Related
I've been struggling with OpenVPN on my Vario III on T-Mobile and hope someone can throw me a bit of a lifeline.
I can connect to my OpenVPN (running on my WRT54GS router) via wifi but the problem is when I try over 3G. Even when I've specified the provider and ticked "exclusive", it manages to connect to my OpenVPN server but I get no further connectivity (to webpages etc).
As said, via wifi this config on my Kaiser works perfectly...
Code:
remote xxxxxx.homeip.net
port 22
dev tap
secret "\\Program files\\OpenVPN\\config\\secret.key"
proto tcp-client
resolv-retry infinite
nobind
comp-lzo
cipher AES-256-CBC
route gateway 192.168.xxx.xxx
redirect-gateway
dhcp-option DNS 192.168.xxx.xxx
but when tried via 3G it seems to have a problem with setting the routing..
Code:
Mon Oct 22 21:58:00 2007 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.
Just wondering if there is something either with the T-Mobile network or the Vario III which is specifically stopping me from using OpenVPN
Or are my settings misconfigured?
I've also attached a full copy of the log.
Thanks for any help you can give (Give generously)
CP
Sounds suspiciously like a NAT traversal or proxy issue to me. On the HSDPA network, there's a proxy in the picture. I don't believe that's the case for the Edge network. That could easily be the cause of the problem.
Surely once the connection has been established the NAT issue shouldn't be a problem?
TBH I thought the route addition problem was due to the software being unable to update the local routing table?
NAT traversal issues often manifest themselves as connections that look like they're established, then die immediately. The VPN participants have to know the actual IP addresses of the devices involved, and understand that NAT is happening. Proxies also need to play a role in that process since they're effectively "standing in" for your device. And they may be configured not to permit IPSec traffic at all.
What you've described sounds exactly like NAT traversal issues - the negotiation appears to go just fine, but the actual connection dies on the vine. Since the end points don't have the right data from the negotiation (actual valid addresses to build the tunnel around), the route they try to build is invalid and fails.
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Proxies + NAT +IPSec = small nightmares. This is one of the reasons SSL VPNs have gained significantly in popularity.
Try Hamachi vpn
https://secure.logmein.com/products/hamachi/vpn.asp
Surur
PerfAlbion said:
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Click to expand...
Click to collapse
You have PM
Quick update:
I've just connected my Laptop to the internet via my Kaiser using 3G.
Ran OpenVPN and it connected without a problem.
Technically this would suggest that I should be able to connect with my kaiser but theres either a problem with my config or a bug in the PPC openvpn software :S
I haven't tried on UDP yet which will be my next test....
Any ideas?
Blimey, I didn't know there was a PPC client! I'll try it to see if it works with my setup.
Well I can't even get it to talk to my server so won't be able to help !
Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.
PerfAlbion said:
Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.
Click to expand...
Click to collapse
?? When you connect a laptop via BT to the kaiser, (using internet sharing) it creates a NAT which the traffic is passed over through the 3G service. Essentially using the same service..
Unless you mean the "service" between the windows software & the PPC/WM software is different?
Plus how'd you mean fire up the card in my laptop?
Cheers for your help on this btw.
I'm assuming that the Laptop data service and the PDA data service are treated differently within the AT&T network. While the PDA passes through a proxy, I suspect the laptop does not.
When I say "fire up the laptop card," I mean establish a connection and look at your IP address (ipconfig from a command prompt will show it). It may be a different IP address range than the PDA receives (which you could see using VxIPConfig or VxUtils). Even if it's within the same range, it may be bypassing the proxy.
So while you're using essentially the same technology, I suspect the services are implemented very differently, and that's what we're trying to sort out.
I dont believe it!!!
I downloaded VM Net Brower checked what IP addresses were being assigned and connected successfully! Loaded up www.whatismyip.org and it came up with the proxy of my PC at home.
Unfortunately, my phone was running incredibly slow and thought it best to do a soft reset... afterwards no matter what I do, I can't connect. I just cant figure out why or replicate what I did
Argh.. this is getting to me now... next on the agenda is to try changing the port number from 22 to 8080 or 80 and see what happens.
Hi all,
I used to use my Diamond connected via USB and the 'Internet Sharing' function to provide Internet access to my laptop running Vista without any problems whatsoever...
However I have recently upgraded to Vista and don't seem to be getting anywhere... or rather getting somewhere but not far enough!
Specifically, I can connect the Diamond to the laptop via USB and run 'Internet Sharing' on the device. Having hit Connect and connected to the Internet (confirmed my running a browser on the Diamond) the laptop detects a 'Remote NDIS Internet Sharing Device' in the Device Manager. It then adds a connection in Network Connections but seemingly-fails to get any further. It looks like the DHCP requests are falling on deaf ears and without an IP address it's not going to get far beyond that...
Anyone with any ideas? Or, at the very least, could someone confirm that they have got Internet Sharing working with Windows 7, even if they didn't necessarilly have to do anything special?
Regards,
Mathew
Typical... you think you've tried everything, you've exhausted Google and posted a forum post as a last resort plea for help.... Five minutes later you sort it! Mustn't moan I suppose... and in case anyone else hits this problem here's how to sort it:
The problem was calling out to me really - DHCP. I had Layer 2 connectivity but without establishing anything at Layer 3 it simply wasn't going to work so if statically asign the IP address then I could at least rule DHCP out of the equation to see what additional hurdle, if any, had to be then tackled.
The problem was that without knowing the address at the other end (i.e. the Diamond) then I wouldn't know what subnet to put my laptop in. However, this all worked fine on Vista so I fired it up and ran Wireshark (network packet sniffer) and could see that the laptop was being given an IP address from the 192.168.0.0/24 subnet and that the other end (whether that be the Diamond or some virtual device that at least representa it) was sat on 192.168.0.1. Strangely, the other end had a MAC address of 82:00:60:0F:E8:00 and the laptop 80:00:60:0F:E8:00 - whilst they're not globally assigned this must be what Microsoft use on the local link for these types of connections.
So, back to Windows 7, I fired up Internet Sharing and connected to my ISP. I now had a LAN connection listed on the laptop under Network Connections so I forced a static address assignment by right-clicking it and selecting Properties > Internet Protocol Version 4 (TCP/IP) > Properties and assigning the following:
IP Address: 192.168.0.80 (choose anything within 192.168.0.2-254 but stay away from anything you might already have assigned to other connection e.g. wireless/wired Ethernet etc)
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.0.1
DNS Server: 192.168.0.1
Hit OK and then, being the Microsoft way, you will likely need to bruteforce the new application of the new setting by disconnecting and reconnecting the Internet Sharing connection. The LAN connection on the laptop will disappear and reappear, hopefully with a static address assigned (right-click it and select Status - DHCP should be disabled).
I still don't know why DHCP was failing but regardless I've got what I wanted - shared access to the Internet!
Cheers,
Mathew
Nice one, thanks for sharing.
I have a rooted N1 with cyanogen 5.0.4.1 on it.
I'm studying abroad this semester, and the university I'm at seems to have done everything they could to prevent me from connecting my phone to the internet on their network.
There is a wireless network, but it doesn't reach my room, and there's a proxy; I haven't been able to get any of the various proxy apps to work with it, at all. On a somewhat related note, since moving to cyanogen I'm not able to connect to that network anymore (wpa enterprise, tls/pap/user+pass). No real loss, since it didn't work as I couldn't get the proxy going.
The rooms have ethernet, with a static IP and mac filtering, and of course the same proxy. In addition, on the wired network in the rooms you have to connect to a vpn in order get anything other than the school's intranet
With cyanogen's rom, I have been able to connect my phone to my computer's ad-hoc network by giving it the parameters (IP, gateway, netmask, dns), that were provided to me, but I can't download anything. My only guess as to why that's not working is their static IP/mac filtering combo is not playing nicely.
I haven't ever delved very deeply into networking type stuff such as proxies, ssh tunnels, etc, so these two ideas of mine could be completely unworkable, but what I've been able to come up with is:
1. Is there a way to have my laptop keep handling all the proxy/ip/vpn nonsense, and just route http data to and from my phone? I've never dealt with ssh or anything of that sort, but I run linux so it should be pretty trivial to get it set up on the laptop's side of the equation.
