Hey guys!
I would like to know it it's possible to set up virtual ip:s on the wifi-interface on a Hero. I get 5 external ip-addresses from my ISP assigned by DHCP. I want every computer to have it's own external ip-address. The problem is, that the addresses assigned aren't all in the same subnet. This makes the filetransfers in my LAN a problem.
I'm only using Linux, so I've solved this issue by having a second, virtual ip on all computers.
eth0 Link encap:Ethernet HWaddr xx:xx:xx:xx:5f:fa
inet addr:80.xxx.xxx.xxx Bcast:80.xxx.xxx.xxx Mask:255.255.240.0
.......
eth0:1 Link encap:Ethernet HWaddr xx:xx:xx:xx:5f:fa
inet addr:192.168.1.2 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:18
So you get the point. What I want to do now, is to set a virtual ip on my phone aswell. (When connected via WIFI.) Anyone know if this is possible?
You may want to ask the mods to move this to the Q&A section where people look to answer questions that are not related to rom development for your response
If you've got tun/tap in your kernel, you'll just have to add a tap to dev and add iptables rules.
G'day
I am wondering if the IPSEC implementation is crippled somehow in 2.1? I was trying to connect to a known (working) IPSEC peer with an Iphone 4 as my control; and trying from Galaxy-S - I put wireshark on the line and notice the Galaxy-S is failing in IKE key negotiation phase. Iphone succeeds.
Has anyone had an success with geting IPSEC VPN going, can confirm issues or knows if there will be a "fix" in 2.2 ?
cheers
-k
Have set up IPSec/L2TP no problems Android 2.1
Good morning,
I've managed to set up both PPTP to my Windows 7 home network as well as IPSec L2TP (PSK) and they both work without problems; it may be a peculiarity of the implementation that is causing hiccoughs--the web has various documentation of the quirks of Cisco and Microsoft VPN implementations and workarounds; here's one such page regarding modifications to IPSec-L2TP (openswan) for connecting Windows VPN clients to Ubuntu server running VPN:
[QR CODE REMOVED CUZ APPARENTLY IM A NOOB]
*** Ok, well, it seems since I just registered on the board, it won't let me post either an URL to the QR Code for the URL, or the URL itself, so we'll have to do this the hard way until my account is verified:
Go to http-colon-slash/robincheung.info/mbalog/ubuntu-IPSec-L2TP and it will redirect the the wholly-too-long URL to the notebook
***
If it's failing during key negotiation, perhaps you've specified MD5 on one VPN client and SHA1 on the other (or AES on one and 3DES on the other type deal?), or if you're using certificates rather than PSK, perhaps there's an issue with the certificates in the Android unit but not your iPhone?
RobIncAMDSPhD @Milestone XT720 (windmobile.ca)
Hey guys, anyone know a way to get vpn working on the A500?
It supports ipsec. but we are eliminating that as of next week in favor of SSL.
I was going to use openvpn (and the new kern mod) but I don't think it supports ssl (only ipsec).
So curious is anyone has thought through this, I'd like to stop carrying my 17" hackbook-pro (HP DV9700 running snow leopard).
thanks in advance!
Hey,try vpnc widget.
At my university it works with my htc desire z.
Didn't try it on the a500,but you could do it
Bye
Sergioka
Sent from my HTC Vision using Tapatalk
Do you solved this? I had the same problem. Iconia don't remember any VPN settings.
Took me a while to figure out how to save on my Transformer. When you are on the VPN setup screen the menu/option box (not sure the correct name, it is the one with the 4 horizontal lines) will be up in the right hand corner. Selet that and a "Save" option will appear in the drop down.
I've yet to get VPN to work on my A500. Trying to connect to VPN on Windows 2003 server. It connects, but then nothing works. can't get to anything on the remote network or even my local network or the internet. As soon as i disconnect the VPN, the local network and internet starts working again.
Same boat
I'm experiencing the exact same situation where I can connect but get no traffic moving. Also, I cannot get settings, etc. to stick on shutdown/reboot. I'm going to put down exactly how I got here in the hopes that it helps someone else to figure this out...
1. Rooted stock Acer Iconia (A500) tablet
2. Installed tun.ko
Copied tun.ko to /system/lib/modules
chmod 644 /system/lib/modules/tun.ko
insmod /system/lib/modules/tun.ko
3. Installed BusyBox (from Market) 1.18.4 to /system/xbin
4. Installed VPNC Widget (from Market) and set information:
IPSecGateway - Public VPN host
IPSecId - VPN group name
IPSec Group Password - VPN group password
XAuthUsername - User ID
XauthPassword - User password
other Vpnc Options - *blank*
5. From VPNC Widget settings, selected "Check Prerequisites".
Running tests...
Error: root access missing!
Error: no access to TUN device!
Warning: 'Advanced Routing' feature missing - VPN connectivity might be lost after a while
Sorry, the VPNC Widget will not work on this phone.Not sure why it's saying root access missing, but it is saying no access to TUN device. It's not saying that TUN device is missing, so I know the insmod worked.
6. Started VPNC Widget - immediately errored out. Checked last vpn session log:
Enter IPSec secret for [email protected]
Enter password for [email protected]
pre-Init phase...
reloc_library[1315]: 1069 cannot locate '__set_sycal_errno'...
CANNOT LINK EXECUTABLE
reloc_library[1315]: 1070 cannot locat '__set_syscall_errno'...
CANNOT LINK EXECUTABLE
Error: no access to TUN device!
can't open /dev/net/tun, check that it is either device char 10 200 or (with DevFS) a symlink to ../misc/net/tun (not mist/net/tun): No such file or directory
can't initialise tunnel interface: No such file or directory
vpnc version 0.5.3-mjm1-140M
7. Manually created tunnel device
mkdir /dev/net
mknod /dev/net/tun c 10 200
8. From VPNC Widget settings, selected "Check Prerequisites".
Running tests...
Error: root access missing!
Warning: 'Advanced Routing' feature missing - VPN connectivity might be lost after a while
Sorry, the VPNC Widget will not work on this phone.TUN access is working, but still says no root access...
9. Started VPNC Widget. Connected immediately, but VPN traffic would not flow. External web traffic still worked. Cisco ASA shows successful login.
10. Disconnected from VPN Widget. Checked last vpn session log:
Enter IPSec secret for [email protected]
Enter password for [email protected]
pre-Init phase...
Error binding to source port. Try '--local-port 0'
Failed to bind to 0.0.0.0:4500: Address already in use
vpnc version 0.5.3-mjm1-140M
IKE SA selected psk+auth-3des-md5
NAT status: this end behind NAT? YES -- remote end behind NAT? YES
11. Changed VPNC Widget configuration:
Added '--local-port 0' to other Vpnc Options
12. Start VPNC Widget. Either it connects and immediately reports password error (Cisco ASA shows unsuccessful login - bad password, I think) or it connects but no traffic passes, VPN or web (Cisco ASA show successful login).
13. Check last vpn session log for bad password event:
Enter IPSec secret for [email protected]
Enter password for [email protected]
pre-Init phase...
Password for VPN [email protected]s:
Password for VPN [email protected]s:
authentication unsuccessful
vpnc version 0.5.3-mjm1-140M
IKE SA selected psk+auth-3des-md5
NAT status: this end behind NAT? YES -- remote end behind NAT? YES
I've tried reinstalling everything but I get the same results every time. I'm hoping this information helps someone (and me)...
Same problem here on the Motorola Xoom...
Typing netcfg reveals
Code:
lo UP 127.0.0.1 255.0.0.0 0x00000049
dummy0 DOWN 0.0.0.0 0.0.0.0 0x00000082
usb0 DOWN 0.0.0.0 0.0.0.0 0x00001002
sit0 DOWN 0.0.0.0 0.0.0.0 0x00000080
ip6tnl0 DOWN 0.0.0.0 0.0.0.0 0x00000080
ppp0 UP 10.10.6.7 255.255.255.255 0x000010d1
eth0 DOWN 0.0.0.0 0.0.0.0 0x00001002
tun0 DOWN 0.0.0.0 0.0.0.0 0x00001090
No connection on the TUN0 interface even though the widget claims VPN is connected.
After adding the following to the VPN options:
Code:
--local-port 0
--natt-mode cisco-udp
I can start VPN as many times I want resulting in numerous TUN interfaces in netcfg - all of which are DOWN.
I'm wondering if upgrading to HC3.1 (Xoom instructions http://forum.xda-developers.com/showthread.php?t=1074609) - which provides TUN support - solves the issue for both devices.
When you run the prerequisites check, does it also say that root access is missing?
Sadly, I am doubtful that HC3.1 will fix this as I know the TUN file is working properly because others have gotten OpenVPN working. The issue seems to lie with the VPNC Widget.
I can also connect to many different giganews VPN servers, but cannot access ANY network once connected.
WORKING with VPNC (not VPNC Widget)
I uninstalled VPNC Widget and then installed 0.99 VPNC and it is working.
Just need to create /etc/resolv.conf and append --local-port 0.
