Hotspots and VPN

KC7GR · 04-17-2005

Hi, gang,

Something I've noticed about a few different public-access hotspots in my area -- Not all of them will allow a VPN connection to be established.

Some examples from the Puget Sound region: The city of Renton has free WiFi access at the main library, the one built right over the Cedar River. The kicker is that it's pretty much useless if you want to establish a VPN tunnel back to your own LAN. Both Microsoft's PPTP and Watchguard's IPSec client fail to establish a tunnel through it.

On the flip-side: The King County Library System (KCLS) used to, as of a year or so ago, block VPN. They've recently changed their setup to allow it. I've been successful with both IPSec and PPTP connections from at least the Kent Main library.

And yet another variant: The main library in downtown Seattle also has free access, but you can only use Cisco's LEAP or Microsoft PPTP for a VPN linkup. IPSec client connections, at least with the Watchguard client, will fail.

In a wider sense: At least one major hotel chain (Best Western) has made it their goal to have free wireless access available at all of their properties. They've not gotten them all as yet, but I've also tried VPN'ing from a couple of them. Once again, PPTP works, IPSec doesn't.

These variations seem a bit odd to me. I would think that if PPTP works, IPSec should as well. Thoughts...?

Keep the peace(es).

Sooner Al · 04-18-2005

...using SSH as an alternative? Its possible TCP Port 22 would not be blocked outbound. It may be worth a try.

Personally I gave up on VPN awhile back (because of issues with port forwarding through my Buffalo WBR-G54 router) and only use SSH for remote access to my home LAN (and then only with a private/public key pair versus password authentication). In my case I either use XP Remote Desktop through the SSH tunnel or use WinSCP for file transfers. VNC, I used UltraVNC in the past, also works well through a SSH tunnel...

04-17-2005	#1 (permalink)
KC7GR Scrounger 1st Class Join Date: Apr 2005 Location: Maidenhead CN87 Posts: 6	Hotspots and VPN Hi, gang, Something I've noticed about a few different public-access hotspots in my area -- Not all of them will allow a VPN connection to be established. Some examples from the Puget Sound region: The city of Renton has free WiFi access at the main library, the one built right over the Cedar River. The kicker is that it's pretty much useless if you want to establish a VPN tunnel back to your own LAN. Both Microsoft's PPTP and Watchguard's IPSec client fail to establish a tunnel through it. On the flip-side: The King County Library System (KCLS) used to, as of a year or so ago, block VPN. They've recently changed their setup to allow it. I've been successful with both IPSec and PPTP connections from at least the Kent Main library. And yet another variant: The main library in downtown Seattle also has free access, but you can only use Cisco's LEAP or Microsoft PPTP for a VPN linkup. IPSec client connections, at least with the Watchguard client, will fail. In a wider sense: At least one major hotel chain (Best Western) has made it their goal to have free wireless access available at all of their properties. They've not gotten them all as yet, but I've also tried VPN'ing from a couple of them. Once again, PPTP works, IPSec doesn't. These variations seem a bit odd to me. I would think that if PPTP works, IPSec should as well. Thoughts...? Keep the peace(es). __________________ ------------- Bruce Lane, ARS KC7GR http://www.bluefeathertech.com kyrrin <at> bluefeathertech dot calm Salvadore Dali's computer has surreal ports...

04-18-2005	#2 (permalink)
Sooner Al Old Enough to Know Better Join Date: Aug 2002 Location: Norman, Oklahoma Posts: 63	Have you tried... ...using SSH as an alternative? Its possible TCP Port 22 would not be blocked outbound. It may be worth a try. Personally I gave up on VPN awhile back (because of issues with port forwarding through my Buffalo WBR-G54 router) and only use SSH for remote access to my home LAN (and then only with a private/public key pair versus password authentication). In my case I either use XP Remote Desktop through the SSH tunnel or use WinSCP for file transfers. VNC, I used UltraVNC in the past, also works well through a SSH tunnel... __________________ "When all else fails, read the instructions..." Last edited by Sooner Al : 04-18-2005 at 05:01 AM.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode