PPTP VPN dialup won't connect

Forums › Spark New Zealand (including Skinny and BigPipe) › PPTP VPN dialup won't connect - APN setting?

Foiler

220 posts

Master Geek
+1 received by user: 10

#123359 4-Jul-2013 16:34

Is anyone else having difficulty connecting through their phone or with their phone to a PPTP VPN?

I have tried APN settings of wap.telecom.co.nz and internet.telecom.co.nz and direct.telecom.co.nz all to no avail.

nathan

5695 posts

Uber Geek
+1 received by user: 1630
Inactive user

#849352 4-Jul-2013 16:41

No. Did work previously and now stopped working?

Foiler

220 posts

Master Geek
+1 received by user: 10

#849355 4-Jul-2013 16:47

nathan: No. Did work previously and now stopped working?

Yes have used this often .. am wondering about local cellular connectivity so will try a different part of Auckland this evening.

ajobbins

5053 posts

Uber Geek
+1 received by user: 1279

Trusted

#849365 4-Jul-2013 17:17

What is the endpoint? Has anything changed there?

Eg. I did a software update on my DD-WRT router, and it broke the built in PPTP server.

Twitter: ajobbins

kyhwana2

2572 posts

Uber Geek
+1 received by user: 233

#849385 4-Jul-2013 19:20

(As an aside, unless you're doing SSL/TLS certs with EAP-TLS, PPTP is basically insecure and anyone who can sniff your packets and has $20 can decrypt your entire PPTP session either in real time or afterwards. See https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#849402 4-Jul-2013 20:22

I don't think PPTP will work via the WAP APN, using internet.telecom.co.nz should work.

But as others have said don't use PPTP, IPSEC or L2TP as PPTP is just insecure in this day and age, and probably easier to just have your network open to the world.

Foiler

220 posts

Master Geek
+1 received by user: 10

#849428 4-Jul-2013 22:38

I have now verified that the phone (Samsung Galaxy Y) can connect by itself to the PPTP.

However, have tested two different tethered PCs - both of which can otherwise connect to the PPTP over ADSL - but neither of them can connect over the tether. I tested this for both these APNs internet.telecom.co.nz and the supposedly un-firewalled direct.telecom.co.nz

The Windows dialer gets part way through the handshaking but hangs at the stage Verifying username and password (even if the wrong password is set). I figure this means a protocol (GRE) or port 1723 is blocked through the tether.

HP

Shop now for HP laptops and other devices (affiliate link).

jaidevp

331 posts

Ultimate Geek
+1 received by user: 58

Trusted

Spark NZ

#849445 5-Jul-2013 00:15

GRE is allowed on the direct and internet APNs. Will look into it and advise. Can you please PM me the numbers you were trying from so I can dig into some logs.

Foiler

220 posts

Master Geek
+1 received by user: 10

#858109 17-Jul-2013 16:01

I am pretty sure this is a phone issue. This phone is a Samsung Galaxy Y GT-S5360T and I suspect it does not allow PPTP pass through when connecting through the wireless hotspot.

I tested another phone GT-S5570 and oddly it consistently will allow connection to some PPTP VPN servers but not others.

I phoned Samsung and even though the question was elevated to Tier 3 support a week ago, they still don't seem to know the answer as to whether these phones support PPTP pass through.

I did find a blog referring to yet another Galaxy phone with the same problem.