|
Posted by Hal Rottenberg on December 1, 2005, 2:39 pm
Please log in for more thread options
At my company we have some stupid VPN that when connected, you are disallowed
from changing the network routing tables or enabling/disabling network
adapters. They do this to prevent someone from bridging the WAN to the
Internet, which is good, but but its annoying all the same. At least it was
"just annoying" in the past.
Well guess what, the new AS4 scheme of using this RNDIS network adapter
basically means I cannot connect to the VPN to retrieve my Exchange server
data, and then sync that data to my PDA. The instant I connect or disconnect
the USB cable, VPN drops. I tried to connect PDA first, then dialup the VPN
but then what happens is that the activesync connection disconnects when the
VPN starts.
Can anyone think of a workaround? I tried the stuff mentioned in the AS4
troubleshooting guide where it talks about VPNs but this is not applicable to
mine because there is not an extra...whatever to uncheck in the RNDIS driver.
I can uncheck MS client or TCP/IP but that breaks sync. The VPN has its
own virtual network adapter, it does not seem to work the same way as what
the MS article is referring to.
I don't know what kind of VPN we have, it seems to be a blend of PPTP and
some custom stuff.
|
|
Posted by Carl Wolz [MSFT] on December 1, 2005, 9:15 pm
Please log in for more thread options
It probably doesn't like the fact that the RNDIS interface updates the
routing table.
The solution is to enable split-tunneling on the VPN. There is a workaround.
If you connect via Bluetooth or IR, it will fly under the radar of the VPN
software.
--
Carl Wolz [MSFT]
This Posting is provided "AS IS" with no warranties, and confers no rights.
show/hide quoted text
> At my company we have some stupid VPN that when connected, you are
> disallowed
> from changing the network routing tables or enabling/disabling network
> adapters. They do this to prevent someone from bridging the WAN to the
> Internet, which is good, but but its annoying all the same. At least it
> was
> "just annoying" in the past.
> Well guess what, the new AS4 scheme of using this RNDIS network adapter
> basically means I cannot connect to the VPN to retrieve my Exchange server
> data, and then sync that data to my PDA. The instant I connect or
> disconnect
> the USB cable, VPN drops. I tried to connect PDA first, then dialup the
> VPN
> but then what happens is that the activesync connection disconnects when
> the
> VPN starts.
> Can anyone think of a workaround? I tried the stuff mentioned in the AS4
> troubleshooting guide where it talks about VPNs but this is not applicable
> to
> mine because there is not an extra...whatever to uncheck in the RNDIS
> driver.
> I can uncheck MS client or TCP/IP but that breaks sync. The VPN has its
> own virtual network adapter, it does not seem to work the same way as what
> the MS article is referring to.
> I don't know what kind of VPN we have, it seems to be a blend of PPTP and
> some custom stuff.
|
|
Posted by Chris De Herrera on December 2, 2005, 12:51 am
Please log in for more thread options Hi,
Some companies setup rules that do not allow split-tunneling. In order to
enable the split-tunneling on the VPN, you may need to contact your network
administrator.
Sincerely,
--
Chris De Herrera
http://www.pocketpcfaq.com http://www.tabletpctalk.com http://www.pocketpctalk.com http://www.mobilitytalk.com
show/hide quoted text
> It probably doesn't like the fact that the RNDIS interface updates the
> routing table.
> The solution is to enable split-tunneling on the VPN. There is a
> workaround. If you connect via Bluetooth or IR, it will fly under the
> radar of the VPN software.
> --
> Carl Wolz [MSFT]
> This Posting is provided "AS IS" with no warranties, and confers no
> rights.
>> At my company we have some stupid VPN that when connected, you are
>> disallowed
>> from changing the network routing tables or enabling/disabling network
>> adapters. They do this to prevent someone from bridging the WAN to the
>> Internet, which is good, but but its annoying all the same. At least it
>> was
>> "just annoying" in the past.
>> Well guess what, the new AS4 scheme of using this RNDIS network adapter
>> basically means I cannot connect to the VPN to retrieve my Exchange
>> server
>> data, and then sync that data to my PDA. The instant I connect or
>> disconnect
>> the USB cable, VPN drops. I tried to connect PDA first, then dialup the
>> VPN
>> but then what happens is that the activesync connection disconnects when
>> the
>> VPN starts.
>> Can anyone think of a workaround? I tried the stuff mentioned in the AS4
>> troubleshooting guide where it talks about VPNs but this is not
>> applicable to
>> mine because there is not an extra...whatever to uncheck in the RNDIS
>> driver.
>> I can uncheck MS client or TCP/IP but that breaks sync. The VPN has its
>> own virtual network adapter, it does not seem to work the same way as
>> what
>> the MS article is referring to.
