Read-only archive of the All About Symbian forum (2001–2013) · About this archive

VPN on 9500

25 replies · 14,417 views · Started 21 November 2004

Hi Guys,
I'm trying to connect to my local VPN at my university. We have some Cisco Concentrator 3000 here, which the 9500 is supposed to support. The problem is, that my 9500 wants to have some kind of policy server. It looks like this server pushes the settings to the client. Now, I know the required setting, but I don't have access to those policy servers nor do I have some kind of .SIS file with those in it. Is there a way to create this .SIS file with the required settings in it and transfer it to the 9500? Or will the 9500 only work with some kind of BS Nokia VPN solution? Are there any tools to set those settings?

Greets,

Risotto

I really need help on this. How do you guys connect to your VPN networks? WLAN without VPN is not so cool!

Whomever manages the VPN gateway(s) at your University also needs to have set up the [VPN] policy management server, I suppose.

It should be part of the Nokia VPN gateway products, at least (when it comes to Cisco, ask Cisco or have your network admins ask them, or Nokia).

The Nokia VPN gateway product page:
http://www.nokia.com/nokia/0,,43323,00.html

Hai risotto,

Have you managed to make a connection with the university. Because at my university we also use cisco 3000 and I have no idea how to make a connection.

Thanks in advance.

whistler wrote:Hai risotto,

Have you managed to make a connection with the university. Because at my university we also use cisco 3000 and I have no idea how to make a connection.

Thanks in advance.

No, I'm still very clueless. I have also been manageing VPN servers and routers, but I have never seen anything like a policy server. This must be some Nokia gadget which only comes with their VPN gateways. Still, the Communicator 9500 is claimed to be compatible with the Cisco Concentrator series. But I haven't found any clue on how to configure susch a gateway without a policy server nor could I find a vpn client software which would clearly state that it works with the Cisco gateway. Still they claim it is compatible: http://www.nokia.com/nokia/0,,54108,00.html. AFAIK there is no policy server for those Cisco series.

Risotto wrote:Of course, that's the client we're talking about... 😞

I've try to see how to use the VPN but I don't understand. I tied to call Nokia Careline but they don't know anything

Hi,

I just tried to find out what happens when a "Policy Server" ist beeing connected. Seems like a HTTP request for an object named http://<name of policy server>/nssm/acu is made. Obvoiusly that ist a proprietary method of Checkpoint VPN-1 to configure its VPN Clients.

Does anyone have an example how to specify the VPN setings in that file?
Can I simply set up a webserver serving out that file?
(How) is it password protected?

Regards, Christian

Hi

I managed to get some info about the problem described. As you can see, there
is no settings in the client itself and to get these settings you have to have a certain Nokia product (Nokia Security Service Manager) in your organization to distribute the policies. So no Cisco or Checkpoint can't be used without extra components. Nice, isn't it?

PSa911 wrote:Hi

I managed to get some info about the problem described. As you can see, there
is no settings in the client itself and to get these settings you have to have a certain Nokia product (Nokia Security Service Manager) in your organization to distribute the policies. So no Cisco or Checkpoint can't be used without extra components. Nice, isn't it?

Yeah, I found that too. Maybe there is a way to simulate one of those settings files. It looks like they are delivered by a simple webserver as an ordinary file. If someone manages to get the format of those files we might be able to create the configurations by hand and send them to our Communicators via an ordinary webserver. Has anyone any hints on these kind of policy files? Is there anyone having access to such a nokia firewall? It would be great if there was a way to configure the vpn client. I know for sure that the client will work with a cisco concentrator, given the settings are provided by a policy server.

francois8500 wrote:I've try to see how to use the VPN but I don't understand. I tied to call Nokia Careline but they don't know anything

If you called the careline I am not surprised, its not their job to answer your questions on VPN. If you want to use the VPN client you need to speak with your university, they will have the information you need. Once you have that, call the Careline and ask for help putting it into the 9500, they will transfer you to technical support who can help. But, they will only help you enter it if you get stuck, its not their job to know what information you need to put in.....

karym6 wrote:If you called the careline I am not surprised, its not their job to answer your questions on VPN. If you want to use the VPN client you need to speak with your university, they will have the information you need. Once you have that, call the Careline and ask for help putting it into the 9500, they will transfer you to technical support who can help. But, they will only help you enter it if you get stuck, its not their job to know what information you need to put in.....

