Guest

Cisco IOS XE Software

Release Notes for Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Release 2

Table Of Contents

Release Notes for Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Release 2

Contents

Introduction

System Requirements

Software Packaging on the Cisco ASR 1000 Series Routers

RP Memory Recommendations

Hardware Supported

ROMmon Version Requirements

Determining the Software Version

Cisco IOS XE to Cisco IOS Version Number Mapping

Upgrading to a New Software Release

New and Changed Information

New Hardware Features in Cisco IOS XE Release 2.4.0

Cisco ASR 1002-Fixed Router

New Shared Port Adapters

New Software Features in Cisco IOS XE Release 2.4.0

3 Level Egress QoS Policy

802.1P CoS Bit Set for PPP and PPPoE Control Frames

AAA Interim Accounting

ACL—Template ACL/12 Bit ACE

ANCP (Access Node Control Protocol)

ANCP Phase 2.5

Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS)

Any Transport over MPLS (AToM): Ethernet over MPLS: Port Mode (EoMPLS)

Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown

Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute

Asynchronous Rotary Line Queuing

Byte-Based Weighted Random Early Detection

Cache Control Enhancements for Certification Revocation Lists

Certificate—Complete Chain Validation

Cisco IOS SHA2 Support

Cisco Unified Border Element (SP Edition)

Class-Based QoS MIB (CBQoSMIB) Enhancements

CoA—Multi-Service Activation/Deactivation in Single mMessage

Connect-info RADIUS Attribute 77—Configurable ASCII String

DHCP Server Radius Proxy

Enabling ISG to Interact with External Policy Servers

Etherchannel Flow Based Limited 1:1 Redundancy

Ethernet Overhead Accounting

Firewall—NetMeeting Directory (LDAP) ALG Support

Firewall—SIP ALG—Extended Methods

H.323 RAS Support in IOS Firewall

IEEE 802.1Q Tunneling (QinQ) for AToM

IEEE 802.3ad Link Aggregation (LACP)

Integrated Session Border Controller

Interactive OAM and Scaling Improvements

IP over IPv6 Tunnels

IPsec Usability Enhancements

IPv6 Multicast: Bootstrap Router (BSR)

IPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping

IPv6 Multicast: IPv6 BSR Bidirectional Support

IPv6 Multicast: PIM Sparse Mode (PIM-SM)

IPv6 Multicast: Routable Address Hello Option

ISG: Accounting: Per-Service Accounting

ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message

ISG: Policy Control: Policy Server: RADIUS-Based Policing

L2TP Forwarding of PPPoE Tag Information

L2VPN Interworking—Ethernet to VLAN Interworking

L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires

L2VPN Pseudowire Switching

Lawful Intercept

Layer 2 VPN (L2 VPN): Syslog, SNMP Trap, and show Command Enhancements for AToM and L2TPv3

MCP GEC with QoS on memberlink

Modified LNS Dead-Cache Handling

MQC—Traffic Shaping Overhead Accounting for ATM

NAT—NetMeeting Directory (LDAP) ALG Support

NAT SCCP Video Support

NAT—SIP ALG - Extended Methods

NAT Support of H.323v2 RAS

NSF/SSO—Ethernet to Ethernet VLAN Interworking

OCSP—Server Certification from Alternate Hierarchy

Parameterization for ACL and Layer 4 Redirect

Parameterization of QoS ACL

Per Subinterface MTU for Ethernet over MPLS (EoMPLS)

PKI—CLI to Control Certificate Revocation List (CRL) Cache

PPPoE Service Selection

PPPoE Session Limit

PPPoE Smart Server Selection

PPPoE VLAN Session Throttling

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services

QoS: CBQoSMIB Index Enhancements

RADIUS-Based Lawful Intercept

RADIUS-Based Policing Attribute Modifications

RADIUS—CLI to Prevent Sending of Access Request with Blank Username

RSA 4096-Bit Key Generation in Software Crypto Engine Support

SCCP for Video

SSHv2 Enhancements

VLAN ID Rewrite

VPDN LNS Address Checking

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

VRF Aware LI (Lawful Intercept)

New Hardware Features in Cisco IOS XE Release 2.3.1

New Software Features in Cisco IOS XE Release 2.3.1

New Hardware Features in Cisco IOS XE Release 2.3.0

New Cisco ASR 1000 Route Processor

New Shared Port Adapters

New Software Features in Cisco IOS XE Release 2.3.0

Any Transport Over MPLS (AToM): ATM Cell Relay Over MPLS: VP Mode

Any Transport over MPLS (AToM): Graceful Restart

Any Transport Over MPLS (AToM): Layer 2 QoS (Quality of Service)

Any Transport Over MPLS (AToM): Single Cell Relay - VC Mode (CRoMPLS)

ATM Conditional debug/show Commands

ATM MIB Enhancements

ATM OAM Ping

ATM OAM Traffic Reduction

ATM PVC F5 OAM Recovery Traps

ATM PVC Trap Enhancements for Segment and AIS/RDI Failures

ATM PVC Trap Support

ATM SNMP Trap and OAM Enhancements

ATM VC Class Support

ATM VP Average Traffic Rate

AToM Tunnel Selection

Auto Secure Manageability

Basic ATM Support of RFC1483

BGP Support for 4-Byte ASN

Cell-Based ATM Shaping per PVP

Consistent and User-Selectable Fail/Open and Fail/Close Operation

Control Plane Policing—Time Based

DHCP Client

DHCP Relay—MPLS VPN Support

Enhanced ATM VC Configuration and Management

Explicit Passive Mode CLI Support

GET VPN Phase 1.2

Group Encrypted Transport VPN (GET VPN)

Integrated Session Border Controller

IPv6 Bidirectional PIM

IPv6 Multicast: Address Family Support for Multiprotocol BGP

IPv6 Source Specific Multicast (SSM) Mapping

ISSU—ATM

ISSU—AToM ATM Attachment Circuit

ISSU—MPLS Traffic Engineering (TE)—Path Protection

L2VPN PW Preferential Forwarding (Active/Standby Status)

L2VPN PW Redundancy—ATM Attachment Circuits

LSP Ping for FEC129 (via VCCV)—RFC4379

MPLS EM—LSP Ping/Trace for LDP & RSVP IPv4 FECs

MPLS EM—MPLS FRR MIB (IETF draft v01)

MPLS EM—MPLS Multipath (ECMP) LSP Tree Trace

MPLS EM—MPLS TE MIB (IETF draft v05)

MPLS LSP Ping/Traceroute and AToM VCCV

MPLS Pseudowire Status Signaling

MPLS Support for Multi-Segment PWs—MPLS OAM/VCCV

MPLS TE—BFD-Triggered Fast Reroute (FRR)

MPLS TE—Fast Tunnel Interface Down Detection

MPLS TE—Node Protection Desired Bit

MPLS Traffic Engineering Forwarding Adjacency

MPLS Traffic Engineering—Policy Routing onto MPLS TE Tunnels

MPLS Traffic Engineering (TE)

MPLS Traffic Engineering (TE)—Configurable Path Calculation Metric for Tunnels

MPLS Traffic Engineering (TE)—Fast Reroute (FRR) Link and Node Protection

MPLS Traffic Engineering (TE)—IP Explicit Address Exclusion

MPLS Traffic Engineering (TE)—LSP Attributes

MPLS Traffic Engineering (TE)—Path Protection

MPLS Traffic Engineering (TE)—RSVP Graceful Restart

MPLS Traffic Engineering (TE)—RSVP Hello State Timer

MPLS Traffic Engineering (TE): Verbatim Path Support

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

NBAR Protocols

NSF/SSO—AToM ATM Attachment Circuit

NSF/SSO—MPLS TE and RSVP Graceful Restart

NSF/SSO—MPLS Traffic Engineering (TE)—Path Protection

Operation, Administration, and Maintenance (OAM) F4 and F5

Per-VC Queueing for ATM

PPP—Max-Payload and IWF PPPoE Tag Support

PPPoE Agent Remote ID and DSL Line Characteristics Enhancement

PPPoE Circuit-ID Tag Processing

PPPoE Relay

PPPoE—Session Limiting on Inner QinQ VLAN

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, FR, and ATM Services

QoS: Match ATM CLP

QoS-per-VC QoS Classification for ATM VP Pseudowires

QoS Priority Percentage CLI Support

Quality of Service: Policies Aggregation

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

RSVP Refresh Reduction and Reliable Messaging

RSVP—Resource Reservation Protocol

SSO—ATM

New Hardware Features in Cisco IOS XE Release 2.2.3

New Software Features in Cisco IOS XE Release 2.2.3

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

MPLS VPN Carrier Supporting Carrier with BGP

MPLS VPN—eBGP Multipath Support for CSC and InterAS MPLS VPNs

MPLS VPN—Load Balancing Support for Inter-AS and CSC VPNs

New Hardware Features in Cisco IOS XE Release 2.2.2

New Software Features in Cisco IOS XE Release 2.2.2

New Hardware Features in Cisco IOS XE Release 2.2.1

New Cisco ASR 1000 Embedded Services Processors

New Shared Port Adapters

New Software Features in Cisco IOS XE Release 2.2.1

AAA Broadcast Accounting

Bidirectional PIM

Cisco Firewall and WAAS Inter-Op

Class-Based Marking

Class Based Weighted Fair Queuing (CBWFQ)

Control Plane Policing (CoPP)

Diffie-Hellman Group Support in IPSec

FPM—Flexible Packet Matching

GRE Tunnel IP Source and Destination VRF Membership

Integrated Session Border Controller

IP SLAs—LSP Health Monitor

IP SLAs—LSP Health Monitor with LSP Discovery

IP SLAs—MPLS VPN Awareness

IPv6 QoS: MQC Packet Classification

IPv6 Routing—EIGRP Support

ISG: Accounting: Per Session, Service and Flow

ISG: Accounting: Postpaid

ISG: Accounting: Tariff Switching

ISG: Authentication: DHCP Option 82 Line ID - AAA Authorization Support

ISG:Flow Control: Flow Redirect (L4, Captive Portal)

ISG: Flow Control: QoS Control: Dynamic Rate Limiting (QU;QD)

ISG: Flow Control: QoS Control: MQC Support for IP Sessions

ISG: Instrumentation: Advanced Conditional Debugging

ISG: Instrumentation: Session and Flow Monitoring (Local and External)

ISG: Network Interface: IP Routed, VRF Aware MPLS

ISG: Network Interface: Tunneled (L2TP)

ISG: Policy Control: Cisco Policy Language

ISG: Policy Control: DHCP Proxy

ISG: Policy Control: ISG-SCE Control Bus

ISG: Policy Control: Multidimensional Identity per Session

ISG: Policy Control: Policy: Domain Based (Auto-Domain, Proxy)

ISG: Policy Control: Policy Server: CoA ASCII Command Code Support

ISG: Policy Control: Policy Server: CoA (QoS, L4 Redirect, User ACL, TimeOut)

ISG: Policy Control: Policy Server: SSG-SESM Protocol

ISG: Policy Control: Policy: Triggers (Time, Volume, Duration)

