Database Users

XDA IIi VPN over WiFi problem

Hope some one can help with this - I am sure I've seen posts on the subject but can't seem to find them
Set up a PPTP VPN connection to use the wifi connection, all advanced setting set to enable this (same settings work on and ipaq with 2003se)
what happens is the xda connects to the vpn server receives an ip address and then drops
the logging on the server shows no errors
I have spoken to O2 who recognised this as a known issue but had no timescale for a fix/workaround
I have tried different radio versions and different OEM's roms to no avail
I suspect either the hardware or the WiFi driver but I'm no expert on pocket pc stuff
Would be grateful for a share of thoughts or even fixes on this subject
as this was the primary reason I bought six of them

Have tried latest o2 rom - issued by o2 today
doesn't fix the wifi/vpn problem and doesn't upgrade the radio either
another half hearted effort by o2 :twisted:

I realise that this is no consolation but I have also had this problem trying to connect the WM3 VPN client. You seemed to have got a bit further by getting an IP addr from your VPN server. Another point to note is that if you try to connect to your VPN server via GSM (instead of WiFi),
the connection session goes a little further (if you check thru the server logs) but again, in my case, it ends up with a "VPN server problem, check your username and password...".
Our VPN server happens to be a PIX firewall, can I ask which VPN server are you using ? :x

VPN
We are using a simple Windows server VPN PPTP for the purposes of testing - it works fine over GPRS just not wifi
I have had an email from O2 confirming that they are aware of the problem - but the last rom update is the last one they are going to issue
and they have no plans to fix the problem
I will be taking this further with O2 and will let you know the result
in this forum - but I don't hold out much hope

VPN won't work with a 10.x.x.x network

Hi,
I have a little problem that I am sure there must be an easy solution to!
I have set up a VPN on my Universal to connect to work. The problem is that my work's VPN server allocates me an ip address in the 10.x.x.x address range. All servers that I need to access behind the VPN have addresses in this range as well. Unfortunately, my ISP (T-Mobile UK), also allocates an address in the same range. Therefore, whenever I try to acccess a server at work, WM5 suffers confusion since it doesn't know whether to route the message through the VPN or directly out to the internet through the cellular modem.
I have been able to verify that the VPN thing works if my work network was on a different network address since initially, I was unable to VPN into my PC at home for the reason described above. I changed the ip addresses of all machines on my home network and now everything works fine at home.
Unfortuantely, I am unlikely to convince the IT people at work to change the address of all their machines. Similarly, I don't think I will have much success with T-Mobile and so is there anything I can change at my end to avoid this problem?
Thanks in advance for any help.
Mark

Narrowing the ip address may help, eg 10.0.0.1 is different to 10.1.0.1.
are you using this over wifi or gprs? if the phone provider is involved, I assume its gprs.
you could try and esablish your ip address as fixed rather than part of the pool, so the it guys assign a range for remote connections as say 10.0.0.100 to 10.0.0.150 as remote dial in connections, thus giving you a separate number.
the best way though I would have thought is for you to a fixed ip address known to you and the servers, and then hard type the ip address as your vpn settings, then establish that ip address as part of the exceptions settings.
in order to use exceptions though you have to know the range, or the exact ip address you will be assigned, and must be different to your telco.
not much of a solution, just some suggested areas to look at.
cheers
s.

hi guys, just out of curiosity what software are you using for VPN? on my laptop my company has installed cisco vpn, does it need to be a cisco vpn for wm5?? :?

From bad to worse...
Thanks for the reply Simon.
Unfortunately, I just went to try out some of your ideas and discovered that I can't get the VPN to connect at all now. It used to connect OK but then have routing problems whenever I tried to access anything. And my home VPN worked perfectly. Now, I can connect to neither.
I simply switched over to an O2 sim and with minimal configuration changes could verify that my setup still works OK and so it must be something to do with T-Mobile blocking ports. They weren't blocked yesterday!!!
Yesterday I "upgraded" my GPRS account from T-Mobile's Web'N'Walk to Web'N'Walk Professional and now I find I have this problem. Is this just a coincidence, or could it be that the Pro version has more severe restrictions than the consumer version?
I have emailed Customer Services to see what they have to say.
I will post back when I get a reply from T-Mobile.
mstar, I am no VPN expert, but for me, using a Windows XP hosted PPTP VPN it works after a fashion (above problems excepted!). I am using the VPN client built into Windows Mobile 5. I think you stand a good chance of getting it working using the built-in client.
Mark

I simply switched over to an O2 sim and with minimal configuration changes could verify that my setup still works OK and so it must be something to do with T-Mobile blocking ports. They weren't blocked yesterday!!!
Click to expand...
Click to collapse
I've heard on the grapevine that T-mobile have explicitly refused certain types of traffic on the web-n-walk
VOIP is the biggy...
I was seriously thinking about getting signed up - but no point if IPSEC is a prob, as well as VOIP.
Not sure how they can tell it's Skype traffic :?
http://www.reghardware.co.uk/2006/05/09/t-mobile_bans_voip/
for more info

An Update
An update on my VPN problem. Yesterday after total failure to get the VPN to connect, I emailed T-Mobile customer services.
Although they have not replied, when I tried it this afternoon I found that it was working again as before even though it had not been working first thing this morining. Of course I have not changed anythng at my end to cause it to break and then start working again (but they all say that, don't they!).
So, I don't know whether this was just a momentary fault, or whether T-Mobile have changed something to re-enable the VPN ports for me. I can now VPN in to my home PC, but the problem connecting to my work VPN with the 10.x.x.x address remains.
So, Sikkutz, depending on the address of the remote network, you may or may not be able to get a VPN to work using T-Mobile's Web'N'Walk.
By the way, my VPNs both use Microsoft's PPTP and not IPSec and so there may be different issues with that protocol.
I have discovered that O2 provides a separate acccess point, vpn.o2.co.uk, that causes a public ip address to be allocated to the device, ie not on the 10.x.x.x network. It would seem that this is designed to address this very problem. Does anyone know if T-Mobile can provide something similar?
Mark

There must be a solution
Hi!
I have the same problem with my Qtek 9000 (VPA IV). I can connect to my VPN Gateway but the routing into LAN failed. I get a 10.x.x.x address from Vodafone Germany and my LAN uses 10.98.8.X. :-(
But there must be a solution! My previous Qtek 9010 (VPA III) had the same problem, but it was able to route between the 10.-networks after a firmware-upgrade to version 1.40.01! But I don't no why!
What was changed in firmware to enable routing???
Daniel

i have the same issue aswell, I am reluctant to change the IP range of my machines as that usually causes trouble for the servers
Any other ideas?
Thanks

maybe stupid thing, but did you guys try dna forwarding (that is what I use from home office, not on pda to be honest..
Maybe I just did not get your point....

What kind of VPN server do you use? I'am using a Cisco PIX and use a PPTP VPN almost everyday. I can use the 10.1.x.x network at the location the PIX is located (this PIX is directly connected to the 10.1.x.x network).
I can't however use any of the remote offices using 10.2/10.3.x.x etc.
This is becaus of the lack of routing abilities in the PPTP implementation.
With an IPSEC tunnel (additional software needed) the remote offices can be reached without any problems.
I know that some IP implementation disallow routing between a public address and any 10.x address. To solve this you could give your VPN clients an address from a 10.x subnet .

hi sorry been away awhile,
I use the routing and remote admin snapin of Windows server 2003 to manage my VPN, I can connect fine using the phone as a modem with my notebook but as soon as I try accessing any URL/resource on my network it fails, e.g. we have a intranet site on http://servername but it wont open this up.
Any Ideas?

PPTP on WM5

Can anyone connect to VPN (PPTP) using WM5 via wireless or GPRS?? When i use my old XDAIIi or II, i can connect by now using WM5 i cannot.
Hope those can connect please share. tks.

I can connect to a Windows 2000 PPTP VPN via wireless -- make sure that in Settings/Network Cards/Network Adapters, your network card is set to connect to the Work network.
Also, in Settings/Connections/Advanced/Select Networks, make sure that the lower droplist (private network) is configured to use the Work network.
Aside from those two items, I can't think of any other gotchas.

Ya still doesn't work......

do you know what the vpn device is that you are trying to connect to?
windows servers tend to be quite reliable. there are known issues with some checkpoint and cisco devices.

Hello,
I am having the same problem! I cant connect via VPN (PPTP) to my Windows Server 2003 RAS setup. It works perfectly fine on my laptop over the internet but when I try to connect using my Cinguar 8125 I get a generic "Invalid username/password' kind of error message. I have tried several differnt things, but I was wondering if there are security settings that are turned off or something like that? I actually have my RAS policy to let any device establish a VPN connection (obviously as long as it is authenticated) so I dont know what to do next... any suggestions??

RickoT said:
Hello,
I am having the same problem! I cant connect via VPN (PPTP) to my Windows Server 2003 RAS setup. It works perfectly fine on my laptop over the internet but when I try to connect using my Cinguar 8125 I get a generic "Invalid username/password' kind of error message. I have tried several differnt things, but I was wondering if there are security settings that are turned off or something like that? I actually have my RAS policy to let any device establish a VPN connection (obviously as long as it is authenticated) so I dont know what to do next... any suggestions??
Click to expand...
Click to collapse
For me works fine. I have only 2 connections:
a) my isp, with gprs configuration for vodafone
b) my work network, with the vpn connection definition (ip address, user, passw and domain)

I have it set up the same way and I still get the password issue... what kind of policies do you have in RAS?

RickoT said:
I have it set up the same way and I still get the password issue... what kind of policies do you have in RAS?
Click to expand...
Click to collapse
did you uncheck the security in the connection with the server?
take care with the name user, times exchange get crazy: server/user or only user name for the user field...

Public IP
afterlife said:
Can anyone connect to VPN (PPTP) using WM5 via wireless or GPRS?? When i use my old XDAIIi or II, i can connect by now using WM5 i cannot.
Hope those can connect please share. tks.
Click to expand...
Click to collapse
Hi! I am not an Network expert at all, but here in Norway with one teleoperator we have to use a special access point name on My Work Network connection to get a public IP-address so Network accepts the connection. Perhaps nothing to do with your problem, but also we experience a lot of PDA users having no problem with pre-WM5 devices and much problems with WM5 devices and VPN

Success with L2TP/IPSec VPNs?

Has anyone had any success with L2TP/IPSec VPNs and Windows Mobile 5 or 6? I have no problems with getting PPTP to work but have NEVER had any success with L2TP/IPSec. I have valid Client & Server Certificates but I have never been able to get a connection; in fact the HTC Wizard I have never even attempts to make a connection (I have a sniffer on the Ethernet port my Wireless AP is connected to). I have tried using Certificates & Pre-Shared Keys but the results are the same - The Wizard never attempts to connect, with PPTP it works every time.
The Server I am using is a Windows 2003 RRAS server and I have verified with a Windows XP Client that L2TP/IPSec works.
I have asked the question before but have not had any helpful replies. I would be grateful if anyone who has set this up successfully can let me know and maybe give me a run-down of the steps you used. I am not interested in any 3rd party VPN clients, it must be the built-in one.
Thanks
Andy

Hi
Yes I have had the same issue with both the wizard and now hermes tried wm5 and wm6. I think it maybe related to NAT-T translation as am unsure from my reading weather MS supports NAT-T on the mobile end. If data session is being NATed by your provider then this may be the cause. Probably need to check the ip packets comming from the phone to see what it is sending out. Is that what you did or is the sniffer at the other end.

sebjepb said:
Hi
Yes I have had the same issue with both the wizard and now hermes tried wm5 and wm6. I think it maybe related to NAT-T translation as am unsure from my reading weather MS supports NAT-T on the mobile end. If data session is being NATed by your provider then this may be the cause. Probably need to check the ip packets comming from the phone to see what it is sending out. Is that what you did or is the sniffer at the other end.
Click to expand...
Click to collapse
It has nothing to do with NAT traversal. WM5 (and WM6 probably?) does NOT support NAT-T, however I am not attempting to get this working over NAT. As I said I have a put a sniffer on the Ethernet port my Wireless AP is connected to and my Wizard does not transmit anything when configured for L2TP/IPSec (except a DNS lookup for the VPN server name if I enter it's DNS name as opposed to it's IP address). With PPTP it works and I can happily see the packets it transmits on the sniffer.
This is really frustrating as it looks like no one has ever got this to work
I had a HP iPAQ 6365 previously with Windows Mobile 2003 and I managed to get it working on this quite easily
Andy

