Database Users

VPN Client and VNC server compatible with XDA-II

Hello.
We are testing XDA-II for using the comercials of my job.
We have problems using VPN client software for this PDA. The server that we have is CheckPoint FireWall-1 and the client that I'm testing is CheckPoint SecuRemote PocketPC 2003 (Build 131) that you can download from the URL: http://www.checkpoint.com/techsupport/downloads/bin/securemote/4_1/ce_b0131/SC-PPC2K3-131.zip (is the lastest version for PocketPC 2003)
It seems that CheckPoint not support XDA-II on this last version (inside the documentation is write).. I don´t know why, couse I've been testing on the model XDA-I and it works fine.
We are pending of buying 40 XDA-II until we can solve this problem. So, we are looking for a solution or a VPN client that works on a XDA-II and been compatible with our Firewall server: certificates PKCS12# and IKE and IPSEC.
I have found 2 posibles clients: Movian VPN and NCP VPN Client but I don´t know if will works
The solution is change ROM or radio version?
The other question is about a software of VNC server for be install on the XDA-2 and that works fine. We need it for solve future problems of the comercials when are working out of the job.
Thanks in advance.
P.S: I´m writting from Spain and is possible that my english not works fine.

Im not sure if the mobile networks are the same in spain as they are here in the UK but here you have to get your provider to set you up on a different GPRS service in order to use VPN as the standard GPRS service does not support VPN. Perhaps this will be a place for you to start.
I use my M1000 in exactly the way you are describing and I can remote control any PC on our network using VNC.
Good luck!

shiro said:
Im not sure if the mobile networks are the same in spain as they are here in the UK but here you have to get your provider to set you up on a different GPRS service in order to use VPN as the standard GPRS service does not support VPN. Perhaps this will be a place for you to start.
Click to expand...
Click to collapse
OK. Here in Spain the provider "Telefonica" offers to the enterprises a VPN Service but it´s expensive and would make more slower the comunications :? . Telefonica have offered us this service when they have noticed about the problems we are having: the XDA-II is provided by Telefonica although here in Spain XDA-II is called TSM500.
Anyway, with notebooks we have no problem for using client firewall with certificates against our Firewall Server.
I think that PocketPC is a little notebook...why not works? :?:
shiro said:
I use my M1000 in exactly the way you are describing and I can remote control any PC on our network using VNC.
Good luck!
Click to expand...
Click to collapse
OK. I have tested vncviewer on XDA-II and it worked. But I want to install inside the XDA-II the VNC Server: I want control remotely a PocketPC using a PC
Thanks for your reply

VNC Server won't work with my Xda II also.
>> I want to install inside the XDA II the VNC Server: I want control remotely a PocketPC using a PC
I also had a problem with VNC Server,I used bluetooth network for testing.
The only method I knew now is to connect to pc via active sync, then run pocket controller program.

Hi there,
there is a VNC server for the ppc platform at:
http://www.pocketvnc.com/pocketVNC.aspx
currently it is in a kind of beta stage, but it works.

Thank you very much.
I will try it

Well I lost 3 day, to finding how to make it works.
Finally, it works, with XdaII.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
For details setting please check at http://en.pdamobiz.com/en/forum/forum_posts.asp?TID=85

I tried Checkpoint Remote on my XDAII yesterday through GPRS. Our firewall uses Checkpoint Client which is not compatible with the PocketPC Checkpoint Remote (so my system administrator informed me). The XDAII was authenitcated by the server, however the policies were not compatible. I asuume if a version of Check Point client is created for PocketPC then, despite not be supported, would work.

Our firewall uses Checkpoint Client which is not compatible with the PocketPC Checkpoint Remote (so my system administrator informed me).
Click to expand...
Click to collapse
Yes!, it seems that there is an incompatibility problem betwen CheckPoint SecuRemote and XDA-II or HTC Himalaya.
You can view here:
http://www.checkpoint.com/techsuppo.../ce_b0131/SecureClient_for_Pocket_PC_2003.pdf
The XDAII was authenitcated by the server, however the policies were not compatible
Click to expand...
Click to collapse
:shock: On my case, the XDA-II not comunicate with the Firewall server and don't download the policies neither certificates. How did you do? :roll:
Thanks for your reply

I don't think there is an incomatability problem between the XDAII and the Cehckpoint SecureRemote, as such, I think it is just not supported. Maybe Checkpoint do not have a unit to test on? I will need to reinstall on my XDAII and go through the process again, but will not be able to do for the next few days.

Here are the steps I took, which got me as far authenticating with the firewall.

I can't download it . Could you send it to my e-mail: [email protected]?
Thanks in advance

Terminal Services

Hi,
could an expert out there advise me if my theory is possible please?
Using Remote desktop/Terminal services : See whats on my PC/Laptop on the screen of my XDA2 - connected via cradle and usb(as usual). If so what do I put in the "Server" box of the XDA Terminal services prog and on the "Main" PC.. Do I have to make a Network first? Or ?
Thanks to all.
The site is great but much of it goes straight over my head at the moment..
P

Your theory sounds correct.
Try this thread for guides on setting up terminal services. But basically load terminal services on your PDA, also enable it on your desktop, enter desktop's ip address in the box on your PDA and connect.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
V

dear vijay555
where is the thread link >>

Use WIFI, it is better and faster when using terminal services.
Been using this method since last year.

Thanks but I do not have wifi or bluetooth...
There is a ref to doing it on MS site via the cradle and usb but then it shoots off in the over the web stuff...
I have tried just now but nothing connects.... But I notice that when I check my desktop (xp) pc under the rempte tab - I only have Remote Assistance.... Could this be it? Perhaps I do not have Remote Desktop installed then ! Eh? I will try to locate my original xp discs and see if I can install !!??

Remote desktop or Terminal services connect only via IP address.
So you can only connect via TCP/IP using WIFI on your XDA.
Bluetooth 1.1 has no IP address setting so it is not possible also.
I tried all methods since last year and WIFI is the only solution or if your XDA has a backpack you can use a CF type NIC for wired connection via crosslink or hub.
Still Wifi is the cheapest and cleanest alternative. You can use Adhoc settings between your PC if you have no WIFI access point.

Remote desktop or Terminal services connect only via IP address.
So you can only connect via TCP/IP using WIFI on your XDA.
Bluetooth 1.1 has no IP address setting so it is not possible also.
I tried all methods since last year and WIFI is the only solution or if your XDA has a backpack you can use a CF type NIC for wired connection via crosslink or hub.
Still Wifi is the cheapest and cleanest alternative. You can use Adhoc settings between your PC if you have no WIFI access point.

Apologies:
http://forum.xda-developers.com/viewtopic.php?p=205704#205704
V

VIJAY555 Thanks..
I try again but I do not have the check box as per...Click and enable second tick box "Allow users to connect remotely".
Also when I press connect on the xda - having enered my ip address - it tries to connect gprs or whatever. So now I have deleted any connections and switched the phone off and it just doesnt connect..
I am at a loss and I am sure this is not/should not be too difficult - should it?
Thanks for any help
KPM

you can do it with bluetooth
PEN which is bluetooth network is supported by 1.1 in vidconn's bluetooth stack
or you can just connect it with activesync over bluetooth that works too
well no it dont problem is when you connect it will sendt you to xp login screen for you to log in
and that disable activesync connection
kinda funny

With WM5 and ActiveSync 4.2 you can now use Terminal Services via Bluetooth or USB
I tried it successfully connecting to our Windows 2000 and 2003 server and my Windows XP remote desktop.

rayt said:
With WM5 and ActiveSync 4.2 you can now use Terminal Services via Bluetooth or USB
I tried it successfully connecting to our Windows 2000 and 2003 server and my Windows XP remote desktop.
Click to expand...
Click to collapse
Dear rayt,
Could you explain in detail how to do setting for this.

rayt said:
With WM5 and ActiveSync 4.2 you can now use Terminal Services via Bluetooth or USB
I tried it successfully connecting to our Windows 2000 and 2003 server and my Windows XP remote desktop.
Click to expand...
Click to collapse
?!? I have WM2005 and Activesync 4.2 (Build 4876). I see that the network over USB made by Activesync uses 169.254.2.1 for PPC and 169.254.2.2 for Desktop PC. So I tried to let Terminal Services connect on 169.254.2.2 but my Himalaya says that this connection cannot be used for TS. How did you do?
Cause you can still use IrDA, Bluetooth (using Widcomm Stack and PAN personal area network), or Wi-Fi... but not Activesync LAN... am I wrong?
Bye,

KPM said:
Thanks but I do not have wifi or bluetooth...
There is a ref to doing it on MS site via the cradle and usb but then it shoots off in the over the web stuff...
I have tried just now but nothing connects.... But I notice that when I check my desktop (xp) pc under the rempte tab - I only have Remote Assistance.... Could this be it? Perhaps I do not have Remote Desktop installed then ! Eh? I will try to locate my original xp discs and see if I can install !!??
Click to expand...
Click to collapse
This is the root of your issue.
You probably have Windows XP Home Edition. Windows XP Home Edition does not support using Remote Desktop Protocol (Terminal Services) to remotely access the machine.
This and the fact that XP Home cannot join a domain are the two main differences between XP Home and XP Professional.
If you had XP Professional, you would have a second check box at the bottom of the Remote tab that said "Allow Remote Dekstop Connections to this machine" or something similar.
I believe I saw a hack on the web about enabling Remote Desktop on XP Home a while back. Look it up on Google.
Once you get an IP connection to your phone, all you have to do is start up the Terminal Services / Remote Desktop application on the phone, enter the IP of the machine you want to remote into, and press connect. That is, provided the machine has the ability to accept the connection.
Hope this helps you out.
- DZ

I have a question. I can not get my Wizard to use Wifi OR Activesync to do terminal services. It is always trying to use the GPRS connection. How can I resolve this?

". It is always trying to use the GPRS connection. How can I resolve this?"
it's the general issue if you dont pick the connection of my network in
system->connection->connection->advance
it's not spc for terminal services it's for all network access
if you later on want to use gprs you have to set it back in there
last time i messed around with terminal services my problem was using activesync as network i got the 2000pro login box but when my pda log'd in my normal pc user was log'd out which ment that activesync was closed cutting the connection
a Pen profile would solve this of cause
or an update in activesync

file explorer with vpn support

I am trying to find file explorer with vpn support. I have tried gsfinder+ but it seems there's no support for vpn.
Does someone know any file explorer with vpn support?
-Matti-

What exactly do you mean by file explorer with vpn support?

Meaning that,
when try to use my firm shared resource/network folder. I first need vpn to connect inner network. Vpn works great but I cant somehow use shared resources.
Tested:
I connect vpn. Now I can show firm intranet web site so it means vpn works. I open gsfinder. try to connect network folder \\server\share but some error occurs.
And the question was, is there any file explorer that support vpn connections?
sorry my bad english...

the only apps that seem to work properly over a vpn are exchange active sync, pocket ie and the terminal services client.
maybe i'm missing something but i can't find any file explorer that will let me access the office network over vpn.
surely this is kind of the point of a vpn connection? to (securely) access the network's resources as if you were physically connected to it.
not being able to access fileshares is more than a bit rubbish!

I'm new in this forum, and I'm also quite newbie in windows mobile world, but here is how I managed to get PPTP VPN work with resco explorer:
1) Setup your VPN connection to "Settings -> connections -> connections"
2) Setup "Settings -> connections -> advanced -> Select Networks" as shown in pic 1
3) Add LAN addresses to "Settings -> connections -> advanced -> exceptions" (ie. 192.168.0.*/*)
You need to open the VPN connection first and then use resco explorer, it does not open the connection automatically.
I noticed from my firewall (m0n0wall) logs that it always tries to use my ISP:s "fake" WINS server, even if I try to map the share using IP address. So I put my WINS servers LAN IP address manually to connection settings and then it starts to work. Now I can securely access my local network folders anywhere using computer name i.e. \\SERVER\SHARE.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
P.S: Because windows mobile lacks basic network tools, I found VxUtils very useful.

Thanks a lot joksanen. I get it working now with gsfinder, so happy
Only thing I needed to do was that I add intranet addresess to exception list and vola its working...
Your instructions were great!!!

Finally got it working!!!
The missing link for me was setting up a WINS server.
Thanks for the tip

Where I need to write the WINS server?
I didn't have a WINS Server.
Does this mean I need to write the
IP Adress from the Computer, I would like to connect?
I got the same problem connecting with VPN a LAN-drive.
After connecting with OpenVPN or L2TP I can ping the Computer,
but I can't map a drive.
Does somebody have a Idea for me?
Thank you for any help in advance.
Namaste
Elena

Elena said:
Where I need to write the WINS server?
I didn't have a WINS Server.
Does this mean I need to write the
IP Adress from the Computer, I would like to connect?
I got the same problem connecting with VPN a LAN-drive.
After connecting with OpenVPN or L2TP I can ping the Computer,
but I can't map a drive.
Does somebody have a Idea for me?
Thank you for any help in advance.
Namaste
Elena
Click to expand...
Click to collapse
You can use the Cisco VPN Client for menelola coneksi on the device and also on computer
You can download it at http://tools.cisco.com/search/JSP/search-results.get?strQueryText=Cisco VPN Client for smartphone&Search All cisco.com = cisco.com&language = en&country = US&thissection = f&accessLevel = Guest

Hakim Rahman said:
You can use the Cisco VPN Client for menelola coneksi on the device and also on computer
You can download it at http://tools.cisco.com/search/JSP/search-results.get?strQueryText=Cisco VPN Client for smartphone&Search All cisco.com = cisco.com&language = en&country = US&thissection = f&accessLevel = Guest
Click to expand...
Click to collapse
Hi Hakim
Thank you very much for your respond.
But this is a alternative option and not the solution for me.
I have Firewall from Astaro with PPTP, L2TP, SSL VPN function.
With the Computer works like a charm, only my mobile device makes me problem.
There is a VPN issue with the Windows Mobile Devices, I have seen google many users that don't work correctly.
Namaste
Elena

VPN over 3G Shares-Problem and Landline Forwarding over IP

Hi folks!
I just got my Touch Pro and i'm wondering, if anyone managed to access network shares by a vpn over 3G connection.
My settings:
VPN Server PPTP Windows XP (yeah, the built-in, because its easier than openvpn) set to 192.168.77.1 and DHCP disabled
PPC:
To make things clearer, here's a picture:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
i've set them ips static and disabled access to the local gateway on my homeserver, so the PPC doesn't connect to the internet over the VPN
If you want your homeserver to scramble your traffic (for VoIP, etc.) you can enable the gateway which is 192.168.0.1 in my setup and use a second IP-Address range for the VPN INSIDE (!) 192.168.0. (like 20-30 or so).
No Proxies set, but an Exception for "*/*.*" IF i want internet-traffic routed over the vpn.
Now as i search with resco explorer for network shares it sees:
- only the server when set to an own IP-Subnet (192.168.77.)
- every computer at my home when set to the SAME IP-Subnet (192.168.0.)
- every computer at the 3G network which share the same IP (maybe this is the tricky part?)
But i just cannot connect to share, neither by entering the computername (\\PCNAME\C$), nor by entering an IP (\\192.168.77.1\C$). I can ping them though and accessmy local webserver by their vpn-IP with Opera. FTP is working too.
I already tried forwarding 135-139 and 445 to connect directly without a VPN, but this somehow ain't working for me, even not with another computer, maybe you have a sugg
I'd really like to know myself inside my home even if i step out of it (you guys will understand, my gf doesn't). Maybe you guys have an idea how to "simplify" the vpn-setup at my PPC, too. It's kind a mess what you have to do to force a vpn on every connection to the internet. A switch (All traffic through VPN, only local traffic through VPN and no VPN at all) would come in handy.
Second Part is:
I've managed to connect my modem to a landline and start making a call with my computer at home. I'd like to know if there is ANY way to use my landline over the vpn on my PPC, just imagine how much money you could save. I already tried a stupid way (Remote Computer with sound on the ppc) but this isn't very comfortable.
Call forwarding features enabled at home are NOT an option, because you would be charged...

sorry i dont have a solution for you but i suffer similar problem.
Setup incoming connection in vista network manager.
Set 1723 port forward in router to vista machine
setup VPN in WM6.1 with correct details.
PPC connects to vista machine, i can see it connected in network manager.
Using resco explorer, map network drive shows no shared folders.
also activating VPN requires alot of steps and clicks everytime you wish to use it.
I am maybe missing somthing obvious, maybe some tips to help us out? or a hint of where to start looking for the problem.
ps i can map network shares when connected to me local network via WIFI, just not possible over the internet

Thanks for the reply, nice to hear i'm not the only one.
I think this is related to the IP. I assume, you SHARE your IP with other users around you. I was reading this somewhere, here's another link:
http://mybroadband.co.za/vb/showthread.php?t=30837
check the last post.
The network provider uses NAT, so we have to find a workaround. Maybe your computer at home only sees the public IP address (the one you share...) and is unable to reply to the share request.
To prove this:
connect to 3G without VPN enabled. Then search for other network shares in Resco, you should see a bunch of other computers.
I will try to access a network share with windows xp over the 3G and post the results.

