Release Notes for the Cisco ASA Device Package Software Version 1.2(1) for ACI

Release Notes for the Cisco ASA Device Package Software, Version 1.2(1) for ACI

---

Released: June 15, 2015

Revised: September 18, 2015

This document contains release information for the Cisco ASA Device Package software, Version 1.2(1) for ACI, and includes the following sections:

• Supported ASA Models
• New Features
• Model Changes Between 1.1(1) and 1.2(1)
• Important Notes
• Installing the Software
• Open Caveats
• Resolved Caveats
• Related Documentation
• Obtaining Documentation and Submitting a Service Request

Supported ASA Models

The following table lists the supported ASA models.

New Features

We have added support for the following:

• Dynamic routing (as supported by the APIC)

– BGP (IPv4 and IPv6)

– OSPF (OSPFv2 and OSPFv3)

• Multiple contexts
• Configuring same-security-traffic-permit inter-interface
• Configuring direct failover links that do not use the ACI fabric
• NAT net-to-net option
• Redirecting ASA traffic to the ASA FirePOWER module using the sfr command

Note OSPFv3 requires ASA release 9.0(1) or above
BGP (IPv4) requires ASA release 9.2(1) or above
BGP (IPv6) requires ASA release 9.3(2) or above

The following figure shows the how to set up the APIC to access the ASA. For an ASA in multi-context mode, the management IP address of the cluster should be that of the admin context of the ASA, and the management IP address of Device 1 should be that of the target user context. (The admin context can be the target user context as well.)

Each context must be defined as its own APIC cluster. Multiple contexts within an ASA cannot be represented under a single cluster.

Model Changes Between 1.1(1) and 1.2(1)

• We changed the ipv4_address and ipv6_address parameters to folders in the BridgeGroupIntf folder.
• We changed the ipv4_address and ipv6_link_local_address parameters to folders in the InterfaceConfig folder.
• We moved the PortChannelMember and LACPMaxBundle folders from device configuration to cluster configuration.
• We removed all the parameters named rate_status under the BasicThreatDetection folder.
• We removed the status parameter in the ScanningThreatRate folder.
• We removed the statistics parameter in the AdvancedThreatDetection folder.

Important Notes

• In a scenario where there are two identical graphs (identical interfaces) that have one BD with multiple EPGs, it is not possible to support NAT because NAT cannot differentiate between interfaces.
• When you delete NAT on one of the graphs or delete one of the graph instances, the ASA Device Package cannot determine which one you want to delete, and it removes both.
• The ASAv does not support multiple context mode.

Installing the Software

To install the ASA Device Package software, see the Cisco ASA Integration with the APIC Quick Start Guide for instructions, at:

http://www.cisco.com/c/en/us/support/cloud-systems-management/application-policy-infrastructure-controller-apic/tsd-products-support-series-home.html

Open Caveats

If you are a registered Cisco.com user, view more information about each caveat using Bug Search at the following website:

https://tools.cisco.com/bugsearch

The following table contains open caveats in ASA Device Package Version 1.2(1) :

Resolved Caveats

If you are a registered Cisco.com user, view more information about each caveat using Bug Search at the following website:

https://tools.cisco.com/bugsearch

The following table contains resolved caveats in ASA Device Package Version 1.2(1):

Related Documentation

For additional information about the ASA, see Navigating the Cisco ASA Series Documentation :

http://www.cisco.com/go/asadocs

For additional information about the APIC, see the Cisco APIC solution website:

http://www.cisco.com/c/en/us/solutions/enterprise-networks/application-centric-infrastructure-security/index.html

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation as an RSS feed and delivers content directly to your desktop using a reader application. The RSS feeds are a free service.