors
I have spoken to O2 who recognised this as a known issue but had no timescale for a fix/workaround
I have tried different radio versions and different OEM's roms to no avail
I suspect either the hardware or the WiFi driver but I'm no expert on pocket pc stuff
Would be grateful for a share of thoughts or even fixes on this subject
as this was the primary reason I bought six of them

Have tried latest o2 rom - issued by o2 today
doesn't fix the wifi/vpn problem and doesn't upgrade the radio either
another half hearted effort by o2 :twisted:

I realise that this is no consolation but I have also had this problem trying to connect the WM3 VPN client. You seemed to have got a bit further by getting an IP addr from your VPN server. Another point to note is that if you try to connect to your VPN server via GSM (instead of WiFi),
the connection session goes a little further (if you check thru the server logs) but again, in my case, it ends up with a "VPN server problem, check your username and password...".
Our VPN server happens to be a PIX firewall, can I ask which VPN server are you using ? :x

VPN
We are using a simple Windows server VPN PPTP for the purposes of testing - it works fine over GPRS just not wifi
I have had an email from O2 confirming that they are aware of the problem - but the last rom update is the last one they are going to issue
and they have no plans to fix the problem
I will be taking this further with O2 and will let you know the result
in this forum - but I don't hold out much hope

VPN won't work with a 10.x.x.x network

Hi,
I have a little problem that I am sure there must be an easy solution to!
I have set up a VPN on my Universal to connect to work. The problem is that my work's VPN server allocates me an ip address in the 10.x.x.x address range. All servers that I need to access behind the VPN have addresses in this range as well. Unfortunately, my ISP (T-Mobile UK), also allocates an address in the same range. Therefore, whenever I try to acccess a server at work, WM5 suffers confusion since it doesn't know whether to route the message through the VPN or directly out to the internet through the cellular modem.
I have been able to verify that the VPN thing works if my work network was on a different network address since initially, I was unable to VPN into my PC at home for the reason described above. I changed the ip addresses of all machines on my home network and now everything works fine at home.
Unfortuantely, I am unlikely to convince the IT people at work to change the address of all their machines. Similarly, I don't think I will have much success with T-Mobile and so is there anything I can change at my end to avoid this problem?
Thanks in advance for any help.
Mark

Narrowing the ip address may help, eg 10.0.0.1 is different to 10.1.0.1.
are you using this over wifi or gprs? if the phone provider is involved, I assume its gprs.
you could try and esablish your ip address as fixed rather than part of the pool, so the it guys assign a range for remote connections as say 10.0.0.100 to 10.0.0.150 as remote dial in connections, thus giving you a separate number.
the best way though I would have thought is for you to a fixed ip address known to you and the servers, and then hard type the ip address as your vpn settings, then establish that ip address as part of the exceptions settings.
in order to use exceptions though you have to know the range, or the exact ip address you will be assigned, and must be different to your telco.
not much of a solution, just some suggested areas to look at.
cheers
s.

hi guys, just out of curiosity what software are you using for VPN? on my laptop my company has installed cisco vpn, does it need to be a cisco vpn for wm5?? :?

From bad to worse...
Thanks for the reply Simon.
Unfortunately, I just went to try out some of your ideas and discovered that I can't get the VPN to connect at all now. It used to connect OK but then have routing problems whenever I tried to access anything. And my home VPN worked perfectly. Now, I can connect to neither.
I simply switched over to an O2 sim and with minimal configuration changes could verify that my setup still works OK and so it must be something to do with T-Mobile blocking ports. They weren't blocked yesterday!!!
Yesterday I "upgraded" my GPRS account from T-Mobile's Web'N'Walk to Web'N'Walk Professional and now I find I have this problem. Is this just a coincidence, or could it be that the Pro version has more severe restrictions than the consumer version?
I have emailed Customer Services to see what they have to say.
I will post back when I get a reply from T-Mobile.
mstar, I am no VPN expert, but for me, using a Windows XP hosted PPTP VPN it works after a fashion (above problems excepted!). I am using the VPN client built into Windows Mobile 5. I think you stand a good chance of getting it working using the built-in client.
Mark

I simply switched over to an O2 sim and with minimal configuration changes could verify that my setup still works OK and so it must be something to do with T-Mobile blocking ports. They weren't blocked yesterday!!!
Click to expand...
Click to collapse
I've heard on the grapevine that T-mobile have explicitly refused certain types of traffic on the web-n-walk
VOIP is the biggy...
I was seriously thinking about getting signed up - but no point if IPSEC is a prob, as well as VOIP.
Not sure how they can tell it's Skype traffic :?
http://www.reghardware.co.uk/2006/05/09/t-mobile_bans_voip/
for more info

An Update
An update on my VPN problem. Yesterday after total failure to get the VPN to connect, I emailed T-Mobile customer services.
Although they have not replied, when I tried it this afternoon I found that it was working again as before even though it had not been working first thing this morining. Of course I have not changed anythng at my end to cause it to break and then start working again (but they all say that, don't they!).
So, I don't know whether this was just a momentary fault, or whether T-Mobile have changed something to re-enable the VPN ports for me. I can now VPN in to my home PC, but the problem connecting to my work VPN with the 10.x.x.x address remains.
So, Sikkutz, depending on the address of the remote network, you may or may not be able to get a VPN to work using T-Mobile's Web'N'Walk.
By the way, my VPNs both use Microsoft's PPTP and not IPSec and so there may be different issues with that protocol.
I have discovered that O2 provides a separate acccess point, vpn.o2.co.uk, that causes a public ip address to be allocated to the device, ie not on the 10.x.x.x network. It would seem that this is designed to address this very problem. Does anyone know if T-Mobile can provide something similar?
Mark

There must be a solution
Hi!
I have the same problem with my Qtek 9000 (VPA IV). I can connect to my VPN Gateway but the routing into LAN failed. I get a 10.x.x.x address from Vodafone Germany and my LAN uses 10.98.8.X. :-(
But there must be a solution! My previous Qtek 9010 (VPA III) had the same problem, but it was able to route between the 10.-networks after a firmware-upgrade to version 1.40.01! But I don't no why!
What was changed in firmware to enable routing???
Daniel

i have the same issue aswell, I am reluctant to change the IP range of my machines as that usually causes trouble for the servers
Any other ideas?
Thanks

maybe stupid thing, but did you guys try dna forwarding (that is what I use from home office, not on pda to be honest..
Maybe I just did not get your point....

What kind of VPN server do you use? I'am using a Cisco PIX and use a PPTP VPN almost everyday. I can use the 10.1.x.x network at the location the PIX is located (this PIX is directly connected to the 10.1.x.x network).
I can't however use any of the remote offices using 10.2/10.3.x.x etc.
This is becaus of the lack of routing abilities in the PPTP implementation.
With an IPSEC tunnel (additional software needed) the remote offices can be reached without any problems.
I know that some IP implementation disallow routing between a public address and any 10.x address. To solve this you could give your VPN clients an address from a 10.x subnet .

hi sorry been away awhile,
I use the routing and remote admin snapin of Windows server 2003 to manage my VPN, I can connect fine using the phone as a modem with my notebook but as soon as I try accessing any URL/resource on my network it fails, e.g. we have a intranet site on http://servername but it wont open this up.
Any Ideas?

POP3 email issues. WiFi weirdness.

Hi folks,
First post here, I've had my G2 (Hero) for nearly a week and think it's amazing, but I have encountered a problem.
My Hotmail sends and receives just fine whether I am connected by WiFi or 3G, but my pop3 email will send and receive if I'm on WiFi but it will only
receive if I'm out and about on 3G. It's a bloody nuisance and I can't
think of any reason that would be the case.
Has anyone else found this?
Cheers!
V.

It seems like the SMTP server that you're using is not accessible using the 3G network. ISPs commonly block access to their SMTP servers from other networks. E.g., if my regular ISP is ISPA (to which I connect using WiFi) and my mobile operator is ISPB (to which I connect using 3G), I cannot access ISPA's SMTP server when I am connected through ISPB and vice versa.

The most likely cause of your problem is that your POP provider's SMTP-server doesn't accept message relaying from the addresses your phone is assigned when connecting over the phone network. Many providers permit unauthenticated relaying from addresses in their own network. In that case, make sure that the outgoing server (SMTP) for your POP-account is configured with authentication (username/password). Encryption (TLS or SSL) is also recommended. If that isn't enough, contact your POP-provider and ask if they at least can enable global access to authenticated relaying over SSL (port 465) or authenticated SMTP relaying in general.

Ah, I wonder if this is what the girl in the T-Mobile shop was going on about when she asked if I wanted to pay another £5 a month for email? Perhaps they have, as you have suggested nerfed the email capability over 3G. That would be a proper nuisance, I've not had a network do that to me before
Seems a bit of a nerve to make you pay for unlimited internet/data and then charge extra for email!

Vormulac said:
Seems a bit of a nerve to make you pay for unlimited internet/data and then charge extra for email!
Click to expand...
Click to collapse
That's not the issue. Any half decent server administrator makes sure that his/her servers do not relay messages on behalf of the entire planet. However, when done properly the provider will have a system that allows relaying for authenticated clients, and will provide all the information their customers need to set up their clients accordingly.

If your POP mail provider, presumably your ISP, cannot supply authenticated SMTP access (check this first!), you have a few realistic options (I'm sure there are more!)
Buy access to an authenticated SMTP server (e.g. http://www.authsmtp.com/mobile/index.html) which will allow you to send email via SMTP regardless of how you are connected.
Use an intermediate email service like Gmail to collect your POP3 email and send replies via Gmail.
Your cellular provider will have their own SMTP gateway - you can change your email settings to use their SMTP gateway when connected via cellular data, but I guess you will have to do this manually every time you want to switch between cellular and WiFi.
Note that this isn't a fault with Hero or Android - it's your mail provider!
Regards,
Dave

My ISP is Blueyonder (well, Virgin now). I just think it's strange that they should be rejecting the smtp connection as I have set up these two pop3 accounts on every mobile I've had for the last 10 years and they've worked perfectly (a Siemens, a few Sony-Ericssons and a Nokia and that's on Virgin Mobile, Orange and 3 networks). It would be a shame if I was limited to using my Hotmail for everything from now on.
I'll drop Virgin customer services a line and see if there is some way they can do this magical authentication thing of which you speak.

VPN on Vodafone UK

Hi All,
I successfully set up the VPN to access the network of the company I work for, mainly to check emails on the go (3G - Vodafone UK).
The VPN does connect, but when it comes to visit our internal website there is no way to make it work - the page just doesn't load (but VPN is still connected). Same thing for emails - I can't set up an email account (email server is in the private network).
Suggestions?
My colleague on iPhone (Vodafone) and Galaxy S (Orange) have no problems.
Thanks!

I have never managed to get pptp vpn to work on any android so I would love to hear of a solution. Vpn remains connected but no browsing possible. I have heard that on unencrypted vpns it works.
Sent from my GT-N7000 using xda premium

A long time ago - roughly 2.5 years I had trouble with Cisco ipsec vpn profiles on vodafone.
Basically they would never work on vodafones network but would work on t-mobile etc
After extensive research it turned out to be NAT related.
What I ended up doing was setting up the profiles on a server, enabling split tunnelling in the profile on the ASA and RDPing to the server then tunneling from there.
VPNs through a Virtual Machines on my laptop when using the phone in AP mode do now work though and have done for the last year.

qazzi76 said:
A long time ago - roughly 2.5 years I had trouble with Cisco ipsec vpn profiles on vodafone.
Basically they would never work on vodafones network but would work on t-mobile etc
After extensive research it turned out to be NAT related.
What I ended up doing was setting up the profiles on a server, enabling split tunnelling in the profile on the ASA and RDPing to the server then tunneling from there.
VPNs through a Virtual Machines on my laptop when using the phone in AP mode do now work though and have done for the last year.
Click to expand...
Click to collapse
Quick update:
The VPN actually works great over wi-fi. I can connect in a second and browse whatever I want. On 3G either doesn't work or it is really slow so that the page times out (hard to tell).
I am confused, is it device or network related?
I wouldn't like to touch the server, even because it works with iPhones on O2 and Vodafone itself! And Vodafone obviously is bouncing me to Samsung.
I suspect that the Galaxy Note has some sort of bottleneck somewhere.
Is dropping from H+ to 3G an issue when connecting on VPN?

I can connect successfully using vpn both to my work, and another site, both using PPTP vpns.

ralphrmartin said:
I can connect successfully using vpn both to my work, and another site, both using PPTP vpns.
Click to expand...
Click to collapse
Ralphmartin,
Do you connect over mobile internet?
Which phone do you have?

Update for Vodafone customers on Android.
Ask Vodafone to activate the Mylan access point. The only downside is that you wont be able to use any internet beyond the VPN.
Annoying, but at least something.