Interesting idea, ill give it a try later.
i am starting to think my router is having trouble forwarding the GRE packets, i have tried forwarding port 47 but its made no difference. i need to get home and check my router logs see if i can find out if the data is going where is should.
I may attempt to VPN via L2TP instead of PPTP, but im unsure of how to setup the incoming connection on the vista machine. Maybe it requires some 3rd party software, it did not seem obvious in vista how to choose L2TP instead of PPTP!!! But this should prove if the GRE packets are the problem

OK, i got VPN over 3G working with a laptop using the ICS of my Touch Pro.
So, next step, compare the settings!
On my Laptop (Connection --> Details)
Server Type: PPP
Transports: TCP/IP
Authentication: MS CHAP V2
Encryption: MPPE 128
Compression: MPPC
PPP multilink framing: Off
Server IP address: 192.168.5.50
Client IP address: 192.168.5.51
On the PPC:
Server Type: PPP
Transports: TCP/IP
Authentication: MS CHAP V2
Compression: MPPC
Server IP address: 192.168.5.50
Client IP address: 192.168.5.52
WHO could have thought of this? They're the same.
I will keep looking into "SLIP" (whatever this is) an The L2TP VPN Type
Reports will follow.
For Your GRE-Problem. You REALLY need a router who gets this right. I have a WRT54GL with DD-WRT which is very simple to set up. I also know of some Fritz!Box (es) that they forward this right. Maybe try to set up the vpn between 2 computers first. btw, IF you already see your PPC in "connected clients", the forwarding is working!

Network tools & VPN + RDP

Since my job requires it, I need a reliable tool to connect on remote VPN servers and using a remote desktop tool in order to manage terminal servers.
I have successfully used the built-in VPN client and connected on remote VPN servers very fast.
I also used a small tool (GTech Net Tools) by which I can ping hosts and resolve DNS names, etc. but not too much (BTW if anyone knows any application with full network capabilities, it's welcome to share with us here.)
Now, I used an RDP application (Remote RDP Lite 3.0.3) which claims to do what it's name says but I cannot connect to any server. In addition to this, the tools mentioned above could not even resolve the Netbios name of the server so I got suspicious and tried using the FQDN name of the server. Then it worked but my question now is why doesn't the VPN connection receive the DNS suffix provided by the VPN DHCP server (which works fine on windows PCs)?
Has anyone come around this?
BTW (The RDP client is not so useful as you cannot distinguish between mouse move & selections on the screen and clicks to move the desktop within the screen area) so, If anyone knows of a better and more efficient tool, please share.

andreasy said:
Since my job requires it, I need a reliable tool to connect on remote VPN servers and using a remote desktop tool in order to manage terminal servers.
I have successfully used the built-in VPN client and connected on remote VPN servers very fast.
I also used a small tool (GTech Net Tools) by which I can ping hosts and resolve DNS names, etc. but not too much (BTW if anyone knows any application with full network capabilities, it's welcome to share with us here.)
Now, I used an RDP application (Remote RDP Lite 3.0.3) which claims to do what it's name says but I cannot connect to any server. In addition to this, the tools mentioned above could not even resolve the Netbios name of the server so I got suspicious and tried using the FQDN name of the server. Then it worked but my question now is why doesn't the VPN connection receive the DNS suffix provided by the VPN DHCP server (which works fine on windows PCs)?
Has anyone come around this?
BTW (The RDP client is not so useful as you cannot distinguish between mouse move & selections on the screen and clicks to move the desktop within the screen area) so, If anyone knows of a better and more efficient tool, please share.
Click to expand...
Click to collapse
Well, one easy way to solve this problem is to use Teamviewer. But you'll be required to install a client on each terminial you want to control. But on the other hand, you will be available to see all running terminals on a clientlist. Aswell the opportunity to connect to each one of them.
And the app has a great way to let you control the mousepointer. Even let's you use the whole keyboard.
But still, this require you to install teamviewers client on each terminal you want to connect to.

sparven89 said:
Well, one easy way to solve this problem is to use Teamviewer. But you'll be required to install a client on each terminial you want to control. But on the other hand, you will be available to see all running terminals on a clientlist. Aswell the opportunity to connect to each one of them.
And the app has a great way to let you control the mousepointer. Even let's you use the whole keyboard.
But still, this require you to install teamviewers client on each terminal you want to connect to.
Click to expand...
Click to collapse
I use teamviewer in some cases but it's not the solution for every case. You still need RDP
BTW: Is there teamviewer client in the market? I'll need that as well

Have you tried Wyse's PocketCloud? It has had decent write-ups. I downloaded it yesterday to try to get a remote desktop up over RDP from a VMWare instance, but the VMWare View options dont seem to be in the free version. If you know all the server connection credentials for a pure RDP connection then it looks like it ticks all the right boxes for that.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}