I have been trying to establish a VPN connection with my xda over gprs to my office computer (PPTP) but I am not sure I have made the appropriate settings. There is no place to type in my username and password (except for the gprs connection).
Can anyone guide me on how to ensure a proper connection?
Also, I am not sure what the VPN connection will mean in terms of pocket pc functionality. Will it mean that I can access my office e-mail which would otherwise require a direct dial in? Will I be able to synchronize with my office outlook?
I would greatly appreciate your help. Thanks, apap
VPN
hi,
suggest ringing 0845 6006886 (O2 GPRS Helpline).
They have a PDF Doc that may help. They will e-mail it to you.
Doc Title VPN_Access_over_mobile_web.
Good luck
Ric.
Thanks for your help Ric.
I have followed the settings as discussed in the pdf file but I have not had any success. I will call the helpline.
private networks
Please note that if you are using O2 and your office have a private network range in the 10.0.0.0 range, you will have problems due to the subnet mask used, and the fact that O2 use NAT.
I have written a utility which monitors the routing table, and overcomes this problem by narrowing the net mask. Anyone who is interested, contact me for this software: [email protected]
I tried to 'give' this software to O2, but they didn't seem to care. They didn't really seem to understand the problem.
Re: private networks
martinlong1978 said:
[...]
I have written a utility which monitors the routing table, and overcomes this problem by narrowing the net mask. Anyone who is interested, contact me for this software: [email protected]
I tried to 'give' this software to O2, but they didn't seem to care. They didn't really seem to understand the problem.
Click to expand...
Click to collapse
How about this: we'll dedicate a page to it on this site, and possibly even include a small tutorial that deals with networking stuff in general. If everyone in the know contributes a bit of their knowledge, I'll lay it all out, add the screenshots and put it on a page.
Re: private networks
Thanks.
Here's the gist of it.
Often, corporate networks use addresses in the range 10.0.0.0 - 10.255.255.255 in order to create private networks. This address range is designated for this purpose, and is the only class A range designated as such.
O2's GPRS network uses NAT in order to cut down the number of IP addresses they require. In doing so, they also use the private address range.
It is not recommended practice to use NAT for subscription networks, as they do not provide a 'complete' internet service. Certain peer-to-peer services will not work through NAT, as they require both devices to be publicly addressable - this however, is not the cause of this issue.
Lets look at the process of connecting to a VPN.
1) a 'dial up' connection is made to the GPRS service. When I say 'dial up' I do not mean a circut switched call is made (before you techies correct me), but still, some kind of PPP connection is made.
2) IP addresses are negotiated. An address is allocated to the device in the 10.0.0.0 range. During this allocation proceedure no subnet mask is specified, and the device assumes 255.0.0.0 as for a class A network.
3) The device adds a route to 10.0.0.0 mask 255.0.0.0 on the GPRS virtual adapter.
The connection to the VPN can now be made
1) a 'dial up' connection is made to the VPN service.
2) IP addresses are negotiated. An address is allocated to the device in the 10.0.0.0 range (depending on corporate config). During this allocation proceedure no subnet mask is specified, and the device assumes 255.0.0.0 as for a class A network.
3) The device adds a route to 10.0.0.0 mask 255.0.0.0 on the VPNvirtual adapter.
All seems fine - no? Try connecting to any host on the private network. Mail server, terminal server, web server. I bet you it doesn't work. That's because two routes have been allocated on the 10.0.0.0 mask 255.0.0.0 network. When you try and connect to your mail server (eg 10.0.0.6) the packets go straight out through the first matching route - the GPRS, and never even see the VPN route.
My software tool watches the route table (I use a function in the IPhlpapi.dll for those interested), and waits for a change. When it spots a change, it re-writes the routing table, narrowing the routing entries to 24 bit masks (it works out the missing octets from the gateway address).
So an example would be:
10.0.0.0 mask 255.0.0.0 gw 10.34.23.254 if GPRS
10.0.0.0 mask 255.0.0.0 gw 10.0.0.1 if VPN
becomes
10.34.23.0 mask 255.255.255.0 gw 10.34.23.254 if GPRS
10.0.0.0 mask 255.255.255.0 gw 10.0.0.1 if VPN
This allows you to access stuff in the 10.0.0.0 network.
Drawback:
You won't be able to peer to peer with other O2 XDA's who aren't on the same class C netowork - big deal, does anyone do this?
You are limited to contacting hosts on the same class C within your private network. I am working on broadening this range.
Files:
There is 1 file required - the executable, which should be placed in the startup folder. Let me know where to send this, and it can be made public.
util.
To keep you updated. I've just updated this slightly. It no longer requires MFC. It is 1 x 5.5 K executable.
Regards
Martin
Please note, not everyone will need this update. Only if your office uses a 10.0.0.0 subnet.
Thanks for all the enquiries.
Can I share the files - VPN_Access_over_mobile_web.pdf?
Hi ,
Can I share the files - VPN_Access_over_mobile_web.pdf? I am also testing the VPN conection over XDA GRPS, but if it is possible , pls mail me that PDF files. [email protected]
Thx
Li
CAn anyone please email me the VPN_Access_over_mobile_web.pdf file? Please Please Please!
Thanks
Ian
[email protected]
Don't have this file to hand, but if it is the one I think (provided by o2 UK) it is on their site somewhere.
VPN to Win2k server (with fixed ip, and internal ip of 192.168.blah-de-blah) worked first time following those instructions, as did Terminal Server used to remotely control it.
HTH
imordey said:
CAn anyone please email me the VPN_Access_over_mobile_web.pdf file? Please Please Please!
Thanks
Ian
[email protected]
Click to expand...
Click to collapse
VPN Access
For goodness sake.
http://www.o2.co.uk/mobileweb
Select the VPN Access tab!
Download the PDF from there.
A little surfing goes a long way
Re: util.
Hi Martin, I tried to mail you for the VPN fix but it bounced, any chance you could email it to me or attach it here? paul_w at cix dot co dot uk.
Thanks,
Paul
--
To: [email protected]
Subject: XDAII VPN fix
Sent: Sat, 28 Feb 2004 13:15:42 -0000
did not reach the following recipient(s):
[email protected] on Sat, 28 Feb 2004 13:30:55 -0000
The recipient name is not recognized
The MTS-ID of the original message is: c=us;a= ;p=trace computers
;l=DATA1504022813301W4WRN23
MSEXCH:IMS:Trace Computers PLCatawiseATA15 0 (000C05A6) Unknown
Recipient
martinlong1978 said:
To keep you updated. I've just updated this slightly. It no longer requires MFC. It is 1 x 5.5 K executable.
Regards
Martin
Click to expand...
Click to collapse
Does anyone have this file? Or any contact details for martinlong?
Thanks,
Paul
What VPN does for me.
Me and my significant other have 3 servers in our closet and host exchange (email), Active Directory, and outlook mobile access as well as things like ftp, web, and most importantly VPN. All my email that comes to us goes into my Outlook box on the exchange server then activesync sends a text message to my tmo pda phone and activesync begins downloading my mail and synchronizes my contacts and calendar. Once that is complete, a VPN connection is started up and the pda syncs with my desktop computer, so programs like vindigo and files like my documents are up to date. I even have the option of installing over the air or browsing my files on my computer at home.
Hey Sytris, I'm setup the same way pretty much but I've tried with 2 different devices and I can't get it to sync with the local computer. The active synce with exchange works fine and the vpn connects just fine. The active Sync app on the server then gets the connection from the PPC but shows connected as guest instead of my device and the active sync on the PPC still shows connecting but never goes anywhere. Did you run into that when setting yours up? Any suggestions? Thanks - Jim
About PPTP connection via PC I found nice tutorial step by step here at supervpn.net/blog
About mobile, you should try to contact some VPN provider, they have nice live chat support so they can answer you probably on all your questions.
For setup your vpn on your phone you can find solution on worldvpn.net
I have been dealing with this for some time and am finally reaching out. I really hope this makes sense, if not please tell me and I will try to clarify.
I have two windows 2k3 servers at home with shares on each. I can see and map the shares with my pda on one server just fine but the other doesn't work at all. I can see both computers on the pda and the shares are accessible from 6 other machines both logged as domain users and local accounts. I've made sure the permisions were identical on both machine (along with checking everything I could think of a million friggin times) I finally noticed that if I enter false credentials into the login for the working server then I get a failed security audit with the faulty username along in the event log along with a second separate one showing my wireless network username for school as the attempted username . On the non working machine I only get this school username and nothing else regardless of what I enter into the pda. The best I can figure, one server is allowing the failed attempt and moving on to the good and the other is stopping after the first. Someone PLEASE tell me why a username ONLY entered into the wireless network settings of my schools network (settings that I have removed with no effect) would be forced into my attempts to map a network drive? Ima lose my god damn mind!
FFS!!! Finally found the solution. Evidently the policy setting in 2k3 domain controllers requires SMB signing while member servers don't. This is why I could stream from my regular server and not my domain controller. Resco explorer's FAQ of all things had the answer and the solution if anyone needs it.
Resco said:
Windows CE networking is not able to map the drives from the servers using SMB signing.
This can be solved by changing the following setting in the Domain Controller Security Policy under Local Policies --> Security Options
Microsoft Network Server: Digitally sign communications (always): Disabled
Click to expand...
Click to collapse
__________________
Feathered Access -
Free Live Mobile Television
http://featheredaccess.com
Anyone has a step by step guide on how to use remote desktop to control ur PC from your Titan? I just dont know what to put for all these fields.
for easier setup, use logmein.com, its free and works from the titan. Do it all the time, great for getting around pesky firewalls and complex network setups.
hey I do use logmein.com for work.. How do i use logmein for mobile? Is there a mobile version? or u go in through opera?
240sxer said:
Anyone has a step by step guide on how to use remote desktop to control ur PC from your Titan? I just dont know what to put for all these fields.
Click to expand...
Click to collapse
This how I use it when connecting to my computer at work.
Computer: IP Address
User Name: Domain\vane0326
Password: xxxxxxx
Domain: Your Company Domain name
For the IP Address I had to go into my company firewall and link my internal ip address to a external ip address. When connecting to your company computer use the external IP address.
There are various ways to do this but this is how I use it.
vane0326 said:
This how I use it when connecting to my computer at work.
Computer: IP Address
User Name: Domain\vane0326
Password: xxxxxxx
Domain: Your Company Domain name
For the IP Address I had to go into my company firewall and link my internal ip address to a external ip address. When connecting to your company computer use the external IP address.
There are various ways to do this but this is how I use it.
Click to expand...
Click to collapse
Be careful about opening the remote desktop port (3389) to all inbound traffic. There are some serious implications for your network security.
LogMeIn is much safer and totally free. It also works with non-static IP addresses. Visit from your computer first and set the program up there, then visit from IE Mobile and set it up on your phone.
My respect
I search this forum,other forums,web...and I can't find appropriate
explenation,user guide,or how to, for this matter!!!
I hope somebody can help me!
RDP going me crazy!
I install Remote Desktop Mobile on my Xda Trion,setup my PC(i hope so),and trid to connect,but...nothing
I have Huawei MT882 v2.0 ADSL modem,on my WinXPpro.,and I must setup static IP address and forward port(http://www.portforward.com/english/routers/port_forwarding/Huawei/SmartAX-MT882v2/Utorrent.htm) because of uTorrent.
When I tried to connect to my PC with address 192.168.x.x (or 5.129.252.10)Remote Desktop Mobile return me: Cannot connect.Likely reasons are: 1. The remote computer...
I wonder,what should I do,to make this thing work?
Which IP addres I should use,do I must install Remote Desktop Web Connection from Add/Remove Windows Components/Internet Information Service/World Wide Web Service,...should I forward some ports,NAT,what add in Select Remote User...WHAAAAAAAAAAAAAAT!!!?
PS I tried with Hamachi!Unsuccessful!Also tried VNC,Logmein
Please help!!!
First of all this forum is actually about HTC telephones and windows mobile.
But to answer your question :
You first need to make sure the router is setup to forward port 3389 (RDP port) to your ip address of the pc which you enabled RDP on.
Next thing to do is check if there is a seperate firewall (software of hardware) which could interfere with communication. Keep in mind port 3389 must be open to accept connections.
As a general rule it is not advisable to post your ip address to the public like this , esp if your posting about RDP, beacuse RDP will open your pc to the world.
Good Luck !
BTW , google is your friend.
Re:
Thanks for the answer,and advice!
I agre! It's not realy smart from me to public my address!!!
But!
I'm desperate(housewife)! )
Do you know,how to forward port on my ADSL modem,and which address i should use?
I tried all this with disabled firewall!
What is with Remote Desktop Web Connection,should I install it?
Googling almost 5 days and nights!
Xda Trion=HTC TyTN
As i don't know ALL ADSL modem in the world , i will try to explain it.
You should not need to install the web connection , this is only needed if you want to make a webpage which has an option to use the RDP inside the webpage.
Most routers/modem have a web interface. You can get into the interface by entering the ip addres of your router into a webbrowser. As you already setup port forwarding for Torrent I thought you already knew how to do this.
Once inside the webinterface , you should look for port forwarding / nat translation or similar. There should be an option to add a port forward.
Add as outside (internet) and inside (your network) port 3389 and TCP as protocol.
Next you need to know your local ip address. You can get this with opening a command prompt and entering ipconfig. The ip addres is usually something like 192.168.x.x (x is a number)....
Add this number to the forementioned line and you should be good to go. Apply the port forwarding (sometimes it's needed to save the settings to get them applied).
Blody Huawei MT882v2.0
Before my current ISP(Telekom Srbija) I use Neobee ISP,and with Neobee I didn't know for port forwarding etc.
Everything was Plug&Play,like it should be!
My torrent work for straight A,DHT status in torrent was green like Greny Smith apple without port forward...Those Were The Days...
On some Serbian forum( http://www.elitesecurity.org ) I find useful( i hope ) thread about port forwarding, and i hope that my Chinese sh.. modem Huawei can handle 2 port forwarding at the time, and also hope i don't screw my formerly port setup!
I write, if success!!!
Thanks P.
go to your router, and click on "port forward" tab.
port: 3389
protocol: both
ip address: 192.168.1.140 (based on your screenshot)
also need to enable "remote" on your Xp or Vista, and must have a user with password logon.
Forward port 3389
I just forwarded port 3389 on my Huawei MT882!
Nothing happened!
All same shi...!
I can't connect to my fuc... PC!!!
Some ideas???
Forward port 3389
I just forwarded port 3389 on my Huawei MT882!
Nothing happened!
All same shi...!
I can't connect to my fuc... PC!!!
Use LogMeIn free instead i#d say, its really simple to use and much more secure.
LogMeIn
I'v downloaded LogMeIn free,create account,bla-bla...
When I log in,somewhere on the page i read something like... three more try...
What's the catch?
Link,how to,etc...???
Thanks in advance!
There is no catch I've been using it for over a year with no worries, you might have signed up to try out pro version. But after that's finished will revert to free.
Hi all,
I'm trying to add network share to my omnia - without success. Share is located on \\192.168.XXX.XXX\SharedFolder. I cannot use NETBIOS name (computer name), because this is disk pinned to my router (TL-1043ND) which as far as I know can be addressed only by IP. I was able to connect to both my PC's (using NETBIOS name: \\MyComp1\ShareName) without any problem. I'm using Resco and HTC Network plugin.
Can anyone explain why I cannot add network share using IP in WM ?