[8525, TyTN, MDA Vario II, JasJam General] npole:
Hi navy, im using Vodafone Italy ...that offer a very limitate WAP connection (it's the basic one) with only 80 (HTTP) and 443 (HTTPS) ports open and behind a firewall! So if it works with it... i believe it would work with any carrier (assuming that your carrier doesn't block even the HTTPS connections! lol).

I've prepped a guide (it doesn't go into "deep", it is for advanced users...) but it is in italian, so it wouldn't help you.

Talking about some details:

I'm using a PC with Windows XP Pro as server, connected to a ADSL Router via ethernet.

I'm using a PocketPC (Touch Cruise) as client connected via WAP GPRS (WAP or not, it's pretty fast since i'm covered by HDSPA).

On both machines i'm using OpenVPN.

The server is configured using "tap" and the NIC's are *BRIDGED* (the phisical network card of the server is bridged with the TAP virtual adapter of OpenVPN), and it's using a normal IP address of my LAN (same router/gateway subnet). Eg: router 192.168.0.1 ..then the bridge address would be 192.168.0.2.

The client is using a pretty standard "tap" configuration but using a HTTP Proxy (see OpenVPN documentation) since my provider doesn't allow to reach directly a public address. The TAP adpter has manually assigned a IP address on the *SAME* class of my remote lan. On the example above: IP: 192.168.0.3/24 and with 192.168.0.1 (my remote router!) as gateway, and 192.168.0.1 ad DNS server (again my router serves as DNS server as well).

As soon the tunnel starts, the PocketPC is projected into my remote LAN with the IP: 192.168.0.3 and it is *effective* a client of that lan, so it can surf the LAN and accessing to the internet like any other local client.

An important step (that made me lost my weekend to figure it out) is that the IP address and Default Gateway of the PocketPC *MUST* be assigned manually to the TAP interface (Connection > WiFi > Network Cards), it seems that the "redirect-gateway" directive (local or pushed via server) doesn't work on PocketPC! Another problem is about the DNS servers: they must be pushed via server because it seems that the manual configuration (to the TAP interface) doesn't work good, so to be safe: you assign em on the TAP interface (Connection > WiFi > Network Cards), then you push em via OpenVPN server directive: push "dhcp-option DNS 192.168.0.1"

...how i managed to figure this out? Well doing XXXX tests... and trying any possible combination until i found where the problem was. I see that all the people that are trying a "tunnel passtrought" on a PocketPC are having that exact same problem: the client apparently works, can ping the LAN etc., but the applications (connecting in example to a local webserver or even surfing the internet) doesn't work at all, that's because the default gateway isn't assigned and the traffic is not routed correctly!

And now the config files (change em according to your settings):

proto tcp
port 443
dev tap
dev-node OpenVPN # this is the tap interface name, nor the tunnel!

ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
tls-auth ta.key 0

ifconfig-pool-persist ipp.txt

server-bridge 192.168.0.4 255.255.255.0 192.168.0.31 192.168.0.41

push "dhcp-option DNS 192.168.0.1"

keepalive 10 120

comp-lzo
cipher AES-256-CBC

max-clients 10

persist-key
persist-tun

and the client:

client
dev tap
proto tcp

remote myip.dyndns.org 443 #i use dyndns to publish my dynamic IP

resolv-retry infinite

nobind

persist-key
persist-tun

ca "\\Scheda di memoria\\Programmi\\OpenVPN\\config\\ca.crt"
cert "\\Scheda di memoria\\Programmi\\OpenVPN\\config\\client.crt"
key "\\Scheda di memoria\\Programmi\\OpenVPN\\config\\client.key"
tls-auth "\\Scheda di memoria\\Programmi\\OpenVPN\\config\\ta.key" 1

cipher AES-256-CBC

comp-lzo

http-proxy-retry 1
http-proxy 10.128.201.76 80 #this is the vodafone proxy and port

Good luck... cause u'll need some. :D