New and Changed Information
The following sections list the new hardware and software features that are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 3.6S:
New Hardware Features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.2S
There are no new hardware features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.2S.
New Software Features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.2S
There are no new software features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.2S.
New Hardware Features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.1S
There are no new hardware features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.1S.
New Software Features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.1S
There are no new software features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.1S.
New Hardware Features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.0S
There are no new hardware features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6S.
New Software Features in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6.0S
The following are the new software features introduced in Cisco ASR 1000 Series Aggregation Services Routers Release 3.6S:
IPsec Feature License for Monitoring and Reporting
From Cisco IOS XE Release 3.6S onward, you can test IPsec features by activating the built-in evaluation license and accepting the End User License Agreement (EULA). You must activate this license and accept the EULA to ensure that the crypto commands associated with an interface are not blocked. For more information about this feature, see the Software Activation Configuration Guide, Cisco IOS XE Release 3S at the following location:
http://www.cisco.com/en/US/docs/ios-xml/ios/csa/configuration/xe-3s/csa-xe-3s-book.html
Zone-Based Policy Firewall IPv6 Support
The zone-based policy firewall provides advanced traffic filtering or inspection of IPv4 and IPv6 packets. In Cisco IOS XE Release 3.6S and later releases, both IPv4 and IPv6 packet inspection are enabled by default. If you need to bypass the IPv6 packet inspection, you need to configure the pass action. The pass action passes the traffic from one zone to another. When the pass action is configured, the firewall does not inspect the traffic; it passes the traffic. In the IPv6 firewall, you must explicitly configure the pass action for the return traffic by defining a zone pair and a policy map with pass action.
For detailed information about the Zone-Based Policy Firewall IPv6 Support feature, see the following Cisco document:
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_zbf/configuration/xe-3s/sec-zbf-ipv6.html