[Q] Using http proxy over VPN connection? - Android Q&A, Help & Troubleshooting

Hello
I need to connect to my companies network using the Cisco AnyConnect VPN client. At the same time, I also need to use my companies web proxy, when I wish to access the internet and even some internal sites.
Would anyone know, how this can be configured on rooted Nexus 5 or 7 devices (with OmniRom) and on a Note 3 with stock rom, all using Android 4.4.4?
I do know that I can set a http proxy in the Wi-Fi connection settings and also for the mobile data connection. But this does not seem to have an effect, when I connect to the VPN.
Well…? Any ideas how to set this up? Would be quite a blast - company is actually considering buying iPhone 6 Plus… :crying: For rather obvious reasons, that's not my preferred solution
Thanks a lot,
Alexander

Related

Webserver using mobile connection

I have never got any app that hosts web page to work when I'm using mobile connection.
Wlan connection always works and another users seem to get it working using mobile connection.
Same problem with all ROMs that I have used. How to fix?
Mehumummo said:
I have never got any app that hosts web page to work when I'm using mobile connection.
Wlan connection always works and another users seem to get it working using mobile connection.
Same problem with all ROMs that I have used. How to fix?
Click to expand...
Click to collapse
Ummm. What network are you on? Remember most networks use NAT so save IP addresses. So your web server might only work for other users on the same subnet of your provider.
A phone isn't an ideal server. Can't you spend $1 or so per month on shared hosting on a server somewhere?
This is why it works on WiFI, as you have a dedicated IP address.
How can an incoming connection to 155.55.55.55 (for example, which covers all your network's users) know to direct an incoming port 80 (web) request to your phone? As opposed to the many other people that would try this?
I think Vodafone UK gives individual Ips though, so you could switch provider if it matters
anon2122 said:
Ummm. What network are you on? Remember most networks use NAT so save IP addresses. So your web server might only work for other users on the same subnet of your provider.
A phone isn't an ideal server. Can't you spend $1 or so per month on shared hosting on a server somewhere?
This is why it works on WiFI, as you have a dedicated IP address.
How can an incoming connection to 155.55.55.55 (for example, which covers all your network's users) know to direct an incoming port 80 (web) request to your phone? As opposed to the many other people that would try this?
I think Vodafone UK gives individual Ips though, so you could switch provider if it matters
Click to expand...
Click to collapse
I do know what NAT is (as it always ruins everything). I was not aware that mobile connection uses NAT as I imagined that operators doesn't put their users under same ip.
I'm not hosting something that any server could, mostly access to my phone:
files, sms, remote usage etc.
So there is no way but change operator?
Mehumummo said:
I do know what NAT is (as it always ruins everything). I was not aware that mobile connection uses NAT as I imagined that operators doesn't put their users under same ip.
I'm not hosting something that any server could, mostly access to my phone:
files, sms, remote usage etc.
So there is no way but change operator?
Click to expand...
Click to collapse
T-mobile definitely uses nat, as I have tried to ssh into my phone etc. I needed to make a listen server and dial into it from the phone.
So what you are doing needs a unique ip or upnp support (which I doubt android can do). But also it needs an isp that don't block ports or anything.
We use vodafone sims for remotely connecting to remote wind farms, as it allows incoming radmin connections.
anon2122 said:
So what you are doing needs a unique ip or upnp support (which I doubt android can do).
Click to expand...
Click to collapse
I guess that no operator supports UPnP/IGD to poke holes in their NAT.
If it's only for transferring files, SwiFTP supports a proxy server that is provided by the author. SwiFTP doesn't support SSL, and I don't think that I would want to send the plain text password to my phone over the Internet.
Another possibility is a VPN from the phone to the PC or router. Than you can start a server like kWS, Android Desktop, PAW Server, I-Jetty, WebFileSystem, etc.
VPN sounds good, gonna try when I get to home.
I can get connection using vpn.
However if there are no connection for short time or phone is restarted then vpn connection goes away.
I would like it to reconnect asap but it isn't meant to be that way :/
Couldn't find anything to reconnect vpn.
I didn't try the built-in VPNs (Android 2.1), but it works fine with OpenVPN: even when changing from Wifi to 3G it reconnects after a few seconds. You need root for OpenVPN AFAIK. It works great with VillainROM 12 which comes with OpenVPN. There's a guide at the VillainROM forums.
Thanks got it working
Lol huge decrease to battery life, suppose you don't have any hints for that?

[Q] PPTP VPN connection failed using the MobileAP from Dell Streak [Official ROM 407]

I have two phones with the same SIM card.
1. Samsung Galaxy S2
After activated MobileAP, my iPad will be able to connect to my PPTP VPN server.
2. Dell Streak 5
However, in my DS5, the connection to my PPTP VPN server seems blocked.
Anyone face similar problem?
Hello CharlesCCO,
After reading the whole question 2 things came to my mind so i though to describe you in detail to pass you some decent knowledge which may be productive for you.
Well, there are two conditions which i think is in your case;
To start with the first, as you have 2 mobile phones and you are willing to connect vpn on both...If you are trying to use vpn on both simultaneously then it is not possible with every provider because not all the providers support simultaneous connectivity. So, i will recommend you to first try to connect vpn on different time interval on you both phone. If that does not work then, ask your vpn provider either they support simultaneous connectivity or not.
The second part is that, it might be possible that there is some problem with the configuration on your phone. So, you can try configuring it once again. It will going to help you indeed!
I have been using vpn on multiple devices and for that currently i am using hidemyass because it allows me to use 2 simultaneous connection. I am using the same on my lenovo notebook and on my iphone vpn . I have tried pptp vpn as well as l2tp vpn and both are good...
Hope this will help you...and if you have further problem with then feel free to ping me on this forum. i will give my best shot to solve your query

