ISEKI CISCO SYSTEMS OL-5450-10 - Manual (Page 56)

Open Caveats
56
Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D
OL-5450-10
• CSCea92185
The PKCS#10 thumbprint for the certificate request is missing on 4.x VPN
Client, so it is impossible for the CA to verify the user's request by comparing
the thumbprint.
Workaround:
Downgrade to 3.6.X VPN Client.
• CSCea93535
Performance issues exist with H.323 and the 4.0 VPN Client virtual adapter.
These performance issues could be related to MTU.
Workaround:
To use this workaround, you need to be running VPN Client Release 4.0.3.C
or later. Set the Virtual Adapter MTU at the MAC layer to 1500 (default value
is 1300). To do this, run the command “SetMTU.exe /va 1500”, then
re-establishing the tunnel. (A reboot is not required.) SetMTU.exe should be
located in the VPN Client installation directory. Please use “SetMTU.exe /?”
for other options.
• CSCeb48663
The ‘vpnclient stat firewall’ command cannot be run while not connected.
This command should return the state of the firewall at all times, not just
when the VPN Client is connected.
• CSCeb68102
CVPND does not free file handles when it disconnects from the VPN
gateway. This might cause an out-of-resources situation. This problem
occurred under Windows NT, running VPN Client version 4.0. No problem
running with Windows 2000.
• CSCeb83746
The following problem occurs when using the VPN Client, Release 4.0
running on MS Windows 2000 or Windows XP. After connecting, a
“classfull” route is installed in the routing table, due to not receiving a subnet
mask.
• CSCec00525
IPSec SA rekeying fails on VPN Client 4.0.2A/B. The VPN4.0.2A/B and
IPSec SA Lifetime Measurement is configured as Data on the VPN 3000
Concentrator.