Guest

Cisco IOS Software Releases 12.3 T

Cross-Platform Release Notes for Cisco IOS Release 12.3 T, Part 3: New Feature Descriptions and Important Notes

Table Of Contents

New and Changed Information

New Hardware Features Supported in Cisco IOS Release 12.3(14)T

AIM-VPN-HPII-PLUS

Cisco AS5350XM Universal Gateway

Cisco AS5400XM Universal Gateways

Cisco Communication Media Module Voice Features

Cisco Small Business 100 Series Routers

Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card

EtherSwitch Service Modules

Satellite Network Module (NM-1VSAT-GILAT)

Serial HWICs

VPN Acceleration Module 2+ (VAM2+)

New Software Features Supported in Cisco IOS Release 12.3(14)T

Administrative Secure Device Provisioning Introducer

ARP-Auto Logoff

BGP Support for Fast Peering Session Deactivation

BGP Support for IP Prefix Import from Global Table into a VRF Table

BGP Support for Next-Hop Address Tracking

CEF Support for NAT-PT

Circuit Emulation over IP (CEMoIP)

Cisco 7200 Series & Cisco 7301 Routers - Enhanced MIB Support

Cisco Communication Media Module Voice Features

Cisco Easy VPN Remote

Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card

Configuration Change Notification and Logging - EAL4+ Certification Enhancements

Demilitarized Zone (DMZ) Port

DHCP Enhancements for Edge-Session Management

DHCP—Subscriber Identifier Suboption of Option82

DHCP ODAP Server Support

DHCP Relay— MPLS VPN Support

DHCPv6 Predix Delegation via AAA

DID Support on VIC-4FXS/DID

Dynamic DNS Support for Cisco IOS

EIGRP MPLS VPN PE-CE Site of Origin (SoO)

EIGRP Prefix Limit Support

EIGRP SNMP Support

E-mail Inspection Engine

Embedded Event Manager 2.1

Embedded Resource Manager (ERM)

Enhanced Conferencing and Transcoding for Voice Gateway Routers

EtherSwitch Service Modules

Exclusive Configuration Change Access

Extended Prepaid Tariff Switch with SSG

FHRP—VRRP Enhancements

FXO Expansion Module for NM-HDA-4FXS

Granular Protocol Inspection

Hookflash and DTMF Relay Transfer

Hot Standby MAC Address

HTTP Client API for TCL IVR

HTTP Inspection Engine

IGMPv3 Host Stack

Implementing RIP for IPv6

Inspection of Router-Generated Traffic

Integrated Routing and Bridging (IRB) Support for the Cisco MGX-RPM-XF-512

Intrusion Prevention System (IPS) - Signature Enhancements

IOS Embedded Event Manager 2.1

IP Side Answer Tone Detection for Echo Canceller Control

IP SLAs Sub-millisecond Accuracy Improvements

IP SLA - VoIP Call Setup (Post Dial Delay) Monitoring

IP SLA - VoIP Gatekeeper Registration Delay Monitoring

IPSec Anti-Replay Window: Expanding and Disabling

IPSec Preferred Peer

IPSec Virtual Tunnel Interface

IPv6 BSR Bi-Directional Support

L2TPv3: Layer 2 Tunnel Protocol Version 3

Land Mobile Radio (LMR) over IP

Local AAA Server

Login Password Retry Lockout

MAC Address Based Authorization with SSG

Malicious Caller Identification Invocation Support for Enterprise Networks

MCID for Cisco IOS Voice Gateways

Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode

MIB Enhancements for H.323, SIP, and MGCP

MLPP for Analog and BRI Endpoints on Cisco IOS Voice Gateways

MLPP for Cisco IOS Voice Gateways

Mobile IP - Mobile IPv6 Home Agent

Mobile IP - Mobile Router DHCP Support for Dynamic CCoA and Foreign Agent Processing

Multiprotocol Label Switching (MPLS)

MPLS—Multilink PPP Support

MPLS DiffServ-Aware Traffic Engineering (DS-TE)

MPLS Enhancements to Interfaces MIB

MPLS LDP Autoconfiguration

MPLS LDP Graceful Restart

MPLS LDP Inbound Label Binding Filtering

MPLS LDP Session Protection

MPLS LDP-IGP Synchronization

MPLS Quality of Service (QoS)

MPLS QoS—DiffServ Tunneling Modes

MPLS Traffic Engineering (TE)

MPLS Virtual Private Networks

MPLS VPN—Carrier Supporting Carrier—IPv4 BGP Label Distribution

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

MPLS VPN Half-Duplex VRF (HDVRF) Support

MPLS VPN—Inter-AS—IPv4 BGP Label Distribution

MPLS VPN—MIB Notifications

MPLS VPN—MIB Support

MPLS VPN Support for EIGRP Between Provider Edge and Customer Edge

MPLS VPN—VRF Selection Using Policy Based Routing

Multi-VRF CE (VRF-lite) Updated Performance

Multicast VPN MIB

Multi-cast VPN

NAT Integration with MPLS VPNs (VRF-NAT)

NAT Routemaps Outside-to-Inside Support

NAT Virtual Interface (NVI)

NetFlow Layer 2 and Security Monitoring Exports

No Service Password-Recovery

OER Support for Cost-Based Optimization and Traceroute Reporting

Option to Disable Hardware Crypto Engine Failover to Software Crypto Engine

OSPF Sham-Link MIB Support

OSPF Sham-Link Support for MPLS VPN

Outbound Control Packet Decoding Implemented for VPDN Debug Output Using the L2TP Protocol

Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways

PA-POS-1OC3: 1-port Packet over SONET OC3c/STM1 Port Adapter

Per Interface mroute State Limit

Per-VRF AAA

Persistent Self-Signed Certificates

Policy Based Routing: Recursive Next Hop

QoS Bandwidth Estimation

QSIG Supplementary Features for Cisco IOS Voice Gateways

RADIUS Attribute 104 - Routemap Display Extension

RADIUS Attribute 5 (NAS-Port) Format Specified on a Per-Server Group Level

Reverse Route Injection

RSVP Refresh Reduction and Reliable Messaging

SafeNet IPSec VPN Client Support

Second-Generation 1- and 2-Port T1/E1 Multiflex Trunk Voice/WAN Interface Cards

Secure Device Provisioning Certificate-Based Authorization

Secure SRST

Selective Enabling of Applications Using an HTTP or Secure HTTP Server

SHDSL - Auto Detection of 2-Wire Versus 4-Wire Line Mode

SNA Switching Services Enterprise Extender for IP Version 6

SNMP over IPv6 Support

SSG Aware On-Demand IP Address Renewal

SSG Support for Subnet Based Authentication

Subordinate Certificate Server

System Logging - EAL4 Certification Enhancements

T.38 Fax Relay on the Cisco Catalyst 6000 and Cisco 7600 Communication Media Module

T.38 Fax Statistics

T1/E1 Mode for SHDSL

Transient Memory Management

USB Storage

VoIP Alternate Path Fallback SNMP Trap

VRF Aware Cisco IOS Firewall

VRF-Aware IPSec

VRF-Aware MPLS Static Labels

Warm Reload

WebVPN

WCCP Enhancements

X.25 Station Type for ISDN D-Channel Interface

New Hardware Features Supported in Cisco IOS Release 12.3(11)T2

Cisco MWR 1900 Series Routers

New Software Features Supported in Cisco IOS Release 12.3(11)T2

Cisco 7301 Router Supports Stateful Failover for IPSec

Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode

New Hardware Features Supported in Cisco IOS Release 12.3(11)T

256-MB Memory Capacity Enhancement

Cisco 3200 Series Mobile Access Routers

Cisco 3800 Series Routers

High-Density Analog (FXO/FXS/DID) and Digital (BRI) Extension Module for Voice/Fax (EVM-HD)

New Software Features Supported in Cisco IOS Release 12.3(11)T

ATM Mode for Two-Wire or Four-Wire SHDSL

APS Support on AS5850 STM-1 Interface

AutoQoS for the Enterprise

BGP Support for Dual AS Configuration for Network AS Migrations

BGP Support for Named Extended Community Lists

BGP Support for Sequenced Entries in Extended Community Lists

Call Failure Recovery (Rotary) on the Cisco Multiservice IP-to-IP Gateway

CallManager Express 3.2

Certificate Server Auto Archive

Cisco 1700 Series Voice Features

Cisco Easy VPN Remote

Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers

Cisco IOS 802.1x Supplicant

Cisco IOS Intrusion Prevention System

Cisco IOS IPv6 Configuration Library

Clear Certificate Server Enrollment Request Database

Configurable MAC Address for PPPoE

Configuring Fast Secure Roaming

Configuring Remote Site IEEE 802.1X Local Authentication Service

Default Route on a PPP Virtual Access Interface

DHCP - Static Mapping

Dial-Out Trunk Group

Enabling OSPFv2 on an Interface Using the ip ospf area Command

Enhanced Crashinfo File Collection Method

Enhanced cRTP for Links with High Delay, Packet Loss and Reordering

Enhanced ITU-T G.168 Echo Cancellation

FACILITY Debug Enhancement

Gatekeeper Prefix Selection for Hair-Pinned Calls

IPv6 IOS Firewall FTP Application Support

IPv6 Multicast: Bootstrap Router (BSR)

IPv6 Support for AS5850 Dial

MCID for Cisco IOS Voice Gateways

MLPP for Cisco IOS Voice Gateways

Mobile IP CPS Improvement at FA

Mobile Networks Deployment MIB

NAT - H.245 Tunneling Support

NBAR Multiple Applications per Port Capability

NetFlow

NetFlow Egress Support

NetFlow Top Talkers

NextPort Voice Tuning and Background Noise Statistics with NextPort Dual-Filter G.168 Echo Cancellation

OER Policy-Rules Configuration and Port-Based Prefix Learning

Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways

Overlap Signaling Processing on H.323 Terminating Gateways

PKI AAA Authorization Using the Entire Subject Name

PKI Status

Port Translation for Windows Clients and Cisco IOS LNS Support

Quick Autoenroll

QSIG Supplementary Features for Cisco IOS Voice Gateways

Reverse SSH Enhancements

Role-Based CLI Access

SHDSL - Auto Detection of 2 Wire Versus 4 Wire Line Mode

Skip FA/HA-CHAP at Mobile IP Lifetime Renewals

SSG Default Quota for Prepaid Billing Server Failure

SSG Support for Dynamic Load Balancing

SSG Support for Overlapping Subscriber IP Addresses

SSG Support for RADIUS Attributes 27 and 29

SSM Channel (S,G) Based Filtering for Multicast Boundaries

Stateful Failover for IPSec

Support for AAA Attributes MN-HA-SPI and MN-HA Shared Key

Upstream PPPoX Connection Speed Transfer at LAC

VRF Aware Multicast Error Messages

VRRP MIB—RFC 2787

Warm Upgrade

New Hardware Features Supported in Cisco IOS Release 12.3(8)T4

Cisco 1800 Series Routers (Modular)

Cisco 2800 Series Routers

Cisco Gigabit Ethernet High-Speed WAN Interface Cards (HWIC-1GE-SFP)

High-Density Analog (FXS/DID/FXO) and Digital (BRI) Extension Module for Voice/Fax (EVM-HD)

HWIC-4ESW

HWIC-9ESW

ILPM-4 and ILPM-8

New Hardware Features Supported in Cisco IOS Release 12.3(8)T

WIC-4ESW (4-Port Ethernet Switch WIC)

New Software Features Supported in Cisco IOS Release 12.3(8)T

AAL1 CES on AIM-ATM

AutoQoS—VoIP

AutoSecure

BGP Cost Community Support for EIGRP MPLS VPN PE-CE with Backdoor Links

Call Admission Control for IKE

Call Application HTTP Client Cookie Support

Certificate to ISAKMP Profile Mapping

Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers

Cisco General Packet Radio Service (GPRS) Gateway Support Node (GGSN)

Cisco IOS Intrusion Prevention System

Cisco IOS Resilient Configuration

CISCO-IP-LOCAL-MIB-Support

Class-Based Traffic Policing with CLP Tagging

CNS Frame Relay Zero Touch

Conferencing and Transcoding for Voice Gateway Routers

Configurable DHCP Client

Crypto Access Check on Clear-Text Packets

DHCP—Statically Configured Routes Using a DHCP Gateway

Easy Secure Device Deployment AAA Integration

EIGRP MPLS VPN PE-CE Site of Origin (SoO)

EIGRP Support for Route Map Filtering

Embedded Syslog Manager (ESM) for the Cisco 800 and Cisco 1700 Series Platforms

Enhanced Object Tracking

IPSec and Quality of Service

Managed LAN Switch

MGCP Fax Rate Control

MGCP Line Control Signaling Package

Minimal Disruptive Restart of VIP Cards

Mobile IP—Support for RFC 3519 NAT Traversal

Monitoring Control Characters on Async Lines

MPLS-aware NetFlow

MPLS Enhancements to Interfaces MIB

MPLS Label Distribution Protocol MIB Version 8 Upgrade

NAT Support for H.323 Fragmented Control Messages

NAT—Support for H.323 v3 and v4 in v2 Compatibility mode

Network Admission Control

Network-based Application Recognition (NBAR)

Optimized Edge Routing (OER)

Protocol Translation Aggregation

QoS: Classification, Policing, and Marking on LAC

Reliable Static Routing Backup Using Object Tracking

Service Assurance Agent (SAA) Multiple Operation Scheduling

SIP Audible Message-Waiting Indicator for FXS Phones

SIP: Cisco IOS Gateway HTTP Digest Authentication and Registration

SIP: Cisco IOS Gateway Reason Header and Buffered Calling Name Completion

SSG Interface Redundancy

SSG MIB Extensions

Upgrade Secondary ROMmon CLI

Virtual Fragmentation Reassembly

Voice Application Monitoring and Troubleshooting Enhancements

X.25 Version Configuration

New Software Features Supported in Cisco IOS Release 12.3(7)T1

Easy VPN Client RSA Signature Support

New Hardware Features Supported in Cisco IOS Release 12.3(7)T

ADSL over POTS WIC with Dying Gasp Support (WIC-1ADSL-DG)

AIM-CUE

Circuit Emulation over IP (CEoIP)

Cisco 1711 and Cisco 1712 Security Access Routers

Cisco VG224 24-Port Analog Phone Gateway

Data Compression AIM for the Cisco 2600 Series Routers

IP Communications High-Density Digital Voice/Fax Network Module

Network Analysis Module (NM-NAM)

NM-8AM-V2, NM-16AM-V2

PWLAN Access Routers

Single Port Multiline G.SHDSL WIC

New Software Features Supported in Cisco IOS Release 12.3(7)T

AAA Double Authentication Secured by Absolute Timeout

ACL—Named ACL Support for Noncontiguous Ports on an Access Control Entry

Analog Centralized Automatic Message Accounting (CAMA) E911 Trunk

Attribute Screening for Access Requests

AutoQoS for the Enterprise

AutoSecure

BGP MIB Support Enhancements

BGP Support for TTL Security Check

Call Routing Enhancements to the H.323 Gatekeeper and GKTMP (GK API)

Cisco CallManager Express 3.1

Cisco IOS IPv6 Configuration Library

Cisco NM-8AM-V2 and NM-16AM-V2 Analog Modem Network Modules with V.92

Cisco VG224 24-Port Analog Phone Gateway

Class-Based Quality of Service (QoS) MIB (CBQoSMIB) Enhancements III

CLNS Support for GRE Tunneling of IPv4 and IPv6 Packets

Control Plane Policing

Distributed Dial-on-Demand Routing

Easy VPN Server

Enhanced ITU-T G.168 Echo Cancellation

ESMTP Support for Cisco IOS Firewall

Extended ACL Support for IGMP to Support SSM in IPv4

Four-Wire Mode for SHDSL

IEEE 802.1Q Tunneling

Interoperability Enhancements to the Cisco Multiservice IP-IP Gateway

IP Source Tracker

IPSec Dead Peer Detection Periodic Message Option

IS-IS Caching of Redistributed Routes

IS-IS Fast-Flooding of LSPs Using the fast flood Command

Key Rollover for Certificate Renewal

Lossless Compression R1, ATM Cell Switching, External BITS Clocking Source

Mobile IP—Foreign Agent Local Routing to Mobile Networks

Mobile IP—Generic Routing Encapsulation for Cisco Mobile Networks

Modem Calls over QSIG

MPLS VPN VRF Selection Using Policy Based Routing

Multicast Fast Switching Performance Improvement

NAT RTSP Support Using NBAR

NAT Stateful Failover for Asymmetric Outside-to-Inside Support

NAT Stateful Failover for Application Layer Gateway (ALG) Support

NAT—Static IP

NetFlow MIB

New Features in Cisco CallManager

OSPF Area Transit Capability

OSPF Link State Database Overload Protection

OSPF per-Interface Link-Local Signaling

Per VRF for TACACS+ Servers

PKI: Query Multiple Servers During Certificate Revocation Check

PPP/MLP MRRU Negotiation Configuration

Protected Private Key Storage

Query Mode Definition Per Trustpoint

RADIUS Attribute 104

RADIUS NAS-IP-Address Configurability

Rate Based Satellite Control Protocol

Role-Based CLI Access

Route Processor Redundancy Plus (RPR+)

SEAL Encryption

Secure Shell (SSH) Version 2 Client Support

Signal ISDN B-Channel ID to Enable Application Control of Voice Gateway Trunks

SSG Default DNS Redirection

SSG Enhancements to SSG-SESM Interaction and Service Logon

SSG Permanent TCP Redirection

SSG TCP Redirect Access Control Lists

SSG Transparent Autologon

Survivable Remote Site Telephony 3.1

T.37 Fax Status Notification Enhancement in an MTA Environment

TCP Congestion Avoidance

TCP Explicit Congestion Notification

Transparent Cisco IOS Firewall

Troubleshooting Enhancements for Multilink PPP over ATM Link Fragmentation and Interleaving

Two-Wire Mode over SHDSL

VoiceXML Store and Forward

VPN Access Control Using 802.1x Authentication

VRF Aware Dialer Watch

New Hardware Features Supported in Cisco IOS Release 12.3(4)T

1-Port ADSL WAN Interface Card

16- and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series (NM-16ESW)

ADSL Broadband Router

Cisco IAD2430 Series IOS Reduced IP subset/Voice

Cisco Intrusion Detection System (IDS) Network Module (NM-CIDS-K9)

Cisco SOHO 90 Series and Cisco 830 Series Routers

IP Communications Voice/Fax Network Module

New Software Features Supported in Cisco IOS Release 12.3(4)T

AAA IPv6 Attributes Support

ACL IP Options Selective Drop

ACL Support for Filtering IP Options

ACL Support for TCP Flags Filtering

Advanced Encryption Standard (AES)

Any Transport over MPLS (AToM) SCR VC Mode for PA-A3-T1/E1-IMA

BCP Support

BGP Configuration Using Peer Templates

BGP Dynamic Update Peer-Groups

BGP Policy Accounting Output Interface Accounting

Blinking LEDs to Indicate DSL Line Training

Calling Line Identification for Spain and Austria

CEF Support for Dialer Profiles on Cisco 7500 Routers

Cisco CallManager Express, V3.0

Cisco Conferencing and Transcoding for Voice Gateway Routers

Cisco Easy VPN Remote Enhancements

Cisco IOS Certificate Server

Cisco IOS Login Enhancements

Cisco IOS MGCP Gateway Support for Cisco CallManager Network Specific Facilities

Cisco Multipath Channel (CMPC)

Cisco Survivable Remote Site Telephony (SRST), V3.0

Cisco Transaction Connection (CTRC)

Cisco Unique Device Identifier

Cisco VoIP Internal Error Codes

Class Based QoS MIB

Class-Based QoS MIB (CBQoSMIB) Enhancements

Combined Packet Protocol (CPP)

Configuration Change Notification and Logging

Configuring SIP Header Passing

Contextual Configuration Diff Utility

Control Plane Policing

CPU Thresholding Notification

Custom Tone Download to Cisco IOS MGCP Gateways from Cisco CallManager

Default Session Application Enhancements

DHCP Address Allocation Using Option 82

DHCP Authorized ARP

DHCP Release and Renew CLI in EXEC Mode

Digital Private Network Signaling System (DPNSS) Backhaul

Direct HTTP Enroll With CA Servers

Distributed Multilink Frame Relay (FRF.16)

Dynamic Multipoint VPN (DMVPN)

Easy VPN Server

Embedded Event Manager 1.0

Enhanced Debug Capabilities for Cisco Voice Gateways

Enhanced ITU-T G.168 Echo Cancellation

Enhanced Object Tracking of Service Assurance Agent (SAA) Operations

Firewall ACL Bypass

Firewall Authentication Proxy for FTP and Telnet Sessions

Firewall Intrusion Detection Signature (IDS) Enhancements

Firewall N2H2 Support

Firewall Support of SSL Encrypted HTTP Authentication Proxy Sign-on

Firewall Support for SIP

Firewall Websense URL Filtering

Framed-Route in RADIUS Accounting

GGSN R3.1

Hot Standby Router Protocol Version 2

Import of RSA Keypair and Certificates in PEM Format

Integrated IS-IS Global Default Metric

Integrated IS-IS Protocol Shutdown Support Maintaining Configuration Parameters

IP Security VPN Monitoring

IP to ATM CoS Enhancements

IPsec NAT Transparency

ISDN Calling Name Display

IS-IS Limit on Number of Redistributed Routes

IS-IS Support for Priority-Driven IP Prefix RIB Installation

L2TP Tunnel Connection Speed Labeling

LAN Network Manager (LNM)

Media Inactive Call Detection

Memory Threshold Notifications

Mobile IP Dynamic Security Association and Key Distribution

Mobile IP Home Agent Redundancy for Dynamic Mobile Networks

Mobile IP MIB for Reverse Tunnel, Challenge, and VSEs

Mobile Networks Dynamic Collocated Care-of-Address

MSDP Compliance with IETF MSDP Draft 20

NAT-Performance & Scalability Enhancement-Timer Wheel

NAT-Performance Enhancement-CEF Switching Support

New Voice Features

OSPF MIB Support of RFC 1850 and Latest Extensions

OSPF Support for Unlimited Software VRFs per Provider Edge (PE) Router

Peer Pool Backup

PIM Dense Mode Fallback Prevention in a Network Following RP Information Loss

PPPoE Relay

PPPoE Service Selection

PPPoE Session Limit Per NAS Port

Pre-fragmentation For IPsec VPNs

Private Line Automatic Ringdown for Trading Turrets

Quality of Service for Virtual Private Networks

Rate Limiting NAT Translation

RAW IP Traffic Export

Real-time Resolution for IPSec Tunnel Peer

Regex Engine Performance Enhancement

RFC 2867—RADIUS Tunnel Accounting

Secure Shell Version 2 Support

Secure SNMP Views

Service Assurance Agency (SAA) VoIP UDP Operation

Service Selection Gateway (SSG)

Service Selection Gateway (SSG) Features in Release 12.3(4)T

Session Initiation Protocol (SIP)

Show Version Enhancements

SIP Debug Output Filtering Support

SIP Gateway Support Enhancements to the bind Command

SIP: RFC 3261 Enhancements

SIP: SIP Header Support and Subscribe and Notify for External Triggers

SSG 3-Key Authentication

SSG AAA Transaction Enhancements

SSG Complete ID

SSG Open Garden Configuration Enhancements

Subscriber Service Support

Token Ring LAN Emulation (TR-LANE)

Tunnel Authentication via RADIUS on Tunnel Terminator

Turbo-Classification for QoS

Using Certificate ACLs to Ignore Revocation Check and Expired Certificates

V.120 Support Network Access Server (NAS)

Videoconferencing on the Cisco Multiservice IP-to-IP Gateway

VLANs over IP Unnumbered Interfaces

Voice Application Enhancements, Phase 4a

Voice Call Debug Filtering on Cisco Voice Gateways

Voice Performance Statistics on Cisco Gateways

VPN Access Control Using 802.1X Authentication

VRF and MQC Hierarchical Shaping in PXE

WCCP Version 2

New Hardware Features Supported in Cisco IOS Release 12.3(2)T1

2-Port GigE/POS

New Software Features Supported in Cisco IOS Release 12.3(2)T1

IPHC (cRTP/cUDP/cTCP)

LFI

Multicast VPN

VTMS

New Hardware Features Supported in Cisco IOS Release 12.3(2)T

1-Port DSU/CSU T1 WIC for the Cisco 1700, Cisco 2600, Cisco 3600, and Cisco 3700 Series Routers

8-Port Foreign Exchange Office MRP for the United States with Battery Reversal (MRP3-8FXOM1)

Enhanced Route Switch Controller (ERSC)

NM-1FE-SMF

NM-16A/S

VIC-4FXS/DID

New Software Features Supported in Cisco IOS Release 12.3(2)T

ACL Performance Enhancement

Asynchronous Point of Sale-to-IP Conversion

Authorization for Protocol Translation

BCP Support

BGP Convergence Optimization

BGP Cost Community

BGP Route-map Continue

Cisco 1700 Series Voice Features for Cisco IOS Release 12.3(2)T

Cisco Extension to the Interfaces MIB (CISCO-IF-EXTENTION-MIB)

CISCO-CONFIG-COPY-MIB: FTP and rcp Support

CISCO-CONFIG-COPY-MIB: Secure Copy Support

Cisco Easy VPN Remote Enhancements

CISCO-FLASH-MIB Enhancements

Cisco IOS IPv6 Configuration Library

Cisco IOS Software Feature Removal: Token Ring Inter-Switch Link

Class-Based Packet Marking Enhancements

Class-Based QoS MIB (CBQoSMIB) Enhancements

Crypto Conditional Debug Support

DHCP Lease Limit per ATM RBE Unnumbered Interface

DNS Proxy

DNS Spoofing

Easy VPN Server

Embedded Syslog Manager

Encrypted Preshared Key

End-of-Record Function for DCNs

Enhanced Voice and QoS for ADSL and G.SHDSL

File Download Using HTTP

Frame Relay—Multilink (MLFR-FRF.16)

Frame Relay Switched Virtual Circuits (SVC) over ISDN

GLBP MD5 Authentication

Generic Routing Encapsulation Tunnel IP Source and Destination VRF Membership

Health Monitor and Diagnostic Monitor for the Cisco AS5850

Hot Standby Router Protocol (HSRP)

HSRP MD5 Authentication

Invalid Security Parameter Index Recovery

ISDN Backup in MPLS Core

ISDN Type of Number to RADIUS Server

IS-IS Incremental SPF

IS-IS Mechanisms to Exclude Connected IP Prefixes from LSP Advertisements

IS-IS Support for Route Tags

L2TP Client-Initiated Tunneling

L2TPv3: Layer 2 Tunnel Protocol Version 3

Loadsharing IP Packets Over More Than Six Parallel Paths

Low Latency Queueing

Memory and CPU Measurement

MGCP-Controlled Backhaul of BRI Signaling in Conjunction with Cisco CallManager

MGCP Support for CallManager (IP-PBX)

Mobile IP

Monitoring and Retraining on Reception of Loss of Margin Messages

MPLS Label Switch Controller and Enhancements

NAT—dCEF Support

NAT—SIP Support

NAT—Support for H.323 v3 and v4 in v2 Compatibility Mode

NAT—Support of IP Phone to Cisco CallManager

Online Certificate Status Protocol (OCSP)

OSPF Incremental SPF

OSPF Limit on Number of Redistributed Routes

OSPF Link-State Advertisement (LSA) Throttling

PAD Subaddress Formatting Option

PCR Support for the Cisco Signaling Link Terminal

Periodic MIB Data Collection and Transfer Mechanism

Persistent TDM Switched Circuits

PPPoE over VLAN Enhancements: Configuration Limit Removal and ATM Support

PPPoE Session Recovery After Reload

Random Sampled NetFlow

RTP Header Compression over Satellite Links

SAA Support for Frame Relay, VoIP, and MPLS VPN Monitoring

Service Assurance Agent (SAA)—MPLS VPN Path Jitter

Show Command Section Filter

SNMP linkDown Trap Limiting

SNMP Support for Named Access Lists

SNMP Support over VPNs—Context Based Access Control

SNMP v1/v2c PDU Conversions for Proxy Forwarder (RFC 2576)

Source Specific Multicast (SSM) Mapping

Token Ring Inter-Switch Link (TRISL)

Virtual Auxiliary Port Feature and Configuration of DSL Settings

VPDN MIB Enhancements for per-VRF Session Counting

VRRP Object Tracking

Warm Reload

X.25 Call Confirm Packet Address Control

X.25 Data Display Trace

MIBs

Deprecated and Replacement MIBs

Limitations and Restrictions

SNMP Version 1 BGP4-MIB Limitations

Use of Cisco CME and Cisco Unity Express GUI Leads to Cisco 1760 Instability in Cisco IOS Release 12.3(8)T and 12.3(11)T

Important Notes

Deferrals

Field Notices and Bulletins

Important Notes for Cisco IOS Release 12.3T

Configuring MD5 Authentication for BGP Peering Sessions

Important Notes for Cisco IOS Release 12.3(14)T

Cisco Catalyst 6500 Series and the Cisco 7600 Series Communication Media Module

Important Notes for Cisco IOS Release 12.3(7)T

debug vwic-mft firmware controller Command

Important Notes for Cisco IOS Release 12.3(2)T2

Cisco Platforms Deferred Because of Caveat CSCin45859

Important Notes for Cisco IOS Release 12.3(2)T1

mgcp behavior Command

Cisco Images Deferred Because of Caveat CSCec23720

Cisco Platforms Deferred Because of Caveat CSCin45859

Important Notes for Cisco IOS Release 12.3(2)T

Cisco Images Deferred Because of Caveat CSCec23720

Cisco Platforms Deferred Because of Caveat CSCin45859

Cisco Images Deferred Because of Caveat CSCec26950

Cisco IOS Packaging

Caveats for Cisco IOS Release 12.3T

Troubleshooting


New and Changed Information

The following sections contain new hardware and software features that are supported in Cisco IOS Release 12.3T:

New Hardware Features Supported in Cisco IOS Release 12.3(14)T

New Software Features Supported in Cisco IOS Release 12.3(14)T

New Hardware Features Supported in Cisco IOS Release 12.3(11)T2

New Software Features Supported in Cisco IOS Release 12.3(11)T2

New Hardware Features Supported in Cisco IOS Release 12.3(11)T

New Software Features Supported in Cisco IOS Release 12.3(11)T

New Hardware Features Supported in Cisco IOS Release 12.3(8)T4

New Hardware Features Supported in Cisco IOS Release 12.3(8)T

New Software Features Supported in Cisco IOS Release 12.3(8)T

New Software Features Supported in Cisco IOS Release 12.3(7)T1

New Hardware Features Supported in Cisco IOS Release 12.3(7)T

New Software Features Supported in Cisco IOS Release 12.3(7)T

New Hardware Features Supported in Cisco IOS Release 12.3(4)T

New Software Features Supported in Cisco IOS Release 12.3(4)T

New Hardware Features Supported in Cisco IOS Release 12.3(2)T1

New Software Features Supported in Cisco IOS Release 12.3(2)T1

New Hardware Features Supported in Cisco IOS Release 12.3(2)T

New Software Features Supported in Cisco IOS Release 12.3(2)T


Note A cumulative list of all new and existing features supported in this release, including platform and software image support, can be found in Cisco Feature Navigator at http://www.cisco.com/go/cfn


New Hardware Features Supported in Cisco IOS Release 12.3(14)T

This section describes new and changed features in Cisco IOS Release 12.3(14)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(14)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

AIM-VPN-HPII-PLUS

Cisco AS5350XM Universal Gateway

Cisco AS5350XM Universal Gateway

Cisco Communication Media Module Voice Features

Cisco Small Business 100 Series Routers

Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card

EtherSwitch Service Modules

Satellite Network Module (NM-1VSAT-GILAT)

Serial HWICs

VPN Acceleration Module 2+ (VAM2+)

AIM-VPN-HPII-PLUS

Cisco 3825 and Cisco 3845 Integrated Services Routers with the AIM-VPN-HPII-PLUS will be supported with IPSec Stateful Failover. Cisco 3800 on-board crypto is not supported with IPSec stateful failover at this time.

Cisco AS5350XM Universal Gateway

The Cisco AS5350XM universal gateway is a one rack unit (1RU) universal gateway providing best of class voice, fax, and remote access services at densities up to 8T1/7E1. The Cisco AS5350XM universal gateway has three feature card slots and two 10/100/1000 Ethernet LAN ports.

For more information about the AS5350XM universal gateway, see the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5354xm/index.htm

Cisco AS5400XM Universal Gateways

The Cisco AS54000XM universal gateway is a one rack unit (1RU) universal gateway providing best of class voice, fax, and remote access services at densities up to CT3. The Cisco AS5400XM universal gateway has seven feature card slots and two 10/100/1000 Ethernet LAN ports.

For more information about the AS5400XM universal gateway, see the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/as54xm/index.htm

Cisco Communication Media Module Voice Features

Cisco IOS Release 12.3(14)T introduces and supports the Catalyst 6500 Series and Cisco 7600 Series Communication Media Module with SNMP, MLPP, MCID, HW-MTP with RFC2833, enhance QSIG, and native T.l38 fax relay.

Cisco Small Business 100 Series Routers

Cisco IOS Release 12.3(14)T introduces and supports the Cisco Small Business 100 Series Routers.

Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card

For detailed information about the Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis2600/hw_inst/wic_inst/wic_doc/wanmdm.htm

EtherSwitch Service Modules

Cisco IOS Release 12.3(14)T provides support for four new EtherSwitch Service Network Modules for:

Cisco 2691 routers

Cisco 2811 routers

Cisco 2821 routers

Cisco 2851 routers

Cisco 3700 Series routers

Cisco 3800 Series routers.

The new Cisco EtherSwitch service modules, greatly expand the capabilities of integrated switching within Cisco routers by providing support for new features such as IEEE 802.3af Power over Ethernet (PoE), local Layer 3 switching, Cisco Network Administrator and Cisco Emergency Responder, and Cisco StackWise interfaces (available on NME-XD-24ES-1S-P only), as well as software feature parity with Cisco Catalyst 3750 Series switches. Additionally, the new Cisco EtherSwitch service modules are the first modules that can take full advantage of the increased performance capabilities and new form factors of the enhanced network module slot on Cisco Integrated Service Routers.

The following Cisco EtherSwitch Network Modules are supported in IOS Release 12.3(14)T:

NME-16ES-1G-P - One 16-port 10/100 Cisco EtherSwitch service module w/802.3af, 1 10/100/1000 port, and IP Base

NME-X-23ES-1G-P - One 23-port 10/100 Cisco EtherSwitch service module w/802.3af, 1 10/100/1000 port w/ 802.3af, and IP Base

NME-XD-24ES-1S-P - One 24-port 10/100 Cisco EtherSwitch service module w/802.3af, 1 SFP, Cisco StackWise connectors, and IP Base

NME-XD-48ES-2S-P - One 48-port 10/100 Cisco EtherSwitch service module w/ 802.3af, 2 SFPs, and IP Base

Satellite Network Module (NM-1VSAT-GILAT)

For detailed information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/gtstltnm.html

Serial HWICs

Cisco IOS Release 12.3(14)T supports five new serial and async High-speed WAN Interface Cards (HWICs). Serial HWICs provide highly flexible connections for Cisco 1800, Cisco 2800, and Cisco 3800 Integrated Services routers. These HWICs allow customers to easily enable applications such as WAN aggregation, legacy protocol transport, console server, and dial access server. Customers can mix and match HWICs to tailor cost-effective solutions for common networking problems such as remote network management, external dial modem access, low density WAN aggregation, legacy protocol transport and high port density support.

There are five serial and async HWICs:

1. HWIC-4T—Four high-speed serial ports

2. HWIC-4A/S—Four low-speed sync/async serial ports

3. HWIC-8A/S-232—Eight low-speed sync/async serial ports, EIA-232 only

4. HWIC-8A—Eight async EIA-232 serial ports

5. HWIC-16A—Sixteen async EIA-232 serial ports

VPN Acceleration Module 2+ (VAM2+)

VPN Acceleration Module 2+ (VAM2+) will be supported with IPSec Stateful Failover for the Cisco 7200 and Cisco 7301 routers.

