Open VPN - no access to home network - Networking

I recently bought a new Asus router that allows me to use it as an Open VPN server.
Installed the Open VPN GUI/Apps on both Windows and Android devices, and both platforms were giving me full access to my Home network.
However, while the Windows devices still work 100%, all my Android devices are now barred from entering my Home network (though they allow general internet access through the server just fine).
Any ideas what's gone wrong on the Android side of things?
Thanks.

How are you connecting to your VPN server? Are your Android devices connected via wifi etc or are they using cellular networks to connect via your WAN
It sounds to me like a routing issue, for example your local network could be 192.168.1.0 and your VPN 10.0.0.1, so if your android device is connected via the 10. network unless routed it wouldn't know how to access your 192 network.
This seems like a similar issue, maybe you can find more help here: https://forums.openvpn.net/viewtopic.php?t=21311

Thanks for the reply, which I've only just had a chance to look at.
I can't get inside my network by neither cellular or wifi.
I'll have a good look at the link you've posted and report back.
I'm very much a network newbie and this has been very frustrating as it worked when I first set it up and now it doesn't, in spite of router factory resets.

Related

VPN driving me mad!

Over the last year I have tried many times to set up my Windows Mobile devices to connect over VPN and then use RDP to manage my clients' sites. To date I have never managed to get it to work. My config is as follows :-
Within Start \ Settings \Connections \ Advanced \ Select Networks
Programs that automatically connect to the Internet use MY ISP
Programs that automatically connect to a private network "My Work Network"
a VPN is configured under "My work network" and the device can connect to this and using vxutil I can ping the server I wish to RDP to - 172.17.3.3
Supposedly the important bit is to add the exception under "Work URL exceptions", I have added 172.17.3.3 in here.
Once the VPN is established if I enter 172.17.3.3 within IE or Terminal Services CLient the VPN connection is still dropped.
If I enter this IP address without connecting the VPN first then the device will not connect the VPN automatically.
If I enter a non qualified domain name such as ids-vs then the VPN is connected but the name is never resolved.
Can anyone shed any light on this, if I could use a local lmhosts file on the device as with XP then I may be able to work around the above. It appears to me though as though the exceptions list is never processed. I did a hard reset last night just in case, but this has made no difference.
I cannot believe that the above can be so complex.
I am using a HTC Tytn and using t-Mobile in the UK.
Any help greatly appreciated since it is driving me totally mad!
I would love to figure that out.
I was trying to connect to my pc at home like this and suffered from all the same symptoms your having. In the end I gave up, mainly 'cause someone told me that I needed another type of data plan to have vpn (at the time I had the $29.99USD plan) in other words it might be your plan, or something to do with the proxies or something, I hope someone would find out what you need to do in order to get this to work.
It's strange, looking around the web there are loads of people that struggle with the setup, but most seem happy once they are told to add the server name or IP address in the exceptions list.
I have ruled out the data plan since I can establish the VPN connection and can see it authenticate on the other end, as well as being able to ping the server on the work network from the phone.
I have just opened a support call with Microsoft as well, but I am not holding out much hope since I think they will point me at HTC. Assuming HTC ever responded they will just point me back at Microsoft!
Well it would be cool if they could help you, I tried everything myself and zilch. I could also establish a connection but as soon as I would try to access a file on my pc it would disconnect. I would try to help you out experimenting on my side again, but I changed my router to a cheap piece of $h.. and now I can't access my pc via vpn..... I really need to get a decent router
This may sound stupid, but I could swear someone told me something about the speed of the connection. If the connection speed is too low then DNS would fail, although that wouldn't explain why we are able to establish a connection, but not access anything else.
OK, I have made quite a bit of progress :-
1) I was using a cab file to configure T Mobile settings on the phone. This was somehow configuring the exceptions list to be ignored. Hard resetting the phone, installing this CAB the problem remained. Hard Resetting the phone and setting up GPRS manually - everything worked.
2) There is a fault with Windows CE 5 routing over VPN - the subnet information is ignored. Hence for example, if your GPRS provider give you a NAT 10.x.x.x ip address and your corporate network uses 10.x.x.x then you can never route to your corporate network.
And what cab file is that? do you know if it's on the extended roms for the t-mo roms? Glad to see your making progress, keep it up.
It was a Cab file for the Tmobile settings. It either came from these forums or over at modaco, can't remember which.
VPN
I was able to successfully use the Movian VPN to connect to my work using my XDA2.Worked fine for 2 years. Apologies, but I can't help with the settings and my work migrated to an M-notes server so I was able to connect without a VPN.

WM6 VPN to home computer not working

O.k. I've exhausted all the resources I have found on the net to troubleshoot my VPN problems myself so can someone please help me figure out why this isn't working.
I have a VPN set up on my home desktop that I can connect to fine with my laptop (both XP home SP2). When i connect with my Verizon XV8600, the connection is stable, no trouble logging on and no timeouts, but I can't access any of the shares on my desktop. I go to file explorer and try to open a path, same as I do when connected at home via wifi, and I get "The network path was not found" and "Network resource cannot be found or you do not have permission to access the network".
I'm connecting via PPTP, I have tried with my network adapter set to "The Internet" and "Work". Under the advanced tab in connections under the "Select Networks" button I have tried both the "My Work Network" and a new network I set up for the private network selection.
It's just diving me nuts because it connects every time and stays connected, but I can't do jack with it. What am I missing people? Any help would be greatly appreciated, this is the last hurdle to having my phone set up the way I want it.
Firewall?
One area to question would be weather you have a firewall or some type of security agent blocking data access on the VPN port of your laptop. Possible?
many routers also need to be setup to pass vpn
lub2lrn said:
One area to question would be weather you have a firewall or some type of security agent blocking data access on the VPN port of your laptop. Possible?
Click to expand...
Click to collapse
The VPN is set up on my desktop and my laptop connects just fine. The trouble I'm having is getting my phone to connect properly.
Rudegar said:
many routers also need to be setup to pass vpn
Click to expand...
Click to collapse
I've set up the port forwarding on the router, the phone connects, it even shows up under the network neighborhood on the desktop when it's connected. I just can't seem to access my shared folders.
animez said:
I've set up the port forwarding on the router, the phone connects, it even shows up under the network neighborhood on the desktop when it's connected. I just can't seem to access my shared folders.
Click to expand...
Click to collapse
Which ports did you forward? And which router/firmware do you have?
It's not enough just to forward port 1723 you need to enable the GRE protocol (type 47) also. Without enabling it (GRE protocol) the computer from outside connects, you see it in your logs, but it actually can do nothing.
Falcon2008 said:
Which ports did you forward? And which router/firmware do you have?
It's not enough just to forward port 1723 you need to enable the GRE protocol (type 47) also. Without enabling it (GRE protocol) the computer from outside connects, you see it in your logs, but it actually can do nothing.
Click to expand...
Click to collapse
The router is a linksys wrt54g v8 with firmware 8.00.5, yes pptp-passthrough is enabled.
I did a bit more research on GRE and my particular router and have come away confused. Some sites say it doesn't work at all on the wrt54g, but according to them it shouldn't even work on my laptop. I can stream music from an external ip on my laptop and browse all my shares so it seems like its working to me.
There must be something different about how the phone uses that protocol that the router is screwing up. Most of the forum posts seem to suggest that GRE on a lot of linksys routers is spotty at best. I'm thinking about flashing the router with a third party linux firmware (dd-wrt) that supposedly handle GRE properly. Not sure though, don't wanna risk bricking my router just to connect my phone, which I'll probably do once in a blue moon.

VPN Pptp over wifi in HTC Leo

Hi!
I have been trying to connect to my to vpn pptp server (witopia.net) for 2 days. I tried every combination that i could think, but there must be something i am doing wrong. I think the mobile is trying to connect to the vpn server through gsm because everytime i try to connect the gsm signal bars disappear for a few moments. How can i make sure that the vpn connection goes through wifi?
I have managed to actually connect to the vpn server, but i cannot access websites like facebook and youtube from the Leo (I live in China and they are blocked). I am able to access blocked services through my iphone and laptop through the same vpn connection.
Any suggestions?
Thanks
PPTP on WM6 is a major problem. Especially if the server (and most do) required MPPE. Its one of the few niggles I have about WM. If you own the server your best setting up the conection using L2TP/IPSEC.
Or if you dont own the VPN server, and have a server laying around the house (as I do) you could set up your server to use the PPTP VPN then set there server as a Proxy, and connect WM6 to the server via proxy...so basically WM6>Proxy>VPN>interwebs
Hi Jagnet, Thank you for your reply.
Unfortunately i am not able to use Ipsec/L2TP in China, only PPTP works fine with blocked sites.
After trying many combinations, there is a step that i havent been able to figure it out.
Once i am in Start > Settings > Connections (tab) > Connections (icon) > Advanced (tab) > Select Networks, How do i select the WIFI connection in "Programs that automatically connect to the internet should connect using" opcion? . On the modem tab i only can choose "celullar line", "Celullar line (GPRS)" or "Hayes Compatible on COM1:", there is nothing about WIFI there, so when i try to connect at the vpn server specified in "Programs that automatically connect to a private network should connect using", the phone seems to be trying to connect via GPRS.
¿Any ideas?
Thanks
joaquinmora said:
Hi!
I have been trying to connect to my to vpn pptp server (witopia.net) for 2 days. I tried every combination that i could think, but there must be something i am doing wrong. I think the mobile is trying to connect to the vpn server through gsm because everytime i try to connect the gsm signal bars disappear for a few moments. How can i make sure that the vpn connection goes through wifi?
I have managed to actually connect to the vpn server, but i cannot access websites like facebook and youtube from the Leo (I live in China and they are blocked). I am able to access blocked services through my iphone and laptop through the same vpn connection.
Any suggestions?
Thanks
Click to expand...
Click to collapse
having similar issues with HD2. CMCC as well, in China.
I am getting a proxy IP address if I check on ipchicken.com, etc
but I am not able to open FB.
I am not using the PPTP option, but using their SSL service with
openVPN. but STILL not working..
right now on support chats with witopia.
VPN PPTP is simply broken in WM. It will work, but only with no encryption at all, which beats the purpose.
First of all sorry for bumping this old thread. But I have been looking and it seems kinda close to what I`m doing, oh a little new to vpn.
I have managed to sucessfully connect the HD2 via VPN in connections only when on the lan (outwith I need to contact O2 to get it enabled apparently). I setup a dialup connection in Win 7; HD2 says I`m connected to the VPN.
However heres the thing. Am I right in thinking that folders by default have to be shared. Therefore when using resco I can see network folders anyway, when connected to wifi.
So how would I prove that I can see folders shared to the VPN and not on the LAN as I cant seem to prove whether I`m seeing the folder via LAN and not on the VPN?
Sorry if its confusing but perhaps you get my drift? Or am I missing the point entirely....

Wifi finally connected but cant browse

ok - i have gone through about 6 roms now and im constantly getting the same story.
i primarily use CM based roms cuz those are the only ones that seem to connect to ad-hoc networks shared from my computer. when i use CM7 roms the internet constantly connects and disconnects and when i use CM6 roms the phone says im connected but the PC doesnt see any present connections.. not even with connectify or the other hotspot programs seem to help
its strange cuz i also have an aria with a CM6 rom which connects flawlessly but the HD2 cant even be seen on the network.
PLEASE can anyone help me out with this problem? I've been awake for the past 2 days trying to fix this problem from all sorts of angles and i still cant connect to an ad-hoc wifi
i just tried connectify but the problem is the same, it says im connected but still there is no data coming from the computer. my MAC address appears fine so i have no idea what is causing the problem
not even changing the channels, editing wpa_supplicant, using static IP or DHCP... nothing helps..
just realized that if i try to connect while other devices like my aria are currently connected, the other devices get disconnected from the network.. no idea whats causing that but could use some insight
There is another longer thread with someone having the same or at least very similar problems. All non-Sense builds he's tried have wifi "connecting", but not actually transferring any data. When he loads up a Sense build, it all works fine. I'd look it up, but search unavailable for "10 minutes". I did comment on it though.
You wrote you try to setup an ad-hoc WiFi connection. This means you connect two devices together, not to a network (if you want to use your laptop as Internet bridge it's a more complex config).
You're talking about DHCP in ad-hoc connection... Do you setup a DHCP server on your computer (is this even possible)?
You said when you have other devices connected... this is not ad-hoc.
I think you try to connect the wrong way, sorry if I misunderstood but you have to provide more info for me to help.
As general advice:
Check for your ROM thread as initially their was a problem with all devices (with Android on HD2) having the same MAC (has been solved)
Start first to try to connect to a "normal" WiFi network
Make sur of the network config (try with basic b/g instead of n, n+...)
First step could be to setup a basic b/g network with DHCP enable, SSID broadcast, no security (wep,...): the kind of network you have when you take your access point out of the box.
No other advice... hope this will help.
Check the IP you have on your phone when connected. If it's kind of 169.xxx this can't work. It's auto IP from the device itself.
thanks for the response mate. Unfortunately, there are not many unsecured "routed" wifi connections available where i am to test - thats why i have to rely on the laptop to feed internet to my phones through an adhoc network.
let me explain what im doing:
im currently trying to use internet sharing from my laptop on my phones - i have 2 android phones, an aria and an HD2 - both of which connect to the internet through an ad-hoc wifi connection to the the laptop which has LAN internet connection.
the only way to connect is by issuing each device a static IP
eg. laptop - 192.168.0.1,
aria - 192.168.0.3,
HD2 - 192. 168.0.2
whenever i try to use DHCP i get "obtaining IP address" from the phones until it auto-disconnects.
using a static IP-Config, the aria connects and browses effortlessly. But the HD2 wont. Just says "connected" but the pc says "waiting for peers to connect" and doesnt feed any data to the HD2. Additionally, i found out that if the aria is already connected while attempting to connect the HD2, the aria gets kicked from the net..
if it helps, my rom is CMN V_2.0.. its the only one that gets me "connected", so to speak..
Then I will not be very helpful as I seldom use ad-hoc and bridge connection.
I connect my HD2 to my home network only (works in WEP or WPA anyway).
Just what I know:
1/ for ad-hoc you can't use DHCP (or you may have to activate a server on your laptop, this will add complexity to your setup)
2/ ad-hoc is only between 2 devices (1 laptop and 1 phone for ex), it could explain that when you connect the HD2 the other one is "kicked out".
3/ On your laptop you have to bridge your connections. Anyway, if with another device you can connect and broose, then your laptop setup has to be ok.
4/ if you're connected you may find a good IP in the HD2 (anyway if you use fix IP it has to be ok).
5/ to connect to a server you need a DNS. this is maybe what is missing. Usually when you connect to an access point you use the "AP IP". Not sure it can work here.
Try to manually put the DNS address in your HD2.
Just to make one test:
a/ from your laptop "ping" an Internet server (xda for ex).
--> Start menu, type "cmd", in the cmd windows type "ping server_name"
b/ from your HD2 try to connect with the IP instead of the server name.
This is the puprose of a DNS, to give your device the IP of a server.
NB: to find the DNS server used by your laptop:
In cmd type "ipconfig /all" it will give some info, you may find your DNS in it.
Sorry, no other idea...
I read again what you write and I think you can forget my previous post.
The answer from your laptop is different with the two phones.
I don't think it's a DNS problem.
Sorry, I will be useless! Hope someone with the same network config will help.
My home network is totally different.
If it's specific to your rom you can try to check in your ROM's post if other have the same problem. If no, try to ask there is someone has the same connection setup.
Edit: check this link, it seems that many people with non-sense build has problem with WiFi (I use sense build, always):
http://forum.xda-developers.com/showthread.php?t=907670
i would use a sense build but it seems all of them take up quite a lot of space from internal storage - im always left with 500-400Megs from the 1GB of space
its just odd because when i had a G1 (before i got my HD2) it connected effortlessly as well.. even more so, both aria and g1 could be connected to my laptop's adhoc simultaneously
OOOOHHH!!! i just rememberd hearing something about internet pass-through, but im not sure how ti works.. i will give it a try

[Q] Wifi issue. New findings?

