Re: VPN through DSL

[Patrick Darden <darden () armc org>]

Check with your ISP to see if they allow IPSEC.  Many ISPs filter ipsec
traffic in an attempt to force you to use their vpn infrastructure.  This
is anti-competitive and illegal in nature, and if requested they should
stop.

Other problems might be your personal firewall.  You DO run one right?
Make sure it has IPSEC pass-thru enabled.

I am assuming you are using ipsec instead of a severely flawed protocol
like PPTP.

Nortel's Extranet client is very good: simple, reliable, and plays well
with other programs.  What OS are you running?  Do you have the latest
Extranet client?  Is it rated to run with your OS?  Older Extranet clients
do not work well with ME, 2K, or XP.

--
--Patrick Darden                Internetworking Manager             
--                              706.475.3312    darden () armc org
--                              Athens Regional Medical Center


On Tue, 12 Mar 2002, Neverdowski wrote:

> I am desparate. I have been trying to connect to my office's VPN through my 
> DSL connection at home for months now. In order to connect to my VPN, my 
> office has provided an RSA SecurID token, which generates a random passcode 
> at periodic intervals. I installed the Nortel Extranet client required by 
> my office to connect and I run it after I have already established a DSL 
> connection to the internet (with Enternet 300). However, the Extranet 
> client always tells me that my login was unsuccessful, check my id and 
> password. I have done so, and each time, my office says that both are in 
> working order. I then contacted my ISP, who supplied the Enternet 300 
> software with which I establish my connection to the internet. They are 
> clueless (Southwestern Bell - go figure).
>
> If I look at the details of my connection with in the Enternet 300 
> software, I see "SecurID disabled". No one can tell me why it says this, or 
> how to enable SecurID. The furthest I got with any of the techs who tried 
> to help, was to run Tracert, which showed that everything was peachy until 
> we hit the tenth address which states "Request timed out", even though the 
> 11th-14th still return replies (with the 14th being the address I want to 
> reach).
>
> Someone at one point suggested I get a router. Is that my only option? Why 
> would having a router on the external DSL modem on my home PC help?
>
> Any suggestions, help etc. would be greatly appreciated.
>
> Thanks,
>
> Stephanie
>
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://list.nfr.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards