I had a client's M1122 drop it's firmware on Friday afternoon but didn't
have a CLI cable near me, so I took it home with me after getting a copy
of the required config sent to me by the people that supplied the Nortel
VPN box. Now that I have put some firmware back on, I'm having problems
with putting in the pinholes for ESP-IPSEC and AUTHHEADER.

Here is the relevant section (VCC1) of the config file I was sent...

---- cut here ----
vcc1
 desc ip
 pvc 0 100 ppp-vc
 ppp authentication pap
 ppp username REMOVED
 ppp password REMOVED
 ip address 0.0.0.0 0.0.0.0
 ip napt
 ip server-napt VNC 57.27.46.230 5901 5901 20 tcp
 ip server-napt IISADMIN 57.27.46.230 3080 3080 1 tcp
 ip server-napt UDP4IKE 57.27.46.230 500 500 1 udp
 ip server-napt ESP-IPSEC 57.27.46.230 0 0 65535 esp-ipsec
 ip server-napt AuthHeader 57.27.46.230 0 0 65535 51
 ip admin-disabled
---- cut here ----

It all goes well except for these 2 lines

> ip server-napt ESP-IPSEC 57.27.46.230 0 0 65535 esp-ipsec
> ip server-napt AuthHeader 57.27.46.230 0 0 65535 51

Both of these (when typed into the monitor) give this result

>M1122(conf-vcc1)#ip server-napt ESP-IPSEC 192.168.10.254 0 0 65535
esp-ipsec
>fail on request

Aaargh! Does anyone know what I need to do to get these back in? Do I
need to flash an older version of the firmware (currently I just put
Gx1x2230.R04 on there - I don't know what was there previously)

When I try to put this in through the web interface it just gives me a
generic error and doesn't do it.

Help Please!

Cheers - Neil Gardner

-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message