Hello,
My company has 2 centers main-Center and an Branch(100Km apart), they are connect by an VPN service Using Cisco 1841 and Cisco 1761(At Branch) Routers. All intenet access to the Branch is through the Vpn from the Main Center. The problem i am facing is that i am trying to establish an Vpn session through nortel VPn software to an Remote Client site from the Branch office which i am unable to connect it give an error message "Secure connection has been lost". When i try doing the same through the main center it connect without any problem.Also, at the branch office i am able to acces sites and other servers outside our network. Things to Note :
1) all traffice between the 2 centers is unrestricted.
2) On MAin router from which internet is being accessed all traffice on ports ISAKMP ESP AH is open to and from the Remote Clients VPN Router/firewall.
3) on the Branch router all traffice is open in and out to the Remote Clients Public Ip.
Now, to analyze the problem i did an ethreal packet sniffing when try to connect to remote clients VPN. the results are as follows:
1) I see traffice to the renote client site as ISAKMP( Agressive Mode), A response back from client is recieved.
2) Then there is traffice and response for ISAkMP(transaction (Config Mode).
3)Then i can see traffic from My machine to the remote site as ESP, I can see 31 packets sent but no packets recieved.
4) After about 51 seconds of the initiating the process i see ISAKMP(informational), for which i get an response back as ISAKMP(informational).
5) Immediately after that ICMP Destination unreachable, form my machine . Then i cant ping the remore Nortel fireall for 2-3 Minutes.
I have also checked the NAT translations on the Main Router . It show the ISAKMP traffice from My machine Ip to the Remote clients Firewall Ip and the ICMPerr
The problem is that i need to get this up and runningas this is Imp. Any help is welcome . Plesae let me know if u need details..
Regards, Bill