ISG: Policy Control: RADIUS Proxy Enhancement

ISG: Policy Control: Service Profiles

ISG: Policy Control: User Profiles

ISG: Session: Auth: Single Sign On

ISG: Session: Authentication (MAC, IP, EAP)

ISG: Session: Creation: IP Session: Protocol Event (DHCP, RADIUS)

ISG: Session: Creation: IP Session: Subnet and Source IP: L2

ISG: Session: Creation: IP Session: Subnet and Source IP: L3

ISG: Session: Creation: P2P Session (PPPoE, PPPoXoX)

ISG: Session: LifeCycle: Idle Timeout

ISG: Session: LifeCycle: POD

ISG: Session: Multi-Service Creation and Flow Control

ISG: Session: Protection and Resiliency: Keepalive—ARP, ICMP

ISG: Session: VRF Transfer

L2TP AAA Accounting Include NAS-PORT (VPI/VCI)

L2TP HA Session SSO/ISSU on LAC/LNS

L3 MPLS VPN Over GRE

MPLS LDP— VRF Aware Static Labels

MPLS VPN—Per VRF Label

MPLS VPN: VRF Selection Using Policy Based Routing

Multihop VPDN

Multi-VRF Selection Using Policy Based Routing (PBR)

NAT—Routemaps Outside-to-Inside Support

Packet Classification Based on Layer3 Packet-Length

PBR Support for Multiple Tracking Options

Per Subscriber Firewall on LNS

Policy-Based Routing (PBR)

Policy-Based Routing (PBR) Default Next-Hop Route

Policy Based Routing: Recursive Next Hop

Policy Routing Infrastructure

PPPoE—QinQ Support

QoS—Hierarchical Queuing for Ethernet DSLAMs

RADIUS Route Download

Remote Access to MPLS-VPNs

SGI Interface

VRF Aware System Message Logging (Syslog)

VRF-Aware VPDN Tunnels

WCCP L2 Return

WCCP Layer 2 Redirection / Forwarding

WCCP Mask Assignment

WCCP Redirection on Inbound Interfaces

WCCP Version 2

New Hardware Features in Cisco IOS XE Release 2.1.2

New Software Features in Cisco IOS XE Release 2.1.2

New Hardware Features in Cisco IOS XE Release 2.1.1

New Software Features in Cisco IOS XE Release 2.1.1

New Hardware Features in Cisco IOS XE Release 2.1.0

Cisco ASR 1002 Router

Cisco ASR 1004 Router

Cisco ASR 1006 Router

Cisco ASR 1000 Embedded Services Processors

Cisco ASR 1000 Route Processor 1

Cisco ASR 1000 SPA Interface Processor

Shared Port Adapters

1GB USB Flash Token for Cisco ASR 1000 Series

New Software Features in Cisco IOS XE Release 2.1.0

BFD IPv6 Encaps Support

BFD—IPv6 Static Route Support

DHCP—DHCPv6 Relay Agent Notification for Prefix Delegation

DHCP Relay Server ID Override and Link Selection Option 82 Suboptions

DHCPv6 Ethernet Remote ID Option

Integrated Session Border Controller

IPv6: Base Protocols High Availability

IPv6: NSF and Graceful Restart for MP-BGP IPv6 Address Family

IPv6: RIPng Non-Stop Forwarding

IPv6: Static Route Non-Stop Forwarding

MQC—Distribution of Remaining Bandwidth Using Ratio

PPPoE Session Limit Local Override

Quality of Service for Gigabit EtherChannels

QoS: Policies Aggregation

TCP MIB for RFC4022 Support

VLAN Mapping to GEC Member Links

Release Note Only Software Features in Cisco IOS XE Release 2.1.0

8-Way CEF Load Balancing

BGP Reduction in Transient Memory Usage

CEF Support for IP Routing Between IEEE 802.1 Q VLANs

Class-Based Quality of Service Management Information Base

Compression Control

DLR Enhancements: PGM RFC-3208 Compliance

Frame Relay FRF.1.2 Annex A Support

Interfaces MIB: SNMP Context Based Access

ISSU - IGMP Snooping

NAT—Performance Enhancement - Translation Table Optimization

Parse Bookmarks

PPPoE Over Gigabit Ethernet Interface

RADIUS Attribute 52 and 53 Gigaword Support

RADIUS Attribute 77 for DSL

Selective Packet Discard (SPD)

TCP MIB for RFC4022 Support

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

MIBs

Limitations and Restrictions

Limitations and Restrictions in Cisco IOS XE Release 2.3.0

User-Defined Parent Class Limitation (for Hierarchical QoS)

User-Defined Parent Class Limitation (for Conditional Policer)

Tunnel Protection+ Priority Queuing Limitation

Deny ACL Limitation for GET VPN

Limitation on Use of Deny Statements in QoS Classification

Limitations and Restrictions in Cisco IOS XE Release 2.2.3

DMVPN Limitation

Scaling Limits for MLP

Limitations and Restrictions in Cisco IOS XE Release 2.2.1

Cisco Firewall and WAAS Inter-Op Limitations and Restrictions

Control Plane Policing (CoPP) Limitations and Restrictions

Flexible Packet Matching (FPM) Limitations and Restrictions

L2TP AAA Accounting Include NAS-PORT (VPI/VCI) Limitation

Limitations and Restrictions in Cisco IOS XE Release 2.1.1

Maximum Number of Broadband Tunnels Limitation

Maximum Number of IPSec Tunnels Limitation

Limitations and Restrictions in Cisco IOS XE Release 2.1.0

Conditional Policing Feature of QoS Limitation

IPSec Anti-Replay Window Size Limitation

Maximum Number of IPSec Tunnels Limitation

NBAR Protocol Support Limitation

Police Command Limitation

Scaling Limits for MLP

Important Notes

Deferrals

Field Notices and Bulletins

Important Notes About IPSec Support on the Cisco ASR 1000 Series Router

NAT and Firewall ALG Support on Cisco ASR 1000 Series Routers

Important Notes in Cisco IOS XE Release 2.3.0

Any Transport Over MPLS (AToM) Support

MPLS TE Support

Important Notes in Cisco IOS XE Release 2.2.2

SSO for L2TP Tunnel Switching Not Supported

Important Notes in Cisco IOS XE Release 2.2.1

100M FX SFP Not Supported on Cisco 2-Port Gigabit Ethernet Shared Port Adapter

Intelligent Service Gateway (ISG) Features Not Supported

Per-Session Multicast Support

Important Notes in Cisco IOS XE Release 2.1.1

Startup Configuration File Backup

Important Notes in Cisco IOS XE Release 2.1.0

High Level Feature Sets Not Supported for the Cisco ASR 1000 Series Routers

Caveats for Cisco IOS XE Release 2

Open Caveats—Cisco IOS XE Release 2.4.0

Open Caveats—Cisco IOS XE Release 2.3.1

Resolved Caveats—Cisco IOS XE Release 2.3.1

Open Caveats—Cisco IOS XE Release 2.3.0

Resolved Caveats—Cisco IOS XE Release 2.3.0

Open Caveats—Cisco IOS XE Release 2.2.3

Resolved Caveats—Cisco IOS XE Release 2.2.3

Open Caveats—Cisco IOS XE Release 2.2.2

Resolved Caveats—Cisco IOS XE Release 2.2.2

Open Caveats—Cisco IOS XE Release 2.2.1

Resolved Caveats—Cisco IOS XE Release 2.2.1

Open Caveats—Cisco IOS XE Release 2.1.2

Resolved Caveats—Cisco IOS XE Release 2.1.2

Open Caveats—Cisco IOS XE Release 2.1.1

Resolved Caveats—Cisco IOS XE Release 2.1.1

Open Caveats—Cisco IOS XE Release 2.1.0

Related Documentation

Platform-Specific Documents

Cisco Feature Navigator

Error Message Documentation for Cisco IOS XE Release 2

Cisco IOS XE Software Documentation Set

Open Source License Notices

OpenSSL/Open SSL Project

License Issues

Obtaining Documentation and Submitting a Service Request


Release Notes for Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Release 2


June 30, 2009

Cisco IOS XE Release 2.4.0

OL-16576-09

These release notes for the Cisco ASR 1000 Series Aggregation Services Routers support Cisco IOS XE Release 2.4.0. These release notes are updated as needed to describe new features, caveats, potential software deferrals, and related documents.

For a list of the software caveats that apply to Cisco IOS XE Release 2, see the "Caveats for Cisco IOS XE Release 2" section.

Cisco recommends that you view the field notices for this release to see if your software or hardware platforms are affected. If you have an account on Cisco.com, you can find field notices at http://www.cisco.com/en/US/customer/support/tsd_products_field_notice_summary.html. If you do not have a Cisco.com login account, you can find field notices at http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html.

Contents

These release notes describe the following topics:

Introduction

System Requirements

New and Changed Information

MIBs

Limitations and Restrictions

Important Notes

Caveats for Cisco IOS XE Release 2

Related Documentation

Open Source License Notices

Obtaining Documentation and Submitting a Service Request

Introduction

The Cisco ASR 1000 Series Aggregation Services Routers are the next generation Cisco midrange router products. The Cisco ASR 1000 Series Aggregation Services Routers use an innovative and powerful hardware processor technology known as the Cisco QuantumFlow Processor. The Cisco ASR 1000 Series Routers consist of three different routers: the Cisco ASR 1002 Router, the Cisco ASR 1004 Router, and the Cisco ASR 1006 Router.

The Cisco ASR 1002 Router is a 3-SPA, 2-rack-unit (RU) chassis with one Embedded Services Processor (ESP) slot that comes with the Route Processor (RP), Cisco ASR 1000 Series Shared Port Adapter Interface Processor (SIP), and four Gigabit Ethernet ports built in.

The Cisco ASR 1004 Router is an 8-SPA, 4-RU chassis with one ESP slot, one RP slot, and two SIP slots.

The Cisco ASR 1006 Router is a 12-SPA, 6-rack-unit (RU), hardware-redundant chassis with two Embedded Services Processor (ESP) slots, two Route Processor (RP) slots, and three SIP slots.

For the single-route-processor Cisco ASR 1000 platforms, the Cisco ASR 1002 and Cisco ASR 1004, the Route Processor has a dual Cisco IOS Software option that allows these routers to use Cisco IOS software redundancy, Cisco high-availability features, Nonstop Forwarding (NSF), and In Service Software Upgrades (ISSUs). This option requires the Cisco ASR 1000 Series Route Processor to have 4 GB of DRAM memory.

The Cisco ASR 1006 Router supports fully redundant Route Processors that allow for full Route-Processor hardware redundancy, NSF, ISSU, and future Route-Processor service upgrades.

The Cisco ASR 1000 Series Routers run Cisco IOS XE Software and introduce a distributed software architecture that moves many operating system responsibilities out of the IOS process. In this architecture, Cisco IOS, which previously was responsible for almost all of the internal software processes, now runs as one of many Cisco IOS XE processes while allowing other Cisco IOS XE processes to share responsibility for running the router.

One of the key features of the Cisco IOS XE Software is support for dual Cisco IOS software consolidated packages in a single Route Processor for software redundancy in the 2-RU and 4-RU chassis systems. These dual Cisco IOS consolidated packages can consist of the same software consolidated packages for backup or different software consolidated packages for resilient upgrade.


Note Software redundancy is not supported on the 6-RU chassis.


The Cisco ASR 1000 Series Routers target both enterprise and service provider applications and provide application-specific features for broadband subscriber aggregation and network application services with improved processing performance and high availability.

For information on new features and Cisco IOS commands supported by Cisco IOS XE Release 2, see the "New and Changed Information" section and the "Related Documentation" section.

System Requirements

This section describes the system requirements for Cisco IOS XE Release 2 and includes the following sections:

Software Packaging on the Cisco ASR 1000 Series Routers

RP Memory Recommendations

Hardware Supported

ROMmon Version Requirements

Determining the Software Version

Upgrading to a New Software Release

Cisco IOS XE to Cisco IOS Version Number Mapping

Software Packaging on the Cisco ASR 1000 Series Routers

The Cisco ASR 1000 Series Routers run Cisco IOS XE Software and use a new software packaging model consisting of:

Consolidated packages

Individual software sub-packages within a consolidated package

Optional software sub-packages outside of consolidated packages

Each Cisco IOS XE consolidated package contains a collection of individual software sub-packages. Each individual software sub-package is an individual software file that controls a different element or elements of the Cisco ASR 1000 Series Router. Some individual sub-packages may be installed per element (for example, per SPA).


Note The sub-package functionality is intended for both upgrade and field support, and not all combinations of sub-packages are supported.


Each individual software sub-package can be upgraded individually, or all individual software sub-packages for a specific Cisco IOS XE consolidated package can be upgraded as part of a complete Cisco IOS XE consolidated package upgrade.

Importantly, IOS (the RPIOS individual software sub-package) is considered one of the individual software sub-packages that makes up the complete Cisco IOS XE consolidated package.

The following are the individual software sub-packages within a consolidated package:

Route Processor

RPBase: Provides the Route-Processor operating system.

RPControl: Provides the control-plane processes that interface between Cisco IOS Software and the rest of the platform.

RPIOS: Provides the Cisco IOS Software kernel, which is where Cisco IOS Software features are stored and run; each consolidated image variant has a different RPIOS sub-package: RPIOS-ipbase, RPIOS-ipbasek9, RPIOS-advipservices, RPIOS-advipservicesk9, RPIOS-adventservices, and RPIOS-adventservicesk9.


Note The RPIOS-advipservices and RPIOS-adventservices sub-packages are only available beginning with Cisco IOS XE Release 2.2.1 and later releases. These two sub-packages are not available with Cisco IOS XE Release 2.1.2 and earlier releases.


RPAccess: Provides components to manage enhanced router access functionality.

ESP

ESPBase: Provides the ESP operating system and control processes, and the Cisco QuantumFlow Processor client, driver, and ucode.

SIP

SIPBase: Provides the SIP operating system and control processes

SIPSPA: Provides the SPA drivers and associated field-programmable device (FPD) image (SPA FPGA image)

A Cisco IOS XE consolidated package allows users to upgrade all individual software sub-packages on the router with a single Cisco IOS XE image download. The Cisco IOS XE consolidated packages available vary based on the Route Processor (RP1 or RP2) installed in the system and the Cisco IOS XE Release.

The following are the RP1 consolidated packages:

Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO

Cisco ASR 1000 Series RP1 IP BASE

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO


Note The Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.2.1 through Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.

The Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO consolidated package is only available beginning with Cisco IOS XE Release 2.2.1 and later releases. This consolidated package is not available with Cisco IOS XE Release 2.1.2 and earlier releases.


The following are the RP2 consolidated packages:

Cisco ASR 1000 Series RP2 IP BASE W/O CRYPTO

Cisco ASR 1000 Series RP2 IP BASE

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES W/O CRYPTO


Note The RP2 consolidated packages are only available beginning with Cisco IOS XE Release 2.3.0 and later releases. The RP2 consolidated packages are not available with Cisco IOS XE Release 2.2.3 and earlier releases.

The Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.3.0 through Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.


The individual software sub-packages within the consolidated packages cannot be downloaded from Cisco.com; only the Cisco IOS XE consolidated packages and optional sub-packages can be downloaded from Cisco.com. Users who want to run the router using individual software sub-packages must first download the consolidated package from Cisco.com and extract the individual software sub-packages from the consolidated package.

In addition to the individual software sub-packages within a consolidated package, optional software sub-packages that are not part of a consolidated package are available. Optional software sub-packages are downloaded separately from Cisco.com and their installation is similar to the installation of an individual software sub-package using a provisioning file. The optional sub-package must be located in the same directory with the provisioning file and the other individual sub-package files. The optional software sub-packages available vary based on the Route Processor (RP) installed in the system: RP1 or RP2:

For the RP1, the optional software sub-package available is the Cisco ASR 1000 Series RP1 WebEx Node (asr1000rp1-sipspawmak9.version.pkg)

For the RP2, the optional software sub-package available is the Cisco ASR 1000 Series RP2 WebEx Node (asr1000rp2-sipspawmak9.version.pkg)


Note The Cisco ASR 1000 Series RP1 WebEx Node and Cisco ASR 1000 Series RP2 WebEx Node optional software sub-packages are only available beginning with Cisco IOS XE Release 2.4.0 and later releases and are only supported in conjunction with a related RP-based Cisco ASR 1000 Series RPx IP BASE, Cisco ASR 1000 Series RPx ADVANCED IP SERVICES, or Cisco ASR 1000 Series RPx ADVANCED ENTERPRISE SERVICES consolidated package. These optional software sub-packages are not supported with earlier Cisco IOS XE releases or with any of the non-CRYPTO consolidated packages.



Note ISSU operation on the Cisco ASR 1002 and Cisco ASR 1004 systems requires the system to be operating in sub-package mode.



Note USB (or any other removable media) cannot be used to boot the system into sub-package mode.


For further information on the advantages and disadvantages of running individual sub-packages or a complete Cisco IOS XE consolidated package, and the process of extracting the individual sub-packages, see the following document:

Cisco ASR 1000 Series Aggregation Services Router Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/chassis/asrswcfg.html

RP Memory Recommendations

The Cisco IOS XE images and packages available vary based on the Route Processor (RP) installed in the system: RP1 or RP2.

Table 1 describes the RP1 consolidated package images, their individual software sub-package contents, and their memory recommendations.

Table 3 describes the RP1 optional sub-package images and their memory recommendations.

Table 3 describes the RP2 consolidated package images, their individual software sub-package contents, and their memory recommendations.

Table 4 describes the RP2 optional sub-package images and their memory recommendations.

Each Cisco IOS XE image also contains two provisioning files: asr1000rpx-packages.image.version.conf and packages.conf. A provisioning file is used for booting only in cases where the individual modules are extracted from the Cisco IOS XE image and then used to run the router. Either provisioning file can be used.


Note No In Service Software Upgrade (ISSU) is possible between different image types.


Table 1 RP1 Memory Recommendations for the Cisco ASR 1000 Series Routers Consolidated Package Images 

Platforms
Image Name
Software Image
Individual Sub-Package Contents
DRAM
Memory
Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO

asr1000rp1-ipbase.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-ipbase.version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-ipbase.version.
conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 IP BASE

asr1000rp1-ipbasek9.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-ipbasek9.version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-ipbasek9.version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO1

asr1000rp1-advipservices.version.
bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-advipservices.
version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-advipservices.
version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES

asr1000rp1-advipservicesk9.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-ipbasek9.version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-advipservicesk9.
version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO2

asr1000rp1-adventservices.version.
bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-adventservices.
version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-adventservices.
version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES

asr1000rp1-adventservicesk9.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-adventservicesk9.
version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-adventservicesk9.
version.conf

packages.conf

1 The Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.2.1 through Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.

2 The Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO consolidated package is only available beginning with Cisco IOS XE Release 2.2.1 and later releases. This consolidated package is not available with Cisco IOS XE Release 2.1.2 and earlier releases.


Table 2 RP1 Memory Recommendations for the Cisco ASR 1000 Series Routers Optional Sub-package Image 

Platforms
Image Name
Software Image
Flash Memory
Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 WebEx Node1

asr1000rp1-sipspawmak9.version.XND.pkg

100MB

1 The Cisco ASR 1000 Series RP1 WebEx Node (asr1000rp1-sipspawmak9.version.pkg) optional software sub-package is only available beginning with Cisco IOS XE Release 2.4.0 and later releases and only supported in conjunction with the Cisco ASR 1000 Series RP1 IP BASE, Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES, or Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES consolidated package. This sub-package is not supported with earlier Cisco IOS XE releases or with any of the non-CRYPTO consolidated packages.



Note The RP2 images are available beginning with Cisco IOS XE Release 2.3.0.


Table 3 RP2 Memory Recommendations for the Cisco ASR 1000 Series Routers Consolidated Package Images 

Platforms
Image Name
Software Image
Individual Sub-Package Contents
DRAM
Memory
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 IP BASE W/O CRYPTO

asr1000rp2-ipbase.version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-ipbase.version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-ipbase.version.
conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 IP BASE

asr1000rp2-ipbasek9.version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-ipbasek9.version. pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-ipbasek9.version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO1

asr1000rp2-advipservices.version.
bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-advipservices.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-advipservices.
version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES

asr1000rp2-advipservicesk9.
version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-advipservicesk9.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-advipservicesk9.
version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES W/O CRYPTO

asr1000rp2-adventservices.version.
bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-adventservices.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-adventservices.
version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES

asr1000rp2-adventservicesk9.
version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-adventservicesk9.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-adventservicesk9.
version.conf

packages.conf

1 The Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.3.0 through the Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.


Table 4 RP2 Memory Recommendations for the Cisco ASR 1000 Series Routers Optional Sub-package Image 

Platforms
Image Name
Software Image
Flash Memory
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 WebEx Node1

asr1000rp2-sipspawmak9.version.XND.pkg

100MB

1 The Cisco ASR 1000 Series RP2 WebEx Node (asr1000rp1-sipspawmak9.version.pkg) optional software sub-package is only available beginning with Cisco IOS XE Release 2.4.0 and later releases and only supported in conjunction with the Cisco ASR 1000 Series RP2 IP BASE, Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES, or Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES consolidated package. This sub-package is not supported with earlier Cisco IOS XE releases or with any of the non-CRYPTO consolidated packages.


Hardware Supported

Cisco IOS XE Release 2 supports the following Cisco ASR 1000 Series Routers:

Cisco ASR 1002 Router

Cisco ASR 1004 Router

Cisco ASR 1006 Router

For descriptions of the new hardware features, see the "New and Changed Information" section.

ROMmon Version Requirements

This section describes the recommended and minimum ROMmon version requirements for Cisco IOS XE Release 2.

The recommended ROMmon versions supported by the ROMmon upgradeable components for each Cisco IOS XE release are listed in the "Recommended ROMmon Versions for Cisco IOS XE Releases" subsection that follows.

The minimum ROMmon versions required to support each specific ROMmon upgradeable component are listed in Table 5.

Recommended ROMmon Versions for Cisco IOS XE Releases

The recommended ROMmon version for Cisco IOS XE Release 2.4.0 is Version 12.2(33r)XND for all ROMmon upgradeable components.


Note For customers requiring a FIPS 140-2 compliant environment, ROMmon Version 12.2(33r)XND is a required update.


The recommended ROMmon version to support the RP2 for Cisco IOS XE Release 2.3.1 is Version 12.2(33r)XNC0. The recommended ROMmon version to support the ASR1002, RP1, ESP5, ESP10, ESP10-N, ESP20, and SIP10 for Cisco IOS XE Release 2.3.1 is Version 12.2(33r)XNB.

The recommended ROMmon version to support the RP2 for Cisco IOS XE Release 2.3.0 is Version 12.2(33r)XNC0. The recommended ROMmon version to support the ASR1002, RP1, ESP5, ESP10, ESP10-N, ESP20, and SIP10 for Cisco IOS XE Release 2.3.0 is Version 12.2(33r)XNB.

The recommended ROMmon version for Cisco IOS XE Release 2.2.3 is Version 12.2(33r)XNB for all ROMmon upgradeable components.

The recommended ROMmon version for Cisco IOS XE Release 2.2.2 is Version 12.2(33r)XNB for all ROMmon upgradeable components.

The recommended ROMmon version for Cisco IOS XE Release 2.2.1 is Version 12.2(33r)XNB for all ROMmon upgradeable components.

The recommended ROMmon version supported for Cisco IOS XE Release 2.1.2 is Version 12.2(33r)XN2 for all ROMmon upgradeable components.

The recommended ROMmon version supported for Cisco IOS XE Release 2.1.1 is Version 12.2(33r)XN2 for all ROMmon upgradeable components.

The recommended ROMmon version supported for Cisco IOS XE Release 2.1.0 is Version 12.2(33r)XN2for all ROMmon upgradeable components.


Note The minimum ROMmon version supported for Cisco IOS Release 2.1.x and later releases is Version 12.2(33r)XN2. Version 12.2(33r)XN2 is required to support the Cisco ASR 1002 Router. If support is not required for the Cisco ASR 1002 Router, the minimum ROMmon version required is Version 12.2(33r)XN1.


Table 5 Minimum ROMmon Version Required to Support ROMmon Upgradeable Components

ROMmon Upgradeable Component
12.2(33r)XN2
12.2(33r)XNB
12.2(33r)XNC0
12.2(33r)XND

ASR10021

X

     

ASR1002-F2

X

     

RP1

X

     

RP2

   

X

 

ESP5

X

     

ESP10

X

     

ESP10-N

 

X

   

ESP20

 

X

   

SIP10

X

     

1 ROMmon upgradeable components on the ASR1002: integrated RP1, field-replaceable ESP, and integrated SIP10.

2 ROMmon upgradeable components on the ASR1002-F: integrated RP1, ESP, and SIP10.


Determining the Software Version

To determine the version of the Cisco IOS XE Software (consolidated package) running on your Cisco ASR 1000 Series Router, log in to the router and enter the show version EXEC command:

Router# show version

Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 
12.2(33)XND, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 29-Jun-09 17:28 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2009 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON

 Router uptime is 0 minutes
Uptime for this control processor is 2 minutes
System returned to ROM by reload at 
System image file is 
"tftp:tftpboot/asr1000rp1-adventerprisek9.02.04.00.122-33.XND.bin/vmlinux"
Last reload reason: Reload command



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco ASR1006 (RP1) processor with 1755409K/6147K bytes of memory.
2 Channelized T3 ports
1 Channelized STM-1 port
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
439807K bytes of eUSB flash at bootflash:.
39004543K bytes of SATA hard disk at harddisk:.

Configuration register is 0x2102

To determine the version of the individual sub-packages running on your Cisco ASR 1000 Series Router, log in to the router and enter the show version installed command in User EXEC, Privileged EXEC or Diagnostic mode.


Note The checksums in the show version installed output that follows are for example purposes only; the checksum values that appear in your output may vary.


Router# show version installed

Package: Provisioning File, version: n/a, status: active
  File: consolidated:packages.conf, on: RP0
  Built: n/a, by: n/a
  File SHA1 checksum: b4f89bea92fd1a32de314aec7fca23b248a833cc

Package: rpbase, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-rpbase.02.04.00.122-33.XND.pkg, on: RP0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 1864f008d45b05b0a1485216c506efe982e03cb6

Package: rpcontrol, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-rpcontrol.02.04.00.122-33.XND.pkg, on: RP0/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 8f2bdd20c2bb8e246769b1754f5097ced9e61db0

Package: rpios-adventerprisek9, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.04.00.122-33.XND.pkg, on: RP0/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 4523e7ffecdaea60908f94d28683ae35ba430a2e

Package: rpaccess, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-rpaccess.02.04.00.122-33.XND.pkg, on: RP0/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 93418dc12852ca0f5dec1a6ecf04be8b22e593af

Package: rpcontrol, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpcontrol.02.04.00.122-33.XND.pkg, on: RP0/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 8f2bdd20c2bb8e246769b1754f5097ced9e61db0

Package: rpios-adventerprisek9, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.04.00.122-33.XND.pkg, on: RP0/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 4523e7ffecdaea60908f94d28683ae35ba430a2e

Package: rpaccess, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpaccess.02.04.00.122-33.XND.pkg, on: RP0/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 93418dc12852ca0f5dec1a6ecf04be8b22e593af

Package: rpbase, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpbase.02.04.00.122-33.XND.pkg, on: RP1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 1864f008d45b05b0a1485216c506efe982e03cb6

Package: rpcontrol, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpcontrol.02.04.00.122-33.XND.pkg, on: RP1/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 8f2bdd20c2bb8e246769b1754f5097ced9e61db0

Package: rpios-adventerprisek9, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.04.00.122-33.XND.pkg, on: RP1/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 4523e7ffecdaea60908f94d28683ae35ba430a2e

Package: rpaccess, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpaccess.02.04.00.122-33.XND.pkg, on: RP1/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 93418dc12852ca0f5dec1a6ecf04be8b22e593af

Package: rpcontrol, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpcontrol.02.04.00.122-33.XND.pkg, on: RP1/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 8f2bdd20c2bb8e246769b1754f5097ced9e61db0

Package: rpios-adventerprisek9, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.04.00.122-33.XND.pkg, on: RP1/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 4523e7ffecdaea60908f94d28683ae35ba430a2e

Package: rpaccess, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-rpaccess.02.04.00.122-33.XND.pkg, on: RP1/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 93418dc12852ca0f5dec1a6ecf04be8b22e593af

Package: espbase, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-espbase.02.04.00.122-33.XND.pkg, on: ESP0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 45522d1ab0ec59a7ce97162ee372579077c1dc16

Package: espbase, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-espbase.02.04.00.122-33.XND.pkg, on: ESP1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: 45522d1ab0ec59a7ce97162ee372579077c1dc16

Package: sipbase, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-sipbase.02.04.00.122-33.XND.pkg, on: SIP0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: ace30718e9a429f8baf3eaaa6888b54289a1e87d

Package: sipspa, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP0/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP0/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP0/2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP0/3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipbase, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-sipbase.02.04.00.122-33.XND.pkg, on: SIP1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: ace30718e9a429f8baf3eaaa6888b54289a1e87d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP1/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: active
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP1/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP1/2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP1/3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipbase, version: 02.04.00.122-33.XND, status: inactive
  File: consolidated:asr1000rp1-sipbase.02.04.00.122-33.XND.pkg, on: SIP2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: ace30718e9a429f8baf3eaaa6888b54289a1e87d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP2/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP2/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP2/2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP2/3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipbase, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipbase.02.04.00.122-33.XND.pkg, on: SIP3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: ace30718e9a429f8baf3eaaa6888b54289a1e87d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP3/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP3/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP3/2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP3/3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipbase, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipbase.02.04.00.122-33.XND.pkg, on: SIP4
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: ace30718e9a429f8baf3eaaa6888b54289a1e87d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP4/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP4/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP4/2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP4/3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipbase, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipbase.02.04.00.122-33.XND.pkg, on: SIP5
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: ace30718e9a429f8baf3eaaa6888b54289a1e87d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP5/0
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP5/1
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP5/2
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Package: sipspa, version: 02.04.00.122-33.XND, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.04.00.122-33.XND.pkg, on: SIP5/3
  Built: 2009-06-29_22.14, by: mcpre
  File SHA1 checksum: a59f5009a3d42e4073ca3c5ae765266fcfb2aa8d

Cisco IOS XE to Cisco IOS Version Number Mapping

Each version of Cisco IOS XE has an associated Cisco IOS version. Table 6 lists these mappings for all released versions of Cisco IOS XE.

Table 6 Cisco IOS XE to Cisco IOS Version Number Mapping

Cisco IOS XE Version
Cisco IOS Version

02.01.00

12.2(33)XNA

02.01.01

12.2(33)XNA1

02.01.02

12.2(33)XNA2

02.02.01

12.2(33)XNB1

02.02.02

12.2(33)XNB2

02.02.03

12.2(33)XNB3

02.03.00 (Deferred Version)

12.2(33)XNC (Deferred Version)

02.03.00t

12.2(33)XNC0t

02.03.01 (Deferred Version)

12.2(33)XNC1 (Deferred Version)

02.03.01t

12.2(33)XNC1t

02.04.00

12.2(33)XND



Note The Cisco IOS XE 2.3.0 and Cisco IOS XE 2.3.1 images are no longer downloadable from Cisco.com. Replacement images (Cisco IOS XE 2.3.0t and Cisco IOS XE 2.3.1t) with exactly the same content and bug fixes are available on Cisco.com. If the Cisco IOS XE 2.3.0 and Cisco IOS XE 2.3.1 images are not causing any issues, no action is necessary. Old image MD5 sums will still be available for verification on the download page. For more details, see CSCsz80074.


Upgrading to a New Software Release

Only Cisco IOS XE consolidated packages can be downloaded from Cisco.com; users who want to run the router using individual sub-packages must first download the image from Cisco.com and extract the individual sub-packages from the consolidated package.

For information about upgrading to a new software release, see the following document:

Cisco ASR 1000 Series Aggregation Services Router Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/chassis/asrswcfg.html

New and Changed Information

This section lists the new hardware and software features that are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2 and contains the following sections:

New Hardware Features in Cisco IOS XE Release 2.4.0

New Software Features in Cisco IOS XE Release 2.4.0

New Hardware Features in Cisco IOS XE Release 2.3.1

New Software Features in Cisco IOS XE Release 2.3.1

New Hardware Features in Cisco IOS XE Release 2.3.0

New Software Features in Cisco IOS XE Release 2.3.0

New Hardware Features in Cisco IOS XE Release 2.2.3

New Software Features in Cisco IOS XE Release 2.2.3

New Hardware Features in Cisco IOS XE Release 2.2.2

New Software Features in Cisco IOS XE Release 2.2.2

New Hardware Features in Cisco IOS XE Release 2.2.1

New Software Features in Cisco IOS XE Release 2.2.1

New Hardware Features in Cisco IOS XE Release 2.1.2

New Software Features in Cisco IOS XE Release 2.1.2

New Hardware Features in Cisco IOS XE Release 2.1.1

New Software Features in Cisco IOS XE Release 2.1.1

New Hardware Features in Cisco IOS XE Release 2.1.0

New Software Features in Cisco IOS XE Release 2.1.0

Release Note Only Software Features in Cisco IOS XE Release 2.1.0

New Hardware Features in Cisco IOS XE Release 2.4.0

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.4.0:

Cisco ASR 1002-Fixed Router

The Cisco ASR 1002-Fixed (Cisco ASR 1002-F) Router is the smallest of the Cisco ASR 1000 Series Aggregation Services Routers and supports all the general-purpose routing and security features of the Cisco ASR 1002 Router.

