Release Notes Threat Management Services zl Module ST.1.2.110909 11-2011

Known Issues

Release ST.1.1.100226/ST.1.1.100330

■ PR_46778 — High Availability cannot be disabled without serious service disruption and

loss of connectivity. When high availability is disabled, the following message is displayed:

HP E-5406zl(tms-module-C:config)# no high-availability

Shutting down HA will remove the IP addresses of the TMS VLANs, and any remote

connections to the TMS zl Module will be lost. You must then access the TMS zl Module's

CLI through the host switch to save the configuration and re-configure the VLANs.

Do you want to continue [y/n]?

■ PR_46898 — In High Availability mode when RIP is enabled, the TMS zl Module attempts

to send RIP via the High Availability network interface. The following log is generated as a

result:

time="2009-10-25 15:06:07" severity=critical pri=1

fw=ProCurve-TMS-zl-Module id=fw_l2l3_attack msg="IPROUTE: unable to

determine destination network for the packet, packets dropped"

srczone=SELF src=192.168.0.1 srcport=520 dst=192.168.0.255 dstport=520

proto=UDP subfamid=routeanomaly mtype=attack duplicatecount=2 mid=656

■ PR_49472 — In certain High Availability situations, the Participant fails to receive any

sessions from the Master.

■ PR_46900 — High Availability Master and Participant can get out of synch in regards to

connections when a large amount of connections have been established.

■ PR_47206 / PR_10554 / PR_16655 — In High Availability mode, VPN connections are not

failing over for 'Client-to-Site'. 'Site-to-Site' connections fail over correctly.

■ PR_53609 — When using the TMS zl Module CLI to configure High Availability (HA), the

user MUST configure the HA VLAN and HA IP address prior to rebooting the TMS.

For example:

HP E-5406zl(tms-module-C:config)# high-availability active-standby cluster 1 device

1 priority 200

Success: HA configuration successfully updated.

You must save the configuration and reboot for changes to take effect.

Note: Please set the HA/Cluster IP and Vlan before rebooting the device.

Although the user is warned, if the HA VLAN and HA IP Address are not configured prior to

reboot, the TMS will fail to initialize VLANs properly and no new VLANs can be added. To return

to proper operation, configure the HA VLAN and HA IP Address appropriate for your network.

For example:

HP E-5406zl(tms-module-C:config)# high-availability vlan 10

Success: HA VLAN set to: 10

HP E-5406zl(tms-module-C:config)# high-availability ip 172.16.100.100 255.255.255.0

Success: HA IP Address set to: 172.16.100.100 255.255.255.0