Using another VPN Client

[masteraxe]

Is is possible to connect with another VPN client?

Hi have a VPN client on the Itouch and one on the Samsung Omnia Cell phone.

What would be the proper configurations other than the user name and password to get those client to connect? If even possible.

It's asking for cert. Key/pre-shared key... PPTP, IPSec...etc... i have no idea what is needed... but since HDAconnect3 is not available on Itouch or cell phone... it must use some type of connection settings that can be replicated by other client no?

[gmw]

The "out of the box" VPN with Amahi is OpenVPN -- so you will need an OpenVPN client.
There is an open source VPN option that you could use (OpenSwan) - but you'd likely have to be a networking guru to configure it on Amahi.

[masteraxe]

But that's what I don't get... maybe just me being too newbie in this server stuff but what is it that OpenVPN has that a regular VPN client provided already on these platform doesn't?

[gmw]

OK -- here's all I know. OpenVPN uses a different protocol (not IPsec, not PPTP, etc.)

[moredruid]

Well, usually the vpn server and the vpn client from 1 "vendor" work best together.
At work we have a Cisco VPN concentrator and lo and behold, our client is also a Cisco client. Other clients just don't work as well (except for vpnc, but you'll have to fiddle a bit).
Windows VPN server: use a Windows client, it'll work best.
OpenVPN server: use an OpenVPN client, it'll work best.

The "vendor" of the product has the most intimate knowledge on how his stuff works and will tweak both ends (server & client) so they will work as best as they can. It's really that simple.

That said, you _should_ (at least theoretically) be able to configure any client to connect to any server. You're pretty much on your own then though.

[masteraxe]

after some research, it does look like there's a no go on the Iphone/Itouch... however, the demand is out there... so maybe one day...

However I found something for mobile devices running Windows Mobile at:

http://www.zeroshell.net/eng/openvpn-cl ... ows-Mobile

I'll explore that ... hopefully will be able to log in with my cell phone.. that would be neat!

[gmw]

Depending on what you want to do, you can use OpenVPN ALS (in testing by the community).
http://sourceforge.net/projects/openvpn-als/

[masteraxe]

after some research, it does look like there's a no go on the Iphone/Itouch... however, the demand is out there... so maybe one day...

However I found something for mobile devices running Windows Mobile at:

http://www.zeroshell.net/eng/openvpn-cl ... ows-Mobile

I'll explore that ... hopefully will be able to log in with my cell phone.. that would be neat!

No luck... I'm running Windows Mobile 6.1 and the tool was originally designed for WM 5 (well on a Samsung Omnia anyway)

It will install no problem but the app doesn't come when you click on it... it doesn't bring up anything...

Oh well.. I'll update if I do find anything!

[masteraxe]

ok never mind...

I had to disable the widget and I got to see the app from the link I talked about earlier.

I've played around with it and manage to get it working on my cell phone.

What I did is copy the CA and homehda Security Certificate into the \Program Files\OpenVPN\config of my cell phone directory

I also copied the homehda.key into the same directory

(if you installed HDAconnect3 on a pc, these files are in the program directory... that's where I took them)

Then I had to modify the homeHDA.ovpn file (which you will also need to copy in the \Program Files\OpenVPN\config of the cell phone once updated as per below)

I updated with this:



remote youruser.yourhda.com 1194
client
nobind
dev tun
comp-lzo
verb 3
resolv-retry infinite
persist-key
persist-tun
auth-nocache
auth-user-pass

<ca>
copy all of the key between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----
<cert>
copy all of the key between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----



and that's it. ..
you can open the CA and Cert files with notepad to copy the code in the above <ca> and <cert>

Make to also include "-----BEGIN CERTIFICATE-----" and "-----BEGIN CERTIFICATE-----"

it will look like this but longer:

<ca>
-----BEGIN CERTIFICATE-----
MIIDcjuQ==
-----END CERTIFICATE-----

<cert>
-----BEGIN CERTIFICATE-----
MIIDvDCC58
-----END CERTIFICATE-----

Hope this helps anyone trying on Windows Mobile