Yeah, it has a nice ring to it. When they ran fiber within the building, they ran three pair when we only needed one. So, we have extras. Too bad we can't find any "between" our buildings! -----Original Message----- From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] Sent: Wednesday, January 11, 2006 1:47 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Nortel VPN Client http://www.ISAserver.org "Dark Fiber." I like the sound of that. t ----- "I may disapprove of what you say, but I will defend to the death your right to say it." ----- Original Message ----- From: "Ball, Dan" <DBall@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, January 11, 2006 5:23 AM Subject: [isalist] RE: Nortel VPN Client http://www.ISAserver.org Thanks, it's pretty close to the same setup I had for the Cisco VPN clients, I had defined as: 3389 TCP Outbound 4500 UDP Send Receive 500 UDP Send Receive I can add 4500 UDP Receive Send in there to test it when she stops by this afternoon, otherwise it looks like most of it is already in there. The more I think about it though, it appears that it is going to be more hassle than it is worth. I think I'm going to set up a separate network for her temporarily instead. I have some dark fiber running down near that area, I'll just throw some transceivers on there and give her an IP on a range outside of our network. -----Original Message----- From: Clark, Nick [mailto:nickc@xxxxxxxxxx] Sent: Tuesday, January 10, 2006 11:40 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Nortel VPN Client http://www.ISAserver.org Dan, We had this issue quite some time ago and one of our guys found a setup that worked. I don't know if it still holds water but it was so difficult to track down we ended up keeping it for future reference. Below is a nutshell of what we've got to work without the FWC installed on our "visitors" computers. The setup below applies to our ISA2000SE so I apologize if it doesn't fit into your 2004 configuration. We have to wait until after April 15 to jerk around with our network (unless something breaks - crossing fingers). If you've got other questions about my settings then just ask and I'll do my best to pass it along. [nd] Protocol Definitions -> Def. Name: IPSec NAT-T Port Number: 4500 Port Type: UDP Direction: Receive Send Def. Name: IPSec IKE Port Number: 500 Port Type: UDP Direction: Send Receive Protocol Rule -> Allowed for the two definitions listed above IP Packet Filters -> Filter Name: ICMP Type 3, Code 4 Filter Type: Custom Filter IP Protocol: ICMP Direction: Both Type: Fixed Type Number: 3 Code: Fixed Code Number: 4 Filter Name: Protocol 50 Filter Type: Custom Filter IP Protocol: Custom Protocol Protocol Number: 50 Direction: Both > Nick Clark, MCSE Kerber, Eck & Braeckel LLP 1000 Myers Building Springfield, IL 62701 Tel: 217-789-0960 x289 Mobile: 217-971-7005 Fax: 217-789-2822 http://www.kebcpa.com-----Original Message----- > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] > Sent: Tuesday, January 10, 2006 2:26 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] Nortel VPN Client > > http://www.ISAserver.org > > I tried this afternoon to get a computer working on our network that > needs to use the Nortel VPN Client. No success... > > Looks like I'll need to define the protocols in ISA for that client. > I've tried searching Nortel.com, isaserver.org, and Microsoft's > website for a port/protocol listing, but I can't even find the version > of the client they're using! Does anyone know what ports the VPN > client uses? > > Client: Nortel Contivity VPN Client v06_01.014 > OS: Windows XP SP2 > ISA: 2004SE ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: dball@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: dball@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx