Questions[cellular](server)

I have a web server running nginx. If I access the website through a wifi connection, it loads the website. If I access it using LTE on my phone, it just shows the default "Welcome to nginx!" page

Here is my site config file:

server {
    listen 80;
    listen 443 ssl;
    server_name {mysite.com};

    root   /path/to/public;
    index  index.php index.html index.htm;

    location / {
        try_files $uri $uri/ /index.php$is_args$args;
        include   /etc/nginx/conf.d/php-fpm;
    }

    ssl_certificate /etc/letsencrypt/live/{mysite.com}/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/{mysite.com}/privkey.pem;
}

I deploy cellular modems that currently have sims with static ip addresses. For various reasons, we may move to providing sims without static ips.

The cellular modem supports DDNS (bluetree modem).

Since we will have a very low query per second rate (once an hour max), but a high deployment rate (hundreds to thousands), my needs are somewhat different than what you would find with many dynamic dns service customers. I think.

Should I look into running my own dns service (i have not the foggiest idea in what that involves), or is there a service provider geared towards low QPS, high deployment. Or will something like DynDNS be fine?

All devices will be deployed in the same country (Canada), and for quite a while only in western canada.

I'm new to IPsec and struggling with a setup that might soon be widely used in our operations (provided I do understand it, eventually...).

A cellular router (blackbox by netModule, from its log messages it seems to be running Linux and OpenSwan) connects a sensor network on customers' sites with our public server. We need to be able to connect into the local network, so I had the cell provider give me a public IP (a dynamic one). The way their setup works, the public IPs only allow IPsec traffic.

I set up OpenSwan on our Ubuntu server (running Jaunty). This is my connection config from /etc/ipsec.conf:

conn gprs-field-devices
    left=my.pub.lic.ip
    [email protected]
    #leftsubnet=192.168.1.129/25
    right=%any
    [email protected]
    #rightsubnet=192.168.1.1/25
    #rightnexthop=%defaultroute
    auto=add

On the router, all I have is the Web UI, in which I made the following settings:

• "Remote endpoint": public IP of server, same as "left" above
• "Local Network Address": 192.168.1.1
• "Local Network Mask": 255.255.255.128
• "Remote Network Address": 192.168.1.129
• "Remote Network Mask": 255.255.255.128

The pluto process on the server is listening for connections on port 500. It can't open a tunnel, obviously, because it doesn't know at which IP the client is.

I set up a passphrase as PSK for @field.econemon.com in /etc/ipsec.secrets and also configured it in the router (which doesn't seem to support certificates).

My problem is, nothing happens. The router just says, IPsec is "down". When I copy-paste the IP into ipsec.conf (for "right="), and ask the server to ipsec auto --up gprs-field-devices, it just hangs until I press Ctrl-C.

Is there anything wrong with my setup? How can I debug this further?

My router gives the following loglines that seem related, but don't tell me anything:

Feb 21 23:08:20 Netbox authpriv.warn pluto[2497]: loading secrets from "/etc/ipsec.secrets"

Feb 21 23:08:20 Netbox authpriv.warn pluto[2497]: loading secrets from "/etc/ipsec.d/hostkey.secrets"

Feb 21 23:08:20 Netbox authpriv.warn pluto[2497]: loading secrets from "/etc/ipsec.d/netbox0.secrets"

Feb 21 23:08:20 Netbox authpriv.warn pluto[2497]: "netbox00" #1: initiating Main Mode

Feb 21 23:08:20 Netbox daemon.err ipsec__plutorun: 104 "netbox00" #1: STATE_MAIN_I1: initiate

Feb 21 23:08:20 Netbox daemon.err ipsec__plutorun: ...could not start conn "netbox00"

Feb 21 23:08:22 Netbox authpriv.warn pluto[2497]: packet from 188.40.57.4:500: ignoring informational payload, type NO_PROPOSAL_CHOSEN

Feb 21 23:08:22 Netbox authpriv.warn pluto[2497]: packet from 188.40.57.4:500: received and ignored informational message

Feb 21 23:08:28 Netbox user.warn parrot.system_controller[762]: IPSECCTRLR: Tunnel 0 is down for 0 seconds

Feb 21 23:08:40 Netbox user.warn parrot.system_controller[762]: IPSECCTRLR: Tunnel 0 is down for 10 seconds

Feb 21 23:08:52 Netbox authpriv.warn pluto[2497]: packet from 188.40.57.4:500: ignoring informational payload, type NO_PROPOSAL_CHOSEN

I'm in charge of managing an array of Windows Embedded 7 Standard based PCs (they act just like plain old Windows 7).

The computers have 3G cards as their only means of communication, and are on buses. Right now, the 3G cards are configured in NDIS mode which in theory will maintain the connection automatically and persistently. However, sometimes the 3G link fails and never comes back up.

Can someone help me out here? My basic requirements are

• Internet is available always
• If the connection fails, it is detected and retried

Is RAS/DUN more reliable for this sort of thing than NDIS?

In our offices we have a very strong cell phone signal above ground, however in our conference room in the basement, Verizon & Sprint have almost no coverage (while AT&T works, it is 1 or 2 bars vs full bars above ground).

We are looking into purchasing a cell phone booster, to bring in the signal from outside the building into the basement. The main receiver would be installed and powered in the center of a 4000 sq foot space, and the antenna would be located roughly 50 feet away to bring in the signal.

My question is - do these cell phone extenders, such as the zBoost brand, work well? We have everything from regular voice, blackberries and internet cards which would be using this signal. The 'coverage' area of this boosters does not seem to be that wide, I am guessing the internal booster uses a low power so that it does not interfere with the regular signal.

Are there any 'commercial' solutions to this problem and who would I contact to price them out? I am not sure who to even call about this one.

Thanks in advance.