Database Info

[Q] Advanced Routing?

The VPNC Widget in use by several here requires the use of advanced routing to maintain the VPN connection, otherwise it randomly will drop.
Question 1 - Are there any kernels currently available with advanced routing enabled? I have not been able to find any.
Question 2 - Are there advanced routing modules that can be loaded ad hoc?
Thanks in advance for the guidance.

When I was using Prime 2.1.1 on my TF101, I had no problems. Except the thing would regularly FC even if vpnc was still running, and it would disconnect after like X minutes of inactivity.
Sent from my Transformer Prime TF201 using Tapatalk

Spidey01 said:
...it would disconnect after like X minutes of inactivity.
Click to expand...
Click to collapse
The random disconnect issue is a result of not having advanced routing in the kernel, hence my request. Otherwise, VPNC Widget works perfectly for me.

I have not seen a ROM with advanced routing but it is not going to be an issue anymore. ICS has (among other things) a built-in support for old-style Cisco VPNs (XAuth) and the long-awaited update is being rolled out by Asus (currently in Asia only) => VPNC Widget won't be needed.

jpkx1984 said:
I have not seen a ROM with advanced routing but it is not going to be an issue anymore. ICS has (among other things) a built-in support for old-style Cisco VPNs (XAuth) and the long-awaited update is being rolled out by Asus (currently in Asia only) => VPNC Widget won't be needed.
Click to expand...
Click to collapse
I have tried accessing our corporate VPN on a Prime running ICS, it won't handle the group ID and password necessary, so VPNC will still be required for that.

dm36415 said:
I have tried accessing our corporate VPN on a Prime running ICS, it won't handle the group ID and password necessary, so VPNC will still be required for that.
Click to expand...
Click to collapse
My network uses group password as well and it works fine with ICS on my Galaxy Nexus. The VPN type has to be set to "IPSec Xauth PSK", "IPSec identifier" is actually a group name. You are asked for final user login/password during connection attempt.

jpkx1984 said:
My network uses group password as well and it works fine with ICS on my Galaxy Nexus. The VPN type has to be set to "IPSec Xauth PSK", "IPSec identifier" is actually a group name. You are asked for final user login/password during connection attempt.
Click to expand...
Click to collapse
Thanks for the tip, I'll check it out.

Hello
I'm having some problems with Connecting to my works VPN with my TF101 which just got the ICS update this morning.
I set it all up just like I used to with my Xoom (running ICS) and just how I do with my Galaxy Nexus, those all work fine, but with my Transformer when I click on the VPN thing to connect, it connects, however when I look at it's info, I can see that nothing is being sent or received.
When I try to remote into my comptuers I can't, when I try to access the intraweb I can't.
So I really don't know if this is something I'm doing wrong (although I'm doing exactly what I have done before on other devices) or if it's something wrong with the TF101.
I'm not rooted currently and I got the update over the air.
Thanks, and I'm sorry if I am posting this in the wrong place.

dm36415 said:
Thanks for the tip, I'll check it out.
Click to expand...
Click to collapse
I upgraded to ICS this morning and tried it, unfortunately it again just timed out.

vpn / ics

Ok, maybe it is not related to ics. After installing ics, I lost my vnp connection for the office (maybe because I was not using any lock screen before) I have re-entered my vpn, but now I always get a "timeout" when I try to connect Do any of you who are using vpn's connection also have this issues, or maybe I have something wrong in my vpn settings ?

Anyone with stock firmware ics can confirm vpn is still working ?

Working fine for me, might be your specific vpn?
Sent from my Transformer TF101 using xda premium

Ok thanks. I'll make sure with the technicien here that everything is ok on their side

I had the same problem...the vpn connection settings were erased after ics update.
I created the connection one more time but didn't worked. I deleted that connection also and created another one...with the same details and worked.

Can confirm this issue also. After creating a new connection vpn works like a charm.

L2TP/IPSec PSK vpn is broken for me after upgrade to ICS. Seems to be a known problem with ICS. My colleague's Transformer Prime with ICS also not working with same type of VPN. It was working great with Honeycomb 3.2.1 before upgrade on both devices. I use the tablet for work extensively so this kind of sucks. Everything else is great.
Have a B90 TF101 so can't easily downgrade!

So is it an accurate assessment that L2 VPNs still do not work on ICS, such as solutions from Cisco and Juniper? We had to setup a special L2TP/IPSec PSK for just Android devices, whereas iDevices work just fine with industry standard SSL VPNs. Amazing that Google can't get on board with this. Wondering too if the Exchange cert issues still persist with the default mail client.

Yes. We setup L2TP/IPSec with PSK on a SonicWall firewall that works for both the iDevices and our Android devices. All android devices that upgraded to ICS stopped working. Will try to connect but will timeout trying to establish connection. I can't confirm all other L2TP VPN types but PSK is definitely not functioning.
We've never had any issues with Exchange push on the devices.

