What are the differences between the Nortel Contivity VPN Swi tch and the Cisco Altiga or 5000 box?

Steve Cundall SCundall at ARIBA.COM
Wed Jul 19 18:14:54 EDT 2000


One little note to the list, we were testing the Altiga switch using NT
authentication and found that the PPTP tunnels do NOT come up encrypted
using that type of authentication (the authentication is encrypted, but not
the tunnel). Even using RADIUS, there are only a few RADIUS servers that
allow PPTP encryted tunnels to work (interestingly enough, Cisco's RADIUS
server doesn't work, but they are supposed to be fixing that soon). They
have suggested we use Microsoft's RADIUS server or Steel Belted RADIUS.
Messy, messy. Overall the Altiga client interested us, since they just
release a version that runs IPsec through NAT (which is VERY important to
us). I know that Contivity is working on that, but not sure if its available
today.

Regards,

Steve

-----Original Message-----
From: Pete Davis [mailto:pete at ETHER.NET]
Sent: Wednesday, July 19, 2000 10:43 AM
To: VPN at SECURITYFOCUS.COM
Subject: Re: What are the differences between the Nortel Contivity VPN
Switch and the Cisco Altiga or 5000 box?


Chris,

The Cisco VPN 3000 Client formerly Altiga Networks has always had support
for DNS, WINS assignment from the server upon connection and supports
SecurID, NT Domains, RADIUS, etc for authentication as well.

Best Regards,
-pete


On Wed, Jul 19, 2000 at 06:44:34AM -0700, Chris Carlson wrote:
> Check out those details closely.  I like the
> Contivity's ability to push DNS and WINS settings from
> the server to the client at connection time, plus the
> ability to seamlessly use RADIUS for client
> authentication and as a proxy to SecurID, NT domains,
> etc.  Look for the details!

---
     Pete Davis - Product Manager <psd at cisco.com>  (508) 541-7300 x6154
   Cisco Systems, Inc.  - 124 Grove Street Suite 205   Franklin, MA 02038

VPN is sponsored by SecurityFocus.COM

VPN is sponsored by SecurityFocus.COM




More information about the VPN mailing list