You're out of line. The discussion here is not on how to "enter" the right settings. Also, I wouldn't have to ask my university for the "right" settings, since I have them already. But it looks like you didn't care to read the other posts... The point is that there is simply no way to enter them. It doesn't take a rocket scientist (nokia careline) to recognize that fact. Mere technically educated users will do as well.

The discussions here is on how to make the communicator get the right policy settings and on how such a policy server could be simulated without having to buy a nokia vpn gateway (this is no option for a mere user). Also mind, that the university will not buy such a costly gateway just for a few students crazy about the 9500.

It's about "hacking" in the right settings even if nokia doesn't want the users to do this! Probably the discussions is way too technical for you to help us on this topic. Please spare us the usual marketing/careline responses, thanks!

Yet another fact is, that nokia claims this device is compatible with cisco concentrators (this was one of the main reasons I bought this device in the first place!). Indeed it is, there is simply no way to put the settings in without that nokia security manager thing which was mentioned in an earlier post (and this is the main reason why I nearly feel cheated by nokia for not holding their sales promises). I would really appreciate an answer which could take us a little further on this topic. But please don't waste my time with those "behave-like-a-joe-average-customer-and-call-support" answers. I wouldn't start a discussion here if it were that simple!

Risotto wrote:You're out of line. The discussion here is not on how to "enter" the right settings. Also, I wouldn't have to ask my university for the "right" settings, since I have them already. But it looks like you didn't care to read the other posts... The point is that there is simply no way to enter them. It doesn't take a rocket scientist (nokia careline) to recognize that fact. Mere technically educated users will do as well.

The discussions here is on how to make the communicator get the right policy settings and on how such a policy server could be simulated without having to buy a nokia vpn gateway (this is no option for a mere user). Also mind, that the university will not buy such a costly gateway just for a few students crazy about the 9500.

It's about "hacking" in the right settings even if nokia doesn't want the users to do this! Probably the discussions is way too technical for you to help us on this topic. Please spare us the usual marketing/careline responses, thanks!

Yet another fact is, that nokia claims this device is compatible with cisco concentrators (this was one of the main reasons I bought this device in the first place!). Indeed it is, there is simply no way to put the settings in without that nokia security manager thing which was mentioned in an earlier post (and this is the main reason why I nearly feel cheated by nokia for not holding their sales promises). I would really appreciate an answer which could take us a little further on this topic. But please don't waste my time with those "behave-like-a-joe-average-customer-and-call-support" answers. I wouldn't start a discussion here if it were that simple!

Wow,I didnt know i was speaking with the intellectual elite. So your uni has a vpn system that wont work with the 9500, which i expect it the consumer version . who do you think should help you out? uni who provide the vpn or nokia who are trying to make money? have you considered using a different vpn client to the nokia one? oh of course you have coz ur so god damn smart.

@karmy6

there are posts here and at www.9500communicator.com and at www.my-symbina.com about the problems in using the VPN capability of the Nokia 9500 - I have not yet seen a single post from someone who has managed to utilise this facility. This does not appear to be a simple problem. Hopefully somone with time & resources will discover how to make the VPN work or a third-party will provide a 9500 solution (as is available for UIQ smartphones).

jah wrote:@karmy6

there are posts here and at www.9500communicator.com and at www.my-symbina.com about the problems in using the VPN capability of the Nokia 9500 - I have not yet seen a single post from someone who has managed to utilise this facility. This does not appear to be a simple problem. Hopefully somone with time & resources will discover how to make the VPN work or a third-party will provide a 9500 solution (as is available for UIQ smartphones).

If its any consolation I have seen it working with a Nokia VPN soloution. WHy doesnt someone try a different VPN client if your having trouble using the Nokia one, after all it is designed for use in Nokia's soloution. You simply cannot get around the policy server, due to the way Nokia implemented its client on the phone, try a different vpn client app.

It is misleading for Nokia to claim the 9500 supports VPN. It doesn't. It supports a special Nokia product which is also uses the acronym VPN. This almost rises to the level of fraud.

Consumers already have a distinct impression as to what VPN is, and it is wrong for Nokia to make up another system and also call it VPN.

It would be like Nokia claiming that the 9500 has a built in "Web Browser", if in fact it merely included a program which is incapable of accessing the real WWW except by access via a special Nokia Web Policy Server (sold seperately).

If anyone knows of a 3rd party VPN client for the 9500. Please tell me because I could not find one after hours of searching online.

advice to Nokia: create a real VPN client and stop trying to force Communicator customers to buy your VPN server just so we can use our 9500's the way it is advertised.

Symbian ought to include VPN as part of the kernal.

Geeks probably form a major segment of the 9500 market and if you pull monopolistic stunts like this you will probably see those geeks migrate away from symbian and towards linux based pda's and smart phones with all due speed.

The Psion Series 5/5mx was very cool. 9290 was a bit less cool. The 9500 is starting to be cool again but the VPN client it includes is very uncool.

DM9290 wrote:It is misleading for Nokia to claim the 9500 supports VPN. It doesn't. It supports a special Nokia product which is also uses the acronym VPN. This almost rises to the level of fraud.

Consumers already have a distinct impression as to what VPN is, and it is wrong for Nokia to make up another system and also call it VPN.

It would be like Nokia claiming that the 9500 has a built in "Web Browser", if in fact it merely included a program which is incapable of accessing the real WWW except by access via a special Nokia Web Policy Server (sold seperately).

If anyone knows of a 3rd party VPN client for the 9500. Please tell me because I could not find one after hours of searching online.

advice to Nokia: create a real VPN client and stop trying to force Communicator customers to buy your VPN server just so we can use our 9500's the way it is advertised.

Symbian ought to include VPN as part of the kernal.

Geeks probably form a major segment of the 9500 market and if you pull monopolistic stunts like this you will probably see those geeks migrate away from symbian and towards linux based pda's and smart phones with all due speed.

The Psion Series 5/5mx was very cool. 9290 was a bit less cool. The 9500 is starting to be cool again but the VPN client it includes is very uncool.

I think it is slightly unfair for you to say that this VPN client only works with anything other than Nokia's interpretation of VPN, its a little silly to say that they are falsely advertising it as VPN as the phone can use VPN. If you check the burb on the web they basically support all types of VPN, IPSEC, PPTP etc and have a number of clients available.

Certicom does a very good VPN client by the way. If you are having trouble using the Nokia Mobile client, try Certicoms.

jah wrote:@karmy6

Thank you for the info on Certicom. Looking at the info on the site I managed to find this Movian VPN solution, but it is for the 9200: http://www.orlogix.com/store/product_info.php?products_id=50 (also see this informatoin page about supported devices http://www.certicom.com/index.php?action=product,mvpn_support)

Have you seen a VPN solution for the 9500 at the Certicom site as I could not find any reference to it.

Hi,

The movian client works on the p900/910. Loaded it on to a 9210/i no problem and a 9500, however I have had no time to test it today. Im going to try hooking up the 9500 to a vpn on monday hopefully using its native software.

@karmy6

many thanks; look forward to hearing about your experiment with the 9500.

karym6 wrote:I think it is slightly unfair for you to say that this VPN client only works with anything other than Nokia's interpretation of VPN, its a little silly to say that they are falsely advertising it as VPN as the phone can use VPN. If you check the burb on the web they basically support all types of VPN, IPSEC, PPTP etc and have a number of clients available.

Certicom does a very good VPN client by the way. If you are having trouble using the Nokia Mobile client, try Certicoms.

It was the blurb on Nokia's website that caused me to believe that the 9500 included VPN support. It doesn't.

If I was to buy Certicom's VPN client, and discover that it would only work with the purchase of a Certicom Security Server (sold seperately) I would feel I had been mislead.

How is this different from what Nokia is doing?

the 9500 does not support VPN without the purchase of additional software or hardware. Nokia should not claim the 9500 does so. Or at a minimum they should claim it is sold seperately.

The Nokia VPN client is NOT the same VPN the consumer is expecting before they buy the phone.

*IF* the Certicom VPN client happens to work on a 9500, then that is luck. It is was not made for the 9500, it is not advertised as working on a 9500. And I can only hope that Nokia wasn't refering to it when they implied the 9500 supports VPN.

jah wrote:@karym6

any news on progress with VPN?

Hi, sorry this took so long, bank holiday gets in the way of everything. Nokia VPN client doesnt work with my own VPN, i'm trying to get VPN access at work now, but IT is off untill monday.

Is it possible to get a shareware version of the Certicom vpn client? The link in Symbian is down and they don't offer it on the Certicom website.

This is all very distressing. The thought of using wifi (via vpn) in my college is the main reason why I bought the 9500 and it doesn't even work. 😡