LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Mobile
User Name
Password
Linux - Mobile This forum is for the discussion of all topics relating to Mobile Linux. This includes Android, Tizen, LiMo, Maemo, MeeGo, Openmoko, Ubuntu Mobile, WebOS, Firefox OS, Open Mobile Alliance and other similar projects and products.
A reminder that LQ now has a dedicated Android sister site: AndroidQuestions.org

Notices

Reply
 
Search this Thread
Old 08-03-2010, 12:41 PM   #1
tekhead2
Member
 
Registered: Apr 2004
Distribution: slackware/FreeBSD/Vector
Posts: 291

Rep: Reputation: 52
VPN server for Android 2.1 PPTP and L2TP/IPSEC no luck so far


I've got a substantial user base who are itching and dying to get on our corporate network with their Android phones. We are currently using a Cisco VPN product and there is no know solution for running on the Cisco protocols without rooting/busybox/vpnc setup. So in an attempt to provide this access I've setup several test attempts with several different VPN solutions. I've tried several l2tp/ipsec and PPTP iterations with little to no luck. I have been able to get a VPN connection established but there is no route through to our internal LAN once connected. This has been occuring with every type of VPN connection I try. I've tried Astaro,vyatta,pfsense/m0n0wall,debian, and finally FreeBSD.. so far all of them are able to connect, but there is no route. I'm beginning to lose hope of ever having an open source solution to this issue. Has anyone been able to setup a VPN for Android devices and get it to work? I'm open to any ideas and or suggestions as I'm just about ready to give up on it.

Have you setup a VPN for Android? If so please provide me with a glimmer of hope!
 
Old 12-24-2010, 05:11 PM   #2
tekhead2
Member
 
Registered: Apr 2004
Distribution: slackware/FreeBSD/Vector
Posts: 291

Original Poster
Rep: Reputation: 52
[UPDATE] abondon hope all ye who enter

Well I had a very long phone conversation with a high level technician and architect from Tmobile and they informed me that the issues I've had with the VPN and mobile end points is due to the way their network is setup and that their APN's are blocking the VPN connections. I also discovered that most carriers put their mobile IP's in a protected network space which basically breaks VPN tunnels. The only exception to this rule being AT&T and the Iphone IP's they are totally open and the VPN works fine on them. So currently the only way to get ANY VPN to work with a mobile device is to ask your provider to move your device to an unprotected network which is like asking them for free service. Hopefully they will make some major changes in the future.
 
Old 01-25-2011, 10:37 PM   #3
doandroids
LQ Newbie
 
Registered: Jan 2011
Posts: 5

Rep: Reputation: 0
This won't solve the issue of your carrier blocking the VPN, but I thought it might help someone.

If you set up a PPTP server on Linux for Android clients to connect, make sure you disable BSD compression. Otherwise the connection won't work.

To be precise, you need to add the following in /etc/ppp/pptp-options

nobsdcomp

Last edited by doandroids; 01-27-2011 at 08:13 PM. Reason: remove commercials
 
Old 01-27-2011, 10:09 AM   #4
archtoad6
Senior Member
 
Registered: Oct 2004
Location: Houston, TX (usa)
Distribution: MEPIS, Debian, Knoppix,
Posts: 4,727
Blog Entries: 15

Rep: Reputation: 230Reputation: 230Reputation: 230
Edit: This post may not make much sense any more as doandroids has since further edited the post to completely remove the comm'l references.
Thank you.
I am leaving the rest of my post as a reminder of the rules.


The forum rules do not permit advertising. Please visit http://www.linuxquestions.org/advertising/ for more information on advertising. Feel free to contact the forum admin if you have any questions about this policy.

doandroids,

Welcome to LQ. I'm sorry that your very 1st post has run afoul of the rules.

However thoughtful, helpful, & well intentioned your post is; it still breaks the LQ Rules against advertising:
Quote:
* There is no advertising allowed in the forums. If you are interested in advertising, please contact us.
I have edited it accordingly.

Please don't be discouraged, it is likely that you have valuable information to share w/ the LQ community; but we cannot allow our fora to be used for advertising.

Thank you for your understanding & co-operation, I hope your career here is long & productive.

Last edited by archtoad6; 01-28-2011 at 06:25 AM.
 
