New to VPN, need help if you have a momment - Networking

I have a simple home net using mostly windows vista and 7 computers, some printers, external hd servers for backup storage and cameras in a workgroup static ip setup behind an off the shelf router. i set one of the computers as the vpn server since i dont want to buy a dedicated hardware vpn in a vista ultimate machine thats on 24/7 anyway with an incomming server... with the correct ports forwarded from the router to the vpn host.
my remote vpn laptop connects to the vpn fine and can see the network resources, however, has no internet connection once the vpn is connected. do i have to set the host vpn computer to do some sort of its own dns assignments to the incomming connection? its set for dhcp so i dont know why it would assign a valid IP to an incomming but not any other info.
in other words, on my remote laptop, i can connect to a random wireless internet hotspot and have full internet access. I can then enable vpn and log in to my home network and see all the network resources, however if i try to use an internet browser, there appears to be no internet. if i disconnect the vpn, the internet resumes to work fine and obviously the vpn resources are no longer accessable.
what am i missing? under incomming connection properties general tab, "allow others to make private..." is checked, under users the correct user is selected along with "require all users to secure...", and under networking ipv4 "allow callers to access..." is checked, and assign ip auto using dhcp is checked so I would think it should be working fine at this point, however it doesn list anywhere a gateway or dns to assine to incomming connections, only ip's.
host vpn computer is vista ultimate with static ip behind a retail router also assigned a static ip via my home isp.
the remote laptop is running ubuntu 12. just for kicks and to rule out ubuntu causing some problem, i set my android phone up for vpn use via 4g network, and the same thing happens. connects vpn fine, has local resources, but loses internet.
i also was curious as to having a vpn log in for the existing user account on the vpn host machine... in other words, should i just add the username on the host computer as a vpn client, and log in vpn using those credentials? and will that even work if that account is logged in, or will i have to remember to log out when im on the road to use the vpn connection.
thanks all!

Related

Terminal Server/Remote Desktop connection over VPN?

I'm trying to connect to my server at work through the Jasjar's Terminal Services Client over a VPN and it's not working. The VPN connects and I can open up a web site on the server using an internal address, but the Terminal Services Client just times out. I can connect with the Terminal Services Client to other servers without using the VPN and I can connect through the VPN with a PC, so I don't know what's wrong. Any thoughts?
Thanks,
Brett
are you using internal dns name or internal ip, if dns the ip should work and its cos your not internally resolving, i have this prob with when i vpn in to my server, dns does eventually resolve but ip is instant
Is the vpn terminal services restricted by IP address? Are you using gprs or wifi? If gprs maybe the ip range is not set up on the vpn??? If using gprs are you using the apn internet3.voicestream.com?
Sorry, I know, not much help. Mine seems to work
I'm trying to connect by IP address over wifi. The Jasjar does recognize that it should go over the VPN because it will automatically make the VPN connection when I try to start the TSC connection.
I'm glad to hear that it's working for you guys, though, so at least I know it's possible.
Thanks,
Brett
TSC/RDP
I am also having difficulty in this area and havent been able to resolve when using WIFI from my AP at home over ADSL to the Public IP address, then a TSC/RDP connection to the internal network IP address of our TS box.
I can easily get to the TS box via the WIFI AP at work directly, just not from the home AP. I can easily use the home AP for my home laptops to connect to work, so I know the systems at both end are up and operational.
In summary, I just dont know why the JJ doesnt VPN via the home AP over the ADSL to public IP to use the TSC to the internal IP of the TS box.
I just wanted to follow up on this. For some reason both of the servers I was trying to RDP into behind the firewall were in some wierd state and they weren't accepting any connections from anything but my desktop PC. I rebooted them today and that solved the problem I was having.
Thanks,
Brett

tilt and vpn issues over edge

i have isp.cingular provisioned and can connect some of the time.
1 vpn which goes to my home network works using vista as the vpn server connection. It does not always connect the first time though.
My work vpn which is pptp on a watchguard firewall, has 5% chance of actually connecting. Most of the error messages are talking about packets missing etc... When it does connect i cannot ping servers on the network but i see that the phone has a correct ip address and dns servers from the vpn. the gateway is the same as the ip assigned to the connection.
I have the same issue using the tilt over wifi from home where the vpn does not always connect at work.
I know the work vpn is fine since i use it all the time with vista's vpn dialup stuff.
Anyone got answers or ideas?

remote desktop problem

Hi everyone,
I would like to connect to my laptop next room from local network. I can connect perfectly when I type in my IP address into the first textbox (Computer), but I can't connect when I type in my Computer Name (full computer name) instead. I tried MyPCName as Computer, \\MyPCName as Computer, forwarding port 3389 to my IP, leaving domain name empty, putting in my workgroup name as a domain, putting in my computer name as a domain, putting in myPCName\MyUserName as Username, \\MyPCName as Computer, still the same. It won't connect unless I put in the IP address. I would like to do this since my workplace assigns a different IP to my laptop then I assign at home, but naturally I have the same computer name at both places, so I would like to have a permanent setting for both places.
I'm running Windows 7 64 bit on my laptop and 1.66.405.2 ROM on my HTC HD2.
Many thanks in advance.
can you connect to it ok using another computer? might be a dns issue at a guess...
I can connect from other computers fine. Also on my HD2 I can see the host names of PC's under Resco Explorer and map them. However, remote desktop mobile refuses to work with the Computer Name. I can ping my Laptop's IP and also Computer name from pingbox2. Only in Remote Desktop Mobile there is a problem.
windows 7 by default blocks remote desktop connections from different versions of remote desktop. if you right click computer and select properties, then choose remote settings on the right hand side and select the middle option (accept connections from all verions of remote desktop). havent tried this my self but it solves most issues when using different versions of windows
OK, I sort of figured it but would still appreciate some help. Here is how I got it to work:
I had OpenDNS IP under DNS settings for wireless adapter. I deleted them. If I don't do this, pinging my computer name from HD2 always brings 67.215.65.132, which is opendns and not my true local IP, i.e. 192.168.x.x. I also had to disable the data connection (3G) and only have wireless. If I don't disable 3G, I can only connect with IP and not computer name. Only after doing these 2, when I pinged my computer name, I got the true local IP and I was able to connect with Remote Desktop Mobile using computer name. Now my question is:
1- I don't want to quit using opendns, is it possible?
2- I don't want to disable 3G connection every time, is it possible?
thanks in advance.
For me it works with MyPCName in computer and empty domain, both for XP and 7.
Something seems strange with your phone's networking configuration. At a guess (and this is a long shot), I would check your VPN settings on your phone to make sure you're not connecting to a different domain over 3G as this might explain why it works when you turn off the data connection on the phone and why it works by IP address.
As I said though, it's a long shot and is the only thing I could think of that fits your particular symptoms...
ozkaya said:
OK, I sort of figured it but would still appreciate some help. Here is how I got it to work:
I had OpenDNS IP under DNS settings for wireless adapter. I deleted them. If I don't do this, pinging my computer name from HD2 always brings 67.215.65.132, which is opendns and not my true local IP, i.e. 192.168.x.x. I also had to disable the data connection (3G) and only have wireless. Only after doing these 2, when I pinged my computer name, I got the true local IP and I was able to connect with Remote Desktop Mobile using computer name. Now my question is:
1- I don't want to quit using opendns, is it possible?
2- I don't want to disable 3G connection every time, is it possible?
thanks in advance.
Click to expand...
Click to collapse
about the open dns issues, I suspect that can be solved by making sure your router lets the incoming connection into your home network (you say it resolves to 66.whatever when open dns is used, shouldn't be a problem do long as you don't forget that will be your home ip address so that connection will neef to be allowed through the router and then forwarded by your routers virtual server (our whatever your router software calls out) to your laptops internal ip address.
as for the 3g it should use wifi over 3g by default..... mine certainly does, no need for me to disable it.
tomallen35 said:
Something seems strange with your phone's networking configuration. At a guess (and this is a long shot), I would check your VPN settings on your phone to make sure you're not connecting to a different domain over 3G as this might explain why it works when you turn off the data connection on the phone and why it works by IP address.
As I said though, it's a long shot and is the only thing I could think of that fits your particular symptoms...
Click to expand...
Click to collapse
I think you're right, when the 3G is on (and also Wifi on), Resco shows computers from all around the country when I click computers near me and not my local network. When only wifi is on I can see my local computers. 3G probably has precedence over Wifi? How can I correct this?
samsamuel said:
about the open dns issues, I suspect that can be solved by making sure your router lets the incoming connection into your home network (you say it resolves to 66.whatever when open dns is used, shouldn't be a problem do long as you don't forget that will be your home ip address so that connection will neef to be allowed through the router and then forwarded by your routers virtual server (our whatever your router software calls out) to your laptops internal ip address.
as for the 3g it should use wifi over 3g by default..... mine certainly does, no need for me to disable it.
Click to expand...
Click to collapse
But the 66.whatever address is generic openDNS lookup IP and same for everyone. Are you suggesting me to route this IP to my local IP, i.e. 192.168.x.x? Oh, one more thing, I can also connect when 3g and wifi are both on, but only through computer's IP and not computer name. Can you connect with computer name while both are on and connected?
