Database Develop

Running OpenVPN on the Kaiser (3G)

I've been struggling with OpenVPN on my Vario III on T-Mobile and hope someone can throw me a bit of a lifeline.
I can connect to my OpenVPN (running on my WRT54GS router) via wifi but the problem is when I try over 3G. Even when I've specified the provider and ticked "exclusive", it manages to connect to my OpenVPN server but I get no further connectivity (to webpages etc).
As said, via wifi this config on my Kaiser works perfectly...
Code:
remote xxxxxx.homeip.net
port 22
dev tap
secret "\\Program files\\OpenVPN\\config\\secret.key"
proto tcp-client
resolv-retry infinite
nobind
comp-lzo
cipher AES-256-CBC
route gateway 192.168.xxx.xxx
redirect-gateway
dhcp-option DNS 192.168.xxx.xxx
but when tried via 3G it seems to have a problem with setting the routing..
Code:
Mon Oct 22 21:58:00 2007 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.
Just wondering if there is something either with the T-Mobile network or the Vario III which is specifically stopping me from using OpenVPN
Or are my settings misconfigured?
I've also attached a full copy of the log.
Thanks for any help you can give (Give generously)
CP

Sounds suspiciously like a NAT traversal or proxy issue to me. On the HSDPA network, there's a proxy in the picture. I don't believe that's the case for the Edge network. That could easily be the cause of the problem.

Surely once the connection has been established the NAT issue shouldn't be a problem?
TBH I thought the route addition problem was due to the software being unable to update the local routing table?

NAT traversal issues often manifest themselves as connections that look like they're established, then die immediately. The VPN participants have to know the actual IP addresses of the devices involved, and understand that NAT is happening. Proxies also need to play a role in that process since they're effectively "standing in" for your device. And they may be configured not to permit IPSec traffic at all.
What you've described sounds exactly like NAT traversal issues - the negotiation appears to go just fine, but the actual connection dies on the vine. Since the end points don't have the right data from the negotiation (actual valid addresses to build the tunnel around), the route they try to build is invalid and fails.
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Proxies + NAT +IPSec = small nightmares. This is one of the reasons SSL VPNs have gained significantly in popularity.

Try Hamachi vpn
https://secure.logmein.com/products/hamachi/vpn.asp
Surur

PerfAlbion said:
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Click to expand...
Click to collapse
You have PM

Quick update:
I've just connected my Laptop to the internet via my Kaiser using 3G.
Ran OpenVPN and it connected without a problem.
Technically this would suggest that I should be able to connect with my kaiser but theres either a problem with my config or a bug in the PPC openvpn software :S
I haven't tried on UDP yet which will be my next test....
Any ideas?

Blimey, I didn't know there was a PPC client! I'll try it to see if it works with my setup.

Well I can't even get it to talk to my server so won't be able to help !

Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.

PerfAlbion said:
Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.
Click to expand...
Click to collapse
?? When you connect a laptop via BT to the kaiser, (using internet sharing) it creates a NAT which the traffic is passed over through the 3G service. Essentially using the same service..
Unless you mean the "service" between the windows software & the PPC/WM software is different?
Plus how'd you mean fire up the card in my laptop?
Cheers for your help on this btw.

I'm assuming that the Laptop data service and the PDA data service are treated differently within the AT&T network. While the PDA passes through a proxy, I suspect the laptop does not.
When I say "fire up the laptop card," I mean establish a connection and look at your IP address (ipconfig from a command prompt will show it). It may be a different IP address range than the PDA receives (which you could see using VxIPConfig or VxUtils). Even if it's within the same range, it may be bypassing the proxy.
So while you're using essentially the same technology, I suspect the services are implemented very differently, and that's what we're trying to sort out.

I dont believe it!!!
I downloaded VM Net Brower checked what IP addresses were being assigned and connected successfully! Loaded up www.whatismyip.org and it came up with the proxy of my PC at home.
Unfortunately, my phone was running incredibly slow and thought it best to do a soft reset... afterwards no matter what I do, I can't connect. I just cant figure out why or replicate what I did
Argh.. this is getting to me now... next on the agenda is to try changing the port number from 22 to 8080 or 80 and see what happens.

Wireless Wierdness

Help!
I have a Netgear DG834T router as provided by Sky. I have one wired and two wireless connections running into it (let's call them WD, WL1 and WL2 respectively).
On the connections page I can see all of them under "attached devices"...but now I want to connect using my Kaiser (actually an O2 XDA Stellar)
What happens...
On the Kaiser, I get an IP address (assigned by DHCP) as normal - but can't access the internet - or at least, can only access it very rarely - http://www.google.com can't be found, but http://www.bbc.co.uk can. No idea why.
On the router, under "attached devices", not only can I NOT see the Kaiser, but WL1 and WL2 also disappear. WD remains visible. The router cannot ping the IP address of the Kaiser (timed out). If I disable WiFi on the Kaiser, then WL1 and WL2 are immediately visible again. Internet connection on WL1 and WL2 works, even when they are not visible.
I HAVE connected to this network before without any problems.
What the hooting heck is going on, and how do I fix it?
Thanks!

Time to troubleshoot! What happens with this phone on another wireless network. We need to determine if it's the phone or the network. Do you have any friends with a phone like this? Can you use their phone on your network? Do you have any ROMs flashed, has this phone ever been on the network without problems?
If the phone works on another router try looking for firmware updates for the router. Those things really do need to be updated often and it could have something to do with that.

Only have access to one network :-(. Might be a couple of weeks before I can access a hotel one or something like that.
Think next door neighbour has similar phone, but different provider...will try if he'll let me!
No ROMS flashed.
It connected fine when I first had it. As far as I know, I've changed nothing since then.
2 out of 4 answered...with an option on three...I'll get back to you as soon as I've beaten up my neighbour and stolen his phone...
Joke!

There should be somewhere you can go to test that wireless. I can walk outside the building I'm in and find one.

ChumleyEX said:
There should be somewhere you can go to test that wireless. I can walk outside the building I'm in and find one.
Click to expand...
Click to collapse
You = US, me = UK. We still think the biro is a recent invention...

Neighbour's phone on my network gives the exact same problem. I've also noticed that when I click "Renew IP" on the Kaiser it doesn't work...it gives me 0.0.0.0, but will occasionally flash up the correct IP address. It's alomst as if the connection is being lost and remade every few seconds. The status ist gives me is "associated to network"...is that different to "connected"?
I've been trying to solve this on my router, but none of the settings seem to make any difference.

Same here
I get the same with the router from sky.
Kaiser says I have an IP address, 192.168.0.5, but the it doesn't show up on the attached devices on the router.
What I find that works is hit renew IP maybe twice until you get a really wierd IP address like
169.254.*.**, actually not sure if I'm picking up another network, but for some reason I don't think I am.
I can then browse the web and sync via wifi.
Really pisses me of that it says that it has an IP address but doesn't connect.

1) Make sure you dont have a proxy set up on your wifi connection on your device.
2) The 169. address is your device getting an unauthorised IP address as the router did not receive the correct encryption key from the device.
3) You can check if its an encryption thing by simply logging in to the router (192.168.0.1 in your web browser on pc) and changing the settings to turn wpa off and testing it. The routers username and password are on the card - its something like "sky" and "admin"

Yeah I agree, there is something up with that router.

