Nortel Networks Contivity 221 problem

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Contivity 221 problem Ray 03-01-06
Posted by Ray on March 1, 2006, 7:45 pm
Please log in for more thread options
I'm having a hard time getting a Contivity 221 to set up a Branch Office
tunnel to a Contivity 1050. The config is ABOT.

Everything appears to be programmed correctly but the tunnel won't
establish.

Looking at the logs on the 1050 it is reported that there is a 'Diffie
Hellman group mismatch' yet both sides are setup as 3DES/MD5 and DH2 set on
the 221. The 1050 is set up with Triple DES with Group 2 (1024 bit prime).

Anybody got any ideas?????

thanx

Ray



Posted by Nortec in MN on March 15, 2006, 11:12 pm
Please log in for more thread options
Check your remote IP address ranges.

> I'm having a hard time getting a Contivity 221 to set up a Branch Office
> tunnel to a Contivity 1050. The config is ABOT.
>
> Everything appears to be programmed correctly but the tunnel won't
> establish.
>
> Looking at the logs on the 1050 it is reported that there is a 'Diffie
> Hellman group mismatch' yet both sides are setup as 3DES/MD5 and DH2 set
> on
> the 221. The 1050 is set up with Triple DES with Group 2 (1024 bit
> prime).
>
> Anybody got any ideas?????
>
> thanx
>
> Ray
>
>



Posted by Ray on March 21, 2006, 7:36 pm
Please log in for more thread options
Nortec in MN wrote:

> Check your remote IP address ranges.
>
>> I'm having a hard time getting a Contivity 221 to set up a Branch Office
>> tunnel to a Contivity 1050. The config is ABOT.
>>
>> Everything appears to be programmed correctly but the tunnel won't
>> establish.
>>
>> Looking at the logs on the 1050 it is reported that there is a 'Diffie
>> Hellman group mismatch' yet both sides are setup as 3DES/MD5 and DH2 set
>> on
>> the 221. The 1050 is set up with Triple DES with Group 2 (1024 bit
>> prime).
>>
>> Anybody got any ideas?????
>>
>> thanx
>>
>> Ray
>>
>>
No - checked that.

The tunnel will come up if I use a fixed WAN address on the Contivity 221.
If I use DHCP then the problem arises....

Ray

Similar ThreadsPosted
Contivity 221 problem March 1, 2006, 7:45 pm
problem with a Contivity (or VPN router) 600 October 25, 2006, 1:03 pm
Contivity 1100 Frame Relay problem August 29, 2006, 11:17 am
nortel contivity branch office vpn problem December 25, 2005, 3:50 pm
VPN problem with Nortel Contivity Client V04_86.102 August 2, 2008, 8:51 pm
Contivity 221 and Contivity 2700 Branch Office Tunnels October 11, 2005, 11:06 am
Odd PRI problem on 81c April 4, 2006, 11:31 pm
problem with NAM vm box June 1, 2006, 10:52 am
Problem. December 21, 2006, 8:07 am
Callpilot Problem March 9, 2005, 2:14 pm
Interesting problem August 31, 2005, 1:02 pm
MICS 7.0 and PRI problem October 29, 2005, 2:48 am
Found the problem April 18, 2006, 10:22 pm
Problem with QoS on 5520 using EPM November 17, 2006, 3:02 pm
NAM 4 interesting problem July 25, 2007, 4:43 pm