Sucks that I have to do it from the shell, but at least it works...
latest vpnc widget works with a few mods :
- edit vpnc-script and change MYBOX="$0-box" to ="'
- chmod 500 vpnc-script (something recreates vpnc-script at every start otherwise)
Stopping vpnc does not work though ;/ (just cut off wifi for a few seconds to make it close)
hey n00bzy,where can I find the vpnc-script?
thx
sergioka
sergioka said:
hey n00bzy,where can I find the vpnc-script?
thx
sergioka
Click to expand...
Click to collapse
If I recall correctly, it's in /data/data/com.gmail.mjm4456.vpncwidget/files but don't quote me on it...
hey thanks for the info,
i found the file, but
the widget tells me this
"Running tests...
Error: root access missing!
Warning: 'Advanced Routing' feature missing - VPN connectivity might be lost after a while
Sorry, the VPNC Widget will not work on this phone."
Wow I forgot about the thread I started! lol I will try some of these suggestions and see if any work..
I know that ipsec is going to be cut off here soon, so I'm going to need a SSL solution sooner or later.
sergioka said:
hey thanks for the info,
i found the file, but
the widget tells me this
"Running tests...
Error: root access missing!
Warning: 'Advanced Routing' feature missing - VPN connectivity might be lost after a while
Sorry, the VPNC Widget will not work on this phone."
Click to expand...
Click to collapse
I was getting that message but it still connected. Try to connect, check your last connection log, and see what it says.
Oh man, I had only the link on the desktop and not the widget
Now, with the wigdet, it works!
Couple of questions as I am going through a a vpnc widget setup on a rooted Asus Transformer.
I am running prime 1.4 which already has the tun loaded but when I go to /dev/net/tun there is no file in that directory. Should there be a file in that directory?
The error I am getting right now from the widgets log is "can't open /dev/net/tun, check that it is either device char 10 200 or (with DevFS) a symlink to ../misc/net/tun (not /misc/net/tun): Is a directory can't initialize tunnel interface"
Any help will be much appreciated
I will pay good $$ to have a working (simple) Cisco VPN option on my Android. I have tried and wasted way to many hours trying to get this working with all the complicated and unclearly documented ways to get this working.
Anyone working on something besides Cisco (which they will be forcing our organization to pay for such service which is not possible seeing we are one of the largest orgs around and something like that is not feasible)?
I was wondering if anyone was using OpenVPN with CM7 here, and if so -- are you able to successfully use the extra arguments area to set --tls-auth arguments?
I have my key for TLS auth stored in a folder called openvpn on my SD card...
I am using:
--tls-auth /mnt/sdcard/openvpn/static.key 1
in the additional arguments section.. Ive done MD5 compares between the server static.key and whats on the phone, and they are identical.. The server is OpenVPN running on TomatoUSB, and "Extra HMAC Authorization" on the server is set to "Incoming (0)"
The configuration works fine with my laptop, but on my phone it does not seem to be picking up the option... The server log shows it attempting and throwing the error "TLS Error: cannot locate HMAC in incoming packet"
If I turn Extra HMAC Authorization off on the server, I connect fine.. The reason I am wondering if the argument is even being picked up is because if I leave it in there, and disable tls-auth on the server, it connects without complaint. From what I understand, both the server and client need to have the option set or unset, otherwise a connection cannot be negotiated.
Anyone else?
Thanks,
Rick
I was using vpnc get-a-robot (https://code.google.com/p/get-a-robot-vpnc/downloads/list) successfully on froyo for connection to my Cisco ipsec VPN.
When I upgraded to GB, vpnc would force close (guessing because the module was missing) so I compiled the tun.ko.
Now, vpnc connects, but doesn't pass traffic. When connecting to the VPN, I see these errors on the VPN side:
Code:
Mismatch: Overriding phase 2 DH Group(DH group 5) with phase 1 group(DH group 2)
IKE could not recognize the version of the client! IPSec Fragmentation Policy will be ignored for this connection!
IKE Receiver: Runt ISAKMP packet discarded on Port 4500
I didn't change any of the vpn settings.
I'm not sure where to go from here.... I tried compiling other modules that looked like they could be related but that was of no help. Is this kernel missing some needed ipsec support? Or, could it just be that app is no longer compatible?
I will look for another app to use while this post sits out here. If anyone is interested in the tun.ko, I'll happily post it.
Ok, what a waste of my (& anyone else who went any further than reading my post's) time! IT WAS THE APP!
Using the more recent VPNC Widget, all is well!
EDIT: Here is the tun.ko zipped. Thought I was going to have to find somewhere to host it, or I would have included it in the first post.