How to setup WI-Fi with Enterprise Security - Tilt, TyTN II, MDA Vario III General

Hi ,
My company has setup Wi-fi With Enterprise security , but in AT&T Tilt
I can't see the option for WPA entrprice security . Do anybody know additional software for that ?
Please Help me ASAP.
Thanks to all of you in Advance !!!

krunalmehta said:
Hi ,
My company has setup Wi-fi With Enterprise security , but in AT&T Tilt
I can't see the option for WPA entrprice security . Do anybody know additional software for that ?
Please Help me ASAP.
Thanks to all of you in Advance !!!
Click to expand...
Click to collapse
Took me a few minutes to find it a few weeks ago, but this will do fine and it's free:
SecureW2 TTLS Client, you can google it pretty easy.
I set it up here for our fairly oddball Cisco/EAP/MSCAP 802.11x stuff a while back. It works, but then I realized I didn't have much use for it. But it's there in case I need it. I pondered buying IM+ for Sametime (our internal IM) but not worth it.. Anyway

Its very easy i think...
just go to start - settings - connections - Wi-Fi - add new - type in the Network name (SSID), if its a hidden network, then tick "This is a hidden network" - next - Authentication: WAP - Data Encryption depends on ur network, either TKIP or AES, check with ur admin - next - EAP typeEAP - finish.
if the network is avaliable, a login window will pop up. you type ur ID, Password and domain in, then the ur wifi is connected.
This is how I config my college's WPA wifi... I think urs are more or less the same... the only different things should be the Data Encryption and EAP type.

My work uses EAP-TLS and TKIP encryption, but I have never been able to get the digital certificates to work on the Tilt (or any win mobile device, for that matter). I've talked about it with our IT guys, and they admit it's a bit of a nightmare (they don't officially support mobile devices on the secure wireless network anyway - we have an open network too). MS has no real solutions to offer, and IT has other priorities, so it remains an unresolved issue for me.

Related

Confused: WiFi setup please....

I'm confused. My IE instance quite happily connects to my 3G t-mobile connection when no connections are enabled. However, when I enable the WiFi - the little mast icon says connected... but IE can't find anything. I'm assuming its a DNS issue. I've tried disabling MAC address security, and it made 0 difference to the failure to connect - so I'm assuming the MAC address I typed into my router was the right one. (Can't even find the TyTnII MAC address now!)
So - what do I need to do to ensure that the TytnII loads the WiFi connection when at home, and actually allows me to surf? I tried putting in the router address as DNS - and it didnt make any difference either. What next? Too many options!!!!
Graham
If its over a wep network(which it probably is) you need the key(passcode)...
Nope - got that - (and it only prompted for the passkey once - so I guess it stored it somewhere). Its got something to do with DNS - because it cannot resolve names (like google.com!) - but I don't know how to check this out. Are thetre tools like TRACEROUTE / IPCONFIG etc for WM6??
Graham
Try removing any proxy servers that might be configured.
Go to settings/connections/wi-fi and tap your connected Wireless Network to configure. In next screen check if "Connects to:" is set to "The Internet" . If set to "Work" IE will use your 3G dataconnection. When set to "The Internet" IE will use your WI-FI connection. When you are outdoor and your home WI-FI connection is not available IE will then automaticly use your 3G connection again.
Hope this helps as it works this way with me.
Klipper
I am having this same problem , did you manage to sort yours out ?
Does your WiFi network use a proxy to get to the internet?
installer09 said:
I am having this same problem , did you manage to sort yours out ?
Click to expand...
Click to collapse
Yep - I reset my wireless router - and everything started working. Looking in the wrong place as always!
Graham
And how do you connect to public wi-fi spots without havin TyTN try to connect over 3G?
Thanks

wifi & secure w2 certificate problem! which rom?

hello everybody,
i am having huge problems connecting to my university`s wifi (tu-clausthal in germany). i installed secure w2 newest version and the required certificates from my university. i configured everything according to the guidelines. however, i cannot connect to the wifi network, it keeps connecting forever and nothing happens. i am 100% sure the configuration is correct, a friend of mine can connect with the exact same config. also i can connect to any other wifi network, no matter if wep, wpa, etc. only havin problems with the certificates, it seems.
now my question: has anybody successfully connected to a secure w2 wifi network? if so, which rom and which version of secure w2 did you use?
the technical support of my university doesnt know anything about windows mobile...iphone and symbian phones seem to connect without problems...
any suggestions?
edit: i am using AtheniOS rom wm 6.1
Same problem connecting to a w2 on my AT&T Tilt. My company was running a linksys standard WPA but installed a WPA2 a few months ago. My IT department tried to help but they don't know windows mobile and AT&T tech support was useless. I have a WPA2 option in my wireless menu but I can't connect??? I'll get looking and will post if I find anythink.
hmm too bad. as i said, one of my friends can connect without problems....
With WPA2 Enterprise (not WPA2-PSK) Windows Mobile allows only EAP-TLS & PEAP Authentication, the authentication type will be configured on a central RADIUS server(s). With EAP-TLS you MUST have a personal certificate on the device as well as the Root CA's certificate. The client certificate must also have the 'Client Authentication' attribute. The Root CA certificate will generally have the 'All Purposes' attribute. With PEAP you have the option to use either a Certificate or Username/Password to identifiy the user - you would normally use Username/Password, however the RADIUS Server always identifies itself to the client using a Certificate. The client has the option to ignore this certificate if it chooses, however the default is to verify it is a trusted certificate. In XP or Vista you can turn this checking off in the network settings by unchecking the box 'Validate server certificate'. In Windows Mobile there isn't a way of doing this in the GUI, however there is a registry tweak that can be set:
Code:
[HKEY_LOCAL_MACHINE\Comm\EAP\Extensions\25
ValidateServerCert=0
Setting the value to 1 means check the certificate, 0 means don't check it.
Also verify the Time & Date on your device is in sync with the RADIUS server as timing is critical with PKI.
Other than that I don't know what to suggest. I sucessfully use my Kaiser with (almost) stock 5.2.19212 ROM on two WPA2 networks, one using WPA2/AES with PEAP authentication and the other using WPA2/AES & EAP-TLS - both work fine.
One more thing, check the version of the 'TNETW1251.dll' file. There appears to be at least two floating around. I have version 3.55.0.0 in my ROM.
HTH
Andy
thanks for your advice!
i just flashed the new atheniOS win 6.5 and installed the secure w2 software and now it works! i dont know why or how though

Surfing Internet While connected to VPN

Hi,
I have set up my X1 to be able to connect to my company's VPN to retrieve my emails and stuff.
However, once connected, I will be be able to surf the internet anymore. Is there a setting which we can do like disabling 'Use Default Gateway on Remote Network' like our PCs?
Cheers!
Neo
It's not a bug, and it's not related to the mobile phone either. VPN access on any OS always disable the internet access. That's we call security
I faced this before,
i went to the network administrator and explained to him, and he fixed it!
not from my X1, it was a network configuration.
actually there are 2 ways to get the internet.
1st is through the VPN it self (you will use your company internet connection) your connection will be
X1 -> VPN -> Company -> internet Request -> Company -> VPN -> X1
2nd is through special config in their VPN routing things (i don't know what it's called really) so simply when you request the emails, the connection will be routed to VPN, otherwise it will be through your regular GPRS/EDGE/3G/HSDPA/WiFi
the 2nd option is the best (but i think it requires a newer hardware as it's a relativly new technolog) because it will not waste the company's internet bandwidth.
check with your network administrator, they can help
By the way, the BlueFire VPN client can optionnally allow internet access from your mobile directly to the internet
Thanks for the reply guys. I will tryyour suggestions!
Cheers!
I think its called split tunnel when internet traffic goes direct and intranet goes down vpn tunnel.
I had same problem with my laptop and xp, our company changed the policy and everything has to go through tunnel (split tunnel disabled). With an earlier version of the Cisco vpn client I could mess with the routing table to revert to split tunnel - You may be able to do this on the X1, change the routes somehow?
scote said:
I think its called split tunnel
Click to expand...
Click to collapse
Yes that's what i was talking about, Split Tunneling must be enabled
thanks scote for getting the right name
Yeah, Split Tunneling roxx
Can anybody help me configuring a Cisco ASA5505 to be able to get connected with my X1 over VPN? The PC-Clients are working, but it seems to be the same issue like they cant connect trough Windows builtin VPN client, only by using the one from Cisco (which is much better).
But i don't like to loose Security by setting lower policy settings for connecting without Cisco software.
Does anybody knows about the Cisco client for Windws Mobile? When i visited "Systems"-fair last year in Munich a Cisco employee told me they are working on it.
Could you maybe ask your administrator again and let us know how he did your option #2?
Anyone else know how to do split tunneling in Windows Mobile?
anaadoul said:
I faced this before,
i went to the network administrator and explained to him, and he fixed it!
not from my X1, it was a network configuration.
actually there are 2 ways to get the internet.
1st is through the VPN it self (you will use your company internet connection) your connection will be
X1 -> VPN -> Company -> internet Request -> Company -> VPN -> X1
2nd is through special config in their VPN routing things (i don't know what it's called really) so simply when you request the emails, the connection will be routed to VPN, otherwise it will be through your regular GPRS/EDGE/3G/HSDPA/WiFi
the 2nd option is the best (but i think it requires a newer hardware as it's a relativly new technolog) because it will not waste the company's internet bandwidth.
check with your network administrator, they can help
Click to expand...
Click to collapse
inrdog said:
Hi,
I have set up my X1 to be able to connect to my company's VPN to retrieve my emails and stuff.
However, once connected, I will be be able to surf the internet anymore. Is there a setting which we can do like disabling 'Use Default Gateway on Remote Network' like our PCs?
Cheers!
Neo
Click to expand...
Click to collapse
How did you do that? You using a default ROM and which setting you setup yr VPN from?

Wi-Fi and WPA secured wireless networks.

Hello to all diamond people,
We all know, there is huge issue with this great phone about Wi-Fi connections. While Wi-Fi is one of the reasons people choosed touch diamond, what is their disapointment when they find out wi-fi doesn't work as it should.
I am talking about problem I am experiencing by myself - I am unable to connect to my home WPA secured and encrypted network. If I turn the security off on my router and wireless network becomes open, there is no problem at all.
But who wants unsecured, open wireless network at home, so all the neighbours can download whatever they want through your network?
Nobody.
During my research throughout forums I have come accross many people, experiencing same problem, but was not able to find the solution to the problem, or what is causing it.
My aim is to gather as many information as possible to help to fix this problem, so everyone could use wi-fi on their own home WPA secured wireless network.
Any ideas?
What is your ROM and radio versions? I've no problem connecting to my WPA enabled network. Which WPA option did you choose? It must match the same WPA option on your router. There are WPA, WPA-PSK, WPA2, and WPA2-PSK, then there are also TKIP and AES to choose from. Try setting both Diamond and router to use WPA-PSK (TKIP) first, this should have the highest compatibility with other WPA supported devices on your network. And make sure you use a strong passphrase, you can use a WPA key generator.
Hey,
both router and HTC are set to WPA -PSK under TKIP encryption. I use my own network key.
The thing is, in wireless lan manager i can see htc does connect, but only for about a second, then it starts reconnecting all over again.
Sometimes it does connect and works for few minutes and sometimes it does connect to router, but not to the internet. It drives me absolutely mad.
I tried Advanced Config -> Network -> WPA authentication - enabled/disabled, but still experiencing problems.
I have heard there used to be issues with ROMs provided by the network operators, but that is not my case.
ROM: DIB Diamond v 1.33
RADIO: 1.00.25.05
WPA secured
Hey,
If You want to use WPA secured wireless networks with Diamond go to Settings-Wireless LAN-Power Mode and there set Power Save Mode to Best Performance. It works
Sorry for my English...
6sauer said:
Hey,
both router and HTC are set to WPA -PSK under TKIP encryption. I use my own network key.
The thing is, in wireless lan manager i can see htc does connect, but only for about a second, then it starts reconnecting all over again.
Sometimes it does connect and works for few minutes and sometimes it does connect to router, but not to the internet. It drives me absolutely mad.
I tried Advanced Config -> Network -> WPA authentication - enabled/disabled, but still experiencing problems.
I have heard there used to be issues with ROMs provided by the network operators, but that is not my case.
ROM: DIB Diamond v 1.33
RADIO: 1.00.25.05
Click to expand...
Click to collapse
I guess it's probably not your ROM, since the DIB Diamond v1.33 is based on the newer 2.03 ROM. I was wondering, do other devices on your network have the same issue or it's only the Diamond? Connection dropping can be many reasons, and one of them is the router itself.
Reddish said:
Hey,
If You want to use WPA secured wireless networks with Diamond go to Settings-Wireless LAN-Power Mode and there set Power Save Mode to Best Performance. It works
Sorry for my English...
Click to expand...
Click to collapse
I don't have any problem even in Power Save mode.
Somewhere I have come accross the information some routers (particullary Belkins) do have problem with windows mobile devices.
Today I wrote to Belkin Support, thay should reply in 72 hours mad, however we may know more.
Since I am using unsecured wireless network now, at least I have activated the MAC addresses lock - only allowed MAC addresses can connect to router now. What do you think, how secure is that? There is no encryption now, could someone see the sommunication between me and the router?
Which Belkin router are you using? Check if there is a firmware update, you may want to try that.
MAC address filtering should be ok for now, it can stop the majority of people who try to use your network, it will take someone with a bit more networking knowledge to gain access to your network, but most people don't have that knowledge.
Yes, people can capture any unencrypted packets and read them. But if you're connecting to a secure website through HTTPS or any other secure protocols, the packets are still unreadable. For example, in the browser, if it's written https instead of http on the address bar, those sites are secure. Most regular websites are not secure though.
I was having a similar problem on my Touch Pro a while back. My router is also set to WPA-PSK/TKIP. Although you said you tried it, the solution for me was indeed to go into Advanced Config > Network > WPA Authentication > Disabled. I then removed all previous wifi settings and then added them again, and it connected without a problem.
It could be that there's something else preventing your connection, but from what I can tell you should at least have that setting disabled.
6sauer said:
Somewhere I have come accross the information some routers (particullary Belkins) do have problem with windows mobile devices.
Today I wrote to Belkin Support, thay should reply in 72 hours mad, however we may know more.
Since I am using unsecured wireless network now, at least I have activated the MAC addresses lock - only allowed MAC addresses can connect to router now. What do you think, how secure is that? There is no encryption now, could someone see the sommunication between me and the router?
Click to expand...
Click to collapse
its pretty secure, as you cant guess the password, you would have to get in and add your device to the list (which you would need the username and password for)

Not working: 802.1X / WPA2 / PEAP TTLS MSCHAPV2

Hi,
I'm trying to connect to a WiFi network that is protected with WPA2 with PEAP / TTLS.
It simply is not working. No problems connecting with my HTC Desire though.
Anybody experiencing the same bug? I already installed the required root certificates, tried various combinations of user account / password. The thing is, that the network is provided by my university (Eduroam if you are familiar with that) and it is very annoying that I have to fall back to HSDPA consuming my data quota.
Cheers,
chross
Normally with eduroam wifi there isn't wpa2 or other key. Just connect your phone to it, open your browser and you will be redirect to the website of your university and then you can log with your id.
Envoyé depuis mon XT890
Yes!! This is the exact same problem I'm having with my university wifi
http://forum.xda-developers.com/showpost.php?p=33962871&postcount=2
I'd configure the settings on my uni wifi choosing PEAP and then MSCHAPV2 and put in my log in username and password according to the instruction and as soon as press connect or save it looses the signal immediately to very low and never connects. We also have eduroam as an alternative they tried that and same problem just doesn't want to connect.
It works perfect on my htc one x. I'm beginning to believe the phone has a bug.
It does have a bug. It doesn't connect to 802.11 n!
My problem was solved by reconfiguring my AVW Fritz!Box 7270 to 802.11 b+g only and limit the phones wifi frequency to 2,4ghz only. You can find that in advanced wifi configuration.
I'm lucky i only recognized this bug in my own wifi network and not others i don't have admin rights for...
eduroam works for me with PEAP/TTLS but I guess it's 802.11g
I'm on the 40002 rom, but worked also on the 31006
After receiving the 4.0.4 update yesterday, WiFi now works flawlessly.
Cheers,
chross
Hi there,
I got the same problem with my university network in hamburg. I updated the razor to android 4.0.4 (Stock-Rom: 81.5.40002.XT890.Retail.en.EU), also the phone is rooted but still not working. Our IT advices to use WPA2 Enterprise TTLS/PAP authenthication in combination with a t-com root certificate. Every time i safe these setting the wifi signal drops as told by previous posters and the connection fails. When i enter the settingspage again, all settings are reverted to default. This also happens, while trying to connect to eduroam
any further advices?
Thanks in advance!
I have no problems connecting to eduroam at Braunschweig and other citys. Maybe you can visit the IT Desk at your university?
jagwar1 said:
I have no problems connecting to eduroam at Braunschweig and other citys. Maybe you can visit the IT Desk at your university?
Click to expand...
Click to collapse
Yep, me and and a fellow student went there and told them about the problem. But they also gave up, after trying about an hour or so. It seems to be a general problem in the used android build, at least there are a lot of post reporting this at the google code repo -> code.google. com /p/android/issues/detail?id=15631 (sorry for that but I'm to new here to post links). I'll try the provided tips like changing the wpa_suplicant file tomorrow and report the results. Seems to be strange issue, if it works for you (and probably others), because a fellow student got the same Phone and has the same issues
Thought I'd just give an update as I have the same issue
Motorola knows about it, it's been reported to them before and said it'll be fixed with the next update.
Working smooth here with WPA2-Enterprise, PEAP and MSCHAPv2. Using it every day.
But I'm not using TTLS, you might want to disable that if you don't have a valid certificate for your mobile/user.
Also important, fill out the "anonymous user" field with your username. Depending on the RADIUS configuration of your IT this might be required.
[edit]
Just checked my mobile. I don't use a Phase 2 authentication, only EAP = PEAP, no certificates.
Got it working!
After 2 hours of searching the web and playing around, I got it working now, following this guide posted on google code repo:
Razr I (XT890), retail eu, running android 4.0.4 (stock), no root
after endless hours of trying i was able to connect to my university network a couple of minutes ago with the combination of two apps.
1. WiFi Connection Manager
Enter SSID manually
Security "802.1x EAP"
EAP Method "PEAP"
Phase 2 authentication "MSCHAPV2"
Identity "your identity"
Anonymous identity "your identity"
password "your password".
2. WiFi Advanced Configuration Editor
Check Hidden SSID
Key Management: unselect IEEE8021X, select WPA_EAP
AUTH Protocols: select LEAP
Enterprise configuration: make sure Identity and Anonymous Identity are set to your identity, Enter your password
check whether the settings are saved in WIFI Advanced Configuration Editor. If not switch of stock WiFi and repeat step 2 (!!!). Now it should work.
Turn WiFi on and connect to network (Stock WiFi; don't care about settings there, phase 2 authentification is still not saved)
After switching the device off and back on it did still work. Same when leaving and returning to WiFi area.
hopefully it will keep on working. i just tested the browser and play store. didn't discover any problems so far.
Click to expand...
Click to collapse
Connection is stable, but there seem to be some problems regarding to the speed. Whatever it's usable for stuff you do regularly @university.
Hope that helps others, thanks to klemens
hey.qb said:
Hope that helps others, thanks to klemens
Click to expand...
Click to collapse
Thank you for sharing, this made me so happy!
It's those two apps which made my connection possible.
My eduroam configuration is quite different, but the apps did the trick. I fiddled with advanced wifi config editor alone for hours without any result.
Now I just hammered the config into those two apps and what can I say - proxydroid reported a connection a few seconds later.
I dont't know what Moto's Problem with 802.1X is.
Defy latest stock rom - no connection. With CM -> no problem.
Milestone 2 with stock rom - no connection. With CM -> no Problem.
Rarz I no connection with stock wifi manager . . .
My fellow students with their samsung devices seem so have no problem at all. ^^
(even Win Mobile 6 works, thats a little bit depressing)
btw, speed is fine here. 16Mbit up&down is more than I need on a phone.
Greetings from Kiel.

Categories

Resources