Tools

Tool Name Description Usage

CSAUDIT

CSAUDIT is a NetWare Console tool to display the audit trail records that were logged using the CSLIB facility in NetWare. BorderManager uses the CSLIB facility for its audit logs, and these records can be displayed using this utility.

This tool can be used to detect any errors establishing connection to remote VPN server, as well as synchronisation errors after establishing the connection logged to the CSAUDIT database. This database may be viewed by loading CSAUDIT at the server console.

--

CALLMGR

The NetWare utility used to monitor the status of the wide area network (WAN) connections or to start and stop WAN calls manually.

This tool can be used to see the inbound/outbound connection from/to remote VPN server. If this is not the case, there is an issue with the VPTUNNEL at the CSL layer. Suggest that customers verify that the vptunnel.lan driver is loaded, without any error messages. An example of an error could be: A licensing issue caused the tunnel not to load.

This is available at the root of the CD in the directory CALLMGR

TCPCON

TCPCON is a TCP/IP console NetWare NLM that enables a network administrator to monitor server or router activity in the TCP/IP segments of the network.

This tool can be used when the tunnel is up and synchonised. At such a point all routing table entries should be correct. That is, to get to a remote site through the tunnel, the next hop should be the local VPN tunnel address. A useful troubleshooting TID for IP routing is TID #10011169

--

MONITOR

MONITOR is the NetWare Console monitor tool, which allows an administrator to monitor various server information including the open connections, information volumes, system resources, the server parameters, CPU utilization etc. This is very useful for monitoring the performance and the runtime status of the NetWare system and also of the loaded modules.

This tool is useful for confirming that packets are going through the VPTUNNEL interface, and not the local LAN interface. If the routing table is setup incorrectly, the packets going to the remote destination may end up going out on the LAN card, and not the VPN interface.

--

VPMON

VPMON is the monitoring frontend for BorderManager 3.8 VPN services. This runs as a NetWare Loadable Module and interfaces with the NRM framework to provide the monitoring functionality for the VPN services from the browser using the NetWare Remote Console.

This is available at the root of the product CD in the directory VPN

Schema Extension Tool

If you have installed Novell BorderManager 3.8 and VPN Schema Extension has failed, you can use this tool to extend the schema without having to go through the entire installation process again.

Go to the unsupported\vpn schema extension removal utility\extension folder on the CD and follow the instructions provided in the readme.

Schema Removal Tool

To remove NBM 3.8 VPN Schema

Go to the unsupported\vpn schema extension removal utility\removal folder on the CD and follow the instructions provided in the readme.

VPN Upgrade Tool

If you are upgrading to Novell BorderManager 3.8 from NBM 3.6.2A or 3.7.2, and VPN Configuration Migration has failed due to some reason during during Install (check the reason in this guide). Or if you have not selected VPN Configuration Migration during the NBM3.8 Installation, you can also migrate your existing VPN Configuration using this utility.

Go to the Unsupported\vpnupgrade folder on the CD and follow the instructions provided in the readme.

Cache Volume Creation Tool

This a utility to create traditional volumes on NetWare 6.5. Proxy cache directories require traditional NetWare volumes.

Go to the Unsupported\CCRT folder on the CD and follow the instructions provided in the readme.

VPN console options

This tool is useful for narrowing down issues with the IKE/IPSEC SA negotiation, and determining that the VPN site-to-site and client-to-site profiles are setup correctly.

--