Hi,
Using a HTC HD2 I am trying to access my home network via WIFI (WPA2/PSK - AES). Some of it works, some of it doesn't and I was hoping some of you would be able to point me in the right direction:
I can connect to intranet pages (for instance utorrent web interface) via IP, but not via hostname.
I cannot connect to network (smb) shares at all, either via IP or hostname.
A program which requires the hostname to work (since I use it over Hamachi VPN as well as locally and don’t want to change the IP based on how I use it) does work over Hamachi and not over WIFI.
I'm quite confused
Any help would be greatly appreciated!
Cheers,
Elco
Sounds like your DNS isn't working. Do you have custom DNS servers configured in the "Name Servers" tab of network card config?
Yhanks for responding!
It should get it from DHCP (though I have tried assigning a static IP and dns, but this gave the same result)
Also, I have another older win mobile device, and with the same setttings it does allow me to access the network shares (by IP and hostname)
I've combed all settings regarding wifi and network, but since they are the same I am guessing it is probably a different at the registry level?
The HTC HD2 does have 2 broadcom wifi adapters mentioned though, a normal one and one with a DHD postfix.
Cheers,
Elco
@Talisman_: same problem here. have you solved it?
Exactly same problem on xperia x2. I just set on manual temporary.
Are you using Hamachi on your phone?
Did you have this problem prior to installing Hamachi?
The reason being is Hamachi installs a network interface which exists whether or not Hamachi is running
You may want to check your Data Connection settings and see if it has applied the "requires a proxy" setting
What are you using as your DNS server though, that is the question.
If it's your broadband router, then chances are it won't be able to serve DNS requests for internal devices (ie computers on your home network).
If that's the case, you'll need a proper DNS server (get an old PC and install Linux) and create a local domain such as home.local, or if you've got a registered domain, you can even set it up the same (domain.com for instance) just tell the DNS server it's the domain master.
It's been yonks since I played around with Linux so I can't tell you how, much easier with Windows Server
Some people advise against using the same public domain name as an internal domain name, but it just means you add A records for any public addressess such as WWW.domain.com or mail.domain.com if it's accessable outside your network as well as inside.
Alternatively, if you're only going to be accessing them via the home network then you could try adding a few hosts to your registry (use the windows calc or similar to convert each IP address number to Hex)
http://windowsmobilepro.blogspot.com/2006/04/etchosts-file-equivalent-in-windows.html
As always, you modify the registry at your own risk.
Related
HI guys,
Does anyone know how to get a static IP address when using the GPRS connection to the internet. The reason being is because our corporate firewall has to recognise the device through it's IP. Is there any other possible methods for recognising the user?
Also does a VPN work well over GPRS and is there any extra configuration involved on the VPN server
Cheers
Any answers would be great.
Unfortunately there is no simple answer to your question. AFAIK you cant get a fixed ip on gprs, but if your using the right firewall and the right vpn host you dont need to.
I use and supply windows sbs 2003 servers and vpn into them regularly. I have also used citrix to achieve similar results. Might be a bit difficult to persuade your firms it dept to set up something like that for 1 person though.
PM me if youd like any advice.
BillyB said:
HI guys,
Does anyone know how to get a static IP address when using the GPRS connection to the internet. The reason being is because our corporate firewall has to recognise the device through it's IP. Is there any other possible methods for recognising the user?
Also does a VPN work well over GPRS and is there any extra configuration involved on the VPN server
Cheers
Any answers would be great.
Click to expand...
Click to collapse
Hello Billy,
You ask a good question, but the answer isn't simple. Most carriers do have two types of APN (Access Point Name) provision for your SIM: "private" APN (which provides a non-routable IP assignment from behind a NAT, for basic browsing and e-mail functionality) and "public" APN (that provides a routable IP assignment, which is the Minimum Requirement for a more sophisticated connection type, such as VPN, etc). However, both of them are assigned by a DHCP (Dynamic Host Configuration Protocol) Server on a GGSN (Gateway GPRS Support Node) of your particular GPRS network operator. In either case, the end result will obviously be a DYNAMIC IP address on your GPRS terminal (be it a laptop PC, a PDA, or phone)
Some carriers do offer what is called a "dedicated APN" provision, which gives the subscriber their own IP range to choose from (almost like a small subnet), but it is only available to corporate giants like Pepsi (for example).
Now, to sum it up, you must have the proper APN provisioned on your Mobile SIM account (which the provider will normally call something like a "VPN data package" in billing terms). Then, you must obviously establish a GPRS session before you can connect your VPN client (but remember that most basic VPN clients work the best). It is pretty sad to say, but Microsoft Windows-embedded VPN client on Win2k/XP Pro so far has performed the best with no quirks whatsoever. It has to be via PPTP...L2TP has also worked for me..otherwise, the fancier (and more secure) the VPN tunneling protocol, the more its likely to fail. Normally all you need for a basic MS WIndows VPN client config is the Server name (or IP address), the user name, and the password.
Hope this helps,
Let me know how it goes,
Alex
PS. PM me if you have further questions.
VPN and TS Its like pulling teeth
hi all this has got to be the most anoying problem ever. i can connect to O2 vpn access point and hence i can connect to my work vpn server. however as soon as i try to open a TS connection to my desktop (through the vpn) the VPN connection is dropped and i never connect. Can anybody tell me why? if i have a vpn connection to my work server why does TS try to make another connection and bomb out the original. Is there a fix or another way of doing this i.e. does a external IP have to be nat'd to my desktop IP on port 3389? all help greatly appreciated. Ian
Background to my problem
At our office, we have Small Bus Server 2003 with the new Exchange SP installed. Our web site domain name is not mapped to our local server, but hosted on a external commercial one.
Our router/firewall has one fixed IP address that is connected to the web, while all the workstations have local address like 192.168.10.xxx, etc.. To configure Activesnc to work from outside our network, all I had to do is enter the fixed IP address into the server settings in Active sync and it connects.
The problem occurs if the Wizard is connected to a PC via USB in the network. At this point, active sync is looking for an external IP address instead of the real address of the server which is 192.168.10.xxx.
So, I configured a custom DNS with our domain hosting provider to have "mail.domain.name" redirected to our fixed IP address. With a little tweaking on the router, this works! In ActiveSync I can enter just "mail.domain.name" instead of the external IP and it works from the outside.
Now, to sync while connected to the network, I have to manually change the server address every time to reflect 192.168.10.100. Ideally, i would like to somehow tell my local server that any request inernally sent to "mail.domain.name" gets redirected to 192.168.10.100 instead of going out on the web. This would solve my problem of changing the server address everytime I'm in the office.
Does anyone know how to do this in Small Business Server 2003? Is there another way to keep the same server settings in/out of our network?
Thanks
Rob
Yet another way that your device can be protected is whenever it's able to hit the internet. It would update a dynamic DNS entry on your account at DynDNS.org with hopefully a public IP address it gets and from there, if you have a program like SOTI Pocket Controller Professional, you can instantly gain remote access to the device. That's just one program of many that could benefit from this.
Is there any program for the Pocket PC that updates a dynamic DNS name there?
Any news on programs like this?
Would be very much appreciated!
If you look up posts by OdeeanRDeathshead you will find a discussion somewhere (sorry, don't remember the exact link) that you can't get a public IP over GPRS connection, so unless the phone it self initiates a connection you can not reach it.
This means that unless you device is connected via WIFI a program like this would be useless.
Sorry to be the bearer of bad news.
OK, I understand that.
I found an IP using www.whatsmyip.org. For example 123.123.123.123
I'm using my phone to connect to an Exchange Server. But I only want my phone to reach te server, so I have set up my firewall to forward (NAT) certain ports from source 123.123.123.123 to the Exchange Server. The rest of the IP's are going somewhere else.
But the IP changes of course, guess T-Mobile has more gateways in use. Maybe to another everytime you connect.
Is there a program that sends a query to whatsmyip.org (or another site like this) and then updates the IP address in a DNS record (like dyndns.org). Any help would be appreciated.
I want to make a WiFi connection on my school. But I have to make some setting changes. I have the HTC Trinity with WM6.
I have to satisfy to these settings:
- Wlan network name: tue
- Security mode: 802.1x with dynamic WEP keys
- Authentication protocol: PEAP with MSCHAPv2
- Root certificaat: GTE Cybertrust Global Root
Where do I make these changes?
On your's school router or wifi access point in your school
but sadly I have to make these changes on my pda
According to school these are the settings specially made for smartphones/pda
Markos said:
but sadly I have to make these changes on my pda
According to school these are the settings specially made for smartphones/pda
Click to expand...
Click to collapse
If it is set on your's router in school, then your PDA or smartphone will see these settings automatically
Otherwise look in start-settings(instellingen)-connections(verbindingen)-wi-fi, there you can add new network connection and apply these settings
But that's the problem.. I can't apply these settings.
When I configure Netwerk Authentication I'll come till "Use IEEE 802.x network acces control"
When I select this and choose for PEAP and I want to change the Properties I get this message:
Warning
Cannot log on to the wireless network. This network requires a personal certificate to positively identify you
Click to expand...
Click to collapse
Where can I make and/or change this personal certification?
been having the same message, anyone knows where to find the certificate?
Hi,
So,
1. You want to connect wirelessly to your School's network, right? .......and that
2. The network settings that you stated in your opening post were given to you by your School Network Administrator, right? ......finally, that
3. Your School Network Administrator had indeed, ACTUALLY given authority to your device (HTC Trinity) in the Access Control List to access the school's network, right?
In that case, he (the School Network Administrator) MUST have assigned an IP Address to your device (or entered its MAC address and configured it as such, inside the router/wireless access point.
Did you make sure that he did actually do so? Ask him to confirm this for you. I'm saying this because if he (the School Network Administrator) hadn't configured your device to have access to your school's network, you'll be wasting your time trying to access it, 'cos as you know, it is a secure network hence, it can not identify your device.
The only way that your device could be identified to access the school's network (never mind the settings provided in your opening post), is only, and only if, it had been configured in the ACL - Access Control List within the router, otherwise every Tom, **** and Harry would simply access the school's network, willy-nilly and wreak all sorts of havoc. See what I mean?
If indeed, he (the School Network Administrator) had given you access to the school's network, just ask him or her to give you the IP Address that he assigned to your device and then enter it in the Wi-Fi configuration of your network in Trinity, as you had been doing and everything should work fine - no more headaches!!
BOTTOM LINE:
If there is no entry for your device in the Access Control List of the school's router/wireless access point, you've got no chance 'cos your device would be refused access at all times because the router/wireless access point does NOT recognise it.
You ask him (the School Network Administrator) to give access to your device - either by using it's MAC address or IP Address), then you'll be laughing 'cos then you'll be able to have access, wirelessly.
I do hope that this gives you pointers to help solve your problem 'cos that's the only solution that I can offer.
kiwi992.
Sorry to bring alive an old post, but I have been receiving the exact same message requiring a "personal certificate." What I don't understand is that the network prompts me for my username/password - each device is not set up individually. For example, I can take my laptop to school and connect to the network as long as I have my username and password. What is the difference between XP and WM6 in this respect? Why can't I just enter my user/pass on my Wing and connect just like I would with a laptop?
Absence said:
Sorry to bring alive an old post, but I have been receiving the exact same message requiring a "personal certificate." What I don't understand is that the network prompts me for my username/password - each device is not set up individually. For example, I can take my laptop to school and connect to the network as long as I have my username and password. What is the difference between XP and WM6 in this respect? Why can't I just enter my user/pass on my Wing and connect just like I would with a laptop?