The Cisco ASR 1002-F Router uses the same internal control and data-plane architecture as the Cisco ASR 1002 router with the following variations:

Has all integrated components: an integrated route processor (Cisco ASR1000-RP1), an integrated embedded services processor (2.5-Gbps Cisco ASR 1000 Series ESP), and an integrated 4xGE SPA interface (Cisco ASR1000-SIP10)

Supports 2.5 GB of system bandwidth

Is supported only with Cisco IOS XE Release 2.4.0 and later releases

For information about the Cisco ASR 1002-F Router, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1002-F Quick Start Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/quick/start/guide/asr1_qs2F.html

New Shared Port Adapters

Cisco IOS XE Release 2.4.0 introduces support for the following new shared port adapters (SPAs):

POS SPAs

8-Port OC-3 POS SPA (SPA-8XOC3-POS)

2-Port, 4-Port, and 8-Port OC-12 POS SPAs (SPA-2XOC12-POS, SPA-4XOC12-POS, and SPA-8X0C-12-POS)

1-Port OC-48 POS SPA (SPA-1XOC48POS/RPR)

1-Port OC-192 POS SPA (SPA-OC192POS-XFP)

Services SPA

Cisco WebEx Node for ASR 1000 Series (SPA-WMA-K9)

The Cisco WebEx Node for ASR 1000 Series is a full-height SPA designed to run an application which is part of the WebEx MediaTone network management application. The Cisco WebEx Node for ASR 1000 Series improves the functionality of WebEx meeting services by adding the meeting servers into the SPA itself. This technology provides the following advantages:

Improves performance for users inside the company firewall.

Reduces the bandwidth going out of company firewall (to the WebEx MediaTone network).

Provides better security by reducing traffic outside the company.

By moving the switching components of the WebEx Collaboration Cloud into the Cisco WebEx Node for ASR 1000 Series, the WebEx clients in the enterprise network need only connect to the Cisco WebEx Node for ASR 1000 Series. This reduces the traffic between the enterprise network and the WebEx MediaTone network, greatly reducing the customer's Internet bandwidth requirements.

Each Cisco WebEx Node for ASR 1000 Series can be configured to perform either web conferencing or voice and video conferencing, but not both features at the same time. Each Cisco WebEx Node for ASR 1000 Series uses the same software package that includes both features; the conferencing feature that actually runs on each SPA is determined by the WebEx Service Plan the customer has purchased. The WebEx MediaTone network retains the Cisco WebEx Node for ASR 1000 Series configuration files that the SPA retrieves each time the SPA boots. Multiple Cisco WebEx Nodes for ASR 1000 Series can be installed on the same Cisco ASR 1000 Series Router chassis to increase the conferencing performance or to provide conferencing coverage for both web and voice and video sessions.

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New Software Features in Cisco IOS XE Release 2.4.0

This section lists new and changed features in Cisco IOS XE Release 2.4.0. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.4.0.

3 Level Egress QoS Policy

802.1P CoS Bit Set for PPP and PPPoE Control Frames

AAA Interim Accounting

ACL—Template ACL/12 Bit ACE

ANCP (Access Node Control Protocol)

ANCP Phase 2.5

Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS)

Any Transport over MPLS (AToM): Ethernet over MPLS: Port Mode (EoMPLS)

Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown

Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute

Asynchronous Rotary Line Queuing

Byte-Based Weighted Random Early Detection

Cache Control Enhancements for Certification Revocation Lists

Certificate—Complete Chain Validation

Cisco IOS SHA2 Support

Cisco Unified Border Element (SP Edition)

Class-Based QoS MIB (CBQoSMIB) Enhancements

CoA—Multi-Service Activation/Deactivation in Single mMessage

Connect-info RADIUS Attribute 77—Configurable ASCII String

DHCP Server Radius Proxy

Enabling ISG to Interact with External Policy Servers

Etherchannel Flow Based Limited 1:1 Redundancy

Ethernet Overhead Accounting

Firewall—NetMeeting Directory (LDAP) ALG Support

Firewall—SIP ALG—Extended Methods

H.323 RAS Support in IOS Firewall

IEEE 802.1Q Tunneling (QinQ) for AToMLawful Intercept

IEEE 802.3ad Link Aggregation (LACP)

Integrated Session Border Controller

Interactive OAM and Scaling Improvements

IP over IPv6 Tunnels

IPsec Usability Enhancements

IPv6 Multicast: Bootstrap Router (BSR)

IPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping

IPv6 Multicast: IPv6 BSR Bidirectional Support

IPv6 Multicast: PIM Sparse Mode (PIM-SM)

IPv6 Multicast: Routable Address Hello Option

ISG: Accounting: Per-Service Accounting

ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message

ISG: Policy Control: Policy Server: RADIUS-Based Policing

L2TP Forwarding of PPPoE Tag Information

L2VPN Interworking—Ethernet to VLAN Interworking

L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires

L2VPN Pseudowire Switching

Lawful Intercept

Layer 2 VPN (L2 VPN): Syslog, SNMP Trap, and show Command Enhancements for AToM and L2TPv3

MCP GEC with QoS on memberlink

Modified LNS Dead-Cache Handling

MQC—Traffic Shaping Overhead Accounting for ATM

NAT—NetMeeting Directory (LDAP) ALG Support

NAT SCCP Video Support

NAT—SIP ALG - Extended Methods

NAT Support of H.323v2 RAS

NSF/SSO—Ethernet to Ethernet VLAN Interworking

OCSP—Server Certification from Alternate Hierarchy

Parameterization for ACL and Layer 4 Redirect

Parameterization of QoS ACL

Per Subinterface MTU for Ethernet over MPLS (EoMPLS)

PKI—CLI to Control Certificate Revocation List (CRL) Cache

PPPoE Service Selection

PPPoE Session Limit

PPPoE Smart Server Selection

PPPoE VLAN Session Throttling

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services

QoS: CBQoSMIB Index Enhancements

RADIUS-Based Lawful Intercept

RADIUS-Based Policing Attribute Modifications

RADIUS—CLI to Prevent Sending of Access Request with Blank Username

RSA 4096-Bit Key Generation in Software Crypto Engine Support

SCCP for Video

SSHv2 Enhancements

VLAN ID Rewrite

VPDN LNS Address Checking

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

VRF Aware LI (Lawful Intercept)

3 Level Egress QoS Policy

The 3 Level Egress QoS Policy feature allows 3 level hierarchical QoS policies to be applied as an egress service per physical interface or per VLAN (GE) or per subinterface (FR or serial).

At the top level, only class-default with shaping can be configured.

At the medium level, user defined classes can be configured where for each user defined class following can be applied:

Bandwidth Remaining (BR): either as Bandwidth Remaining Ratio (BRR) or Bandwidth Remaining Percentage (BRP) or

shaping or

priority (conditional or unconditional policer)

All of the three items listed above can be configured concurrently with WRED.

At the bottom level, user defined classes can be configured where for each user defined class either policing or marking can be applied.

802.1P CoS Bit Set for PPP and PPPoE Control Frames

The 802.1P CoS Bit Set for PPP and PPPoE Control Frames feature provides the ability to set user priority bits in the IEEE 802.1Q tagged frame to allow traffic prioritization.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_cos_ppp_pppoe_xe.html

AAA Interim Accounting

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html

ACL—Template ACL/12 Bit ACE

The Template ACL feature groups ACLs with many common access control elements (ACEs) into a single ACL that saves system resources.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_tmplacl.html

ANCP (Access Node Control Protocol)

The Access Node Control Protocol feature enhances communication between Digital Subscriber Line Access Multiplexers (DSLAMs) and a broadband remote access server (BRAS), enabling the exchange of events, actions, and information requests between the multiplexer end and the server end. As a result, either end can implement appropriate actions.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_xe.html

ANCP Phase 2.5

The ANCP Phase 2.5 feature allows multiple services to be activated or deactivated by a single Change of Authorization (CoA) message sent from the policy server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_msad_coa_xe.html

Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS)

The Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS) feature allows you to transport Layer 2 Ethernet VLAN packets from various sources over an MPLS backbone. Ethernet over MPLS extends the usability of the MPLS backbone by enabling it to offer Layer 2 services in addition to already existing Layer 3 services.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Any Transport over MPLS (AToM): Ethernet over MPLS: Port Mode (EoMPLS)

Ethernet over MPLS (EoMPLS) is the transport of Ethernet frames across an MPLS core. It transports all frames received on a particular Ethernet or virtual LAN (VLAN) segment, regardless of the destination Media Access Control (MAC) information.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown

The Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown feature allows a service provider edge (PE) router on the local end of an Ethernet over MPLS (EoMPLS) pseudowire to detect a remote link failure and cause the shutdown of the Ethernet port on the local customer edge (CE) router. Because the Ethernet port on the local CE router is shut down, the router does not lose data by continuously sending traffic to the failed remote link.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute

The Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute feature allows AToM to use MPLS traffic engineering (TE) tunnels with fast reroute (FRR) support. This feature enhances FRR functionality for Ethernet over MPLS (EoMPLS).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Asynchronous Rotary Line Queuing

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/dial/configuration/guide/2_xe/dia_asyn_que_role_XE.html

Byte-Based Weighted Random Early Detection

The Byte-Based Weighted Random Early Detection feature extends the functionality of WRED. In previous releases, you specified the WRED actions based on the number of packets. With the Byte-Based WRED, you can specify WRED actions based on the number of bytes.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/fsbyte_xe.html

Cache Control Enhancements for Certification Revocation Lists

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert.html

Certificate—Complete Chain Validation

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert.html

Cisco IOS SHA2 Support

The Cisco IOS SHA2 Support feature allows the user to specify a cryptographic hash function for Cisco IOS certificate servers and clients. The cryptographic hash functions that can be specified are Message-Digest algorithm 5 (MD5), Secure Hash Algorithm -- SHA-1, SHA-256, SHA-384, or SHA-512.

The following commands were introduced by this feature: hash (ca-trustpoint) and hash (cs-server). The hash (ca-trustpoint) command sets the hash function for the signature that the Cisco IOS client uses to sign its self-signed certificates. The hash (cs-server) command sets the hash function for the signature that the Cisco IOS certificate authority (CA) uses to sign all of the certificates issued by the server.

Cisco Unified Border Element (SP Edition)

Cisco Unified Border Element (SP Edition) was formerly known as Integrated Session Border Controller.

With Cisco IOS XE Release 2.4.0, Cisco Unified Border Element (SP Edition) can operate in two modes or deployment models:

Unified—In the unified model, both the SBE and DBE logical entities co-exist on the same network element. In this model, the signaling entity controls the media local to the router.