New Software Features Supported in Cisco IOS Release 12.3(14)T

This section describes new and changed features in Cisco IOS Release 12.3(14)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(14)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

Administrative Secure Device Provisioning Introducer

ARP-Auto Logoff

BGP Support for Fast Peering Session Deactivation

BGP Support for IP Prefix Import from Global Table into a VRF Table

BGP Support for Next-Hop Address Tracking

CEF Support for NAT-PT

Circuit Emulation over IP (CEMoIP)

Cisco 7200 Series & Cisco 7301 Routers - Enhanced MIB Support

Cisco Communication Media Module Voice Features

Cisco Easy VPN Remote

Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card

Configuration Change Notification and Logging - EAL4+ Certification Enhancements

Demilitarized Zone (DMZ) Port

DHCP Enhancements for Edge-Session Management

DHCP—Subscriber Identifier Suboption of Option82

DHCP ODAP Server Support

DHCP Relay— MPLS VPN Support

DHCPv6 Predix Delegation via AAA

DID Support on VIC-4FXS/DID

Dynamic DNS Support for Cisco IOS

EIGRP MPLS VPN PE-CE Site of Origin (SoO)

EIGRP Prefix Limit Support

EIGRP SNMP Support

E-mail Inspection Engine

Embedded Event Manager 2.1

Embedded Resource Manager (ERM)

Enhanced Conferencing and Transcoding for Voice Gateway Routers

EtherSwitch Service Modules

Exclusive Configuration Change Access

Extended Prepaid Tariff Switch with SSG

FHRP—VRRP Enhancements

FXO Expansion Module for NM-HDA-4FXS

Granular Protocol Inspection

Hookflash and DTMF Relay Transfer

Hot Standby MAC Address

HTTP Client API for TCL IVR

HTTP Inspection Engine

IGMPv3 Host Stack

Implementing RIP for IPv6

Inspection of Router-Generated Traffic

Integrated Routing and Bridging (IRB) Support for the Cisco MGX-RPM-XF-512

Intrusion Prevention System (IPS) - Signature Enhancements

IOS Embedded Event Manager 2.1

IP Side Answer Tone Detection for Echo Canceller Control

IP SLAs Sub-millisecond Accuracy Improvements

IP SLA - VoIP Call Setup (Post Dial Delay) Monitoring

IP SLA - VoIP Gatekeeper Registration Delay Monitoring

IPSec Anti-Replay Window: Expanding and Disabling

IPSec Preferred Peer

IPSec Virtual Tunnel Interface

IPv6 BSR Bi-Directional Support

L2TPv3: Layer 2 Tunnel Protocol Version 3

Land Mobile Radio (LMR) over IP

Local AAA Server

Login Password Retry Lockout

MAC Address Based Authorization with SSG

Malicious Caller Identification Invocation Support for Enterprise Networks

MCID for Cisco IOS Voice Gateways

Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode

MIB Enhancements for H.323, SIP, and MGCP

MLPP for Analog and BRI Endpoints on Cisco IOS Voice Gateways

MLPP for Cisco IOS Voice Gateways

Mobile IP - Mobile IPv6 Home Agent

Mobile IP - Mobile Router DHCP Support for Dynamic CCoA and Foreign Agent Processing

Multiprotocol Label Switching (MPLS)

MPLS—Multilink PPP Support

MPLS DiffServ-Aware Traffic Engineering (DS-TE)

MPLS Enhancements to Interfaces MIB

MPLS LDP Autoconfiguration

MPLS LDP Graceful Restart

MPLS LDP Inbound Label Binding Filtering

MPLS LDP Session Protection

MPLS LDP-IGP Synchronization

MPLS Quality of Service (QoS)

MPLS QoS—DiffServ Tunneling Modes

MPLS Traffic Engineering (TE)

MPLS Virtual Private Networks

MPLS VPN—Carrier Supporting Carrier—IPv4 BGP Label Distribution

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

MPLS VPN Half-Duplex VRF (HDVRF) Support

MPLS VPN—Inter-AS—IPv4 BGP Label Distribution

MPLS VPN—MIB Notifications

MPLS VPN—MIB Support

MPLS VPN Support for EIGRP Between Provider Edge and Customer Edge

MPLS VPN—VRF Selection Using Policy Based Routing

Multi-VRF CE (VRF-lite) Updated Performance

Multicast VPN MIB

Multi-cast VPN

NAT Integration with MPLS VPNs (VRF-NAT)

NAT Routemaps Outside-to-Inside Support

NAT Virtual Interface (NVI)

NetFlow Layer 2 and Security Monitoring Exports

No Service Password-Recovery

OER Support for Cost-Based Optimization and Traceroute Reporting

Option to Disable Hardware Crypto Engine Failover to Software Crypto Engine

OSPF Sham-Link MIB Support

OSPF Sham-Link Support for MPLS VPN

Outbound Control Packet Decoding Implemented for VPDN Debug Output Using the L2TP Protocol

Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways

PA-POS-1OC3: 1-port Packet over SONET OC3c/STM1 Port Adapter

Per Interface mroute State Limit

Per-VRF AAA

Persistent Self-Signed Certificates

Policy Based Routing: Recursive Next Hop

QoS Bandwidth Estimation

QSIG Supplementary Features for Cisco IOS Voice Gateways

RADIUS Attribute 104 - Routemap Display Extension

RADIUS Attribute 5 (NAS-Port) Format Specified on a Per-Server Group Level

Reverse Route Injection

RSVP Refresh Reduction and Reliable Messaging

SafeNet IPSec VPN Client Support

Second-Generation 1- and 2-Port T1/E1 Multiflex Trunk Voice/WAN Interface Cards

Secure Device Provisioning Certificate-Based Authorization

Secure SRST

Selective Enabling of Applications Using an HTTP or Secure HTTP Server

SHDSL - Auto Detection of 2-Wire Versus 4-Wire Line Mode

SNA Switching Services Enterprise Extender for IP Version 6

SNMP over IPv6 Support

SSG Aware On-Demand IP Address Renewal

SSG Support for Subnet Based Authentication

Subordinate Certificate Server

System Logging - EAL4 Certification Enhancements

T.38 Fax Relay on the Cisco Catalyst 6000 and Cisco 7600 Communication Media Module

T.38 Fax Statistics

T1/E1 Mode for SHDSL

Transient Memory Management

USB Storage

VoIP Alternate Path Fallback SNMP Trap

VRF Aware Cisco IOS Firewall

VRF-Aware IPSec

VRF-Aware MPLS Static Labels

Warm Reload

WebVPN

WCCP Enhancements

X.25 Station Type for ISDN D-Channel Interface

Administrative Secure Device Provisioning Introducer

This feature was introduced in Cisco IOS Release 12.3(8)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtadintr.htm

ARP-Auto Logoff

This feature was introduced in Cisco IOS Release 12.3(8)XX. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xx8/gtarpal.htm

BGP Support for Fast Peering Session Deactivation

This feature was introduced in Cisco IOS Release 12.0(29)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_bsfda.htm

BGP Support for IP Prefix Import from Global Table into a VRF Table

This feature was introduced in Cisco IOS Release 12.0(29)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_bgivt.htm

BGP Support for Next-Hop Address Tracking

This feature was introduced in Cisco IOS Release 12.0(29)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_bnht.htm

CEF Support for NAT-PT

This feature adds support for Cisco Express Forwarding (CEF) switching on Network Address Translation-Protocol Translation (NAT-PT) interfaces. Use the ip cef and ipv6 cef commands to configure the feature.

Circuit Emulation over IP (CEMoIP)

The Circuit Emulation over IP (CEMoIP) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

Cisco 7200 Series & Cisco 7301 Routers - Enhanced MIB Support

This feature greatly expands and updates the support for SNMP MIBs for Cisco 7200 Series routers and Cisco 7301 routers. Improved inventory, asset, and fault management capabilities are provided by this feature, with a focus on consistent manageability of Cisco network elements.

The 7200 MIB Improvement feature greatly expands and updates the support for SNMP MIBs for Cisco 7200 Series routers. This feature provides:

Cisco 7200 series additional port adapter support.

Support for DS1 and DS3 MIBs is implemented as defined by RFC2495 and RFC2496, respectively.

A standards-based technology (SNMP) for monitoring faults and performance on the router

Support for all SNMP versions (SNMPv1, SNMPv2c, and SNMPv3)

Notification of faults, alarms, and conditions that might affect services

For detailed information about MIB support on the Cisco 7200 Series, see the Cisco 7200 Series Router MIB Specifications Guide, available at:

http://www.cisco.com/en/US/products/hw/routers/ps341/prod_technical_reference_list.html

The 7301 MIB Support feature greatly expands and updates the support for Cisco 7301 routers as this feature:

Provides core enhancements to network management capabilities.

Supports Cisco 7301 port adapter.

Manages and monitors Cisco 7301 resources through an SNMP-based network management system (NMS).

Reduces the amount of time and system resources required to perform functions such as inventory management and bulk data transfers

For detailed information about MIB support on Cisco 7301 routers, see the Cisco 7301 Router MIB Specifications Guide, available at:

http://www.cisco.com/en/US/products/hw/routers/ps352/prod_technical_reference_list.html

Cisco Communication Media Module Voice Features

This feature brings additional features support for Catalyst 6500 Series and Cisco 7600 Series Communication Media Module with SNMP, MLPP, MCID, HW-MTP with RFC2833, enhance QSIG, and native T.l38 fax relay.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xy8/gtcmm.htm

Cisco Easy VPN Remote

This feature was introduced in Cisco IOS Release 12.3(11)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t7/ftezvpnr.htm

Cisco WIC-1AM-V2 and WIC-2AM-V2 Analog Modem WAN Interface Card

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt12pwi8.htm

Configuration Change Notification and Logging - EAL4+ Certification Enhancements


Note Official EAL4+ certification is not claimed by Cisco. This feature is part of current and planned enhancements which may qualify Cisco IOS Software for future certification.


This feature enhances the configuration change logging process in Cisco IOS software. The system logging process can now provide a log of configuration changes, and commands are provided to configure, view, and clear configuration logs. This feature is disabled by default.

For detailed information about this feature, see the "Configuration Change Notification and Logging" document at:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gtconlog.htm

Demilitarized Zone (DMZ) Port

This feature was introduced in Cisco IOS Release 12.3(7)XR1. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xr7/dmz_port.htm

DHCP Enhancements for Edge-Session Management

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_iedge.htm

DHCP—Subscriber Identifier Suboption of Option82

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_opt82.htm

DHCP ODAP Server Support

The DHCP ODAP Server Support feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

DHCP Relay— MPLS VPN Support

The DHCP Relay— MPLS VPN Support feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

DHCPv6 Predix Delegation via AAA

For detailed information about this feature, see Cisco IOS IPv6 Configuration Library--Implementing ADSL and Deploying Dial Access for IPv6 located at:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_dial6.htm

DID Support on VIC-4FXS/DID

Cisco IOS Release 12.3(14)T adds support for Direct Inward Dial (DID) configuration on the 4-port FXS/DID (VIC-4FXS/DID) interface card installed in the Cisco 2600XM series, Cisco 2691, Cisco 2800 series, Cisco 3600 series, Cisco 3700 series, Cisco 3800 series routers, and Cisco IAD 2430 series integrated access devices.

For information about configuring the VIC-4FXS/DID interface card, see the Cisco IOS Voice Configuration Library for Release 12.3 located at:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcg/vcl.htm

For information about installing the VIC-4FXS/DID interface card, see the Cisco Interface Cards Hardware Installation Guide located at:

http://www.cisco.com/en/US/products/hw/modules/ps2641/products_installation_guide_book09186a0080185325.html

Dynamic DNS Support for Cisco IOS

This feature was introduced in Cisco IOS Release 12.3(8)YA. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123y/123ya8/gt_ddns.htm

EIGRP MPLS VPN PE-CE Site of Origin (SoO)

The EIGRP MPLS VPN PE-CE Site of Origin (SoO) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

EIGRP Prefix Limit Support

This feature was introduced in Cisco IOS Release 12.0(29)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_epls.htm

EIGRP SNMP Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_epls.htm

E-mail Inspection Engine

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_email.htm

Embedded Event Manager 2.1

This feature was introduced in Cisco IOS Release 12.0(26)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gteem21.htm

Embedded Resource Manager (ERM)

The Embedded Resource Manager (ERM) feature allows you to impose and monitor an upper limit of usage for resources such as buffer, memory, and CPU. This feature monitors system resource usage to better understand scalability needs by allowing you to configure threshold values for the CPU, buffer and memory resource owners. This check helps prevent catastrophic system failures due to high levels of resource depletion. For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_rmimg.htm

Enhanced Conferencing and Transcoding for Voice Gateway Routers

The Enhanced Conferencing and Transcoding for Voice Gateway Routers feature provides enhanced multiservice support for Cisco routers in a Cisco CallManager network. This is accomplished by enabling audio conference and transcode functions in access routers. This single-package solution simplifies deployments and eases administration. Tangible cost savings are realized with the location of conference resources in the branch to reduce WAN utilization. Costs are further reduced with the use of transcode services to reduce bandwidth needs. This feature requires the PVDM2 and is also supported on NM-HD.


Note This feature requires Cisco CallManager 4.0 or later release.


For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf2.htm

EtherSwitch Service Modules

Cisco EtherSwitch service modules, greatly expand the capabilities of integrated switching within Cisco routers by providing support for new features such as IEEE 802.3af Power over Ethernet (PoE), local Layer 3 switching, Cisco Network Administrator and Cisco Emergency Responder, and Cisco StackWiseTM interfaces (available on NME-XD-24ES-1S-P only) as well as software feature parity with Cisco Catalyst® 3750 Series switches. Additionally, the new Cisco EtherSwitch service modules are the first modules that can take full advantage of the increased performance capabilities and new form factors of the enhanced network module slot on Cisco Integrated Services Routers.

Exclusive Configuration Change Access

Provides a configuration locking mechanism for exclusive change access to the configuration for the duration of the lock. Two new commands are provided to enable or disable the configuration lock; configuration mode exclusive and configure terminal lock.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_exclu.htm

Extended Prepaid Tariff Switch with SSG

The Extended Prepaid Tariff Switch for SSG feature is used to measure the usage of specific services at various times, even when the monetary value of the volume quota does not change at the time of tariff switching. In such a scenario, the remaining amount of a user's pre-tariff-switch quota continues as post-tariff-switch quota. Information can be collected about how much quota was used before a particular time and how much was used after, providing a usage profile of specific services at various times.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/sgbacctg.htm

FHRP—VRRP Enhancements

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtvrrpen.htm

FXO Expansion Module for NM-HDA-4FXS

The EM2-HDA-4FXO expansion module for the high-density analog telephony network module (NM-HDA) supports complex impedance to allow an operating range greater than 8000 ft (2438 m).

For detailed information about configuring input impedance, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122tcr/122tvr/index.htm

For detailed information about the EM2-HDA-4FXO expansion module and the NM-HDA network module, see the following document:

http://www.cisco.com/en/US/products/hw/modules/ps2797/products_module_installation_guide_chapter09186a008007c8ce.html

Granular Protocol Inspection

The Granular Protocol Inspection feature adds flexibility to the Cisco IOS Firewall by allowing it to perform a higher degree of inspection of TCP and User Data Protocol (UDP) traffic for most RFC 1700 application types.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtgpinsp.htm

Hookflash and DTMF Relay Transfer

Hookflash and DTMF Relay Transfer is a cost-effective way to transfer customer calls from first-level technical support to other agent groups for second-level support. The circuit between the transferrer and the transferee is released after the transferrer initiates the transfer and the remote switch connects the transferee and the transfer target.

Hot Standby MAC Address

The show extended channel hsma command is added to this feature.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123_1/ft_hsma.htm

HTTP Client API for TCL IVR

The HTTP Client API for TCL IVR feature enables TCL IVR applications to retrieve data from or post data to an external HTTP server. Also introduces a new command-line-interface structure for configuring voice applications and support for additional TCL 8.3.4 commands.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/vapprest.htm

HTTP Inspection Engine

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_fwapc.htm

IGMPv3 Host Stack

The IGMPv3 Host Stack feature enables routers and switches to function as multicast network endpoints or hosts. The feature adds INCLUDE mode capability to the Internet Group Management Protocol (IGMP) version 3 host stack for Source Specific Multicast (SSM) groups.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtigmpv3.htm

Implementing RIP for IPv6

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_ripv6.htm

Inspection of Router-Generated Traffic

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_insrg.htm

Integrated Routing and Bridging (IRB) Support for the Cisco MGX-RPM-XF-512

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_106/gt_irb.htm

Intrusion Prevention System (IPS) - Signature Enhancements

The IPS Signature Enhancements feature expands the number and type of virus and attack signatures currently available in the Intrusion Detection System/Intrusion Prevention System (IDS/IPS) Sensor database. These signatures are specific to TCP, UDP, and ICMP intrusions.

For detailed information about this feature, see the Cisco IOS Intrusion Prevention System (IPS) document at:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_fwids.htm

IOS Embedded Event Manager 2.1

This feature was introduced in Cisco IOS Release 12.0(26)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gteem21.htm

IP Side Answer Tone Detection for Echo Canceller Control

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/as5850/sw_conf/echocan.htm

IP SLAs Sub-millisecond Accuracy Improvements

This feature enhances the granularity and accuracy of IP SLA measurements. For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/lib/netman/ipsla/index.htm

IP SLA - VoIP Call Setup (Post Dial Delay) Monitoring

The IP SLA VoIP Call Setup Monitoring operation measures the call setup time using H.323/SIP signaling protocol over IP networks. The typical setup time measured is from the setup/INVITE message sent to alert/ringing message received.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/lib/netman/ipsla/index.htm

IP SLA - VoIP Gatekeeper Registration Delay Monitoring

The IP SLA Gatekeeper Registration Delay Monitoring operation measures the light weight registration time from H.323 Gateways to Gatekeepers.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/lib/netman/ipsla/index.htm

IPSec Anti-Replay Window: Expanding and Disabling

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/gt_iarwe.htm

IPSec Preferred Peer

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_ipspp.htm

IPSec Virtual Tunnel Interface

The IPSec Virtual Tunnel Interface feature:

Provides a routable interface for terminating IPSec tunnels.

Provides ease of configuration.

Provides facility of routing.

Supports multicast.

Supports aspects like Network Management, HA, and Load Balancing.

IPv6 BSR Bi-Directional Support

This feature was introduced in Cisco IOS Release 12.3(2)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_mcast.htm

L2TPv3: Layer 2 Tunnel Protocol Version 3

The L2TPv3: Layer 2 Tunnel Protocol Version 3 feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

Land Mobile Radio (LMR) over IP

This feature was introduced in Cisco IOS Release 12.3(4)XD. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/lmrip/gtlmrip.htm

Local AAA Server

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/gt_laas.htm

Login Password Retry Lockout

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/g_cilprl.htm

MAC Address Based Authorization with SSG

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/sgbmaca.htm

Malicious Caller Identification Invocation Support for Enterprise Networks

The Malicious Caller Identification (MCID) Invocation Support for Enterprise Networks feature extends support for MCID service in the public service telephone network (PSTN) to the Cisco 2801.

This feature was introduced in Cisco IOS Release 12.2(15)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the Malicious Caller Identification Invocation Support for Enterprise Networks document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t15/ftmcid.htm

MCID for Cisco IOS Voice Gateways

The MCID for Cisco IOS Voice Gateways feature extends support for the Malicious Call Identification (MCID) supplementary service to the Cisco 2801. This feature enables Cisco CallManager to identify the source of malicious calls.

