Opinion requested (fwd)

[Little, Mike (BHS)]

Steve,

The CES keeps good log files, where I do most of my troubleshooting, but
there are other tools available as well, such as reporting capabilities and
access to statistical data.  A lot of good information is being constantly
provided.  The only thing that I have run into is that finding out why
certain log entries appear or what they mean has been a little difficult at
times, but this has only happened on a couple of occasions and Nortel has
been pretty good at trying to get them explained.

Just a note - I've seen some tunnel problems occurring so early in the PPTP
negotiation process that even the CES hasn't been able to generate any log
entries for the connection attempt.  These types of problems usually have
gotten resolved from the client (or ISP) end.

Good luck, and I hope this helps.

- Mike



> -----Original Message-----
> From:	Steve Cundall [SMTP:SCundall at ariba.com]
> Sent:	Wednesday, March 08, 2000 3:09 PM
> To:	'Little, Mike (BHS)'; VPN at SECURITYFOCUS.COM
> Subject:	RE: Opinion requested (fwd)
>
> Mike and all,
> We are currently using PPTP and a NT server and are looking to change
> that.
>
> How do you find the Contivity to be in troubleshooting problems like you
> describe below? We find with the all NT solution, its VERY difficult to
> figure out what is going on, since both the client and server give very
> general, non descript error messages.
>
> Steve
>
> -----Original Message-----
> From: Little, Mike (BHS) [mailto:MLittle at BHSI.COM]
> Sent: Wednesday, March 08, 2000 11:44 AM
> To: VPN at SECURITYFOCUS.COM
> Subject: Re: Opinion requested (fwd)
>
>
> I agree.
>
> We have 2 CES 2000s and they've been great.  Although we have some users
> running the Extranet Client and IPSec, most are just doing MS PPTP from
> various Windows platforms.  Most of the problems we deal with are client
> specific, but we've also began running into issues with some sites that
> have
> some other vendor's internet device doing NAT for the entire site.
> Getting
> multiple tunnels going from the workstations is tricky at times from some
> of
> these locations.  It seems, too, that the ISPs choice of network devices
> has
> an occasional impact on the tunnel negotiation process.
>
> For what it's worth, we'll probable soon be throwing in some
> branch-to-branch stuff using Nortel's Instant Internets as well.
>
> That's my two cents.
>
> - Mike Little
>
>
> > -----Original Message-----
> > From:	Michael Medwid [SMTP:Michael.Medwid at ARIBA.COM]
> > Sent:	Tuesday, March 07, 2000 6:49 PM
> > To:	VPN at SECURITYFOCUS.COM
> > Subject:	Re: Opinion requested (fwd)
> >
> > Opinion:  Easy to configure and stable.  Supports both IPsec and PPTP.
> > Supports both client to lan and lan to lan.  Although I never tested
> > the lan to lan.  Two thumbs up.
> >
> > -Michael Medwid
> >
> > -----Original Message-----
> > From: Tina Bird [mailto:tbird at PRECISION-GUESSWORK.COM]
> > Sent: Tuesday, March 07, 2000 12:17 PM
> > To: VPN at SECURITYFOCUS.COM
> > Subject: Opinion requested (fwd)
> >
> >
> > ---------- Forwarded message ----------
> > Date: Fri, 3 Mar 2000 10:28:04 -0400
> > From: Luc Holland <lholland at hfx.eastlink.ca>
> > To: tbird at precision-guesswork.com
> > Subject: Opinion requested
> >
> > Dear Tina,
> >
> > I am currently working with a research group into different VPN
> > applications. We have a chance to use (and hopefully acquire cheaply) a
> > Nortel 1500 Extranet "Contivity" Switch.
> >
> > Do you have any opinion/knowledge of this hardware's reliability/track
> > record/usability? If you do, could you please share it with me?
> >
> > Thanks again for the wonderful site and list!
> >
> > Luc Holland
> >
> > VPN is sponsored by SecurityFocus.COM
> >
> > VPN is sponsored by SecurityFocus.COM
>
> VPN is sponsored by SecurityFocus.COM

VPN is sponsored by SecurityFocus.COM