Hi Mike,

That’s an interesting problem and I have some additional questions. Unfortunately it’s a little off topic for this post and since there are 50+ people subscribed to this thread I want to keep the discussion on-topic. If you post your question/problem on the discussion forums I’ll be sure to reply as will a few others probably.

Cheers!

Hi Thomas,

Unfortunately I believe that hardware has already been EoL by Avaya.

http://support.avaya.com/css/P8/documents/100120822

Sorry.

I need two “Advanced routing licenses” for Nortel 1750, please helpme leting me know what part number it is, and who could be able to provide it.
Now, if some one from the forum is able to provide these, please letme know to tbravot AT yahoo.com

Regards

Editor: updated to remove the email address and save the SPAM.

Hi David,

Sorry for the late response… what’s the route for the tunnel you are working with?

It’s not a default route is it? 0.0.0.0?

Cheers!

CES#sh ip route
Protocol IP Address      Mask            Cost Next Hop        Interface
------------------------------------------------------------------------
RIP      0.0.0.0         0.0.0.0         [13] 66.162.203.82   68.153.238.18
STATIC   0.0.0.0         255.255.255.255 [10] 68.153.238.17   68.153.238.18
DIRECT_N 10.39.0.0       255.255.248.0   [0]  10.39.0.3       10.39.0.3
DIRECT_H 10.39.0.2       255.255.255.255 [0]  127.0.0.1       127.0.0.1
DIRECT_H 10.39.0.3       255.255.255.255 [0]  127.0.0.1       127.0.0.1
STATIC   66.162.203.80   255.255.255.252 [10] 68.153.238.17   68.153.238.18
STATIC   66.162.203.82   255.255.255.255 [10] 68.153.238.17   68.153.238.18
DIRECT_N 68.153.238.16   255.255.255.248 [0]  68.153.238.18   68.153.238.18
DIRECT_H 68.153.238.18   255.255.255.255 [0]  127.0.0.1       127.0.0.1
Total route(s) 9
CES#
CES#
CES#
CES#sh ip route
Protocol IP Address      Mask            Cost Next Hop        Interface
------------------------------------------------------------------------
STATIC   0.0.0.0         0.0.0.0         [200] 97.75.157.210   68.153.238.18
STATIC   0.0.0.0         255.255.255.255 [10] 68.153.238.17   68.153.238.18
DIRECT_N 10.39.0.0       255.255.248.0   [0]  10.39.0.3       10.39.0.3
DIRECT_H 10.39.0.2       255.255.255.255 [0]  127.0.0.1       127.0.0.1
DIRECT_H 10.39.0.3       255.255.255.255 [0]  127.0.0.1       127.0.0.1
STATIC   66.162.203.80   255.255.255.252 [10] 68.153.238.17   68.153.238.18
STATIC   66.162.203.82   255.255.255.255 [10] 68.153.238.17   68.153.238.18
DIRECT_N 68.153.238.16   255.255.255.248 [0]  68.153.238.18   68.153.238.18
DIRECT_H 68.153.238.18   255.255.255.255 [0]  127.0.0.1       127.0.0.1
Total route(s) 9
CES#

Thanks so much!

Hi David,

You should be able to make the static route more costly…. so your RIP route will be preferred and then in it’s absence the static route will take over.

When you define the remote IP network in the branch office profile just set the COST to a value higher than your RIP route/tunnel.

Cheers!

Here are the password recovery procedures.

Unplug the router for 30 seconds, and then restart it. Push in the button labeled “REC” located on the back panel of the router within the pinhole.
Open your internet browser and access the router’s user interface. Type “192.168.1.1” into the address bar.
Click the “Restore original factory settings” button, then click on the “Restore” button. Once the process is complete, you will receive a message stating “Successful Factory Restore.”
Restart the router again. The factory settings will have been restored to the router. The user ID will now be “admin” and the password will be set to “setup.”

David

Thanks!!

Never mind, forgot that the options are available in both the defined pool and the main DHCP server config. All fixed.

Thanks,

Ray

Hi Rune,

You’ll need a support contract from Avaya to upgrade the NVR 1010. I also believe they have been discontinued so I’m not sure Avaya would even sell you a support contract. Your best bet would be to contact your Avaya sales engineer.

Good Luck!

I would check and re-check your configuration. If you are using aggressive mode what are you using to authenticate the connection? Are you sure you have the same Initiator ID on both VPN routers? Have you enabled the Branch Profile on both VPN routers? (I believe it defaults to disabled). Are you sure you are using the same pre-shared key on both VPN routers?

Good Luck!

I am trying to make a VPN between 2 Nortel contivity equipments, in my side the equipment is 1010 and it is connected to a DSL service through PPPoE.
I am getting the static public IP address direct to the device, the ISP device is working as a bridge.

in the other side they have a PUBLIC IP to make the connection and have other offices connected

We are setting up the VPN as initiator-responder with 3DES 1024 bits group 2 IPSEC, Preshared Key and No NAT.

unfortunately i have not been able to establish the connection I am receiving always the error:

FAILED LOGIN ATTEMPT
IPSEC 192.x.x.x. has no active sessions
IPSEC 192.x.x.x. has no active accounts
DELETING ISAKMP SA with 192.x.x.x.

any advise of what is wrong?

thanks in advance.

Juan

Hi Gerd,

You need to modify the FW/NAT table to utilize the new IP addresses. You’ll need to launch a Java based utility from the Contivity management interface.

Good Luck!

I have a 1010 operating here with a block of 8 public IP’s, used for different purposes, mainly through NAT. I now had to an additional block of 8 IPs, naturally in a complete different range. These are not recognized by my current config; I assume I have to add them to the 1010s configuration but I have now idea how. Any help would be appreciated!

Thanks

Hi Luger,

You can find the manuals on the Avaya support website which is here – http://support.avaya.com/css/Products/P0815/Installation,%20Migrations,%20Upgrades%20&%20Configurations

Within the Avaya VPN Router management GUI you should find Backup (or Auto Backup) under the Admin tab. From this point you can configure a FTP server to backup the entire system to although the FTP destination needs to be on the LAN side of the VPN router.

Good Luck!

Hi Ibrahim,

You should probably download the documentation and read it over… setting up a VPN for the first time is not a trivial matter and can be quite complicated depending on your configuration.

Cheers!

HAI,

We have installed new broadband connection. DSL router itself doing natting function. We have a nortel contivity 1010 box. We need to connect it to the DSL router. Could you suggest us how to proceed.

Thanks
Ibrahim.

Hi Devendra,

Assuming that the NVR (formerly Contivity Extranet Switch) has a default route to the Internet that includes the main office peer IP all you should need to-do is to change the remote IP address under the branch tunnel connection profile (Profiles -> Branch Office -> Group -> Connection).

Good Luck!

Hi Alexey!
Have you any CF image from 1xxx device? I have problems with CF on my Contivity 1100.