Distributed—In the distributed model, the SBE and the DBE entities reside on different network elements. Logically, each of the SBE entities controls multiple DBE elements, and each DBE can be controlled by multiple SBE entities.


Note For Cisco IOS XE Release 2.3 and earlier releases of the Integrated Session Border Controller, only DBEs in the distributed model are supported.


In addition to introducing support for the SBC unified model, Cisco IOS XE Release 2.4.0 introduces support for the following Session Border Controller (SBC) features:

AAA: End Point Authentication

CAC: Bypass Admission Control for Emergency Calls

CAC: CAC Enforcement Notification

CAC: Configurable Rate Limiting

CAC: DBE Shall Support DSCP Settings

CAC: Policing and Marking Under SBE Control

CAC: Policing: Number Analysis: Depending on Destination Adjacency

CAC: Policing: Per Session Policing

CAC: Policing: SBC Shall Support Whitelisting and Blacklisting Profiles Based on Request for Methods

CAC: Policing: BC Shall Support Policy Based Session Routing

CAC: Priority Handling of Traffic During an Attack or When System's Resources Are Overloaded

CAC: SBE Shall Support Various CAC Mechanisms

CDR: 24 hours CDR Buffering

CDR: Real Time CDRs Can Be Extracted Upon Completion of a Session

CDR: Send CDR to Radius Server

Config: ALARM/Statistics

Config: All Timer Values Should Be Configurable with Default Values

Config: DBE Shall Provide QoS Statistics to SBE in Realtime upon Call Completion

Config: DBE Shall Support to Collect Statistics of the Session

Config: Display Session States in Real-time

Config: Load Balancing

Config: Required Debug Commands

Config: SBE/DBE CLI Consistency

Config: SBE Shall Support the Ability to Specify QoS for the Session Based QoS Categories

Config: Shut/No-Shut of SBE/DBE/SBC

Delta Renegotiation

DoS: DoS (Denial of Service)

DoS: Guard Against DoS Attack at Signaling Level

DoS: Monitoring and Blacklisting Signaling/Media Traffic for a DoS Attack

DoS: Signaling and Control Packets

DoS: Media Pinhole Provides an Alert for Packets with Unknown Source Address

HA: 1:1 Redundancy Support

HA: 2 Seconds Until New Sessions Can Be Established Following Failover

HA: Active Session Preservation Across Failover

HA: Media Path Interruption Should Be Less Than 1 Second During Failover

IMS: Support for P-CSCF Subscription to Subscriber Registration State

Interop: Interop with CCM and SIP IP Phones

Interop: Interop with Cisco SIP Proxy Servers

Interop: Interop with Telepresence System

Media: DTMF Interworking Support

Media: DTMF Support for SIP-Notify

Media: Fax/Modem Passthrough Support

Media: Inter-VPN Media Relay Bypass

Media: Media Packet Updates

Media: RTCP Processing

Media: Support DTMF Processing

Media: Support for RFC 3550 (RTP)

Media: Support for RFC 3551

Media: Support for Video CodecsH.263 and H.264

Media: Support Media Relay

Media: VPN Awareness and Translation

MIB: Support SNMP Call Stats Requirements

MIB: Support SNMP TRAPS Requirements

NAPT: NAPT Traversal

NAT: NAT Traversal

Option to Use CODEC Instead of Bandwidth-Field for Media Bandwidth Allocation

Performance: Jitter Measurement

Performance: Latency Measurement

QoS: DSCP, Pre/TOS, and MPLS EXO\P Marking for Media, Signaling and Control Traffic

Radius: Configurable Radius Authentication/Accounting Server Port

Radius: Support Multiple Radius Servers

Security: Private Extensions to the SIP for Asserted Identity within Trusted Networks

Security: Short Term Requirements for Network Asserted Identity

Security: Support DTLS for SIP Signaling

Security: Support for SRTP

Security: Support Multi-VFF Support for SBC

Security: Support TLS-TLS and TLS-nonTLS Call Support

Security: TLS Encrypted Signaling Across SP-SP Border

SIP: 3xx Support

SIP: Allow Fast Register and Softswitch Shielding to Be Configured Independently

SIP: BYE Storm Pacing

SIP: Call ForwardingBusy

SIP: Call ForwardingNo Answer

SIP: Call ForwardingUnconditional

SIP: Call Hold

SIP: Call Hold Interworking

SIP: Call Hold with MOH

SIP: Call Routing Enhancement

SIP: Caller-ID and Calling Name Delivery

SIP: Click To Dial

SIP: Codec AAC-LD Support

SIP: Consultation Hold

SIP: Delayed Media to Early Media Support

SIP: Delegated Registration

SIP: Dynamic Route Selection

SIP: HTTP Digest Authentication

SIP: Min-SE Support

SIP: Music On Hold (MOH)

SIP: MWI (Message Waiting Indicator)

SIP: Reason Header

SIP: RFC 3262 PRACK (Provisional Response)

SIP: RFC 3264 An Offer/Answer Model with the SDP

SIP: RFC 3892 Referred-By Mechanism

SIP: RFC2976 SIP INFO method

SIP: RFC3261

SIP: session-expire Support

SIP: SIP Aggregation Registration

SIP: SIP Header and Value Manipulation

SIP: SIP Registration Forwarding

SIP: SIP Session Refreshment with re-INVITE

SIP: SIP to Tel URI

SIP: SRTP S-Description Passthrough

SIP: Support for VPN DNS Resolution

SIP: Support 100rel in Supported Header

SIP: Support Fast Registration

SIP: Support for Diversion Header

SIP: Support for SIP Date Header

SIP: Support for SIP JOIN Header

SIP: Support for SIP Profile for Message Normalization

SIP: Support TCP/UDP and Interoperability

SIP: Support Tel URI

SIP: timer Support

SIP: TransferAttended

SIP: TransferUnattended

SIP: TransferInstant

SIP: user=phone Parameter

SIP: Video Support with E.164 and SIP URI

Support Renegotiated Call Over NAT

T.38 Passthrough

Topology-Hiding: Infrastructure and Topology Hiding

TP Support for Secure Media

VPN Awareness and Interconnect

For information about these SBC features, see the following documents:

Cisco Unified Border Element (SP Edition) Configuration Guide: Unified Model

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbcu/2_xe/sbcu_2_xe_book.html


Note Because the Cisco Unified Border Element (SP Edition) Configuration Guide: Unified Model uses a task-oriented approach to SBC features, each individual feature is not necessarily identified by feature name within the configuration guide.


Cisco Unified Border Element (SP Edition) Command Reference: Unified Model

http://www.cisco.com/en/US/docs/ios/sbc/command/reference/sbcu_book.html

Class-Based QoS MIB (CBQoSMIB) Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/cbqos_mib_xe.html

CoA—Multi-Service Activation/Deactivation in Single mMessage

The CoA—Multi-Service Activation/Deactivation in Single mMessage feature allows multiple services to be activated or deactivated by a single Change of Authorization (CoA) message sent from the policy server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_msad_coa_xe.html

Connect-info RADIUS Attribute 77—Configurable ASCII String

The Connect-Info RADIUS Attribute 77 feature enables the network access server (NAS) to report Connect-Info (attribute 77) in RADIUS accounting "start" and "stop" records that are sent to the RADIUS client (dial-in modem). These "start" and "stop" records allow the transmit and receive connection speeds, modulation, and compression to be compared in order to analyze a user session over a dial-in modem where speeds are often different at the end of the connection (after negotiation).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_user_services/configuration/guide/sec_rad_77_connect_xe.html

DHCP Server Radius Proxy

The Dynamic Host Configuration Protocol (DHCP) Server RADIUS Proxy feature is a RADIUS-based address assignment mechanism in which a DHCP server authorizes remote clients and allocates addresses based on replies from a RADIUS server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iad_dhcp_rad_proxy_xe.html

Enabling ISG to Interact with External Policy Servers

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/en_isg_ext_plcy_svrs_xe.html

Etherchannel Flow Based Limited 1:1 Redundancy

The EtherChannel Flow-Based Limited 1:1 Redundancy feature provides a way to configure load balancing at the port-channel level based on different flows of traffic. You can identify different flows of traffic based on key fields in the data packet and balance the traffic load according to those traffic flows. To use EtherChannel flow-based limited 1:1 redundancy, you configure an EtherChannel with two ports (one active and one standby). If the active link goes down, the EtherChannel stays up and the system performs fast switchover to the hot-standby link. When the failed link becomes operational again, the EtherChannel performs another fast switchover to revert to the original active link.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/lanswitch/configuration/guide/lsw_cfg_flwbal.html

Ethernet Overhead Accounting

The Ethernet Overhead Accounting feature enables the router to account for downstream Ethernet frame headers when applying shaping to packets.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/eth_overhead_acctng_xe.html

Firewall—NetMeeting Directory (LDAP) ALG Support

The Firewall—NetMeeting Directory (LDAP) ALG Support feature enables Cisco Firewalls to support Layer 4 LDAP inspection by default. LDAP is an application protocol that is used for querying and updating information stored on directory servers.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_zone_polcy_firew_xe.html

Firewall—SIP ALG—Extended Methods

The Firewall—SIP ALG—Extended Methods feature provides voice security enhancements within the Firewall feature set in Cisco IOS XE software on the Cisco ASR 1000 series routers.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_fw_sip_alg_xe.html

H.323 RAS Support in IOS Firewall

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_h323ras_firewall.html

IEEE 802.1Q Tunneling (QinQ) for AToM

The IEEE 802.1Q Tunneling (QinQ) for AToM feature allows you to configure IEEE 802.1Q Tunneling (QinQ) for AToM. It also permits the rewriting of QinQ tags for Multiple Protocol Label Switching (MPLS) layer 2 VPNs (L2VPNs).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_qnq_tunneling_atom_xe.html

IEEE 802.3ad Link Aggregation (LACP)

The IEEE 802.3ad Link Aggregation (LACP) feature provides a method for aggregating multiple Ethernet links into a single logical channel based on the IEEE 802.3ad standard. This feature helps improve the cost effectiveness of a device by increasing cumulative bandwidth without necessarily requiring hardware upgrades.

For information about this feature, see the Configuring IEEE 802.3ad Link Bundling document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html

Integrated Session Border Controller

The product formerly known as Integrated Session Border Controller is now known as the Cisco Unified Border Element (SP Edition). For information about this feature, see Cisco Unified Border Element (SP Edition).

Interactive OAM and Scaling Improvements

The Interactive OAM and Scaling Improvements feature adds on-demand ping capability to access node control protocol (ANCP) for operations and troubleshooting.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_xe.html

IP over IPv6 Tunnels

For information about this feature, see the following documents:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-tunnel_xe.html

http://www.cisco.com/en/US/docs/ios/ios_xe/interface/configuration/guide/ir_impl_tun_xe.html

IPsec Usability Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_ipsec_vpn_status_monitoring.html

IPv6 Multicast: Bootstrap Router (BSR)

If an RP becomes unreachable, the IPv6 Multicast: Bootstrap Router (BSR) feature allows the RP to be detected and the mapping tables modified so that the unreachable RP is no longer used, and the new tables will be rapidly distributed throughout the domain.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping

TheIPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping feature allows IPv6 multicast routers to be statically configured to announce scope-to-RP mappings directly from the BSR instead of learning them from candidate-RP messages.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: IPv6 BSR Bidirectional Support

The IPv6 Multicast: IPv6 BSR Bidirectional Support feature allows bidirectional RPs to be advertised in C-RP messages and bidirectional ranges in the BSM.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: PIM Sparse Mode (PIM-SM)

TheIPv6 Multicast: PIM Sparse Mode (PIM-SM) feature uses unicast routing to provide reverse-path information for multicast tree building. PIM-SM is used in a multicast network when relatively few routers are involved in each multicast and these routers do not forward multicast packets for a group, unless there is an explicit request for the traffic.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: Routable Address Hello Option

The IPv6 Multicast: Routable Address Hello Option feature adds a PIM hello message option that includes all the addresses on the interface on which the PIM hello message is advertised.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

ISG: Accounting: Per-Service Accounting

The Intelligent Services Gateway (ISG) Per-Service Accounting feature provides the means to bill for account or service usage. ISG accounting uses the RADIUS protocol to facilitate interaction between ISG and an external RADIUS-based authentication, authorization, and accounting (AAA) or mediation server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/cfg_isg_acctng_xe.html

ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message

The ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message feature allows multiple services to be included in a single RADIUS access-accept message.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_msa_acc_xe.html

ISG: Policy Control: Policy Server: RADIUS-Based Policing

The RADIUS-Based Policing feature extends Intelligent Services Gateway (ISG) functionality to allow the use of a RADIUS server to provide subscriber policy information.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_rabapol_xe.html

L2TP Forwarding of PPPoE Tag Information

The L2TP Forwarding of PPPoE Tag Information feature allows you to transfer DSL line information from the L2TP Access Concentrator (LAC) to the L2TP Network Server (LNS). Using this feature, you can also override the nas-port-id and/or calling-station-id VSAs on the LNS with the Circuit-ID and Remote-ID VSA respectively.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

L2VPN Interworking—Ethernet to VLAN Interworking

The L2VPN Interworking—Ethernet to VLAN Interworking feature allows disparate attachment circuits to be connected. An interworking function facilitates the translation between the different Layer 2 encapsulations.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_l2vpn_intrntwkg_xe.html

L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires

The L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires feature allows you to configure up to three backup pseudowires to maintain network connectivity if one pseudowire fails.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/wan_l2vpn_pw_red_xe.html

L2VPN Pseudowire Switching

The L2VPN Pseudowire Switching feature extends layer 2 virtual private network (L2VPN) pseudowires across an interautonomous system (inter-AS) boundary or across two separate multiprotocol label switching (MPLS) networks.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_l2vpn_pseudo_swit_xe.html

Lawful Intercept

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_lawful_intercept.html

Layer 2 VPN (L2 VPN): Syslog, SNMP Trap, and show Command Enhancements for AToM and L2TPv3

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/wan/configuration/guide/wan_l2_tun_pro_v3.html

MCP GEC with QoS on memberlink

Previously available on only port-channel subinterfaces, QoS can now be applied to the main GigabitEtherChannel (GEC) interface, or memberlink. QoS is applied through policy maps.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/lanswitch/configuration/guide/lsw_cfg_gecqos.html

Modified LNS Dead-Cache Handling

The Modified LNS Dead-Cache Handling feature allows you to display and clear (restart) any Layer 2 Tunnel Protocol (L2TP) Network Server (LNS) entry in a dead-cache (DOWN) state. You can use this feature to generate a Simple Network Management Protocol (SNMP) or system message log (syslog) event when an LNS enters or exits a dead-cache state. Once an LNS exits the dead-cache state, the LNS is able to establish new sessions.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

MQC—Traffic Shaping Overhead Accounting for ATM

The MQC—Traffic Shaping Overhead Accounting for ATM feature enables a broadband aggregation system (BRAS) to account for various encapsulation types when applying QoS functionality to packets.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/overhead_acctng_xe.html

NAT—NetMeeting Directory (LDAP) ALG Support

Cisco IOS XE NAT provides ALG support for NetMeeting directory Lightweight Directory Access Protocol (LDAP) messages.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NAT SCCP Video Support

Cisco IOS XE NAT provides Skinny Call Control Protocol (SCCP) message translation support.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NAT—SIP ALG - Extended Methods

Cisco IOS XE NAT supports extended methods for the Session Initiation Protocol (SIP.)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NAT Support of H.323v2 RAS

Cisco IOS XE NAT supports H.225 and H.245 message types, including those sent in the Registration, Admission, and Status (RAS) protocol.

RAS provides a number of messages that are used by software clients and VoIP devices to register their location, request assistance in call set up, and control bandwidth. The RAS messages are directed toward an H.323 gatekeeper.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NSF/SSO—Ethernet to Ethernet VLAN Interworking

The NSF/SS0—Ethernet to Ethernet VLAN Interworking features enables stateful switchover (SSO) and nonstop forwarding (NSF) capabilities for Ethernet to VLAN attachment circuits. Changes in the learned MAC address for interworking are reflected on the standby RP so that identical values exist on the Active and Standby RPs.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_trnsprt_mlps_atom_xe.html

OCSP—Server Certification from Alternate Hierarchy

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert.html

Parameterization for ACL and Layer 4 Redirect

The Parameterization for ACL and Layer 4 Redirect feature provides parameterization enhancements for access control lists and Layer 4 redirect.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_l4_redirect_xe.html

Parameterization of QoS ACL

The Parameterization of QoS ACL feature provides enhancements for quality of service (QoS) access control lists (ACLs). This feature allows the authentication, authorization, and accounting (AAA) device to dynamically change parameters.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_rabapol_xe.html

Per Subinterface MTU for Ethernet over MPLS (EoMPLS)

The Per Subinterface MTU for Ethernet over MPLS (EoMPLS) feature provides you with the ability to specify maximum transmission unit (MTU) values in xconnect subinterface configuration mode. When you use xconnect subinterface configuration mode to set the MTU value, you establish a pseudowire connection for situations where the interfaces have different MTU values that cannot be changed.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

PKI—CLI to Control Certificate Revocation List (CRL) Cache

The PKI-CLI to Control Certificate Revocation List (CRL) Cache feature allows the administrator to control the CRL cache size. CRLs are received by Cisco IOS software in Distinguished Encoding Rules (DER) encoded format. Because processing a DER encoded CRL uses CPU memory, Cisco IOS software allows CRLs either to be stored in cache after being processed or to be decoded. Configuring the CRL cache size allows the amount of memory to be decreased (for example, if low memory conditions exist) or to be increased (for example, when a large number of CRLs are being processed), resulting in better performance.

The following commands were introduced or modified by this feature: crypto pki crl cache and show crypto pki crls. The crypto pki crl cache command allows the administrator to set the maximum amount of volatile memory used to cache CRLs. When the crypto pki crl cache command is configured, the show crypto pki crls command output includes information on the CRL cache size.

PPPoE Service Selection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_baa_xe.html

PPPoE Session Limit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_limit_legcfg_xe.html

PPPoE Smart Server Selection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_sss_xe.html

PPPoE VLAN Session Throttling

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_baa_xe.html

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services

The Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services feature provides Simple Network Management Protocol (SNMP) support within an Any Transport over Multiprotocol Label Switching (AToM) infrastructure emulating Ethernet, Frame Relay, and ATM services over packet switched networks (PSNs).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_edge2edge_mibs_xe.html

QoS: CBQoSMIB Index Enhancements

The QoS: CBQoSMIB Index Enhancements feature allows automatic inclusion of downstream Ethernet frame headers in shaped rate

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/cbqos_mib_xe.html

RADIUS-Based Lawful Intercept

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_lawful_intercept.html

RADIUS-Based Policing Attribute Modifications

The RADIUS-Based Policing Attribute Modifications feature allows the RADIUS server to communicate with the Intelligent Services Gateway (ISG) by embedding specific attributes in Access-Accept and CoA messages. RADIUS-based shaping and policing employs this exchange of attributes to activate and deactivate services, and to modify the active quality of service (QoS) policy applied to a session.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_rabapol_xe.html

RADIUS—CLI to Prevent Sending of Access Request with Blank Username

The aaa authentication suppress null-username command is used to provide the ability to prevent an Access Request with a blank username from being sent to the RADIUS server. This functionality ensures that unnecessary RADIUS server interaction is avoided, and RADIUS logs are kept short.

For information about this feature, see the "Preventing an Access Request with a Blank Username from Being Sent to the RADIUS Server" subsection in following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

RSA 4096-Bit Key Generation in Software Crypto Engine Support

The RSA 4096-Bit Key Generation in Software Crypto Engine Support feature increases the maximum RSA key size from 2048 bits to 4096 bits for private key operations.

SCCP for Video

The SCCP for Video feature enables Cisco Firewalls to inspect Skinny control packets that are exchanged between a Skinny client and the Cisco Call Manager.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_zone_polcy_firew_xe.html

SSHv2 Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_secure_shell_v2.html

VLAN ID Rewrite

The VLAN ID Rewrite feature enables you to use VLAN interfaces with different VLAN IDs at both ends of the tunnel.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

VPDN LNS Address Checking

The VPDN LNS Address Checking feature allows an L2TP Access Concentrator (LAC) to check the IP address of the L2TP Network Server (LNS) sending traffic to it during the setup of an L2TP tunnel, thus providing a check for uplink and downlink traffic arriving from different interfaces.

The benefit of the LNS Address Checking feature is avoiding the loss of revenue from users sending back traffic through an alternate network.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_per_vrf_aaa.html

VRF Aware LI (Lawful Intercept)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_lawful_intercept.html

New Hardware Features in Cisco IOS XE Release 2.3.1

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.1.

New Software Features in Cisco IOS XE Release 2.3.1

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.1.

New Hardware Features in Cisco IOS XE Release 2.3.0

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.0:

New Cisco ASR 1000 Route Processor

New Shared Port Adapters

New Cisco ASR 1000 Route Processor

Cisco IOS XE Release 2.3.0 introduces support for the following new Route Processor (RP):

Cisco ASR 1000 Series Route Processor 2

The Cisco ASR 1000 Series Route Processor 2 (Cisco ASR1000-RP2) is the second-generation route processor for the Cisco ASR 1000 Series Aggregation Services Router. The Cisco ASR1000-RP2 provides advanced routing capabilities, monitors and manages the other components of the Cisco ASR 1000 Series Aggregation Services Router, and provides a processing engine for integrated applications. In addition to the current route processing features and benefits of the Cisco ASR 1000 Series Route Processor 1(Cisco ASR1000-RP1), the Cisco ASR1000-RP2, supports:

Memory scalability up to 16 GB DRAM

8 GB or 16 GB of synchronous dynamic RAM (SDRAM) in 4 SDRAM slots. A route processor with 8 GB can hold four 8 GB dual in-line memory modules (DIMMs); whereas a route processor with 16 GB can hold four 4-GB DIMMs.

80 GB hard disk drive (HDD) for the storage and portability of code storage, boot, configurations, logs.

The Cisco ASR1000-RP2 is supported as a modular component on the Cisco ASR 1004 and Cisco ASR 1006 routers.

