2/26/07 - I'm still trying to figure this out without much sucess so far. Does anyone know if Symantec uses this port (UDP 2001) for anything? I get a lot of hits on Google if I seacrh on UDP 2001 - stuff about worms in particular. Thanks Phil I have version eac607d of the Nortel VPN clinet configured on my Vista workstation at home. It installs ok and everything apears okay until the final stages of the connection when I get errors about UDP port 2001 not being open. I have tried everything psooible to open this port and even completely turned off the firewall but it still doesn not work. Any thoughts on what I might try? Thanks Phil Fri Feb 02 15:48:05 2007 | RpcService | I | Rpc string binding composed.Fri Feb 02 15:48:05 2007 | RpcService | I | Rpc server binding handle created.Fri Feb 02 15:48:05 2007 | RpcService | I | Rpc server binding handle configured.Fri Feb 02 15:48:05 2007 | RpcService | I | Initializing connection to the service.Fri Feb 02 15:48:05 2007 | RpcService | I | Checking Nortel CVC service.Fri Feb 02 15:48:05 2007 | RpcService | I | Nortel CVC service seems to be running good.Fri Feb 02 15:48:07 2007 | Isakmpd | I | Connection initiated to ****** [******] using Diffie-Hellman group 8.Fri Feb 02 15:48:08 2007 | Isakmpd | E | Unable to complete encryption handshake with remote side. Encryption Mismatch.Fri Feb 02 15:48:08 2007 | RpcService | I | Rpc string binding composed.Fri Feb 02 15:48:08 2007 | RpcService | I | Rpc server binding handle created.Fri Feb 02 15:48:08 2007 | RpcService | I | Rpc server binding handle configured.Fri Feb 02 15:48:08 2007 | RpcService | I | Initializing connection to the service.Fri Feb 02 15:48:08 2007 | RpcService | I | Checking Nortel CVC service.Fri Feb 02 15:48:08 2007 | RpcService | I | Nortel CVC service seems to be running good.Fri Feb 02 15:48:10 2007 | Isakmpd | I | Connection initiated to ****** [*******] using Diffie-Hellman group 2.Fri Feb 02 15:48:13 2007 | ConfMode | S | Authentication successful.Fri Feb 02 15:48:13 2007 | ConfMode | I | IP Address ********.Fri Feb 02 15:48:13 2007 | ConfMode | I | Disable Keepalives.Fri Feb 02 15:48:13 2007 | ConfMode | I | Keepalive interval set to 120 seconds.Fri Feb 02 15:48:13 2007 | ConfMode | I | Maximum keepalive retransmissions set to 5 retries.Fri Feb 02 15:48:13 2007 | ConfMode | I | Mandatory tunneling enforced.Fri Feb 02 15:48:13 2007 | ConfMode | I | Domain name set to "*******".Fri Feb 02 15:48:13 2007 | ConfMode | I | Primary Domain Name Server "*******".Fri Feb 02 15:48:13 2007 | ConfMode | I | Secondary Domain Name Server "********".Fri Feb 02 15:48:13 2007 | ConfMode | I | Primary WINS Server "*******".Fri Feb 02 15:48:13 2007 | ConfMode | I | Secondary WINS Server "*******".Fri Feb 02 15:48:13 2007 | ConfMode | I | Saving Password on client is turned Off.Fri Feb 02 15:48:13 2007 | ConfMode | I | Primary Failover "********".Fri Feb 02 15:48:13 2007 | ConfMode | I | Secondary Failover "*******".Fri Feb 02 15:48:13 2007 | ConfMode | I | Received NAT Keepalive value of 18 seconds from switch.Fri Feb 02 15:48:13 2007 | ConfMode | I | Current time on switch is 02/02/07 20:48:13 GMT.Fri Feb 02 15:48:14 2007 | Nat-Traversal | I | NAT Traversal invoked on port 2001.Fri Feb 02 15:48:19 2007 | Isakmpd | I | Silent keepalives enabled.Fri Feb 02 15:48:19 2007 | NameSrvr | W | Adding DNS Servers "**********".Fri Feb 02 15:48:19 2007 | NameSrvr | W | Adding WINS Servers "*************".Fri Feb 02 15:48:19 2007 | Failover | I | Failover list set to "************* ".Fri Feb 02 15:48:48 2007 | Isakmpd | F | Windows Firewall should be configured to allow VPN NAT Traversal Port 2001.

Any luck with this problem? I have run into the same problem except I do not get past the group 8 attempt.

TryRev 10.x of the Client... Nortel does not allow ordinary users to download it!! But I have found both 32bit and 64bit versions here:- http://support.galileo.com/downloads/ASMWEb/Nortel/Version10.01.052/NVC64-10.01.052.exe http://support.galileo.com/downloads/ASMWEb/Nortel/Version10.01.052/NVC32-10.01.052.exe

Thanks I had been trying to find my link but could not. I am not sure why Nortel denies folks the ability to download the client, what good it is without the back end? They could certainly control which clients and how many connections on the server side?

Stewart, It's required password to extract the file. =(