How to Statically Assign IP Address with USB Ethernet? - Nexus 7 Q&A, Help & Troubleshooting

What is the best way to accomplish thus? I think I may have to use a terminal to do this, but I'm wondering what the best way to do this is.
I may need to do this at some point, since I do IT work, and at some point, I may need to plug my nexus 7 into a network that does not have DHCP enabled.

Related

WiFi client detection software?

Hi, thanks in advance for help.
I have someone leeching off my Wifi net, who seems to be able to 'break-in' no matter how i secure the WiFi net.
Anyone know of any free Windows Mobile software that will show signal strength of Wifi CLIENTS nearby. Not Access Points, but CLIENTs.
I want to go find this guy.
thanks
Hi there!
If you got an "leecher" on your network I would recommend you to start your search on your router.
You didn't provide any specs, how did you find out that someone is on your network?
Next question, have you changed both, router pass and wlan key?
Are u using weak encryption (wep)?
Whats about your mac-filter?active?
I would guess you've got an dhcp server on your network/router... go there and check the dhcp releases. Any suspicious entrys? You should know all the devices listed there. If you have found a IP you don't know, ping it and check if its alive (those packages can be ignored by the host), try to access it via smb, you could also try a demo of languard and try to read out details like os, user, owner...
I'm almost shure you can't use your wm device to locate a client of a network, unless you can switch your wlancard to ap-mode and he connects to you ^^
Nope, need signal strenght reader if poss.
Thanks for the comment, but I'm pretty security savvy, and have done most of what you recommend.
I actually can't believe he's still getting in when I've locked down so tight.
Anyway, it's a CLIENT signal strengh program that I'm trying to find.
Rogue clients are malicious wireless client devices that either try to gain illegitimate access to your WLAN or try to disrupt normal wireless service by launching attacks. There are numerous ready-to-launch wireless attack tools freely available on the net. Many of them are open sourced and work pretty well with most Wireless client cards. This turns any curious mind to professional hacker in minutes. Many do it simply for the pleasure of being able to disturb someone remotely. All these developments force WLAN administrators to give a second look at any wireless client that is misbehaving.
What means most of that what i recommended?
Did you actually change the router password AND the wlan key?
Sorry, I don't think that you can trace him with your mobile. as long as hes not connected to your mobilephones wireless network (wich requires your mobile wlan device to switch to ap-mode).
Forget about that.
Please tell us, why do you think somebody is on your network, how did you find out... whats the "evidence" for you that there is somebody.
I'd like to help u, but i need some further details to lock him out.
I hope you know that its just a matter of minutes to break a wep key. GPUs are used to decode it, which is damn fast!
So please provide more specs about your network.
Greetings
1: Use WPA instead of WEP.
WEP is crackable in a matter of seconds.
2: Assign access control/MAC filtering
3: Use your network in ad-hoc mode
Well, WPA is crackable too.
The person in question might change his MAC to yours and create collisions anyways
Can you be sure that he has really associated with your router. I have noticed some client/router combinations "apparently" associate but all traffic is blocked because they did not provide the right key.
As others say - use WPA WPA2 and use a strong (non dictionary) passphrase
get a computer that can run airodump or something similar.
run airodump with it set to the channel of you router - not in hopping mode as you will miss lots of packets.
Airodump will tell you the strength of the signal from his computer so if you have this on a laptop you can move around and possibly can an idea roughly where he is
Thank you, i will try Airodump
Thanks in particular Scote.
I didn't list the router config simply becuase I am confident it's pretty secure:
Router is a new Belkin N1
- 63 random char password from grc.com/passwords
- SSID is "netgear" even though its a Belkin : intention to mislead for access URL.
- WPA2-PSK AES encryption
- SSID not broadcasting
I didn't bother with MAC filtering, as I understand a good 'hacker' can spoof it : If this guy can get through WPA2 I would say he can probably MAC spoof.
My 'evidence', is that up to 3 unkown computers turn up on the 'Clients List', around 4 hours after I change the SSID/password : Each time.
I have 2 laptops, so I will try Airodump or maybe Backtrack (suggested elswhere) on these as a 'direction finder' based on signal strength.
Hmmm...I did read somewhere you can set a Kaiser to be an access point...
Thanks all
Yes you can.
Someone found his stolen Wii/mobile phone (don't remember which one) that way.
There was even an article on the net.

[REQUEST]Internet via USB

Hi all!
My request is to share my PC internet connection to use it in my android with the USB connection.
I only found software to do the reverse(tethering),and im pretty sure talented developers in here can do this without much effort.
Hope im right.
Thanks in advance!
I think most people just use a wireless router and connect through wifi.
Is your reasoning to not use data through your carrier? If so I would use wifi if I were you...
The reason why im requesting this is because i dont have WiFi connections avaiable ,both at home and work...
At home i could spend some money and buy a wireless router(i shouldnt have to do that...specially in a mobile OS design to use internet alot) at work i cant do that.
Excuse me if I'm wrong, but there is already a usb tether app...I think it was posted recently in the g1 applications area.
Well it's possible via Linux [Seen on Connect-UTB!],what you need is your USB-plug and a linux machine connected to your LAN and a running DHCP-server on your lan.
Just connect your HTC to your linux machine and boot up android. This will create a usb network connection between your PC and your mobile.
