TMS zl Module Release Notes ST.1.1.100330

Known Issues

Release ST.1.1.100226

■ PR_46900 — High Availability Master and Participant can get out of synch in regards to

connections when a large amount of connections have been established.

■ PR_47206 / PR_10554 / PR_16655 — In High Availability mode, VPN connections are not

failing over for 'Client-to-Site'. 'Site-to-Site' connections fail over correctly.

■ PR_53609 — When using the TMS zl Module CLI to configure High Availability (HA), the

user MUST configure the HA VLAN and HA IP address prior to rebooting the TMS.

For example:

ProCurve 5406zl(tms-module-C:config)# high-availability active-standby cluster 1

device 1 priority 200

Success: HA configuration successfully updated.

You must save the configuration and reboot for changes to take effect.

Note: Please set the HA/Cluster IP and Vlan before rebooting the device.

Although the user is warned, if the HA VLAN and HA IP Address are not configured prior to

reboot, the TMS will fail to initialize VLANs properly and no new VLANs can be added. To return

to proper operation, configure the HA VLAN and HA IP Address appropriate for your network.

For example:

ProCurve 5406zl(tms-module-C:config)# high-availability vlan 10

Success: HA VLAN set to: 10

ProCurve5406zl(tms-module-C:config)# high-availability ip 172.16.100.100

255.255.255.0

Success: HA IP Address set to: 172.16.100.100 255.255.255.0

ProCurve 5406zl(tms-module-C:config)#exit

ProCurve 5406zl(tms-module-C)#write memory

ProCurve 5406zl(tms-module-C)#boot

Device will be rebooted, do you want to continue [y/n]? y

At this point, the TMS product will initialize the VLANs correctly and new VLANs can be added.

VPN

■ PR_40382 — Importing a CRL file which does not contain the 'nextUpdate' field is not

successful.

■ PR_41431 — Field Validation failure for IKEv1 identities, distinguished-name field. While

configuring an IKEv1 policy, the CLI will take any value for the distinguished-name field when

setting identities. The manual states that this value should include the proper attribute id and

value: attributeid=value.

■ PR_41535 — Field validation failure when setting position on an IPSec policy. The CLI will

take any given positive value when setting the position of an IPSec policy. The allowed values

are between 1-65535