Hello, been a long time reader from my G1 to my G2 and now my nexus 4.
I am unfortunately not able to use my device on certain wifi networks which is a real bummer.
Being that i have a background in diagnosing computer problems in my real world life, i thought i would post my findings as i found some interesting things!
First i will say that the network i will use as the demonstration is secured with WPA2 PSK AES security and encryption.
I can connect to it and often find i have problems on the first connect to the network. By this i mean if i have made my wifi settings 'forget the network' and then try to connect again.
On the first time it seems to indefinitely hang, showing the message 'authenticating' on screen next to the network and if i long press on the network name and press modify, the dialog shows that i have a link speed of 1mbps.
I can usually get past this by turning wifi off and on and then reconnecting, at which point it will connect straight away and have a normal link speed. (in this example 72mbps).
After i am connected, i find that the following does not load:
-browsing webpages through chrome does not load
-the wifi icon turns grey
-play store cannot load anything
I find that i get assigned an ip address by dhcp correctly too with the right gateway and dns.
I decided to download a network tool to have a better look. I use fing personally.
I found it very interesting what i found, which no other threads about wifi issues mention.
Network discovery found every device on the local wifi network.
I was able to scan the services of my computer which is also on the network and it found everything, including a http server which i run which i could browse to.
In fact i could do everything through wifi with this device and most others.
Again it got interesting when I then took a look at my gateway, the router.
I had discovered its mac address which i can verify through my computer is correct which to my understanding, being that i can communicate through the wifi, means that i have the information available to send information to that physical device?
When trying to scan services, i find nothing, which is not true, at the very least it exposes a http server on port 80 which my computer can access.
When trying to ping i have 100% packet loss.
So at this point it is only the gateway i cannot access.
So i figure i could setup another computer which is connected to the network with a wire to share its connection through wifi onto that network and then i have a standin gateway?
I connected this computer through wifi to the network and pinged it succesfully with my phone. I then turn ICS on my wired adaptor to share to my wifi adaptor. I ensure that the wifi maintains an ip address in the right range and subnet.
I then try to ping that ip with the phone and it then gets 100% packet loss.
Could this be that when a device is configured to act as a gateway something changes about how it handles any packets sent to it that the nexus 4 is currently in compatible with?
elltg said:
So at this point it is only the gateway i cannot access.
So i figure i could setup another computer which is connected to the network with a wire to share its connection through wifi onto that network and then i have a standin gateway?
I connected this computer through wifi to the network and pinged it succesfully with my phone. I then turn ICS on my wired adaptor to share to my wifi adaptor. I ensure that the wifi maintains an ip address in the right range and subnet.
I then try to ping that ip with the phone and it then gets 100% packet loss.
Could this be that when a device is configured to act as a gateway something changes about how it handles any packets sent to it that the nexus 4 is currently in compatible with?
Click to expand...
Click to collapse
I have found a bit of a workaround that i can use!
When i said i turned on the wifi and ICS i did the following:
-Turned on wifi.
-Connected to wifi network.
-Turned on ICS on my wired network to share to my wifi
-Observed that my ip changed from 192.168.10.x to 192.168.137.1 with no gateway or dns.
-I decided to change my ip on the wireless to 192.168.10.x and gateway to my router 192.168.10.10
-I then tested.
I ran through this again but slightly different:
-Turned on wifi.
-Connected to wifi network.
-Turned on ICS on my wired network to share to my wifi
-Observed that my ip changed from 192.168.10.x to 192.168.137.1 with no gateway or dns.
-I decided to change my ip on the phone to 192.168.137.5 with gateway and dns as 192.168.137.1
-I then tested. And it works!
I know this doesnt fix the wifi issue itself, but for me, this makes a big difference as i can now use wifi at work where we also have poor mobile network coverage.
Edit:
Additionally i previously tried to setup this same computer to host a wifi network to share the connection using 'netsh' and creating a 'hostednetwork' but i found i was in the same situation where i still couldnt get the internet.

Categories

Resources