Then create a bridge between the usb-network (most likely usb0) and your network adapter connected to your lan (for me it is eth2) using brctl:
ifconfig eth2 down
ifconfig usb0 down
ifconfig eth2 0.0.0.0 promisc up
ifconfig usb0 0.0.0.0 promisc up
brctl addbr br0
brctl addif br0 eth2
brctl addif br0 usb0
You might assign a network address to the bridge to use networking on your computer as well:
dhclient br0 (might be dhcpcd as well)
After that, fire up a console on your android device. You can use tty0 or the virtual terminal of the dev-tools. Execute
dhcpcd usb0
Dhcpcd will complain about a file that could not be opened or something like this. The reason for this is a missing directory. Just create the directory where the file should be placed in and execute dhcpcd again:
mkdir [directory]
dhcpcd usb0
This should assign a IP address to your android device and set up the gateway information. From now on, networking should work on your device.
If it does not work, something of your configuration might be wrong. Most likely it would mean, that your bridge is not working as expected. There might be a network manager running or your network card does not support bridging.
You can also access your device via telnet on default telnet port. Finding the right ip address of the device might be tricky somehow as the device has a fixed ip on 192.168.0.206 that is the only address shown by busyboxe's ifconfig. One option is looking into your dhcp-servers dhcp-leases. I used wireshark on my linux system instead to sniff the dhcp ack.
There is one thing about security:
The current android image runs an open telnet server, so make sure, that you only connect your mobile to a trusted network. Otherwise any bad guy could steal or deleta all information from your internal phone storage.
Just one thing about proxy servers:
I tried to get it running with a proxy server, but I could not manage it. I added the proxy to the settings.db as described in a android emulator proxy how-to, but it did not work. I would be grateful about any hint.
Thanks for your reply man,very usefull and well explained...too bad i dont use Linux but thanks anyway.
PDAnet tethering software from what i read is to connect your pc to the internet using your PDA...i want to connect my PDA using my pc connection with USB
Hi all!
My request is to share my PC internet connection to use it in my android with the USB connection.
I only found software to do the reverse(tethering),and im pretty sure talented developers in here can do this without much effort.
Hope im right.
Thanks in advance!
Click to expand...
Click to collapse
I'm looking for the same thing. Coming from WM, I CANNOT understand why this isn't available on Android.
aa
lostsoul said:
I'm looking for the same thing. Coming from WM, I CANNOT understand why this isn't available on Android.
Click to expand...
Click to collapse
Because it's the dumbest idea ever. Spend the $20 and get a router. If you can't afford the router, then you obviously don't need a smart phone.
evilkorn at least be respectfull to others.
some of us heave problematic isp configurations and/or can not use wifi in office. only reason to use reverse tethering over usb is such situations.
i still heave to try solution for linux given by k-zik. i heave old pIII laptop with ubuntu on it so i can experiment. as for windows unfortunately there is no solution.
evilkorn said:
Because it's the dumbest idea ever. Spend the $20 and get a router. If you can't afford the router, then you obviously don't need a smart phone.
Click to expand...
Click to collapse
Maybe to you, not so for others....
I´m looking for the same thing....spending many days and nights a month in different hotels in the US, Canada, China, India etc., not all of which have WIFI in the room.....I´d still like to browse and use the market connecting via the wired internet connection of my laptop.....
Don´t always judge others by your own standards.....
evilkorn said:
Because it's the dumbest idea ever. Spend the $20 and get a router. If you can't afford the router, then you obviously don't need a smart phone.
Click to expand...
Click to collapse
...Or maybe there are some people in the XDA community that are deployed, like my self, and the only access they have to the internet is on a USB internet stick, unless you can find a better way to get games and what not to play on my phone while I'm in the sand box...
-Alex
ZED_pt said:
Thanks for your reply man,very usefull and well explained...too bad i dont use Linux but thanks anyway.
PDAnet tethering software from what i read is to connect your pc to the internet using your PDA...i want to connect my PDA using my pc connection with USB
Click to expand...
Click to collapse
There may be a way for Windows too:
blog.mycila.com/2010/06/reverse-usb-tethering-with-android-22.html
I hope some developer will pick up the glove and automate the process because there seems to be an interest in such an application.
I for one, will be very grateful.
Avner.
I just "flew" over the threads content...uhm...so I hope I´m not posting unappealing things...
But: I´m with MDJs Desire HD Rom (4.3) now and Internet via USB works fine here! Give it a try...I was blown away when I saw this function after plugging in the USB cable...
Is there a ROM with this feature fore the Legend too?
Avner.
See this open source project
http://code.google.com/p/azilink/
or you can use CM roms they have USB tether
Thanks,
but we are not talking about a USB tether. We are talking about "reverse USB tether"; connecting a phone without an internet connection with a USB cable to a PC with one.
ZED_pt said:
Hi all!
My request is to share my PC internet connection to use it in my android with the USB connection.
I only found software to do the reverse(tethering),and im pretty sure talented developers in here can do this without much effort.
Hope im right.
Thanks in advance!
Click to expand...
Click to collapse
Get an HDDesire Rom, has this feature already, they call it Internet Passtrough
Has it ever occurred to you to just Google "reverse usb tethering"?
http://blog.mycila.com/2010/06/reverse-usb-tethering-with-android-22.html
Heres another WIN7: http://www.nexusoneforum.net/forum/...verse-tether-getting-internet-your-phone.html
Need more help? Just google it.

usb to ethernet adapter

Hi!
So I am in college and they do not allow more than one device to be connected over internet per person in a dorm, so i cannot set up any wireless routers. My iconia is running the jb cm10 preview port and i was wondering if a usb to ethernet jack would work and if so, which adapter should I buy?
any suggestions/ ideas would be appreciated
cullenmq1 said:
Hi!
So I am in college and they do not allow more than one device to be connected over internet per person in a dorm, so i cannot set up any wireless routers. My iconia is running the jb cm10 preview port and i was wondering if a usb to ethernet jack would work and if so, which adapter should I buy?
any suggestions/ ideas would be appreciated
Click to expand...
