Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Contivity 1750 VPN router Internet Access 1

Status
Not open for further replies.

smahajan

IS-IT--Management
Jul 17, 2007
36
0
0
CA
We have a Contivity 1750 VPN router and we are trying to set up internet access from it. There are two ethernet ports on the router. LAN0 and LAN1. The router gives us the ability to make either one of them a public or a private interface. So we have configured our WAN IP address on the public interface and LAN IP address on the private interface. We tried connecting to it from our branch office and we were able to ping our WAN IP and also were able to establish a PPTP connection to the router. However we cannot ping any external IP address(including the default gateway provided by our ISP) from the router. Also, the router says that the WAN interface could only be either an ATM or a frame relay connection, however we have a DSL connection for the internet. Therefore, under the WAN interfaces menu, the contivity 1750 does not show any WAN interfaces for us.
My question is whether we need to put an additional WAN card on the router specifically for the DSL connection. If no, why should we not be able to connect to the internet.
Thanks in Advance
Your help is really appreciated.

 
We have tried to disable the stateful firewall, the interface filter one by one as we cannot disable all together as the router seems to block all traffic if all filters are turned off together. We couldnt get to the internet with any filter turned on at one time.
 
You can't have both interface filters and statefull firewall off. One or the other applies.
 
i think you're looking at your WAN the wrong way, for the Nortel, a WAN interface is a T1 card or something like that.
you should have two LAN interfaces listed under the LAN settings, set one as your private (internal network) and the other as your Public (external/DSL) connection.

you'll also have to add a rule under the NAT filters to allow traffic, set it up to allow outbound traffic
Source-any
Destination-Any
Service-Any
NAT Action - Port Mapping
Translated Source - Public Interface
Translated Destination - Any

that should get you to the outside world, then you can lock it down tighter as you see necessary.

hope that helps.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top