Nortel Client issues.

I'm using Server 2003 with 2 NICS, one going to my LAN and
the other to my ISP.

I try to connect an outside VPN from Windows XP client,
but not successful.

I'm using 192.168.0.x for Windows XP client and
192.168.0.1 for the NIC on the Server 2003 box to connect
the LAN and anothe NIC to the ISP.

When I try to connect using the Nortel Client on the
Windows XP client it tries to connect but fails. I have
tried to setup IPSEC and various settings for the NAT on
the Server 2003 box.

What else do I need to set?

Thank you for your help.

There are a few strange things here.

How have you tried to configure the server as a VPN server? Did you run
the setup wizard in RRAS? In the RRAS console, can you see the VPN miniports
set up?

If you have set this up in RRAS in W2k3, why would you try to use the
Nortel client rather than the Microsoft VPN client for XP? (Unless you are
experienced with IPSec and certificates, I would avoid the IPSec path - try
PPTP first).

Have you tried connecting using VPN to your server from a LAN machine?
This will check whether your server is correctly set up (and you can debug
any problems locally). When this works, you can try connecting through the
Internet to the server's public IP.

"Falcon1" <(E-Mail Removed)> wrote in message
news:092b01c3c580$60f4d650$(E-Mail Removed)...
> I'm using Server 2003 with 2 NICS, one going to my LAN and
> the other to my ISP.
>
> I try to connect an outside VPN from Windows XP client,
> but not successful.
>
> I'm using 192.168.0.x for Windows XP client and
> 192.168.0.1 for the NIC on the Server 2003 box to connect
> the LAN and anothe NIC to the ISP.
>
> When I try to connect using the Nortel Client on the
> Windows XP client it tries to connect but fails. I have
> tried to setup IPSEC and various settings for the NAT on
> the Server 2003 box.
>
> What else do I need to set?
>
> Thank you for your help.

Thanks but I'm trying to connect form my XP, though my
Server 2003 to another VPN. I check routing on the
Server 2003 box and it shows my Windows XP box using port
500 but the Nortel client on the Windows XP box just
stops.

I have tryed to configure the NAT and such but still no
luck.

Thanks again for your help.
>-----Original Message-----
> There are a few strange things here.
>
> How have you tried to configure the server as a VPN
server? Did you run
>the setup wizard in RRAS? In the RRAS console, can you
see the VPN miniports
>set up?
>
> If you have set this up in RRAS in W2k3, why would
you try to use the
>Nortel client rather than the Microsoft VPN client for
XP? (Unless you are
>experienced with IPSec and certificates, I would avoid
the IPSec path - try
>PPTP first).
>
> Have you tried connecting using VPN to your server
from a LAN machine?
>This will check whether your server is correctly set up
(and you can debug
>any problems locally). When this works, you can try
connecting through the
>Internet to the server's public IP.
>
>"Falcon1" <(E-Mail Removed)> wrote in
message
>news:092b01c3c580$60f4d650$(E-Mail Removed)...
>> I'm using Server 2003 with 2 NICS, one going to my LAN
and
>> the other to my ISP.
>>
>> I try to connect an outside VPN from Windows XP client,
>> but not successful.
>>
>> I'm using 192.168.0.x for Windows XP client and
>> 192.168.0.1 for the NIC on the Server 2003 box to
connect
>> the LAN and anothe NIC to the ISP.
>>
>> When I try to connect using the Nortel Client on the
>> Windows XP client it tries to connect but fails. I
have
>> tried to setup IPSEC and various settings for the NAT
on
>> the Server 2003 box.
>>
>> What else do I need to set?
>>
>> Thank you for your help.
>
>
>.
>

IPSec will not work through a NAT connection. The NAT operation changes
addresses in the packet which invalidate the IPSec checksum. IPSec will only
work through a NAT connection if the system is using the new NAT-T system.

See KB 818043 for details of implementation of NAT-T and the additional
ports and protocols used.

"Falcon1" <(E-Mail Removed)> wrote in message
news:082b01c3c703$054d7ee0$(E-Mail Removed)...
> Thanks but I'm trying to connect form my XP, though my
> Server 2003 to another VPN. I check routing on the
> Server 2003 box and it shows my Windows XP box using port
> 500 but the Nortel client on the Windows XP box just
> stops.
>
> I have tryed to configure the NAT and such but still no
> luck.
>
> Thanks again for your help.
> >-----Original Message-----
> > There are a few strange things here.
> >
> > How have you tried to configure the server as a VPN
> server? Did you run
> >the setup wizard in RRAS? In the RRAS console, can you
> see the VPN miniports
> >set up?
> >
> > If you have set this up in RRAS in W2k3, why would
> you try to use the
> >Nortel client rather than the Microsoft VPN client for
> XP? (Unless you are
> >experienced with IPSec and certificates, I would avoid
> the IPSec path - try
> >PPTP first).
> >
> > Have you tried connecting using VPN to your server
> from a LAN machine?
> >This will check whether your server is correctly set up
> (and you can debug
> >any problems locally). When this works, you can try
> connecting through the
> >Internet to the server's public IP.
> >
> >"Falcon1" <(E-Mail Removed)> wrote in
> message
> >news:092b01c3c580$60f4d650$(E-Mail Removed)...
> >> I'm using Server 2003 with 2 NICS, one going to my LAN
> and
> >> the other to my ISP.
> >>
> >> I try to connect an outside VPN from Windows XP client,
> >> but not successful.
> >>
> >> I'm using 192.168.0.x for Windows XP client and
> >> 192.168.0.1 for the NIC on the Server 2003 box to
> connect
> >> the LAN and anothe NIC to the ISP.
> >>
> >> When I try to connect using the Nortel Client on the
> >> Windows XP client it tries to connect but fails. I
> have
> >> tried to setup IPSEC and various settings for the NAT
> on
> >> the Server 2003 box.
> >>
> >> What else do I need to set?
> >>
> >> Thank you for your help.
> >
> >
> >.
> >

"Falcon1" wrote:
> I'm using Server 2003 with 2 NICS, one going to my LAN and
> the other to my ISP.
<!--SNiP-->

I first answered this on 12-18-03 and then followed up again today. I gave
you the same answer as you got here. Please do not multipost.

http://support.microsoft.com/default...b;en-us;818043

--
Roland

This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose.