We have a firewall appliance that we use for remote user VPN connections. When a
user has Internet access at a remote location, they will establish a VPN
connection to this appliance and log into Netware via the tunnel.

This used to work fine, but lately it has been hit and miss. The error message
that the user gets is "Tree or server not found".

It's been long enough since it worked proporly that I wouldn't be able to list
the things that have changed since.

When the login doesn't work, I am able to ping all servers in the private
network behind the tunnel and I have the Directory Agent configured in the
Novell client of the computer that I am using to remote in with.

What am I missing here? What are all of the things needed in an IP network for
the Novell client to be able to login to a tree?

The following are output from SLPINFO /ALL and IPCONFIG /ALL:
--------------------------------------------------------------


************************************************** ***
*** Novell Client for Windows NT ***
*** Service Location Diagnostics ***
************************************************** ***

SLP Version: 1.0
SLP Start Time: 7:32:04pm 11/7/2007
Last I/O: 7:50:14pm 11/7/2007
Total Packets: Out: 526 In: 2
Total Bytes: Out: 28959 In: 36


SLP Operational Parameters Values
------------------------------- ------------
Static Scopes NO
Static Directory Agents NO
Active Discovery YES
Use Broadcast for SLP Multicast NO
Use DHCP for SLP YES
SLP Maximum Transmission Unit 1400 bytes
SLP Multicast Radius 32 hops


SLP Timers Values
------------------------------------- ------------
Give Up on Requests to SAs 15 seconds
Close Idle TCP Connections 5 minutes
Cache SLP Replies 1 minutes
SLP Default Registration Lifetime 10800 seconds
Wait Before Giving Up on DA 5 seconds
Wait Before Registering on Passive DA 1-2 seconds


Scope List Source(s)
---------------------------------------- ------------
<unscoped> DA


DA IP Address Source(s) State Version Local Interface Scope(s)
--------------- --------- ----- ------- --------------- ---------------
10.3.1.11 CNFG NORSP ? 192.168.1.200 <unknown>
10.3.1.11 CNFG INIT SLPV1 10.3.11.51 <unknown>


Local Interface 10.3.11.51
---------------------------------
Operational State: UP
Operating Mode(s): MCAST
SA/UA Scopes: <unscoped>
Last I/O: 7:50:14pm 11/7/2007
Total Packets: Out: 242 In: 2
Total Bytes: Out: 13671 In: 36
Last Addr Out: 224.0.1.22
Last Addr In: 10.3.1.11


Local Interface 192.168.1.200
---------------------------------
Operational State: UP
Operating Mode(s): MCAST
SA/UA Scopes: <unscoped>
Last I/O: 7:50:14pm 11/7/2007
Total Packets: Out: 284 In:
Total Bytes: Out: 15288 In:
Last Addr Out: 224.0.1.22
Last Addr In: 0.0.0.0

----------------------------------------------------------------

Windows IP Configuration

Host Name . . . . . . . . . . . . : tad-home
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : intra.net
launchmodem.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : launchmodem.com
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection
Physical Address. . . . . . . . . : 00-0E-7B-7F-5F-19
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.200
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 205.152.132.23
205.152.37.23
Lease Obtained. . . . . . . . . . : Wednesday, November 07, 2007 7:32:03
PM
Lease Expires . . . . . . . . . . : Wednesday, November 14, 2007 7:32:03
PM

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network
Connection
Physical Address. . . . . . . . . : 00-0E-35-78-7F-BF

Ethernet adapter {A8D937DE-FF21-48AC-A408-B629052266AF}:

Connection-specific DNS Suffix . : intra.net
Description . . . . . . . . . . . : Fortinet virtual adapter - Packet
Scheduler Miniport
Physical Address. . . . . . . . . : 00-09-0F-FE-00-01
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.3.11.51
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCP Server . . . . . . . . . . . : 10.3.1.23
DNS Servers . . . . . . . . . . . : 10.3.1.23
10.3.1.200
205.136.55.6
Lease Obtained. . . . . . . . . . : Wednesday, November 07, 2007 7:47:41
PM
Lease Expires . . . . . . . . . . : Saturday, November 10, 2007 7:47:41
PM

Terry Davis
Sr. Network Administrator
DCO