Nortel Networks NN46110-602 User Manual

Page 74

Advertising
background image

74 Chapter 4 Troubleshooting

NN46110-602

Remote host not responding

Cause: This indicates that the VPN Router never responded to the IPsec
connection attempt or that User Datagram Protocol (UDP) port 500 is blocked.

Action: Verify that the VPN Router is accessible by pinging the host name or IP
address that you filled in the destination field. To ping a host called
extranet.corp.com, for example, open an MS-DOS command prompt and type

ping extranet.corp.com

. If you receive a reply message, it indicates that the

VPN Router is accessible but is not responding. If you received a message that
says Request Timed Out from the

ping

command, it means that the VPN Router

is inaccessible. You can further diagnose the problem using the MS-DOS Trace
Route command (

tracert.exe

) on Windows systems.

The VPN Router allows only a certain number of PING packets from another
Internet host before requiring a tunnel connection to be established.

Maximum number of sessions reached

Cause: This indicates that the maximum number of users for the account you are
using are currently logged in.

Action: If you are the only user with access to your account, it is possible to get
this error if you restarted an IPsec connection immediately after losing the dial-up
connection to your ISP. This is because the VPN Router takes up to one minute to
determine that your connection is dropped and logs you off from your account.
Simply wait a minute and retry your connection.

Login not allowed at this time

Cause: This indicates that your account is limited to specific hours of access and
you are trying to connect outside of the allowed time.

Action: Contact your network administrator if you are unsure of your specific
hours of access.

Authentication failed

Cause: The IPsec user name is incorrect or the password is invalid for the user
name entered.

Advertising