IPSec tunnel SGS3 <-> Watchguard

I'm trying to setup IPSec VPN tunnel from SGS3 with stock 4.0.4 firmware to Wathguard XTM firewall. Watchguard has official support for using IOS inbuilt Cisco VPN client so I was thinking I might get it working with Android too.
I was following Watchguard guide to setup IPSec for IOS (which url I cannot paste here) and basically settings are following:
Phase 1:
Auth : SHA1
Encryption: AES-128
PFS Group 2
SA life 1h and DPD
Pre-Shared Key
Phase 2:
Type: ESP
Auth: Sha1
Encryption AES-128
Lifetime 1h
No PFS
And in addition theres Active Directory authentication. SGS3 connects to firewall but I get "WARNING: Rejected phase 1 aggressive mode from x.x.x.x to x.x.x.x (no matching policy)" to firewall log, so apparently therese problems with phase 1 configuration. I've checked shared key many times, so I was wondering if anyone knows which auth/Encryption/PFS should be working on Android client and is there any pitfalls should one know?
I too am seeking a work around for the lack of official support for VPN on Watchguard devices. I have an XTM5 and a SGS3 with 4.04 on it. There is a discussion thread here (i can't post a link, so remove the space) http ://community.spiceworks.com/topic/221632-vpn-access-to-xtm-and-xedge-devices-with-droid-or-ipad?page=2#entry-1532015 that is covering the same topic, and apparently some have been successful, but I cannot get any of the VPN types to work. PPTP connects but no network communication. IPSec doesn't connect, even when configured as the directions for iOS explain... Any feedback on the subject would be helpful.
IPSec on Android ICS
Well, I finally got my Android Samsung Galaxy S3 (ICS) phone to connect to the Watchguard XTM 5 Firmware: 11.5.2 using IPSec. I followed the directions given by watchguard for connecting an IOS/OSX device. Then it was a matter of what VPN client to use. The default Android ICS VPN client under network settings would not work. I noticed that Samsung included a Third Party IPSec VPN client "AuthenTec VPN Client v2.5.1" (not able to find it in the Google Play store). This app did the trick with the default IPSec settings for Preshared Key IKEv1, with the Aggressive mode checked. My co-worker has the Samsung Nexus Tablet with Jellybean (4.1.1) and the native VPN tool works from that version, with default settings.
This discovery brings happiness and rejoicing to our entire IT team who all have Android phones or Tabs. I use 2X for RDP, (which works well), and "ES File Explorer" (free) for SMB file browsing. With these two tools I can do just about everything I did on my laptop. Anyone have better or more tools than these?
I have also tested IOS and Mac OSX 10.6.8 native VPN tool and they work well, as well as the original SSL client that has always worked.
WatchGuard should totally go public with this, many would benefit. It works great! (I wonder if there are some security holes that they are aware of that's preventing them from announcing Android support officially...)
End_Bringer said:
Well, I finally got my Android Samsung Galaxy S3 (ICS) phone to connect to the Watchguard XTM 5 Firmware: 11.5.2 using IPSec. I followed the directions given by watchguard for connecting an IOS/OSX device. Then it was a matter of what VPN client to use. The default Android ICS VPN client under network settings would not work. I noticed that Samsung included a Third Party IPSec VPN client "AuthenTec VPN Client v2.5.1" (not able to find it in the Google Play store). This app did the trick with the default IPSec settings for Preshared Key IKEv1, with the Aggressive mode checked. My co-worker has the Samsung Nexus Tablet with Jellybean (4.1.1) and the native VPN tool works from that version, with default settings.
This discovery brings happiness and rejoicing to our entire IT team who all have Android phones or Tabs. I use 2X for RDP, (which works well), and "ES File Explorer" (free) for SMB file browsing. With these two tools I can do just about everything I did on my laptop. Anyone have better or more tools than these?
I have also tested IOS and Mac OSX 10.6.8 native VPN tool and they work well, as well as the original SSL client that has always worked.
WatchGuard should totally go public with this, many would benefit. It works great! (I wonder if there are some security holes that they are aware of that's preventing them from announcing Android support officially...)
Click to expand...
Click to collapse
Hello,
I faced the same issue for VPN connection to my watchguard.
Where could I find the AuthenTec VPN Client v2.5.1? Is it free ? Not avaiable from the editor's website.
Thanks for your return
It appears that the VPN client on the Samsung Galaxy S3 (USA, Verizon) is not available for other devices...
My phone connects fine, but I have many employees with other phones/tabs that may need this connection as well, so our IT team is in the process of testing out other VPN clients that we found in the google play store. Here is our starter list. We will report back here if we find one that works with our Watchguard settings. Let me know if you find one that works as well. Thanks!
Tigervpns VPN client
Tigervpns
NCP VPN Client (Trial)
NCP engineering
NCP VPN Client Premium (Trial)
NCP engineering
VpnCilla (Trial)
Matthias Meier
strongSwan VPN Client
strongSwan Project
Hi. I already test vpn cilla + npc vpn client without success. I will test rhe other one and let you know.
Thks
Sent from my GT-I9300 using xda app-developers app
I connected my sgs2 skyrocket to an x550e without problems though it didn't support encryption (gingerbread vpn is broken) haven't tried with my sgs3 (running ics) yet but might try tonight.
Sent from my SAMSUNG-SGH-I747 using xda premium
One of our guys got the Google Nexus Tablet with Android Jelly Bean (4.1.1) to work with the Watchguard XTM 5 - IPSec VPN.
He was using the Android built-in VPN client.
These were the settings he used:
ipsec exauth: psk
ipsec identifier: mobile
We tested all the apps that I previously listed and no success. It seems that some of them have a lot of settings, and maybe with more testing one of them might work... But I doubt it.
so after much testing, even with my new XTM515 (before i had a x550e - though i remember getting it working on that with no encryption....)
on my XTM515 i can get connected but cannot pass traffic....
i followed the steps on the watchguard document "Set up IPSec VPN connectivity from an Android device [Fireware XTM v11.5.x and higher" step by step.
now its time to play with it myself, if i get anywhere i'll let you know.
What im seeing is that i can connect, but no traffic is being sent (very few packets, if any.. i.e 1 packet here and there)
Opened a trouble ticket with watchguard and after a few days of troubleshooting still unable to get it working on a sgs3..
The official response now is that ipsec is broken on our phones..
WatchGuard was able to connect to my vpn with other android phones but they didn't have a sgs3 to test..
Then they sent me links of other people with other people having the exact same problem
Seems its samsung specific and not android specific. Not sure what samsung does to change ipsec... But it's broken...
With my ios device before I came over to the dark side, ipsec with the watchguard worked perfectly fine...
Sent from my SAMSUNG-SGH-I747 using xda premium
Downloaded the ncp vpn client (trial), imported wgx profile and everything works fine!
If all goes well over my next day or two of testing, going to buy the full version
Sent from my SAMSUNG-SGH-I747 using xda premium
waiters said:
Downloaded the ncp vpn client (trial), imported wgx profile and everything works fine!
Click to expand...
Click to collapse
Where can I find the wgx profle? I don't have in my "Watch Guard Mobile VPN with SSL" directory
rcravero said:
Where can I find the wgx profle? I don't have in my "Watch Guard Mobile VPN with SSL" directory
Click to expand...
Click to collapse
You need to generate it from policy manager..
Under vpn - mobile vpn - ipsec - press generate button
Also mobile vpn with SSL is not the same thing as ipsec and will not work
Sent from my SAMSUNG-SGH-I747 using xda premium

