Nortel Contivity and NAT

A recent deployment of a hub and spoke Nortel VPN solution using a 1600 at the core and 100s at the satellites. The clients behind the 100's had difficulties accessing the Internet and the Internal network at the same time through the 1600. Either Internet access was available, or access to the Internal net was available, but not both.

This problem resides on the 1600. The device actually NATs the source IP of ALL TRAFFIC routing through the device. This is a problem if your internal router at the core points out to another default route, and does not use the 1600 as the default gateway. To resolve this issue, add a static route for the external, live IP of the 1600 external interface to your internal router and point that route at the internal interface of the Contivity 1600.

Rate this Tip To rate tips, you must be a member of SearchNetworking.com. Register now to start rating these tips. Log in if you are already a member. Submit a Tip Digg This!     StumbleUpon     Del.icio.us    RELATED CONTENT Network Engineering How to test LAN switch energy efficiency Testing LAN switch power consumption: A best practices guide Desktop virtualization network requirements Preventing hacker attacks with network behavior analysis IPS Internal cloud computing on the cheap: Free automated provisioning? Improved storage performance without adding more disk Troubleshooting -- 'Network Know-How' Chapter 17 Windows Server 2008 IP routing configuration: Static and dynamic RIPv2 Understand Windows tracert output to troubleshoot network connectivity Using tracert and TTL to troubleshoot network connectivity problems Routing and Switching How to test LAN switch energy efficiency Testing LAN switch power consumption: A best practices guide Dynamic IP routing and routing protocols Monitor your network traffic with MRTG How routers work: An overview for networking pros Secure Cisco routers against IOS flaw attack Network summarization -- Supernetting and wildcard masks Routing: Five common, easily avoided errors Router Expert: Building a WLAN proxy server, implementing ASR Router Expert: Building a WLAN proxy server, implementing WPAD Wide Area Networks Application switch testing: An easy RFP guide How to calculate network bandwidth requirements Disabling IPv6 in Windows Vista -- Pros and cons Advanced OpenVPN configuration Basic IPsec VPN topologies and configurations - from IPsec Virtual Private Network Fundamentals Configuring a VRF Preparing an RFP, Part 3 - Measure the results VPLS, a new Layer 2 MPLS VPN technology SRLGs solve network reliability problems IPsec VPN clients RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.