Since last evening I have been unable to connect the VPN to my work server. I am able to connect with my home computer with the same settings. The droid gives the message "Server hung up. It is possible that you are behind a firewall that prevents you from connecting to the server. Do you want to try again.?"
When I look at the server event logs it shows the attempts and the suggestion is that it is port related. (IE more ports opened). Yet I can conect from other computers and all the ports listed as necessary are open.
I called support at Verizon and they of course began by saying that the vpn is not supported and that it wasn't a problem with their system. They only offered a hard reset.
I do have the 2.2 update - what suggestions do folks have?
ok - a brief update. I am able to connect the vpn when using the wireless network. If I try to use the verizon network I get a message that the server hung up. I have tried connecting on another droid and get the same problem.
Verizon is no help. I get the "VPN is not a supported feature". They want to do a hard reset and wipe the phone. This makes no sense given that I can connect - only not over their network.
I can confirm this as well. Me and a buddy here at work both have Verizon and neither of us could connect to our corp vpn via the Verizon wireless network since around the first of the month. Doesn't this coincide with the update to 2.2? Once we connected to a WI-FI connection we were able to connect to the VPN connection right away.
Looks like Verizon is the culprit here.
I am on a Droid running 2.2 and I have the 44.99 corporate data plan so I don't think the actual data issue is the problem. It is just VZW Blocking the connectivity which will ultimately kill the droids faster than an iPhone will.
I've been looking into the VPN issue and I've discovererd something. When I got my Droid X, last weekend with the 2.2 update, I paid for the 3G Hostspot. When I got home I tried to setup the VPN and could not get the 3G connection to connect, same error as others report. However, I could get the VPN connection to connect over wi-fi. No good for me because my company locks out smart phones so I couldn't setup the Active Synce for Exchange.
Anyway I do most of my work tethered from my laptop so I fired up the hotspot and had to attempt to connect a couple times. First time I got the 619 error as reported by others, the second time it connected. Oddly enough this is a similar issue to what I had when tethering with my BB. That used to work fine but a couple of months ago started causing issues.
So then I rooted my phone and installed Wireless-Tether. I could connect to VPN using that but it drops repeatedly. Which is probably partially related to the app.
Well I then dropped the 3G Hotspot plan and guess what? No VPN access at all. Not from the phone or via a tethered laptop.
Today I thought I'd put the 3G Hotpsot plan on again to see if it did indeed have an effect. Well holy conspiracy Batman VPN is working again. It still drops but not as often.
I spent over an hour with tier 2 Verizon support and they denied any knowledge if the issue. In fact they claimed that I'd need the 44.99 plan to get my VPN working. BS. But after working with my friends in our IT dept it certainly looks like Verizon is up to something.
If Verizon was simply blocking GRE then the VPN connection would never work. The fact that it works sometimes, and better with additional subscription, seems to point so some buggy filtering at Verizon's end.
I'd begrudgingly payup for a data plan that gave VPN access. I'd just like Verizon to come clean and fess up.
Last edited by westendx; November 9th, 2010 at 04:21 PM.
Solution to “Server hung up you might be firewalled…”
Solution to “Server hung up you might be firewalled…” Overview
OK Here it is, this took 2 hours of yelling and pushing them over and over to do their jobs. Once I showed them their own Tech support forums were full of people with this problem they started to listen and get it together!!! History, about 2 months ago I reported this problem to Verizon I was blown off and told they would open a service ticket and an engieer would look at it. When I contacted them yesterday no ticket was created even though I was given a case number of 100917-004303. I’ve learned I didn’t yell enough and was too easy on them my first call. They are forcing us to be uncivil just to get them to do their dam jobs!
After moving past a few techs and managers I got the key that was need.
All Verizon Mobile Broadband accounts by DEFAULT(<– Bullshit) are under a General Restricted IP block. This means all general IPs are firewalled by VERIZON ISP!!! Now verizon still thinks they only sell phones and voice services and will not admit to being an ISP or support and service complaints, bugs or horrible company policy like this.