when your phone does a dns lookup on the name it resolves to the open dns assigned address (not the same for everyone, otherwise the open fns system wouldn't work) so to connect to your computer the phone sends its request to open dns who forward that request to your current actual address.at home that address is your home ip address BUT it isn't your laptops address it is your routers address.(stop reading here if you don't have a router).
so the router needs to be told "if you get a connection request in port (whatever the remote desktop port is) please forward it to (laptop ip address)
its called port forwarding in some routers, virtual server in others.
samsamuel said:
so the router needs to be told "if you get a connection request in port (whatever the remote desktop port is) please forward it to (laptop ip address)
its called port forwarding in some routers, virtual server in others.
Click to expand...
Click to collapse
You're mixing up things a bit - he's not using dns but the computer netbios name. The point is that he has wifi on and connected as well as 3G, thus with an "intranet" ip address on Wifi... so the program/phone should be looking up the name on that connection, where it would find it, instead of looking up over the 3G connection. As the netbios protocol is not routable, it has no chance of finding the computer name over 3G/internet and back home, even with port mappings.
kilrah said:
You're mixing up things a bit - he's not using dns but the computer netbios name. The point is that he has wifi on and connected as well as 3G, thus with an "intranet" ip address on Wifi... so the program/phone should be looking up the name on that connection, where it would find it, instead of looking up over the 3G connection. As the netbios protocol is not routable, it has no chance of finding the computer name over 3G/internet and back home, even with port mappings.
Click to expand...
Click to collapse
you're totally right, I have a router and its port is forwarded to my laptop IP, but this is only good (and works well too) when I want to connect from Internet to my local network. I tried OpenDNS exceptions for VPN and defined an exception named as MyComputerName but it didn't work. Then I tried a dyndns solution, but it only works for external connections and not local network, i.e. it can't map local IP's. What I need is a dynamic client which can update my local IP.
I also tried to edit hosts entry in the registry with MyComputerName. It works for a single IP, but I'm not sure if I can write multiple IP adresses (my work and home local IP) into that. If I could maybe everything would be OK.
I've just tried a couple of things and it really works fine for me. If I connect Wifi only, I can remote desktop with the computer name. If I then connect data connection, it still works. Disabling wifi and obviously it doesn't work anymore. Re enabling wifi, it doesn't work at first, but does again after ~30 seconds once the netbios protocol has done its host lookup procedures.
There simply shouldn't be anything special to do.
kilrah said:
I've just tried a couple of things and it really works fine for me. If I connect Wifi only, I can remote desktop with the computer name. If I then connect data connection, it still works. Disabling wifi and obviously it doesn't work anymore. Re enabling wifi, it doesn't work at first, but does again after ~30 seconds once the netbios protocol has done its host lookup procedures.
There simply shouldn't be anything special to do.
Click to expand...
Click to collapse
thank you very much for your time, I appreciate it. You're right in that waiting a bit resolves the issue (it's a bit more than 30 secs for me that's why I thought it wasn't working when 3G is enabled) but only when OpenDNS is not used. I assume you don't use OpenDNS, right? Once I put that one into equation, it takes over NetBIOS protocol and returns its IP instead of the local IP(192.168.x.x). As far as I understand, DNS lookup has precedence over NETBIOS and if the name is not found in DNS it consults NETBIOS protocol. However OpenDNS has this nice "feature" where it finds the name with its own IP. There are several posts about this on its webpage and they say to either disable the typo correction or put exceptions for Netbios names, but sadly none of them works for me right now.
Nope, no OpenDNS, never actually heard of it.
How does it work? Do you enter their DNS server address in the network settings of your pc/phone, or is it an app you run?
you click Start/Settings/All Settings/Connections/Wifi/First Button/Switch to Network Adapters tab/Select Broadcom 802.11 DHD Network Adapter/Switch to Name Servers Tab/Type in 208.67.222.222 for primary DNS and 208.67.220.220 for secondary DNS, click OK. that's all. Could you try if it's not so much trouble? Thanks.
OK, remote desktop doesn't work either with the OpenDNS servers in.
I'm pretty sure it must be a limitation of the remote desktop app itself, as resco explorer can still navigate and/or discover the network shares of my other PCs with no problem. NBTStatCE also finds everybody.
Wouldn't even surprise me, as that Remote desktop mobile has always been troublesome. I don't remember exactly, but in the WM5 days it was pretty much impossible to use on a local network due to a weird handling of names... if I remember well all "local" (NetBIOS) addresses without a '.' entered in the remote desktop app would be redirected to the "Work" connection, while "remote" ones with a period would be directed on the "Internet" connection. As a network card can only be defined as one of them, if you wanted it to work in both cases through Wifi you had to switch the card from Work to Internet and back all the time. And of course when it's on Work it breaks some other things that use the default system handling like mail.

