Nortel VPN Client, VPN Client 6.02.030 Release Note

Version 6.02.030

NN46110-401 01.01
314177-F Rev 01
November 2007
Standard

600 Technology Park Drive
Billerica, MA 01821-4130

Nortel VPN Client Release
Notes — VPN Localized Client
Software Release 6.02.030

2

NN46110-401 01.01

Copyright © 2007 Nortel Networks. All rights reserved.

The information in this document is subject to change without notice. The statements, configurations, technical data, and
recommendations in this document are believed to be accurate and reliable, but are presented without express or implied
warranty. Users must take full responsibility for their applications of any products specified in this document. The
information in this document is proprietary to Nortel Networks.

Trademarks

Nortel, the Nortel logo, the Globemark, and Contivity are trademarks of Nortel Networks.

Adobe and Acrobat Reader are trademarks of Adobe Systems Incorporated.

Entrust is a trademark of Entrust Technologies Inc.

iPass is a trademark of iPass Inc.

Java and Sun Microsystems are trademarks of Sun Microsystems, Inc.

Microsoft and Windows are trademarks of Microsoft Corporation.

All other trademarks are the property of their respective owners.

Restricted rights legend

Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.

Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer software,
the rights of the United States Government regarding its use, reproduction, and disclosure are as set forth in the
Commercial Computer Software-Restricted Rights clause at FAR 52.227-19.

Statement of conditions

In the interest of improving internal design, operational function, and/or reliability, Nortel Networks Inc. reserves the
right to make changes to the products described in this document without notice.

Nortel Networks Inc. does not assume any liability that may occur due to the use or application of the product(s) or
circuit layout(s) described herein.

Portions of the code in this software product may be Copyright © 1988, Regents of the University of California. All
rights reserved. Redistribution and use in source and binary forms of such portions are permitted, provided that the
above copyright notice and this paragraph are duplicated in all such forms and that any documentation, advertising
materials, and other materials related to such distribution and use acknowledge that such portions of the software were
developed by the University of California, Berkeley. The name of the University may not be used to endorse or promote
products derived from such portions of the software without specific prior written permission.

SUCH PORTIONS OF THE SOFTWARE ARE PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE.

In addition, the program and information contained herein are licensed only pursuant to a license agreement that contains
restrictions on use and disclosure (that may incorporate by reference certain limitations and notices imposed by third
parties).

3

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Nortel Networks Inc. software license agreement

This Software License Agreement (“License Agreement”) is between you, the end-user (“Customer”) and Nortel
Networks Corporation and its subsidiaries and affiliates (“Nortel Networks”). PLEASE READ THE FOLLOWING
CAREFULLY. YOU MUST ACCEPT THESE LICENSE TERMS IN ORDER TO DOWNLOAD AND/OR USE THE
SOFTWARE. USE OF THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OF THIS LICENSE
AGREEMENT. If you do not accept these terms and conditions, return the Software, unused and in the original shipping
container, within 30 days of purchase to obtain a credit for the full purchase price.

“Software” is owned or licensed by Nortel Networks, its parent or one of its subsidiaries or affiliates, and is copyrighted
and licensed, not sold. Software consists of machine-readable instructions, its components, data, audio-visual content
(such as images, text, recordings or pictures) and related licensed materials including all whole or partial copies. Nortel
Networks grants you a license to use the Software only in the country where you acquired the Software. You obtain no
rights other than those granted to you under this License Agreement. You are responsible for the selection of the
Software and for the installation of, use of, and results obtained from the Software.

