Below are some troubleshooting guides for specific topics.
(1) Your Virtual Network Connection
(2) VPN troubleshoot error messages
(3) VPN Modem Troubleshooting Guide
(4) VPN Provider Troubleshooting Guide.
(1) Your virtual private network connection
You have problems connecting to the Internet at home before you ask for help.
1. Do you have an IP address? Try ipconfig / all. If you do not have an IP address, restart the computer. If this does not work, power up the cable / DSL modem and routers and restart the computer again after the network devices are outdated and stable. Make sure all network cables are tight.
2. After the computer restarts, check that the network adapter is active and the packets are leaking. Repeat the ipconfig / all check.
3. Check your connection by checking several websites. If this does not work, ping the loopback address 127.0.0.1. If this fails, your adapter may not work or be configured incorrectly.
Check your ip address. From the command line, type ipconfig / all (as shown in the figure), you should see the IP address and several DNS server addresses. The Domain Name System (DNS) is how domain names on the Internet are located and translated to IP addresses and are needed to browse the Internet.
Ping 127.0.0.1 - loop check (as shown in the figure). The loopback test is used to check the response of the IP stack. If it expires or you receive an error message, the problem may occur if one or more of the following conditions are true:
* TCP drivers are damaged
* Network adapter does not work
* Another service interferes with IP
Check the network adapter, click the Start menu, Settings, Control Panel, and select Network Connections. Double click on the LAN connection or wireless adapter you are using. Make sure it is connected. If you have multiple network cards, disable the one that you do not use.
There must be packets displayed in both the Sent and Received messages. If the Received counter is 0, verify that the adapter has an IP address. Select "Properties".
Check the Show icon boxes and let me know below. An icon with two PCs will appear at the bottom right of the taskbar in the tray area and will blink while sending and receiving packets. You can mouse over the icon to get the status and click on it to get more detailed information.
Tracert displays the connection path to the target location and the number of transitions. Each hop is a trip from one router to another. Tracert is a handy tool for understanding network problems and for determining the delay between jumps.
Ping is used to determine if a host exists and is active on the network, and can determine the time it takes for a route to a device. You can enter a hostname or IP address if you know it. If the request expires, the host is unavailable because it is down or there is a problem with the connection. Try several sites, if none of them work, then ping the loopback address 127.0.0.1 Also, if your DNS is not working or configured correctly, you can only ping the host with the IP address and you will not be able to browse the Internet .
If you experience intermittent problems, ping -t for 5-6 minutes, and then press CTRL to see the test results to determine if you are removing network packets (lost packets). If so, this usually indicates a problem with the ISP or a cable / DSL modem problem. See VPN Provider Troubleshooting Guide
(2) VPN troubleshoot error messages
Error message Q1: the remote host is not responding: or it was not possible to resolve the IP address of the remote server
Cause. This indicates that a connected VPN switch never responded to the connection attempt. The problem can either be with the Contivity switch itself (the switch can be turned off), or there may be a problem with the resolution of the IP address on your computer.
Action: Try to verify the recipient's name (example: VPN.something.com). If you received the "Request Time" message from the ping command, call your ISP to verify that their DNS is working correctly.
Error message Q2: maximum number of sessions
Cause. This indicates that the maximum number of users for the account being used is currently registered.
Act. If you are the only VPN user with your account, you can get this error if you reestablish the connection immediately after losing the connection of the remote access to your Internet provider. This is due to the fact that the Contivity VPN switch takes up to one hour to determine that your connection has been disconnected and logged out of your account.
Error message Q3: Login failure, consult the switch log for more information.
Cause. The username or password is incorrect for the username entered.
Act. Check that the username entered is correct and try the password again before reconnecting.
Error message Q4: the physical connection was lost
Cause. Your connection to your ISP has been disabled.
Act. Reconnect to your ISP before reconnecting to a remote network.
Error message Q5: connection with a secure connection is lost
This message may occur for several reasons, and there are several recommended actions you can take to reconnect.
Causes:
If you get this error before the client connects, then something is blocking the required port (for example, port 50 ESP). This can occur if your firewall is configured incorrectly and restricts the required ports.
If you get this error during the connection, and you suddenly get an error, it may mean one of the following:
1. Something closed the connection;
2. Switch VPN Contivity, in which you tried to connect to the idea that your client was turned off or disconnected;
3. Your local ISP did something that interfered with your network connection long enough for the VPN Contivity switch to detect that your client is not responding;
4. The VPN Contivity switch to which you are connected has either blocked your connection, or the switch no longer responds, or a device that does not support IPSEC NAT Traversal, causes connection failures.
Action (s):
1. Try resetting the Contivity connection by clicking the Connect button. If this works, the connection was probably lost due to a wait timeout configured on the Contivity VPN switch. If no data is transmitted over the Contivity connection for a long period of time, 15 minutes or more, the Contivity VPN switch automatically disconnects the connection;
2. If you were unable to successfully reconnect to the connection, a remote access connection may prevent data from moving between the Contivity virtual client and the VPN switch. Connect the dial-up connection and reconnect before trying to reconnect to the Contivity VPN switch;
3. If you still cannot connect to the Contivity VPN switch, open a command prompt and try to verify the connection of the VPN switch using the host name or address specified in the "Destination" field.
(a) If you get a "Destination Unreachable Error" message, a routing problem occurs in the ISP.
(b) If you receive the “Requested timeout” error message, the Contivity VPN switch is probably not available, and you should contact your network administrator.
4. If you continue to receive this message and cannot connect, it may indicate that the VPN switch with support cannot contact the client because it is behind some NAT (Network Address Translation) device. NAT (Network Address Translation). Bypassing allows multiple devices on the private network to simultaneously access the Internet, each of which does not require its own external IP address. Most hotels and airports that provide Internet connections use NAT to connect to the Internet.
Error message Q6: Could not change the routing table
Cause. A message means that the user, the application on your computer, or your ISP attempted to change the routing table using an ICMP redirect attempt, and this was unsuccessful. The client detects an attempt to make changes, determines that it is a security break, and disconnects the client connection. Every time you make a VPN connection, you cannot change the routing table, because the VPN client sees this as a security risk and you will disconnect.
Some applications require ICMP redirection to work, for example, a game or other third-party software.
Action: If you get this error and cannot connect because of an ICMP redirect attempt, turn off all other applications that you are using, which may trigger an ICMP redirect attempt. If it is the provider that does this, you need to block the ICMP redirect request. You can determine that ICMP redirection has occurred by seeing the message that the IP address routing table has been changed.
Q7 Error Message: Retrieving Banner Text Information
Cause. A message means that you have encountered a Banner Sock problem and you will see a window displaying the message “Receiving Banner Text” and then disconnecting.
Actions:
1. Disable the firewall completely to check. This is a problem with port 500 and often means that you have a personal firewall that blocks port 500, or you have a router that does not support pass-through IPSEC, and you connect to a VPN switch that does not have NAT Traversal enabled.
2. If you are using a wireless connection, temporarily remove the wireless connection from the image and focus on the Ethernet card. Check the speed and duplex settings of the Ethernet card, and then verify that the hub, switch, or router at the other end has the same settings. If not, the VPN connection will decrease as the link increases and decreases, or due to the large number of errors on the duplex port and the inconsistency in speed.
3. A firewall that blocks the connection, so that the system fails. (This rarely happens) NSDF (Norton Symantec Desktop Firewall) and NSPF (Norton Symantec Personal Firewall) can do this, though, if you do not trust the IP address of the VPN connection.
If you do not trust the VPN address of the VPN client, the firewall will crash. In your Internet browser, click “Tools”> “Internet Options”> “Security”> “Trusted sites”> “Sites” and add the target VPN addresses (s) to your trusted sites.
Error message Q8: you have already installed the maximum number of adapters
Cause. You may have installed many virtual adapters in your IP stack.
Actions:
1. Remove all unnecessary adapters;
2. Create multiple boot scripts by disabling adapters that are not required for this feature;
3. You can also get Banner Sock errors for Win 95 and 98 units with this condition;
4. For more information, see this Microsoft article: KB217744: you cannot bind protocols to more than 5 network adapters (copy and paste into the search toolbar> type).
Q9 Update Errors: Below are some errors that may occur when attempting to update / install the Nortel VPN Client 4.65
Error (1): Failed to get the registry key value for NT_IPSECSHM
Cause. This is because an important registry key is not found in the system registry.
Actions:
1. Uninstall and reinstall the VPN software
Error (2): Login failed due to: driver failure
Cause. This is usually caused by either a lack of administrator permissions on the PC, or an attempt to install / use a Nortel VPN client that precedes the operating system.
Actions:
1. Make sure you have administrator rights on the PC.
2. Update / install the latest version of the Nortel VPN Client.
Error (3): Error creating socket with 10048.
Cause. This problem usually occurs when you have another VPN client software installed on the system. The most notable conflicting clients are: AOL, Cisco VPN, SSH Sentinel, and PGP clients.
Actions:
1. Removing these clients will solve the problem in most cases.
(3) VPN Modem Troubleshooting Guide
Q1 Are cable modems supported for VPN access?
Yes, you can use cable modems to access the VPN. However, you should be aware of the following conditions and be able to work in them:
* Some cable modems require you to log on to the NT network in order to obtain authentication.
* Some cable modems use a client similar to Extranet VPN client, and both will not run at the same time.
* Some rules for using cable modem / acceptable use indicate that you cannot use them for business purposes or they want to charge you for commercial use. Make sure you read your contract carefully.
* Your cable modem provider is your provider. See the VPN-connection-guide.html "> Troubleshooting Guide for more information.
Q2 Why does my modem seem to be unstable?
Always make sure that you do not allow the operating system to choose a common modem. If necessary, go to the appropriate website for the modem vendor and get the updated INF file so that the appropriate settings are configured for the modem.
Q3 Why do I always get a slow connection speed than others with the same modem?
1. Always check the modem configuration to ensure that its maximum speed is selected.
2. Usually, when auto-installing modems, the maximum speed is not automatically selected.
3. Do not check the box that says it runs only at maximum speed.
Q4 I connected the modem to the telephone line in the hotel office or in the office, and now it does not work.
Always make sure that the telephone line you are connecting to when you are somewhere is an analog line, not a digital one. Connecting to a digital line may damage your modem, requiring replacement of the device. To avoid these situations, contact your local site support staff.
Q5 Why can't I get a 56Kb V.90 connection from some places where I go?
Here are some of the reasons why you cannot get a 56K connection:
1. You are more than 3 miles from the head office of your telephone company (CO).
2. Your region uses a SLICK or Subscriber Loop system.
3. You are calling from a digital PBX system that creates a digital-to-analog conversion, and then analog-to-digital conversion.
4. Your line contains digital pads or bittable signaling (RBS), which can degrade the speed of your connection.
5. Your wiring may be of poor quality.
6. The firmware of your modem may not be up to date. Make sure your modem has the newest V.90 code installed with all fixes on the supplier’s website.
Q6 Why can't I get higher speed on my 56K v.90 modem to some kind of NAG?
Here are some possible reasons:
1. The 56k v.90 modem is asymmetric in design, where the download speed can reach 56 thousand, and the download speed is up to 33.6 bps. For 56k to work, there must be only one analog-to-digital (A / D) conversion in your local phone loop. Thus, when the modems at both ends are analog, the 56k speed will never be reached, since most changes in the PSTN are performed using digital routing between changes.
2. Some NAG sites use analog phone lines with Cisco modems and standard 56k modems, and most dial-up computers use a similar modem. Between the two modems, it limits the download speed to about 33.6 kbps.
3. In addition, many users may experience lower connectivity reasons due to other reasons, such as poorer line quality. These factors will also contribute to line quality and speed.
(4) VPN Provider Troubleshooting Guide
Q1 If you get the message “Unable to resolve the IP address of the remote server. Verify that the hostname in the destination field is correct. " when trying to connect to an Extranet client.
Try checking the name of the recipient (for example, VPN.something.com), and if he cannot call your ISP to verify that their DNS is working correctly.
Q2 Why do I not have a domain available when dialing my ISP?
Connect to an Internet Service Provider (ISP). Right-click and select the properties button. Click the Server Type tab and make sure that the Log On box is unchecked.
Q3 Why do I seem to be slowly starting my VPN connection?
Попробуйте отключить опцию «Сжатие программного обеспечения» на подключении к Интернет-провайдеру (ISP), поскольку у клиента VPN есть собственное сжатие. Щелкните правой кнопкой мыши и выберите кнопку свойств. Перейдите на вкладку «Тип сервера» и снимите флажок
Q4 Я продолжаю получать сигналы занятости, пытаясь подключиться к моему интернет-провайдеру, что мне делать?
Свяжитесь с вашим провайдером, указав номера, к которым вы пытаетесь подключиться. Много раз вы обнаружите, что может дать вам альтернативный номер, еще не опубликованный, который будет работать нормально. Если вам не нужен другой провайдер, который обеспечивает лучший сервис.
Q5 При настройке значка набора для моего интернет-провайдера, что я должен установить в настройках DNS / WINS?
Ваш интернет-провайдер должен предоставить вам настройки DNS / WINS вашего набора номера. Большинство из них дают вам DNS, в этом случае просто оставьте настройки WINS пустыми.
Q6 Почему, когда я загружаю клиент Extranet на свой компьютер, и Winpoet установлен на моем компьютере, он выходит из строя или работает неправильно?
Существуют проблемы с программным обеспечением Winpoet на ПК с клиентом Nortel Extranet (VPN).
Чтобы восстановить систему, загрузитесь в безопасном режиме и удалите программное обеспечение Winpoet.
Простым решением является установка аппаратного маршрутизатора Linksys BEFSR41. Он имеет встроенный микропрограммный разъем PPPOE, который устраняет Winpoet с ПК и обеспечивает дополнительное преимущество брандмауэра NAT с возможностью подключения до трех других ПК.
Второй вариант - найти клиента PPPOE, который не мешает VPN-клиентам.
Пожалуйста, обратитесь к вашему врачу VPN для руководства по картинкам и более подробную информацию.
Нужна корректировка Qiuck, инструмент, трюк или подсказка? У вашего врача VPN есть лекарство!
