IP Traffic seen coming from the TLAN IP Address when the NortelCS module has been configured to use the ELAN. (NETIQKB54488)

IP Traffic seen coming from the TLAN IP Address when the NortelCS module has been configured to use the ELAN.
TLAN IP traffic is being detected in a sniffer trace.
TLAN IP traffic is being detected or blocked on a firewall or router that is between the NortelCS proxy device and the Nortel Signaling Servers or VGMC cards.

When the request is made to the Signaling Server for the OM Report over SNMP, the Nortel device initiates the FTP session back to the NortelCS proxy. The Nortel device sends this information out the first interface in the IP stack. The responses cannot be limited to only appear to come from a specific IP Address. 

The reply packet is formed by the higher level software. Thus, the routing of the packet is controlled by the IP stack. Depending on how the routing table is constructed, packets may come in on one interface and get a reply from a different interface.

The NortelCS module will establish a connection only to the ELAN IP Address of any Nortel device.  However, the problem arises if the Nortel device can successfully connect to the NortelCS proxy via both the ELAN and the TLAN interfaces. 

Formerly known as NETIQKB54488

Please refer to NETIQKB70016 for recommended steps to resolve NortelCS routing related issues.