Click to collapse
I dont believe it would but im not sure how can they tell whos device it is? Cant you just spoof your mac address or use one device at a time or a vpn......
they could tell if more than 1 device is connected by doing a simple network scan and seeing that there was 2 ip addresses assigned to a dorm. they found my wireless router as soon as i plugged it in
cullenmq1 said:
they could tell if more than 1 device is connected by doing a simple network scan and seeing that there was 2 ip addresses assigned to a dorm. they found my wireless router as soon as i plugged it in
Click to expand...
Click to collapse
sorry theres ways to get around that but im pretty sure were not allowed to talk about it on the forums im nlt sure if a usb to ethernet adapter would work to me it seems drivers program or something would be missing
okay... does it involve external hardware or does the "other thing" involve using a wifi router b/c i cannot set up a wireless router as anyone with a wireless device will be able to see it. I know that the transformer infinity has built in ethernet adapter compatibility, but is that an android ics/jb thing or is it a manufacturer add-on?
cullenmq1 said:
okay... does it involve external hardware or does the "other thing" involve using a wifi router b/c i cannot set up a wireless router as anyone with a wireless device will be able to see it. I know that the transformer infinity has built in ethernet adapter compatibility, but is that an android ics/jb thing or is it a manufacturer add-on?
Click to expand...
Click to collapse
Haha i dont understand how they could detect where each device is coming from unless they have a separate wifi for each dorm or a different sub-net i know they could pick up another wireless router easily even if they were reading you ip that's easily spoofed even Mac address is via a proxy or vpn but anyways im pretty sure that's an manufacturer add-on ill look and let you now if i find anything the Acer might have it, if not im sure a dev could make it so somehow
This is straight quoting darkdragone make sure you thank him Here
not sure if it works with honeycomb, but on ICS I have used a usb ethernet adapter with the tablet, mind you that some applications dont work with it, but the browser and market place do. What you'll need to do first is have your tablet rooted, then download either android terminal emulator or Gscript lite (with gscript lite you can save the script for use again.) In the terminal you will want to run netcfg, this will show you all of your interfaces and will tell you if your usb to ethernet adapter is detected. If it is detected there will be an interface called usb and then a number aka usb0 or possibly even eth0. next you will want to take that interface and make sure it is up by running ifconfig usb0 up. next you'll need an ip address, if yours is assigned dynamically then run dhcpcd usb0 then setprop dns1 8.8.8.8 (or use whatever DNS server you wish). Now if you need a static address, such as 192.168.0.2 or something you would run ifconfig usb0 192.168.0.2. Also all of these commands will need root so make sure you type in su beforehand.
gears177 said:
Haha i dont understand how they could detect where each device is coming from unless they have a separate wifi for each dorm or a different sub-net i know they could pick up another wireless router easily even if they were reading you ip that's easily spoofed even Mac address is via a proxy or vpn but anyways im pretty sure that's an manufacturer add-on ill look and let you now if i find anything the Acer might have it, if not im sure a dev could make it so somehow
This is straight quoting darkdragone make sure you thank him Here
not sure if it works with honeycomb, but on ICS I have used a usb ethernet adapter with the tablet, mind you that some applications dont work with it, but the browser and market place do. What you'll need to do first is have your tablet rooted, then download either android terminal emulator or Gscript lite (with gscript lite you can save the script for use again.) In the terminal you will want to run netcfg, this will show you all of your interfaces and will tell you if your usb to ethernet adapter is detected. If it is detected there will be an interface called usb and then a number aka usb0 or possibly even eth0. next you will want to take that interface and make sure it is up by running ifconfig usb0 up. next you'll need an ip address, if yours is assigned dynamically then run dhcpcd usb0 then setprop dns1 8.8.8.8 (or use whatever DNS server you wish). Now if you need a static address, such as 192.168.0.2 or something you would run ifconfig usb0 192.168.0.2. Also all of these commands will need root so make sure you type in su beforehand.
Click to expand...
Click to collapse
Glad I was able to help lol. I'm currently trying to find out if a USB wireless will work to but haven't found much info other than drivers need to be in the kernel for it to work
Yeah, if u figure out the usb wireless adapter problem, let me know too pls. :thumbup:
Sent from my A500 using xda app-developers app

[Q] Anyway to share my N7 wifi with PC?

So, at my college there are two networks that a student can use, one designed for computers (that has a proxy) and one that is designed for mobile devices (no proxy, requires MAC to get on.) I was wondering if it was possible to share my Nexus 7 *WIFI* connection to my PC...
techobsessive said:
So, at my college there are two networks that a student can use, one designed for computers (that has a proxy) and one that is designed for mobile devices (no proxy, requires MAC to get on.) I was wondering if it was possible to share my Nexus 7 *WIFI* connection to my PC...
Click to expand...
Click to collapse
Your pc got a wireless dongle?
If so just turn your Nexus into a Hotspot, connected to the Network you want
Then connect your PC to your Nexus ??
Well, I didn't make it clear. I have a wifi version N7. All I want to do is share the wireless connection that the n7 is already on with my PC. So a wireless tether would not work.
You can try to spoof your N7's mac on your pc using Mac Makeup. Your pc needs a wireless adapter and spoofs your n7's mac, so it should connect to the mobile wireless network. You probably won't be able to have both devices on the wap concurrently.
I'm guessing the reason you're looking to doing this to bypass the proxy restriction your school placed on the resource. Keep that in mind in case you decide to download a ton of torrents and they trace the usage back to your N7's mac.
fatfingered said:
I'm guessing the reason you're looking to doing this to bypass the proxy restriction your school placed on the resource. Keep that in mind in case you decide to download a ton of torrents and they trace the usage back to your N7's mac.
Click to expand...
Click to collapse
Yes, they would, but so what? Are they going to check all Asus devices? I'm sure there's plenty (unless you're in US, then Asus is very outstanding among all macbooks and iDevices). And you can't just assume he's going to download millions of illegal stuff. Maybe he wants to download Ubuntu via torrent
OP: I have not seen such a thing, there's normal tethering (3G to wifi hotspot), 3G-BT, 3G-USB, but I have never seen wifi-usb.
http://forum.xda-developers.com/showthread.php?t=1792245 check out this thread. With this adapter, BusyBox and some (more or less) basic knowlege of linux networking, I'm sure you could successfully share your wifi connection trough LAN cable, but I doubt it will ever work trough USB.
If you're running linux on your PC, then faking MAC address is so simple, that it's a better shot, if you're running windows, it's a bit trickier (but still doable).
Faking the MAC on a PC is simple too.
I'm not sure I'm even following this thread. Spoof your PC's MAC and jump on the mobile network. Done.
ALL devices have a MAC... so if they REQUIRE a specific MAC for access then they can trace everything you do online back to you. In that case I would be very cautious on what you do. They can also monitor bandwidth to your MAC (PC) and see you are pulling WAY to much bandwidth for a mobile device. If they don't care, then whatever but you may be getting a knock on your door.
You are basically circumventing their security policies and could put you in some trouble. So Clone your MAC address and keep it simple.
I've seen WiFi hotspot. Not sure if it was baked into sense though
Sent from my Galaxy Nexus using xda app-developers app

Internet issues with Android devices at school

Hi,
Just got a shiny new Galaxy Note 10.1 last weekend. Yesterday, after receiving my case and keyboard from Amazon, I brought it in to school to start taking advantage of the S-Pen for note taking in classes that keyboards don't quite cut it in. Unfortunately, it revived an issue that I had and ignored on my HTC Rezound from last year... an issue that a WiFi device can't ignore, and unfortunately my phone's battery is not up to using CM10's tether function all day (and it might start running down my monthly data being used 5 days a week, all day).
So, any ideas what might cause this issue? The school primarily has Macs, and my Windows 8 Laptop sometimes has issues, but at least half the time it works fine. It is just Android devices that will not work. They connect, and get great signal strength, but just won't get any actual data. To my knowledge, nobody has ever gotten an Android device to connect. My Rezound is running an unofficial CM10 (4.1 JB) version, and my Note is using whatever the newest official update is (4.1 as well, I believe. Non-rooted). I don't know a whole lot about this type of stuff, but I'm not afraid to tinker around to try and get it working. I've tried a few other suggestions from numerous Google searches, but to no avail so far. The network is unprotected, and run by the school's IT people, so needless to say I have no way to easily change settings for the campus' network. I'd prefer not root the Note just yet, but if I need to, so be it. Any ideas what this might be?
Thanks
Some more Info
Coffeeist said:
[Original Post]
Click to expand...
Click to collapse
Some more info:
I cannot ping the tablet from my laptop (I get no packet loss, but all return 'Destination Host Unreachable'.
Same result if I try pinging my laptop or the router from my tablet using Terminal Emulator.
Sometimes, if set to DHCP, the tablet will give an 'Authentication Error Occured' error (or similar, I don't recall the actual wording). Sometimes it indicates a connection, but just won't work. I've never had a problem connecting using the same info as my laptop (with the IP changed, of course), but again, no internet, no ping.
Thanks
May or may not be the problem, but from what I've noticed, school networks tend to have a lot of blocked ports. I know the main Google Sync Framework uses port 5228. Try shooting an email to a network admin in your school's IT dept, asking about that port or just in general if they're aware that Android devices are unable to connect on their network.
Coffeeist said:
Some more info:
I cannot ping the tablet from my laptop (I get no packet loss, but all return 'Destination Host Unreachable'.
Same result if I try pinging my laptop or the router from my tablet using Terminal Emulator.
Sometimes, if set to DHCP, the tablet will give an 'Authentication Error Occured' error (or similar, I don't recall the actual wording). Sometimes it indicates a connection, but just won't work. I've never had a problem connecting using the same info as my laptop (with the IP changed, of course), but again, no internet, no ping.
Thanks
Click to expand...
Click to collapse
What do you mean by "same info as my laptop" what types of credentials are you referring to? Something you have to change on the laptop in order to get in? The more information regarding this you can provide (safely, mind you, mask/alter any sensitive info), the better we can assist you. If you have to do something like set a VLAN, then you're never going to get an Android device to work as we do not have the capability to use VLAN'd wireless like most PCs and Macs can with the proper configuration changes. If there's some browser catch-all page, then that should work, but based on your statement "with the IP changed" leads me to believe that you're messing with the adapter settings directly. I would be especially keen to helping you with more detailed networking issues like this should you provide me with the information requested. I look forward to your reply. (Yes, I like technical challenges like this, it's why I work VoIP support.)
IP address or no IP address
Coffeeist said:
Some more info:
I cannot ping the tablet from my laptop (I get no packet loss, but all return 'Destination Host Unreachable'.
Same result if I try pinging my laptop or the router from my tablet using Terminal Emulator.
Sometimes, if set to DHCP, the tablet will give an 'Authentication Error Occured' error (or similar, I don't recall the actual wording). Sometimes it indicates a connection, but just won't work. I've never had a problem connecting using the same info as my laptop (with the IP changed, of course), but again, no internet, no ping.
Thanks
Click to expand...
Click to collapse
since you know ping, then did you check the IP address for each device?
Back to basic:
1: ping your device gateway IP
2) if ok, then ping ur device (tablet or laptop)
3) if ok then ping bbc.co.uk (this will check your dns), if failed ping your dns's IP address.
If no IP on android, then check if there is any protection on device. It sound like no IP been allocated for you.
Depends on how good a school's IT dept. I have not seen many school actually put filter to stop non-window device.
I am not sure it has anything to do with VLAN yet. As a simple logon, device does not care VLAN or no VLAN.
The basic for us is 1) get an IP on device. 2) know how to get out (gateway IP) 3) interrept hwere you go (DNS resolution) 4) know how to get to internet (internet router, internet firewall, internet boardband et...)
If you have authentication error, then it is sure you are not going to get an IP address. If this is WiFi then check on security (WEP, WAP...TKIP...)
tinbox134 said:
since you know ping, then did you check the IP address for each device?
Back to basic:
1: ping your device gateway IP
2) if ok, then ping ur device (tablet or laptop)
3) if ok then ping bbc.co.uk (this will check your dns), if failed ping your dns's IP address.
If no IP on android, then check if there is any protection on device. It sound like no IP been allocated for you.
Depends on how good a school's IT dept. I have not seen many school actually put filter to stop non-window device.
I am not sure it has anything to do with VLAN yet. As a simple logon, device does not care VLAN or no VLAN.
The basic for us is 1) get an IP on device. 2) know how to get out (gateway IP) 3) interrept hwere you go (DNS resolution) 4) know how to get to internet (internet router, internet firewall, internet boardband et...)
If you have authentication error, then it is sure you are not going to get an IP address. If this is WiFi then check on security (WEP, WAP...TKIP...)
Click to expand...
Click to collapse
Hello Coffeeist,
Please contact your schools IT department and find out what kind of encryption they use on their APs.
If they use TKIP, then that is whats causing the problem with android devices.
Once TKIP is disabled on the AP you are connecting to, you will be able to reach the internet.
I say this because I had the same problem in the past (setting up Cisco APs), and can confirm that this is the cause of the problem.
TKIP shouldn't be used anyway. They should be using AES. TKIP is too weak.
I guess that last part answered another question that you might of had. (Why TKIP doesn't work with Android?) Android=Secure TKIP=WEAK.... Unacceptable for Android
Also, you mention something about not being able to ping your tablet from your laptop. If I understand this correctly, you have both your laptop and tablet connected to the same AP and you are trying to ping between the two. This wont work in most cases. Reason: "Port-Protection", which if enabled doesn't allow clients on the AP to communicate with each other.
Regards,
Ed
Let us know how it goes.
nasvi said:
Hello Coffeeist,
Please contact your schools IT department and find out what kind of encryption they use on their APs.
If they use TKIP, then that is whats causing the problem with android devices.
Once TKIP is disabled on the AP you are connecting to, you will be able to reach the internet.
I say this because I had the same problem in the past (setting up Cisco APs), and can confirm that this is the cause of the problem.
TKIP shouldn't be used anyway. They should be using AES. TKIP is too weak.
I guess that last part answered another question that you might of had. (Why TKIP doesn't work with Android?) Android=Secure TKIP=WEAK.... Unacceptable for Android
Also, you mention something about not being able to ping your tablet from your laptop. If I understand this correctly, you have both your laptop and tablet connected to the same AP and you are trying to ping between the two. This wont work in most cases. Reason: "Port-Protection", which if enabled doesn't allow clients on the AP to communicate with each other.
Regards,
Ed
Let us know how it goes.
Click to expand...
Click to collapse
With useful posts above the rest is not much left for me to say but a simple advice
Make sure your friends aren't playing a prank on you coz I tend to do it I use arpspoof and aireplay-ng to cause such mayhem
Sent from my A116 using Tapatalk 2
Airplay and Arpspoof wouldn't be possible if MFP is enabled on the AP. Also the OP is stating that it is with all android devices and not 1.
Sent from my HTC One XL using xda app-developers app
responses
First off, thanks for all of the posts, and I apologize for taking so long to respond.
Also, I did check port 5228 with my laptop, and it seemed to indeed be closed. Haven't been able to contact IT yet, but I will need to soon to solve an issue with another, unrelated issue.
Cynagen said:
What do you mean by "same info as my laptop" what types of credentials are you referring to? Something you have to change on the laptop in order to get in? The more information regarding this you can provide (safely, mind you, mask/alter any sensitive info), the better we can assist you. If you have to do something like set a VLAN, then you're never going to get an Android device to work as we do not have the capability to use VLAN'd wireless like most PCs and Macs can with the proper configuration changes. If there's some browser catch-all page, then that should work, but based on your statement "with the IP changed" leads me to believe that you're messing with the adapter settings directly. I would be especially keen to helping you with more detailed networking issues like this should you provide me with the information requested. I look forward to your reply. (Yes, I like technical challenges like this, it's why I work VoIP support.)
Click to expand...
Click to collapse
Just IP/DHCP/DNS (and I've also tried public DNS such as Google). Nothing fancy set up on the laptop (everything should be on Windows default network settings, same with Android on both devices). There is also no catch-all page, assuming I'm interpreting that correctly (as a login page sort of thing, like I'd get at Starbucks or a Hotel).
Glad to provide the challenge... truth be told, underneath the annoyance of lacking connection, I love issues like this because of the fun tricks and such that solving them can teach.
tinbox134 said:
since you know ping, then did you check the IP address for each device?
