Develop Bugs

Optus settings/ROM for HTC Touch Diamond

Having problems getting on the internet. Does anyone have an Optus ROM or the settings required to get this phone working on the net....thanks Hugh

perthbar said:
Having problems getting on the internet. Does anyone have an Optus ROM or the settings required to get this phone working on the net....thanks Hugh
Click to expand...
Click to collapse
enable auto config... under settings connection / advanced network...
mine works without any extra settings...
but i'm sure gprs /3g settings are on optus' mobile homepage

Hi
I experienced a similar problem with my Diamond I purchased on the weekend. It was a Telstra NextG model that was supposedly unlocked and able to work on all networks.
It worked with my Optus SIM as a phone but I couldn't get any Internet connectivity.
I ended up flashing it to a cooked ROM which auto-detected the Optus SIM on first boot and configured itself automatically. Internet is now working without problem.
FYI I'm now using "Dia Druitt v05" ROM and am very happy with it. Original ROM version was 1.38.
Battery life is not great but I have just changed the radio from .06 to .bs14 and will see if that makes any difference.
Cheers
Loki

loki429 said:
Hi
I experienced a similar problem with my Diamond I purchased on the weekend. It was a Telstra NextG model that was supposedly unlocked and able to work on all networks.
It worked with my Optus SIM as a phone but I couldn't get any Internet connectivity.
I ended up flashing it to a cooked ROM which auto-detected the Optus SIM on first boot and configured itself automatically. Internet is now working without problem.
FYI I'm now using "Dia Druitt v05" ROM and am very happy with it. Original ROM version was 1.38.
Battery life is not great but I have just changed the radio from .06 to .bs14 and will see if that makes any difference.
Cheers
Loki
Click to expand...
Click to collapse
HI Loki
Can you explain how you did this by Dia Druitt v05 ROM...I have the same problem...I can call and SMS but now internet activity / MMS...dont know what to change on the phone...thanks for your help

You should be able to download the optus/vodafone rom from HTC using the Telstra Next G diamond serial without any issues.
Otherwise, here are the steps to manually input them:
For Internet:
1. Tap on the Start button.
2. Tap on Settings.
3. Tap on Connections.
4. Tap on the Connections Icon.
5. Tap on Add a new modem connection under My Work Network.
6. Enter Optus WEB in the Enter a name for the connection field.
7. Select Cellular Line (GPRS) in the drop down list of Select a modem.
8. Tap Next.
9. Enter internet in the Access point name field.
10. Tap Next.
11. Enter in the User name field or otherwise leave it blank.
12. Enter in the Password field or otherwise leave it blank.
13. Tap Advanced.
14. Select Use server-assigned IP address.
15. Tap OK.
16. Tap Finish.
for some pdas it is compulsary to set proxy for internet connetion if so in step 9 instead of "internet" put "wap.optus.net.au" and for proxy setting put "202.139.83.152" and port "8070".
For MMS:
1. Tap on the Start button.
2. Tap on Settings.
3. Tap on Connections.
4. Tap on the Connections icon.
5. Under My ISP, tap on Add a new modem connection.
6. Enter Optus MMS in the Enter a name for the connection field.
7. Select Cellular Line (GPRS, 3G) in the drop down list of Select a modem.
8. Tap on Next.
9. Enter mms in the Access point name field. Tap on Next.
10. Enter in the User name field.
11. Enter in the Password field.
12. Tap Advanced.
13. Select Use server-assigned IP address. Tap OK.
14. Tap Finish.
15. Tap OK.
16. Tap on Settings.
17. Tap on Messaging.
18. Tap on Menu which is located at the bottom right corner.
19. Tap on MMS Configuration.
20. Under Servers, tap on New.
21. Enter Optus MMS in the Server name field.
22. Enter 61.88.190.10 in the Gateway field.
23. Enter 9201 or Permanent, non-secure in the Port number field.
24. Enter http://mmsc.optus.com.au:8002 in the Server Address field.
25. Select My ISP in the Connect via drop down selection.
26. Select WAP 2.0 in the WAP Version drop down selection.
27. Tap on OK.
28. Tap on Set As Default.
29. Tap OK.
If setting above doesnt work change the port address on step 23 to "8070" then try again.
PS. I just did a search on google for "Optus MMS settings" and copied and paste those instructions.

Optus Rom Update
I've got the same problem. My Touch Diamond is from Telstra, but I'm with Optus. I can send/recieve sms, but not mms.
Can someone post up the latest rom for Optus users? I can'd download it from the HTC website as the serial number on the phone will only download the Telstra one.

Hey guys, I'm really sorry to bring this up again (after all this time) but I'm having issues getting the optus mms to work and I can't for the life of my work out why. I'd tried using all the suggested settings and it still refuses to work (the mobile internet is and has been working flawlessly for some time now).
I was just wondering if any of you guys actually managed to get the mms working or if you all just ended up flashing with a cooked rom.

[Q] 802.1x Enterprise with PEAP GTC wireless connection problem

Hi everybody.
I just bought a desire hd. i can connect every wireless connection WEP, WPA, WPA2 etc. but i can not connect 802.1x Enterprise with peap gtc network
My friend has a Galaxy Ace he can connect same with 802.1x peap gtc network. his firmware also Android 2.2
I'm configuring same as he did but still can not connect it.
I don't know what is my Desire HDs problem?
can anybody help me?

I solved my problem
t is very sad that WPA2-Enterprise is not available to be configured in the WIFI-Settings dialog. But if you know how to configure it by hand you can get it to work. I want to use my schools WPA2-Enterprise so I tried it and found out how to get it working. I will explain my taken steps below so you can as well get it to work. The trick behind is that you edit the /data/misc/wifi/wpa_supplicant.conf by hand. In that file the configuration of the wifi-networks is saved. You need to add the following lines: (in my example for the HSR-Secure network)
network={
ssid="HSR-Secure"
key_mgmt=WPA-EAP
identity="<username without 'hsr\'>"
password="<your password>"
}
For those who don’t know how to do that here some more explanation. To edit the mentioned file above your phone has to be rooted. Than you need the Android SDK installed on your computer (we will need adb.exe). You need the usb cable to connect the phone to your computer. Open a command line shell and go to your android-sdk tools folder and then do the following (thanks to Thomas Kälin for this easier version):
# Copy the config file from the phone to your computer:
adb pull /data/misc/wifi/wpa_supplicant.conf C:/MyFolder
# Now Edit your wpa_supplicant.conf with your favorite editor and load it back to your phone:
adb push C:/MyFolder/wpa_supplicant.conf /data/misc/wifi/wpa_supplicant.conf
Now go to the wifi settings in your phone. Turn wifi off and on again. It should successfully connect now. Here some pictures to show how it should look like when working.
android-hsr-secure android-hsr-secure2
I hope this helps some of you to get WPA2-Enterprise working.
Have fun surfing the internet with your phone at work/school .
Click to expand...
Click to collapse
Source: blog.pboos.ch/2009/04/android-using-wpa2-enterprise/

Yes finally got this working using the FULL WIFI App from the market. Thanks for the help I did use some suggestions.

maydin said:
I solved my problem
Source: blog.pboos.ch/2009/04/android-using-wpa2-enterprise/
Click to expand...
Click to collapse
Adding the password line worked perfectly.

Samsung Focus S - USB Tethering: Confirmed Working

Anyone get this working, the old method doesn't work. The computer found the phone and installed the modem. Does the Samsung Focus S have different connection strings?
In the diagnostic screen there are more options than the Samsung Focus:
Zune Sync
Modem, Tethered Call
Modem, USB Diag.
Zune Sync, Modem.
Modem_QC, USB Diag.

dbrandusa said:
Anyone get this working, the old method doesn't work. The computer found the phone and installed the modem. Does the Samsung Focus S have different connection strings?
In the diagnostic screen there are more options than the Samsung Focus:
Zune Sync
Modem, Tethered Call
Modem, USB Diag.
Zune Sync, Modem.
Modem_QC, USB Diag.
Click to expand...
Click to collapse
Haven't got my Focus S yet. Have you tried the WiFi hotspot hack yet?

ryotgz said:
Haven't got my Focus S yet. Have you tried the WiFi hotspot hack yet?
Click to expand...
Click to collapse
internet sharing was loaded by default on my system settings.
Turning it on will trigger AT&T to enable the Tethering Plan. When I turned it on few months back on my Focus AT&T sent me a card within a few days stating they would turn on tethering automatically unless I called to tell them no. I used the USB tethering prior for 6 months with no word from AT&T until the I turned on internet sharing.

dbrandusa said:
internet sharing was loaded by default on my system settings.
Turning it on will trigger AT&T to enable the Tethering Plan. When I turned it on few months back on my Focus AT&T sent me a card within a few days stating they would turn on tethering automatically unless I called to tell them no. I used the USB tethering prior for 6 months with no word from AT&T until the I turned on internet sharing.
Click to expand...
Click to collapse
I see. I was hoping running this would keep AT&T from turning on the tethering plan.

ryotgz said:
I see. I was hoping running this would keep AT&T from turning on the tethering plan.
Click to expand...
Click to collapse
My original Focus was Developer and Interop Unlocked.

ryotgz said:
I see. I was hoping running this would keep AT&T from turning on the tethering plan.
Click to expand...
Click to collapse
That will not prevent it at all. Without that you won't be able to turn it on, but once you do turn it on AT&T will message you saying if you continue you'll automatically be enrolled in a tehering plan.
dbrandusa said:
internet sharing was loaded by default on my system settings.
Turning it on will trigger AT&T to enable the Tethering Plan. When I turned it on few months back on my Focus AT&T sent me a card within a few days stating they would turn on tethering automatically unless I called to tell them no. I used the USB tethering prior for 6 months with no word from AT&T until the I turned on internet sharing.
Click to expand...
Click to collapse
The exact thing happened to me. I've USB tethered my phone since January no problem and a week or two after trying internet sharing I got the message from AT&T. I figured the internet sharing triggered that but in fear of loosing my unlimited data plan I haven't tethered using either method since. Have you used USB tethering since getting the message with no problem?

