Article View: alt.internet.wireless
Article #574Re: Failing to use corporate VPN from a wireless LAN
From: Rob Froelich
Date: Fri, 02 Nov 2001 20:10
Date: Fri, 02 Nov 2001 20:10
35 lines
2782 bytes
2782 bytes
I have to disagree with Fadi's post. "Fadi" <fadi@harake.com> wrote in message news:64307795.0111020717.6c8b7ed4@posting.google.com... > Its NAT! are you using a "Firewall" does your wireless "gateway" takes > one "real" IP address and the clients use a reserved address? I'm quite sure you can run a VPN session using the nortel extranet client (connecting to a contivity box at the corporate end) through a session using NAT. I connect to a corporate VPN all the time and used to connect through a Linksys using NAT all the time and never had any trouble. I use the Nortel client to get to a contivity box as well. If you asked me I'd guess there is something going on your corporate VPN authentication - maybe you sessions are expiring for some reason. I'm not a VPN expert, but isnt there some IP encapsulation going on anyway with IPsec or L2tp that would make NAT pretty much irrelevant? > > dzerzhin@yahoo.com (Alex) wrote in message news:<ab6bb229.0110301543.25dd0ca0@posting.google.com>... > > I'm using UofChicago's wireless LAN to get on the Internet, which > > works great. But once i try to go from their LAN to corporate VPN > > (using Nortel Extranet client), Maybe UofC's network doesn't like something your PC is sending/receiving to keep the session alive - I've had trouble with VPNs in the past where networks wouldn't necessarily allow all the ports the VPN required. If those ports are being dropped for some reason that would explain your sessions timing out - the packedts on ports needed to keep the tunnel alive aren't being received at the host or client, and the tunnel eventually dies. Any VPN experts wanna tell me I'm full of it (I'd appreciate it, since I'm sort of technical novice with VPN anyway). Regards, Rob
Technical Details
Message-ID:
<tu5vbmnqdjrq37@corp.supernews.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mailReferences:
<ab6bb229.0110301543.25dd0ca0@posting.google.com> <64307795.0111020717.6c8b7ed4@posting.google.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 104fd2,91ea197f383cf8c1 X-Google-Attributes: gid104fd2,public X-Google-Thread: 10d5fa,91ea197f383cf8c1 X-Google-Attributes: gid10d5fa,public X-Google-ArrivalTime: 2001-11-02 12:09:27 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mail From: "Rob Froelich" <froelich@chicagonet.net> Newsgroups: alt.internet.wireless,chi.internet Subject: Re: Failing to use corporate VPN from a wireless LAN Date: Fri, 2 Nov 2001 14:10:16 -0600 Organization: Posted via Supernews, http://www.supernews.com Message-ID: <tu5vbmnqdjrq37@corp.supernews.com> References: <ab6bb229.0110301543.25dd0ca0@posting.google.com> <64307795.0111020717.6c8b7ed4@posting.google.com> X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Complaints-To: newsabuse@supernews.com Lines: 40