I can confirm it.
Today we have tested furthermore.
Everything is ok on the server side and on the client side.
Looking at the firewall, we can see the tf101 establishing a connection, but nothing about phase 2, it's like the server is giving the acknowledge about the PSK, but the TF101 can't hear or is not listening to it.. eventually it goes out with a timeout.
Everything was ok before ics.
where should i post this message, is it enough to be listed here or should a send a support mail to asus ? or google ?
by the way I've tried deleting and recreating, but still not working.

I formatted before and after ics. I would suggest a format first.
Sent from my GT-I9100 using xda premium

is there a solusion for not using a secure lock while using vpn on ics?
Sent from my HTC Sensation Z710e using xda premium

I've done a factory reset too, still the same problem

Alternative Solution
Hello,
This isnt a fix by any means but have you had a look at 2X Application XG Server, it is a little like citrix but a hell of a lot cheaper.
The client is awesome and works perfectly for windows, android and iOS.
It is free if you have a low count of concurrent users, I believe it is 5 concurrent users for free, anyway the link is below;
cant post links guys sorry it is 2x with www and .com in between...
If you need a hand with deployment drop me an email at [email protected] and we can sort something out, not doing the big sell here guys just something we use as a company when we decided to move our customers away from VPN's.
Anyway hope someone finds it useful.
cheers.

Don't know if this will help but i use vpnc widget and 2x client. My system is all cisco, and the only way i could get to it before was with an ipad, which i have since given away for obvious reasons. I have been on revolver for some time now, and just upgraded to 4, with no issues whatsoever - if anything it is more stable!

Works for me, too, but I sure would like to know if anyone has figured out how to disable the screen-lock when credential storage is enabled, as I am using mine for an individual OpenVPN and PPTP vpn and it is just plain irritating.

i've sent technical inquiries to Asus with no response. Very disappointing. I guess they are fixing other issues that have a more broad base of users before they take on things like VPN. I believe this is a general ICS issue as a quick search on Google shows varies reports across different manufacturers who have released ICS and the L2TP VPNs are broken. Several bug reports have been reported to Google. Great way for Google to alienate business users.
Do a Google search with these terms and you see all the references to this problem
"L2TP IPSEC PSK android ics"

I was wondering if anyone out there was using an IPSec Xauth PSK type connection? This is what we have at work. I set up the connection on my TF101, I put in all the correct info, and when I clicked connect it connected; however, there was no data sent or received. I disconnect and try reconnecting, but the connection times out. Before the ICS update I didn't even have this connection option so its a step in the right direction, the only problem is that nothing happens when I connect. Is anyone else having the same problem? Is this a known issue? Thanks in advance for any help you can offer.

x_kain_x said:
I was wondering if anyone out there was using an IPSec Xauth PSK type connection? This is what we have at work. I set up the connection on my TF101, I put in all the correct info, and when I clicked connect it connected; however, there was no data sent or received. I disconnect and try reconnecting, but the connection times out. Before the ICS update I didn't even have this connection option so its a step in the right direction, the only problem is that nothing happens when I connect. Is anyone else having the same problem? Is this a known issue? Thanks in advance for any help you can offer.
Click to expand...
Click to collapse
Works great here. I use the vpnc widget and x2 client as well works a treat since ics update.

vettejock99 said:
Works for me, too, but I sure would like to know if anyone has figured out how to disable the screen-lock when credential storage is enabled, as I am using mine for an individual OpenVPN and PPTP vpn and it is just plain irritating.
Click to expand...
Click to collapse
Grrr... indeed. But I've foud a free app on Market: VpnROOT - PPTP - Manager
karlr30 said:
I've done a factory reset too, still the same problem
Click to expand...
Click to collapse
+1
Edit: Hummm... for me I've found a temporary solution by using another app found on Market: "VpnROOT - PPTP - Manager".
My VPN use PPTP with MPPE encryption so, this one works fine for me.

L2TP/IPsec VPN Failure

Hello all, I've just got a SM-G920F, Android 5.1.1 (kernel 3.10.61-5012324), and I am experiencing a problem with VPN connect to a Linux box that is running libreswan. This box works wonders with an iphone 5 and a Nexus 7. With the S6 i can track the pluto activity on the server and phase 1 and 2 correctly done, but after the IP assignment the l2tpd never gets called, and after a while the phone signals connection failed. Any idea about this beahviour? Suggestions about what to analyze in logcat ?
regards
Mat

Hi Matt,
I am running a SM-G925F, Android 5.1.1 (kernel 3.10.61-5012324) - the same as you, and having the same problems.
I cannot connect to a Draytek 2925 running a VPN server. Again still able to connect happily to same sever using say an SM-G900F running 5.0 - very weird. Seems to be failing as you point out at phase 2 before / after the IP assignment.
Anyone else seeing same problems with 5.1.1 and L2TP/Ipsec?

new update with new Kernel build, still VPN not working... Samsung, WAKE UP!!! (3.10.61-5599585)

Have you tried a different VPN client?

krelvinaz said:
Have you tried a different VPN client?
Click to expand...
Click to collapse
open VPN works but I was trying to have the native l2tp ipsec working
maXTeo said:
new update with new Kernel build, still VPN not working... Samsung, WAKE UP!!! (3.10.61-5599585)
Click to expand...
Click to collapse
Inviato dal mio SM-G920F utilizzando Tapatalk

[Q] L2TP/IPSEC VPN never connects.

Has anyone got an L2TP/IPSEC vpn connecting on the s7 at all?
Everything I try just results in a failed attempt to connect, however, if I try the exact same connection settings on my N4 running 5.1.1 then it connects first time every time.

did you manage to get this to work ?
L2TP/IPSEC PSK here and not able to connect via S7 but does fine with my Windows 8 laptop. OpenVPN works on S7 though

Nope, not at all.
Marshmallow fails totally still. Did find a google link which suggests it is an OS issue.
https://code.google.com/p/android/issues/detail?id=196939

Trixster101 said:
Nope, not at all.
Marshmallow fails totally still. Did find a google link which suggests it is an OS issue.
https://code.google.com/p/android/issues/detail?id=196939
Click to expand...
Click to collapse
thanks for that https://code.google.com/p/android/issues/detail?id=196939#c70
I have found a work around. If you can force your VPN server (assuming you
are in control of it the way I am with mine), and can force it to use SHA1
instead of SHA2 then it works. It seems the version of SHA2-256 that
Android 6.x.x is using is an older draft specification and the one
implemented in many other IPsec implementations uses the official SHA2-256
implementation with the correct padding and whatever else.
Has anyone else tried this? I have it set on my server and works with both
new and old Android. Though I am not fond of having to intentionally
weaken my security strength by having to run an older hash algorithm but
considering we can't use Diffie Hellman group larger than 1024 bits anyhow,
seems like a moot point.
Sly
Click to expand...
Click to collapse
and https://code.google.com/p/android/issues/detail?id=196939#c35
In your ipsec.conf file you should add three additions,
add ,aes256-sha2_256 to both ike= and phase2alg=
Then add a newline with sha2-truncbug=yes
reload ipsec
You should now be able to connect to your VPN. I've tested it on my Nexus 5x now, and works like a charm!
Click to expand...
Click to collapse

I had a problem too connecting it to my Synology DS214+ L2PT/Ipsec. I got it by removing my capital letters in my password and after I was able to connect. I don't know the capital character was the problem but now it's working for me.

I am trying to set up a L2PT/IPSec VPN profile for my S7 running on Superman Rom (Android 6.0.1) but always when I connect to the VPN, it says "Unfortunatelly System UI has stopped" and the phone then crashes. Not sure, if this is Custom-ROM specific error, OS-specific error or something else.. Somebody too experiences this problem? Any solutions/ideas, how I can get the VPN connection work? Maybe there are some apps, capable of doing this (I found none capable of L2PT)?

blaukraut said:
I am trying to set up a L2PT/IPSec VPN profile for my S7 running on Superman Rom (Android 6.0.1) but always when I connect to the VPN, it says "Unfortunatelly System UI has stopped" and the phone then crashes. Not sure, if this is Custom-ROM specific error, OS-specific error or something else.. Somebody too experiences this problem? Any solutions/ideas, how I can get the VPN connection work? Maybe there are some apps, capable of doing this (I found none capable of L2PT)?
Click to expand...
Click to collapse
I have same problem with NOBLE rom did you fix it?

No. I then recognized that my VPN provider also supports the VPN connection via Cisco AnyConnect (also for Android), which was very simple and straight forward.

Problem with facebook & instagram using wifi in Android Pie

Hello,
Since I updated to Android Pie, first I had the stable version and now beta4, with wifi the app of facebook and instagram don't charge (it says "couldn`t refresh feed"). Instead using 4G they work OK.
I'm root and I think the problem appears when I installed magisk.
someone with the same problem?

1. Why are you using the FB app? It's crap and a battery hog. Just use a browser, request desktop and Bob's your Uncle.
2. If you're on Pie, you will have to most likely wait until the developers update the app to work with Pie correctly. I wouldn't hold my breath for that to happen since they couldn't get their apps to work correctly in the past.

Instagram has no issues here.
What about your router tho?did you try on other routers aswell ? Same result?

whizeguy said:
Instagram has no issues here.
What about your router tho?did you try on other routers aswell ? Same result?
Click to expand...
Click to collapse
Yes, I have tried with other routers and remains the same problem.
Its rare, like the router cancels the connection for a certain type of app.

disable the firewall of your router and try