This feature was introduced in Cisco IOS Release 12.3(11)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/int_mcid.htm

Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode

The Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode feature delivers media and signaling authentication and encryption on the Cisco 2600XM series, Cisco 2691, Cisco 3660 series, Cisco 3700 series, and Cisco VG224. This feature enables secure gateway-to-gateway and IP-phone-to-gateway calls, and interoperates with Cisco 7970 IP phones.

For detailed information about this feature, see the Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtsecure.htm

MIB Enhancements for H.323, SIP, and MGCP

The MIB Enhancements for H.323, SIP, and MGCP feature provides SNMP MIB enhancements on the following platforms:

Cisco AS5350 universal gateways

Cisco AS5400 series universal gateways

Cisco AS5850 universal gateways

The MIBs contain objects that represent active H.323, SIP, and MGCP calls and also include call details. For definitions of the H.323, SIP, and MGCP MIB objects, see the following MIBs:

CISCO-H225-MIB

CISCO-MEDIA-GATEWAY-MIB

CISCO-MGC-MIB

CISCO-SIP-CALLS-MIB

CISCO-TC

CISCO-XGCP-CAPABILITY

CISCO-XGCP-EXT-CAPABILITY

CISCO-XGCP-EXT-MIB

CISCO-XGCP-MIB

To locate and download MIBs, use Cisco MIB Locator found at the following URL:

http://www.cisco.com/go/mibs

MLPP for Analog and BRI Endpoints on Cisco IOS Voice Gateways

Provides the capability for Cisco IOS voice gateways to present analog and basic rate interface (BRI) phones to be controlled by the Cisco CallManager as though they were Cisco IP phones, enabling the following:

Line-side support for the Multilevel Precedence and Preemption (MLPP) feature

Cisco CallManager registration of analog and Basic Rate Interface (BRI) endpoints

Cisco CallManager endpoint auto configuration support

Modem pass-through support

Cisco Survivable Remote Site Telephony (SRST) support

For detailed information about this feature, see the MLPP for Analog and BRI Endpoints on Cisco IOS Voice Gateways document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtstcapp.htm

MLPP for Cisco IOS Voice Gateways

The MLPP for Cisco IOS Voice Gateways feature extends support for Multilevel Precedence and Preemption (MLPP) service to the Cisco 2801. This service allows authorized users to preempt lower-priority voice calls using Cisco CallManager.

This feature was introduced in Cisco IOS Release 12.3(4)XH. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the Configuring MGCP Gateway Support for Cisco CallManager chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf1.htm

Mobile IP - Mobile IPv6 Home Agent

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_bconn.htm

Mobile IP - Mobile Router DHCP Support for Dynamic CCoA and Foreign Agent Processing

The Mobile Router DHCP Support for Dynamic Collocated Care-of Address (DCCoA) and Foreign Agent (FA) Processing feature adds support for mobile router roaming on Ethernet interfaces that acquire an IP address dynamically via the Dynamic Host Configuration Protocol (DHCP). The interface can register using this acquired IP address as a DCCoA or register using a CoA acquired from a foreign agent. This behavior is true for all platforms that support Mobile IP beginning with Cisco IOS Release 12.3(14)T.

This feature adds support for FA processing of advertisements and registrations on DHCP roaming interfaces.

A Simple Network Management Protocol (SNMP) signaling capability is also added to support this feature on the Cisco 3200 Series Mobile Access Router with a Wireless Mobile Interface Card (WMIC). The WMIC uses SNMP trap messages to signal the mobile router that the Layer 2 wireless local-area network (WLAN) is either up or down.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtdhcpm.htm

Multiprotocol Label Switching (MPLS)

The Multiprotocol Label Switching (MPLS) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS—Multilink PPP Support

The MPLS—Multilink PPP Support feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtmpmlp.htm

MPLS DiffServ-Aware Traffic Engineering (DS-TE)

The MPLS DiffServ-Aware Traffic Engineering (DS-TE) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS Enhancements to Interfaces MIB

The MPLS Enhancements to Interfaces MIB feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS LDP Autoconfiguration

The MPLS LDP Autoconfiguration feature was introduced in Cisco IOS Release 12.0(30)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s30/fsldpaut.htm

MPLS LDP Graceful Restart

The MPLS LDP Graceful Restart feature was introduced in Cisco IOS Release 12.0(29)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s29/fsgr29s.htm

MPLS LDP Inbound Label Binding Filtering

This feature was introduced in Cisco IOS Release 12.0(26)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http:///www.cisco.com/univercd/cc/td/doc/product/software/ios122s/122snwft/release/122s25/fsinbd4.htm

MPLS LDP Session Protection

This feature was introduced in Cisco IOS Release 12.0(30)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s26/fsinbnd.htm

MPLS LDP-IGP Synchronization

The MPLS LDP-IGP Synchronization feature was introduced in Cisco IOS Release 12.0(30)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s30/fssespro.htm

MPLS Quality of Service (QoS)

The MPLS Quality of Service (QoS) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS QoS—DiffServ Tunneling Modes

The MPLS QoS—DiffServ Tunneling Modes feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS Traffic Engineering (TE)

The MPLS Traffic Engineering (TE) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS Virtual Private Networks

The MPLS Virtual Private Networks (VPNs) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN—Carrier Supporting Carrier—IPv4 BGP Label Distribution

The MPLS VPN—Carrier Supporting Carrier—IPv4 BGP Label Distribution feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

The MPLS VPN—Explicit Null Label Support with IPv4 BGP Label Session feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN Half-Duplex VRF (HDVRF) Support

The MPLS VPN Half-Duplex (HDVRF) Support feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN—Inter-AS—IPv4 BGP Label Distribution

The MPLS VPN—Inter-AS—IPv4 BGP Label Distribution feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN—MIB Notifications

The MPLS VPN—MIB Notifications feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN—MIB Support

The MPLS VPN—MIB Support feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN Support for EIGRP Between Provider Edge and Customer Edge

The MPLS VPN support for EIGRP between Provider Edge and Customer Edge feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

MPLS VPN—VRF Selection Using Policy Based Routing

The MPLS VPN VRF Selection Using Policy Based Routing feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt_pbrsv.htm

Multi-VRF CE (VRF-lite) Updated Performance

The Multi-VRF (VRF-lite) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

Multicast VPN MIB

The Multicast VPN MIB feature was introduced in Cisco IOS Release 12.0(29)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s29/mcvpnmib.htm

Multi-cast VPN

The Multi-cast VPN feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

NAT Integration with MPLS VPNs (VRF-NAT)

The NAT Integration with MPLS VPNs (VRF-NAT) feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

NAT Routemaps Outside-to-Inside Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtnato2n.htm

NAT Virtual Interface (NVI)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtnatvi.htm

NetFlow Layer 2 and Security Monitoring Exports

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/nflwsec1.htm

No Service Password-Recovery

The No Service Password-Recovery feature was introduced in Cisco IOS Release 12.3(8)YA. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123y/123ya8/ftnsvpwd.htm

OER Support for Cost-Based Optimization and Traceroute Reporting

The OER Support for Cost-Based Optimization and Traceroute Reporting feature provides outbound traffic optimization based on financial link cost (i.e., fixed cost versus tier based cost). This feature also adds support for traceroute reporting.

Option to Disable Hardware Crypto Engine Failover to Software Crypto Engine

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_dhcef.htm

OSPF Sham-Link MIB Support

The OSPF Sham-Link MIB Support feature was introduced in Cisco IOS Release 12.0(30)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s30/ospfslms.htm

OSPF Sham-Link Support for MPLS VPN

The OSPF Sham-Link Support for MPLS VPN feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2691 Multiservice routers

Cisco 3725 Modular Access routers

Cisco 3745 Modular Access routers

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

For more information about the OSPF Sham-Link Support for MPLS VPN feature, see the documentation at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/ospfshmk.htm

Outbound Control Packet Decoding Implemented for VPDN Debug Output Using the L2TP Protocol

Before Cisco IOS Release 12.3(14)T, only incoming Layer 2 Transport Protocol (L2TP control packets were decoded and displayed in the output of virtual private dialup network (VPDN) debug command data with the debug vpdn l2x-packets EXEC command enabled. To create L2TP tunnels and sessions, the software sends control packets to the peer. If you had wanted to troubleshoot the sessions effectively during the control-channel establishment phase of those sessions, it was necessary to review debug data from both outgoing and incoming control packets, on both the LAC and LNS. Also, for outgoing L2TP control packets, the hexadecimal packet dump was displayed on the screen only, which made it difficult to troubleshoot interoperability issues that required packet analyzers, or to use data from peer or vendor devices to analyze the outgoing L2TP control packets.

To be consistent with other protocol-level debug output in the Cisco IOS software, L2TP control packet debug command output needed to show bidirectional protocol packet decode data, rather than just the incoming only data that had been displayed.

Cisco IOS Release 12.3(14)T implements the decoding of outgoing L2TP hexadecimal control messages, which includes the L2TP headers and the attribute-value pairs that are transacted in each outgoing control message. VPDN debug data can also be directed into a file so that packet analyzers can be used on the data.

To use this feature, you must enable the debug vpdn l2x-packets command on the router in which the decoded outgoing control packets debug data needs to be shown.


Note The debug vpdn l2x-packets command can result in a large number of debug messages and should be used only on a debug chassis with a single active session.


Following is sample decoded debug output, followed by a list of the attribute-value pairs that are supported in the enhanced debug command output:

Router#
3d22h: %LINK-3-UPDOWN: Interface Serial3/0, changed state to up
3d22h:  Tnl 29029 L2TP: O SCCRQ 
3d22h:  Tnl 29029 L2TP: Parse AVP 0, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Parse SCCRQ
3d22h:  Tnl 29029 L2TP: Parse  AVP 2, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Protocol Ver 256
3d22h:  Tnl 29029 L2TP: Parse  AVP 6, len 8, flag 0x0 
3d22h:  Tnl 29029 L2TP: Firmware Ver 0x1130
3d22h:  Tnl 29029 L2TP: Parse  AVP 7, len 16, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Hostname LAC-tunnel
3d22h:  Tnl 29029 L2TP: Parse  AVP 8, len 25, flag 0x0 
3d22h:  Tnl 29029 L2TP: Vendor Name Cisco Systems, Inc.
3d22h:  Tnl 29029 L2TP: Parse  AVP 10, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Rx Window Size 20050
3d22h:  Tnl 29029 L2TP: Parse  AVP 11, len 22, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Chlng  
         B1 E9 3B 84 72 66 19 B1 C5 46 8F E7 31 A8 3B BC
3d22h:  Tnl 29029 L2TP: Parse  AVP 9, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Assigned Tunnel ID 29029
3d22h:  Tnl 29029 L2TP: Parse  AVP 3, len 10, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Framing Cap 0x0
3d22h:  Tnl 29029 L2TP: Parse  AVP 4, len 10, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Bearer Cap 0x0
3d22h:  Tnl 29029 L2TP: Parse Cisco AVP 110, len 6, flag 0x0 
3d22h:  Tnl 29029 L2TP: PPPoE Relay Forward Capable
3d22h:  Tnl 29029 L2TP: O SCCRQ, flg TLS, ver 2, len 141, tnl 0, ns 0, nr 0
         C8 02 00 8D 00 00 00 00 00 00 00 00 80 08 00 00
         C8 02 00 8D 00 00 00 00 00 00 00 00 80 08 00 00
         00 00 00 01 80 08 00 00 00 02 01 00 00 08 00 00
         00 06 11 30 80 10 00 00 00 07 4C 41 43 2D 74 75
         6E 6E 65 6C 00 19 00 00 00 08 43 69 73 63 6F 20
         53 79 73 74 65 6D 73 ...
3d22h:  Tnl 29029 L2TP: Parse  AVP 0, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Parse SCCRP
3d22h:  Tnl 29029 L2TP: Parse  AVP 2, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Protocol Ver 256
3d22h:  Tnl 29029 L2TP: Parse  AVP 6, len 8, flag 0x0 
3d22h:  Tnl 29029 L2TP: Firmware Ver 0x1120
3d22h:  Tnl 29029 L2TP: Parse  AVP 7, len 16, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Hostname LNS-tunnel
3d22h:  Tnl 29029 L2TP: Parse  AVP 8, len 25, flag 0x0 
3d22h:  Tnl 29029 L2TP: Vendor Name Cisco Systems, Inc.
3d22h:  Tnl 29029 L2TP: Parse  AVP 10, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Rx Window Size 20050
3d22h:  Tnl 29029 L2TP: Parse  AVP 11, len 22, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Chlng  
         7F 8B 30 8C 1D CD 44 49 CA 71 C3 6F 45 C2 89 B1
3d22h:  Tnl 29029 L2TP: Parse  AVP 13, len 22, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Chlng Resp  
         C3 A8 1B 39 6B 42 82 A5 AC A1 11 36 94 97 A2 1D
3d22h:  Tnl 29029 L2TP: Parse  AVP 9, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Assigned Tunnel ID 18566
3d22h:  Tnl 29029 L2TP: Parse  AVP 3, len 10, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Framing Cap 0x0
3d22h:  Tnl 29029 L2TP: Parse  AVP 4, len 10, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Bearer Cap 0x0
3d22h:  Tnl 29029 L2TP: Parse Cisco AVP 110, len 6, flag 0x0 
3d22h:  Tnl 29029 L2TP: PPPoE Relay Forward Capable
3d22h:  Tnl 29029 L2TP: No missing AVPs in SCCRP
3d22h:  Tnl 29029 L2TP: I SCCRP, flg TLS, ver 2, len 163, tnl 29029, ns 0, nr 1
contiguous pak, size 163
         C8 02 00 A3 71 65 00 00 00 00 00 01 80 08 00 00
         00 00 00 02 80 08 00 00 00 02 01 00 00 08 00 00
         00 06 11 20 80 10 00 00 00 07 4C 4E 53 2D 74 75
         6E 6E 65 6C 00 19 00 00 00 08 43 69 73 63 6F 20
         53 79 73 74 65 6D 73 2C ...
3d22h:  Tnl 29029 L2TP: I SCCRP from LNS-tunnel
3d22h:  Tnl 29029 L2TP: O SCCCN  to LNS-tunnel tnlid 18566
3d22h:  Tnl 29029 L2TP: Parse  AVP 0, len 8, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Parse SCCCN
3d22h:  Tnl 29029 L2TP: Parse  AVP 13, len 22, flag 0x8000 (M)
3d22h:  Tnl 29029 L2TP: Chlng Resp  
         3B 74 77 E8 DD 30 64 48 C2 63 42 D5 37 C3 B9 F2
3d22h:  Tnl 29029 L2TP: O SCCCN, flg TLS, ver 2, len 42, tnl 18566, ns 1, nr 1
         C8 02 00 2A 48 86 00 00 00 01 00 01 80 08 00 00
         00 00 00 03 80 16 00 00 00 0D 3B 74 77 E8 DD 30
         64 48 C2 63 42 D5 37 C3 B9 F2
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: O ICRQ to LNS-tunnel 18566/0
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 0, len 8, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse ICRQ
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 15, len 10, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Serial Number 1563200007
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 14, len 8, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Assigned Call ID 61
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 18, len 10, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Bearer Type 2
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse Cisco AVP 100, len 15, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Client NAS Port  
         53 65 72 69 61 6C 33 2F 30
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: O ICRQ, flg TLS, ver 2, len 63, tnl 18566, 
lsid 61, rsid 0, ns 2, nr 1
         C8 02 00 3F 48 86 00 00 00 02 00 01 80 08 00 00
         00 00 00 0A 80 0A 00 00 00 0F 5D 2C 8A 07 80 08
         00 00 00 0E 00 3D 80 0A 00 00 00 12 00 00 00 02
         00 0F 00 09 00 64 53 65 72 69 61 6C 33 2F 30
3d22h:  Tnl 29029 L2TP: I ZLB ctrl ack, flg TLS, ver 2, len 12, tnl 29029, ns 
1, nr 2
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 0, len 8, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse ICRP
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 14, len 8, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Assigned Call ID 9
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: No missing AVPs in ICRP
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: I ICRP, flg TLS, ver 2, len 28, tnl 29029, 
lsid 61, rsid 0, ns 1, nr 3
contiguous pak, size 28
         C8 02 00 1C 71 65 00 3D 00 01 00 03 80 08 00 00
         00 00 00 0B 80 08 00 00 00 0E 00 09
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: O ICCN to LNS-tunnel 18566/9
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 0, len 8, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse ICCN
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 24, len 10, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Connect Speed 1544000
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 19, len 10, flag 0x8000 (M)
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Framing Type 1
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 27, len 17, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Last Sent LCPREQ  
         03 05 C2 23 05 05 06 1D 9C 69 09
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 28, len 12, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Last Rx LCPREQ  
         05 06 1F 19 E3 07
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 31, len 22, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Proxy Auth Chal  
         FF 0D CB C7 E4 07 74 9F 43 0C 82 B5 17 69 4D 9E
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 32, len 8, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Proxy Auth ID 60
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 30, len 22, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Proxy Auth Name client@cisco.com
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 33, len 22, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Proxy Auth Resp  
         80 45 E2 C5 A7 D0 8C C1 0F 0A 14 F8 9E F7 21 F3
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Parse  AVP 29, len 8, flag 0x0 
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: Proxy Auth Type 2
3d22h: Se3/0 Tnl/Sn 29029/61 L2TP: O ICCN, flg TLS, ver 2, len 151, tnl 18566, 
lsid 61, rsid 9, ns 3, nr 2
         C8 02 00 97 48 86 00 09 00 03 00 02 80 08 00 00
         00 00 00 0C 80 0A 00 00 00 18 00 17 8F 40 80 0A
         00 00 00 13 00 00 00 01 00 11 00 00 00 1B 03 05
         C2 23 05 05 06 1D 9C 69 09 00 0C 00 00 00 1C 05
         06 1F 19 E3 07 00 16 ...
3d22h:  Tnl 29029 L2TP: I ZLB ctrl ack, flg TLS, ver 2, len 12, tnl 29029, ns 2, nr 4
3d22h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial3/0, changed state to up

List of Supported L2TP Attribute Values

L2TP_VENDOR_IETF:

