I have successfully instaled Contivity VPN client (eac607d.exe) on Vista Home Premium . It was not installed in XP compatibility mode . If I configure it and try to connect , I get this error message : >>> this version of contivity VPN client requires NAT traversal to be enabled <<< I am Connected in Internet via DSL line and Using DSL Modem/Router. Where and howmust I enable the NAT Traversal ??? In PC or DSL ROuter ? Thanks for help. Roman

It's been months that i am looking for a solution to solve this problem. I also have successfully installed Contivity VPN client (eac607d.exe) on Vista. If i am directly connected to the internet (either through WIFI router or with a connection that doesn't request a username/password), then my VPN connection works fine. If i connect to the internet through an ADSL connection that requires a username and password, or if i connect through RTC connection (any dial-up connection in fact), then the VPN connection doesn't work and i get a message saying that the port 15500 on my firewall should be opened. I have read on the web that this is due to "no default gateway on dial-up connection" with VISTA, but i don't really understand the problem and how to solve it (if ever). As i need to connnect fron many places when i travel, i really need to solve this. Thanks for any information on this topic.

Disable IPv6 in the TCP/IP properties for your network adapter.

I have done it but the problem still remains. Can you tell more about your piece of advice? Did you apply it to solve the same problem i have described? I have found on the Nortel website that this problem is known from Nortel and that they will update the VPN Contivity Client to solve it later (but when?). Now the document and software are available on Nortel website for anyone. Just follow this link: http://support.nortel.com/go/main.jsp?cscat=SOFTWARE&resetFilter=1&poid=10621 On the website you can find a pdf document that explains how to install and use the VPN Client v06_07.026 (128 bit), and that describes the known problems that still remain.

Alright folks I've finally decided to drop some peice of advice in this forum but I request you all not to single me out because I am from Nortel. The latest client for windows vista is V6_07.027 which can be downloaded from nortel website (with valid contract) and known to be quite stable release for vista. I read about the problem "NAT traversal needs to be enabled". The answer to this question would be to enable the NAT traversal feature on Nortel Contivity server. The vista is designed in a way which is quite different from XP. Some tweaks which use to help in XP does not work for vista. The solution for this problem is to enable the NAT traversal globally by logging into contivity server management page and then Choose Services-->IPsec. Under IPsec, you have an option to enable NAT traversal. It'll also ask for a UDP encapsulation port, put the port there as 10001. Click on OK. Enabling NAT traversal may have a negative effect on your existing XP/other users so the best practice which i recommend is to make a saparate group of vista users in contivity server and then edit the properties for that group and in the NAT action choose "Always UDP Encapsulation". With my experience I've seen that vista users only works with "Always UDP Encap" option while you may keep the setting "Auto detect NAT" for all other user groups. The story may go on because there could be lot of problems which you may experience but keep me posted and I'll try my best to keep up. Regards; Mohit Nortel Networks Contivity Team

Thanks a lot for your explanation Mohit. I'm happy to see that people from Nortel are concerned by this issue. Actually, the contivity server is controlled by my company, i have no decision power to make any changeof its configuration. I am just a client user, and can act only on my computer. What is really amazing in this issue is that the client v6_07.026 (I can't find the version V6_07.027 that you mentioned on your post) works very fine with connections that don't require username and password (Wifi for example) and doesn't work with dial-up connection (RTC for example). So, I want to believe that it is possible to modify some settings on my Vista computer so that the VPN client will always work, whatever the internet connection i use. Moreover, in the document number NN46110-400 from Nortel, I can read that: "In some cases a VPN connection using mandatory tunneling mode may fail to pass traffic when traversing an MS PPP-based RAS adapter. Dial-up connections such as those for analog modems and some cellular data cards present themselves as RAS connections. The inability to pass traffic results in the tunnel being torn down due to the banner test (initial data passage test) failing. The resulting error message is displayed: "Unable to contact server. If a firewall is enabled it must be configured to allow outbound traffic on UDP port X.", where X is the NAT Traversal port on the server. Nortel is aware of the issue and is working to address it in a future maintenance release. " I can't configure my networks cards to act as physical NIC instead of RAS connections. Will there be a new release of VPN client to solve this issue? Is there anything i can do on my computer to solve it? Thanks again for your help.

Thank you for the information, Mohit. I was a Contivity user before upgrading to Vista on an x64 machine, unfortunately, the current version (6.07) posted on the Nortel website does not appear to support x64. Do you know whether a beta version that supports x64 is available, and if so, how it could be obtained (my company is on contract with Nortel). If no beta, do you know when an x64 compliant version would be available? Thanks for any help you can provide. Doug

Hi Mohit, Thanks for your help. One more thing. We are using R-Card (Wireless) in Vista for browsing, how ever we are not able to use Nortel VPN Client (Ver - v0607026-128bitcd ). In office LAN,Using same version of Client we are able to connect VPNbut through Wireless (R-Card / Hutch Data card) it is not working, we received error "Unable to contact the server. If firewall is enable it must be configured to allow outbound traffic on UDP Port 10001 .." Please help me to resolve this problem. Regards, Pankaj Orange

I have had exactly the same problem getting V6_07.026 to work on my New Windows Vista business. The VPN client responds: Checking for Text banner and returns Info/error: Unable to contact the server. If a firewall is enabled it must be configured to allow outbound traffic on UDP Port 10001 This is as far as I got. Here was my solution believe it or not! I reduced my screen saver time to < 5minutes!?! Can some one explain this? Steve Kinnaman

I have the same problem with Vista and Nortel Contivity client. The Nortel clients works fine when I am connected via my LAN. Using a dial-up connection I get this issue. That would lead me to believe the problem can be fixed in Vista, so I am hoping Microsoft can provide a solution. If Nortel can provide a fix to their Contivity client that would be great also. Microsoft/Nortel: Please help us!!

I know many people are having this VPN/Vista connectivity issues and I have been working on this for couple of weeks and finally after some frustrating times.. I got it. Here is what worked for me! Enable the NAT Traversal on the VPN Contivity Server -> Services-->IPsec. Under IPsec, & UDP encapsulation port, put the port there as 10001. Click on OK. Please note that this requires admin previleges on the server which I have. J I have not created another group for vista users since only few users..but use your own discretion. Download the latest version of the VPN Client from the Nortel website. Current version is V06.07.027. You got to be a register member of this site. http://support.nortel.com/go/main.jsp?cscat=SOFTWARE&resetFilter=1&poid=10621 Uninstall any older version and install this latest client and reboot the machine. Configure the client with username/password/destination & connectVola!! Previous issues encountered: Enable the NAT Traversal on the server.. Unable to connect to the server. If there is a firewall configured enable outbound traffic to UDP port 100001. Hope this helps!!

Hi All, What ever the solution posted here is all worth less. I was also facing the same problem of getting error of UDP 10001 while testing banner of VPN Contivity. Neither you haveto enable the IPSEC POLICY of Windows Vistanor have to disable the windows firewall policy. Also it doesn't require to call your administrator to enable NAT traversal. I just have worked two days on this issue and now problem is resolved. Check your internet worm protection policy where ever you have configured. It will be in your antivirus. If in antivirus, go in Internet worm protection, within general rule create a rule to allow all TCP and UDP port to access all inbound and outbound traffic from thespecificVPN server( IP Address). Please try this and post atleast whether it work for you or not. Regards, Nazish sayeed nazish_sayeed@yahoo.com

Hi all, Does someone know if there is any Entrust Entelligence Version for Vista (to use it with NortelVPN Client )? Thank you for answering. juba07@gmail.com Juba

Hi Nazish,thanks so much for that ... I'm running Nortel Contivity on Vista and was getting the UDP error, but your solution fixed the problem for me.Just to be specific ... I'm using Norton Internet security. In "Personal Firewall", "Advanced settings", "General Rules", I added a rule that allowed "To/From" the ip addresses of the servers I'm trying to connect to, Protocol="TCP and UDP", "Allow all types of communications" ... and then promoted this rule to the top of the list (to override all other rules).Cheers,SmiffyPS It didn't actually work at first as I then got a "The connection has been lost" error when attempting to retrieve the banner text from the server. I had to add in a "DNS suffix for this connection" (given to me by my companies IT helpdesk) to the "Internet Protocol Version 4 (TCP/IPv4)" properties of my network connection, as per this bit of advice:http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci1250482,00.html

Yes! It worked for me. Thank you so much Nazish.

Hi, Can somebody tell me exactlly what he did to run the Nortel VPN client on Vista...I still have the error message"this version of contivity VPN client requires NAT traversal to be enabled"...In disabled the anti virus, the firewall...i did everything but nothing is working. I am using it with the Entrust Enteligence Security Provider 8.0 wich is made for Vista 32 bit. Please, if some one know how it works, just put the solution in this forum or contact me at: juba07@hotmail.com Thank you very much. Juba

Hi Nazish, Your solution helped me to over come this UDP issue. Thanks a lot. I made my vista machine to connect to my office network, which my network guys said is not supported. Thanks again. Regards, Jay

Nortel advised our company this week that an x64 version of Contivity VPN is not due until October 2007. This is over one year late from the original promised date, and over two years after the introduction of x64 machines into the mainstream marketplace. There must be others having this problem......any suggestions? Doug

pilotcurler wrote: Nortel advised our company this week that an x64 version of Contivity VPN is not due until October 2007. This is over one year late from the original promised date, and over two years after the introduction of x64 machines into the mainstream marketplace. There must be others having this problem......any suggestions? Doug Did you mean October 2008 since your post is dated April 2008?

a.) First you want to install the 6.01d version eac601d.exe version in Windows XP SP2 compatibility mode. You could do this by right clicking on file, properties, compatibility and choose XP SP2. Run the install. The OS will warn you about the compatibility, but just hit Run Program. b.) After the above install has completed, immediately run the 6.07d version. After the install has completed it should prompt you to reboot. And.... Voila

Thankyou Nazish Sayeed Using Norton AV 2008, on Vista home edition,added the exclusion rule to and from my VPN server. Now works a treat. Thanks again

Nortel Contivity VPN Client 10.01 Beta: 12 Aug 2008 http://www.nortel.com/corporate/events/2003d/betatest_eseminars/index.html Download? Malacka

I am experiencing the same issue with the VPN client telling me about needing to open UDP port 10001. However, I have no Anti-virus installed. Furthermore, I've looked through my programs and can't find anything that would be blocking port 10001. I've disabled the Windows Firewall for domain, private and public connections. Any more ideas out there? I really need my VPN!!!

Any chance the error could be provoked by an SP1 install on Vista? I have a coworker that just installed SP1, and is now having the error re: the firewall being configured to allow outgoing traffic on UDP 10001. Unfortunatly, this person has not needed to use VPN for the past couple weeks, so it may have been something else during that time that has been pushed to his machine creating the problem. SP1 might be a red herring, but the only lead he has.

I think you are correct! Your message reminded me that I actually got the VPN connection to work before I left on business. During my international flight I installed SP1 (downloaded it before I left). Unfortunately, I don't want to try uninstalling SP1. I'm not even sure it is possible. Hopefully someone from Nortel and/or Microsoft is reading this thread. Any ideas on how to get Microsoft to look into this?

This may be already resolved but it may help someone else who may be having a similar problem.I had to open up outbound UDP port 10001 on the Firewall.You may need to open up an outbound UDP port 15500 on your firewall, however, I am no expert but I have been lucky on using Nortel VPN on both my Vista Notebook and PC Vista machine. Here is the description of what transpired. My company gave us a pre-configured Nortel VPN Client for use on XP but it did not work on Vista, so I downloaded the client for Vista and tried to configure it but I didn't know the information, so I than installed the company one on top of it which did not do anything, it basically looked as if it did not install however, I then installed the updated Nortel one for Vista again on top of that and lo and behold, when I opened up the VPN program almost all of the information was there from the company VPN client. That is when I came upon the port issue and than fenagled my way through it after much browsing on the internet. Here is a link that has been helpful to me when opening up a port p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in;margin-bottom:.0001pt;font-size:12.0pt;font-family:'Times New Roman';} a:link, span.MsoHyperlink {font-family:'Times New Roman';color:blue;text-decoration:underline;text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:purple;text-decoration:underline;text-underline:single;} @page Section1 {size:8.5in 11.0in;margin:1.0in 1.25in 1.0in 1.25in;} div.Section1 {page:Section1;} http://windows-server-training.com/open-udp-port-123-windows-firewall/

Worked perfectly. It was working until I installed OneCare which still has a firewall of it's own even though the Windows firewall is off. Thanks

I have my firewall turned off... completely. And the VPN client still will not connect. Other than the Windows Vista FirewallI have no other applications (that I know of) that would be blocking traffic.Any ideas are appreciated. I still think this issue cropped up after installing SP1 for Vista.

So, my laptop is the only computer I use that has Vista...and I only use it when I travel. For the past few months I have not been traveling, so I forgot about this issue. Now that I am about to travel again I started trying to find a solution...and I have! I had about 18 updates according to the Windows Update application. After installing these the client seemed to work. I am too lazy to read through each of the 18 updates but I can assure you that whatever update was released between early November and mid-December 2008 fixed the problem (with SP1 installed)!

I have Vista and Norton Internet Security 2009 installed. This is what I did to get the Nortel Contivity client to connect. My System Windows Vista Business, SP1 Norton Internet Security 2009 Nortel Contivity VPN client for Vista, V06_07.027 My Fix 1. Open Norton Internet Security management window. 2. Select Internet | Settings 3. Select Advanced Settings | Configure 4. Select General Rules | Configure 5. Select Add to create a new rule Action tab = Allow: Allow connections that match this rule. Connections tab = Connections to and from other computers. Computers tab = Any Computer. Communications tab Protocol to allow = UDP Ports to allow = Only communications that match all types and ports listed below Add = Remote port 4500 Tracking tab = track if you want to Description tab = Create a descriptive name for this rule. (ex: Firewall rule Contivity VPN Outbound/Inbound UDP 4500) 6. Click Ok 7. Select new rule at bottom of list. Repeatedly click Move Up until the new rule is at the top of the list. 8. Click Ok | Click Ok | Click Ok | Close management window 9. Test Nortel Contivity VPN client.

I have vista ( home premium, SP1, 32-bit) and avg security. I am using Tata Indicom's photon plus for internet connection. i use Response Only token card for the purpose of connecting to vpn.I face the same issue "Unable to contact the server. If firewall is enable it must be configured to allow outbound traffic on UDP Port 14720 .." when I try to connect to vpn using Nortel Contivity VPN client ( eac607d.exe)I have tried adding the UDP port 14720 in the firewall exceptions tab. I have tried disabling wndows firewall. i am not aware of any other firewall in place.i don't know what else to do. Can you please help? How can I apply Nazish's solution in my case?

Hi, I was also facing the same issue. Just solved it. In my case it was the Norton Internet Security that was blocking the port. So the solution was to go to Norton Internet Security: Internet Security Options>Personal Firewall:General Settings>Firewall Settings and set it to off. This solved it for me. I hope this helps. Any other Antivirus blocking outbound traffic on a UDP port can also pose similar problems. Regards, Pankaj