Database Develop

Running OpenVPN on the Kaiser (3G)

I've been struggling with OpenVPN on my Vario III on T-Mobile and hope someone can throw me a bit of a lifeline.
I can connect to my OpenVPN (running on my WRT54GS router) via wifi but the problem is when I try over 3G. Even when I've specified the provider and ticked "exclusive", it manages to connect to my OpenVPN server but I get no further connectivity (to webpages etc).
As said, via wifi this config on my Kaiser works perfectly...
Code:
remote xxxxxx.homeip.net
port 22
dev tap
secret "\\Program files\\OpenVPN\\config\\secret.key"
proto tcp-client
resolv-retry infinite
nobind
comp-lzo
cipher AES-256-CBC
route gateway 192.168.xxx.xxx
redirect-gateway
dhcp-option DNS 192.168.xxx.xxx
but when tried via 3G it seems to have a problem with setting the routing..
Code:
Mon Oct 22 21:58:00 2007 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.
Just wondering if there is something either with the T-Mobile network or the Vario III which is specifically stopping me from using OpenVPN
Or are my settings misconfigured?
I've also attached a full copy of the log.
Thanks for any help you can give (Give generously)
CP

Sounds suspiciously like a NAT traversal or proxy issue to me. On the HSDPA network, there's a proxy in the picture. I don't believe that's the case for the Edge network. That could easily be the cause of the problem.

Surely once the connection has been established the NAT issue shouldn't be a problem?
TBH I thought the route addition problem was due to the software being unable to update the local routing table?

NAT traversal issues often manifest themselves as connections that look like they're established, then die immediately. The VPN participants have to know the actual IP addresses of the devices involved, and understand that NAT is happening. Proxies also need to play a role in that process since they're effectively "standing in" for your device. And they may be configured not to permit IPSec traffic at all.
What you've described sounds exactly like NAT traversal issues - the negotiation appears to go just fine, but the actual connection dies on the vine. Since the end points don't have the right data from the negotiation (actual valid addresses to build the tunnel around), the route they try to build is invalid and fails.
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Proxies + NAT +IPSec = small nightmares. This is one of the reasons SSL VPNs have gained significantly in popularity.

Try Hamachi vpn
https://secure.logmein.com/products/hamachi/vpn.asp
Surur

PerfAlbion said:
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Click to expand...
Click to collapse
You have PM

Quick update:
I've just connected my Laptop to the internet via my Kaiser using 3G.
Ran OpenVPN and it connected without a problem.
Technically this would suggest that I should be able to connect with my kaiser but theres either a problem with my config or a bug in the PPC openvpn software :S
I haven't tried on UDP yet which will be my next test....
Any ideas?

Blimey, I didn't know there was a PPC client! I'll try it to see if it works with my setup.

Well I can't even get it to talk to my server so won't be able to help !

Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.

PerfAlbion said:
Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.
Click to expand...
Click to collapse
?? When you connect a laptop via BT to the kaiser, (using internet sharing) it creates a NAT which the traffic is passed over through the 3G service. Essentially using the same service..
Unless you mean the "service" between the windows software & the PPC/WM software is different?
Plus how'd you mean fire up the card in my laptop?
Cheers for your help on this btw.

I'm assuming that the Laptop data service and the PDA data service are treated differently within the AT&T network. While the PDA passes through a proxy, I suspect the laptop does not.
When I say "fire up the laptop card," I mean establish a connection and look at your IP address (ipconfig from a command prompt will show it). It may be a different IP address range than the PDA receives (which you could see using VxIPConfig or VxUtils). Even if it's within the same range, it may be bypassing the proxy.
So while you're using essentially the same technology, I suspect the services are implemented very differently, and that's what we're trying to sort out.

I dont believe it!!!
I downloaded VM Net Brower checked what IP addresses were being assigned and connected successfully! Loaded up www.whatismyip.org and it came up with the proxy of my PC at home.
Unfortunately, my phone was running incredibly slow and thought it best to do a soft reset... afterwards no matter what I do, I can't connect. I just cant figure out why or replicate what I did
Argh.. this is getting to me now... next on the agenda is to try changing the port number from 22 to 8080 or 80 and see what happens.

At Work- Access network via ActiveSync/USB?

I read somewhere that when hooked up to the PC and activesynch, that WIFI doens't work (which seems to be the case for me) and you can/will access the internet via that method. The trick is you need to have the proxy server that your office uses entered.
I have ooked to my PC at work, and have the Proxy address in, but I still cannot get to the internet.
The one thing that I also seem to remember (can't find that post now) is that somethign about Active synch. I just tried, on the PC, to select "This computer connected to The Internet". It had been auto. didn't help.
Am I trying to do somethign that I can't? If not, any ideas you can share on what I need to set up?

You can allow your phone to use WiFi by checking the box in your ActiveSync settings.

Thanks. That wasn't really what I need to know. I need dto be more clear.
I don't have wifi at work (well I do, but after many attempts and a long thread here, I still cannot connect to it).
What I want to know is can I get to the internet through my hookup to my computer.

ewingr said:
Thanks. That wasn't really what I need to know. I need dto be more clear.
I don't have wifi at work (well I do, but after many attempts and a long thread here, I still cannot connect to it).
What I want to know is can I get to the internet through my hookup to my computer.
Click to expand...
Click to collapse
You will have to speak to your network administrator.
They could be using MAC addressing or simple password access to a proxy. Either will prevent you using the PC's internet access.
You may also find if they do allow you Internet access, any SMTP or apps that use specific ports/protocols may not work.
It's most likely just security at your work establishment!
EDIT: One way I found around it in MAC systems is to add an access point to your PC which can the copy the PC's MAC to itself and use NAT so that the network just thinks its the PC communicating (you will need another NIC in the PC). The Activesync connection does not use NAT in a correct fashion.

this should help, if you cannot view pages @ pda via AS

Accessing the proxy at work with a PC is as simple as entering the dns name in my browser setup on the PC. I an accessing it fine wiht that. IN fact they have the wireless set up so that anyone coming in visiting who is told the proxy dns name can access a 'public' wireless method. But for some reasong my Tilt will not work on either the public one or the private one which is using Peap.
I also find that at home where I know all my network setup I cannot access the Internet via hookup to the computer.
Based on all of that it must be somethign about my Tilt, or more likely, the setup.
BTW...I can access wifi at home and many other places. Just not through the USB and PC or wireless at my work place.
Pulka...I'll check out your item.
Thanks
[edit]
I just re-read Farsquidges post, and that may be something to check out at work. And I know tha tat home, my router is set up to allow specific MACS. I don't think they do that at work. but I'll see if I can get through it at home. My router will display the MACs trying to get through, and I can allow it. At least that will answer if my Tilt is even trying to get through maybe.
[edit 2]
I think I must not know how to set this up to access via the PC. I just attempted at home, and my device seemed set up for Work Network. I'll have to figure this out.

Remote Desktop Mobile

Hi guys,
I've searched LOADS of threads but to no avail.
I have installed RDM, but can't get it to connect. The PC is XP PRP, and my laptop connects ok (running Vista), but with the same settings on my MDA III, it refuses with the error:
"Cannot connect. Likely reasons are:
1. Specified computer name or ip does not exist
2. A network error occurred while establishing the connection."
I've checked all my settings, left DOMAIN blank, disabled firewall etc.
Router is a NetGear.
Thanks guys
Ratzz

Couple of questions... (excuse me if some of these come across quite basic)
Is your laptop that works within your internal network or from an external network?
To what IP address are you trying to connect to (ie. should NOT be an internal 192.168.x.x or 10.3.x.x address)?
Do you have port forwarding or a DMZ enabled on your router?
Are you assigned a static IP address from your provider?

sorry - bit more info...
how are you trying to connect - wifi? over the air?
if wifi, can you get a general data connection through the router?

fatality88 said:
Couple of questions... (excuse me if some of these come across quite basic)
Is your laptop that works within your internal network or from an external network?
Internal
To what IP address are you trying to connect to (ie. should NOT be an internal 192.168.x.x or 10.3.x.x address)?
I used my 'computer name' as I do on my laptop
Do you have port forwarding or a DMZ enabled on your router?
no
Are you assigned a static IP address from your provider?
dynamic
Click to expand...
Click to collapse
connecting through wi-fi which seems to be running ok
HTH, thanks for the response.

hmmm...
excuse me if i'm asking silly questions which you may have already tried...
is remote desktop enambled under 'system properties - remote' on the xp machine?
have you tried connecting using the IP address (192.168.whaterver) of the XP machine as opposed to the PC name?

FANTASTIC!
Worked with the i.p. address
Thanks buddy!!!!

no problemo...

I am having the same problems, but I can get a little bit further, I believe connected, but error message,
"The system could not log you on. Make sure your log on and password are correct, etc. With the little magnifing window on the lower right, then is disconnects after a bit. I use the correct password and case that I use to succesfully connect from other computers. I am stumped.
Bill

a little late I know......but when I get this error while using GPRS/3G to connect........I just initiate an internet connection using the IE button.....then with that running go to start menu and execute the remote desktop again.......and it connects fine.
a little bit of trouble but that is my work around for it.

chipsxj said:
a little late I know......but when I get this error while using GPRS/3G to connect........I just initiate an internet connection using the IE button.....then with that running go to start menu and execute the remote desktop again.......and it connects fine.
a little bit of trouble but that is my work around for it.
Click to expand...
Click to collapse
Anyone know of a fix for that, its a little annoying

There we go....use this software for remote desktop
Have fun dude !!!!!!!!!!!!!

this might be asking alot but i'm trying to connect via wifi and it won't connect.
I have all the info needed only I cant set the port forwarding on my router. It's a D-link DIR-655..
Can anyone help?

vsicarbon said:
this might be asking alot but i'm trying to connect via wifi and it won't connect.
I have all the info needed only I cant set the port forwarding on my router. It's a D-link DIR-655..
Can anyone help?
Click to expand...
Click to collapse
No port forwarding, no can do. That router has to know which IP needs that port.

VPN issues on 6.1 - Can connect but no resource access.

I am trying to establish a VPN connection to my home servers.
The device is connecting to a Microsoft RRAS server.
I have been successful in establishing a VPN connection both over PPTP and L2TP (using a pre-shared key) to my server.
I know that it is successful, because I use VxTools and check out my IP info. I am also able to ping the RRAS server and other servers on my internal network successfully. I CAN use Windows Mobile desktop over the VPN by both IP and local name (e.g. SERVER01). So I am 100% positive a VPN is established and that traffic flows over it.
The problem lies in when I actually try to do anything else within the VPN.
If I try to map a drive using either Resco or the HTC network plugin, I am unable to browse to any machines. I am also not able to type the names in directly to connect. In addition if I use PIE to access a webpage internally it tells me it can't connect.
I try by FQDN and by IP. I have set up exceptions to my internal FQDN in the network settings...nothing seems to work.
But, there is no point in having the VPN if I can't actually access any resources!
any ideas?
thanks
p.s. This has been tried on both the stock 6.1 AT&T and HTC ROMS following a clean flash.

just curious if you have found a solution. My RDP will not even connect over the VPN, i think this is bescause I have a newer version of RDP. But i can ping across the vpn just fine. from internal Machines and to them. This is annoying.
I have 300+ GB of music I want to listen to over this thing.

Remote Desktop

Hey all.
I've tried searching Google and the XDA, but I still can't seem to get my remote desktop to work.
I'm using the AT&T version (Fuze) and Windows XP Media Center Edition. I went through the steps on my PC to enable and allow RD in the system and firewall sections, and still keep getting the "Cannot connect" error message when I try and use RD on my Diamond. Any advice?
All stock ROM, progs, etc.
Thanks!

If it's anything like T-Mobile in the UK, Remote Desktop may be something blocked at the carrier.
I managed to get around it using an SSH tunnel. It's not actually as difficult as it sounds I describe what I did in this post:
http://forum.xda-developers.com/showthread.php?t=357009&page=2
Before that I'd try connecting to remote desktop through a wifi connection which you know allows RDP, just to make sure your cellular network is at fault. If it is, you could try complaining - some people on T-Mobile UK have had RDP enabled on their "standard" data contracts which aren't technically supposed to have it from what I have heard.

Hey, thanks for the tips.
I actually tried it on a WiFi connection and got the same result.
I'll try looking into your other suggestion, but aside from that, are there any other troubleshooting options? Thanks all!

See if another computer can remote into your computer. It might not be an issue with your phone.

I was able to connect using another computer in the house...they're not networked but using the same internet connection. Gonna try and have my cousin connect to my comp from his house when he gets home...but so far it doesn't seem like it's my computer...

Still need assistance.
Thanks!

try it without the router. u probably need port fordwarding.

You will also need either a static ip address from your isp or setup dynamic dns resolution (i.e dyndns.org). If you have a dynamic ip address the ip address of your router is issued by your isp every time you connect(not neccessarily a different ip every time, but it might be). As mentioned above you will aslo need to setup port forwarding on your router for port 3389 (default rdp port) to the ip address of the machine you want to remote onto.

Forgive me but...how do you set all that up?
I appreciate all the assistance thus far!

I couldnt get mine to work, so I forward port 5900 on my PC and use RealVNC (free/shareware)

Hello:
I'm also having problems getting my remote desktop to work. Been trying to connect since I picked up my Fuze on the 11th.
I have three different computers that I can successfully administer via my desktop. I've tried using 3G to connect, no success. I've tried using Wi-fi to connect, no success. I've used local computer names, IP addresses, properly forwarded ports --
It has to be a setting I'm missing on the phone. Any ideas? TIA
(and yes, I'm sorry, I know this is the Diamond forum, it's just the only thread I've found)