1. Licensed Use of Software. Nortel Networks grants Customer a nonexclusive license to use a copy of the Software
on only one machine at any one time or to the extent of the activation or authorized usage level, whichever is applicable.
To the extent Software is furnished for use with designated hardware or Customer furnished equipment (“CFE”),
Customer is granted a nonexclusive license to use Software only on such hardware or CFE, as applicable. Software
contains trade secrets and Customer agrees to treat Software as confidential information using the same care and
discretion Customer uses with its own similar information that it does not wish to disclose, publish or disseminate.
Customer will ensure that anyone who uses the Software does so only in compliance with the terms of this Agreement.
Customer shall not a) use, copy, modify, transfer or distribute the Software except as expressly authorized; b) reverse
assemble, reverse compile, reverse engineer or otherwise translate the Software; c) create derivative works or
modifications unless expressly authorized; or d) sublicense, rent or lease the Software. Licensors of intellectual property
to Nortel Networks are beneficiaries of this provision. Upon termination or breach of the license by Customer or in the
event designated hardware or CFE is no longer in use, Customer will promptly return the Software to Nortel Networks
or certify its destruction. Nortel Networks may audit by remote polling or other reasonable means to determine
Customer’s Software activation or usage levels. If suppliers of third party software included in Software require Nortel
Networks to include additional or different terms, Customer agrees to abide by such terms provided by Nortel Networks
with respect to such third party software.

2. Warranty. Except as may be otherwise expressly agreed to in writing between Nortel Networks and Customer,
Software is provided “AS IS” without any warranties (conditions) of any kind. NORTEL NETWORKS DISCLAIMS
ALL WARRANTIES (CONDITIONS) FOR THE SOFTWARE, EITHER EXPRESS OR IMPLIED, INCLUDING,
BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE AND ANY WARRANTY OF NON-INFRINGEMENT. Nortel Networks is not obligated to
provide support of any kind for the Software. Some jurisdictions do not allow exclusion of implied warranties, and, in
such event, the above exclusions may not apply.

4

NN46110-401 01.01

3. Limitation of Remedies. IN NO EVENT SHALL NORTEL NETWORKS OR ITS AGENTS OR SUPPLIERS BE
LIABLE FOR ANY OF THE FOLLOWING: a) DAMAGES BASED ON ANY THIRD PARTY CLAIM; b) LOSS OF,
OR DAMAGE TO, CUSTOMER’S RECORDS, FILES OR DATA; OR c) DIRECT, INDIRECT, SPECIAL,
INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS OR SAVINGS),
WHETHER IN CONTRACT, TORT OR OTHERWISE (INCLUDING NEGLIGENCE) ARISING OUT OF YOUR
USE OF THE SOFTWARE, EVEN IF NORTEL NETWORKS, ITS AGENTS OR SUPPLIERS HAVE BEEN
ADVISED OF THEIR POSSIBILITY. The forgoing limitations of remedies also apply to any developer and/or supplier
of the Software. Such developer and/or supplier is an intended beneficiary of this Section. Some jurisdictions do not
allow these limitations or exclusions and, in such event, they may not apply.

4. General

a. If Customer is the United States Government, the following paragraph shall apply: All Nortel Networks

Software available under this License Agreement is commercial computer software and commercial computer
software documentation and, in the event Software is licensed for or on behalf of the United States
Government, the respective rights to the software and software documentation are governed by Nortel
Networks standard commercial license in accordance with U.S. Federal Regulations at 48 C.F.R. Sections

12.212 (for non-DoD entities) and 48 C.F.R. 227.7202 (for DoD entities).

b. Customer may terminate the license at any time. Nortel Networks may terminate the license if Customer fails

to comply with the terms and conditions of this license. In either event, upon termination, Customer must
either return the Software to Nortel Networks or certify its destruction.

c. Customer is responsible for payment of any taxes, including personal property taxes, resulting from

Customer’s use of the Software. Customer agrees to comply with all applicable laws including all applicable
export and import laws and regulations.

d. Neither party may bring an action, regardless of form, more than two years after the cause of the action arose.

e. The terms and conditions of this License Agreement form the complete and exclusive agreement between

Customer and Nortel Networks.

f. This License Agreement is governed by the laws of the country in which Customer acquires the Software. If

the Software is acquired in the United States, then this License Agreement is governed by the laws of the state
of New York.

