I have read thread 902-1142872 and we are trying to do the same thing. We have a Cisco 3640 at one end with multiple sites on the other spokes with Nortel 1100 routers using Verizon's MPLS network. The 1100s are fairly simple - T1 card pointing at the MPLS WAN and LAN 0 pointing to the Regional Office Local Area Network switch. Both interfaces are set to Private with a Default Route set in the 1100 pointing at the WAN interface.
We can get traffic flowing for the end users across the LAN in the office to the WAN and back to the HQ network and back out to the Internet. What is interesting is that even with the Contivity Firewall enabled and all of the Contivity Interfaces Filters set to let any to any traffic flow for IP, TCP, UDP and ICMP, we still can not ping or connect via HTTP to a Sony Video Conferencing unit. We also have a problem pinging Windows XP systems if the firewall is enabled. If we turn it off then we can ping them. The other interesting element is that with the XP Firewall enabled and the PC being behind the Nortel our Trend Anti-Virus updates are not being pulled for HQ and they can't get their network backup software to run. Both use various ports to talk with servers back at HQ.
What we don't understand is that this only occurs with the Nortel 1100 sites and not those that have an older Cisco 2621 in place. The key difference is that the Nortel has the firewall turned on and ther must be some sort of default filtering that is enabled even with all of the filtering set to permit all.
What are we missing?
We can get traffic flowing for the end users across the LAN in the office to the WAN and back to the HQ network and back out to the Internet. What is interesting is that even with the Contivity Firewall enabled and all of the Contivity Interfaces Filters set to let any to any traffic flow for IP, TCP, UDP and ICMP, we still can not ping or connect via HTTP to a Sony Video Conferencing unit. We also have a problem pinging Windows XP systems if the firewall is enabled. If we turn it off then we can ping them. The other interesting element is that with the XP Firewall enabled and the PC being behind the Nortel our Trend Anti-Virus updates are not being pulled for HQ and they can't get their network backup software to run. Both use various ports to talk with servers back at HQ.
What we don't understand is that this only occurs with the Nortel 1100 sites and not those that have an older Cisco 2621 in place. The key difference is that the Nortel has the firewall turned on and ther must be some sort of default filtering that is enabled even with all of the filtering set to permit all.
What are we missing?