[Q] What VPN solution is best/guaranteed to work - EVO 4G Q&A, Help & Troubleshooting

I have 2 old PIX firewalls I can use, or I could could use OpenVPN inside WRT, or anything. I have nothing setup yet.
What's the easiest VPN for the EVO to hook to?
I'm running unrooted 2.2.

There is no PIX or OpenVPN support in Android. If you root and download "VPN Connections" you can connect to a PIX or OpenVPN server. I have connected to each. Make sure to read through the bug reports. The version I was using had a routing problem that had to be corrected in vpnc-script.

I've managed to get my evo to connect a winxp pro box set up as a pptp vpn server. but only if I disable encryption on the evo. which kind of defeats the purpose.
Basically, android VPN support is spotty at best. There is an epically long google code thread on the subject.
For the time being setting up an ssh server and using connectbot seems to the best way to securely access remote networks. It's far from perfect but it's the best solution I've seen.
Some people have reported vpn success using custom roms. But they are the exception. And setting up an ssh server is probably easier than tweaking a custom rom, IMHO.

This conversation is over my head, but Logmein Ignition owns my soul.

Thanks everyone.
I might have to root my EVO again(last one was rooted, but had to get a new EVO through warantee)

Related

Cisco VPN for EVO

Can someone tell me if they have had any success using VPNC or OPENVPN (or anything else) successfully to connect to a pure ipsec Cisco VPN with group authentication?
Also, could someone include a successful implementation in one of those amazing TIME our Devs have created?
Sent from my PC36100 using XDA App
Evo with Fresh
awwbaw3 said:
Can someone tell me if they have had any success using VPNC or OPENVPN (or anything else) successfully to connect to a pure ipsec Cisco VPN with group authentication?
Also, could someone include a successful implementation in one of those amazing TIME our Devs have created?
Sent from my PC36100 using XDA App
Evo with Fresh
Click to expand...
Click to collapse
I have not been successful but I think I am doing something wrong but here is the article
http://forum.xda-developers.com/showthread.php?t=698099
This one is on the Moment but the instructions may be similiar
http://forum.sdx-developers.com/android-2-1-development/(how-to)-run-a-cisco-vpn-client-(vpnc)-on-moment-2-1-(very-hacked-and-beta)/
Question...
this might seem dumb but I am concerning this...
I connect from remote to my company through Cisco VPN. There is a client on my notebook and I use secure ID.
Can VPN on the EVO allow me to connect with the evo and use it solely to access my company's intranet....or does this just allow vpn connection through tethering though my notebook/evo combo???? or both?
My interest is to use the evo by itself to occasionally log in and complete tasks.
vpnc works for me connecting to vpn 3015 and asa 5510 using ipsec with group authentication. I have heard if you tether while connected to vpn then your laptop will also be in the tunnel but I haven't tried that yet - I have used it for remote desktop directly from the phone.
here is what you need:
1) full root
2) busybox installed with symlinks
3) kernel version 2.6.29-a2443432
4) tun.ko from thread 698099
mostly I used the instructions from hxxp://code.google.com/p/get-a-robot-vpnc/wiki/Motorola_Droid_Support.
If you don't want to deal with installing busybox, I know for sure the fresh rom has it already setup.
copy tun.ko into /system/lib/modules
run the command insmod /system/lib/modules/tun.ko
I occasionally have issues disconnecting and/or losing connection to the internet after disconnecting - just enable/disable airplane mode has always fixed it.
there is also a log file in /data/data/org.codeandroid.vpnc_frontend/files/vpnc that may help troubleshooting connection issues.
edit: you need a farily new version of vpnc from the google code page - I think the one in the market won't work on evo.

Does anyone have VPN Connection running on 2.2

Title says it all.
All of the 2.2 roms and kernels I have tried will connect to the VPN but must screw up the routes as they shut off my data.
Does anyone have this running?
the only issue i have with "VPN Connections" is that is doesn't pass DNS traffic correctly. hence, i must connect via IP Addy not DNS name. other than that it works fine for me. i'm able to establish a vpn connection then use the WYSE rdc/vnc app to connect to my windows or linux servers ... connnectbot for shell access.
I've also been unable to connect to either a PPTP or IPSec VPN over my 3G connection since upgrading to the official release of 2.2 on my EVO 4G. The connection appears to be established just fine, and the VPN server shows that my VPN client is connected, but I cannot ping to or from the device, nor access any internal resources from it. This is a serious bummer considering that things worked fine under 2.1. Will test over WiFi when I get home. Can't test it at work since we're behind a proxy (which is another gripe I have with Android right now... seriously Google, no proxy configuration options?).
i feel i should clarify the name the application i'm using to establish a vpn tunnel is not the stock android vpn application.
it is called "VPN Connection" http://www.appbrain.com/app/org.codeandroid.vpnc_frontend
amw2320 said:
Title says it all.
All of the 2.2 roms and kernels I have tried will connect to the VPN but must screw up the routes as they shut off my data.
Does anyone have this running?
Click to expand...
Click to collapse
I have some interesting info regarding VPN behavior. With 2.1, of course, it did not work. Here's what I experienced: I rooted my 2.1 with Unrevoked (not a full root) and then I installed OMJ's (8/6?) Froyo and lo and behold, my encrypted PPTP VPN to a MS 2003 server was working perfectly. I assumed that 2.2 resolved the vpn issues. Since I thought 2.2 was a fix, I didn't hesitate to install another ROM. This time, though, I also did a NAND root and installed another 2.2 rom; whose, I don't remember. My VPN was gone. What I discovered was that I COULD connect to an unencrypted MS PPTP server, but still not my encrypted VPN server at work. So, here we are today. I'm running Vael-Pak non-sense rom and after I loaded it I had no vpn, but here's the thing...a couple of days ago I was poking around inside some of the Evo's networking files, I didn't change anything, I just opened them and looked at them with Text Editor, and since then my encrypted PPTP VPN has been working great. I'm very hesitant to reboot my phone because I fear that it won't work anymore. Right now I'm happy.
I'm trying in vain to get VPN connections working too. The only ROM that I had it working with no problems was Cyanogenmod's. All the others don't seem to have it supported in the kernel. Now I'm running a ROM based on the stock 2.2 but haven't found a fix yet.
I'm in the same boat - my pptp vpn worked fine in stock 2.1, but not in stock 2.2...
Sent from my PC36100 using Tapatalk
I can't get a pptp (haven't tried l2tp) to connect from my unrooted 2.2 evo with encryption enabled. I'm trying to connect to my server at home running winxp pro with the default winxp vpn server setup.
Works fine if you disable encryption. But what's the point if it's not encrypted, right? It works fine with encryption using a laptop or my old iphone3G. Seems to be a bug with android.
I'd like to know if someone finds a workaround.
This worked in 2.1 - froyo broke it
liamaa said:
I can't get a pptp (haven't tried l2tp) to connect from my unrooted 2.2 evo with encryption enabled. I'm trying to connect to my server at home running winxp pro with the default winxp vpn server setup.
Works fine if you disable encryption. But what's the point if it's not encrypted, right? It works fine with encryption using a laptop or my old iphone3G. Seems to be a bug with android.
I'd like to know if someone finds a workaround.
Click to expand...
Click to collapse
-mark
I am in the same boat. On CM6 VPN works flawlessly, but it is missing a lot, and kept crashing on me.
On every other ROM and kernel with tun.ko, it says it is connected but no connectivity.
AVA V6 is fast, good battery life, everything works (including hulu, and blockbuster) and very stable, but the only single thing I can't get working is Cisco VPN!!
-David
I am curious, does anyone have VPN working on any Froyo ROM besides Cyanogen?
If so what Rom/kernel are you using?
Interesting observation last night - 4g was temporarily working in sf, and my pptp vpn worked over it. I turned off 4g and retested, pptp vpn didn't work over 3g...
-mark

VPN Routing Issues - Default Gateway Strikes Back!

On the original 2.1 you could connect a VPN and still surf the internet. Now with Froyo you can't. I've searched high and low for a setting in the GUI and on the file system and can't find anything that would allow me to turn off use of the VPN connection as the default gateway. Since many Market apps, in particular my Xtralogic RDP client, often check to make sure they are registered this new VPN "feature" renders all of these apps useless to those who use them through VPN tunnels.
Does anyone know where the settings for VPN connections are stored? Are they human readable? I did find one file in /system/etc/ppp that looks like a standard debian-like interface script, if-up-vpn, but it looks to be binary. However I am using an L2TP connection and can't find anything anywhere. Worst case, is there a way i modify the routing table on the fly? I'm used to UNIX-like manageability using the usual netstat/iptables/ifconfig kind of thing, but Android is far from what I'm used to and doesn't seem to be easily manhandled. Hopefully there is someone around here who knows how to Ginsu this back to normal. Thanks in advance!
Running the Virtuous 2.3 rom with 2.15 radio.
-M

Anyone use wifi tethering with android anyconnect?

I setup the anyconnect client on my phone which works great. I can access internal web pages, ssh to internal devices. Problem is that if I launch the anyconnect client on the phone, and then wifi tether my laptop to the phone, the phone will not forward the traffic from the tethered device to the Anyconnect VPN.
FWIW, Wifi Tethering works fine without the Anyconnect.
Running Task650's 4.2.2 rom and the Anyconnect for root users on the phone.
-J
Same problem here. Any help would be appreciated!
it's probably a routing issue on the phone, but I haven't had a chance to look into it yet.
-J
bump.
bump. I will look into this. But can't post my help until I make 10 posts and get the ability to post links
Its a setting set by your administrator
The issue:
You might already know this but your network admin configured the app to prevent sharing of the connection. This is a common measure to prevent breaches in security. Looking at the Cisco AnyConnect release notes:
Cisco has qualified the AnyConnect VPN client over a bluetooth or USB tethered Apple iPhone only. Network connectivity provided by other tethered devices should be verified with the AnyConnect VPN client before deployment.
Click to expand...
Click to collapse
The WorkAround
How AnyConnect works on the android is the same as on a computer, which is documented on SuperUser.
So what we have to do is either, export the VPN profile to another VPN app, or change the variable in memory that prevents tethering of the AnyConnect VPN session.
This can be done using (while it wasn't created for this purpose) Game Gardian

PPTP VPN client on FTV

Hi, I have a ASUS router loaded with DD-WRT. I have enabled PPTP server on my router. I wish to connect to my router using this PPTP VPN natively from my FTV.
I can connect fine from my Windows 8 machine (and my IPhone), but not from FTV. I understand FTV has been stripped of VPN modules. I am able to successfully connect to my OPENVPN server on the same router from my FTV using a few google play apps like Tun.KO, OpenVPN settings and OPENVPN installer.
I am wondering if there is way to accomplish the same thing for the PPTP? I did try the VpnRoot application, but it gives me an error. Important 2 lines are:
-- Creating PPPoX socket --
-- Socket() Address family not supported by protocol
I researched this error and it seems like FTV (as we already know) is missing pppox.ko (or pppol2tp??) kernel module. Now, there are places to download the supporting files to build this module. I am not sure how to proceed on that (build and install). Or if there is a simpler way to install this on FTV? From my understanding, building modules on linux has to be targeted to the kernel version... So, I am lost and any help is appreciated.
Any luck figuring this out with PPTP?
No, I haven't looked at it furthur. I don't have a linux box, but I did free up some space on my HD to install Fedora. But, I am planning to take a crack at it soon! It would be nice if RBox can include the PPTP support in his pre-rooted ROMs... Not sure how difficult that is for him (yes, its a copout :crying
This might not address your initial question directly, but you can use a script to change iptables on the router to VPN only the IP of the AFTV:
http://serverfault.com/questions/38...-hosts-route-through-openvpn-client-on-tomato
Mind you, this is for Tomato, but DD-WRT uses scripts too. I'm using it with Tomato Shibby BUT with OpenVPN not PPTP...cannot comment on the latter.
I tried a few VPN clients on AFTV, no dice.
Thanks. There was a wiki on dd-wrt on how to selectively route VPN traffic for certain hosts. But don't have a need for it. But it is a good learning post and potentially helpful to folks trying to use VPN to access US based services and not wanting to buy an extra router just for that. Much appreciated.

Categories

Resources