Sagem router and VPN

[fatoldhippy]

Update:

Confirmed that for Nortel Client 6_01_120 (the one I tested) you can either:

Set Registry setting:

HKEY_LOCAL_MACHINE\SOFTWARE\Nortel Networks\Extranet Access Client\DisableIkePort500Use=1

or Configure:

[Options]
DisableIkePort500Use=1

..in the setup.ini file during a custom client install.

This does force random selection of UDP source port. I've yet to confirm whether it resolves the Sagem router problem. If anyone out there fancies trying it on their Nortel Client V5.01.103 and above I'd love to hear! If not I'll have to wait until it's tested on one of my users.

[fatoldhippy]

Update:

This solution does appear to work. One of my users has upgraded her VPN client as above (using a custom install I prepared for her) and the client worked immediately.

If you have this problem with your Nortel VPN client and the Sagem router, point your network administrator at this thread and they will have enough information to resolve the problem (whether they chose do so is not in my remit, unfortunately!).

[Strep]

I assume with a value of 1 this is a DWORD?

[fatoldhippy]

Yup. Note that in V7 of the Nortel client the setup.ini setting doesn't seem to work (fault open with Nortel), but it does install the registry setting with a setting of 0, so you can change it afterwards.

[robraf]

Originally Posted by fatoldhippy

Update:

Nortel say that for VPN client 5_01.103 and above it is possible to tweak a registry setting called "DisableIkePort500Use" and setting this to 1 will cause random source ports.

Need to verify this and try on an affected user (implies a VPN client upgrade for us, so not a 2-minute job when working through a helpdesk). If this resolves the issue will feedback. If not then another theory hits the rocks!

Good info, tested and the above also works for Nortel VPN 06_02.022...Although I had to add "DisableIkePort500", than change "Dword" value to "1"

[Strep]

I can confirm that one of my users can now connect after making the DWORD registry setting using Contivity VPN Client V06_01.014.

Thank you hippy for a great fix!

[matzy]

just a bump to say:-

(a) thanks for the fix
(b) for me the REG entry wasnt in the same directory as quoted, but when I found the line in question and changed it to a "1" it worked straight away.

I was very annoyed at sky customer services who werent able to offer any valid solutions and when I expressed the despair I was going through just warned me that "legally" this was business use and was a potential breach of my T&C anyway. The advice I got was simply "search the internet" for help ... pathetic but tbh I am used to it now, being a sky customer for far too long. I look forward to the day someone can offer what Sky does at a competitive price.

[IAmNotTheEnemy]

how on earth are Sky meant to tell you to modify your registry?!?!