RE: Nortel VPN Client

  • From: "Thor \(Hammer of God\)" <thor@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 11 Jan 2006 10:47:24 -0800

"Dark Fiber."  I like the sound of that.

t

-----
"I may disapprove of what you say,
but I will defend to the death your
right to say it."


----- Original Message ----- From: "Ball, Dan" <DBall@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 11, 2006 5:23 AM
Subject: [isalist] RE: Nortel VPN Client



http://www.ISAserver.org

Thanks, it's pretty close to the same setup I had for the Cisco VPN
clients, I had defined as:

3389 TCP Outbound
4500 UDP Send Receive
500  UDP Send Receive

I can add 4500 UDP Receive Send in there to test it when she stops by
this afternoon, otherwise it looks like most of it is already in there.

The more I think about it though, it appears that it is going to be more
hassle than it is worth.  I think I'm going to set up a separate network
for her temporarily instead.  I have some dark fiber running down near
that area, I'll just throw some transceivers on there and give her an IP
on a range outside of our network.

-----Original Message-----
From: Clark, Nick [mailto:nickc@xxxxxxxxxx]
Sent: Tuesday, January 10, 2006 11:40 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Nortel VPN Client

http://www.ISAserver.org

Dan,

We had this issue quite some time ago and one of our guys found a setup
that
worked.  I don't know if it still holds water but it was so difficult to
track
down we ended up keeping it for future reference.  Below is a nutshell
of what
we've got to work without the FWC installed on our "visitors" computers.

The setup below applies to our ISA2000SE so I apologize if it doesn't
fit into
your 2004 configuration.  We have to wait until after April 15 to jerk
around
with our network (unless something breaks - crossing fingers).  If
you've got
other questions about my settings then just ask and I'll do my best to
pass it
along. [nd]

Protocol Definitions ->
Def. Name: IPSec NAT-T
Port Number: 4500
Port Type: UDP
Direction: Receive Send

Def. Name: IPSec IKE
Port Number: 500
Port Type: UDP
Direction: Send Receive

Protocol Rule ->
Allowed for the two definitions listed above

IP Packet Filters ->
Filter Name: ICMP Type 3, Code 4
Filter Type: Custom Filter
IP Protocol: ICMP
Direction: Both
Type: Fixed Type
Number: 3
Code: Fixed Code
Number: 4

Filter Name: Protocol 50
Filter Type: Custom Filter
IP Protocol: Custom Protocol
Protocol Number: 50
Direction: Both




Nick Clark, MCSE Kerber, Eck & Braeckel LLP 1000 Myers Building Springfield, IL 62701 Tel: 217-789-0960 x289 Mobile: 217-971-7005 Fax: 217-789-2822 http://www.kebcpa.com-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Tuesday, January 10, 2006 2:26 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Nortel VPN Client

http://www.ISAserver.org

I tried this afternoon to get a computer working on our network that
needs to use the Nortel VPN Client.  No success...

Looks like I'll need to define the protocols in ISA for that client.
I've tried searching Nortel.com, isaserver.org, and Microsoft's
website for a port/protocol listing, but I can't even find the version

of the client they're using!  Does anyone know what ports the VPN
client uses?

Client: Nortel Contivity VPN Client v06_01.014
OS: Windows XP SP2
ISA: 2004SE

------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: dball@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx





Other related posts: