HP Sa3110 HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes
HP Sa3110 - VPN Server Appliance Manual
 |
View all HP Sa3110 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP Sa3110 manual content summary:
- HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 1
hewlett-packard sa3000 series vpn client release 6.8.2 release notes Hewlett-Packard Company HP: 5971-0874 P/N: A52439-001 March 2001 - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 2
2 Hewlett-Packard SA3000 Series VPN Client - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 3
This Hewlett-Packard SA3000 Series VPN Client Release 6.8.2 Release Notes document as well as the software described in it is furnished under license and may only be used or copied in accordance with the terms of the license. The information in this manual - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 4
4 Hewlett-Packard SA3000 Series VPN Client - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 5
10 RELEASE 6.8.2 FEATURES 12 AUTHENTICATION SUPPORT FOR SST 12 IPSEC SECONDARY AUTHENTICATION IMPLEMENTED 12 PACKETGUARD INCREASES USEFULNESS FOR REMOTE USERS 12 VPN CLIENT CO-OPERATES WITH PACKETPROTECT 13 SPECIAL CONSIDERATIONS 14 KNOWN PROBLEMS 25 Release 6.8.2 Release Notes 5 - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 6
6 Hewlett-Packard SA3000 Series VPN Client - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 7
considerations • Known problems For information regarding Release 6.8.2 of the HP VPN Server Appliance SA3110/SA3150/SA3400/SA3450 and the HP SA3000 Series VPN Manager, refer to the Release Notes for that firmware and software. Limitations to This Release Windows Me Not Supported Reference Numbers - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 8
service and telephone support, contact an HP-authorized reseller or the HP Customer Support Center at 1-800-633-3600. Europe In Europe, for hardware service and telephone support, contact an HP-authorized reseller or the HP Customer Support :0870 842 2339 8 Hewlett-Packard SA3000 Series VPN Client - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 9
+65-2725300 • Taiwan: +866-080-010055 or 886-2-7170055 • 8324155 Latin America In Latin America, for hardware service and telephone support, contact an HP-authorized reseller or one of these support centers: • Argentina: (541) 4778-8380 • Brazil: Sao Paulo: (11) 3747-7799; All Others: 0800-15- 77-51 - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 10
System Requirements The system requirements for running the VPN Client Release 6.8.2 software are as follows: • PC or PC − 32 MB RAM • Windows NT 4.0 (Workstation or Server version with Service Pack 3, Service Pack 4, Service Pack 5, or Service Pack 6a) running on: − Pentium 90-MHz processor - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 11
DUN version earlier than 1.3, upgrade to DUN version 1.3 before you install the VPN Client. To check what version of DUN you are using: 1. In the to URL: http://support.microsoft.com/support/ downloads/dp3267.asp. Click the upgrade file, msdun13.exe, then follow the instructions on your screen - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 12
IPSec Secondary Authentication Implemented Release 6.8.2 of the VPN Client supports RADIUS and SecurID authentication for IPSec tunnels. Accordingly a VPN session, specifically to enable local network sharing when a VPN tunnel is up, for example, allowing local access to shared printers and files - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 13
the PC on which the VPN Client software resides has a default gateway defined. VPN Client Co-operates With PacketProtect Reference Numbers 209P, 211P, 214P, 654, 655, and 656 PacketProtect is an implementation of VPN on the Intel PRO/100 S Management or Server Adapter. PacketProtect helps protect IP - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 14
NT or Windows 2000 Systems Reference Number 673DF On Windows NT and Windows 2000 systems, raw socket security must be disabled for the VPN Client software to send out protocol 99 packets. You must have administrative privileges to disable raw socket security. You can disable raw socket security on - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 15
such as FTP, ICMP, and so on • Allow all traffic by assigning a protocol/port combination that is ALL VPN Client on Windows NT/Windows 2000 Server With DHCP Server Windows NT does not support VPN Client software installed on the same desktop computer as the DHCP (Dynamic Host Configuration Protocol - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 16
in the Configure menu of the VPN Manager main window to set the IP address in the Configure Manager Communication window. Browsing Your Network If you use Microsoft Windows 95 Gold, SR1 (95A), or SR2 (95B) for your operating system and you have trouble browsing your network, check the version - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 17
, then reboot your PC. Also, if you have trouble browsing through a tunnel and have NetBEUI installed in your network control panel: 1. Check the NetBIOS node type either on the VPN device or on the VPN Manager. 2. Remove the VPN Client software. 3. Remove the NetBEUI protocol from your network - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 18
service pack that is appropriate to your operating system: Windows 95, Windows 98, or Windows NT. Then, when you install the Novell client software, select the option appropriate to the Novell server version: the IP option for a NetWare 5 server root directory]\system 32\drivers\etc, where system - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 19
the Novell NDS server on the LAN that logs you into the NDS directory services. To use the VPN Client software with Novell NetWare problems associated with it. To obtain the patch, call Novell technical support using the telephone number you obtain as follows. To obtain the Novell technical support - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 20
