Did ANYONE get Cisco VPN to work with WM5?

[tinyballz]

I tried bluefire, I tried ncp secure, tried anthavpn... I can't get anything to work.

If anyone can connect to a cisco vpn based network with WM5, please let me know how. (i don't know what kind of cisco system it is or anything, all I know is that I use Cisco's VPN client to connect to the network on my PC and it works fine)

It's really frustrating buying an x51v for college and not being able to connect to my school's network. If anyone has a suggestion, please try to help.

Thanks in advance,
Sean

I can connect to my works Cisco 3000 VPN system with NCP Secure. You need to talk to the IT people at your school and make sure you have all the settings correct. NCP Secure has some problems with Odyssey Client in the Dell x51v which requires a couple of Registary changes to clear up the problem. Those issues do not stop NCP Secure from working only Active Sync.
I have not tried the Blue fire trial but I did use the 2003 SE version with no problems.
I also have used the Anthasoft beta for WM5 and it works but had some problems.
For all versions you need to know the correct setup. None of the versions will work if you just load them and try to run them without knowing the different encoding schemes and passwords.

[tinyballz]

None of the versions will work if you just load them and try to run them without knowing the different encoding schemes and passwords.

What do you mean the different encoding schemes and passwords? I downloaded the preconfigured cisco desktop client and pulled the settings from there, what additional settings could i be missing?

How did you get NCP Secure to connect? Whenever I tried it I could not find an option or button to connect to the network to enter my settings. I just started the services and then went to the Monitor but couldnt find anywhere to input my settings.

sean

For NCP Secure you have to run the desktop program to configure the set up. When you perform the install you will get a program called Secure Entry CE Client on your desktop. Run that program and go into Configuration/Profile Settings and the create a new profile. The section on IPSec General Settings is the important part. You need to know the Gateway address and then the IKE and IPSec Policy types and set them up to make the connection. My Cisco requires IKE to be the auto mode and a IPSec policy along with it being in the agressive mode in the advanced options. On the idenities page it requires a Shared secret which may be a password. An then my work requires a second password and user name in the Extended auth. box. After you get that all set up you have to re-sync with the PocketPC and download the profile into the PocketPC. The on the Pocket PC run the Monitor program. It will start the VPN working. Then connect with WiFi or modem and then run the Monitor. If an exteneded password is required it will ask for it at this time. Make sure you create a log file and if you don't connect examine it. It will give you ideas as to where it failed.
I also found the NCP Secure customer service to be very helpful.

[tinyballz]

I didnt even notice the new program installed on my desktop.

I just configured it to what i THINK is the right settings (actually I made 7 different profiles with different combinations of possible settings) and I'm going to give it a shot tomorrow when I go to class.

Thanks a lot for your help!!

Sean

I didnt even notice the new program installed on my desktop.

I just configured it to what i THINK is the right settings (actually I made 7 different profiles with different combinations of possible settings) and I'm going to give it a shot tomorrow when I go to class.

Thanks a lot for your help!!

Sean

Just wondering how you made out.
Ollie

[tinyballz]

Actually I just got home from classes and another day of trying this out. No luck so far. I tried about 25 different configurations and im running out of ideas lol. Most common errors are IKE connection error, and a bad Cookie error.

I'm gonna run down to the ITS department tomorrow and see if they have any ideas (i doubt they will but its worth a shot).

Theres so many stupid options on this program, I cant translate the simple "group name/password, username/password, and connection address" into all this techno talk mumbo jumbo

If the ITS trip doesnt turn out well, ill give tech support a call... I read something in the readme about VPN not working until you buy it? Maybe i mis-read that, cause thats a really stupid idea... I wouldnt shell out a hundred bucks (or however much it costs) BEFORE im sure that it works with my school's network.

Oh well... we shall see how it goes tomorrow.


Thanks for your interest

Sean

If the ITS trip doesnt turn out well, ill give tech support a call... I read something in the readme about VPN not working until you buy it?

Sean

You should be able to use it for 30 days before paying for it. I was able to use the old version for 30 days without paying for it and I was able to email the log files to NCP Secure customer support and they helped me set it up.
Ollie

I can connect to my works Cisco 3000 VPN system with NCP Secure. You need to talk to the IT people at your school and make sure you have all the settings correct. NCP Secure has some problems with Odyssey Client in the Dell x51v which requires a couple of Registary changes to clear up the problem. Those issues do not stop NCP Secure from working only Active Sync.
I have not tried the Blue fire trial but I did use the 2003 SE version with no problems.
I also have used the Anthasoft beta for WM5 and it works but had some problems.
For all versions you need to know the correct setup. None of the versions will work if you just load them and try to run them without knowing the different encoding schemes and passwords.

Do you know which registry changes is neccesary? I can confirm that ActiveSync doesn't work after installing NCP. The problem is the settings which have to be applied over an ActiveSync connection; I could have lived with uninstalling NCP everytime I needed ActiveSync, but that won't do. I have also tried the AnthaVPN 5.8 trial which should work with WM5, but had a few problems there. The connection->wifi option was greyed out, but it seemed like I could connect to our network throug one of the options under the modem option. Still, I didn't suceed in establishing a VPN-connection. When/if I get it to work I will post my findings here.

Do you know which registry changes is neccesary? I can confirm that ActiveSync doesn't work after installing NCP. The problem is the settings which have to be applied over an ActiveSync connection; I could have lived with uninstalling NCP everytime I needed ActiveSync, but that won't do. I have also tried the AnthaVPN 5.8 trial which should work with WM5, but had a few problems there. The connection->wifi option was greyed out, but it seemed like I could connect to our network throug one of the options under the modem option. Still, I didn't suceed in establishing a VPN-connection. When/if I get it to work I will post my findings here.

Below are the settings I recieved from NCP Secure. I can confirm that the first (1) setting fixes Active Sync. After installing NCP Secure and doing the soft reset do the first change and wait 1 minute and do another soft reset. After doing that ActiveSync will work. Now your problem will be after every soft reset WiFi will be on but you will have no control. To regain control turn the X51V off and then back on. You can now stop WiFi and you are all set. The second (2) fix may fix that issue but I have yet to test it.

Hope this Helps
Ollie

1. RNDIS (for ActiveSync via USB)
Key:
"HKLM\Comm\RNDISFN1\Parms"
Value (Multi_SZ):
"UpperBind"
Data:
NOT
NCPIMPRD
ODYSSEYIMCE


2. NCP intermediate adapter:
Key:
"HKLM\Comm\NCPLBCE1\Parms"
Value (Multi_SZ):
"UpperBind"
Data:
NOT
NCPIMPRD
TCPIP
ODYSSEYIMCE

[tinyballz]

So I asked a computer engineering professor about connecting to the school's network today. He said that he uses a program from Cisco.com that lets him access the network and verify with the "kerberos realm".

I just spent an hour searching the Cisco website and I have not been able to find the program of which he speaks. Anyone have any ideas what he's talking about and where to find it?

I emailed him and am awaiting a response.

Hopefully this will be the answer to my problems but Im not getting my hopes up.

(btw, still havent been able to create a good NCP Secure profile )

Sean

[tinyballz]

I also sent a question to my school's ITS Help Desk and i got the response attached below. Would anyone be so kind as to "translate" this into the settings for NCP Secure? I cant seem to get the right combo and put the right things in the right places...




You probably need to purchase a movianVPN from the PSU computer store to use wireless. Please contact with the Computer store people and discuss with them about your need. Their phone number is 814-865-2100 or 800-251-9281

We have tested only a particular PDA to use the ITS Wireless. The instructions might be useful for your specific brand also.

Hardware:
-Compaq IPAQ 3800 Series w/CF Expansion Pack (OS: PocketPC 2002)
-AmbiCom-WL1100x 802.11 Wireless LAN CF Card

Software:
-Certicom movianVPN VPN Client v3.0

Setting up PocketPC 2002 Operating System:

1) Start->Settings->Connections->Connections
2) There are three drop down boxes, for the first one, click "New..." in
the dropdown, enter something like "Wireless LAN" for a name, click
Proxy Settings and check "This network connects to the Internet"; Hit Ok
3) Select "Wireless LAN" for the two top drop down boxes and "The
Internet" for the last drop down box.

Setting up movainVPN VPN Client
1) Install it, run it
2) Click New, Policy Name: "PSU", Gateway Address: "mobility.up.psu.edu"
(change "up" in the address depending on which campus you are at).
Policy type: "Cisco VPN Concentrator 3000"
3) Click Continue
4) Group name: "pennstate", password: "pennstate", user name: your Penn State User ID (xyz123). Click the DNS/WINS button, uncheck Query DNS/WINS, and enter the appropriate DNS servers (currently: Primary: 128.118.25.3, Secondary:
130.203.1.4).
5) Click Continue, click Done.

Accessing the network:
1) The essentials for setting up the Wireless LAN card are:

Network SSID: pennstate
Network Mode: Infrastructure
Make sure there is NO encryption (No WEP Key)

2) Hopefully your card will find the network, open movianVPN again and
click Login.
3) Make sure to logout, do not just turn off your PDA or you will not be
able to get in for the specified SA timeout, which at minimum is 1 hour.

-Pei




Thanks!
Sean

Under Basic Settings set the Profile name to PSU
Connection Type VPN connection to IPSec Gateway
Communication medium to LAN/WLAN unless you are using a modem then you will have to set up the modem connections. I had some problems setting up a modem and don't use that method any longer.

Line Management
I have connection mode at Manual
and timeout at 500

General settings
Gateway address is mobility.up.psu.edu. You might try pining that name to get the numerical address. I use a numerical address.
For IKE Policy I use automatic mode
For IPSec policy I use ESP - 3DES - MD5
Advanced Options
Exch Mode I use Agressive Mode - that way it uses the group name and password
PFS Group - none

Identities
Local Idenity - Free String
ID would be pennstate
Use pre shared key Sheared secret - pennstate

Use extended auth
User Name your Penn state user ID
Password - I don't know what you use here - I have a password defined - you may have a password. If you have a password you can enter it here or leave it blank. Leaving it blank will cause the program to request it as you connect. Keeps others from using you connection if you lose the device. It could be just your Penn State password.
Use access data from configuration

IP address Assignmnet
Check the Use IKE Config Mode
I have IP address as 0.0.0.0 and the subnet mask 255.255.255.0
You would check the DNS/WINS servers box and the two DNS Server numbers

The next pages are blank and the Link Firewall page I have Enable Stateful Inspection as Always and checked Enable NetBIOS over IP

See if this works.

The other info you included is for setting up you Wireless card. That is done as part of the wireless setup. You should know that is working when you see the two arrows showing a WiFi connection at the top of your screen. If you don't have that working don't even try the NCP VPN because you have no connection.

Hope this helps.
Ollie

[tinyballz]

IT WORKED!!!!

Those settings you gave me REALLY helped me out! Now i just gotta shell out the hundred bucks to buy the program but i guess its well worth it since i need it for school.

Thank you very much for your time and effort in helping me get this thing working. I never woulda been able to figure it out without your settings.


Thanks again! :)

Sean

No problem, glad I could help.