Andy
I now have this working on both the wizard and the hermes.
I am a bit confused with your last response as ipsec port 4500 is nat-t and is required and is being transmitted by both the wizard and hermes in my case.
My setup maybe somewhat different to yours as I have a windows sbs2003 server running isa and rras. It is sitting behind an adsl modem router connected to the internet. The data connection on my phone is edge network on the wizard and HSDPA on the Hermes. Also have tried this via WiFi as well.
Steps I used
On server side router
On adsl modem router setup forwarding udp ports 500 ipsec, 4500 nat-t and 1701 l2tp and protocol 50 IPsec ESP. I selected l2tp/ipsec from its predefined list but noticed it missed udp 1701 so added this manually.
On Server.
ISA management selected Network Configuration right click and selected Allow vpn connections. This essentially setups the ip filters to allow incomming protocols and then sets up rras for pptp and l2tp ports.
In rras configure a preshared key by right click server/properties/security tick allow custome ipsec policy... and added preshared key.
On mobile
settings/connections
My Work Network
Edit my vpn servers and added new IPsec/L2TP connection.
Works a treat hope this helps
I did notice on another forum something about disabling the phone skin but I did not have to do this.
Regards
Stephen

sebjepb said:
Andy
I now have this working on both the wizard and the hermes.
I am a bit confused with your last response as ipsec port 4500 is nat-t and is required and is being transmitted by both the wizard and hermes in my case.
My setup maybe somewhat different to yours as I have a windows sbs2003 server running isa and rras. It is sitting behind an adsl modem router connected to the internet. The data connection on my phone is edge network on the wizard and HSDPA on the Hermes. Also have tried this via WiFi as well.
Steps I used
On server side router
On adsl modem router setup forwarding udp ports 500 ipsec, 4500 nat-t and 1701 l2tp and protocol 50 IPsec ESP. I selected l2tp/ipsec from its predefined list but noticed it missed udp 1701 so added this manually.
On Server.
ISA management selected Network Configuration right click and selected Allow vpn connections. This essentially setups the ip filters to allow incomming protocols and then sets up rras for pptp and l2tp ports.
In rras configure a preshared key by right click server/properties/security tick allow custome ipsec policy... and added preshared key.
On mobile
settings/connections
My Work Network
Edit my vpn servers and added new IPsec/L2TP connection.
Works a treat hope this helps
I did notice on another forum something about disabling the phone skin but I did not have to do this.
Regards
Stephen
Click to expand...
Click to collapse
What ROM are you running on the Wizard? I am currently running a WM6 ROM but I previously used the official QTEK update (AKU 2.3 I think?) and then various WM5 AKU 3.3 ROMs. I have tested this with all of them and none have worked. If I could just see it attempt to connect I would be happy The fact is it doesn't transmit anything at all and all I see is the dialogue box on the Wizard saying 'Cannot Connect'....
With regards to NAT-T I read that the VPN Client in Windows Mobile 5 was not capable of this, I could be wrong however?
Andy

Sorry didn't have signature updated I'm running WM6 MBE on the wizard and WM6 Black on the Hermes
Ok I am still confused can you tell me exactly how you are connecting to your work network. Wifi or gprs.
Can you check also.
Under settings/connections/advanced/select networks make sure you have a separate ie different connections for the internet and private network. The Intenet settings will be your service provider grps settings.
For the private network mine is set as My Work Network. Edit this and make sure sure you do not have any modem connection listed ie we want to make sure it goes out over our existing connection and does not try to make a new connection. Make sure the vpn tab has your vpn settings as required they must be listed here and not under the Internet connection.
If you are using WiFi you must make sure the network setup is Connects to: The Internet and not set to Work. If it is work the VPN will not connect. You can not change this on the fly need to disconnect and setup again.
PM Me When you get to work given time diff I should be home. Might be able to test connection to my server at home then can check logs etc
Also use Task manger v2.7 to view netsats on phone to confirm udp ports and ip routes etc. It will show you if the phone is indeed sending should see upd ports 500 4500 and 1701 being used.
Stephen

sebjepb said:
Sorry didn't have signature updated I'm running WM6 MBE on the wizard and WM6 Black on the Hermes
Ok I am still confused can you tell me exactly how you are connecting to your work network. Wifi or gprs.
Can you check also.
Under settings/connections/advanced/select networks make sure you have a separate ie different connections for the internet and private network. The Intenet settings will be your service provider grps settings.
For the private network mine is set as My Work Network. Edit this and make sure sure you do not have any modem connection listed ie we want to make sure it goes out over our existing connection and does not try to make a new connection. Make sure the vpn tab has your vpn settings as required they must be listed here and not under the Internet connection.
If you are using WiFi you must make sure the network setup is Connects to: The Internet and not set to Work. If it is work the VPN will not connect. You can not change this on the fly need to disconnect and setup again.
PM Me When you get to work given time diff I should be home. Might be able to test connection to my server at home then can check logs etc
Also use Task manger v2.7 to view netsats on phone to confirm udp ports and ip routes etc. It will show you if the phone is indeed sending should see upd ports 500 4500 and 1701 being used.
Stephen
Click to expand...
Click to collapse
I am using WiFi, this is all in a test environment so I have full control over everything. Under Connections I have 'My ISP' and 'My Work Network' listed. 'My ISP' has a modem entry, 'My Work Network' has no modem but has a VPN listed with the IP Address of the VPN server and set to L2TP/IPSec using a certificate on the device (I have tried with pre-shared key also). The WiFi entry is configured as 'Connects to The Internet'.
I enable the WiFi and verify I have connectivity, I then go to Connections, click on My Work Network, 'Manage existing connections' select the VPN tab, hold down the stylus on the entry and click connect and I almost immediately get the dialogue box saying 'cannot connect'. If I edit the VPN entry so it is PPTP it works every time. As I said I have a sniffer on so I can see what the Wizard transmits and it when set to L2TP/IPSec it doesnt transmit anything whatsoever, with PPTP I can capture the whole conversation.
Thanks for any help you can give me.
Andy

Ok I have now also tried using certificates and your right it does not seem to sending any info at all. It might ahve something to do with checking the certificate store first I ahve had issues before with Cisco vpn and certificates you have to get the nameing and certification justs right before it even starts the connection.
So first thing lets try pre shared keys as I have got that working. I will PM you my server details if you wish to try that first.
Stephen

sebjepb said:
Ok I have now also tried using certificates and your right it does not seem to sending any info at all. It might ahve something to do with checking the certificate store first I ahve had issues before with Cisco vpn and certificates you have to get the nameing and certification justs right before it even starts the connection.
So first thing lets try pre shared keys as I have got that working. I will PM you my server details if you wish to try that first.
Stephen
Click to expand...
Click to collapse
I have just re-tested this and using a pre-shared key - same result
There is a brief flash of 'connecting' when you click connect but then the 'Cannot Connect' dialogue box appears, nothing gets transmitted. I have tried entering different IP addresses (public, private etc) just to see if it will transmit anything - it doesn't regardless of the IP address I enter.....
Andy

Andy
check your pm
Are you sure the wireless ap is actually passing the ipsec/l2tp traffic.

Working, well sort of.....
After a lot of messing around I now have this working, at least partially........
Following a soft-reset I can connect to a Wireless network OK (either a new one or one that is pre-configured), I can then connect the VPN using L2TP/IPSec. I can also manually disconnect the VPN and re-connect without any issues. However, when the wireless is disconnected (i.e. turned off from CommManager) and then re-connected the VPN will never work again, unless the Wizard is soft-reset.
Does anyone know what is likely to be causing this? some application in memory or a registry 'state' entry
Does anyone else see this behaviour?
Andy

I had exactly this with L2TP/IPSec on the MDA Vario II, but the same settings work as they should on my Athena.

ADB100 said:
After a lot of messing around I now have this working, at least partially........
Following a soft-reset I can connect to a Wireless network OK (either a new one or one that is pre-configured), I can then connect the VPN using L2TP/IPSec. I can also manually disconnect the VPN and re-connect without any issues. However, when the wireless is disconnected (i.e. turned off from CommManager) and then re-connected the VPN will never work again, unless the Wizard is soft-reset.
Does anyone know what is likely to be causing this? some application in memory or a registry 'state' entry
Does anyone else see this behaviour?
Andy
Click to expand...
Click to collapse
HI!
How can you DISCONNECT?? Do you get a "Disconnect" button or menu item somewhere??
How do you know you are connected to VPN?
Thank you,
Dmitry.

A bit late but...
I have a possible solution to the fact it doesn't send ANY traffic on a connect attempt - on my XDA mini S (HTC Wizard) it requires me to put something in the 'domain' field on the username/pwd screen before it will start the IPSec negotiation....
Now I just have to get it o complete the process with the sonicwall...
David

Revisiting this
I can't get PPTP going on my HD2. Thoughts?

bumping this message

I have tried all the usual vpn software (for 3g connectivity) the only third party software that connects is the ncp software, but I get stuck because it wont accept a challenge response grid.
Symantic - won't auth
Green something - doesn't connect
MS VPN - doesn't connect
I have been able to connect in the past with an iPhone, but without a java i can't connect to most motorola hardware devices at work so it's useless. I'm testing a G1 on 1.6 now and it fails to connect also. Going to try openvpn today sometime. MY friend has his Eris working, so I know droid OS works.
I work for a large company and switching vpn hardware is out of the question, so if anyone has a 3g resolution for winmo, I won't have to trade my HD2.