Back to basic:
1: ping your device gateway IP
2) if ok, then ping ur device (tablet or laptop)
3) if ok then ping bbc.co.uk (this will check your dns), if failed ping your dns's IP address.
If no IP on android, then check if there is any protection on device. It sound like no IP been allocated for you.
Depends on how good a school's IT dept. I have not seen many school actually put filter to stop non-window device.
I am not sure it has anything to do with VLAN yet. As a simple logon, device does not care VLAN or no VLAN.
The basic for us is 1) get an IP on device. 2) know how to get out (gateway IP) 3) interrept hwere you go (DNS resolution) 4) know how to get to internet (internet router, internet firewall, internet boardband et...)
If you have authentication error, then it is sure you are not going to get an IP address. If this is WiFi then check on security (WEP, WAP...TKIP...)
Click to expand...
Click to collapse
1. If I recall, this either had full loss, or Destination Host Unreachable, when pinging the gateway IP from the tablet.
2. Have tried this nonetheless, and I think I made it through once or twice just after turning on the tablet, but after that would only get Dest. Host Unreachable.
3. Had tried with Google, fails across any DNS.
I seem to get an IP, although sometimes I get the authentication error in Android and it won't connect. Whenever I set a static IP, based off of my laptop's IP (not the same, of course), I get connected, just no internet.
nasvi said:
Hello Coffeeist,
Please contact your schools IT department and find out what kind of encryption they use on their APs.
If they use TKIP, then that is whats causing the problem with android devices.
Once TKIP is disabled on the AP you are connecting to, you will be able to reach the internet.
I say this because I had the same problem in the past (setting up Cisco APs), and can confirm that this is the cause of the problem.
TKIP shouldn't be used anyway. They should be using AES. TKIP is too weak.
I guess that last part answered another question that you might of had. (Why TKIP doesn't work with Android?) Android=Secure TKIP=WEAK.... Unacceptable for Android
Also, you mention something about not being able to ping your tablet from your laptop. If I understand this correctly, you have both your laptop and tablet connected to the same AP and you are trying to ping between the two. This wont work in most cases. Reason: "Port-Protection", which if enabled doesn't allow clients on the AP to communicate with each other.
Regards,
Ed
Let us know how it goes.
Click to expand...
Click to collapse
Unless I am totally clueless about this stuff (er, moreso than I though I already was), it uses neither TKIP or AES, being an open and unsecured network.
sak-venom1997 said:
With useful posts above the rest is not much left for me to say but a simple advice
Make sure your friends aren't playing a prank on you coz I tend to do it I use arpspoof and aireplay-ng to cause such mayhem
Sent from my A116 using Tapatalk 2
Click to expand...
Click to collapse
Haha, I doubt it. None of my friends, especially the ones who I think would even try and do something like this, are tech-savvy enough for me to have any suspicion of that. Thanks though
Another piece of info (a pretty weird seeming one at that): Sometimes, I'll turn on my tablet in the middle of the day, and out of the blue there is an email notification there, for recent emails. Of course, if I go into browser, I can't get any pages. Can't think of any other networks that the device could/would connect to on campus, either.
Thanks!
Coffeeist said:
First off, thanks for all of the posts, and I apologize for taking so long to respond.
Also, I did check port 5228 with my laptop, and it seemed to indeed be closed. Haven't been able to contact IT yet, but I will need to soon to solve an issue with another, unrelated issue.
Just IP/DHCP/DNS (and I've also tried public DNS such as Google). Nothing fancy set up on the laptop (everything should be on Windows default network settings, same with Android on both devices). There is also no catch-all page, assuming I'm interpreting that correctly (as a login page sort of thing, like I'd get at Starbucks or a Hotel).
Glad to provide the challenge... truth be told, underneath the annoyance of lacking connection, I love issues like this because of the fun tricks and such that solving them can teach.
1. If I recall, this either had full loss, or Destination Host Unreachable, when pinging the gateway IP from the tablet.
2. Have tried this nonetheless, and I think I made it through once or twice just after turning on the tablet, but after that would only get Dest. Host Unreachable.
3. Had tried with Google, fails across any DNS.
I seem to get an IP, although sometimes I get the authentication error in Android and it won't connect. Whenever I set a static IP, based off of my laptop's IP (not the same, of course), I get connected, just no internet.
Unless I am totally clueless about this stuff (er, moreso than I though I already was), it uses neither TKIP or AES, being an open and unsecured network.
Haha, I doubt it. None of my friends, especially the ones who I think would even try and do something like this, are tech-savvy enough for me to have any suspicion of that. Thanks though
Another piece of info (a pretty weird seeming one at that): Sometimes, I'll turn on my tablet in the middle of the day, and out of the blue there is an email notification there, for recent emails. Of course, if I go into browser, I can't get any pages. Can't think of any other networks that the device could/would connect to on campus, either.
Thanks!
Click to expand...
Click to collapse
Based on your responses, I have a follow up question and comment. The question is as follows: Did you have to register your computer with your IT when you started school in order to be permitted on the wireless network? If this was the case they're likely filtering based on MAC address (which you won't be able to spoof on your Android, but you may be able to spoof on your laptop), get them to re-register your laptop after you spoof the MAC address so you can get both devices on using the same MAC address (though not at the same time of course unless you're fine with stuff randomly not working). The comment is as follows: Yeah, finding the workarounds to get back limitations like this is definitely a fun challenge because when you win, you've definitely learned something new. Oh, and you were right about my question of the gateway authentication page like a hotel wifi login page.
MAC
Cynagen said:
Based on your responses, I have a follow up question and comment. The question is as follows: Did you have to register your computer with your IT when you started school in order to be permitted on the wireless network? If this was the case they're likely filtering based on MAC address (which you won't be able to spoof on your Android, but you may be able to spoof on your laptop), get them to re-register it after you spoof the MAC address so you can get both devices on using the same MAC address (though not at the same time of course). The comment is as follows: Yeah, finding the workarounds to get back limitations like this is definitely a fun challenge because when you win, you've definitely learned something new.
Click to expand...
Click to collapse
Nope, it was up and running just through connecting normally, and has been since (mostly) - no registration or anything like that. Now, the reason that I put 'mostly' in parentheses is that sometimes the computer will be connected, but also have no internet (I don't think this started until I, dare I admit, upgraded to Windows 8). However, this only happens sometimes, whereas the Android devices never get internet access.
However, on the topic of MAC addresses, one post (in fact, I think it was on XDA) I saw awhile back while Google searching this problem was that someone had a similar issue, found to be with their device's MAC address having the letters 'FA' instead of 'FB' or something like that. Being that my Note isn't rooted, I haven't tested it with that, but perhaps I should give that a try with my CM10 Rezound?
(This is the post: HERE)
Thanks!
Coffeeist said:
Nope, it was up and running just through connecting normally, and has been since (mostly) - no registration or anything like that. Now, the reason that I put 'mostly' in parentheses is that sometimes the computer will be connected, but also have no internet (I don't think this started until I, dare I admit, upgraded to Windows 8). However, this only happens sometimes, whereas the Android devices never get internet access.
However, on the topic of MAC addresses, one post (in fact, I think it was on XDA) I saw awhile back while Google searching this problem was that someone had a similar issue, found to be with their device's MAC address having the letters 'FA' instead of 'FB' or something like that. Being that my Note isn't rooted, I haven't tested it with that, but perhaps I should give that a try with my CM10 Rezound?
(This is the post: HERE)
Thanks!
Click to expand...
Click to collapse
That shouldn't be it unless they have corporate level routers that don't recognize the MAC address of any devices manufactured after 2009 (when most of these manufacturers got the MAC addresses assigned to them (this is VERY unlikely)). I would honestly work with IT on campus and advise that it appears not a single Android device is allowed on the network. If they're blocking Android for any reason, check the terms of service for using the WiFi and see if there's any provisions for banning an entire brand of device/OS for whatever reason. If there's only provisions for individual banning, then take it back to them and show them that your record has not been abusive in the least and go from there. Make a case, otherwise draw one up with legal council. *shrugs* I don't believe anyone should ever be punished for the type of device they chose to purchase, that's first amendment choice, but it really comes down to their terms of service which you agree to by using the wifi.
Cynagen said:
That shouldn't be it unless they have corporate level routers that don't recognize the MAC address of any devices manufactured after 2009 (when most of these manufacturers got the MAC addresses assigned to them (this is VERY unlikely)). I would honestly work with IT on campus and advise that it appears not a single Android device is allowed on the network. If they're blocking Android for any reason, check the terms of service for using the WiFi and see if there's any provisions for banning an entire brand of device/OS for whatever reason. If there's only provisions for individual banning, then take it back to them and show them that your record has not been abusive in the least and go from there. Make a case, otherwise draw one up with legal council. *shrugs* I don't believe anyone should ever be punished for the type of device they chose to purchase, that's first amendment choice, but it really comes down to their terms of service which you agree to by using the wifi.
Click to expand...
Click to collapse
I'll give it a shot, thanks.
Coffeeist said:
I'll give it a shot, thanks.
Click to expand...
Click to collapse
Sorry to bump the thread, but seeing as it's my own I figured it would be alright...
I got around to asking the the school IT about the issue, and they said that the deliberately block mobile traffic, which they went on to find out does include Android tablets (I understand phones, but I can't even begin to understand why they target Android tablets... unfortunately, that's not my call). I Google searched a bit, and found that networking devices from a company called Aruba can be set to block traffic from specific types of devices (supposedly Cisco and a few other companies can do similar things too), by checking something with the HTML version, or something like that (I'm by no means a networking expert hehe).
So, I guess I'll make my last effort with this thing, and ask if anyone knows of some legal, non-hacky way of getting by this?
I'm guessing not, but worth asking.
Thanks
Coffeeist said:
Sorry to bump the thread, but seeing as it's my own I figured it would be alright...
I got around to asking the the school IT about the issue, and they said that the deliberately block mobile traffic, which they went on to find out does include Android tablets (I understand phones, but I can't even begin to understand why they target Android tablets... unfortunately, that's not my call). I Google searched a bit, and found that networking devices from a company called Aruba can be set to block traffic from specific types of devices (supposedly Cisco and a few other companies can do similar things too), by checking something with the HTML version, or something like that (I'm by no means a networking expert hehe).
So, I guess I'll make my last effort with this thing, and ask if anyone knows of some legal, non-hacky way of getting by this?
I'm guessing not, but worth asking.
Thanks
Click to expand...
Click to collapse
Before discussing any workarounds, you may need to review the Terms of Service for your wifi on the school premises first, review the consequences for bypassing their security measures, and figure if it's worth the risk to you... At this time, it'll be kind of "hacky" to get around such a block. In order to provide you with a valid workaround though we'll need a little bit of information regarding what's going on when you connect.
First, when you connect to the WiFi with your Android device, do you even receive an IP address? If you don't then we'll stop here, the only way to get around the types of blocks they're employing at this level would require hardware hacking/firmware reprogramming to change the identity of the device itself, which is flat out illegal in just about anywhere I can think of. Here's your checklist, fill out where applicable: (Even if you set static information to accomplish this, that will be a valid Y.)