Internet working with browser, but not with apps

Hi Guys,
I have 3 android devices (xperia s, htc one x and a galaxy s3) connected to a wifi network. This is kind of a protected network and there is a firewall involved. Also the devices are getting IP via DHCP. The problem is that i am able to access web site via browser but when i try from the application, its showing i don't have internet connection. There is no proxy configured in this network. There is an IP filtering in the router which filters the IPs starting with a particular series. But the web site and the application which i am trying to use are supposed to use this IP series.
I've come across issues with internet connections on mobile devices. This might not work for you, but it has worked for me in the past.
I assume your devices detect all of the settings you need automatically?
If so, you may need to manually change some things.
1) Check your IP and make sure it's set right for your network
2) Check your DNS settings. Sometimes the default ones don't work properly.
Try:
8.8.8.8
8.8.4.4
These are from Google's OpenDNS and have served me well in the past.
If all else fails, check the network itself.
Hope this helps
Sent from my GT-I9300 using Tapatalk 2
SeraphSephiroth said:
I've come across issues with internet connections on mobile devices. This might not work for you, but it has worked for me in the past.
I assume your devices detect all of the settings you need automatically?
If so, you may need to manually change some things.
1) Check your IP and make sure it's set right for your network
2) Check your DNS settings. Sometimes the default ones don't work properly.
Try:
8.8.8.8
8.8.4.4
These are from Google's OpenDNS and have served me well in the past.
If all else fails, check the network itself.
Hope this helps
Sent from my GT-I9300 using Tapatalk 2
Click to expand...
Click to collapse
Thanks for the reply.. but as i mentioned earlier, the device is getting IP and other stuffs via DHCP. I am not allowed to configure something statically. It has to come via DHCP. But the interesting fact is that an iPAD in the same network is able to get internet in both browser as well as applications.
Hey, if you need to get settings via DHCP then you should talk to your network admin for the settings
Sent from my GT-I9300 using Tapatalk 2
SeraphSephiroth said:
Hey, if you need to get settings via DHCP then you should talk to your network admin for the settings
Sent from my GT-I9300 using Tapatalk 2
Click to expand...
Click to collapse
I am getting all the settings perfectly.. hope haven't read my first post.. i am able to browse via browser.. the problem is with the apps.. that y am confused about.. i know this kind of a problem may arise when we have a proxy configured in the network.. but we dont have a proxy in the network.. in fact an ipad hooked up to the same network works totally fine..
Did you get your apps working?
Nope..still facing the same issue.. internet is available in browser. but not in the apps..
There is no problem with your phone. I am sure that changing your router will fix this problem. Try another router with your internet connection and tell me if that worked.
Press thanks if I helped you!
We have tried that as well.. The situation got little worse with the new router. Now Internet is not working with ipad as well. But it's working in browser for both ipad and android. Another thing I have observed is that the Web pages load blazing fast in a windows and blackberry but the same site loads very slow in android and ios. As I mentioned earlier, the network is having a high security with firewall and encryption. Is there any limitations for android and ios to work with these kind of highly secure network??
Sent from my Galaxy Nexus using xda app-developers app
amith007 said:
We have tried that as well.. The situation got little worse with the new router. Now Internet is not working with ipad as well. But it's working in browser for both ipad and android. Another thing I have observed is that the Web pages load blazing fast in a windows and blackberry but the same site loads very slow in android and ios. As I mentioned earlier, the network is having a high security with firewall and encryption. Is there any limitations for android and ios to work with these kind of highly secure network??
Sent from my Galaxy Nexus using xda app-developers app
Click to expand...
Click to collapse
I think that the firewall is the main culprit. Try disabling the firewall if you can.
Sent from my Fanta9stic using Tapatalk 2
Ya.. even i feel the same... but its a secure network and firewall is a vital part.. so we cant disable it.. is there any known limitations for android to work with firewall or networks with these kind of setup.
Just mess with WiFi settings
amith007 said:
Hi Guys,
I have 3 android devices (xperia s, htc one x and a galaxy s3) connected to a wifi network. This is kind of a protected network and there is a firewall involved. Also the devices are getting IP via DHCP. The problem is that i am able to access web site via browser but when i try from the application, its showing i don't have internet connection. There is no proxy configured in this network. There is an IP filtering in the router which filters the IPs starting with a particular series. But the web site and the application which i am trying to use are supposed to use this IP series.
Click to expand...
Click to collapse
Hi - I was experiencing this on a Galaxy Nexus with no SIM card only connected to WiFi - on a WiFi router that used to work.
The solution was to
1. Open up DHCP settings on the phone (Settings -> WiFi -> My Network -> Advanced)
2. Manually set them to something that's wrong.
3. Save.
4. Set DHCP back to what it was.
5. Save.
May not work for you, but for me, after about 30 seconds the app store and other apps started working again without having to do a factory reset or doing anything to my router/network.
Let me know if this helped!

[Q] Is it possible to host a proxy on your android device?

Hi
Just wondering if anyone has been able to configure there android device to act as a proxy?
This may seem a silly request, but here in the UK, they have started filtering websites.
I now use my mobile to browse most of the times as the ISP Courts have not reached the Mobile providers.
So to avoid me going back and forth between devices, am wondering if its possible to just host a proxy on my
Android device.
So when using Cellar data (Not on WIFI) i can use the proxy on my android, In my PC browser, to continue browsing without restrictions?
I have paid for the app Server Ultimate pro, But can i for the love of god, Configure it to work as a proxy would.
(Keep in mind, i have installed Squid and configured on a couple of VPS)

Categories

Resources