Old 01-27-2011, 10:40 AM   #5
archtoad6
Senior Member
 
Registered: Oct 2004
Location: Houston, TX (usa)
Distribution: MEPIS, Debian, Knoppix,
Posts: 4,727
Blog Entries: 15

Rep: Reputation: 230Reputation: 230Reputation: 230
tekhead2,

"Super Matt", my local Gentoo (he runs it successfully) & Android (he uses one ) expert, has not felt the personal need for VPN, but says that your concerns make sense. He suggests you search for Android VPN apps, starting w/ Cisco (or did you already try them?). He is suggesting that Cisco should be considering the growth of the Android market, & working on meeting your need.

I hope we are not suggesting something you have already investigated.
 
Old 01-27-2011, 08:53 PM   #6
doandroids
LQ Newbie
 
Registered: Jan 2011
Posts: 5

Rep: Reputation: 0
Quote:
Originally Posted by archtoad6 View Post
tekhead2,

He suggests you search for Android VPN apps, starting w/ Cisco (or did you already try them?). He is suggesting that Cisco should be considering the growth of the Android market, & working on meeting your need.
There's no Cisco client on Android currently. Last I heard, on Cisco's support forum, one may be released in June. It will likely only be available on Cisco's own Android Tablet, at first.

As mentioned by the OP, if you "root" the phone, then it's possible to install clients that connect to a "pure IPSec" VPN (aka Cisco VPN).

In the meantime, for non-root users, what's available on Android are: PPTP and L2TP (with or without IPSec). I've not tried to connect to a Cisco ASA, although that should be possible also with PPTP or L2TP. I have tried both PPTP and L2TP to a Linux box, and both works fine (except for the bsd compression that I mentioned above).

Non of this matters, if the carrier is blocking VPN, as the OP claims. I'm not sure it is quite that bad, though, since he also says he managed to establish a connection. Or was that only on wifi?

Cheers

Last edited by doandroids; 01-27-2011 at 11:17 PM.
 
Old 03-04-2011, 04:33 AM   #7
doandroids
LQ Newbie
 
Registered: Jan 2011
Posts: 5

Rep: Reputation: 0
An update. On Android 2.2 and earlier there was a problem with L2TP/IPSec CRT, since the Android client sent the IP-number as identifier, but the server expected the common name (given by the certificate). I just got Android 2.3.3 installed on my Nexus One and the problem is now fixed, L2TP/IPSec CRT now connects and works perfectly.
If time permits, and anyone is interested I can provide more details on how it can be set up.
 
Old 03-04-2011, 07:32 AM   #8
doandroids
LQ Newbie
 
Registered: Jan 2011
Posts: 5

Rep: Reputation: 0
Just noticed that PPTP also started to work fine as of Android 2.3.3. Previously it would only work without encryption.
 
Old 06-28-2011, 01:21 PM   #9
Goore
LQ Newbie
 
Registered: Jun 2011
Posts: 1

Rep: Reputation: Disabled
Quote:
Originally Posted by doandroids View Post
An update. On Android 2.2 and earlier there was a problem with L2TP/IPSec CRT, since the Android client sent the IP-number as identifier, but the server expected the common name (given by the certificate). I just got Android 2.3.3 installed on my Nexus One and the problem is now fixed, L2TP/IPSec CRT now connects and works perfectly.
If time permits, and anyone is interested I can provide more details on how it can be set up.
Hi, I have ca.crt, user.crt and user.key. I tried to install *.crt certificates on Adroid 2.3.3 but only ca.crt worked. User.crt did not so I am not able to complete the VPN settings. Any idea what is wrong?
 
Old 06-25-2012, 11:50 AM   #10
PedFleming
LQ Newbie
 
Registered: Jun 2012
Posts: 1

Rep: Reputation: 0
Also noticed that the version is older enough that cannot follow the instructions about new vpn settings. Taking it to online for updating the router for new vpn. Take the advantage and make settings to get best vpn service for android

Last edited by PedFleming; 06-25-2012 at 12:49 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Setting up L2TP over IPSec VPN server under CentOS 5.3 fantasygoat Linux - Networking 5 10-04-2012 04:08 PM
IPSec L2TP VPN server on Ubuntu for iPhone Apollo77 Linux - Networking 27 12-03-2010 09:27 AM
outbound VPN's fail (pptp/l2tp/ipsec) RattleSn@ke Linux - Security 3 05-21-2008 03:55 PM
IPSEC/L2TP VPN Server on Fedora Core 3 using Kernel 2.6 petwalrus Linux - Networking 3 04-21-2005 10:55 AM
IPsec/L2TP VPN question IPsecLearner Linux - Networking 3 04-19-2005 11:32 AM


All times are GMT -5. The time now is 09:37 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration