E61 + VPN Probs, need help

Hello,

excuse me for my bade english i'm from germany.

Last week I received the E61 from Vodafone.
I want to use the internal VPN Client but I have some problem.
I our Company network we have a Cisco 3000 concentrator.
I read in different disscussion boards that i must creat the policy manuelly, so i used the PDF file from Nokia
[URL=http://www.nord-com.net/d.snider/BP_mVPN_PSK_Cisco_1.pdf]PDF[/URL]
Our Network Administration creates the Policys which are named in the Nokia PDF.

Now i post my steps and my policies


Here is my "VPN-policy-preshared-cisco.pin"

[QUOTE]
[POLICYNAME]
AB_VPN
[POLICYDESCRIPTION]
VPN-policy-preshared-cisco.pol for Nokia Mobile VPN Client v3.0.
[POLICYVERSION]
1.1
[ISSUERNAME]
Do not edit
[CONTACTINFO]
Do not edit
[/QUOTE]

Here is my "VPN-policy-preshared-cisco.pol"

[QUOTE]
SECURITY_FILE_VERSION: 3
[INFO]
VPN-policy-preshared-cisco.pol for Nokia Mobile VPN Client v3.0.
[POLICY]
sa ipsec_1 = {
esp
encrypt_alg 12
max_encrypt_bits 256
auth_alg 3
identity_remote 123.45.67.89/0 HERE I TYPE THE SERVER IP
pfs
src_specific
hard_lifetime_bytes 0
hard_lifetime_addtime 3600
hard_lifetime_usetime 3600
soft_lifetime_bytes 0
soft_lifetime_addtime 3600
soft_lifetime_usetime 3600
}
remote 123.45.67.89 255.255.255.255 = { ipsec_1(123.45.67.89) } HERE I TYPE THE SERVER IP AND THE SUBNET
inbound = { }
outbound = { }
[IKE]
ADDR: 123.45.67.89 255.255.255.255 HERE I TYPE THE SERVER IP AND THE SUBNET
MODE: Aggressive
SEND_NOTIFICATION: TRUE
ID_TYPE: 11
FQDN: HERE I TYPE MY PRESHARED USERNAME
GROUP_DESCRIPTION_II: MODP_1536
USE_COMMIT: FALSE
IPSEC_EXPIRE: FALSE
SEND_CERT: FALSE
INITIAL_CONTACT: FALSE
RESPONDER_LIFETIME: TRUE
REPLAY_STATUS: TRUE
USE_INTERNAL_ADDR: FALSE
USE_NAT_PROBE: FALSE
ESP_UDP_PORT: 0
NAT_KEEPALIVE: 60
USE_XAUTH: TRUE
USE_MODE_CFG: TRUE
REKEYING_THRESHOLD: 90
PROPOSALS: 1
ENC_ALG: AES256-CBC
AUTH_METHOD: PRE-SHARED
HASH_ALG: SHA1
GROUP_DESCRIPTION: MODP_1536
GROUP_TYPE: DEFAULT
LIFETIME_KBYTES: 0
LIFETIME_SECONDS: 28800
PRF: NONE
PRESHARED_KEYS: HERE I TYPE MY PRESHARED USERNAME
FORMAT: STRING_FORMAT
KEY: HERE I TYPE MY PRESHARED PASSWORD
[/QUOTE]

And Here at least my "VPN-policy-preshared-cisco.pkg"

[QUOTE]
;
; A VPN POLICY PACKAGE
;

; LANGUAGES
; - None (English only by default)

%{"Vendor-EN"}
&EN

; INSTALLATION HEADER
; - Only one component name is needed to support English only
; - UID is the UID of the VPN Policy Installer application
#{"VPN Policy"},(0x1000597E),1,0,0,TYPE = SISCONFIG

; LIST OF FILES

; Policy file
"VPN-policy-preshared-Cisco.pol"-"C:\VPN-policy-preshared-Cisco.pol"

; Policy-information file
; - NOTE: The policy-information file MUST be the last file in this
; list!
; - FM (FILEMIME) passes the file to the respective MIME handler
; (in this case, the VPN Policy Installer
; application).
"VPN-policy-preshared-Cisco.pin"-"C:\VPN-policy-preshared-Cisco.pin",
FM, "application/x-ipsec-policy-info"

