[VPN] Norte Contivity "Banner Text" problem

[Jac]

There isn't any resolution to this from the vendors
perspective because there in nothing wrong with thier
code. There is generally something wrong with the
environment that is being used as stated below. You
could also have this error if there is a firewall
blocking ESP/AH (protocols 50 and 51) 

The client succedes in setting up the ISAKMP
negotiation but when the client goes to get the banner
it fails because something has blocked the message
outgoing or the reply. If its a NAT issue the "IPSec
capable NAT" should get you around it.

The v04_75.140 is not a client code, its for the
server. You should check with Nortel support for the
most recent EAC code. No place else really to get it
since it only works with thier product.

Jac


--- "Michael R. Downes" <mdownes at cinci.rr.com> wrote:
> All-
> 
> I'm seeing this same problem.  Has anyone found a
> resolution??
> 
> Also, where can obtain v4.75.140 of EAC that Robert
> mentioned?
> 
> Thanks in advance,
> Mike
> 
> ----- Forwarded by Robert E Bunzli/GIS/CSC on
> 06/24/03 11:52 AM -----
> 
>                       Robert E Bunzli
>                       /GIS/CSC                 To:  
>    vpn at
> lists.shmoo.com
>                                                cc:
>                       06/23/03 09:58 AM       
> Subject: Re: [VPN] Nortel
> Contivity "Banner Text" problem(Document link:
> Robert
>                                               
> Bunzli's Mail)
> 
> 
> 
> 
> I've seen a NAT problem generate this message and it
> has nothing to do with
> the "Banner Text", that's just where is hangs.
> 
> Check your NAT traversal settings.  Make sure it's
> enabled in
> Services/IPSec.  Then look at your group settings
> for IPSec and NAT
> Traversal if you're already set at auto detect then
> try the "IPSec capable
> NAT" setting (one of these 2 settings should work). 
> This is a fairly new
> option (IPSec capable NAT) so you may need to
> upgrade your software (don't
> use v4.75.100!!!  there's a v4.75.140 that's been
> out now for several
> weeks).
> 
> Regards,    Robert
> 
>
----------------------------------------------------------------------------
> ------------
> 
> This is a PRIVATE message. If you are not the
> intended recipient, please
> delete without copying and kindly advise us by
> e-mail of the mistake in
> delivery. NOTE: Regardless of content, this e-mail
> shall not operate to
> bind CSC to any order or other contract unless
> pursuant to explicit written
> agreement or government initiative expressly
> permitting the use of e-mail
> for such purpose.
>
----------------------------------------------------------------------------
> ------------
> 
> 
> 
> 
> 
>                       "Duross, Bill"
>                       <Bill.Duross             To:  
>    "'vpn at
> lists.shmoo.com'" <vpn at lists.shmoo.com>
>                       @stratus.com>            cc:
>                       Sent by:                
> Subject: [VPN] Nortel
> Contivity "Banner Text" problem
>                       vpn-bounces
> 
> 
>                       06/20/03 07:34
>                       AM
> 
> 
> 
> 
> 
> 
> I use the Nortel Contivity product for client VPN
> connectivity and I
> occasionally (1 in 50 users?) run into the following
> problem.  The
> installation appears to go normally with no errors,
> but when the user tries
> to log in, there is a +/- 20 second delay at the
> "Checking for Banner Text"
> window and then the user gets an error message that
> the connection has been
> lost.  The log on the CES shows a normal login
> (authentication, address
> assignment, DNS Servers, etc) and then says that a
> "Delete message for
> ISAKMP SA" was received from the client.  I've only
> seen this on Win2k and
> XP clients.
> 
> I've spoken to Nortel and they don't have any solid
> fix and I haven't found
> much of use via google.
> 
> Has anyone run into this and found a way around the
> problem?
> 
> Thanks.
> 
> Bill
> 
> _______________________________________________
> VPN mailing list
> VPN at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/vpn
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Previous message: [VPN] Nortel Contivity "Banner
> Text" problem
> Next message: [VPN] cisco vpn3000, firewall policy,
> & linux client
> Messages sorted by: [ date ] [ thread ] [ subject ]
> [ author ]
> 
> 
> More information about the VPN mailing list
> 
> 
> _______________________________________________
> VPN mailing list
> VPN at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/vpn


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com