5

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Contents

New in this release. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Other changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Document changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Finding the latest updates on the Nortel Web site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Getting help from the Nortel Web site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Getting help over the phone from a Nortel Solutions Center . . . . . . . . . . . . . . . . . . . . 10

Getting help from a specialist by using an Express Routing Code . . . . . . . . . . . . . . . 10

Getting help through a Nortel distributor or reseller . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Text conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Hard copy technical manuals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Chapter 1

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Supported platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Client software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Client directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Localized client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Custom and Entrust subdirectories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Doc (Documentation) directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Tools directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

6

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Restricted product—export license requirement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Chapter 2

Issues and considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

VPN Client considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Customer issues fixed in this release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

7

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

New in this release

The following sections detail what’s new in Nortel VPN Client Release Notes —
VPN Localized Client Software Release 6.02.030 (NN46110-401 01.01).

• “Features”

• “Other changes”

Features

There are no feature-related changes for this release.

Other changes

See the following section for information about changes that are not
feature-related:

Document changes

The following sections are updated for this release:

• “Customer issues fixed in this release” on page 21

8 New in this release

NN46110-401 01.01

9

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

How to get help

This chapter explains how to get help for Nortel products and services.

Finding the latest updates on the Nortel Web site

The content of this documentation was current at the time the product was
released. To check for updates to the latest documentation and software for the
Client, go to:

www.nortel.com/support

Select Security & VPN and then, in the section called Virtual Private Networking
(VPN), IPSEC, and SSL, click the appropriate VPN Router product.

Getting help from the Nortel Web site

The best way to get technical support for Nortel products is from the Nortel
Technical Support Web site:

www.nortel.com/support

10 How to get help

NN46110-401 01.01

This site provides quick access to software, documentation, bulletins, and tools to
address issues with Nortel products. From this site you can:

• download software, documentation, and product bulletins

• search the Technical Support site and the Nortel Knowledge Base for answers
to technical issues

• sign up for automatic notification of new software and documentation for
Nortel equipment

• open and manage technical support cases

Getting help over the phone from a Nortel Solutions
Center

If you do not find the information you require on the Nortel Technical Support
web site, and you have a Nortel support contract, you can also get help over the
phone from a Nortel Solutions Center.

In North America, call 1-800-4NORTEL (1-800-466-7835).

Outside North America, go to the following web site to obtain the phone number
for your region:

www.nortel.com/callus

Getting help from a specialist by using an Express
Routing Code

To access some Nortel Technical Solutions Centers, you can use an Express
Routing Code (ERC) to quickly route your call to a specialist in your Nortel
product or service. To locate the ERC for your product or service, go to:

www.nortel.com/erc

How to get help 11

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Getting help through a Nortel distributor or reseller

If you purchased a service contract for your Nortel product from a distributor or
authorized reseller, contact the technical support staff for that distributor or
reseller.

12 How to get help

NN46110-401 01.01

13

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Preface

These Release Notes contain the latest information about Localized Client

6.02.030.

Before you begin

These release notes are intended for network managers who are responsible for
the VPN Router. They assume that you have experience with windowing systems
or graphical user interfaces (GUIs) and familiarity with network management.

Text conventions

This guide uses the following text conventions:

angle brackets (< >) Indicate that you choose the text to enter based on the

description inside the brackets. Do not type the
brackets when entering the command.

Example: If the command syntax is

ping <ip_address>, you enter
ping 192.32.10.12

bold Courier text

Indicates command names and options and text that
you need to enter.

Example: Use the

dinfo command.

Example: Enter

show ip {alerts|routes}.

14 Preface

NN46110-401 01.01

braces ({}) Indicate required elements in syntax descriptions where

there is more than one option. You must choose only
one of the options. Do not type the braces when
entering the command.

Example: If the command syntax is

show ip {alerts|routes}, you must enter either
show ip alerts or show ip routes, but not both.

brackets ([ ]) Indicate optional elements in syntax descriptions. Do

not type the brackets when entering the command.
Example: If the command syntax is

show ip interfaces [-alerts], you can enter

either

show ip interfaces or

show ip interfaces -alerts.

ellipsis points (. . . ) Indicate that you repeat the last element of the

command as needed.
Example: If the command syntax is

ethernet/2/1 [<parameter> <value>]... ,

you enter

ethernet/2/1 and as many

parameter-value pairs as needed.

italic text Indicates new terms, book titles, and variables in

command syntax descriptions. Where a variable is two
or more words, the words are connected by an
underscore.

Example: If the command syntax is

show at <valid_route>, valid_route is one

variable and you substitute one value for it.

plain Courier
text

Indicates command syntax and system output, for
example, prompts and system messages.

Example:

Set Trap Monitor Filters

separator ( > ) Shows menu paths.

Example: Protocols > IP identifies the IP command on
the Protocols menu.

vertical line (

| ) Separates choices for command keywords and

arguments. Enter only one of the choices. Do not type
the vertical line when entering the command.

Example: If the command syntax is

show ip {alerts|routes}, you enter either
show ip alerts or show ip routes, but not

both.

Preface 15

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Related publications

For more information about the Nortel VPN Client, refer to the following
publications:

• Nortel VPN Router Configuration — Client (NN46110-306) introduces the
client product and provides information about initial setup and configuration.

• Nortel VPN Router Configuration — Tunnel Guard (NN46110-307) provides
information about configuring and using the Tunnel Guard.

Hard copy technical manuals

You can print selected technical manuals and release notes free, directly from the
Internet. Go to www.nortel.com/support, find the product for which you need
documentation, then locate the specific category and model or version for your
hardware or software product. Use Adobe Reader to open the manuals and release
notes, search for the sections you need, and print them on most standard printers.
Go to Adobe Systems at www.adobe.com to download a free copy of the Adobe
Reader.

16 Preface

NN46110-401 01.01

17

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Chapter 1

Overview

Localised Nortel VPN Client 6.02.030 is an international version of the Nortel
VPN Client. It is based on VPN Client Version 6.01, and provides national
language support.

The Release Notes contain the latest information about the Client, including a
brief explanation of new features and issues or considerations [see Nortel VPN
Client Release Notes — Release 6.02 Localized Client (314177-D Rev 00)]. For
detailed documentation about configuring the client, see Configuring the
Contivity VPN Client (311644-J Rev 00).

Supported platforms

This client release supports the following Microsoft operating systems:

• Windows XP Home, Windows XP Professional, and Windows XP Tablet

• Windows 2000 Professional

Although you can install the client on older versions of Microsoft operating
systems, Nortel provides support only for the Windows operating systems listed
previously. The client works with all service packs available for each operating
system.

Note: Version 4.91 is the last release that provides support for the
Windows 98 and Windows ME operating systems.

18 Chapter 1 Overview

NN46110-401 01.01

Client software

The client software contains all the files you need to configure and manage the
client. This client software is available from the Nortel Support Web site at

www.nortel.com/support.

The client software directories are described in the following sections.

Client directory

The client directory contains the files for the client as well as files that are related
to the client.

Localized client

This Localized Version of the Contivity VPN Client provides the following:

• German client

• Simplified Chinese client

• French Canadian client

• Spanish client

• Japanese client

The eac602dl.exe file is the localized version of the Contivity VPN Client (IPSec)
software.

During the client installation procedure, you are prompted to select a language
version to install. The client must be installed on a system that is running a
comparable operating system. For example, you must run the Spanish client on a
Spanish operating system.

Custom and Entrust subdirectories

The client directory contains the following directories that have files used for
customizing clients:

• custom—files used to customize your client

Chapter 1 Overview 19

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Standard

• entrust—files used for Entrust certificate-based authentication

For details about customizing clients, see Nortel VPN Router Configuration —
Client (NN46110-306).

Doc (Documentation) directory

The doc directory contains the client.pdf file, which provides information for
configuring the client.

Tools directory

The tools directory contains the file CVCVersion.exe, which returns the version
of the installed client.

Restricted product—export license requirement

This product incorporates encryption technology that is highly restricted and can
require an export license from the US Department of Commerce, Bureau of
Export Administration, prior to international shipment.

A product that incorporates encryption with a key length up to 56 bits can be
eligible for international shipment pursuant to a license exception. However, any
product that incorporates encryption technology exceeding 56 bits requires an
export license from the US Department of Commerce.

Pursuant to such license, the product can be marketed and sold only to a limited
class of international users. Any entity, other than Nortel, that wants to export this
product must first obtain license approval from the US Department of Commerce.

Note: These files are not used for Entrust certificates accessed with
Microsoft Cryptographic API (CryptoAPI)

20 Chapter 1 Overview

NN46110-401 01.01

Further, the user of this product cannot re-export, transfer, or divert the product to
any country to which such re-exports are restricted or embargoed under United
States export control laws and regulations, or to any national or resident of such
restricted or embargoed countries, or provide the product to any military end user
or for any military end use, including the design, development, or production of
any chemical, nuclear, or biological weapons.

21

Nortel VPN Client Release Notes — VPN Localized Client Software Release 6.02.030

Chapter 2

Issues and considerations

The following sections contains customer issues fixed in this release and general
considerations for this product.

VPN Client considerations

You must have admin privileges to install the VPN Client, and you must copy the
client installation files to a local drive.

Customer issues fixed in this release

This section describes reported customer issues that are fixed in this Localized
Version 6.02.030.

The Entrust KMPAPI32.DLL has been updated to version 6.0.543.1253 to resolve
Q01473745.

Note: Network connectivity can be lost for a short time during the client
installation, but returns after installation is complete. In some instances,
this causes problems with currently running network applications. To
avoid problems, exit all programs before starting the installation process.

22 Chapter 2 Issues and considerations

NN46110-401 01.01

The following table lists the fixed customer issues.

Table 1 Customer issues fixed in Localized Version 6.02.030

CR Description

Q00891058 The Entrust rollover functionality for the Nortel VPN Client

may fail to display the informational pop-up window in
some test scenarios.

Q01297125 A Windows mobile-based device adapter triggers an error

message indicating failure to bind to Eacfilt Driver when the
VPN Client is launched.

Q01317028 The removal of the software challenge token software

(Axent) support in the 6.01 Nortel VPN Client inadvertently
removes the option for the challenge token card as well.

Q01404677 The Nortel VPN Client may in some scenarios prevent a

laptop PC from shutting down in suspend mode.

Q01414526 The Nortel VPN Client does not properly interpret the

French character set in the password field.

Q01419547
Q01458545

The Nortel VPN Client may send the incorrect response to
an authentication challenge from an Entrust ID Guard
server.

Q01473745 The Nortel VPN Client may take as long as two minutes to

disconnect when using online mode with Entrust
Certificates due to an anomaly in the Entrust libraries
distributed with this 6.02 release.

Q01501302 When the Nortel VPN Client is installed as a service, the

Windows dial-up connect requires the authentication
credential to be supplied each time the dialogue is initiated.

Q01536424 The Nortel VPN Client SecureID Authentication using new

pin mode may not function properly.

Q01549331 The localized version of the Nortel VPN Client was not

updated with the recent Token Authentication screen
changes.

Q01588282 When a Nortel VPN Client user tries to initiate a VPN

connection using the Entrust Entelligence 6.1 Single
Sign-on feature to access the Entrust profile, the VPN
Client returns with the error message: "Login Failure due
to: Bad Password".