clfosk said:
Have you used USB tethering since getting the message with no problem?
Click to expand...
Click to collapse
Yes, few months with no issues. I called AT&T yesterday and asked if any more "tethering" triggers came through and they confirmed no. I am 100% positive the internet sharing in system settings triggers the plan if you don't pay for one.
The USB method that original worked for the Samsung Focus doesn't work on Samsung Focus S. I have tried on 3 different computers that worked previously; I can easily connect my Samsung Focus but receive dial-up error 628 or error 619 on the Focus S, the strings have be different. The main reason I upgraded was the 4G speeds which are amazing on this phone.
I have uninstalled all the drivers, deleted the modem and reinstalled with no problems. I just can not get past the error. We need to get us new Samsung Focus S owners our modem back

Got it working...
Only if you can't get modem to work (Otherwise proced to Update)
Remove modem from computer
Uninstall all previous software
Reinstall
Plug phone back in
Let automatic drivers install
If you don't have the "Diagnosis" APP installed (Otherwise Proceed to Update)
1. Bring up the dial pad on the phone
2. Dial ##634#
3. Go to your APPS list and open "Diagnosis"
4. Dial *#7284#
5. Select Modem, Tethered Call (Option 2)
Start -> Control Panel -> Network and Sharing -> click "Set up a new connection or network" -> click "Set up a dial-up connection"
Use the following dial-up settings.
Dial-up phone number: *99***1#
User name: [email protected]
Password: CINGULAR1
Connection Name: Samsung Focus S
Click "Connect"
Click "Continue setup anyways"
Update:
Start -> Control Panel -> System -> Device Manager -> Modems, right click on "SAMSUNG Mobile Modem" click "properties"
Go to "Advanced" Tab, add: AT+CGDCONT=1,"IP","wap.cingular"
with no trailing spaces.
To override your works VPN/Proxy using your phones connection:
Start -> Control Panel -> Network and Sharing Center -> Change Adapter Settings -> right click on your newly created modem "Samsung Focus S" click "properties"
Go to "Networking" Tab, click "Internet Protocol Version 4 TCP/IPv4", click "properties" -> click "advanced", uncheck [ ] Automatic Metric, set to 1 click okay. Re-dial your modem.
You can verify the proxy override works by checking your public ip address whatismyip[dot]com; it should show your assigned AT&T IP address. You can now go to websites your work Proxy has blocked. Enjoy full internet access at work!
To use sync with Zune again:
1. Go to your APPS list and open "Diagnosis"
2. Dial *#7284#
3. Select Zune Sync (Option 1)
Note:
Adding "AT+CGDCONT=1,"IP","wap.cingular" with existing modem and drivers install didn't work for me, after reinstallation of modem and drivers it connected. You might be able to skip to the "update" step to see if works for you.

dbrandusa said:
I am using Windows 7 x64
Remove modem from computer
Uninstall all previous software
Reinstall
Plug phone back in
Let automatic drivers install
If you don't have the "Diagnosis" APP installed.
1. Bring up the dial pad on the phone
2. Dial ##634#
3. Go to your APPS list and open "Diagnosis"
4. Dial *#7284#
5. Select Modem, Tethered Call (Option 2)
Start -> Control Panel -> Network and Sharing -> click "Set up a new connection or network" -> click "Set up a dial-up connection"
Use the following dial-up settings.
Dial-up phone number: *99***1#
User name: [email protected]
Password: CINGULAR1
Connection Name: Samsung Focus S
Click "Connect"
Click "Continue setup anyways"
Start -> Control Panel -> System -> Device Manager -> Modems, right click on "SAMSUNG Mobile Modem" click "properties"
Go to "Advanced" Tab, add: AT+CGDCONT=1,"IP","wap.cingular"
with no trailing spaces.
To override your works VPN/Proxy using your phones connection.
Start -> Control Panel -> Network and Sharing Center -> Change Adapter Settings -> right click on your newly created modem "Samsung Focus S" click "properties"
Go to "Networking" Tab, click "Internet Protocol Version 4 TCP/IPv4", click "properties" -> click "advanced", uncheck [ ] Automatic Metric, set to 1 click okay. Re-dial your modem.
You can verify the proxy override works by checking your public ip address whatismyip[dot]com; it should show your assigned AT&T IP address. You can now go to websites your work Proxy has blocked. Enjoy full internet access at work!
To use sync with Zune again:
1. Go to your APPS list and open "Diagnosis"
2. Dial *#7284#
3. Select Zune Sync (Option 1)
Note:
Adding "AT+CGDCONT=1,"IP","wap.cingular" with existing modem and drivers install didn't work for me, after reinstallation of modem and drivers it connected. You might be able to just skip to this step to see if works for you.
Click to expand...
Click to collapse
Awesome! I'm tethered now and I'm trusting you that this is safe!
I didn't need to delete my old modem or uninstall any drivers. I plugged my phone in and it didn't even install new drivers but this worked right away.

clfosk said:
Awesome! I'm tethered now and I'm trusting you that this is safe!
I didn't need to delete my old modem or uninstall any drivers. I plugged my phone in and it didn't even install new drivers but this worked right away.
Click to expand...
Click to collapse
I think I changed too many settings in my modem which caused me to uninstall everything. Hopefully the quick route will work for most people! I am glad you got it working! I have never had AT&T notify me this way, only using the Mango tethering option.
Hopefully we can add this to a sticky and under the Samsung Focus S section when it is up and running.

dbrandusa said:
I think I changed too many settings in my modem which caused me to uninstall everything. Hopefully the quick route will work for most people! I am glad you got it working! I have never had AT&T notify me this way, only using the Mango tethering option.
Hopefully we can add this to a sticky and under the Samsung Focus S section when it is up and running.
Click to expand...
Click to collapse
Good job. The Samsung Focus S forum needs to go up soon!

Hello is there any way to make usbthetering on Omnia7 available? wolud be very nice

Have you tried following the same steps used for the Focus / Focus S?
Alternatively, have you tried a search?
USB tethering for all gen1 devices, even things like the DVP which otherwise have very little homebrew, has been known for many months. I don't recall if you had to tweak it slightly for the Omnia7 or not, but I don't think so.

focus flash
dbrandusa said:
Only if you can't get modem to work (Otherwise proced to Update)
Remove modem from computer
Uninstall all previous software
Reinstall
Plug phone back in
Let automatic drivers install
If you don't have the "Diagnosis" APP installed (Otherwise Proceed to Update)
1. Bring up the dial pad on the phone
2. Dial ##634#
3. Go to your APPS list and open "Diagnosis"
4. Dial *#7284#
5. Select Modem, Tethered Call (Option 2)
Start -> Control Panel -> Network and Sharing -> click "Set up a new connection or network" -> click "Set up a dial-up connection"
Use the following dial-up settings.
Dial-up phone number: *99***1#
User name: [email protected]
Password: CINGULAR1
Connection Name: Samsung Focus S
Click "Connect"
Click "Continue setup anyways"
Update:
Start -> Control Panel -> System -> Device Manager -> Modems, right click on "SAMSUNG Mobile Modem" click "properties"
Go to "Advanced" Tab, add: AT+CGDCONT=1,"IP","wap.cingular"
with no trailing spaces.
To override your works VPN/Proxy using your phones connection:
Start -> Control Panel -> Network and Sharing Center -> Change Adapter Settings -> right click on your newly created modem "Samsung Focus S" click "properties"
Go to "Networking" Tab, click "Internet Protocol Version 4 TCP/IPv4", click "properties" -> click "advanced", uncheck [ ] Automatic Metric, set to 1 click okay. Re-dial your modem.
You can verify the proxy override works by checking your public ip address whatismyip[dot]com; it should show your assigned AT&T IP address. You can now go to websites your work Proxy has blocked. Enjoy full internet access at work!
To use sync with Zune again:
1. Go to your APPS list and open "Diagnosis"
2. Dial *#7284#
3. Select Zune Sync (Option 1)
Note:
Adding "AT+CGDCONT=1,"IP","wap.cingular" with existing modem and drivers install didn't work for me, after reinstallation of modem and drivers it connected. You might be able to skip to the "update" step to see if works for you.
Click to expand...
Click to collapse
worked for me, I have a focus flash!!!!!! Adding the code in the advanced properties worked and the connection was no longer refused and connected right away

Hmm, I seem to have a problem. I get the phone set to "Modem, Tethered Call" no problem, but when I plug the phone into the computer the install new hardware wizard fails with the message that it "can't find the necessary software."
Any ideas?

captobie said:
Hmm, I seem to have a problem. I get the phone set to "Modem, Tethered Call" no problem, but when I plug the phone into the computer the install new hardware wizard fails with the message that it "can't find the necessary software."
Any ideas?
Click to expand...
Click to collapse
Install these drivers here: http://mirror.batteryboss.org/SAMSUNG_USB_Driver_for_Mobile_Phones.exe

clfosk said:
Install these drivers here: http://mirror.batteryboss.org/SAMSUNG_USB_Driver_for_Mobile_Phones.exe
Click to expand...
Click to collapse
That did the trick. Using my phone as a modem right now... thanks!

Are the instructions in this forum so that I can use my 3G connection on my Samsung Focus S by my laptop that doesn't have Internet?
Or is it the other way around so that I can use my laptop's Internet connection so that my phone will be able to have Internet as well - just by connecting to the USB port?
I'm assuming it's for the former but I'd also like it if someone could point me to the latter.

It's for the former. For the latter, that's built-in; just connect the phone to the computer by USB and start the Zune software. It will create an Ethernet connection over USB for the phone to use, off of the PC's Internet connection. You could also use Internet Connection Sharing from the PC over WiFi, and connect the phone to that (it may help to use software that causes the PC's WiFi to appear as an access point; I'm not sure if the phone supports Ad-Hoc networks).

GoodDayToDie said:
It's for the former. For the latter, that's built-in; just connect the phone to the computer by USB and start the Zune software. It will create an Ethernet connection over USB for the phone to use, off of the PC's Internet connection. You could also use Internet Connection Sharing from the PC over WiFi, and connect the phone to that (it may help to use software that causes the PC's WiFi to appear as an access point; I'm not sure if the phone supports Ad-Hoc networks).
Click to expand...
Click to collapse
Awesome! I didn't know that Ethernet connection over USB was able just by having Zune and the Windows Phone. Tried it and it works great!
Would that only work with Windows Phone or any other phones/devices I use while Zune is running?

[Tips] Transfer files easily from your Windows 7 PC to your Android

Hello, i am new here, and i will begin with this post
What do you need:
Android phone (obviously)
Windows 7 PC (XP are not tested, testers welcome)
X-Plore File Manager
Home WiFi Network
Steps:
1. Download X-Plore file manager at Play Market. (i cannot post links now)
2. Go to Control Panel > Network and Sharing center > Advanced sharing settings > click all to on. (if you are unsure / have an unsecured network just do this everytime you want to transfer!)
3. Connect your phone to your wifi network
4. Open X-Plore
5. Set up the LAN (if hidden click show > show LAN)
6. Add server. (Scan is not working on me.)
7. fill in the blanks. path and domain do not need to be filled. Username is your windows username and password if you use (blank if not used).
8. fill the IP with 192.168.1.2 (you can try with 192.168.1.3 / 1.4 etc.. 1.2 usually works if you connect the PC first.)
9. click test. (if connection failure go back to step 8!)
10. now you can open your Users directory! (if you want to open the C:/ D:/.. open the settings in X-Plore and switch Show Hidden Files to on)
now you can upload and download files from or to your PC!
if there is any questions you can ask here. I will reply as soon as i can.

i do all the steps correct, i find my server, but when i try to enter in the server i get wrong username password, i enter my windows user id and i dont have any password to my account.

good advice, but i find the SGY screen too small for browsing my PC.
I prefer using Samba Filesharing (https://play.google.com/store/apps/details?id=com.funkyfresh.samba) and access my SD Card from my windows PC

wifi file transfr pro
Sent from my GT-S5360 using xda app-developers app

Just use airdroid )
Sent from my GT-S5360 using xda premium

blackjack1942 said:
Just use airdroid )
Sent from my GT-S5360 using xda premium
Click to expand...
Click to collapse
Yep. Airdroid is the best of all Ive tried!

for me this is the best,full Access and exchange data whenever I want and when tethering.:good:give it a try,its awesome.
http://forum.xda-developers.com/showthread.php?t=1752928

LoL I'm always using bluetooth D:

Airdroid is better.
With airdroid you don't need to install nothing in your computer. And it's better because you can install apps, read your messages, call to somebody and it's all in your web browser.

but with the method from my post u have full acces of all files on the device,you can install apps,full acces of system files,send sms,costomize your phone,you can make all what you want and many more and thats all in tethering mode.with airdroid it doesnt go.for me tha best.and its all in your webbrowser too.

Tested and fully working on vista
thanks

Confirmed working on Win 8.1
however my setting is different
in X-plore windows, the fields need to be filled are Server; Username; Password
[Server]
you can find the IP by opening up cmd and type "ipconfig"
look at IPv4 Address, that's what you have to type in server field
[Username]
this field, type your windows ID (the ID you use with windows store)
[Password]
the password of your windows ID
Hope it helps for Win 8.1 user

revomalik said:
Confirmed working on Win 8.1
however my setting is different
in X-plore windows, the fields need to be filled are Server; Username; Password
[Server]
you can find the IP by opening up cmd and type "ipconfig"
look at IPv4 Address, that's what you have to type in server field
[Username]
this field, type your windows ID (the ID you use with windows store)
[Password]
the password of your windows ID
Hope it helps for Win 8.1 user
Click to expand...
Click to collapse
Thank you for the ipconfig info; I couldn't get it to work because I didn't know what the server address was. X-plore should include this information in their wiki page.

I constantly get 0xC00000BB error from X-Plore eventhough i properly configured my Windows 7 to be logged in.
Is there anyone having problems related to X-Plore's LAN feature that is not working properly?

kimiraikkonen85 said:
I constantly get 0xC00000BB error from X-Plore eventhough i properly configured my Windows 7 to be logged in.
Is there anyone having problems related to X-Plore's LAN feature that is not working properly?
Click to expand...
Click to collapse
I was using X-plore on my Xiaomi mi Box 4s without any issues but after reset my router X-plore doesn't find my pc on Lan network....
I didn't find a solution yet....

The problem about VPN(IKEv2) with Win10 Mobile

L2TP work as well.
IKEv2 not route , and can not get the vaild IP address.
Can anyone solve this problem?

0oVicero0 said:
L2TP work as well.
IKEv2 not route , and can not get the vaild IP address.
Can anyone solve this problem?
Click to expand...
Click to collapse
are you on Redstone build ?
seems VPN broken on Redstone , not only IKEV2

It's working fine for me. IKEv2 IPsec, Strongswan server.
Requires editing the connections file on the phone, though. Windows 10 mobile (same for PC) will not use the default route provided by the VPN server and there is no toggle to send all the traffic through the VPN like there was on Windows Phone 8/8.1 in the VPN connection settings GUI.
So, 'IpPrioritizeRemote=1' has to be set manually for the connection in rasphone.pbk on the phone. This can be achieved and requires an NTFS formatted SD card with the modified rasphone.pbk and a symbolic link to 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections' (you can make this symbolic link on the PC).
First you have to create a VPN connection on the phone, then delete it. This will make 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections\Pbk\' user writable and you can put a modified rasphone.pbk file in that location by accessing it through the symbolic link on the SD card.
If you don't know how to make the rasphone.pbk file, first configure the connection as it should be on the phone, then copy rasphone.pbk from the phone, edit it on PC and add 'IpPrioritizeRemote=1'. Delete the VPN connection from the phone, and put the modified rasphone file in its place.
Reboot might be required after copying the file manually.
^ This is for phones that can't be interop unlocked like my Lumia 950XL. It's much easier for other phones which can be unlocked and full FS access is achievable.
Pretty stupid omission on Microsoft's part. I've been shouting about it on windows feedback since Windows 10 Mobile was released to insiders, but no one listens.

VPN is broken in Windows 10. Period! Microsoft it's not going to fix it.

w.bogdan said:
VPN is broken in Windows 10. Period! Microsoft it's not going to fix it.
Click to expand...
Click to collapse
No period. It's broken, but it can be made to work. Who put you in charge of dropping the period?

DLS123 said:
No period. It's broken, but it can be made to work. Who put you in charge of dropping the period?
Click to expand...
Click to collapse
Search for "Windows 10 DNS resolution" or other VPN related issues in Windows 10. It's not a bug, it's a feature ... for NSA, the government of China and so on.

w.bogdan said:
Search for "Windows 10 DNS resolution" or other VPN related issues in Windows 10. It's not a bug, it's a feature ... for NSA, the government of China and so on.
Click to expand...
Click to collapse
I know about it and took measures against it. They call it Smart multi-homed name resolution. It can be disabled on Desktop and also the order of DNS servers used can be set for each VPN connection. This isn't really caused by the broken built-in VPN client, but the way Windows 10 itself works out of the box.

DLS123 said:
I know about it and took measures against it. They call it Smart multi-homed name resolution. It can be disabled on Desktop and also the order of DNS servers used can be set for each VPN connection. This isn't really caused by the broken built-in VPN client, but the way Windows 10 itself works out of the box.
Click to expand...
Click to collapse
It's not just desktop. On W10M, DNS leaks, VPN connected icon is barely visible and you don't get notified if the VPN connection drops. Is hard to believe Satya Nadella is so dumb not to notice.

w.bogdan said:
It's not just desktop. On W10M, DNS leaks, VPN connected icon is barely visible and you don't get notified if the VPN connection drops. Is hard to believe Satya Nadella is so dumb not to notice.
Click to expand...
Click to collapse
I know there are DNS leaks on W10Mobile and multi-homing can't be disabled, but I don't have a problem with that. The purpose of VPN for me is to gain access to other private networks and encrypt the communication with them. DNS leaks aren't that critical. It's not like I don't want my employer to know what websites I access while connecting to VPNs from their network. I couldn't care less to be honest that they're logging my DNS querries. And I also don't live in China.
Even if they have my DNS records they still won't ever be able to break the encrypted IPsec tunnels and get any glimpse of what's passing through them.

Wasn't able to download rasphone.pbk from the phone but could upload one.
I used my Windows 10 PC and created the connections there. Then I disabled IpPrioritizeRemote and used the powershell cmdlet Add-VpnConnectionRoute to add a route to the pbk file pointing to my local subnet.
I am now able to connect to the internet and access corporate resources at the same time.
I however couldn't connect from one particular app which worked in 8.1. There may be issues with non universal apps.

DLS123 said:
It's working fine for me. IKEv2 IPsec, Strongswan server.
Requires editing the connections file on the phone, though. Windows 10 mobile (same for PC) will not use the default route provided by the VPN server and there is no toggle to send all the traffic through the VPN like there was on Windows Phone 8/8.1 in the VPN connection settings GUI.
So, 'IpPrioritizeRemote=1' has to be set manually for the connection in rasphone.pbk on the phone. This can be achieved and requires an NTFS formatted SD card with the modified rasphone.pbk and a symbolic link to 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections' (you can make this symbolic link on the PC).
First you have to create a VPN connection on the phone, then delete it. This will make 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections\Pbk\' user writable and you can put a modified rasphone.pbk file in that location by accessing it through the symbolic link on the SD card.
If you don't know how to make the rasphone.pbk file, first configure the connection as it should be on the phone, then copy rasphone.pbk from the phone, edit it on PC and add 'IpPrioritizeRemote=1'. Delete the VPN connection from the phone, and put the modified rasphone file in its place.
Reboot might be required after copying the file manually.
^ This is for phones that can't be interop unlocked like my Lumia 950XL. It's much easier for other phones which can be unlocked and full FS access is achievable.
Pretty stupid omission on Microsoft's part. I've been shouting about it on windows feedback since Windows 10 Mobile was released to insiders, but no one listens.
Click to expand...
Click to collapse
Thanks!!! It's working fine!
I think Microsoft do not want to fix it.

0oVicero0 said:
I think Microsoft do not want to fix it.
Click to expand...
Click to collapse
Yeah, looks like that's the case. There is very little feedback in insider hub about VPN problems. Very few care about these issues so probably MS has no incentive to fix and prefer to rely on MDM for VPN configuration on these devices. Now if only that were an option for mere mortals...

How to import self-signed key or export builtin cert for a strongswan server?
DLS123 said:
It's working fine for me. IKEv2 IPsec, Strongswan server.
Click to expand...
Click to collapse
How did you get the VPN connection set up properly (aside from the IpPrioritizeRemote setting)?
I've set up a strongswan server and generated my own self-signed keys using ipsec pki, but when I import the key to my Lumia 1520 (by tapping it using the Files app and tapping import at the prompt), the VPN connection will not send that cert. Instead it sends a certificate issued by CN=Microsoft Genuine Windows Phone CA15" with an OU that looks like a GUID.
So I tried punting and just exporting that certificate to place on my strongswan server ... but I can't figure out how to get the certificate off the phone either. So how do I do either one?

rlively said:
How did you get the VPN connection set up properly (aside from the IpPrioritizeRemote setting)?
I've set up a strongswan server and generated my own self-signed keys using ipsec pki, but when I import the key to my Lumia 1520 (by tapping it using the Files app and tapping import at the prompt), the VPN connection will not send that cert. Instead it sends a certificate issued by CN=Microsoft Genuine Windows Phone CA15" with an OU that looks like a GUID.
So I tried punting and just exporting that certificate to place on my strongswan server ... but I can't figure out how to get the certificate off the phone either. So how do I do either one?
Click to expand...
Click to collapse
I don't know what self generated certificate your phone sends, but you shouldn't use that.
You should generate a client certificate on the strongswan server then you should include both the root CA and the client certificate and pack them together in a PKCS 12 file (.p12) which you open on the phone and import. The phone will choose the proper certificate stores to import to. Did you do that?
https://www.zeitgeist.se/2013/11/22/strongswan-howto-create-your-own-vpn/
Just follow this tutorial., with the only mention that you should add "--flag clientAuth" to the command line for generating the client certificate.

DLS123 said:
I don't know what self generated certificate your phone sends, but you shouldn't use that.
You should generate a client certificate on the strongswan server then you should include both the root CA and the client certificate and pack them together in a PKCS 12 file (.p12) which you open on the phone and import. The phone will choose the proper certificate stores to import to. Did you do that?
Just follow this tutorial., with the only mention that you should add "--flag clientAuth" to the command line for generating the client certificate.
Click to expand...
Click to collapse
Thanks, that is a good tutorial - I definitely did not use the clientAuth flag (the ipsec tutorial for openWRT didn't include it: openwrt doc/howto/vpn.ipsec.roadwarrior), so I tried generating new certs with clientAuth. Unfortunately I got the same results. My Win10 phone sent the same "Microsoft Genuine Windows Phone CA15" cert.
Did you import the PKCS 12 file just by tapping it in the Microsoft "Files" app on the phone or did you use another method? I'm verifying the certs with the Microsoft "Certificates" app, which does show that the original cert I generated has no "Enhanced usages" but the second has "Client Authentication." Still the builtin VPN client won't pick it to send to my strongSwan server.
I did away completely with my configuration and started over with the win7 configuration here: strongswan wiki: Win7CertReq but none of it will help if I can't get my phone to actually send the correct certificate ... this configuration did something a little different though:
My phone sent the correct certificate in the "received TLS peer certificate" line followed by these error messages:
no trusted certificate found for 'my-CN-here' to verify TLS peer
sending fatal TLS alert 'certificate unknown'
Despite the fact that I have the certificate pem in /etc/ipsec.d/certs ...
in any case it continues on and sends the Microsoft cert afterwards and then the server throws "no peer config found" (since I don't have the public cert loaded for that MS cert).
Followed up on the error here: strongswan wiki /issues/785
I also tried it with "eap_identity=%identity" instead of "eap_identity=%any".
Frustrating that it works great for Win7 but I just can't get a Win10 phone working. Any guides out there specifically for Windows phone + Strongswan?

rlively said:
Thanks, that is a good tutorial - I definitely did not use the clientAuth flag (the ipsec tutorial for openWRT didn't include it: openwrt doc/howto/vpn.ipsec.roadwarrior), so I tried generating new certs with clientAuth. Unfortunately I got the same results. My Win10 phone sent the same "Microsoft Genuine Windows Phone CA15" cert.
Did you import the PKCS 12 file just by tapping it in the Microsoft "Files" app on the phone or did you use another method? I'm verifying the certs with the Microsoft "Certificates" app, which does show that the original cert I generated has no "Enhanced usages" but the second has "Client Authentication." Still the builtin VPN client won't pick it to send to my strongSwan server.
I did away completely with my configuration and started over with the win7 configuration here: strongswan wiki: Win7CertReq but none of it will help if I can't get my phone to actually send the correct certificate ... this configuration did something a little different though:
My phone sent the correct certificate in the "received TLS peer certificate" line followed by these error messages:
no trusted certificate found for 'my-CN-here' to verify TLS peer
sending fatal TLS alert 'certificate unknown'
Despite the fact that I have the certificate pem in /etc/ipsec.d/certs ...
in any case it continues on and sends the Microsoft cert afterwards and then the server throws "no peer config found" (since I don't have the public cert loaded for that MS cert).
Followed up on the error here: strongswan wiki /issues/785
I also tried it with "eap_identity=%identity" instead of "eap_identity=%any".
Frustrating that it works great for Win7 but I just can't get a Win10 phone working. Any guides out there specifically for Windows phone + Strongswan?
Click to expand...
Click to collapse
I import the certificates from file explorer on phone or from the OneDrive app, doesn't matter.
Have you actually set the EAP identity correctly in the client certificate? CN has to be exactly the same as --san
That's the eap_identity which has to be known if you use EAP-TLS.
I don't know what else to say, maybe post your ipsec.conf with censored IPs

DLS123 said:
I import the certificates from file explorer on phone or from the OneDrive app, doesn't matter.
Have you actually set the EAP identity correctly in the client certificate? CN has to be exactly the same as --san
That's the eap_identity which has to be known if you use EAP-TLS.
I don't know what else to say, maybe post your ipsec.conf with censored IPs
Click to expand...
Click to collapse
For the moment I just have mschap authentication with no certificate and it works. The certificate is just giving me fits.
On my client certificate my CN is not the same as the san. My san is set to the FQDN of my VPN server ... the CN of my client certificate is an identifier for my client.
What does the VPN server use for eap_identity - the CN from the client certificate when set to eap_identity=%identity ?
---------- Post added at 10:01 PM ---------- Previous post was at 09:35 PM ----------
rlively said:
For the moment I just have mschap authentication with no certificate and it works. The certificate is just giving me fits.
On my client certificate my CN is not the same as the san. My san is set to the FQDN of my VPN server ... the CN of my client certificate is an identifier for my client.
What does the VPN server use for eap_identity - the CN from the client certificate when set to eap_identity=%identity ?
Click to expand...
Click to collapse
My server certificate does have a CN and san that match. I thought I read somewhere that having that same value in the client san would help the client match up the cert to send to the server, at least for Windows Phone. Of course I can't find that guide now, so maybe I misread. I do see that in the example on https://www.zeitgeist.se/2013/11/22/strongswan-howto-create-your-own-vpn/ that the server CN and san match and the client CN and san match each other.

In the client certificate you should have [email protected]_FQDN --san server_FQDN --flag clientAuth
the eap_identity used by strongswan is the part before @ from CN.
It won't match anything when using eap_idenity=%identity if you don't do it like this.

Are there any relevant registry files we can access with interop tools?

DLS123 said:
It's working fine for me. IKEv2 IPsec, Strongswan server.
Requires editing the connections file on the phone, though. Windows 10 mobile (same for PC) will not use the default route provided by the VPN server and there is no toggle to send all the traffic through the VPN like there was on Windows Phone 8/8.1 in the VPN connection settings GUI.
So, 'IpPrioritizeRemote=1' has to be set manually for the connection in rasphone.pbk on the phone. This can be achieved and requires an NTFS formatted SD card with the modified rasphone.pbk and a symbolic link to 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections' (you can make this symbolic link on the PC).
First you have to create a VPN connection on the phone, then delete it. This will make 'C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections\Pbk\' user writable and you can put a modified rasphone.pbk file in that location by accessing it through the symbolic link on the SD card.
If you don't know how to make the rasphone.pbk file, first configure the connection as it should be on the phone, then copy rasphone.pbk from the phone, edit it on PC and add 'IpPrioritizeRemote=1'. Delete the VPN connection from the phone, and put the modified rasphone file in its place.
Reboot might be required after copying the file manually.
^ This is for phones that can't be interop unlocked like my Lumia 950XL. It's much easier for other phones which can be unlocked and full FS access is achievable.
Pretty stupid omission on Microsoft's part. I've been shouting about it on windows feedback since Windows 10 Mobile was released to insiders, but no one listens.
Click to expand...
Click to collapse
Hi I tried your manual, unfortunately without any success
If I Read it correctly you do the following steps:
1) Format sd card on NTFS
2) On the sd card create symbolic link to: C:\Data\USERS\DefApps\APPDATA\ROAMING\MICROSOFT\Network\Connections
3) Insert sd in phone
4) Create a vpn connection on the phone
5) Delete al the vpn connections on the phone
6) Use the phone to put a new (modified) rasphone.pbk file on the sd card (though onedrive??). I cant access my sd om my pc when usb is connected
7) Reboot the phone
8) Make a new vpn connection (can it have a different name?)
Can someone verify if i miss something?
I'll be very happy if this works