2. Failing that, I'm allowed to have 3 devices with 3 different mac addresses, each of which is given a separate IP address, so I give the people in charge of the network the mac address for my phone and get an IP address for it. Then, connect to my laptop's ad-hoc network, which is on IP #1, and go to the advanced wifi settings on my N1 and set up a static IP with IP #2. Does that work, at all? This of course doesn't account for the vpn at all, but if it does in fact work I'd then move on to that.
What a ****ing brain-buster. Goodluck!
As an update, I can use cyanogen's included tethering ability, in conjunction with ConnectBot, to ssh from my phone to my computer (got that working after a bit of work, and learned something new). However, when I try to set up port forwarding in ConnectBot, it doesn't work; I don't know which ones to forward, whether to choose local or remote, and if I try to forward something below 1024 it gives me an error because of that. Does anybody know what ports I need to forward, and how to do that properly with ConnectBot?
Hi this is my first time on a site and I just wonder if anybody can solve my problem!
I,ve read a few posts and set my xda llI so that in connections my network card connects to work!Also have done all the rest and set it to internet just in case as well
My Isp in connections window is on the advanced tab and select networks on the network Management is set to My Isp.
my Wirles Lan Manager is status connected to network
My ssid is the one that all the house computors are set to,my mode is Infratructure and Tx is Auto.My channel is 6
my bssid is 00-18-2D etc etc.
My Mac is 00-09- etc ,etc.
My IP.169.254.168.73
signal quality is good
I,ve been onto the 192.168.0.1 website and added the mac address of the xda lli but when I try to get the internet on the xdalli to connect it justs says default page. I cannot seem to connect. is this normal or do I have to go through O2 to pay for another internet connection besides my home address one.Have I missed something out!Help would be greatly appreciated! thanks
Nilocsss
Hi,
Your IP of 169.x.x.x means that you are trying to use DHCP to get an ip address but haven't been supplied one by your router..
The ip addres of your router is 192.168.0.1, so it may be sensible to setup your router to allow a dynamic address range of 192.168.0.100 to 192.168.0.110 (say) - when anyone tries to connect using a dynamic address (using dhcp), they'll be given an address in this range.
So, initially check if DHCP is enabled.
Do you have a laptop that connects using a dynamic ip address (ie not static - ie not implicitly defined) - if so then DHCP _is_ already working and there's another problem.
If this is the case, I'd initially disable any kind of mac-filtering or security until you get a simple connection going..
Sorry, if this isn't too clear - I'm tired - what router are you using?
Kev
First hand it can depend on your router
I have had problems connecting with Virgin broadband routers for instance.
Have you tried connecting elsewhere?
Also what type of security do you have on your router?
One more thing to try
Check under the "Network Cards" settings when disconnected and select "the internet" from the drop down menu.
Hope this helps
clearing the way so that I understand correctly!
kevcal said:
Hi,
Your IP of 169.x.x.x means that you are trying to use DHCP to get an ip address but haven't been supplied one by your router..
The ip addres of your router is 192.168.0.1, so it may be sensible to setup your router to allow a dynamic address range of 192.168.0.100 to 192.168.0.110 (say) - when anyone tries to connect using a dynamic address (using dhcp), they'll be given an address in this range.
So, initially check if DHCP is enabled.
Do you have a laptop that connects using a dynamic ip address (ie not static - ie not implicitly defined) - if so then DHCP _is_ already working and there's another problem.
If this is the case, I'd initially disable any kind of mac-filtering or security until you get a simple connection going..
Sorry, if this isn't too clear - I'm tired - what router are you using?
Kev
Click to expand...
Click to collapse
Thanks Kev!
My router is a netgear dg834GT.I,ve looked at the range and the range for 192.168.0.1 actually goes from 192.168.0.2 upto 192.168.0.254 so the range should be there. how would I know if the router is DHCP, is there a way of seeing this? The filter would be set up where for the mac address?Is there a way of changing the isp on the phone so that its range is within the 192.168.0.1 range?the only security that I have is the routers own and the avg antivirus.would disabling the avg help!
thanks for your response!
voxshots said:
First hand it can depend on your router
I have had problems connecting with Virgin broadband routers for instance.
Have you tried connecting elsewhere?
Also what type of security do you have on your router?
One more thing to try
Check under the "Network Cards" settings when disconnected and select "the internet" from the drop down menu.
Hope this helps
Click to expand...
Click to collapse
thanks for replying ,my router is a netgear and the security is a wep key which I have disabled and i also tried the drop down menu "the internet" but still nothing! how would I find out on the phone what ethernet card it is running so that I can connect to that .
nilocsss said:
Thanks Kev!
My router is a netgear dg834GT.I,ve looked at the range and the range for 192.168.0.1 actually goes from 192.168.0.2 upto 192.168.0.254 so the range should be there. how would I know if the router is DHCP, is there a way of seeing this? The filter would be set up where for the mac address?Is there a way of changing the isp on the phone so that its range is within the 192.168.0.1 range?the only security that I have is the routers own and the avg antivirus.would disabling the avg help!
Click to expand...
Click to collapse
If you haven't set up mac filtering, then it won't be a problem.. if you have, then there should be an option to disable/remove any you've input - build security up from a working setup.
Have you (can you borrow) a laptop that you can setup wireless with a dynamic ip address and check that connects; if that's okay then the router is setup correctly.
So I the Alpine comes up with "connected to network" but the ip address is 169.x.x.x ..
This means that the Alpine has not been allocated a usable ip-address by the router for some reason and you'll get nowhere until this happens.
Your other PCs.. are they set to dynamic ip addresses - I guess so as you have no room for static addresses. You should probably check they're all dynamic as if (say) you've allocated a static ip address of 192.168.0.2 to one of them and then DHCP tries auto-allocating addresses, I guess there could be a conflict (don't know how clever dhcp is). Usually I would set the DHCP range to 192.168.0.100 -> 192.168.0.200 (allowing 100 different dynamic addresses).
Have you checked that authentication is set top 'Open' and Data Encryption 'Disabled' on the Alpine; and ensure you've disabled (temporarily) all router security..?
Kev
kevcal said:
If you haven't set up mac filtering, then it won't be a problem.. if you have, then there should be an option to disable/remove any you've input - build security up from a working setup.
Have you (can you borrow) a laptop that you can setup wireless with a dynamic ip address and check that connects; if that's okay then the router is setup correctly.
So I the Alpine comes up with "connected to network" but the ip address is 169.x.x.x ..
This means that the Alpine has not been allocated a usable ip-address by the router for some reason and you'll get nowhere until this happens.
Your other PCs.. are they set to dynamic ip addresses - I guess so as you have no room for static addresses. You should probably check they're all dynamic as if (say) you've allocated a static ip address of 192.168.0.2 to one of them and then DHCP tries auto-allocating addresses, I guess there could be a conflict (don't know how clever dhcp is). Usually I would set the DHCP range to 192.168.0.100 -> 192.168.0.200 (allowing 100 different dynamic addresses).
Have you checked that authentication is set top 'Open' and Data Encryption 'Disabled' on the Alpine; and ensure you've disabled (temporarily) all router security..?
Kev
Click to expand...
Click to collapse
Thanks kev for replying.
I have a hard wired lead to the router for one computor and 3 laptops connected by wifi and another computor connected by wifi.
the range or should I say the ip addresses are 192.168.0.3,192.168.0.4
upto 192.168.07.I,m at work at the moment but as soon as I get home tonight I'll set the wep key to disabled is there any other thing on the router that I need to do?
Can't think of anything else...
But at least you know DHCP is working if the other PCs are getting ip addresses okay.
And you know the wireless is working...
So it does look likely that it will be something to do with WEP/WPA encryption... (I guess you've got it setup at home), hence why the router isn't allocating you an ip-address.
If you can't get it going, it may be worthwhile doing some sceenshots of the router configuration pages (or config files)...
What I can tell you is that what you are doing looks correct and you have everything setup so you can go on the internet whilst at home using the Alpine. Mine uses the router whilst at home and GPRS whilst out.
nilocsss said:
Thanks Kev!
My router is a netgear dg834GT.I,ve looked at the range and the range for 192.168.0.1 actually goes from 192.168.0.2 upto 192.168.0.254 so the range should be there. how would I know if the router is DHCP, is there a way of seeing this? The filter would be set up where for the mac address?Is there a way of changing the isp on the phone so that its range is within the 192.168.0.1 range?the only security that I have is the routers own and the avg antivirus.would disabling the avg help!
Click to expand...
Click to collapse
The dg834GT is pretty much the one that Virgin use, like I said in my earlier post.
I have found these particular routers to be a problem (sometimes) with my Alpine.
You should try to update the firmware.
kevcal said:
Can't think of anything else...
But at least you know DHCP is working if the other PCs are getting ip addresses okay.
And you know the wireless is working...
So it does look likely that it will be something to do with WEP/WPA encryption... (I guess you've got it setup at home), hence why the router isn't allocating you an ip-address.
If you can't get it going, it may be worthwhile doing some sceenshots of the router configuration pages (or config files)...
What I can tell you is that what you are doing looks correct and you have everything setup so you can go on the internet whilst at home using the Alpine. Mine uses the router whilst at home and GPRS whilst out.
Click to expand...
Click to collapse
Well Done Kev!
It was the "open"on the phone and putting "open" on the router.I had to intiallely disable the wep key.then when I got connected,I reactivated the WEP key and I could not connect.So on the phone I unticked the automatically connect to my name of my router name and reput in my encryption key again and I was in and On line.Thanks to both of you(Kevcal and Voxshots) for helping me.Definately could not have done it without you Pair.I like the idea of using the screenshots so I,ll post a screenshot of all the settings on the phone and computor so that anybody else will be able to resolve there problems with all credits going to you people on the bottom!
Very happy to have helped and glad you sorted it out
hi
i have this application and whenever i try to set up and connect to the specified ip address it tells me socket is not connected
what does that mean and how can i fix it?
zidane said:
hi
i have this application and whenever i try to set up and connect to the specified ip address it tells me socket is not connected
what does that mean and how can i fix it?
Click to expand...
Click to collapse
Make sure that you open up the port on your computer's firewall, your router, and anything else that might have a say in your internet traffic.
I'm not going to explain it, but Google "port forwarding".
im in the campus dorms
i dont think i can do any port forwarding as i dont know how the whole lan thing is set up here
thanks
i am currently having the same problem ...i have forwarded the port 5900 on my router and opened up my firewall...could i possibly have to do something to the modem as well or could it be something else
i am on a I touch 3g slide and running windows xp home
i have also heard that port tunneling may be neccesary but i lack the knowledge to do so any help would be appreciated
its all about port forwarding because you have dynamic ip addresses on the LAN side and most likely you have a dynamic WAN ip also. Usually to do VNC you have to have a Public IP address. Home ADSL circuits provide one public ip address but out of a NAT pool so it will change. This could cause an issue unless you want to check the destinations ip address everyday. So instead of VNC to an ip address you can vnc to a host name. Dyndns provides a good service for free. So that solves the dynamic IP issue.
Now to the port issue. Since the internal LAN will assign each host a 192.xxx.xxx.xxx ip address (which are not publicly routed), you have to do port forwarding. To do this go to the command prompt (start>run>cmd) and type in "ipconfig /all" and press enter. Find the default gateway ip address (192.xxx.xxx.xxx). Type that into the web browser. That will log you into your router. I have a 2wire router provided by att so if you have different you will have to discover this on your on. Go to firewall settings and then add a new user-defined application. basically make a new application.
protocol tcp
port range 5900 (i believe that is right)
and then add it to the correct computer.
That should send all data on that port to that host.
Hope that has helped a little bit. if not, google it.
you can also try
http://forum.xda-developers.com/showthread.php?p=7004664
i figured it out and have it working fantastic. u were completely correct i just wish i could have had your advice sooner ...kinda forest gumped my way to the answer.
i do appreciate it tho and have a better understanding of the grander scale now. thanks to all on xda that give their time to help
zidane said:
im in the campus dorms
i dont think i can do any port forwarding as i dont know how the whole lan thing is set up here
thanks
Click to expand...
Click to collapse
You may want to give up with that and try out PhoneMyPC. I'm not 100% sure of how they do their tunneling, but I can tell you I've tested it a few times and it always manages to get through even if I purposely change WAN ip addresses and I don't do any port forwarding for it.
It also runs way faster (albeit lower resolution, i think) and more fluidly than either of the RDP or VNC solutions I tried out. I'm very impressed with it so far. I can even jump online with it and pull up my security camera software and actually see the live video feed from it, all running on my PC at home, even just over a 3G connection.