Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450
2
Disclaimer
Information in this document is provided in connection
with Hewlett-Packard Company products. No license,
express or implied, by estoppel or otherwise, to any
intellectua l property rights is granted by this document.
Except as provided in Hewlett-Packard C o mpan y’s Terms
and Conditions of Sale for such products, Hewlett-Packard
Company assumes no liability whatsoever, and HewlettPackard Company disclaims any express or implied
warranty, relating to sale and/or use of Hewlett-Packard
Company products including liability or warranties relating
to fitness for a particular purpose, merchantability, or
infringeme nt of any patent, copyright or othe r int e lle c tual
property right. Hewlett-Packard Company products are not
intended for use in medical, life saving, or life sustaining
applications.
Hewlett-Packard Company may make changes to
specifications and product descriptions at any time,
without notice.
This Hewlett-Packard VPN Server Appliance
SA3110/SA3150/SA3400/SA3450 and Hewlett-Packard
SA3000 Series VPN Manager Release 6.8.2 Release Notes
document as well as the software described in it is
furnished under license and may only be used or copied in
accordance with the terms of the license. The information
in this manual is furnished for informational us e only, is
subject to change without notice, and should not be
constru e d a s a commitm ent by Hewlett -Packard Company.
Hewlett-Pa c kard Comp a n y as sumes no responsibilit y or
liability for any errors or inaccuracies that may appear in
this document or any software that may be provided in
association with this document.
Release 6.8.2 Release Notes
Except as pe r mitted by such license, no part of thi s
document may be reproduced, stored in a retrieval system,
or transmitted in any form or by any means without the
express written consent of Hewlett-Packard Company.
Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450
Contents
DISCLAIMER 3
CONTENTS 5
INTRODUCTION 7
IMITATIONS TO THIS RELEASE
L
TATEMENT OF ENTRUST SUPPORT
S
ARDWARE SERVICE AND TELEPHONE SUPPORT NUMBERS
H
SYSTEM REQUIREMENTS 11
RELEASE 6.8.2 FEATURES 13
SNMP C
DHCP F
C
C
IPS
MPROVED AUTHENTICATION SUPPORT FOR
I
ICSA.
K
SPECIAL CONSIDERATIONS 20
KNOWN PROBLEMS 25
APABILITIES
UNCTIONALITY ADDED TO DEVICES
ONFIGURING
ONFIGURATION FILE
EC SECONDARY AUTHENTICATION IMPLEMENTED
NET CERTIFICATION EXTENDED TO REFLECT ADDITIONAL LOGGING
EYSTROKES CAN NOW BE USED FOR NAVIGATION
13
DHCP R
DHCP E
7
8
8
15
ELAY FOR SITE-TO-SITE
XAMPLES
17
SST 18
UNNELS
VPN T
18
19
15
19
EVICE
VPN D
VPN M
Release 6.8.2 Release Notes
25
ANAGER
29
5
Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450
6
Introduction
This document describe s the new feat ur e s and
improvements in Release 6.8.2 of the HP VPN Server
Appliance SA3110/SA3150/SA3400/SA3450 and HP SA3000
Series VPN Manager.
This document includes the following sections:
• System requirements
• Release 6.8.2 features
• Special considerations
• Known problems
For information regarding the HP SA3000 Series VPN
Client Release 6.8.2, refer to the Release Notes for that
application.
Limitations to This Release
Windows Me Not Supported
Reference Numbers 617, 631, 632, and 760
Release 6.8.2 Release Notes
Release 6.8.2 of the VP N Client on a Microsoft Windows
Millennium Edition (Me) syst em exhibits degraded
performance or crashes, displaying a fatal exception error
message. Performance problems include not being able to
use IPSec over dial-up connections, and, if your
implementation is for Windows NT domain logon, you will
not see the three-bar logon window until after the VPN
tunnel is connected. Hewlett-Packard Company
recommends you do not use the Release 6.8.2 VPN
products on a Windows Me system.
7
Statement of Entrust Support
Because of enhancements to the VPN Client and VPN
firmware, HP VPN technology supports up to and including
version 4.0 of Entrust Technologies' X.509 certificate
authority (CA) product set provides a scalable, LDAPcompliant security syst e m based on X.509.
HP provides support for the Entrust CA through a licensed
dynamic link library (.dll) file within the VPN Manager
application. This file, named kmpapi32.dll, must be
obtained from Entrust Te chnologies.
Please note that HP does not provide the Entrust client or
certificate authority software. It is the responsibility of the
end user to purchase this from Entrust Technologies.
To retrieve an Entrust certificate with the VPN Client, you
must install the Entrust client. For complete
documentation on installing and configuring Entrust
software , contac t your Entrust T e c hnologie s support
representative.
Hardware Service and Telephone Support
Numbers
Hardware service and telephone support information is
provided next by geographical location.
U.S. and Canada
In the U.S. and Canada, for hardware service and
telephone support, contact an HP-authorized reseller or
the HP Customer Support Center at 1-800-633-3600.
Europe
In Europe, for hardware service and telephone support,
contact an HP-authorized reseller or the HP Customer
Support Center nea r e st you: