Help with Security Message when trying to connect to Wfi - Google Pixel 2 XL Questions & Answers

When I try to sign into my company's Wifi, it normally takes me 1.1.1.1 page and says "The network you're trying to join has security issues."
I "Continue Anyway VIA Browser" and it takes me to a login/pw page. After I put in the credentials, I'm connected into my network.
Now, I am being directed to the Cloudfare 1.1.1.1 page. My co-worker's IOS and Samsung device has no issues. It takes them directly to the login/pw page.
Any ideas?
Thank you!

Long story short, your phone is behaving correctly. Complain to your company's IT department for using hardware (probably Cisco) that improperly uses a public IP address for internal captive portal use. This is essentially up to that hardware vendor to fix and your company's IT department to apply said fix. Here's more info from Cloudflare's Blog.

Thank you!

Related

Getting on our company's network

Warning! I'm a network novice.
I'm trying to get onto my company's wireless with my Evo. I see the network in under Wi-Fi Settings. It shows that it's remembered and secured with 802.1x EAP.
I'm presented with a 'Connect to XXXX' dialog when I tap on the network. The signal strength is Fair and the security is Enterprise(8021.x).
When I attempt to connect, nothing happens. On the advice of a colleague, I used adb to create a logcat file (which this tool won't let me include) generated while I attempted to connect.
Any help would be appreciated!!
TIA,
David
Did you ask your IT staff?
They have some type of security on their wifi.
Nope, my Evo isn't supported formally.
They could have it password protected, or MAC required etc.
How do you get your laptop on the wireless?
You are going to have an impossible time getting this on the network if they don't want it on the network.
802.1X means that you'll need either a username/password (usually your Windows login password, with the username formatted as *DOMAIN*\*USER* so if your user account was bsmith on the Domain Contoso, your login would be CONTOSO\BSMITH.
If that doesn't work, then you'll need the certificates that they use to authenticate devices onto the WiFi network. Unless you know what you're doing, or get cooperation from the IT department, you're SOL. Your best option would be to get a pocket access point/router (Like an Apple AirPort Express, etc.) and use that, and hope your IT staff isn't competent enough to notice it on the wired LAN, and if they do and you get caught, that you don't get fired.
DISCLAIMER: The above could get you fired if it is against the rules/permissions/policies of your job. I am not responsible for what happens to you for following my suggestions.
drmacinyasha said:
802.1X means that you'll need either a username/password (usually your Windows login password, with the username formatted as *DOMAIN*\*USER* so if your user account was bsmith on the Domain Contoso, your login would be CONTOSO\BSMITH.
If that doesn't work, then you'll need the certificates that they use to authenticate devices onto the WiFi network. Unless you know what you're doing, or get cooperation from the IT department, you're SOL. Your best option would be to get a pocket access point/router (Like an Apple AirPort Express, etc.) and use that, and hope your IT staff isn't competent enough to notice it on the wired LAN, and if they do and you get caught, that you don't get fired.
DISCLAIMER: The above could get you fired if it is against the rules/permissions/policies of your job. I am not responsible for what happens to you for following my suggestions.
Click to expand...
Click to collapse
I would highly disagree with putting on a rogue AP, that's very likely to get you fired, not to mention a pain in the ass for network admins.
mrono said:
I would highly disagree with putting on a rogue AP, that's very likely to get you fired, not to mention a pain in the ass for network admins.
Click to expand...
Click to collapse
Depends on how it's configured... I have a APExpress that I use at work when I need to. IT is so stupid here that they haven't noticed it. Also have it in bridge mode and with WPA2, MAC control, hidden SSID, and 802.11n 2.4Ghz-only mode helps. All that they would see when I hook something up its three new devices on the LAN.
--Sent from my EVO 4G using XDA App.
I had this same problem, and I finally figured it out. All I can say is google the answer. The trick was leaving the Anonymous Identity field blank. Yes, enter your network id and password. I was relieved when I figured it out.

[Q] Touch pro 2 and WiFi - help

Dear frinds, few days agi i went to a cafe wuith WiFi hotspot, and the waitor gave me a password, not a network key, a password. Wher should i enter a network password? I have a wifi router home protected with the key, so i know the difference. Please help.
In hotels, I have been given a password and there I would launch IE and it would show a hotel login page. That is the only thing I can think here..
daviddallas may be correct about going into IE and seeing the login page
if that doesnt help perhaps it is WPA encrypted and you should go to wifi>advanced>Authentication and choose WPA (or something else try them all if you have to) that way you could type a passoword instead of just Hex
Thx friends will try and report back.
I had a similar situation yesterday. Went to local cafe that offered free Wifi, and they provided a password. I'd been to hotels and the like with a WiFi device, so I tried to load up IE. Connection Failure. I asked the cashier, and they actually had a laminated sheet with instructions on how to set up, and on the back was a basic troubleshooting guide I had to load IE, and go to a specific page to enter the log in info, a bit confusing but it worked out in the end.
Going to IE didnt help, will try again and report. I think it is important feature of the phone that needs to to be clarified.

How to use openvpn with android

I was a bit confused about how to use OpenVPN on an Android device because there was so little information around. I thought I'd post this to make it easy for others. It turns out to be very simple. I have an Android phone (Note 2, Jellybean) rooted and Busybox installed, but neither is necessary.
The following steps relate to using an Android device with a commercial vpn service (like an anonymizing service amoung others), but they should help clarify in other situations.
Step 1: download the OpenVPN config files from your vpn provider.
Step 2: download, install and start "OpenVPN for Android by Arne Schwabe" (O4A) (get it from any android app source, it's free, but donation to the author is optional and its a great app).
Step 3: on the "VPN Profiles" page of O4A, use the folder icon upper right to browse to the .ovpn config file for a server, select, and save it on the following page. The server name will appear on the Profiles page.
Note: Sometimes the server config files include a .p12 file which O4A will want to import, then require a password to decrypt...just uncheck that file (upper left) before saving; later O4A will ask for a password, just leave it blank and hit "OK", it will connect just fine (at least with my vpn provider).
Step 4: open the settings for the server you just imported (icon to the right of the server name), navigate to the "Basic" page, and enter your username and password at the bottom of the page (if your provider uses the u/p type connection). YOU ARE DONE (but, you will need to repeat this for each server you want to use).
Step 5: tap on the server name on the "Profiles" page, O4A will open the log file and you will see it going through the steps of the connection process in both the log and the notification bar . When it's finished successfully, you'll see "connected". You can check the connection in the log file. Also depending on your device the connection will show in the notification bar for as long as its connected. You can disconnect by tapping the notification.
The correct configuration settings for OpenVPN are usually included in the .ovpn file, so you likely won't need to change any config setting in O4A. However, you can add the line "auth-nocache" to the .ovpn file manually or add it on the O4A page "Advanced -> Custom Options". This will prevent the username/password from being cached if that's important to you.
NOTE: Using dnsleaktest.com I have noticed that google dsn servers appear sometimes as a dns server. This might represent a dns leak as there would seem to be no reason, for example, for a European located server to use a U.S. located google dns server. I'm not clear about why the google servers are showing up, maybe someone can verify/clarify.
However, you can force a dns server of your choosing by going to the "IP and DNS" page of the server config settings in O4A, and select "Override DNS Setting by Server". You can then use the default dns servers chosen by the author or enter your own.
Enjoy!
What is your choice server? I see free and fee ones, but wondering about true encryption security too.
I'm just now looking into this, and am curious at what point vpn should be considered or if it's overkill for me.
Sent from my SGH-T889 using xda app-developers app
lyinelriche said:
What is your choice server? I see free and fee ones, but wondering about true encryption security too.
I'm just now looking into this, and am curious at what point vpn should be considered or if it's overkill for me.
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
IMHO, anyone who cares about their privacy should use a vpn. It does give you privacy on the web. Otherwise all your net activity, email, messaging, etc.are recorded by your ISP as well as snooped by various international TLAs (three letter organizations i.e. FBI, NSA, CIA, GRU, etc) and commercial entities seeking to monetize your information.
There are many vpn services around, some good, some very bad. After doing some research, I've been using Perfect-Privacy.com for a few years. Some of the things I like about them are: you can sign up and pay anonymously, They have over 40 servers in some 20 countries. You can switch between servers from your machine in seconds. You can chain 2 or more servers for even stronger privacy (though you probably don't need that). They have free port forwarding (needed for some p2p progs). They do not log anything anytime. They donate part of their server bandwidth to the TOR project. Their servers are fast (I can dl at my ISP's cap speed (@12 mb/s) but PP's bandwidth is much higher if you can use it). There's no limit on your traffic. Their up time is very good...occasionally a server goes down, but they get it fixed timely and with 40 servers to choose from its not a problem. Their staff is friendly and responsive (though you should plan on following instructions for setup...pretty easy). They use OpenVpn with AES-256 bit encryption which is currently unbreakable (PPTP and L2TP are hackable) (they also provide access via SSH2, Socks 5, Squid, PPTP and L2TP). My take is that they are very committed to privacy; Overall I think the quality of their service is excellent. All that said, they are a bit more expensive than some vpns, but worth it IMO. You can sign up for one month to try it out, then apply that to a cheaper longer time if you like it.
BTW, you could use TOR (The Onion Router) to check out using a vpn. Its a great project, open-source and free! Its a bit slow because it chains through three servers and all the nodes/bandwidth are donated. But it works well and is a great great service to those who understand that privacy is important. Be aware that the TOR admins ask people not to use it for p2p because that lags down the system.
Hope that helps. Good luck
I am not going to pretend that I understand everything you wrote, but I think I know what you mean by P2P, and that is exactly the reason why I'm considering Vpn in the first place. That being said, I really appreciate you letting me pick your brain about it.
Sent from my SGH-T889 using xda app-developers app
lyinelriche said:
I am not going to pretend that I understand everything you wrote, but I think I know what you mean by P2P, and that is exactly the reason why I'm considering Vpn in the first place. That being said, I really appreciate you letting me pick your brain about it.
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
Glad to help. BTW TOR has a free web browser package with the TOR function already built in. Just download it, install and you're up and ready to browse anonymously. Easier than that it doesn't get Search for TOR, you'll find it.

Samsung Hub & Watch On not working in US

When I try to open Samsung Hub it crashes while trying to open and gives me an error message saying that 'this service is not supported in this country'. Samsung Watch On crashes and says that it 'can't detect country, please try again later'. I've tried resetting after force stopping and clearing all app data as instructed by Samsung's "help". It would be odd if this service actually wasn't available in this country especially as they offer that $50 credit for purchasing tablet. I'm wondering if this is an issue that everyone is experiencing or if it's just me.
haterbait said:
When I try to open Samsung Hub it crashes while trying to open and gives me an error message saying that 'this service is not supported in this country'. Samsung Watch On crashes and says that it 'can't detect country, please try again later'. I've tried resetting after force stopping and clearing all app data as instructed by Samsung's "help". It would be odd if this service actually wasn't available in this country especially as they offer that $50 credit for purchasing tablet. I'm wondering if this is an issue that everyone is experiencing or if it's just me.
Click to expand...
Click to collapse
That's weird, they're both working fine for me on my US Note 2014. I have seen a couple of other people report that issue too though, I'm not sure why it's doing it, but most people aren't having those issues.
I would guess that for some reason the tablet doesn't think it is in the US. One place I would start is a close examination of your router and wifi. Do a traceroute and see if you can find any evidence of an IP address outside the US.
jalanjkcarp said:
I would guess that for some reason the tablet doesn't think it is in the US. One place I would start is a close examination of your router and wifi. Do a traceroute and see if you can find any evidence of an IP address outside the US.
Click to expand...
Click to collapse
So, I tried a traceroute, something I've never done before, and it shows my connection jump all around the world practically. If this was the reason for the apps to fail to recognize my country, what, if anything, could I do to fix it? Thanks for the help.
haterbait said:
So, I tried a traceroute, something I've never done before, and it shows my connection jump all around the world practically. If this was the reason for the apps to fail to recognize my country, what, if anything, could I do to fix it? Thanks for the help.
Click to expand...
Click to collapse
Can you post some traceroutes? Do sites like Yahoo, Google and Comcast.
Also can you get into your router configuration settings and see what time zone the router is set to?
californiarailroader said:
Can you post some traceroutes? Do sites like Yahoo, Google and Comcast.
Click to expand...
Click to collapse
You might have to baby step with me a bit here. Previously, I just went to a traceroute website and typed google.com into their search box. It gave me a list of IP locations and showed a map with a physical route on it. It appeared to jump all over the place, between the US, where I am, and somewhere in Europe. Just now, I did it again and the route seemed to stay within the US. It should be the same info I get regardless of which device I use to perform this, right?
jalanjkcarp said:
Also can you get into your router configuration settings and see what time zone the router is set to?
Click to expand...
Click to collapse
The time zone was wrong, but after changing it to the correct time zone, the issue persisted. Is there another setting I need to change? Thanks to the both of you. Samsung hasn't been especially helpful here. They had me clear the app data, confirm the time zone on the tablet, and even a factory reset. Didn't help. I still need to try connecting using another Internet connection than my own, once I get some more free time!

[Q] School WiFi issues

Hi, first of all, I have no idea where I am supposed to post this.
Anyway, I have a Nexus 7 FHD, and have been using it at school. My school has its own wifi, and I used to be able to connect to it perfectly fine, as I knew the password. It doesn't have any of that wifi login stuff. Recently, however, I think I've been blocked or something from it. I go to WiFi settings, and then my N7 sees the network. I know I have the correct password as my phone (d2vzw) can still connect to it. I click on it to connect, and then the network says connecting... but then after a while it goes back to the Saved, Secured with ... etc. This has been bothering me a lot, as I often need to research topics at school. I've tried spoofing my MAC address, but I don't think it works. If somebody could please help me solve this issue, it would be greatly appreciated!
P.S.- My friend also had this issue, and he's more tech savvy than I am. He was also blocked on his N7 (first gen) and tried changing his device name and mac, but I'm not sure either of us actually spoofed our mac addresses. The first time, both of us were blocked. Then, the wifi crashed, and we both regained access. Now, only I'm blocked, and then only reason I can think of for actually being blocked is attempting to start up orbot... which incidentally failed. Please help! Thanks!
The proper course of action would be to contact your network's admin and request that you be unblocked and take the lumps that come with the actions that caused you to be blocked. Trust me when I say that most system and network admins look very negatively on attempts to get around the security. (you'll only be digging your hole deeper)
Not all admins are the same but I base my opinion on my experiences as a network admin on a .mil network for 7 years YMMV but I know the mentality intimately.
You could use Bluetooth tethering to share the phones WIFI connection with the N7. Use the phone for the WIFI connection and then enable Bluetooth tethering. (If you don't know how, google 'android bluetooth tethering'.)
BTW, the DHCP requests on the WIFI to get your IP address contain a hostname besides the MAC address. You can change that using an adb shell or root terminal and running:
setprop net.hostname HOST_NAME_YOU_WANT
oldsoldier2003 said:
The proper course of action would be to contact your network's admin and request that you be unblocked and take the lumps that come with the actions that caused you to be blocked. Trust me when I say that most system and network admins look very negatively on attempts to get around the security. (you'll only be digging your hole deeper)
Not all admins are the same but I base my opinion on my experiences as a network admin on a .mil network for 7 years YMMV but I know the mentality intimately.
Click to expand...
Click to collapse
Thanks for the advice! But the thing is, I don't think students are supposed to be on the WiFi anyway lol. Someone found out the password, and now I guess close to 97% of the student body uses the WiFi. The teachers definitely know, but they haven't taken any action, so who knows. Anyway, I don't know who the admin is or have any clue how to contact him... soooo I'm out of luck haha.
tni.andro said:
You could use Bluetooth tethering to share the phones WIFI connection with the N7. Use the phone for the WIFI connection and then enable Bluetooth tethering. (If you don't know how, google 'android bluetooth tethering'.)
BTW, the DHCP requests on the WIFI to get your IP address contain a hostname besides the MAC address. You can change that using an adb shell or root terminal and running:
setprop net.hostname HOST_NAME_YOU_WANT
Click to expand...
Click to collapse
Hm, this sounds pretty interesting. Could you explain a little more in depth? or point me to a website or whatnot? That would be greatly appreciated, as I'm not that knowledgeable in the networking area. Would this "fix" be reversible?

Categories

Resources