Grey Area said:
Neighbour's phone on my network gives the exact same problem. I've also noticed that when I click "Renew IP" on the Kaiser it doesn't work...it gives me 0.0.0.0, but will occasionally flash up the correct IP address. It's alomst as if the connection is being lost and remade every few seconds. The status ist gives me is "associated to network"...is that different to "connected"?
I've been trying to solve this on my router, but none of the settings seem to make any difference.
Click to expand...
Click to collapse
with my router.....i have to set the wifi power mode on my kaiser to "best performance", any other setting and i get that "associated to network" ****. been this way every since the hermes and the wizard.

unwired4 said:
1) Make sure you dont have a proxy set up on your wifi connection on your device.
2) The 169. address is your device getting an unauthorised IP address as the router did not receive the correct encryption key from the device.
3) You can check if its an encryption thing by simply logging in to the router (192.168.0.1 in your web browser on pc) and changing the settings to turn wpa off and testing it. The routers username and password are on the card - its something like "sky" and "admin"
Click to expand...
Click to collapse
No, proxy set-up as the device was bought unbranded in US.
Because there are issues with this router, encryption and media streaming devices, I have only restricted the mac addresses with no encryption.
Still don't know about the 169. ip address beacuse doesn't seem to come up as am ISP.

Now then, how wierd is this?
After all these issues and kind of giving up on it as a bad job, I also noticed that out on the road, my GPRS wasn't working either - TomTom couldn't connect to the "plus" traffic service.
I get on the phone to O2 who told me that my phone hadn't been "provisioned". After one false start where they didn't seem to do anything about it, I have just (literally) had them tell me to go to the O2 Operator settings and tell it to update the "O2 UK Post Pay_GPRS" and reboot.
GPRS now works. And magically, so does my WiFi - IP address negotiated and full access to internet and my router's setup page granted. Working like a charm again.
So - seems to me it's an account setting, and nothing to do with either me poor ol' router or me nice new phone.
For completeness, I was occasionally getting the 169 IP address too, so it sounds like we have EXACTLY the same problem - suggest you get onto your service provider ASAP.

Unable to connect to detected wifi signal

hi everyone, i have some problems with the wireless function of my kaiser.
yesterday i tried scanning for wireless networks in my Uni and though I can detect wireless networks I couldn't connect to it at all.
i am not sure whether the set i bought has problems with the wireless networks.
On the Wireless Lan, somehow SSID , bssid tx and rx rates dont appear, despite clicking on change network and selecting on the correct network.
it says it is connecting then changes back to available without giving any error messages.
going back to WL, status is 'unconnected'
ip is 0.0.0.0.
When I try clicking on renew IP, nothing happens. the IP remains as 0000
under LEAP, the correct SSID and authentication type is displayed.
but when i try to enroll, enter my user id and password (Server is my ssid ?) and retrieve certificate it tells me that i am unable to do so.
How can I use it to connect to Uni network?
Is this server name the ssid ?

Is it a Cisco access point ? If it is for some reason youwon't be able to connect. I have the same problem as well

Tna said:
Is it a Cisco access point ? If it is for some reason youwon't be able to connect. I have the same problem as well
Click to expand...
Click to collapse
possible. i mean the it helpdesk runs the place like a military camp. doesnt tell us anything.
using a cisco vpn client though.
anyway i tried something by accident. i didnt bother reinstalling vpn client or the login software or attempt to connect to detected networks. simply tried connecting to the sch's intranet. somehow, it worked. though i didnt venture pass the homepage

I had the same issue
I hade exactly the same issue with the Cisco router we have here in my office.
Originally I thought it was my HTC Wizard as it would find the SSID but not log on, it would report it as unavailable.
I changed over to the TyTN II and exactly the same problem.....
However I have resovled this issue and I now connect semlessly to our metwork.
Basically I flashed my TyTN II (which was an O2 Stellar when I bought it from the UK) to the HTC shipped WM6 ROM and it connected straight away with no need to setup the wifi settings.
It may have had something to do with the fact I had to HardSPL it first and that sorted it our or just replacing the ROM.
Having only had this phone for a week I was a little nervous flashing but as long as you follow the very easy instructions it is fool proof.
I hope that helps.

I have similar problem with my Kaiser, can I ask which ROM/Radio you flashed and a possible link to the files ?
I'm on T-Mobile in the UK although the phone is an HTC Sim free handset
Rom 1.56.405.5
Radio 1.27.12.32
The phone went away for repair at HTC in the UK, it came back with a new ROM installed and since then I've not manged to get it to connect to my wireless router

Wifi problems with CM7 on Nook Color

I'm hoping somebody here can help me. I'm running cm7 on my nook color off of an sd card. For the most part, it's been great. I've been having problems recently connecting to my law school's wifi network.
I can see the network I my wifi settings -- it's listed as having 802.1x EAP authentication. I pull it up and select PEAP authentication (which is what my school says it uses) and then I enter my credentials. At this point, the Nook will connect to the network and get an IP. But that's it. No internet access. If I try to use the browser or dolphin to go to a page it'll just sort of hang there without moving.
Anyone have any ideas?

Try pinging your gateway and beyond, see if your packets are actually getting anywhere. I would think if you're getting an IP address you're okay, but who knows.
And are you sure you don't have a required proxy? There's nowhere to specify a proxy in Android, although I believe Opera it has settings for it.

So for our work Wi-Fi you have to sign in with what you already stated, but then after that I have to open up my web browser to sign in there as well.
Not sure if you have a similar situation or not.

khaytsus said:
Try pinging your gateway and beyond, see if your packets are actually getting anywhere. I would think if you're getting an IP address you're okay, but who knows.
And are you sure you don't have a required proxy? There's nowhere to specify a proxy in Android, although I believe Opera it has settings for it.
Click to expand...
Click to collapse
I don't know about cm7 but cm9 does have a menu item to specify proxy setting in the advanced menu.

Depending on the type of device providing the wireless, I've also noticed that it helps to make sure your device name doesn't have a "-" in it.
It took me quite a while troubleshooting my sisters to figure that out. In her case it was a d-link wireless that was the issue.
There was a pretty good thread on this a while back that listed a bunch of troubleshooting steps.

Not working: 802.1X / WPA2 / PEAP TTLS MSCHAPV2

Hi,
I'm trying to connect to a WiFi network that is protected with WPA2 with PEAP / TTLS.
It simply is not working. No problems connecting with my HTC Desire though.
Anybody experiencing the same bug? I already installed the required root certificates, tried various combinations of user account / password. The thing is, that the network is provided by my university (Eduroam if you are familiar with that) and it is very annoying that I have to fall back to HSDPA consuming my data quota.
Cheers,
chross

Normally with eduroam wifi there isn't wpa2 or other key. Just connect your phone to it, open your browser and you will be redirect to the website of your university and then you can log with your id.
Envoyé depuis mon XT890

Yes!! This is the exact same problem I'm having with my university wifi
http://forum.xda-developers.com/showpost.php?p=33962871&postcount=2
I'd configure the settings on my uni wifi choosing PEAP and then MSCHAPV2 and put in my log in username and password according to the instruction and as soon as press connect or save it looses the signal immediately to very low and never connects. We also have eduroam as an alternative they tried that and same problem just doesn't want to connect.
It works perfect on my htc one x. I'm beginning to believe the phone has a bug.

It does have a bug. It doesn't connect to 802.11 n!
My problem was solved by reconfiguring my AVW Fritz!Box 7270 to 802.11 b+g only and limit the phones wifi frequency to 2,4ghz only. You can find that in advanced wifi configuration.
I'm lucky i only recognized this bug in my own wifi network and not others i don't have admin rights for...

eduroam works for me with PEAP/TTLS but I guess it's 802.11g
I'm on the 40002 rom, but worked also on the 31006

After receiving the 4.0.4 update yesterday, WiFi now works flawlessly.
Cheers,
chross

Hi there,
I got the same problem with my university network in hamburg. I updated the razor to android 4.0.4 (Stock-Rom: 81.5.40002.XT890.Retail.en.EU), also the phone is rooted but still not working. Our IT advices to use WPA2 Enterprise TTLS/PAP authenthication in combination with a t-com root certificate. Every time i safe these setting the wifi signal drops as told by previous posters and the connection fails. When i enter the settingspage again, all settings are reverted to default. This also happens, while trying to connect to eduroam
any further advices?
Thanks in advance!

I have no problems connecting to eduroam at Braunschweig and other citys. Maybe you can visit the IT Desk at your university?

jagwar1 said:
I have no problems connecting to eduroam at Braunschweig and other citys. Maybe you can visit the IT Desk at your university?
Click to expand...
Click to collapse
Yep, me and and a fellow student went there and told them about the problem. But they also gave up, after trying about an hour or so. It seems to be a general problem in the used android build, at least there are a lot of post reporting this at the google code repo -> code.google. com /p/android/issues/detail?id=15631 (sorry for that but I'm to new here to post links). I'll try the provided tips like changing the wpa_suplicant file tomorrow and report the results. Seems to be strange issue, if it works for you (and probably others), because a fellow student got the same Phone and has the same issues

Thought I'd just give an update as I have the same issue
Motorola knows about it, it's been reported to them before and said it'll be fixed with the next update.

Working smooth here with WPA2-Enterprise, PEAP and MSCHAPv2. Using it every day.
But I'm not using TTLS, you might want to disable that if you don't have a valid certificate for your mobile/user.
Also important, fill out the "anonymous user" field with your username. Depending on the RADIUS configuration of your IT this might be required.
[edit]
Just checked my mobile. I don't use a Phase 2 authentication, only EAP = PEAP, no certificates.

Got it working!
After 2 hours of searching the web and playing around, I got it working now, following this guide posted on google code repo:
Razr I (XT890), retail eu, running android 4.0.4 (stock), no root
after endless hours of trying i was able to connect to my university network a couple of minutes ago with the combination of two apps.
1. WiFi Connection Manager
Enter SSID manually
Security "802.1x EAP"
EAP Method "PEAP"
Phase 2 authentication "MSCHAPV2"
Identity "your identity"
Anonymous identity "your identity"
password "your password".
2. WiFi Advanced Configuration Editor
Check Hidden SSID
Key Management: unselect IEEE8021X, select WPA_EAP
AUTH Protocols: select LEAP
Enterprise configuration: make sure Identity and Anonymous Identity are set to your identity, Enter your password
check whether the settings are saved in WIFI Advanced Configuration Editor. If not switch of stock WiFi and repeat step 2 (!!!). Now it should work.
Turn WiFi on and connect to network (Stock WiFi; don't care about settings there, phase 2 authentification is still not saved)
After switching the device off and back on it did still work. Same when leaving and returning to WiFi area.
hopefully it will keep on working. i just tested the browser and play store. didn't discover any problems so far.
Click to expand...
Click to collapse
Connection is stable, but there seem to be some problems regarding to the speed. Whatever it's usable for stuff you do regularly @university.
Hope that helps others, thanks to klemens

hey.qb said:
Hope that helps others, thanks to klemens
Click to expand...
Click to collapse
Thank you for sharing, this made me so happy!
It's those two apps which made my connection possible.
My eduroam configuration is quite different, but the apps did the trick. I fiddled with advanced wifi config editor alone for hours without any result.
Now I just hammered the config into those two apps and what can I say - proxydroid reported a connection a few seconds later.
I dont't know what Moto's Problem with 802.1X is.
Defy latest stock rom - no connection. With CM -> no problem.
Milestone 2 with stock rom - no connection. With CM -> no Problem.
Rarz I no connection with stock wifi manager . . .
My fellow students with their samsung devices seem so have no problem at all. ^^
(even Win Mobile 6 works, thats a little bit depressing)
btw, speed is fine here. 16Mbit up&down is more than I need on a phone.
Greetings from Kiel.