; REQUIRED FILES
; - The VPN Policy Installer application
(0x1000597E), 1, 0, 0, {"VPN Policy Installer"}
[/QUOTE]


Then i compiled the pkg file with the makesis.exe (s60-sdk-0548-3.0-f.3.215f).
Thats my Log from Makefile
[IMG]http://img183.imageshack.us/img183/4012/s608mb.jpg[/IMG]

i send this sis to my phone and wenn i want to install i get the Message that the certificat is noch correct and so it can't not install...

In the Programm Manager all applications are allowed.

so I hope anyone can help me

the nokia e61 also have symbian v9.1 3rd edition. so you will have the same architecture problems as [url=http://discussion.forum.nokia.com/forum/showthread.php?t=80837&highlight=vpn]here[/url]

... but now to your question *g*
then you have to sign your sis-file with signsis...


btw.: i'm from germany, too

Hi All,

I too have been trying to get my E61 to work through our VPN, which is a SONICWALL. Anyhow, I am at the point where the SISX file is created and signed with a DEV cert from Symbiansigned, but when I install it I can't find the Policy in the VPN settings -

My pkg file points to C:\System\Data\Security\Install

Is this correct for the E61 - what did you guys you have it working use?

Thanks
Ryan

hi guys,

topic should follow that thread on C++ signing thread:
[url]http://discussion.forum.nokia.com/forum/showthread.php?t=80837[/url]

regards,
Peter

Hello E61 gurus,
Thanks to all your instructions, I have managed to create the SISX policy file (Signed with nokia developer certificate for my IMEI etc (makesis, signsis etc.)). But when I tried installing it on the phone, a message pops up saying "Application not compatible with the phone. continue anyway?". If I ignore this and continue installing it anyway, the VPN policy is unrecognized by the VPN client(Nothing shows in VPN policies).
What am I missing - I know I can smell it but can't quite feel it yet.
Throw some light my way folks !
Thanks much

Oops - forgot to mention that I have tried it when the firmware was 1.xxxxx and then upgraded it to the new 2.x and tried it as well. No go yet !

[QUOTE=srithere;251543]Oops - forgot to mention that I have tried it when the firmware was 1.xxxxx and then upgraded it to the new 2.x and tried it as well. No go yet ![/QUOTE]


dear friend if its working with you so please can post complete configuration for your vpn setup, will be appreciable, because i am trying to configure in cisco 877 router it will be help full your configuration and thanks in advance

Thanks
taher

Hopefully no one will do that. If you are interested, follow the link in #4. The closing post of that thread suggests the site where discussion should be continued ([url]http://discussion.forum.nokia.com/forum/showpost.php?p=564407&postcount=323[/url])

Hello sir

will help me how to create .sis file on command line, if can send details step by step creating sis file will be appreciable


Thanks
Taher
:)
[QUOTE=Serial-K;220352]Hello,

excuse me for my bade english i'm from germany.

Last week I received the E61 from Vodafone.
I want to use the internal VPN Client but I have some problem.
I our Company network we have a Cisco 3000 concentrator.
I read in different disscussion boards that i must creat the policy manuelly, so i used the PDF file from Nokia
[URL=http://www.nord-com.net/d.snider/BP_mVPN_PSK_Cisco_1.pdf]PDF[/URL]
Our Network Administration creates the Policys which are named in the Nokia PDF.

Now i post my steps and my policies


Here is my "VPN-policy-preshared-cisco.pin"



Here is my "VPN-policy-preshared-cisco.pol"



And Here at least my "VPN-policy-preshared-cisco.pkg"




Then i compiled the pkg file with the makesis.exe (s60-sdk-0548-3.0-f.3.215f).
Thats my Log from Makefile
[IMG]http://img183.imageshack.us/img183/4012/s608mb.jpg[/IMG]

i send this sis to my phone and wenn i want to install i get the Message that the certificat is noch correct and so it can't not install...

In the Programm Manager all applications are allowed.

so I hope anyone can help me[/QUOTE]