Issues w/ Nortel VPN

Tina Bird tbird at precision-guesswork.com
Thu Jun 7 14:02:32 EDT 2001


If it was a NAT issue, the IPsec connection wouldn't come
up in the first place.  What it sounded to me like Bill was
describing was a failure after the tunnel had been up and
passing traffic for a while...

On Wed, 6 Jun 2001, Matthew Harkrider wrote:

> Date: Wed, 6 Jun 2001 22:03:52 -0500 (CDT)
> From: Matthew Harkrider <mhark at insync.net>
> To: Tina Bird <tbird at precision-guesswork.com>
> Cc: Bill Yazji <byazji at psualum.com>, vpn at securityfocus.com
> Subject: Re: Issues w/ Nortel VPN
> 
> If it is strictly cable users, then that may be the problem. You will need
> to have your users cable providers check into the issue but I know that I
> cannot run a VPN client through my cable connection unless I upgrade to a
> commercial grade service.
> 
> Most cable providers are running NAT and I am not sure that the Nortel
> client is capable of handling NAT-transparent IPSec, but I could be wrong.
> 
> 
> 
> 
> 
> On Wed, 6 Jun 2001, Tina Bird wrote:
> 
> > Does the problem happen at a regular period, like every
> > hour?  Are you using dynamic key management (IKE)?  If so,
> > are the keys being re-generated when their lifetimes expire?
> >
> > And does the problem only happen with the broadband users?
> > Is the cable modem or DSL gateway at their home changing IP
> > address?
> >
> > On Wed, 6 Jun 2001, Bill Yazji wrote:
> >
> > > Date: Wed, 06 Jun 2001 14:17:22 -0500
> > > From: Bill Yazji <byazji at psualum.com>
> > > To: vpn at securityfocus.com
> > > Subject: Issues w/ Nortel VPN
> > >
> > > On my corporate network, we implemented the Nortel Contivity Extranet switches.
> > >
> > > We are having issues with broadband users (mostly cable) having their
> > > tunnels cease transmitting traffic.
> > >
> > > The Nortel software says that it is still connected, but still having
> > > issues with not passing traffic. The end user has to take the tunnel down,
> > > and restart to get the tunnel active again.
> > >
> > > Checked just about everything, and am going nuts.
> > >
> > > Any suggestions?
> > >
> > > ~Bill
> > > byazji at psualum.com
> > >
> > > ----
> > >                                            Bill Yazji
> > >                                byazji at psualum.com
> > >
> > >            "Your Choices Are Half Chance, So Are Everybody Else's"
> > >   "Never Under Estimate The Power Of Stupid People In Small Groups"
> > >
> > > ----
> > >
> > >
> > > VPN is sponsored by SecurityFocus.com
> > >
> >
> > VPN:  http://kubarb.phsx.ukans.edu/~tbird/vpn.html
> > life: http://kubarb.phsx.ukans.edu/~tbird
> > work: http://www.counterpane.com
> >
> >
> > VPN is sponsored by SecurityFocus.com
> >
> 

VPN:  http://kubarb.phsx.ukans.edu/~tbird/vpn.html
life: http://kubarb.phsx.ukans.edu/~tbird
work: http://www.counterpane.com


VPN is sponsored by SecurityFocus.com





More information about the VPN mailing list