Now everyone will ask WHY NOW? I’ve had a PDA phone for 10+ years and I’ve never been firewalled or had a blocked port problem from my phone. We used PPTP VPN’s for a while 2-3 months before this problem started. I asked this question given it’s a Federal Crime to access and change my voice or phone account with out my expressed permission. Since this happend on my personal and 3 of my clients accounts I know no permission was given. The verizon manager said this has been this way all along and no changes to my account have been made. (I call verizon Ignorant and this is abusive)
I will be contacting the FCC about this and filling a complaint please make sure you do as well and CONTACT ALL TECH FORUMS AND TECH SITES ABOUT VERIZON FIREWALLING AND PORT FILTERING THEIR SERVICES!!! LET ME BE CLEAR!!! The person that you talk to is reading a script and the script says WE DO NOT SUPPORT IN ANY WAY VPN’s!!! This isn’t a VPN issue nor is it a SONY, APPLE IPAD, HTC, MOL… problem this is a VERIZON ISP FIREWALL problem. HOW TO SOLVE!!!
They would not provide me a service ticket number for you or an email you can contact. Business and enterprise verizon clients:
Contact your Business Sales rep and request/demand all your cell phone numbers be removed from the General IP restricted block. This block is managed by Cell Phone Number so all your phone numbers will have to be given to them. Personal and Small business without rep:
Contact Verizon Data support, Demand to talk to a manager/resolutions department, once you get this far tell them you request/demand to be removed from the General Restricted IP Block! Don’t let me tell you this is a VPN settings or they don’t support VPN’s in-fact they block them by default.
Once they do this you MUST *228 option #1 then reboot phone. Once done you will no long get the Server hung up you might be firewalled error.
This was tested on HTC incredible 2.2, Mol Droid 2.1 and 2.2
Please comment results here and on my Primary Blog for this problem. http://jbenisek.wordpress.com
Tank you and please be kind of direct with the Verizon staff, you are the customer and they must listen to you.
I will also be filling a corp complaint and will post the complaint # for others. Original Post:
“Server hung up. It is possible that you are behind a firewall that prevents you from connecting to the server. Do you want to try again?”
On both Droid 2.1, 2.2, Incredible 2.1, 2.2 over Verizon Wireless Broadband. HOWEVER it works over any supported Wifi connection.
We’ve tracked this problem to VERIZON’s WIRELESS INTERNET/BROADBAND.
PDANET has reported
We are adding more VPN supports in 2.60 and that should solve your issue. Coming out hopefully in 4-5 weeks.
June Fabrics PDA Software Support June Fabrics PDA Technology Group
Disclaimer: Our company issues no warranty and accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
We’ve contacted Verizon, HTC and Mol but NO ONE wants to help or force Verizon to fix their problems. Verizon demands you use VPN for security of business data yet doesn’t support in anyway VPN services. All our phones VPNs worked before Sept with no problem now none do. Workstations still work 100%.
Verizon Case #100917-004303
To make sure you understand this is VPN being setup and connect in the phone not on a laptop or workstation, when using PDANET for PPTP VPN access you must use the built-in-phone VPN client.
I’m looking for others with the same problem please post below, I’d like to get an idea of the scale of the issue and see if a group of us and get verizon to wake up!
I spent a couple hours in the Verizon store over the weekend with them trying to figure out why I could not connect to my company VPN when using the 3G Hotspot. I eventually dug up this thread and had the tech guy give me an unrestricted IP. The VPN immediately connected, no more 619 errors. I've been using VPN over my 3G hotspot now for a couple of days and the connection stays up most of the day. That is it drops more more than it does when connected over a LAN.
Surprisingly this also fixed connecting to our PPTP VPN from the phone over 3G. And Touchdown now syncs with my Exchange server. However, the phone VPN connection still has issues with losing all IP connectivity at some random time after connecting. That could be 5 seconds or 5 hours.
I'm not sure where the problem is with the phone VPN though. This morning I started getting the dreaded firewall issue again. I'm going to have Verizon check that they did not change my phone back to restricted.
Don't let verizon push you around and control your call
I had to stop the lady a few times and say "I'm going to stop you right there mam, you are not listening to me".
Once they stopped reading the script and check their own tech support forums and the complaints she got her act together and had something on chat messanger she was talking to that know with-in seconds what the problem and solution were.
Don't let them push you around and control your call.
I filled out a FCC complaint over this and really suggest everyone else does too.
This worked a few months ago then stopped for everyone they say they havn't changed my account, given it's a federal crime to change it without my permission, however I know they did. I have 2 business and a personal account all changed and blocked!!!
Changing to an unrestricted IP only solved my VPN issue when using my laptop via the mobile hotspot. It does allow the phone to connect to the VPN over 3G but the connection becomes useless immediately. My IT contact checked the logs and our VPN server comlains that the connection was dropped because the GRE protocol appeared to be blocked. I also get this error at our VPN server when using the phones VPN over wifi too.
When using the VPN over the phone over wifi or 3G the VPN connection does connect. Touchdown can establish an Active Sync connection to our Exchange server. But all IP connectivity drops within seconds, or a couple minutes.
Because I get the same GRE problem using the VPN over wifi I think that there's a possiblity that the VPN client on the phone might have something to do with the issue. The reason I say that is when using my laptop over the hotspot I'm sending the same VPN traffic as the phone's VPN client would over 3G or wifi. Yet my laptop has no issues maintaining a connection.
Why would the Verizon network block the VPN traffic from the phones VPN client and not my Laptop's VPN client sent over the hotspot?
Why would the wifi VPN connection also have the same issue while my laptop connected to the same wifi does not?
While getting the unrestricrted IP is an absolute must I think there is more to this issue. And it's probably due to software running on the Droid, either the Linux firewall or the VPN client itself.
All I've seen is the other way around. Most reports I've seen say the Wifi VPN solution of your local WIFI works 100% but the same vpn over Verizon Broadband doesn't work. "Server Hung up error"
this has also been tested on Ipad's so I don't think it is directly related to android phones, it's an issue on phones from Sony to HTC to moloral, Tmobile and other carriers have had this problem in the past but none currently except verizon.
We've tested this and it's solved our issue on 10 phones all over verizon. We use PDANET and the In-phone VPN client.
GRE being block sounds like Verizon only fixed it for a second then changed it back. We've heard this might have happend to others. Make sure you did a *228 option 1 and a full phone reboot.
Also please test this in different call area's to make sure it's not local drops of bad 3G performance.
Then using wifi and your laptop please let us know if you are using Verizon Tethering or the PDAnet tethering? this could be why the laptop works and the phone doesn't.
Verizon Tether gives the tethered device a different IP block than the phone would have gotten. Which is why you can vpn directly I believe this applies to PCIMIA-USB mobile broadband cards they get a different block of IP's assigned then the phone would doing PDAnet tethering.
Interesting finding, which I suspect is why I thought the connection is hanging up at random times.
While using the VPN on the phone through 3G or wifi I set up a terminal with a constant ping to both yahoo and our Exchange server. They pinged constantly until I decided to use either Touchdown or The browser. As soon as I pointed the browser at yahoo most of the page would load then then connection would stall. At that point the pings also failed and nothing else could be pinged until the VPN was dropped.
Now sometimes the connection will stay up long enough for Touchdown to sync or to navigate through several pages. Most the time it dies before I can do anything usefull. But the connection seems to be fine until I actually run a program that sends data through the VPN.
I've asked my IT guru to check the logs to see if I'm getting the same GRE messages.
I just tried the same test using PDANET. When the phone is not connected to the VPN before starting PDANET the connection works fine. When I start the VPN connection over wifi or 3G then start PDANET I can ping or tracert to sites for as long as I like. But as soon as I start an IE and point to yahoo the page partially loads and the connection stalls.
The phone reports the VPN connection as connected.
The only way to recover is to stop PDANET, disconnect the VPN and restart PDANET.
So either there is a problem at our side or a problem in the phone because I get the same issue regardless of whether I'm transmitting data over Verizon's network or wifi.
I do not get the same problem surfing or working through VPN over the 3G hotspot. Out IT dept says they can't see any difference in the connection when using the laptop to VPN or using the phone. So the finger points back at the VPN client on the phone.
Here's what the IT guy shows in the log file when only using the phones VPN client.
A connection between the VPN server and the VPN client 184.108.40.206 has been established, but the VPN connection cannot be completed. The most common cause for this is that a firewall or router between the VPN server and the VPN client is not configured to allow Generic Routing Encapsulation (GRE) packets (protocol 47). Verify that the firewalls and routers between your VPN server and the Internet allow GRE packets. Make sure the firewalls and routers on the user's network are also configured to allow GRE packets. If the problem persists, have the user contact the Internet service provider (ISP) to determine whether the ISP might be blocking GRE packets.
This really should just work. I've already spent countless hours running test after test.
Well today I can start a VPN connection form my laptop over the 3G Hotspot. I have two VPN destinations that I use, one in CA and one in MD. If I connect to the CA MTV then all is fine for a few minutes then the connection drops. If I connect to the MD one then the connection stays open but I cannot pinig anything.
If I stop using the 3G Hotspot and start using the available free wifi then both connections are fine. Also tethering through my Verizon BB works fine too.
This just started happening today. I've been fine all week. I even did another *228 but to no avail.
I've forwarded on the information to my Verizon contact. But I'm not holding my breath here.
I started working with my IT staff checking the firewall at both ends. We saw no notifications at the server side when the VPN stopped responding so we know that our server side firewall is not causing the dropped VPN. There was also nothing showing any firewall issue with the VPN on my laptop. The only odd thing was a network storm of IPV6 packets.
After a quick investigation it turns out that the SEP NTP does not support IPV6 so it blocks all IPV6 packets. Now Win 7 Homegroup only uses IPV6 so it looks like that is the source of all the IPV6 traffic. A little more research uncovered problems with SEP NTP causing stability issues with wireless comms when blocking all the IPV6 traffic. While the thread was not related to the 3G Hotspot it was wireless related so I thought that I'd give it a try and uninstall the SEP NTP.
Low and behold the VPN is now stable. Well until the 3G signal drops or the Hotspot reboots the phone. It may be coincidence so I'll keep track of any further reoccurrences of the issue.
Here's the thread I read on the SEP NTP and IPV6 wireless issue.
Unfortunately, I just got my unlimited data service with no previously working service history. I called Verizon business service today after a chat session with technical support. The woman I talked to, after leaving to talk to her supervisor, said I had to upgrade to unlimited business data account for $44.99/mo to get the VPNs unblocked, a $15 /mo increase just for VPN. I couldn’t say it used to work so I don’t know that I have any standing for changed service. The business service includes Microsoft Exchange sync service which I am not interested in.
Just for further information, my company purchased 6 Moto Xoom tablets and have been trying to connect to our corporate VPN using them for over a month now. When connecting to the VPN from the Settings page, it shows that it is connected, but when I try to pull up our intranet site, it times out or part of the page loads, or I get the Server Hung message. It seems the Xoom with Android 3.0 has the same issue as every other Android phone. I am contacting my Verizon rep right now to see if we can get removed from the Restricted IP list. I'll let you know how helpful they are.
Verizon and Samsung have escallated this to Google's Android division and they are looking at why MPPE isn't working right on Android. This isn't just a Droid Charge issue, but an Android phone issue. Stay tuned...
Good luck getting it fixed. There are two issues at hand...
1) Most phones are setup with the IP set to NAT Restricted. You have to find a nice Verizon tech to switch your phone to General IP Unrestritcted. Until you do this you can't even VPN a PC tethered through the wireless hotspot. And it wil cause the phones VPN client to fail to connect too. I actually got the tech rep at my local store to change this option.
2) The PPTP VPN client, if you're unlucky to have to use that still, is bugged to high heaven. Even after making a sucessfull connection your data will ceast to xmit within a couple of minutes. This has been thrown around the google forums since 2009 and there appears to be no effort on googles behalf to fix it.
The net net is while the Android is a great platform. It is less than useless if you want to VPN into anything. I hate Iphones but at least their VPN works.
Good luck. I gave up on Androids VPN months ago. It's a lost cause.
Samsung informed me that they are trying to get to a work around. Evidently, Apple signed some agreement with ATT and Verizon to allow all iPhones to use MPPE and General IP addressing to prevent this problem. Sounds a little pro-active vs. re-active, huh? Windows Phone 7 is running into the same issues as Android. Blackberry fixed this years ago. I really like Android, but it isn't a business phone.
It appears that this problem has been fixed. My VPN connection works over WiFi and 4G. I have not been contacted by Verizon or Samsung that they fixed this. Surprise, huh? I'll work with Corp to get an Exchange client set up and post an update.