[VPN] Nortel Contivity "Banner Text" problem

Robert E Bunzli rbunzli at csc.com
Tue Jun 24 14:54:02 EDT 2003


Not sure why the note below didn't make it to the list????

----- Forwarded by Robert E Bunzli/GIS/CSC on 06/24/03 11:52 AM -----
                                                                                                                                       
                      Robert E Bunzli                                                                                                  
                      /GIS/CSC                 To:      vpn at lists.shmoo.com                                                            
                                               cc:                                                                                     
                      06/23/03 09:58 AM        Subject: Re: [VPN] Nortel Contivity "Banner Text" problem(Document link: Robert         
                                               Bunzli's Mail)                                                                          
                                                                                                                                       



I've seen a NAT problem generate this message and it has nothing to do with
the "Banner Text", that's just where is hangs.

Check your NAT traversal settings.  Make sure it's enabled in
Services/IPSec.  Then look at your group settings for IPSec and NAT
Traversal if you're already set at auto detect then try the "IPSec capable
NAT" setting (one of these 2 settings should work).  This is a fairly new
option (IPSec capable NAT) so you may need to upgrade your software (don't
use v4.75.100!!!  there's a v4.75.140 that's been out now for several
weeks).

Regards,    Robert

----------------------------------------------------------------------------------------

This is a PRIVATE message. If you are not the intended recipient, please
delete without copying and kindly advise us by e-mail of the mistake in
delivery. NOTE: Regardless of content, this e-mail shall not operate to
bind CSC to any order or other contract unless pursuant to explicit written
agreement or government initiative expressly permitting the use of e-mail
for such purpose.
----------------------------------------------------------------------------------------




                                                                                                                                       
                      "Duross, Bill"                                                                                                   
                      <Bill.Duross             To:      "'vpn at lists.shmoo.com'" <vpn at lists.shmoo.com>                                  
                      @stratus.com>            cc:                                                                                     
                      Sent by:                 Subject: [VPN] Nortel Contivity "Banner Text" problem                                   
                      vpn-bounces                                                                                                      
                                                                                                                                       
                                                                                                                                       
                      06/20/03 07:34                                                                                                   
                      AM                                                                                                               
                                                                                                                                       
                                                                                                                                       




I use the Nortel Contivity product for client VPN connectivity and I
occasionally (1 in 50 users?) run into the following problem.  The
installation appears to go normally with no errors, but when the user tries
to log in, there is a +/- 20 second delay at the "Checking for Banner Text"
window and then the user gets an error message that the connection has been
lost.  The log on the CES shows a normal login (authentication, address
assignment, DNS Servers, etc) and then says that a "Delete message for
ISAKMP SA" was received from the client.  I've only seen this on Win2k and
XP clients.

I've spoken to Nortel and they don't have any solid fix and I haven't found
much of use via google.

Has anyone run into this and found a way around the problem?

Thanks.

Bill

_______________________________________________
VPN mailing list
VPN at lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/vpn








More information about the VPN mailing list