PROBLEM: Nortel Contivity VPN Client from behind a PIX 501

[mcreedjr]

I'm having some trouble getting the Contivity software VPN client to work from a Cisco PIX. The Contivity VPN client is terminating its tunnel on another Contivity VPN server. The PIX and client PC are under my control, however the Contivity VPN server where we're terminating the tunnel is not. The PIX which it passes through is doing PAT. The Contivity client seems like it's connecting, goes through the first few screens, then hangs and says something about it losing the tunnel. I know the software will work from behind PAT because I plugged a cheap D-Link router inplace of the PIX and the tunnel opens just fine. I'm sure its just a config command I'm missing in the PIX.

For further information, please visit

http://www.gottum.com/vpn/

Thanks in advance,
Mike

 

[karpov2]

You need Contivity Server code that will do NAT transversal - introduced with 4.0.