• view
• edit
• upload
• print
• history

Interoperating: Nortel Contivity

• Nortel supports IPsec-over-UDP NAT traversal.
• Some older versions of Contivity and Openswan will not communicate.
• Openswan cannot be used as a "client" to a Nortel Contivity server, but can be used as a branch-office tunnel.

(Probably obsoleted by Ken's post:

• (Matthias siebler from old interop) At one point you could not configure Nortel-Openswan tunnels as "Client Tunnels" since Openswan does not support Aggressive Mode. Current status of this problem: unknown.
• How do we map group and user passwords onto the data that Openswan wants?

)

• Contivity does not send Distinguished Names in the order FS wants them (X.509).
• Connections may time out after 30-40 minutes idle.

JJ Streicher-Bremer's mini HOWTO for old new software. (PSK with two subnets)
French page with configs (X.509). This succeeds using the above X.509 tip.