>> I don't know what kind of VPN we have, it seems to be a blend of PPTP and
>> some custom stuff.
>
|
|
Posted by Shane on April 18, 2006, 7:09 am
Please log in for more thread options The problem with this response "Talk to you Administrator to enable split
tunnelling" is that split tunnelling is used for a very good reason, and that
is to ensure the PC out of the office can't become an unwilling gateway into
the private network. Most organisations should have this as default unless
they have a very good reason not to (such as local servers/printers).
The problem is NOT split tunnelling, it is Microsoft changing the way the
WM5 syncs with a PC over USB vs. how every previous version of
PocketPC/Windows Mobile has connected.
Microsoft NEEDs to give us another way to USB sync that does not screw
around with the TCP/IP Network Adapters so that people like me who work alot
out of the office can sync using fast USB vs. slow Bluetooth.
I am sure they could have done somthing other than making it a network
device. How about bringing the damn thing up as a Mass Storage Device that is
encrypted? That would have worked better, would allow us to put files on and
off it easier and would get around all of this crap WM5 has introduced in the
name of "progress".
Come on Microsoft - fix your product, stop blaming everyone elses.
Regards,
Shane.
"Chris De Herrera" wrote:
show/hide quoted text
> Hi,
> Some companies setup rules that do not allow split-tunneling. In order to
> enable the split-tunneling on the VPN, you may need to contact your network
> administrator.
>
> Sincerely,
> --
> Chris De Herrera
> http://www.pocketpcfaq.com
> http://www.tabletpctalk.com
> http://www.pocketpctalk.com
> http://www.mobilitytalk.com
>
> > It probably doesn't like the fact that the RNDIS interface updates the
> > routing table.
> > The solution is to enable split-tunneling on the VPN. There is a
> > workaround. If you connect via Bluetooth or IR, it will fly under the
> > radar of the VPN software.
> > --
> > Carl Wolz [MSFT]
> > This Posting is provided "AS IS" with no warranties, and confers no
> > rights.
> >> At my company we have some stupid VPN that when connected, you are
> >> disallowed
> >> from changing the network routing tables or enabling/disabling network
> >> adapters. They do this to prevent someone from bridging the WAN to the
> >> Internet, which is good, but but its annoying all the same. At least it
> >> was
> >> "just annoying" in the past.
> >> Well guess what, the new AS4 scheme of using this RNDIS network adapter
> >> basically means I cannot connect to the VPN to retrieve my Exchange
> >> server
> >> data, and then sync that data to my PDA. The instant I connect or
> >> disconnect
> >> the USB cable, VPN drops. I tried to connect PDA first, then dialup the
> >> VPN
> >> but then what happens is that the activesync connection disconnects when
> >> the
> >> VPN starts.
> >> Can anyone think of a workaround? I tried the stuff mentioned in the AS4
> >> troubleshooting guide where it talks about VPNs but this is not
> >> applicable to
> >> mine because there is not an extra...whatever to uncheck in the RNDIS
> >> driver.
> >> I can uncheck MS client or TCP/IP but that breaks sync. The VPN has its
> >> own virtual network adapter, it does not seem to work the same way as
> >> what
> >> the MS article is referring to.
> >> I don't know what kind of VPN we have, it seems to be a blend of PPTP and
> >> some custom stuff.
> >
>
>
>
|
|
Posted by Chris De Herrera on April 18, 2006, 2:03 pm
Please log in for more thread options Hi,
I agree that administrators do not allow split tunneling to prevent the PC
from being used as a router. However Microsoft chose to implement
ActiveSync as a network connection so there is no option to avoid it.
At this point all Windows CE, Handheld PC, Pocket PC and Smartphone devices
have ALWAYS connected via TCP/IP and it has caused problems to varying
degrees with networking. I do not see this changing anytime soon even
though there has been many documented issues with ActiveSync.
--
Chris De Herrera
http://www.pocketpcfaq.com http://www.tabletpctalk.com http://www.pocketpctalk.com http://www.mobilitytalk.com
ActiveSync 4.x Troubleshooting Guide -
http://www.pocketpcfaq.com/faqs/activesync/tshoot-as4x.htm
show/hide quoted text
> The problem with this response "Talk to you Administrator to enable split
> tunnelling" is that split tunnelling is used for a very good reason, and
> that
> is to ensure the PC out of the office can't become an unwilling gateway
> into
> the private network. Most organisations should have this as default unless
> they have a very good reason not to (such as local servers/printers).
> The problem is NOT split tunnelling, it is Microsoft changing the way the
> WM5 syncs with a PC over USB vs. how every previous version of
> PocketPC/Windows Mobile has connected.
> Microsoft NEEDs to give us another way to USB sync that does not screw
> around with the TCP/IP Network Adapters so that people like me who work
> alot
> out of the office can sync using fast USB vs. slow Bluetooth.
> I am sure they could have done somthing other than making it a network
> device. How about bringing the damn thing up as a Mass Storage Device that
> is
> encrypted? That would have worked better, would allow us to put files on
> and
> off it easier and would get around all of this crap WM5 has introduced in
> the
> name of "progress".
> Come on Microsoft - fix your product, stop blaming everyone elses.
> Regards,
> Shane.
> "Chris De Herrera" wrote:
>> Hi,
>> Some companies setup rules that do not allow split-tunneling. In order
>> to
>> enable the split-tunneling on the VPN, you may need to contact your
>> network
>> administrator.
>> Sincerely,
>> --
>> Chris De Herrera
>> http://www.pocketpcfaq.com
>> http://www.tabletpctalk.com
>> http://www.pocketpctalk.com
>> http://www.mobilitytalk.com
>> > It probably doesn't like the fact that the RNDIS interface updates the
>> > routing table.
>> > The solution is to enable split-tunneling on the VPN. There is a
>> > workaround. If you connect via Bluetooth or IR, it will fly under the
>> > radar of the VPN software.
>> > --
>> > Carl Wolz [MSFT]
>> > This Posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >> At my company we have some stupid VPN that when connected, you are
>> >> disallowed
>> >> from changing the network routing tables or enabling/disabling network
>> >> adapters. They do this to prevent someone from bridging the WAN to
>> >> the
>> >> Internet, which is good, but but its annoying all the same. At least
>> >> it
>> >> was
>> >> "just annoying" in the past.
>> >> Well guess what, the new AS4 scheme of using this RNDIS network
>> >> adapter
>> >> basically means I cannot connect to the VPN to retrieve my Exchange
>> >> server
>> >> data, and then sync that data to my PDA. The instant I connect or
>> >> disconnect
>> >> the USB cable, VPN drops. I tried to connect PDA first, then dialup
>> >> the
>> >> VPN
>> >> but then what happens is that the activesync connection disconnects
>> >> when
>> >> the
>> >> VPN starts.
>> >> Can anyone think of a workaround? I tried the stuff mentioned in the
>> >> AS4
>> >> troubleshooting guide where it talks about VPNs but this is not
>> >> applicable to
>> >> mine because there is not an extra...whatever to uncheck in the RNDIS
>> >> driver.
>> >> I can uncheck MS client or TCP/IP but that breaks sync. The VPN has
>> >> its
>> >> own virtual network adapter, it does not seem to work the same way as
>> >> what
>> >> the MS article is referring to.
>> >> I don't know what kind of VPN we have, it seems to be a blend of PPTP
>> >> and
>> >> some custom stuff.
>>
|
| Similar Threads | Posted | | ActiveSync 3-4 second connection then drop... | January 28, 2006, 11:19 am |
| Active Sync Connection disrupts WIFI connection | May 27, 2006, 12:44 am |
| AS connection causes device's wifi connection to break | November 22, 2006, 10:15 am |
| USB connection closes my wireless connection | July 6, 2006, 9:43 am |
| Mio 168 - no connection | April 1, 2007, 12:32 pm |
| Connection | June 4, 2007, 8:03 am |
| TCP/IP Connection over ActiveSync | August 10, 2005, 4:43 am |
| Losing Connection | August 13, 2005, 1:16 am |
| USB connection for Ipaq | August 16, 2005, 4:07 am |
| connection problem | September 9, 2005, 3:31 am |
|
> disallowed
> from changing the network routing tables or enabling/disabling network
> adapters. They do this to prevent someone from bridging the WAN to the
> Internet, which is good, but but its annoying all the same. At least it
> was
> "just annoying" in the past.
> Well guess what, the new AS4 scheme of using this RNDIS network adapter
> basically means I cannot connect to the VPN to retrieve my Exchange server
> data, and then sync that data to my PDA. The instant I connect or
> disconnect
> the USB cable, VPN drops. I tried to connect PDA first, then dialup the
> VPN
> but then what happens is that the activesync connection disconnects when
> the
> VPN starts.
> Can anyone think of a workaround? I tried the stuff mentioned in the AS4
> troubleshooting guide where it talks about VPNs but this is not applicable
> to
> mine because there is not an extra...whatever to uncheck in the RNDIS
> driver.
> I can uncheck MS client or TCP/IP but that breaks sync. The VPN has its
> own virtual network adapter, it does not seem to work the same way as what
> the MS article is referring to.
> I don't know what kind of VPN we have, it seems to be a blend of PPTP and
> some custom stuff.