Fixing Nortel Contivity Client VPN issue: Login failure due to remote host not responding

I have been receiving this error for a few days now fueling my laziness to connect at the office. But unfortunately last week I was asked to assist in implementing a major change so I need to connect from home prompting me to fix this issue or else I need wake up early and haul my *ss to the office on a weekend.

The setup is I connect to the office VPN via the Nortel Contivity client utilizing SecureID token. I keep getting the error “Login failure due to remote host not responding” when I tried to connect. I didn’t have this problem before and can connect from my “virtualized” laptop (I did a Physical-to-Virtual (p2v) migration of my office laptop so that I don’t have to bring the laptop home often).

Going through the Nortel Contivity Client document, I found this:

This is typically caused by UDP500 traffic not getting back to the requesting client through a firewall and/or router.  If your firewall/router supports IPSec passthrough you must enable IP50, IP51, UDP500 on both the source and destination (i.e. bidirectional) in order for the client to establish the connection.  Some firewalls/routers have a generic setting "Enable IPSec" or "Enable IPSec Passthrough" and simply turning this on will usually solve the problem.

The keyword here is IPSec Passthrough. In order for IPsec to work through a NAT, the following protocols need to be allowed on the firewall:

  • Internet Key Exchange (IKE) – User Datagram Protocol (UDP) port 500
  • Encapsulating Security Payload (ESP) – IP protocol number 50
  • Authentication Header (AH) – IP protocol number 51

I immediately login to my router administration panel and there it is, the IPSec Passthrough was disabled.  This might have been disabled after a recent upgrade of the router’s firmware. After enabling this feature, the VPN client connected immediately.

DD-WRT –> Security -> VPN Passthrough

By the way, I have a Linksys WRT320N using a third-party firmware called DD-WRT.

image

Enhanced by Zemanta

1,085 Comments

  1. Pingback: Hermes ?? ?? ??

  2. Pingback: home

  3. Pingback: ¥¨¥¢¥¸¥ç©`¥À¥ó 5 ¥ì¥È¥í

  4. Pingback: home

  5. Pingback: ¥¢¥° ¥Ù¥Ó©`

  6. Pingback: ???? ?? ??? ????

  7. Pingback: ???

  8. Pingback: free graphic design templates for download

  9. Pingback: law

  10. Pingback: ???·??

  11. Pingback: home

  12. Pingback: cheap rolex

  13. Pingback: air jordan 11 sale

  14. Pingback: ???? ?? ? ?????

  15. Pingback: ¥×¥é¥À ¥­©`¥±©`¥¹ ¥Ï©`¥È

  16. Pingback: best weight loss

  17. Pingback: Hermes ??? ??

  18. Pingback: Hermes ???? ?? ??????

  19. Pingback: shopping

  20. Pingback: shopping

  21. Pingback: abbigliamento donna on line

  22. Pingback: ¥×¥é¥À Ø?²¼ ¥á¥ó¥º ¶þ¤ÄÕÛ¤ê

  23. Pingback: ヴィトン トートバッグ ダミエ

  24. Pingback: ???? ??? ??

  25. Pingback: ¥Ð¥Ã¥·¥å ¥Ê¥¤¥­ ¥¸¥ç©`¥À¥ó ¥ì¥Ç¥£©`¥¹

  26. Pingback: armored sedans

  27. Pingback: Nike Lebron 12

  28. Pingback: replica rolex

  29. Pingback: ???? ?? ?? ??

  30. Pingback: ¥¬¥¬¥ß¥é¥Î ¥Ï¥ï¥¤ ?rÓ?

  31. Pingback: ¥·¥ç©`¥È¥Ö©`¥Ä ÏÄ

  32. Pingback: ¥×¥é¥À ¥«¥Ê¥Ñ ¥ª©`¥¯¥·¥ç¥ó

  33. Pingback: oferta

  34. Pingback: ???? ??? ?????

  35. Pingback: polecam

  36. Pingback: ???? ?? ??? ??

  37. Pingback: ???? ????? ???

  38. Pingback: travel

  39. Pingback: travel

  40. Pingback: ???? ???

  41. Pingback: ¥à©`¥È¥ó¥Ö©`¥Ä Ñ©

  42. Pingback: ???? ???

  43. Pingback: kliknij tutaj

  44. Pingback: ???? ?? ???

  45. Pingback: ???? ??????

  46. Pingback: ¥×¥é¥À Ø?²¼ È¡?Qµê

  47. Pingback: ???? ???

  48. Pingback: air jordan 11 legend blue

  49. Pingback: ???? ?? ??

  50. Pingback: ¥¬¥¬¥ß¥é¥Î 46 ¥ì¥¶©`¥Ù¥ë¥È

Leave a Comment

Your email address will not be published. Required fields are marked *