From: mike-newsgroup@-DELETETHISPART-.upcraft.com   
      
   neicymath@hotmail.com wrote:   
   > We have been trouble shooting a VPN issue for several weeks and are   
   > quite perplexed! In a test enviroment, we have a branch office tunnel   
   > configured on a Nortel 1010. We have the public interface of the 1010   
   > connected into a 3Com hub. We also have the ethernet port from our   
   > Westell modem plugged into the same hub. The Westell is configured with   
   > the network 192.168.0.0/24 and the ip of the Westell is 192.168.0.1.   
   > The public interface of the 1010 is configured with the ip 192.168.0.2,   
   > its subnet mask is 255.255.255.252 and its gateway is the Westell. We   
   > have the private interface of the 1010 plugged into a different hub and   
   > it is using a different ip network. The tunnel comes up, but we can   
   > ping the mgmt IP of the 1010 only intermittently. Sometimes we can ping   
   > it fine, sometimes it won't ping. However, if we leave a continues ping   
   > running, we discovered that we do get a successful ping every 240   
   > pings, or every 4 minutes! We also discovered that if we plug the   
   > public interface of the 1010 directly into the Westell, that the pings   
   > work fine. Any ideas!?   
   >   
      
   If it works fine plugged directly into your modem then just do that.  If   
   you want to know the reason it fails with the switch, I would guess the   
   port speed autodetection is failing, try setting the speed and duplex   
   setting manually on both devices (VPN and modem).  Also make sure that   
   the public interface is not cross-wired to the private interface through   
   that hub or you will have problems.  (The public interface thinks the   
   packets from the private interface are IP spoofing attempts)   
      
   It goes without saying that you tried a different switch and cables right?   
      
      
      
   --   
   WARNING!  Email address has been altered for spam resistance.   
   Please remove the -deletethispart-. section before replying directly.   
   Mike Drechsler (mike-newsgroup@-deletethispart-.upcraft.com)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)