L2TP_AVP_RESULT_CODE

L2TP_AVP_PROTOCOL_VERSION

L2TP_AVP_FRAMING_CAP

L2TP_AVP_BEARER_CAP

L2TP_AVP_TIE_BREAKER

L2TP_AVP_FIRMWARE_REV

L2TP_AVP_HOST_NAME

L2TP_AVP_VENDOR_NAME

L2TP_AVP_ASSIGNED_TUNNEL_ID

L2TP_AVP_REC_WINDOW_SIZE

L2TP_AVP_CHALLENGE

L2TP_AVP_Q931_CAUSE_CODE

L2TP_AVP_CHALLENGE_RESPONSE

L2TP_AVP_ASSIGNED_SESSION_ID

L2TP_AVP_CALL_SERIAL_NUM

L2TP_AVP_MINIMUM_BPS

L2TP_AVP_MAXIMUM_BPS

L2TP_AVP_BEARER_TYPE

L2TP_AVP_FRAMING_TYPE

L2TP_AVP_CALLED_NUMBER

L2TP_AVP_CALLING_NUMBER

L2TP_AVP_SUB_ADDRESS

L2TP_AVP_TX_CONNECT_SPEED

L2TP_AVP_PHYSICAL_CHANNEL_ID

L2TP_AVP_INITIAL_LCP_CONFREQ

L2TP_AVP_LAST_SENT_LCP_CONFREQ

L2TP_AVP_LAST_RECV_LCP_CONFREQ

L2TP_AVP_PROXY_AUTHEN_TYPE

L2TP_AVP_PROXY_AUTHEN_NAME

L2TP_AVP_PROXY_AUTHEN_CHALLENGE

L2TP_AVP_PROXY_AUTHEN_ID

L2TP_AVP_PROXY_AUTHEN_RESPONSE

L2TP_AVP_CIRCUIT_ERRORS

L2TP_AVP_ACCM

L2TP_AVP_RANDOM_VECTOR

L2TP_AVP_PRIVATE_GROUP_ID

L2TP_AVP_RX_CONNECT_SPEED

L2TP_AVP_SEQUENCING_REQUIRED

L2TP_AVP_IETF_PPP_DISC_CAUSE

SMI_CISCO_ENTERPRISE_CODE:

L2TP_AVP_ASSIGNED_CC_ID

L2TP_AVP_PW_CAP_LIST

L2TP_AVP_LOCAL_SESSION_ID

L2TP_AVP_REMOTE_SESSION_ID

L2TP_AVP_ASSIGNED_COOKIE

L2TP_AVP_END_IDENTIFIER

L2TP_AVP_PW_TYPE

L2TP_AVP_CIRCUIT_STATUS

L2TP_AVP_SESSION_TIE_BREAKER

L2TP_AVP_CISCO_DRAFT_AVP_VERSION

L2TP_AVP_CLIENT_NAS_PORT

L2TP_AVP_HOPCOUNT

L2TP_AVP_USERNAME

L2TP_AVP_ORIG_NAS_IP_ADDR

L2TP_AVP_CISCO_PPP_DISC_CAUSE

L2TP_AVP_VENDOR_ERROR_CODE

L2TP_AVP_FIXED_CHALLENGE_ID

L2TP_AVP_FIXED_CHALLENGE

L2TP_AVP_REDIRECT_CAPABLE

L2TP_AVP_REDIRECT_ID

L2TP_AVP_PPPOE_RLYFWD_CAPABLE

L2TP_AVP_PPPOE_RLYRSP_CAPABLE

L2TP_AVP_PPPOE_PAD

SMI_REDBACK_ENTERPRISE_CODE

L2TP_AVP_NAS_PORT_TYPE_LIST

Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways

The Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways feature extends support for DTMF-relay communication between SIP devices and non-SIP endpoints using Cisco CallManager to the Cisco 2801.

This feature was introduced in Cisco IOS Release 12.3(8)XY. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the Configuring Enhanced Conferencing and Transcoding for Voice Gateway Routers chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf2.htm

PA-POS-1OC3: 1-port Packet over SONET OC3c/STM1 Port Adapter

The 1-port Packet over SONET OC3c/STM1 Port Adapter feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the Cisco 7200, Cisco 7301, and Cisco 7500 platforms

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/core/7301/73pa/73-son/6514_1oc/index.htm

Per Interface mroute State Limit

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtmrtlim.htm

Per-VRF AAA

The Per-VRF AAA feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

Persistent Self-Signed Certificates

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtpsscer.htm

Policy Based Routing: Recursive Next Hop

The Policy Based Routing: Recursive Next Hop feature was introduced in Cisco IOS Release 12.0(28)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s28/12s_pbr.htm

QoS Bandwidth Estimation

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtcbandw.htm

QSIG Supplementary Features for Cisco IOS Voice Gateways

The QSIG Supplementary Features for Cisco IOS Voice Gateways feature extends support for Q Signaling (QSIG) over PRI backhaul interfaces on MGCP gateways to Cisco CallManager to the Cisco 2801.

For detailed information about this feature, see the Configuring MGCP PRI Backhaul and T1 CAS Support for Cisco CallManager chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf3.htm

RADIUS Attribute 104 - Routemap Display Extension

The RADIUS Attribute 104 - Routemap Display Extension feature was introduced in Cisco IOS Release 12.3(7)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt_ra104.htm

RADIUS Attribute 5 (NAS-Port) Format Specified on a Per-Server Group Level

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/ra5f.htm

Reverse Route Injection

The Reverse Route Injection feature was introduced in Cisco IOS Release 12.1(9)E. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t14/gt_rrie.htm

RSVP Refresh Reduction and Reliable Messaging

The RSVP Refresh Reduction and Reliable Messaging feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

SafeNet IPSec VPN Client Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/gt_scse.htm

Second-Generation 1- and 2-Port T1/E1 Multiflex Trunk Voice/WAN Interface Cards

The Second-Generation 1- and 2-Port T1/E1 Multiflex Trunk Voice/WAN Interface Cards feature enables T1/E1 multiflex voice/WAN interface cards to support enhanced voice and data applications in Cisco multiservice routers. This feature provides the following:

Flexible T1 and E1 support.

Drop-and-insert multiplexing capability on all versions.

Support for a dedicated hardware echo-cancellation module.

On 2-port cards, capability for each port to be clocked from an independent clock source.

This feature was introduced in Cisco IOS Release 12.3(13)T. For more information, see the Configuring Hardware Echo Cancellation chapter in the Voice Port Configuration Guide. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the Second-Generation 1- and 2-Port T1/E1 Multiflex Trunk Voice/WAN Interface Cards document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gthwecan.htm

Secure Device Provisioning Certificate-Based Authorization

The Secure Device Provisioning (SDP) Certificate-Based Authorization feature allows certificates issued by other authority (CA) servers to be used for SDP introductions. For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtcbauth.htm

Secure SRST

Secure CiscoIP phones that are located at remote sites and that are attached to gateway routers can communicate securely using the WAN with CiscoCallManager. But if the WAN link or CiscoCallManager goes down, all communication through the remote phones becomes nonsecure. To overcome this situation, gateway routers can now function in secure SRST mode, which activates when the WAN link or CiscoCallManager goes down. When the WAN link or CiscoCallManager is restored, CiscoCallManager resumes secure call-handling capabilities.

Secure SRST provides new SRST security features such as authentication, integrity, and media encryption. Authentication provides assurance to one party that another party is whom it claims to be. Integrity provides assurance that the given data has not been altered between the entities. Encryption implies confidentiality; that is, that no one can read the data except the intended recipient. These security features allow privacy for SRST voice calls and protect against voice security violations and identity theft.

Selective Enabling of Applications Using an HTTP or Secure HTTP Server

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_httpe.htm

SHDSL - Auto Detection of 2-Wire Versus 4-Wire Line Mode

This feature is used with SHDSL customer premise equipment (CPE) to automatically detect if the DSLAM is set to two-wire or four-wire mode. Once the mode is detected, the CPE will train to match the DSLAM mode.

This feature was introduced in Cisco IOS Release 12.3(4)XD. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt4wire.htm

SNA Switching Services Enterprise Extender for IP Version 6

SNA Switching Services (SNASw) announces hostname configuration support for Enterprise Extender (EE) connections. This allows SNASw EE links over an IP Version 6 backbone, and also enables Global Connection Network (also known as GVRN - Global Virtual Routing Node) to work when Network Address Translation (NAT) is in place between the connecting networks (IP Version 4 or IP Version 6). This feature adds an IPv6 keyword to the snasw link and snasw port commands.

For detailed information on configuring IPv6, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/index.htm

For detailed information on configuring SNASw, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fibm_c/bcfpart2/bcfsnasw.htm

For detailed information on the snasw link and snasw port commands, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123tcr/123tb2r/ib2_s4gt.htm

SNMP over IPv6 Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_mgev6.htm

SSG Aware On-Demand IP Address Renewal

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/sgb_odip.htm

SSG Support for Subnet Based Authentication

The Subnet-Based Authentication for SSG feature allows a service provider to identify subscribers to services by their subnet, rather than by a subscriber's IP address.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/sgbsubnt.htm

Subordinate Certificate Server

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/gt_scs.htm

System Logging - EAL4 Certification Enhancements


Note Official EAL4 certification is not claimed by Cisco. This feature is part of current and planned enhancements which may qualify Cisco IOS Software for future certification.


This feature includes the following enhancements:

The system logging process will now generate 'audit start' and 'audit stop; messages.

The system logging process will now generate messages that include the date and time of an event, the type of event, the subject identity, and the outcome (success or failure) of an event.

Changes to logging parameters will be logged.

Further enhancements to minimize lost audit records.

T.38 Fax Relay on the Cisco Catalyst 6000 and Cisco 7600 Communication Media Module

The T.38 Fax Relay on the Cisco Catalyst 6000 and Cisco 7600 Communication Media Module feature provides support for T.38 fax relay on the Cisco Catalyst 6000 and Cisco 7600.

For detailed information about this feature, see the Configuring T.38 Fax Relay chapter in the Cisco Fax Services over IP Application Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t11/faxapp/t38.htm

T.38 Fax Statistics

The T.38 Fax Statistics feature enables access servers with NextPort digital signal processors to gather detailed statistics about T.38 fax-relay calls. Statistics can be compiled into detailed call-detail records for diagnostic and billing purposes.

For detailed information about this feature, see the RADIUS VSA Voice Implementation Guide:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/vapp_dev/vsaig3.htm

T1/E1 Mode for SHDSL

The T1/E1 Mode for SHDSL feature was introduced in Cisco IOS Release 12.3(4)XD. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtgshdsl.htm

Transient Memory Management

Transient memory is that memory which is allocated and de-allocated within a short period of time. When these type of memory allocations are free and interleaved with 'static' memory allocations, it leads to memory fragmentation. This enhancement helps to minimize memory fragmentation issues. This enhancement is especially effective for devices in BGP networks. The feature is enabled by default: no user configuration is required. Detailed information on transient memory pools, if used on your device, can be viewed using the show memory transient command.

USB Storage

The USB Storage feature enables certain models of Cisco routers to support universal serial bus (USB) Flash modules and provide secure access to a router.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_etokn.htm

VoIP Alternate Path Fallback SNMP Trap

The VoIP Alternate Path Fallback SNMP Trap feature enhances support for the PSTN Fallback feature by providing the capability to generate Simple Network Management Protocol (SNMP) traps when the fallback subsystem redirects or rejects an H.323 VoIP call because a network condition fails to meet a configured threshold. See the Trunk-Management Features document for configuring information.

For detailed information about this feature, see the VoIP Alternate Path Fallback SNMP Trap document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/pstntrap.htm

VRF Aware Cisco IOS Firewall

VRF Aware Cisco IOS Firewall applies Cisco IOS Firewall functionality to VRF (Virtual Routing and Forwarding) interfaces when the firewall is configured on a service provider (SP) or large enterprise edge router.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gt_vrfaw.htm

VRF-Aware IPSec

The VRF-aware IPSec feature was integrated into the Cisco IOS Release 12.3(14)T and implemented on the following platforms:

Cisco 2811 Series Integrated Services routers

Cisco 2821 Series Integrated Services routers

Cisco 2851 Series Integrated Services routers

Cisco 3825 Series Integrated Services routers

Cisco 3845 Series Integrated Services routers

VRF-Aware MPLS Static Labels

The VRF-Aware MPLS Static Labels feature was introduced in Cisco IOS Release 12.0(23)S. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s26/fsvrflab.htm

Warm Reload

The Warm Reload feature was introduced in Cisco IOS Release 12.3(2)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_2/gtwrmrbt.htm

WebVPN

The Cisco WebVPN feature provides remote access to enterprise sites by users from anywhere on the Internet.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/tc/doc/product/software/ios123/123newft/123t/123t_14/g_sslvpn.htm

WCCP Enhancements

The WCCP Enhancements feature was introduced in Cisco IOS Release 12.3(7)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_14/gtwccpis.htm

X.25 Station Type for ISDN D-Channel Interface

The X.25 Station Type for ISDN D-Channel Interface feature was introduced in Cisco IOS Release 12.3(7)XR. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(14)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xr7/x25enc_d.htm

New Hardware Features Supported in Cisco IOS Release 12.3(11)T2

This section describes new and changed features in Cisco IOS Release 12.3(11)T2. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(11)T2. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

Cisco MWR 1900 Series Routers

Cisco IOS Release 12.3(11)T introduces and supports the Cisco MWR 1900 series routers, which includes the Cisco MWR 1941-DC Mobile Wireless Edge Router.

For detailed information about these new routers, see the "Cisco MWR 1900 Series Routers" section on page 34 and the documents at the following location:

http://www.cisco.com/univercd/cc/td/doc/product/wireless/ipran/2_0/1941/index.htm

New Software Features Supported in Cisco IOS Release 12.3(11)T2

This section describes new and changed features in Cisco IOS Release 12.3(11)T2. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(11)T2. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

Cisco 7301 Router Supports Stateful Failover for IPSec

Cisco IOS Release 12.3(11)T2 introduces support for IPSec stateful failover on the Cisco 7301 router. For detailed information on IPSec stateful failover beginning in Cisco IOS Release 12.3(11)T, see the following document:

http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a0802d03f2.html

Media and Signaling Authentication and Encryption Feature for Cisco IOS MGCP Gateways in SRST Mode

This feature implements signaling authentication along with media and signaling encryption on MGCP gateways and provides secure VoIP calls by addressing security requirements for privacy, integrity, and confidentiality of voice conversations. The Cisco IP telephony network establishes and maintains authenticated communications using signaling authentication, to validate that no tampering has occurred to signaling packets during transmission, and encryption, to provide data integrity and authentication. IPSec ensures that signaling information, that is, DTMF digits, passwords, PINs, encryption keys, and so forth, sent between the gateway and Cisco CallManager is encrypted. Media encryption using standards-based SRTP ensures that media streams between supported devices are secure.

Voice security features support the following capabilities between gateways and from gateways to IP phones that support the encryption feature:

Gateway to Cisco CallManager call control authentication and encryption using IPSec

Media encryption and authentication of voice RTP streams using SRTP

Exchange of RTP Control Protocol (RTCP) information using Secure RTCP (SRTCP)

SRTP to RTP fallback for calls between secure and nonsecure endpoints

Secure to clear-text fallback for new calls during SRST operation

New Hardware Features Supported in Cisco IOS Release 12.3(11)T

This section describes new and changed features in Cisco IOS Release 12.3(11)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(11)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

256-MB Memory Capacity Enhancement

Cisco 3200 Series Mobile Access Routers

Cisco 3800 Series Routers

High-Density Analog (FXO/FXS/DID) and Digital (BRI) Extension Module for Voice/Fax (EVM-HD)

256-MB Memory Capacity Enhancement

The new 128-MB synchronous dynamic RAM (SDRAM) dual in-line memory module (DIMM) is available for use in all new and existing Cisco 2600XM series routers. This new 128-MB DIMM offers higher-density memory, providing the ability to support memory increases to 256 MB of DRAM.

Cisco 3200 Series Mobile Access Routers

Cisco IOS Release 12.3(11)T introduces and supports the Cisco 3200 series of mobile access routers, which includes the Cisco 3320 and the Cisco 3250.

For detailed information about these new routers, see the "Cisco 3200 Series Mobile Access Routers" section on page 54 and the documents at the following location:

http://www.cisco.com/univercd/cc/td/doc/product/access/mar_3200/index.htm

Cisco 3800 Series Routers

Cisco IOS Release 12.3(11)T introduces and supports the Cisco 3800 series routers, which includes the Cisco 3825 and the Cisco 3845.

For detailed information about these new routers, see the "Cisco 3800 Series Routers" section on page 70 and the documents at the following location:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/3800/hw/index.htm

High-Density Analog (FXO/FXS/DID) and Digital (BRI) Extension Module for Voice/Fax (EVM-HD)

The High-Density Analog (FXO/FXS/DID) and Digital (BRI) Extension Module for Voice/Fax (EVM-HD) feature delivers a higher density integrated analog/digital voice interface. The EVM-HD-8FXS/DID baseboard provides eight FXS and DID ports. This network module accesses digital signal processor (DSP) modules on the motherboard, instead of using onboard DSPs. You can increase the port density by plugging in up to two optional expansion modules in any combination:

EM-HDA-8FXS—8-port voice/fax expansion module

EM-HDA-3FXS/4FXO—7-port voice/fax expansion module

EM-HDA-6FXO—6-port voice/fax expansion module

EM-4BRI-NT/TE—4-port ISDN BRI expansion module

PVDM2 DSP modules are used in combination with the EVM-HD-8FXS/DID baseboard and its expansion modules. PVDM2 modules are available separately and installed in the DSP module slots located inside the router chassis.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/hdadv_vm.htm

New Software Features Supported in Cisco IOS Release 12.3(11)T

This section describes new and changed features in Cisco IOS Release 12.3(11)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(11)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

ATM Mode for Two-Wire or Four-Wire SHDSL

APS Support on AS5850 STM-1 Interface

AutoQoS for the Enterprise

BGP Support for Dual AS Configuration for Network AS Migrations

BGP Support for Named Extended Community Lists

BGP Support for Sequenced Entries in Extended Community Lists

Call Failure Recovery (Rotary) on the Cisco Multiservice IP-to-IP Gateway

CallManager Express 3.2

Certificate Server Auto Archive

Cisco 1700 Series Voice Features

Cisco Easy VPN Remote

Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers

Cisco IOS 802.1x Supplicant

Cisco IOS Intrusion Prevention System

Cisco IOS IPv6 Configuration Library

Clear Certificate Server Enrollment Request Database

Configurable MAC Address for PPPoE

Configuring Fast Secure Roaming

Configuring Remote Site IEEE 802.1X Local Authentication Service

Default Route on a PPP Virtual Access Interface

DHCP - Static Mapping

Dial-Out Trunk Group

Enabling OSPFv2 on an Interface Using the ip ospf area Command

Enhanced Crashinfo File Collection Method

Enhanced cRTP for Links with High Delay, Packet Loss and Reordering

Enhanced ITU-T G.168 Echo Cancellation

FACILITY Debug Enhancement

Gatekeeper Prefix Selection for Hair-Pinned Calls

IPv6 IOS Firewall FTP Application Support

IPv6 Multicast: Bootstrap Router (BSR)

IPv6 Support for AS5850 Dial

MCID for Cisco IOS Voice Gateways

MLPP for Cisco IOS Voice Gateways

Mobile IP CPS Improvement at FA

Mobile Networks Deployment MIB

NAT - H.245 Tunneling Support

NBAR Multiple Applications per Port Capability

NetFlow

NetFlow Egress Support

NetFlow Top Talkers

NextPort Voice Tuning and Background Noise Statistics with NextPort Dual-Filter G.168 Echo Cancellation

OER Policy-Rules Configuration and Port-Based Prefix Learning

Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways

Overlap Signaling Processing on H.323 Terminating Gateways

PKI AAA Authorization Using the Entire Subject Name

PKI Status

Port Translation for Windows Clients and Cisco IOS LNS Support

Quick Autoenroll

QSIG Supplementary Features for Cisco IOS Voice Gateways

Reverse SSH Enhancements

Role-Based CLI Access

SHDSL - Auto Detection of 2 Wire Versus 4 Wire Line Mode

Skip FA/HA-CHAP at Mobile IP Lifetime Renewals

SSG Default Quota for Prepaid Billing Server Failure

SSG Support for Dynamic Load Balancing

SSG Support for Overlapping Subscriber IP Addresses

SSG Support for RADIUS Attributes 27 and 29

SSM Channel (S,G) Based Filtering for Multicast Boundaries

Stateful Failover for IPSec

Support for AAA Attributes MN-HA-SPI and MN-HA Shared Key

Upstream PPPoX Connection Speed Transfer at LAC

VRF Aware Multicast Error Messages

VRRP MIB—RFC 2787

Warm Upgrade

ATM Mode for Two-Wire or Four-Wire SHDSL

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt4wire.htm

APS Support on AS5850 STM-1 Interface

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_aps58.htm

AutoQoS for the Enterprise

This feature was introduced in Cisco IOS Release 12.3(7)T. For detailed information about changes and enhancements to this feature in Cisco IOS Release 12.3(11)T, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/ft_aqose.htm

BGP Support for Dual AS Configuration for Network AS Migrations

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtbgpdas.htm

BGP Support for Named Extended Community Lists

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtnextcl.htm

BGP Support for Sequenced Entries in Extended Community Lists

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtextseq.htm

Call Failure Recovery (Rotary) on the Cisco Multiservice IP-to-IP Gateway

The Call Failure Recovery feature eliminates the need for identical codec capabilities for all dial peers in the rotary group and allows the IP-to-IP gateway to restart the codec negotiation process with the originating endpoint on the basis of the codec capabilities of the next dial peer in the rotary group.

For detailed information about this feature, see the Cisco Multiservice IP-to-IP Gateway Application Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ipipgw/index.htm

CallManager Express 3.2

Cisco CallManager Express 3.2 adds a number of key telephony features including support for 240 phones, transcoding, and RFC 2833 DTMF support:

alias Command

Call Pickup Ringing Extension

COR List

External Music on Hold Source

Japanese Katakana Localization

Number of Phones Supported on an Access Server

Option to Disable H.225 TCP Timer from Phone to Gateway to Maintain Calls in Progress During WAN Outage

RFC 2833 DTMF Support from SCCP Devices to Cisco Unity Express

Translation Profiles Support (CME and SRST)

alias Command

The alias command is enhanced as follows:

The cfw keyword is added, providing call forward no-answer/busy capabilities.

The maximum number of alias commands that are used for creating calls to telephone numbers that are unavailable during Cisco CallManager fallback is increased from 10 to 50.

The alternate-number argument can be used in multiple alias commands.

For detailed information about this feature, see the alias command in the Cisco IOS Survivable Remote Site Telephony Version 3.2 Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32cr/index.htm

Call Pickup Ringing Extension

The pickup command is introduced to enable the PickUp soft key on all Cisco IP phones, allowing an external Direct Inward Dialing (DID) call coming into one extension to be picked up from another extension during SRST.

For detailed information about this feature, see the pickup command in the Cisco IOS Survivable Remote Site Telephony Version 3.2 Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32cr/index.htm

COR List

The maximum number of class of restriction (COR) lists is increased from 10 to 20.

For detailed information about this feature, see the cor command in the Cisco IOS Survivable Remote Site Telephony Version 3.2 Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32cr/index.htm

External Music on Hold Source

Cisco SRST has been enhanced with the moh-live command. The moh-live command provides live-feed MOH streams from an audio device connected to an E&M or FXO port to Cisco IP phones in SRST mode. Music from a live feed is from a fixed source and is continuously fed into the MOH playout buffer instead of being read from a flash file. Live-feed MOH can also be multicast to Cisco IP phones.

For detailed information about this feature, see the Integrating Cisco CallManager and Cisco SRST to Use Cisco SRST as a Multicast MOH Resource document:

http://www.cisco.com/univercd/cc/td/doc/product/access/ip_ph/srs/srsinter/moh.htm

Japanese Katakana Localization

Japanese Katakana is now supported with the JP keyword and is available to Cisco SRST systems running under Cisco CallManager V4.0.

For detailed information about this feature, see the user-locale command in the Cisco IOS Survivable Remote Site Telephony Version 3.2 Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32cr/index.htm

Number of Phones Supported on an Access Server

The number of phones that are supported on a Cisco 3845 is increased from 240 to 720 and up to 960 ephone-dns or virtual ports.

Option to Disable H.225 TCP Timer from Phone to Gateway to Maintain Calls in Progress During WAN Outage

To preserve existing H.323 calls on the branch in the event of an outage, disable the H.225 keepalive timer by entering the no h225 timeout keepalive command.

For detailed information about this feature, see the "Overview of Cisco IOS SRST" chapter in the Cisco IOS Survivable Remote Site Telephony Version 3.2 System Administrator Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32ad/srs_over.htm

RFC 2833 DTMF Support from SCCP Devices to Cisco Unity Express

Cisco Skinny Client Control Protocol (SCCP) phones, such as those used with Cisco SRST systems, provide only out-of-band DTMF digit indications. To enable SCCP phones to send digit information to remote SIP-based IVR and voice-mail applications, Cisco SRST 3.2 and later versions provide conversion from the out-of-band SCCP digit indication to the SIP standard for DTMF relay, which is RFC 2833. You select this method in the SIP VoIP dial peer using the dtmf-relay rtp-nte command.

For detailed information about this feature, see the "Preparing Cisco SRST Support for SIP" chapter in the Cisco IOS Survivable Remote Site Telephony Version 3.2 System Administrator Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32ad/srs_sip.htm

Translation Profiles Support (CME and SRST)

Cisco SRST 3.2 supports translation profiles. Translation profiles allow you to group translation rules together and to associate translation rules with the following:

Called numbers

Calling numbers

Redirected called numbers

For detailed information about this feature, see the "Setting Up Call Handling" chapter in the Cisco IOS Survivable Remote Site Telephony Version 3.2 System Administrator Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32ad/index.htm

Also, see the translation-profile command in the Cisco IOS Survivable Remote Site Telephony Version 3.2 Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32cr/index.htm

CallManager Express 3.2 Documentation

For detailed information about CallManager Express 3.2, including the IP phone user guide and quick reference cards, see the CallManager Express 3.2 documentation home page:

http://www.cisco.com/univercd/cc/td/doc/product/access/ip_ph/ip_ks/cme32/index.htm

For more information about CallManager Express 3.2, see the following documents:

Cisco CallManager Express 3.2 System Administrator Guide:

http://www.cisco.com/univercd/cc/td/doc/product/access/ip_ph/ip_ks/cme32/cme32sa/index.htm

Cisco CallManager Express 3.2 Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/access/ip_ph/ip_ks/cme32/cme32cr/index.htm

Cisco IOS Survivable Remote Site Telephony Version 3.2 System Administrator Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32ad/index.htm

Cisco IOS Survivable Remote Site Telephony Version 3.2 System Command Reference:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/srst32cr/index.htm

Certificate Server Auto Archive

For detailed information about this feature, see the Cisco IOS Certificate Server document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt_ioscs.htm

Cisco 1700 Series Voice Features

The following is a list of Cisco IOS voice features that have been introduced in various Cisco IOS releases and that are now supported on the Cisco 1700 series platforms as part of Cisco IOS Release 12.3(11)T.

The following Cisco IOS VoIP features are supported on the Cisco 1700 series platforms for Cisco IOS Release 12.3(11)T:

H.323v4: Enhanced Call Usage Reporting

H.323v4 Gateway Zone Prefix Registration Enhancements

SIP Call Transfer and Call Forwarding

VoIP and Cisco Express Forwarding (CEF) Interoperability

VoIP and Policy Based Routing (PBR) Interoperability

H.323v4: Enhanced Call Usage Reporting

This feature provides H.323v4 enhancements that provide standards-based call usage reporting to the gatekeeper from an H.323 gateway. This information is used by the gatekeeper to generate call detail records (CDRs).

For more information, see the following documents:

The "Cisco IOS Call Control Technology" section in the Cisco IOS Voice Configuration Library:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcg/vcl.htm

The VoIP Gateway Trunk and Carrier Based Routing Enhancements document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t11/ftgwrepg.htm

The VoIP Gatekeeper Trunk and Carrier Based Routing Enhancements document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t11/ftgkrenb.htm

H.323v4 Gateway Zone Prefix Registration Enhancements

This feature provides support for two capabilities included in H.323, version 4: additive registration and dynamic zone prefix registration. Additive registration allows a gateway to add to or modify a list of aliases contained in a previous registration without first unregistering from the gatekeeper. Dynamic zone prefix registration allows a gateway to register actual PSTN destinations served by the gateway with its gatekeeper.

For more information, see the following documents:

The "Cisco IOS Call Control Technology" section in the Cisco IOS Voice Configuration Library:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vcl.htm

The H.323v4 Gateway Zone Prefix Registration Enhancements document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t15/ftgwzpre.htm

SIP Call Transfer and Call Forwarding

This feature introduces the ability of Session Initiation Protocol (SIP) gateways to initiate blind or attended call transfers. Release Link Trunking (RLT) functionality is also added. With RLT, SIP blind call transfers can now be triggered by channel-associated signaling (CAS) trunk signaling. This feature also implements SIP support of call forwarding requests from a Cisco IOS gateway.

For more information, see the Cisco IOS SIP Configuration Guide:

http://www.cisco.com/application/pdf/en/us/guest/products/ps6685/c1237/ccmigration_09186a00801d3d3d.pdf

VoIP and Cisco Express Forwarding (CEF) Interoperability

This functionality enables Cisco Express Forwarding of VoIP signaling and payload packets that originate from voice interfaces and interactive voice response (IVR) applications.

This feature modifies the Voice over IP (VoIP) and IVR programming so that they can interoperate with features that are supported only in the CEF path (not in the fast-switching path that VoX uses). Voice and IVR work only in the fast path on the routers where they are originated and terminated (voice and IVR on "transit" routers are just data packets and of course can be CEF-switched).

This feature enables policy-based routing of VoIP traffic that originates or terminates on the specified voice gateways and introduces voice packet differentiated services code point (DSCP) marking for Media Gateway Control Protocol (MGCP) voice gateways.

For more information, see the VoIP Interoperability with Cisco Express Forwarding and Policy-Based Routing document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/vclcef.htm

VoIP and Policy Based Routing (PBR) Interoperability

PBR gives you a flexible means of routing packets by allowing you to configure a defined policy for traffic flows, lessening reliance on routes derived from routing protocols. To this end, PBR gives you more control over routing by extending and complementing the existing mechanisms provided by routing protocols. PBR allows you to set the IP precedence. It also allows you to specify a path for certain traffic, such as priority traffic over a high-cost link.

PBR allows you to perform the following tasks:

Classify traffic according to extended access list criteria. Access lists, then, establish the match criteria.

Set IP precedence bits, giving the network the ability to enable differentiated classes of service.

Route packets to specific traffic-engineered paths; you might need to route them to allow a specific QoS through the network.

For more information, see the VoIP Interoperability with Cisco Express Forwarding and Policy-Based Routing document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/vclcef.htm

Cisco Easy VPN Remote

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/ftezvpnr.htm

Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers

The Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers feature was introduced in Cisco IOS Release 12.3(8)T. Release 12.3(11)T adds support for this feature on the new Cisco 2801 router.

For detailed information about this feature, see the "Configuring Conferencing and Transcoding for Voice Gateway Routers" chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf2.htm

Cisco IOS 802.1x Supplicant

For detailed information about this feature, see the VPN Access Control Using 802.1X Authentication document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xa/gt_802_1.htm

Cisco IOS Intrusion Prevention System

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_fwids.htm

Cisco IOS IPv6 Configuration Library

For detailed information about this feature, see the Cisco IOS IPv6 Configuration Library:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ipv6_vgf.htm

Clear Certificate Server Enrollment Request Database

For detailed information about this feature, see the Cisco IOS Certificate Server document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt_ioscs.htm

Configurable MAC Address for PPPoE

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_cmppp.htm

Configuring Fast Secure Roaming

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/fastroam.htm

Configuring Remote Site IEEE 802.1X Local Authentication Service

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/locauth.htm

Default Route on a PPP Virtual Access Interface

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtdfltrt.htm

DHCP - Static Mapping

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtdhcpsm.htm

Dial-Out Trunk Group

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtdltrgp.htm

Enabling OSPFv2 on an Interface Using the ip ospf area Command

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s29/ospfarea.htm

Enhanced Crashinfo File Collection Method

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_cricm.htm

Enhanced cRTP for Links with High Delay, Packet Loss and Reordering

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_ecrtp.htm

Enhanced ITU-T G.168 Echo Cancellation

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/int_c/vclport.htm

FACILITY Debug Enhancement

Overview

This feature enables display of ASN.1-encoded ISDN FACILITY Information Element (IE) contents. All supported operations of the ISDN supplementary services—Advice of Charge (AOC), Two B-Channel Transfer (TBCT), Explicit Call Transfer (ECT), and Malicious Call Identification (MCID)—are now included as part of the debug messages. Prior to this enhancement, the debug isdn q931 command displayed the contents of the FACILITY IE in its raw hexadecimal format. Now, the parameters of FACILITY IE are displayed in text format along with parameter values where they are applicable and as they are relevant to the operation. In addition, the ASN.1 encoded Notification structure of the Notification-Indicator IE are also decoded. This debugging information is available for both incoming and outgoing FACILITY IEs in any message over an ISDN interface.

The debug isdn q931 command must be enabled to display the contents of FACILITY IE. Following are examples of new messages displayed in the debug isdn q931 command output. See the debug isdn q931 command page for more details about the information displayed by the FACILITY IE.

Output for Invoke Component Debug Message with MCID Operation: Example

Old output:

07:20:21: ISDN Se7/4:23 Q931: TX -> FACILITY pd = 8  callref = 0x8001 
	Facility i = 0x91A106020107020103 
-	ETSI Supplementary Service, Invoke, Malicious Call ID

New output:

07:20:21: ISDN Se7/4:23 Q931: TX -> FACILITY pd = 8  callref = 0x8001 
	Facility i = 0x91A106020107020103
		Protocol Profile = Remote Operations Protocol
		A106020107020103
		Component = Invoke Component
			Invoke Id = 07 (MCID)
			Operation = McidRequest

Output for Return Result Component Debug Message for TBCT: Example

Old output:

02:05:33: ISDN Se7/4:23 Q931: RX <- FACILITY pd = 8  callref = 0x01 
        Facility i = 0x91A203020105A11302010180010506072A8648CE15000A81020164

New output:

02:05:33: ISDN Se7/4:23 Q931: RX <- FACILITY pd = 8  callref = 0x01 
        Facility i = 0x91A203020105A11302010180010506072A8648CE15000A81020164
		Protocol Profile = Remote Operations Protocol
		A203020105
		Component = Return Result Component
			Invoke Id = 05 (TBCT)
		A11302010180010506072A8648CE15000A81020164
		Component = Invoke Component
			Invoke Id = 01 (unknown)
			Linked Id = 05
			Operation = SetCallTag
				Call Tag = 356

Output for Return Error Component Debug Message: Example

Old output:

16:27:07: ISDN Se1:23 Q931: RX <- FACILITY pd = 8  callref = 0x01
        Facility i = 0x91A306020107020109
        - ETSI Supplementary Service, Return Error

New output:

16:27:07: ISDN Se1:23 Q931: RX <- FACILITY pd = 8  callref = 0x01
        Facility i = 0x91A306020107020109
		Protocol Profile = Remote Operations Protocol
		A306020107020109
		Component = Return Error Component
			Invoke Id = 07 (MCID)
			Error = Not Incoming Call

Output for Reject Component Debug Message: Example

Old output:

03:09:17: ISDN Se7/4:23 Q931: RX <- FACILITY pd = 8  callref = 0x01
	Facility i = 0x91A406020109800102

New output:

03:09:17: ISDN Se7/4:23 Q931: RX <- FACILITY pd = 8  callref = 0x01
	Facility i = 0x91A406020109800102
		Protocol Profile = Remote Operations Protocol
		A406020109800102
		Component = Reject Component
			Invoke Id = 09 (Unknown)
			Problem = General Problem; Badly structured Component

Output for Notification-Indicator IE Component Debug Message: Example

Old output:

Mar  1 01:48:26.543: ISDN Se1/0:23 Q931: RX <- NOTIFY pd = 8  callref = 0x00
Notification Ind i = 0x83300C06072A8648CE15020181010D

New output:

Mar  1 01:48:26.543: ISDN Se1/0:23 Q931: RX <- NOTIFY pd = 8  callref = 0x00
Notification Ind i = 0x83300C06072A8648CE15020181010D
                Notification = Transferred Call Clearing
                Call Tag = 13

Gatekeeper Prefix Selection for Hair-Pinned Calls

The Gatekeeper Prefix Selection for Hair-Pinned Calls feature enables an H.323 gatekeeper to terminate/hairpin calls from a TDM/PSTN endpoint back through the same originating gateway on the basis of priority/zone prefix values.

For detailed information about this feature, see the Cisco Multiservice IP-to-IP Gateway Application Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ipipgw/index.htm

IPv6 IOS Firewall FTP Application Support

Cisco IOS IPv6 Firewall FTP application support is provided by port-to-application mapping (PAM). PAM allows you to customize TCP or UDP port numbers for network services or applications. PAM uses this information to support network environments that run services using ports that are different from the registered or well-known ports associated with an application.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/v6_tffw.htm

IPv6 Multicast: Bootstrap Router (BSR)

For Cisco IOS IPv6 multicast implementations, PIM routers in a domain must be able to map each multicast group to the correct RP address. The BSR protocol for PIM-SM provides a dynamic, adaptive mechanism to distribute group-to-RP mapping information rapidly throughout a domain. With the IPv6 BSR feature, if an RP becomes unreachable, it will be detected and the mapping tables will be modified so that the unreachable RP is no longer used, and the new tables will be rapidly distributed throughout the domain.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_mcast.htm#wp1126406

IPv6 Support for AS5850 Dial

As of Cisco IOS Release 12.3(11)T, Cisco IOS IPv6 is supported on the Cisco AS5850 platform. For detailed information about Cisco IOS IPv6, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ipv6_vgf.htm

MCID for Cisco IOS Voice Gateways

The MCID for Cisco IOS Voice Gateways feature supports the Malicious Call Identification (MCID) supplementary service that enables Cisco CallManager 4.0 to identify the source of malicious calls.

For detailed information about this feature, see the "Configuring MCID for Cisco IOS Voice Gateways" chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/int_mcid.htm

MLPP for Cisco IOS Voice Gateways

The MLPP for Cisco IOS Voice Gateways feature supports Multilevel Precedence and Preemption (MLPP) service, allowing authorized users to preempt lower priority voice calls using Cisco CallManager 4.0.

For detailed information about this feature, see the "Configuring MGCP Gateway Support for Cisco CallManager" chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf1.htm

Mobile IP CPS Improvement at FA

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/moipcps.htm

Mobile Networks Deployment MIB

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gtmdebug.htm

NAT - H.245 Tunneling Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/nat245tl.htm

NBAR Multiple Applications per Port Capability

For detailed information about this feature, see the Network-Based Application Recognition and Distributed Network-Based Application Recognition document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/dtnbarad.htm

NetFlow

Cisco IOS Release 12.3(11)T supports NetFlow on the Cisco 3200 series mobile access routers.

NetFlow Egress Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/nflowegr.htm

NetFlow Top Talkers

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122s/122snwft/release/122s25/nflowtt.htm

NextPort Voice Tuning and Background Noise Statistics with NextPort Dual-Filter G.168 Echo Cancellation

The NextPort Voice Tuning and Background Noise Statistics with NextPort Dual-Filter G.168 Echo Cancellation feature allows you to dynamically configure voice services on the NextPort-based platforms: the Cisco AS5350, Cisco AS5400, Cisco AS5400HPX, and Cisco AS5850. This feature also provides improved voice quality and statistics reporting and adds dual-filter G.168 echo canceller capability in NextPort SPE firmware (SPEware) version 10.2.2 and later with Cisco IOS Release 12.3(11)T.

Dual-filter G.168 echo canceller capability has been added to the CSMV6 dial feature card (DFC) for NextPort platforms. The NextPort dual-filter G.168 echo canceller (EC) improves voice quality in VoIP connections by providing relatively less residual echo leakage, better non-linear processing (NLP) timing, less clipping, and better comfort noise generation (CNG) in most environments.

The dual-filter G.168 echo canceller features two concurrently operating adaptive filters (which control echo tail coverage) and two double-talk detection functions. In addition, the comfort noise model uses "Hoth noise" spectrum shaping to better replicate the true noise spectrum.

The NextPort dual-filter G.168 echo canceller uses the same voice-tuning (VCtune) interface for configuring voicecap parameters as the Cisco-proprietary G.164 echo canceller. Adjusting the dual-filter echo canceller is carried out by using a voicecap or by using the Cisco IOS command-line interface (CLI) during configuration.

For more information, see the NextPort Voice Tuning and Background Noise Statistics with NextPort Dual-Filter G.168 Echo Cancellation chapter in the Voice Port Configuration Guide document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/int_c/vpcg/index.htm

OER Policy-Rules Configuration and Port-Based Prefix Learning

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_oer2.htm

Out-of-Band to In-Band DTMF Relay for Cisco IOS Voice Gateways

This feature provides RFC 2833 capability, enabling DTMF relay communication between SIP devices and non-SIP endpoints using Cisco CallManager 4.0.

For detailed information about this feature, see the "Configuring Enhanced Conferencing and Transcoding for Voice Gateway Routers" chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf2.htm

Overlap Signaling Processing on H.323 Terminating Gateways

In an overlap signaling scenario, the called number in the SETUP message does not contain enough digits to match the incoming dial peer for the dial peer to select the right application. With this change, the H.323 layer determines if a partial match is detected and appends the called number with the needed digits. The new called number is checked to see if it matches any of the incoming dial peers. If either full match or no match is returned, the call will proceed with a SETUP procedure.

For detailed information about this feature, see the Cisco Multiservice IP-to-IP Gateway Application Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ipipgw/index.htm

PKI AAA Authorization Using the Entire Subject Name

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_dnall.htm

PKI Status

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtpkista.htm

Port Translation for Windows Clients and Cisco IOS LNS Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/pt_wnlns.htm

Quick Autoenroll

The Autoenroll feature enables a router to automatically trigger an enrollment when the elapsed lifetime of an existing certificate has reached a certain percentage (for example, after 70 percent of the lifetime has passed, the router automatically enrolls for a new certificate). When no certificate exists, a 1-minute timer is set to trigger autoenrollment as soon as the clock has been set manually or by using Network Time Protocol (NTP).

The Quick Autoenroll feature shortens the 1-minute time when no certificate exists. Instead of having to wait 1 minute, an enrollment will occur after 15 seconds. This feature applies to manually configured autoenroll using the current auto-enroll command. No new or additional commands or keywords are necessary for this feature to work. This feature also applies when the configuration sent to the device includes autoenroll (that is, to any subsystem that calls for the "parse_configure() with RES_MANUAL" flag to enter the auto-enroll command, for example, during a Trusted Transitive Introduction [TTI] exchange).

When the configuration is read from NVRAM or copied from file systems, autoenroll will still have a 1-minute timer. The 1-minute timer prevents the read-in of multiple trustpoints from configuration and trigger enrollments that occur simultaneously.

QSIG Supplementary Features for Cisco IOS Voice Gateways

This feature supports Q Signaling (QSIG) over PRI backhaul interfaces on MGCP gateways to Cisco CallManager 4.0.

For detailed information about this feature, see the "Configuring MGCP PRI Backhaul and T1 CAS Support for Cisco CallManager" chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf3.htm

Reverse SSH Enhancements

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_rssh.htm

Role-Based CLI Access

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtclivws.htm

SHDSL - Auto Detection of 2 Wire Versus 4 Wire Line Mode

For detailed information about this feature, see the ATM Mode for Two-Wire or Four-Wire SHDSL document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt4wire.htm

Skip FA/HA-CHAP at Mobile IP Lifetime Renewals

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/skipchap.htm

SSG Default Quota for Prepaid Billing Server Failure

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtssgdfq.htm

SSG Support for Dynamic Load Balancing

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtssgdfp.htm

SSG Support for Overlapping Subscriber IP Addresses

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtssgovr.htm

SSG Support for RADIUS Attributes 27 and 29

The SSG Support for Radius Attributes 27 and 29 feature introduces SSG compliance with RFC 3580 with respect to RADIUS attributes 27 (Session-Timeout) and 29 (Termination-Action). RFC 3580 recommends using attributes 27 and 29 in Access-Accept packets during authentication to enforce periodic reauthentication of users. For details, see RFC 3580, "IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines."

For instances that indicate reauthentication after the session timeout, SSG uses the cached username and password while performing reauthentication. If SSG does not have these credentials, the session is brought down as if reauthentication had failed. If a particular deployment makes use of one-time passwords for authenticating users, SSG reauthentication will fail and the session will be brought down.

For SSG transparent autologon (TAL) hosts (TAL users who have host objects created on SSG), SSG will perform TAL reauthorization upon session timeout whenever attribute 29 is present in the RADIUS profile of the user. (Note that for TAL users, SSG performs reauthorization, not reauthentication, because the user profile is downloaded on the basis of the IP address and service password.)

In SSG RADIUS proxy deployments, SSG will not perform session timeout processing when attribute 29 is present in the Access-Accept packet and is set to reauthenticate.

SSM Channel (S,G) Based Filtering for Multicast Boundaries

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtmcbnd.htm

Stateful Failover for IPSec

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gt_topht.htm

Support for AAA Attributes MN-HA-SPI and MN-HA Shared Key

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/spishare.htm

Upstream PPPoX Connection Speed Transfer at LAC

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtupppox.htm

VRF Aware Multicast Error Messages

Multicast error messages that are associated with a particular multicast VPN customer in an MPLS VPN environment can be tracked.

VRRP MIB—RFC 2787

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtvrrpmb.htm

Warm Upgrade

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_11/gtwarmup.htm

New Hardware Features Supported in Cisco IOS Release 12.3(8)T4

This section describes new and changed features in Cisco IOS Release 12.3(8)T4. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(8)T4. To determine if a feature is new or changed, refer to the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

Cisco 1800 Series Routers (Modular)

Cisco IOS Release 12.3(8)T4 introduces and supports the Cisco 1800 series routers (modular). The Cisco 1800 series routers (modular) include the Cisco 1841 in this release. The Cisco 1841 router is a data-only router with two HWIC/WIC/VWIC slots, capable of supporting single-wide HWICs, and one advanced integration module (AIM) slot. It can be placed on a desktop or wall-mounted. The Cisco 1841 does not provide inline power support.

For detailed information about these new routers, see the "Cisco 1800 Series Routers (Modular)" section on page 32.

Cisco 2800 Series Routers

Cisco IOS Release 12.3(8)T4 introduces and supports the Cisco 2800 series integrated services routers. The Cisco 2800 series integrated services routers include the Cisco 2801, Cisco 2811, Cisco 2821, and Cisco 2851 routers.

For detailed information about these new routers, see the "Cisco 2800 Series Routers" section on page 47.

Cisco Gigabit Ethernet High-Speed WAN Interface Cards (HWIC-1GE-SFP)

The Cisco Gigabit Ethernet high-speed WAN interface card (HWIC-1GE-SFP) is a high-speed interface card providing copper and optical Gigabit Ethernet connectivity for Cisco modular access routers.

High-Density Analog (FXS/DID/FXO) and Digital (BRI) Extension Module for Voice/Fax (EVM-HD)

For detailed information about this feature, refer to the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/hdadv_vm.htm

HWIC-4ESW

The HWIC-4ESW is a 4-port 10/100 Ethernet switch that is capable of providing inline power to IP phones and access points on all 4 ports when used in conjunction with the ILPM-4 daughter card.

HWIC-9ESW

The HWIC-9ESW is a 9-port 10/100 Ethernet switch that is capable of providing inline power to IP phones and access points on 8 ports (not 9) when used in conjunction with the ILPM-8 daughter card. The HWIC-D-9ESW is in a doublewide form factor and is usable only in those routers that can provide doublewide interface card slots: the Cisco 2800 series and Cisco 3800 series, so far.

ILPM-4 and ILPM-8

The ILPM-4 and ILPM-8 are optional daughter cards to be used in conjunction with the HWICs to provide inline power on those ports that can carry power. These daughter cards require that the router have installed in it an optional -48 volt power supply. The daughter cards use this supply to provide inline power. The ILPM-4 is used only with the HWIC-4ESW, and the ILPM-8 is used only with the HWIC-D-9ESW.

New Hardware Features Supported in Cisco IOS Release 12.3(8)T

This section describes new and changed features in Cisco IOS Release 12.3(8)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(8)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

WIC-4ESW (4-Port Ethernet Switch WIC)

The Cisco 4-port 10/100BASE-T Fast Ethernet Switch WAN Interface Card (WIC-4ESW) for Cisco 1700 series modular access routers is an intelligent managed switch, offering small businesses and enterprise small branch office customers the option to integrate LAN switching and routing into one platform. The advanced capabilities of the WIC, including VLAN support, Spanning Tree Protocol, and traffic prioritization, provide the flexibility for customers to deploy different network configurations.

For detailed information about this feature, see the following documents:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis2600/hw_inst/wic_inst/wic_doc/

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/1700/1700cnts/1711swm.htm

New Software Features Supported in Cisco IOS Release 12.3(8)T

This section describes new and changed features in Cisco IOS Release 12.3(8)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(8)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

AAL1 CES on AIM-ATM

AutoQoS—VoIP

AutoSecure

BGP Cost Community Support for EIGRP MPLS VPN PE-CE with Backdoor Links

Call Admission Control for IKE

Call Application HTTP Client Cookie Support

Certificate to ISAKMP Profile Mapping

Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers

Cisco General Packet Radio Service (GPRS) Gateway Support Node (GGSN)

Cisco IOS Intrusion Prevention System

Cisco IOS Resilient Configuration

CISCO-IP-LOCAL-MIB-Support

CISCO-IP-LOCAL-MIB-Support

Class-Based Traffic Policing with CLP Tagging

CNS Frame Relay Zero Touch

Conferencing and Transcoding for Voice Gateway Routers

Configurable DHCP Client

Crypto Access Check on Clear-Text Packets

DHCP—Statically Configured Routes Using a DHCP Gateway

Easy Secure Device Deployment AAA Integration

EIGRP MPLS VPN PE-CE Site of Origin (SoO)

EIGRP Support for Route Map Filtering

Embedded Syslog Manager (ESM) for the Cisco 800 and Cisco 1700 Series Platforms

Enhanced Object Tracking

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t15/fthsrptk.htmETSI Call Transfer

IPSec and Quality of Service

Managed LAN Switch

MGCP Fax Rate Control

MGCP Line Control Signaling Package

Minimal Disruptive Restart of VIP Cards

Mobile IP—Support for RFC 3519 NAT Traversal

Monitoring Control Characters on Async Lines

MPLS-aware NetFlow

MPLS Enhancements to Interfaces MIB

MPLS Label Distribution Protocol MIB Version 8 Upgrade

NAT Support for H.323 Fragmented Control Messages

NAT—Support for H.323 v3 and v4 in v2 Compatibility mode

Network Admission Control

Network-based Application Recognition (NBAR)

Optimized Edge Routing (OER)

Protocol Translation Aggregation

QoS: Classification, Policing, and Marking on LAC

Reliable Static Routing Backup Using Object Tracking

Service Assurance Agent (SAA) Multiple Operation Scheduling

SIP Audible Message-Waiting Indicator for FXS Phones

SIP: Cisco IOS Gateway HTTP Digest Authentication and Registration

SIP: Cisco IOS Gateway Reason Header and Buffered Calling Name Completion

SSG Interface Redundancy

SSG MIB Extensions

Upgrade Secondary ROMmon CLI

Virtual Fragmentation Reassembly

Voice Application Monitoring and Troubleshooting Enhancements

X.25 Version Configuration

AAL1 CES on AIM-ATM

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_aal1.htm

AutoQoS—VoIP

The AutoQoS—VoIP feature allows you to automate the delivery of quality of service (QoS) on your network and provides a means for simplifying the implementation and provisioning of QoS for Voice over IP (VoIP) traffic.

see the following documents for additional information about this feature:

AutoQoS—VoIP

Quality of Service for Voice

AutoSecure

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123_1/ftatosec.htm

BGP Cost Community Support for EIGRP MPLS VPN PE-CE with Backdoor Links

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122s/122snwft/release/122s25/fsbgpcce.htm

Call Admission Control for IKE

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtcallik.htm

Call Application HTTP Client Cookie Support

For detailed information about this feature, see the "Configuring Basic Functionality for TCL IVR and VoiceXML Applications" chapter in the Cisco IOS TCL IVR and VoiceXML Application Guide.

Certificate to ISAKMP Profile Mapping

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_isakp.htm

Cisco Enhanced Conferencing and Transcoding for Cisco Voice Gateway Routers

For detailed information about this feature, see the "Configuring Conferencing and Transcoding for Voice Gateway Routers" chapter in the Cisco CallManager and Cisco IOS Interoperability Guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/vvfax_c/callc_c/ccm_c/intcnf2.htm

Cisco General Packet Radio Service (GPRS) Gateway Support Node (GGSN)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/ggsn40/index.htm

Cisco IOS Intrusion Prevention System

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_fwids.htm

Cisco IOS Resilient Configuration

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtrescfg.htm

CISCO-IP-LOCAL-MIB-Support

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_ipmib.htm

Class-Based Traffic Policing with CLP Tagging

When configured on the router, the Class-Based Traffic Policing with CLP Tagging feature polices the flow of cells in the forward (into the network) direction of a virtual connection. The traffic policing mechanism determines whether received cells comply with the negotiated traffic management values and tags the cell with a CLP bit value of 1. The purpose of this feature is to mark traffic that does not meet the traffic management values so that packets that exceed the set values can be dropped by the network if the network is congested.

CNS Frame Relay Zero Touch

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_zerot.htm

Conferencing and Transcoding for Voice Gateway Routers

This feature provides conferencing and transcoding capability in Cisco IOS gateways using packet voice data modules (PVDMs). This feature is delivered in Cisco IOS software and operates in conjunction with Cisco CallManager to provide enhanced multiservice support for Cisco routers in a Cisco CallManager network.

see the following documentation for more information about this feature:

Conferencing and Transcoding for Voice Gateway Routers

Cisco CallManager and Cisco IOS Interoperability

Configurable DHCP Client

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtdhcpcf.htm

Crypto Access Check on Clear-Text Packets

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_crpks.htm

DHCP—Statically Configured Routes Using a DHCP Gateway

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtddgtwy.htm

Easy Secure Device Deployment AAA Integration

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtezsddi.htm

EIGRP MPLS VPN PE-CE Site of Origin (SoO)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtmvesoo.htm

EIGRP Support for Route Map Filtering

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gteigrpr.htm

Embedded Syslog Manager (ESM) for the Cisco 800 and Cisco 1700 Series Platforms

This release adds support for the Embedded Syslog Manager (ESM) in images for the Cisco 800 and Cisco 1700 series platforms.

The ESM provides enhanced system logging (syslog) message services for Cisco IOS software, including device-level syslog message filtering, and reliable delivery of syslog messages to the syslog message receiving server. The ESM includes a programmable framework that allows customization of messages and delivery options using Tcl scripts.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_2/gt_esm.htm

Enhanced Object Tracking

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t15/fthsrptk.htmETSI Call Transfer

For detailed information about this feature, see the "Configuring Telephony Call-Redirect Features" chapter in the Cisco IOS TCL IVR and VoiceXML Application Guide.

IPSec and Quality of Service

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtqosips.htm

Managed LAN Switch

The Managed LAN Switch feature enables the control of the four switch ports in Cisco 831, 836, and 837 routers. Each switch port is associated with a Fast Ethernet interface. The output of the command show controllers fastEthernet <1-4> displays the status of the selected switch port. The Managed LAN Switch feature allows setting and display of the following parameters for each of the switch ports:

Speed

Duplex

It also allows display of the link state of a switch port—that is, whether a device is connected to that port or not.