Click to expand...
Click to collapse
This has bugged me for a long time with Windows Mobile 5/6 & 802.1x with PEAP (WEP & WPA/WPA2). You should in theory be able to just use MSCHAPv2 and a Username/Password to authenticate yourself but there seems to be no way of turning off the client checking the servers validity - i.e. having a valid & trusted certificate (you can disable this checking with Windows XP's 802.1x supplicant). So all you should need is the servers public certificate installed on your device.
When I was testing this a while ago I had some sucess but the 'personal certificate' message was a problem. In the end I just enrolled the device with the domains CA and have a personal certificate installed (as well as the CA's certificate which gets installed at the same time).
Enrolling for certificates is much easier now with Windows Mobile 6 and ActiveSync 4.5 since you can enroll the device from ActiveSync on the host PC.
HTH
Andy
Interesting, Andy,
I haven't yet had the chance to test this change yet, but a few searches has turned up a registry key that we can add -
(quoted from somewhere on the internet)
"The only thing you have to do is to add a DWORD Regestry Entry under HKEY_LOCAL_MAICHNE-->Comm-->EAP-->Extension-->25
Name:"ValidateServerCert"
Value: 1 to activate Validation, 0 to turn it off"
Have you tried making this change before just registering a certificate? If it doesn't work, do you remember the basic steps for retrieving a certificate from a computer via activesync? If I do transfer a certificate from a laptop, do I need to register the device with the administrator? It seems that everyone from the IT department I've talkd to has no idea what they're talking about.
What is the best antivirus/firewall that i could use on an iis 7 server?
shawn10642 said:
What is the best antivirus/firewall that i could use on an iis 7 server?
Click to expand...
Click to collapse
Paid:
Sophos if you want to spend the time configuring it.
Symantec
AVG's server flavour.
Free:
Clam (it's what I use)
hey thanks for helping, another thing
1) i setup windows ftp 7.5 to iis 7.0 and setup went flawless, ping and everything went good, but i cant access the ftp server via ftp:// bccan.dyndns.org why??
shawn10642 said:
hey thanks for helping, another thing
1) i setup windows ftp 7.5 to iis 7.0 and setup went flawless, ping and everything went good, but i cant access the ftp server via ftp:// bccan.dyndns.org why??
Click to expand...
Click to collapse
If you're connecting from the outside of your network then you need to make sure of the following:
1. FTP is set up on your router to be forwarded to your IIS server
2. FTP site set to allow either all IP addresses to connect, or at least the external IP address you're coming in from (use www.whatsmyip.org to check your IP)
If you're connecting from within your network, you need to create a forward lookup zone in DNS for dyndns.org and add an A record of bccan with your server's internal IP address.
xaccers said:
If you're connecting from the outside of your network then you need to make sure of the following:
1. FTP is set up on your router to be forwarded to your IIS server
2. FTP site set to allow either all IP addresses to connect, or at least the external IP address you're coming in from (use www.whatsmyip.org to check your IP)
If you're connecting from within your network, you need to create a forward lookup zone in DNS for dyndns.org and add an A record of bccan with your server's internal IP address.
Click to expand...
Click to collapse
Also just to add, I would not worry as much about a software firewall on your IIS server , you will cause more problems than you will fix, as stated above if you only open the ftp port on your router to the outside, then no other connections will be able to get in ... Hardware firewalls/routers are a much better choice ..
As far as antivirus goes, it depends on how much money you want to spend, for free I would go with the ClamAV recommendation it works very well in a server environment.
Symantec which is not free really works well too ...
EDIT:
IMHO I would not use the machine name as your external DNS name, if that is what you are doing. That way you can use the machine name when connecting locally on your network and the DNS name when external ... It has just been my experience that using the same name for both machine and external DNS can cause all kinds of problems for other services you may want to run on that machine in the future ..