sa3450 and sa3000 Series VPN Manager - Release 6.8.2 Release Notes

Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450

An SA of 0.0.0.0 Does Not Pass Traffic On

Site-To-Site Tunnels

Reference Numbers 369P and 679

In Release 6.8.2, an SA of 0.0.0.0 does not pass traffic on

site-to-site tunnels and the destination device does not see

packets.

Some Running SAs Are Not Renegotiated

After Being Deleted by a Cisco Device

Reference Number 451DF

In Release 6.8.2, when a HP VPN device initiates a VPN

tunnel between a VPN device and a Cisco device, the

following sequence of commands are issued from the

Cisco device:

clear crypto isakmp is issued by Cisco to delete the MAIN

SA, a delete notification from Cisco is sent to HP VPN, the

VPN device deletes its Main SA and Cisco deletes its Main

SA.

clear crypto sa is issued by Cisco, Cisco deletes its QUICK

SA, but a delete notification is not sent for this action to

the HP VPN device.

As no delete notification is received, the HP VPN device

does not delete its Quick SA. Since the Quick SA remains,

the VPN device does not renegotiate the SA.

Removing Flash When Device Powered Up

Causes Crash

Reference Number 105DF

When the VPN device is powered on and in disable mode,

if you remove the flash, then type enabled and your

password, first a message appears: Unable to write

DiskCachePasse, then the device crashes.

To prevent this crash and potential damage to the flash, if

the VPN device is powered up, do not remove the flash.