TEST 255.65.8.1 ; ; For treenames, specify the address of the server ; to connect to in the tree. ; ; IP addresses are in DRIVERS\ETC directory. ; Full Class C Route Should Not Be Added to VPN Client Route Table Reference Number 104092 If a tunnel is created from the VPN Client to a VPN - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 21
as a net-include for the tunnel: 10.1.1.0 255.255.255.0 10.1.1.1 1.0.1.1 One approach to this problem is to support a subnet mask for the Client-IP command. The Client-IP address/mask could then be used by the VPN Client to, by default, tunnel all traffic to the network received in the DHCP reply - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 22
decrypted. Users are encouraged to use their local password when the VPN Client Login window appears. The software recognizes that this is not the authentication password and then the user is prompted to enter the authentication password in a second Authentication prompt window. 22 Hewlett-Packard - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 23
prompt window, then the authentication password becomes the local password and, therefore, the valid password for future logon to the VPN Client software. In this way, the authentication password becomes the firsttime user's local password. This change creates a problem if the user did not memorize - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 24
you remove the VPN Client software before removing the AOL v. 4.0 or v. 5.0 software. 2. AOL v. 5.0 has no IP connectivity when the VPN Client is also software in one of these countries, please disregard instructions concerning encryption greater than 56 bits in the online Help file as both software - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 25
problems at the time of release. IPSec Tunnel With Single IP SA Routes Entire Network Through Tunnel Adapter Reference Number 224DF If there is an IPSec tunnel configured with SAs with access to a single IP address, the VPN if you are debugging the software. Selecting Four VNICs At Installation - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 26
Misleading on Windows 2000 Reference Number 461P After installing Release 6.8.2 software and rebooting, the cursor is flashing in the first field 50, should restrict traffic from the VPN Client to the destination of 192.168.200.0/24. The problem is that the VPN Client is able to reach remote networks - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 27
To work around this problem, reboot the client Certain Characters in Distinguished Names Not Accepted Reference Number 104218DF The VPN Client does not . Given the following sequence of events: • Set up an Entrust server to provide a VPN Client PC with a certificate in which one of the fields of - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 28
packet sent to 10.250.2.254, port 500 To avoid this problem, for Release 6.8.2 of the VPN Client, do not use certain special characters, specifically or leading restart now? appears. Click No. To preclude this problem for Windows NT, disable the service. 28 Hewlett-Packard SA3000 Series VPN Client - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 29
Virtual Network Interface Cards) are not present, for example, if they have been disabled or deleted, the next time the VPN Client software is started, the computer blue screen crashes. To avoid this problem, do not delete or disable VNICs. Ensure that you have the NT recovery disks on hand. If this - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 30
until the user enters Windows in Safe mode and removes the VPN Client. This problem occurs in both Windows 95 and Windows 98 systems. To preclude having this problem, remove the VPN Client software before removing the AOL 4.0 software. AOL Windows 2000 Beta Client Disconnects Dial-Up Link When All - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 31
of IP. The special support is called NetWare/IP. Use the latest Novell client with service pack that is appropriate to your operating system: Windows 95, Windows 98, or Windows NT. Then, when you install the Novell client software, select the option appropriate to the Novell server version: the IPX - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 32
remove the NetWare client and then reinstall this software. Before attempting to connect, ensure that the following services related to NetWare/IP are running on the NetWare Server: • DNS (Domain Name Service) • DSS (Domain SAP/RIP Server) • NWIP Server Also, ensure that your workstation is capable - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 33
Client, you may not be able to get a client connection through your VPN tunnel even though you have followed all of the suggestions in this section. Installation Problem Reference Number 670F2F-1A When installing the VPN Client software in boot mode on a Windows NT system on which there is a third - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 34
3C515 NIC Reference Numbers 554P and 721 In Release 6.8.2, the VPN Client on an NT4 Workstation and Server with SP6 will not bind to a 3COM 3C515 NIC. When Transport mode IPSec tunnel is up between a VPN Client on Windows NT (SP4) and an HP VPN device running Release 6.8.2 code, and the packets - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 35
tunnel is reconnected now, it fails to obtain its IP and WINS information after successful authentication. To recover from this problem, reboot the VPN Client. Opening the Properties of an IPSec Definition Reconnects Tunnel Reference Number 868 In Release 6.8.2, simply opening the properties of an - HP Sa3110 | HP VPN Server Appliance sa3000 series - Release 6.8.2 release notes - Page 36
interfaceIP=0.0.0.0 setting (in the vpnuser.ini file) and autoconnect not working together. To work around this problem, open the vpnuser.ini file in a text editor such as Notepad, delete the following line and allows the tunnel to autoconnect. 36 Hewlett-Packard SA3000 Series VPN Client
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
 |
 |
hewlett-packard sa3000 series
vpn client
release 6.8.2 release notes
Hewlett-Packard Company
HP: 5971-0874
P/N: A52439-001
March 2001