User guide

34
Release Notes for Cisco Router and Security Device Manager 2.5
OL-5009-20
Caveats
• CSCin44119
When an Easy VPN tunnel is active, using Cisco SDM to apply a NAT configuration to the Easy
VPN inside and outside interfaces will deliver ip nat inside and ip nat outside commands to the
router, but the running configuration will not be changed. Cisco SDM displays no error message
when this is attempted.
Workaround: To apply a NAT configuration to interfaces that have been designated as Easy VPN
inside or outside interfaces, complete the following steps in Cisco SDM:
– Choose the Easy VPN tunnel in the VPN Connections window and click Disconnect. If the
Connect/Disconnect button is disabled, choose the interface in the Interfaces and Connections
window, open the Association tab for that connection and change the Easy VPN association to
None.
– Open the NAT window, click Designate NAT Interfaces, and designate NAT inside and NAT
outside interfaces.
– Select the Easy VPN tunnel, and click Connect. If you had to disassociate the Easy VPN tunnel
from the connection, return to the Association tab, and choose the Easy VPN connection name
again.
• CSCec83817
Cisco SDM will not start on a Cisco 831 router with 32 MB of memory if run from Netscape. An
exception will be displayed in the Java console window, and in the router console window indicating
a memory allocation failure.
Workaround: Run Cisco SDM using Internet Explorer version 5.5 or later. Or, if you want to
continue to use Netscape, log in to the router CLI and enter the following memory-size command
in global configuration mode:
Router# memory-size iomem 10
• CSCin61634
XAuth authentication intermittently fails, and Easy VPN tunnels cannot be established using
Cisco SDM on routers running Cisco IOS Release 12.3(4)T. When the user attempts to do an Xauth
authentication in Cisco SDM, the following error message is displayed:
Unable to establish a session with the router to process XAUTH request from the Easy
VPN server. Easy VPN tunnel cannot be successfully brought up.
This message is followed by another indicating that the connect command was delivered to the
router, but that the tunnel was not established.
Workaround: In the VPN Connections window, choose the Easy VPN tunnel configuration and
click the Reset Tunnel button to clear the tunnel and reconnect it. If this does not bring up the
tunnel, use the Login button, more than once if necessary, to bring up the tunnel.
• CSCed06737
When Cisco SDM Express runs with Cisco IOS image of Release 12.2(15)T, it fails to download the
configuration file from the CNS server through the Cisco SDM Express wizard. See CSCin65539
for more details. This issue occurs only with Cisco IOS Release 12.2(15)T.
Workaround: Upgrade to Cisco IOS Release 12.3(4)T or later.
• CSCec87975
On Cisco 7x00 routers, the Cisco SDM Update feature is supported if the current Cisco SDM files
were loaded onto the router flash disk or Compact Flash disk. However, the Cisco SDM Update
feature fails to upload new files to the router if the current Cisco SDM files were installed in flash