- Nortel VPN Router Troubleshooting

74 Chapter 4 Troubleshooting
NN46110-602
Remote host not responding
Cause: This indicates that the VPN Router never responded to the IPsec
connection attempt or that User Datagram Protocol (UDP) port 500 is blocked.
Action: Verify that the VPN Router is accessible by pinging the host name or IP
address that you filled in the destination field. To ping a host called
extranet.corp.com, for example, open an MS-DOS command prompt and type
ping extranet.corp.com. If you receive a reply message, it indicates that the
VPN Router is accessible but is not responding. If you received a message that
says Request Timed Out from the
ping command, it means that the VPN Router
is inaccessible. You can further diagnose the problem using the MS-DOS Trace
Route command (
tracert.exe) on Windows systems.
The VPN Router allows only a certain number of PING packets from another
Internet host before requiring a tunnel connection to be established.
Maximum number of sessions reached
Cause: This indicates that the maximum number of users for the account you are
using are currently logged in.
Action: If you are the only user with access to your account, it is possible to get
this error if you restarted an IPsec connection immediately after losing the dial-up
connection to your ISP. This is because the VPN Router takes up to one minute to
determine that your connection is dropped and logs you off from your account.
Simply wait a minute and retry your connection.
Login not allowed at this time
Cause: This indicates that your account is limited to specific hours of access and
you are trying to connect outside of the allowed time.
Action: Contact your network administrator if you are unsure of your specific
hours of access.
Authentication failed
Cause: The IPsec user name is incorrect or the password is invalid for the user
name entered.