Has anyone tried setting up a VPN connection on their Note?

From my desktop i am using BeeVPN and would love to have my phone connection using the VPN protocol protecting my traffic on my phone as well.
So now i am hoping someone here are using either beevpn or a similar service and have setup a secure vpn on their note and would share their experience in doing so?
I've setup a VPN to my home using Windows 7's built in VPN server. I used Dyndns to sort out the physical IP address to my home (since I don't have a static IP) and then set up the port forwarding on my router to forward VPN connections to the PC I have running the VPN service.
Works like a charm (PPTP protocol being used.)
I have openvpn on my XP home machine and also on my (rooted) note. It is a bit fiddly to get the note's internet traffic routing via the home XP box - that does not happen by default on an openvpn connection, you have to set it up in the openvpn server config file. Should then be OK but unfortunately, pushing the default gateway doesn't seem to work on Android in practice. The openvpn client on the note has a workaround for this - a menu option to "fix DNS problems" which does the job after the VPN is established.
I use this method for any stuff I do on public wifi other than basic web surfing where I have no security concerns. So, banking, utilities etc. all goes over VPN. I also use it when I need to present my home IP address rather than thet of the connection I'm currently on: eg. for watching UK TV streams whilst outwith UK, and for remote access to 3rd party systems that sit behind firewalls which allow my static home IP through but nothing else).
Connecting to the VPN from public wifi/3G is very easy (once I've woken the XP box with Wake on LAN). The only real downside is that your download speed over the VPN in this configuration is limited to the UPLOAD speed of your home broadband. I get 800Kbps which is sufficient for decent video streaming (skygo/TVcatchup).
The other major benefit of VPN is that you can remotely access your home PC's and services on them via internal ip addreses without having to open up ports on your router on the WAN interface.
I've had a Vpn set up on my note for about 4 months now with no problems.
I use vpnaccounts.com as the server very easy and simple to setup.
I just wish the Vpn would work using my data connection and not just Wifi but we can't have everything!
georgios73 said:
I've had a Vpn set up on my note for about 4 months now with no problems.
I use vpnaccounts.com as the server very easy and simple to setup.
I just wish the Vpn would work using my data connection and not just Wifi but we can't have everything!
Click to expand...
Click to collapse
I'm located in Brazil and also use vpnaccounts.com on my laptop, pc, Galaxy Note and Nexus S. The server I connect to is in Dallas Tx.
I also use the 1 VPN app which gives you 1 click logon.
Everything works great!
Yes but don't you have to enter your VPN password every time you want to turn on the VPN?
I can't find a way to keep the password remembered by the device.