Hi,
L2TR VPN with the Windows Mobile is working !!
The trick with L2TR VPN on WM is to use: a IP address (and NOT a hostname)
Strange, because using a hostname with PPTP VPN on the Windows Mobile it works.
With the trick L2TR works perfectly.
Chris

Hello. This is my first foray into VPN on Win Mo. I can establish a PPTP connection between my Imagio (stock Win Mo 6.5 R1) and my SBS 2008 server. I can ping the server and can browse the company web page. But I am having no luck accessing file shares. I have Schaps Network Plugin installed, but it doesn't see/can't access the shares. Will switching to IpSec VPN work? If so, any guidance on how to set it up on SBS 2008.

Does anybody know of a IPSEC VPN client that works?

I'm trying to connect my phone (Samsung SCH-i760) to my co's Cisco VPN concentrators (all IPSEC) via the phone's wifi.
I've tried Bluefire and AnthaVPN and they make my wifi connection disappear. The wifi doesn't re-appear until I remove the vpn software.
I've also tried the NCP's client and when the software is installed the phone won't turn back on after it's turned off after some period of inactivity. The only way to get the phone back on is to remove and reinstall the battery.
Does anybody know of a client that works?
Thanks!

gm2racer said:
I'm trying to connect my phone (Samsung SCH-i760) to my co's Cisco VPN concentrators (all IPSEC) via the phone's wifi.
I've tried Bluefire and AnthaVPN and they make my wifi connection disappear. The wifi doesn't re-appear until I remove the vpn software.
I've also tried the NCP's client and when the software is installed the phone won't turn back on after it's turned off after some period of inactivity. The only way to get the phone back on is to remove and reinstall the battery.
Does anybody know of a client that works?
Thanks!
Click to expand...
Click to collapse
There is a built-in L2TP/IPSec VPN client in Windows Mobile......
I use this to connect to both Cisco PIX/ASA Firewalls as well as Cisco routers. Have a search as I think I even posted some configurations as well.
Andy

ADB100 said:
There is a built-in L2TP/IPSec VPN client in Windows Mobile......
I use this to connect to both Cisco PIX/ASA Firewalls as well as Cisco routers. Have a search as I think I even posted some configurations as well.
Andy
Click to expand...
Click to collapse
There's no facility in the built-in VPN client to pass groupname and grouppwd, so unfortunately it doesn't work with my co's VPN infrastructure.
Thanks!

gm2racer said:
There's no facility in the built-in VPN client to pass groupname and grouppwd, so unfortunately it doesn't work with my co's VPN infrastructure.
Thanks!
Click to expand...
Click to collapse
You can specify the group as part of the username and the VPN device should interpret it (assuming it has been configured to do so?), however I don't think there is a way to send a separate group password.
Code:
[email protected]!group-vpn
or
[email protected]#group-vpn
If you are using strong encryption with good PSK's or Certificates then the group password doesn't really give you that much (IMO). I prefer to keep things simple for users so there is less for them to break. The built-in VPN client in Windows is pretty simply (same as the dial-up) and can be easily packaged using the Windows CMAK tools.
Cisco has recently released the AnyConnect VPN client for Windows Mobile. it might be worth having a look at this.
Andy

Andy, unfortunately it's my co's VPN that I'm trying to connect into, and they mandate groupname and grouppwd, so I guess I'm outta luck with the built-in VPN client...
Regarding the Cisco AnyConnect VPN client, I thought it only did SSL VPN and didn't have any facility to do IPSec VPN.

Weird, I have been using Bluefire v2.7.5.706 for about a year and a half with out a problem. I connect to my company ASA5000 IPSEC VPN client without a problem. Of course, its not over WiFi but over the 3G network. But even with the software installed, I have not had WiFi disappear on me. Did you try establishing a wifi connection first, then connecting through Bluefire?

There is also this VPN Mobile software (http://www.thegreenbow.com/mobile.html) for mobile devices.
Give it a try and tell us what want you think. You can try it for 30 days free of license.
Here is the software download page for VPN Mobile.
Same here for VPN Client software for laptop.
Greenbow team.