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_2/mlans.htm

MGCP Fax Rate Control

To establish the maximum fax rate for Media Gateway Control Protocol (MGCP) T.38 sessions, use the mgcp fax rate command in global configuration mode. To reset MGCP endpoints to their default fax rate, use the no form of this command.

mgcp fax rate {2400 | 4800 | 7200 | 9600 | 12000 | 14400 | voice}

no mgcp fax rate

For detailed information about this feature, see the "Configuring T.38 Fax Relay" section in the Cisco Fax Services over IP Application Guide.

MGCP Line Control Signaling Package

The mgcp package-capability command has been modified. The lcs-package keyword has been added to the list of package selections.

The line control signaling (LCS) package supports the transport of line supervision signals in the media stream using RFC-2833 event packets in PacketCable GR303-switched IP systems. When the lcs-package keyword is used, the named telephony events (NTEs) associated with the LCS package are enabled automatically. The following telephone events are supported by devices that implement the LCS package:

Ring (RFC-2833 event 144)

On-hook (RFC-2833 event 149)

Open signal interval (RFC-2833 event 159)

For detailed information about this feature, see the "Basic MGCP Configuration" chapter of the Cisco IOS MGCP and Related Protocols Configuration Guide.

Minimal Disruptive Restart of VIP Cards

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtmdrvip.htm

Mobile IP—Support for RFC 3519 NAT Traversal

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtnatmip.htm

Monitoring Control Characters on Async Lines

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtasyncl.htm

MPLS-aware NetFlow

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_mnf.htm

MPLS Enhancements to Interfaces MIB

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/ftifemib.htm

MPLS Label Distribution Protocol MIB Version 8 Upgrade

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/ftldpv8.htm

NAT Support for H.323 Fragmented Control Messages

Control messages for most multimedia applications such as H.323 messages can arrive at a router as fragments. IP-level fragmentation is common and well understood, but some applications have control messages that can span across several IP datagrams, causing the control message of an application that uses TCP to arrive at a router running Network Address Translation (NAT) as multiple IP packets that are not fragmented.

Prior to the introduction of the NAT Support for H.323 Fragmented Control Messages feature, NAT required the entire control message to be present in a single IP packet. If NAT received a control message that was fragmented, the packet was dropped. This feature enables NAT to perform address translation against fragmented packets, and it provides support for H.323 packets that arrive in different TCP segments.

NAT—Support for H.323 v3 and v4 in v2 Compatibility mode

The NAT Support for H.323 v3 and v4 in v2 Compatibility Mode feature is an ITU-T specification for transmitting audio, video, and data across a packet network. Cisco Network Address Translation (NAT) routers are enabled to support messages coded in H.323 v3 and v4 when those messages contain fields compatible with H.323 v2. This feature was introduced in Cisco IOS Release 12.3(2)T. Release 12.3(8)T adds support for the Cisco 1710 Security Access Router, and the Cisco 1751 and 1760 Modular Access Routers. Additional support for H.323 capabilities introduced in v3 and v4, such as new message types or new fields that require address translation, is not added in this feature.

Network Admission Control

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_nac.htm

Network-based Application Recognition (NBAR)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/dtnbarad.htm

Optimized Edge Routing (OER)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_oer1.htm

Protocol Translation Aggregation

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_ptagg.htm

QoS: Classification, Policing, and Marking on LAC

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtqoslac.htm

Reliable Static Routing Backup Using Object Tracking

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xe/dbackupx.htm

Service Assurance Agent (SAA) Multiple Operation Scheduling

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_saams.htm

SIP Audible Message-Waiting Indicator for FXS Phones

For detailed information about this feature, see the "Configuring SIP MWI Support" chapter of the Cisco IOS SIP Configuration Guide.

SIP: Cisco IOS Gateway HTTP Digest Authentication and Registration

For detailed information about this feature, see the Cisco IOS SIP Configuration Guide.

SIP: Cisco IOS Gateway Reason Header and Buffered Calling Name Completion

For detailed information about this feature, see the Cisco IOS SIP Configuration Guide.

SSG Interface Redundancy

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/aggr/10000/10kfm/gtssgifr.htm

SSG MIB Extensions

The Service Selection Gateway MIB enables network administrators to use Simple Network Management Protocol (SNMP) to monitor and manage SSG. The SSG MIB contains objects that correspond to various SSG features and that allow the collection of statistics and management of certain SSG configurations.

In Cisco IOS Release 12.3(8)T, the SSG MIB has been enhanced to provide statistics and the ability to manage the configuration of the SSG Transparent Autologon feature. The SSG Transparent Autologon feature enables SSG to authenticate and authorize users based on IP packets received from users. SSG authorizes users based on the source IP address received on the downlink interface. The SSG MIB includes objects for reporting transparent autologon statistics such as the current number of transparent passthrough, suspect, waiting-for-authorization, and unidentified users. The MIB also includes read-write objects that allow certain SSG transparent autologon thresholds and values to be configured in the MIB in addition to configuration using the command-line interface.

For detailed definitions of the SSG MIB objects, see the CISCO-SSG-MIB. To locate and download MIBs, use Cisco MIB Locator found at the following URL:

http://www.cisco.com/go/mibs

Upgrade Secondary ROMmon CLI

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s28/12s28fur.htm

Virtual Fragmentation Reassembly

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gt_vfrag.htm

Voice Application Monitoring and Troubleshooting Enhancements

For detailed information about this feature, see the "Monitoring and Troubleshooting Voice Applications" chapter in the Cisco IOS TCL IVR and VoiceXML Application Guide.

X.25 Version Configuration

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_8/gtx25ver.htm

New Software Features Supported in Cisco IOS Release 12.3(7)T1

This section describes new and changed features in Cisco IOS Release 12.3(7)T1. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(7)T1. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

Easy VPN Client RSA Signature Support

The Easy VPN Client RSA Signature Support feature provides for the support of Rivest, Shamir, and Adelman (RSA) signatures on Easy VPN remote devices. The support is provided through RSA certificates that can be stored on or off the remote device.

New Hardware Features Supported in Cisco IOS Release 12.3(7)T

This section describes new and changed features in Cisco IOS Release 12.3(7)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(7)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

ADSL over POTS WIC with Dying Gasp Support (WIC-1ADSL-DG)

AIM-CUE

Circuit Emulation over IP (CEoIP)

Cisco 1711 and Cisco 1712 Security Access Routers

Cisco VG224 24-Port Analog Phone Gateway

Data Compression AIM for the Cisco 2600 Series Routers

IP Communications High-Density Digital Voice/Fax Network Module

Network Analysis Module (NM-NAM)

NM-8AM-V2, NM-16AM-V2

PWLAN Access Routers

Single Port Multiline G.SHDSL WIC

ADSL over POTS WIC with Dying Gasp Support (WIC-1ADSL-DG)

The ADSL over POTS WIC with dying gasp support (part number WIC-1ADSL-DG) conforms to Cisco WICs/VICs and enables ADSL services to be deployed. The WIC supports the Annex A, G.992.1 technical specifications and complies with ANSI T1.413 Issue 2. It targets the business ADSL over POTS service worldwide. The dying gasp support on this ADSL over POTS WIC supports a dying gasp message that is sent by the customer premises equipment device (for example, a Cisco 1760 access router with an installed WIC-1ADSL-DG) to the digital subscriber line access multiplier (DSLAM) when a power outage occurs (that is the WIC-1ADSL-DG supports DSLAM notification on power loss).

AIM-CUE

The AIM-CUE Advanced Integrated Module provides support for Cisco Unity Express voice mail and auto attendant for either Cisco CallManager or CallManager Express IP Communications networks. The AIM-CUE is supported on the Cisco 2600XM, Cisco 2691 and Cisco 3700 Series voice gateway routers on an AIM form factor. For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis2600/hw_inst/aim_inst/aims_ins.htm

Circuit Emulation over IP (CEoIP)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/bbfeamod.htm

Cisco 1711 and Cisco 1712 Security Access Routers

Cisco IOS Release 12.3(7)T provides support for the Cisco 1711 and Cisco 1712 Security Access routers. The Cisco 1711 and Cisco 1712 are fixed configuration routers that provide secure Internet connectivity and dial backup using the analog modem port (on the Cisco 1711) or the ISDN port (on the Cisco 1712) if your primary connection fails. These routers include an integrated 4-port 10/100-Mbps Ethernet switch in WIC slot 0, an onboard Fast Ethernet port external interface, and a Virtual Private Network (VPN) module in the router's internal slot. These ports enable you to configure a demilitarized zone (DMZ) using VLANs and Cisco IOS firewall features.

Cisco VG224 24-Port Analog Phone Gateway

Cisco VG224 is a 24-port analog phone gateway based on Cisco IOS software. The platform has 24-port FXS through an RJ-21 connector and two 10/100BaseT interfaces. Cisco VG224 is supported on CCM Release 3.2 or later. For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/access/vg/vg224/index.htm

Data Compression AIM for the Cisco 2600 Series Routers

The AIM-COMPR2-V2 provides hardware compression for up to two full duplex E1 links. Supported are the industry standard Limpel Zif Stac (LZS) and Microsoft Point-to-Point Compression (MPPC) compression algorithms over Point-to-Point Protocol (PPP) or Frame Relay. High-level Data Link Control (HDLC) is not supported.

The new AIM-COMPR2-V2 card replaces AIM-COMPR2 compression AIM for the Cisco 2600XM Series routers.

IP Communications High-Density Digital Voice/Fax Network Module

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/hdd_vfnm.htm

Network Analysis Module (NM-NAM)

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xd/nm_nam.htm

NM-8AM-V2, NM-16AM-V2

The NM-8AM-V2 and NM-16AM-V2 network modules (NMs) serve as integrated analog modem NMs for the modular access routers. These network modules terminate either eight or sixteen analog modem connections through POTS interfaces.

Hardware Specifications

Each network module consists of eight or sixteen analog modems.

Table 15 Hardware Specifications for Analog Modems: Cisco 3600 Series and Cisco 2600XM Series Routers 

Characteristic
Description

Number of supported NMs

Cisco 2610XM, 2620XM, 2650XM: 1

Cisco 2691: 1

Cisco 3660: Up to 6

Cisco 3725: Up to 2

Cisco 3745: Up to 4

Dial-related

Autosensing International Pocket Exchange (IPX), TCP/IP, AppleTalk Remote Access (ARA), AppleTalk Control Protocol (ATCP)

Serial Line Internet Protocol (SLIP), Point-to-Point Protocol (PPP), Multilink PPP (MP)

Reverse Telnet support for LAN-based dial-out

Domain Name System (DNS) Domain Name Server support

MNP 2-4 for high performance under all line conditions

Carrier protocols

ITU-T V.90

V.92 Quick Connect

ITU-T V.34bis

ITU-T V.34

ITU-T V.34+ up to 33,600 bps

ITU-T V.32bis

ITU-T V.32

ITU-T V.32 turbo up to 19,200 bps

ITU-T V.22bis (with V.54 loop back)

ITU-T V.22 A/B

ITU-T V.23 at 75/1200 bps

ITU-T V.21 at 300 bps

BELL 103, & 212a

Error-correcting link access protocols

V.42 Link Access Procedure for Modems (LAPM), MNP 2-4

Fax protocols

ITU-T V.17

ITU-T V.29

ITU-T V.27ter

ITU-T V.21 channel 2

EIA 578 Class 2 Fax

Group 3 Class 1 and Class 2 Fax

Compression protocols

V.42bis (includes MNP 5)

Cables

16 RJ-11 connectors


PWLAN Access Routers

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xd/pwlanar.htm

Single Port Multiline G.SHDSL WIC

A single port multi line G.SHDSL WAN interface card (WIC), or WIC-1SHDSL-V2, provides Multirate Symmetrical High-Speed Digital Subscriber Line (G.SHDSL) feature support for Two-Wire Mode and Four-Wire Mode for SHDSL on the Cisco 2600XM series, Cisco 2691, Cisco 3600 series, and Cisco 3700 series modular access routers. The WIC-1SHDSL-V2 incorporates the latest firmware and the latest circuitry.

New Software Features Supported in Cisco IOS Release 12.3(7)T

This section describes new and changed features in Cisco IOS Release 12.3(7)T. Some features may be new to Cisco IOS Release 12.3T but were released in earlier Cisco IOS software releases. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS Release 12.3(7)T. To determine if a feature is new or changed, see the feature history table at the beginning of the feature module for that feature. Links to feature modules are included below. If a feature listed below does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided below.

AAA Double Authentication Secured by Absolute Timeout

ACL—Named ACL Support for Noncontiguous Ports on an Access Control Entry

Analog Centralized Automatic Message Accounting (CAMA) E911 Trunk

Attribute Screening for Access Requests

AutoQoS for the Enterprise

AutoSecure

BGP MIB Support Enhancements

BGP Support for TTL Security Check

Call Routing Enhancements to the H.323 Gatekeeper and GKTMP (GK API)

Cisco CallManager Express 3.1

Cisco IOS IPv6 Configuration Library

Cisco NM-8AM-V2 and NM-16AM-V2 Analog Modem Network Modules with V.92

Cisco VG224 24-Port Analog Phone Gateway

Class-Based Quality of Service (QoS) MIB (CBQoSMIB) Enhancements III

CLNS Support for GRE Tunneling of IPv4 and IPv6 Packets

Control Plane Policing

Distributed Dial-on-Demand Routing

Easy VPN Server

Enhanced ITU-T G.168 Echo Cancellation

ESMTP Support for Cisco IOS Firewall

Extended ACL Support for IGMP to Support SSM in IPv4

Four-Wire Mode for SHDSL

IEEE 802.1Q Tunneling

Interoperability Enhancements to the Cisco Multiservice IP-IP Gateway

IP Source Tracker

IPSec Dead Peer Detection Periodic Message Option

IS-IS Caching of Redistributed Routes

IS-IS Fast-Flooding of LSPs Using the fast flood Command

Key Rollover for Certificate Renewal

Lossless Compression R1, ATM Cell Switching, External BITS Clocking Source

Mobile IP—Foreign Agent Local Routing to Mobile Networks

Mobile IP—Generic Routing Encapsulation for Cisco Mobile Networks

Modem Calls over QSIG

MPLS VPN VRF Selection Using Policy Based Routing

Multicast Fast Switching Performance Improvement

NAT RTSP Support Using NBAR

NAT Stateful Failover for Asymmetric Outside-to-Inside Support

NAT Stateful Failover for Application Layer Gateway (ALG) Support

NAT—Static IP

NetFlow MIB

New Features in Cisco CallManager

OSPF Area Transit Capability

OSPF Link State Database Overload Protection

OSPF per-Interface Link-Local Signaling

Per VRF for TACACS+ Servers

PKI: Query Multiple Servers During Certificate Revocation Check

PPP/MLP MRRU Negotiation Configuration

Protected Private Key Storage

Query Mode Definition Per Trustpoint

RADIUS Attribute 104

RADIUS NAS-IP-Address Configurability

Rate Based Satellite Control Protocol

Role-Based CLI Access

Route Processor Redundancy Plus (RPR+)

SEAL Encryption

Secure Shell (SSH) Version 2 Client Support

Signal ISDN B-Channel ID to Enable Application Control of Voice Gateway Trunks

SSG Default DNS Redirection

SSG Enhancements to SSG-SESM Interaction and Service Logon

SSG Permanent TCP Redirection

SSG TCP Redirect Access Control Lists

SSG Transparent Autologon

Survivable Remote Site Telephony 3.1

T.37 Fax Status Notification Enhancement in an MTA Environment

TCP Congestion Avoidance

TCP Explicit Congestion Notification

Transparent Cisco IOS Firewall

Troubleshooting Enhancements for Multilink PPP over ATM Link Fragmentation and Interleaving

Two-Wire Mode over SHDSL

VoiceXML Store and Forward

VPN Access Control Using 802.1x Authentication

VRF Aware Dialer Watch

AAA Double Authentication Secured by Absolute Timeout

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt_dasat.htm

ACL—Named ACL Support for Noncontiguous Ports on an Access Control Entry

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtaclace.htm

Analog Centralized Automatic Message Accounting (CAMA) E911 Trunk

The Cisco 1751 and Cisco 1760 routers now support analog centralized automatic message accounting (CAMA) trunks on the two- and four-port Foreign Exchange Office (FXO) cards. The VIC2-2FXO and VIC2-4FXO cards are now user configurable for CAMA mode operation on a port-by-port basis. For example, on the VIC2-2FXO card, Port 0 can be configured for CAMA, and Port 1 can be configured for FXO-M1 operation.

Usage of the CAMA feature offers the following benefits:

Direct connection to the E911 network

Meets current legislation requiring enterprises to connect directly to the E911 network

Trunk capabilities to emergency services that are not currently supported on any Cisco product

Configuration on H.323 Voice over IP (VoIP)

Attribute Screening for Access Requests

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123b/123b3/gt_asfar.htm

AutoQoS for the Enterprise

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/ftautoq2.htm

AutoSecure

AutoSecure is an innovative Cisco IOS software CLI-based feature that provides "one touch" router lockdown. A single command instantly and easily transforms the security posture of routers by disabling nonessential operating system processes, enforcing secure access, and enabling secure forwarding features.

By using a single auto secure command line interface command, the AutoSecure feature allows a user to perform the following functions:

Disable common IP services that can be exploited for network attacks

Enable IP services and features that can aid in the defense of a network when under attack

The AutoSecure feature offers the following benefits:

Simplified router security configuration

Hardened router configuration

Enhanced password security

For information on how to configure the AutoSecure feature on your Cisco router, see the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123_1/ftatosec.htm

BGP MIB Support Enhancements

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/gt_bmibe.htm

BGP Support for TTL Security Check

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gt_bmibe.htm

Call Routing Enhancements to the H.323 Gatekeeper and GKTMP (GK API)

These features improve routing flexibility in customer networks in which an external route server is used to select potential endpoints for call completion.

Nonblocking GKTMP (GK API): Timing changes associated with recovery processing when socket errors occur.

Separate DNIS for Alternate Endpoints: It is now possible to associate a unique DNIS with each alternate endpoint.

Support for "z" Tag in RESPONSE xRQ: Enhances the responses that a route server can provide to the H.323 gatekeeper to allow greater flexibility for combinations of gateway endpoints and gatekeepers.

Cisco CallManager Express 3.1

For detailed information about this feature, see the following document:

http://www.cisco.com/univercd/cc/td/doc/product/access/ip_ph/ip_ks/cme31/index.htm

Cisco IOS IPv6 Configuration Library

The following new features have been added to the Cisco IOS IP