[Q] VPN over wifi Internet doesn't work for some reason

I am able to connect to my home router's PPTP VPN server from my Android phone's PPTP client. I can even see my remote LAN devices; and, my remote LAN devices can see my mobile phone on the LAN.
The problem is when I connect my phone to wifi Internet.... BEFORE connecting to my PPTP VPN server... I can't see the remote LAN; and, the remote LAN can't see my phone. The only thing I can do successfully is get a new public IP (my home Internet public IP).
What can I do so that I am able to use my local wifi Internet connection to connect to my VPN at home?
It might be a route problem.
When you connect to WiFi, some static routes are pushed to your phone.
Those routes might not be refreshed or conserved after a VPN connection.
If it is not a route problem it's a default gateway problem.
Yes, that's what I suspected. I already tried adding routes; specifying the gateway via command-line; however, I didn't have any luck; probably because I didn't know exactly what I was doing.
One thing I noticed; when I use my wifi internet hotspot, I noticed that it gets a private WAN IP.. 10.x.x.x; which then NATs to a temporary real public IP; which no connections instigated from the outside world can make it So, even if I do port-fowarding on my wifi hotspot router, it doesnt help any since the incoming connections are stopped dead in their tracks.
I'm using PPTP VPN; which depends on a TCP port 1723. If that TCP connection is instigated from my remote VPN server into my mobile Internet wifi hotspot based LAN devices, it wouldn't work for the same reason explained above. I didn't see a PPTP VPN passthrough option for my wifi hotspot; only for IPSEC; which I dont have a server for. I'm guessing that if I had a real-world public WAN IP for my mobile Internet hotspot, maybe I wouldn't have this problem for PPTP.??
maaaaz said:
It might be a route problem.
When you connect to WiFi, some static routes are pushed to your phone.
Those routes might not be refreshed or conserved after a VPN connection.
If it is not a route problem it's a default gateway problem.
Click to expand...
Click to collapse
First, are you talking about a free internet hotspot or from private internet hotspot (@work for example) ?
you'll never gonna get a public IP from your internet hotspot. 1-public-IP-for-1-client on a hotspot is just inconceivable, due to IPv4 exhaustion.
I think you only have to try to do port forwarding on your hotspot.
Your assumption "it doesnt help any since the incoming connections are stopped dead in their tracks" is wrong I guess. If your hotspot has a built-in firewall, it might be stateful. As you are initiating a connection to your server, the returned traffic flow shall be allowed.
If it doesn't work after port forwarding, try to look at firewall rules on your hotspot router.
Problem resolved.
My Verizon wireless hotspot (890L) doesn't support PPTP passthough. More specifically, PPTP's routing protocol: GRE (value 47). Verizon does offer another wireless hotspot that does offer support for PPTP; at least via a firmware update.
This issue actually pushed me to install and configure OpenVPN server on my router; instead of using the existing PPTP server which I already had. OpenVPN is fantastic is working through firewalls.
Great !
Yes, OpenVPN is a delight.
me too
I have the same problem,
but I usually change another ROM until there's no bugs
mkanet said:
I am able to connect to my home router's PPTP VPN server from my Android phone's PPTP client. I can even see my remote LAN devices; and, my remote LAN devices can see my mobile phone on the LAN.
The problem is when I connect my phone to wifi Internet.... BEFORE connecting to my PPTP VPN server... I can't see the remote LAN; and, the remote LAN can't see my phone. The only thing I can do successfully is get a new public IP (my home Internet public IP).
What can I do so that I am able to use my local wifi Internet connection to connect to my VPN at home?
Click to expand...
Click to collapse
have you tried to configure the wi-fi gateway to match your vpn router?
settings / wireless & networks / wi-fi / long press your vpn connection / modify network / scroll to show advanced options / select static ip /scroll down to gateway and put the gate address in / save
I run a vpn through a 2 router setup, and even though my phone connects to the vpn router, its gateway by default is always the non-vpn router. changing the gateway to the vpn router allows the vpn to connect to the phone. you can verify the vpn connection by going to ip-score.
That why i can't see my phone using wifi in VPN network..
cant connect if theres no mobile data or load
Hi please help ..when i have load i see its connected..but if i have no load its not connecting please ..anyone can explain this?
mkanet said:
I am able to connect to my home router's PPTP VPN server from my Android phone's PPTP client. I can even see my remote LAN devices; and, my remote LAN devices can see my mobile phone on the LAN.
The problem is when I connect my phone to wifi Internet.... BEFORE connecting to my PPTP VPN server... I can't see the remote LAN; and, the remote LAN can't see my phone. The only thing I can do successfully gets a new public IP (my home Internet public IP).
What can I do so that I am able to use my local wifi Internet connection to connect to my VPN at home?
Click to expand...
Click to collapse
before I was able to connect the VPN from work and home but now I can able to connect from work only,,, the same VPN not working at home.. on my same MOB device
Please help me to fix this issue

Categories

Resources