Get an IP? (If Y, proceed)
Is it a valid IP address on the same network as your PC? (Either way, don't care)
Can you ping the gateway you got from DHCP on Android? (If Y, proceed)
Can you ping the DNS server(s) you got from DHCP on Android? (If Y, proceed)
Can you ping an external server such as Google DNS (8.8.8.8) on Android? (If Y, then we're done here)
It's kind of a bit of a process unfortunately, however, if you pass every single one of these tests with the Android device, there's good news. They're only filtering traffic based on the User-Agent identification of all your applications (and based on the MAC address of your device, denying your DHCP requests), you should be able to bypass this with a VPN tunnel back to your home from your Android (after setting your static IP) in order to encrypt and keep this information from leaking to their systems. However, this will likely set off alarms if they monitor their network heavily. If the school IT asks, then you're "working on projects in-between classes on your computer at home and your family has a home office with VPN already, so you used that to connect back to the house". Either way, they can't say much about it besides cut you off... again. Anywhos, I wouldn't recommend trying to bypass without doing all this research first, and then also evaluating the possible consequences, however the rewards are within themselves. You'll be the only person at school with a working mobile device, (besides those iSuckers). Technically, encrypting your traffic is completely legal (and they can't say anything legally about it), however, setting a static IP address in the same range as your computer at school may be against their TOS which you abide by being on campus. Let us know how everything goes.
Cynagen said:
Get an IP? (If Y, proceed)
Is it a valid IP address on the same network as your PC? (Either way, don't care)
Can you ping the gateway you got from DHCP on Android? (If Y, proceed)
Can you ping the DNS server(s) you got from DHCP on Android? (If Y, proceed)
Can you ping an external server such as Google DNS (8.8.8.8) on Android? (If Y, then we're done here)
Click to expand...
Click to collapse
With Static I set an IP and all other info (Gateway, DNS, etc, except for Network Prefix Length... no clue what that is, left it at 24 default), and could not ping gateway
Dynamic/DHCP I will have to check tomorrow, after downloading stuff for the tablet to get that info (I think I need root to use IfConfig with Terminal Emulator, correct?).
Whatever they use to block me out, it seems to have a slight hole built in... every day, multiple times a day, I will look down at my tablet and see notifications (mainly email, occasionally Facebook, etc) that pushed through on the schools network (I know that for sure, being that often times the emails are messages received during the day, in a time period where the tablet has been nowhere near any other networks). Maybe this hole can be breached?
Thanks!
Coffeeist said:
With Static I set an IP and all other info (Gateway, DNS, etc, except for Network Prefix Length... no clue what that is, left it at 24 default), and could not ping gateway
Dynamic/DHCP I will have to check tomorrow, after downloading stuff for the tablet to get that info (I think I need root to use IfConfig with Terminal Emulator, correct?).
Whatever they use to block me out, it seems to have a slight hole built in... every day, multiple times a day, I will look down at my tablet and see notifications (mainly email, occasionally Facebook, etc) that pushed through on the schools network (I know that for sure, being that often times the emails are messages received during the day, in a time period where the tablet has been nowhere near any other networks). Maybe this hole can be breached?
Thanks!
Click to expand...
Click to collapse
It seems like small gaps where the system doesn't block you long enough to receive some traffic, but that is promising. BTW, you can get your "network prefix" (netmask as we call it) from your computer. If you go into the command prompt on windows and run "ipconfig /all" you'll get 4 useful bits of info we need, IP address (so you can mimic it), the gateway, the subnet mask (usually 255.255.something.something) and the DNS servers. The subnet mask determines what you use, and I HIGHLY doubt they use 24 (that's mainly for home networks, 24 = 254 devices permitted on the DHCP, 16 = 65534 devices (this is WAY more likely)).
Cynagen said:
It seems like small gaps where the system doesn't block you long enough to receive some traffic, but that is promising. BTW, you can get your "network prefix" (netmask as we call it) from your computer. If you go into the command prompt on windows and run "ipconfig /all" you'll get 4 useful bits of info we need, IP address (so you can mimic it), the gateway, the subnet mask (usually 255.255.something.something) and the DNS servers. The subnet mask determines what you use, and I HIGHLY doubt they use 24 (that's mainly for home networks, 24 = 254 devices permitted on the DHCP, 16 = 65534 devices (this is WAY more likely)).
Click to expand...
Click to collapse
Well, I just had a clean connection for about 5 minutes, and had a normal-looking IP based on my PC. Using Terminal Emulator I pinged the gateway after my connection failed, still with no response. I still appeared to have a proper IP on my tablet, but no actual internet connection.
So, perhaps these small windows are something to pursue? Or perhaps sticking with the VPN plan is best?
Thanks!
Coffeeist said:
Well, I just had a clean connection for about 5 minutes, and had a normal-looking IP based on my PC. Using Terminal Emulator I pinged the gateway after my connection failed, still with no response. I still appeared to have a proper IP on my tablet, but no actual internet connection.
So, perhaps these small windows are something to pursue? Or perhaps sticking with the VPN plan is best?
Thanks!
Click to expand...
Click to collapse
You need to make sure your networking information is entered correctly, you still haven't said anything about the netmask in this situation. However, if you're entering this information in correctly then you should have a solid connection until they realize you've forced a device into the network. The only thing you can do beyond that point is during that window, open a VPN connection without using a single browser request so they don't know what the device is unless they check the MAC address. Either way, this is a window that can be used, you just need to avoid identifying your device in any way prior to initiating the VPN connection. Turn off Sync when you connect.

Categories

Resources