The Cisco ASR 1006 Router contains two RP slots to support full hardware redundancy for RP2s within the same router.

For information about the Cisco ASR1000-RP2, including a table that highlights the major differences between it and the Cisco ASR1000-RP1, see the following document:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

New Shared Port Adapters

Cisco IOS XE Release 2.3.0 introduces support for the following new shared port adapters (SPAs):

ATM SPAs

1-Port OC-3 ATM SPA (SPA-1XOC3-ATM-V2)

3-Port OC-3 ATM SPA (SPA-3XOC3-ATM-V2)

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New Software Features in Cisco IOS XE Release 2.3.0

This section lists new and changed features in Cisco IOS XE Release 2.3.0. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.3.0.

Any Transport Over MPLS (AToM): ATM Cell Relay Over MPLS: VP Mode

Any Transport over MPLS (AToM): Graceful Restart

Any Transport Over MPLS (AToM): Layer 2 QoS (Quality of Service)

Any Transport Over MPLS (AToM): Single Cell Relay - VC Mode (CRoMPLS)

ATM Conditional debug/show Commands

ATM MIB Enhancements

ATM OAM Ping

ATM OAM Traffic Reduction

ATM PVC F5 OAM Recovery Traps

ATM PVC Trap Enhancements for Segment and AIS/RDI Failures

ATM PVC Trap Support

ATM SNMP Trap and OAM Enhancements

ATM VC Class Support

ATM VP Average Traffic Rate

AToM Tunnel Selection

Auto Secure Manageability

Basic ATM Support of RFC1483

BGP Support for 4-Byte ASN

Cell-Based ATM Shaping per PVP

Consistent and User-Selectable Fail/Open and Fail/Close Operation

Control Plane Policing—Time Based

DHCP Client

DHCP Relay—MPLS VPN Support

Enhanced ATM VC Configuration and Management

Explicit Passive Mode CLI Support

GET VPN Phase 1.2

Group Encrypted Transport VPN (GET VPN)

Integrated Session Border Controller

IPv6 Bidirectional PIM

IPv6 Multicast: Address Family Support for Multiprotocol BGP

IPv6 Source Specific Multicast (SSM) Mapping

ISSU—ATM

ISSU—AToM ATM Attachment Circuit

ISSU—MPLS Traffic Engineering (TE)—Path Protection

L2VPN PW Preferential Forwarding (Active/Standby Status)

L2VPN PW Redundancy—ATM Attachment Circuits

LSP Ping for FEC129 (via VCCV)—RFC4379

MPLS EM—LSP Ping/Trace for LDP & RSVP IPv4 FECs

MPLS EM—MPLS FRR MIB (IETF draft v01)

MPLS EM—MPLS Multipath (ECMP) LSP Tree Trace

MPLS EM—MPLS TE MIB (IETF draft v05)

MPLS LSP Ping/Traceroute and AToM VCCV

MPLS Pseudowire Status Signaling

MPLS Support for Multi-Segment PWs—MPLS OAM/VCCV

MPLS TE—BFD-Triggered Fast Reroute (FRR)

MPLS TE—Fast Tunnel Interface Down Detection

MPLS TE—Node Protection Desired Bit

MPLS Traffic Engineering Forwarding Adjacency

MPLS Traffic Engineering—Policy Routing onto MPLS TE Tunnels

MPLS Traffic Engineering (TE)

MPLS Traffic Engineering (TE)—Configurable Path Calculation Metric for Tunnels

MPLS Traffic Engineering (TE)—Fast Reroute (FRR) Link and Node Protection

MPLS Traffic Engineering (TE)—IP Explicit Address Exclusion

MPLS Traffic Engineering (TE)—LSP Attributes

MPLS Traffic Engineering (TE)—Path Protection

MPLS Traffic Engineering (TE)—RSVP Graceful Restart

MPLS Traffic Engineering (TE)—RSVP Hello State Timer

MPLS Traffic Engineering (TE): Verbatim Path Support

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

NBAR Protocols

NSF/SSO—AToM ATM Attachment Circuit

NSF/SSO—MPLS TE and RSVP Graceful Restart

NSF/SSO—MPLS Traffic Engineering (TE)—Path Protection

Operation, Administration, and Maintenance (OAM) F4 and F5

Per-VC Queueing for ATM

PPP—Max-Payload and IWF PPPoE Tag Support

PPPoE Agent Remote ID and DSL Line Characteristics Enhancement

PPPoE Circuit-ID Tag Processing

PPPoE Relay

PPPoE—Session Limiting on Inner QinQ VLAN

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, FR, and ATM Services

QoS: Match ATM CLP

QoS-per-VC QoS Classification for ATM VP Pseudowires

QoS Priority Percentage CLI Support

Quality of Service: Policies Aggregation

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

RSVP Refresh Reduction and Reliable Messaging

RSVP—Resource Reservation Protocol

SSO—ATM

Any Transport Over MPLS (AToM): ATM Cell Relay Over MPLS: VP Mode

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

Any Transport over MPLS (AToM): Graceful Restart

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_atom_grace_rstrt.html

Any Transport Over MPLS (AToM): Layer 2 QoS (Quality of Service)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

Any Transport Over MPLS (AToM): Single Cell Relay - VC Mode (CRoMPLS)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

ATM Conditional debug/show Commands

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_con_deb_supp.html

ATM MIB Enhancements

The Cisco AAL5 MIB adds a proprietary extension to the standard ATM MIB (RFC 1695) to provide per-VC statistic counters that are currently displayed in response to the Cisco IOS show atm vc command for a specified virtual circuit. This MIB extension allows SNMP network management system applications to query the same variables (SNMP objects) as those that can be gathered from the Cisco IOS command- line interface.

The Cisco AAL5 MIB provides SNMP access to four new statistics counters defined for AAL5 virtual connections: incoming packet counter, outgoing packet counter, incoming octet counter, and outgoing octet counter. The Cisco AAL5 MIB groups these four counters in a table called cAal5VccTable.

The proprietary extension of the Cisco AAL5 MIB supports all the tables and objects defined in the Cisco AAL5 MIB for ATM interfaces acting as endpoints of ATM connections that run Cisco IOS XE Release 2.3 software and later releases.

ATM OAM Ping

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam_ping.html

ATM OAM Traffic Reduction

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam.html

ATM PVC F5 OAM Recovery Traps

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_cfg_atm.html

ATM PVC Trap Enhancements for Segment and AIS/RDI Failures

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam_f5_cnck.html

ATM PVC Trap Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_snmp_oam_enh.html

ATM SNMP Trap and OAM Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_snmp_oam_enh.html

ATM VC Class Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

ATM VP Average Traffic Rate

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_vp_avg_tfc_rate.html

AToM Tunnel Selection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

Auto Secure Manageability

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_autosecure.html

Basic ATM Support of RFC1483

The Basic ATM Support of RFC1483 feature provides the basic functions of asynchronous transfer mode (ATM) and compliance with RFC1483.

Documentation URLs are being updated and will be provided soon.

BGP Support for 4-Byte ASN

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/irp_bgp_overview.html

Cell-Based ATM Shaping per PVP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/qos_atm_vp_support.html

Consistent and User-Selectable Fail/Open and Fail/Close Operation

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

Control Plane Policing—Time Based

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/ctrl_plane_policng.html

DHCP Client

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcp_client.html

DHCP Relay—MPLS VPN Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcp_rly_agt.html

Enhanced ATM VC Configuration and Management

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_cfg_atm.html

Explicit Passive Mode CLI Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

GET VPN Phase 1.2

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

Group Encrypted Transport VPN (GET VPN)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

Integrated Session Border Controller

Cisco IOS XE Release 2.3.0 introduces support for the following new Integrated Session Border Controller (SBC) features:

In-Service Provisioning of H.248 Controllers

RTCP Policing (with the additional new functionality of RTCP maximum burst size (mbs) policing equal to 5% of RTP mbs)

For information about these SBC features, see the following document:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbc/2_xe/sbc_2_xe_book.html

IPv6 Bidirectional PIM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-multicast.html

IPv6 Multicast: Address Family Support for Multiprotocol BGP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-multicast.html

IPv6 Source Specific Multicast (SSM) Mapping

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-multicast.html

ISSU—ATM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-inserv_updg_xe.html

ISSU—AToM ATM Attachment Circuit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_trnsprt_mlps_atom.html

ISSU—MPLS Traffic Engineering (TE)—Path Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_path_prot.html

L2VPN PW Preferential Forwarding (Active/Standby Status)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/l2vpn_pw_preferential_forwarding.html

L2VPN PW Redundancy—ATM Attachment Circuits

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/wan/configuration/guide/wan_l2vpn_pw_red_ps9587_TSD_Products_Configuration_Guide_Chapter.html

LSP Ping for FEC129 (via VCCV)—RFC4379

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ldp_te_lsp_vccv.html

MPLS EM—LSP Ping/Trace for LDP & RSVP IPv4 FECs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ldp_te_lsp_vccv.html

MPLS EM—MPLS FRR MIB (IETF draft v01)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_fast_rr_mib.html

MPLS EM—MPLS Multipath (ECMP) LSP Tree Trace

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_em_multipath_tree.html

MPLS EM—MPLS TE MIB (IETF draft v05)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_mib.html

MPLS LSP Ping/Traceroute and AToM VCCV

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ldp_te_lsp_vccv.html

MPLS Pseudowire Status Signaling

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_pw_status.html

MPLS Support for Multi-Segment PWs—MPLS OAM/VCCV

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/multisegmentpseudowires.html

MPLS TE—BFD-Triggered Fast Reroute (FRR)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_bfd_frr.html

MPLS TE—Fast Tunnel Interface Down Detection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_link_node_prot.html

MPLS TE—Node Protection Desired Bit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_link_node_prot.html

MPLS Traffic Engineering Forwarding Adjacency

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_fwd_adjacency.html

MPLS Traffic Engineering—Policy Routing onto MPLS TE Tunnels

Cisco IOS XE Release 2.3.0 supports mapping packets to MPLS Traffic Engineering tunnels.

For more information, see the set interface command in the Cisco IOS IP Routing Protocols Command Reference at the following URL:

http://www.cisco.com/en/US/docs/ios/iproute/command/reference/irp_pi2.html

MPLS Traffic Engineering (TE)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_enhance.html

MPLS Traffic Engineering (TE)—Configurable Path Calculation Metric for Tunnels

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_cfg_path_calc.html

MPLS Traffic Engineering (TE)—Fast Reroute (FRR) Link and Node Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_frr_node_prot.html

MPLS Traffic Engineering (TE)—IP Explicit Address Exclusion

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_expl_address.html

MPLS Traffic Engineering (TE)—LSP Attributes

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_lsp_attr.html

MPLS Traffic Engineering (TE)—Path Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_path_prot.html

MPLS Traffic Engineering (TE)—RSVP Graceful Restart

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_rsvp_graceful.html

MPLS Traffic Engineering (TE)—RSVP Hello State Timer

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_rsvp_hello.html

MPLS Traffic Engineering (TE): Verbatim Path Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_verbatim_path.html

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ce_vpn_explicit.html

NBAR Protocols

For information about this feature, see the following document, which also includes a table listing the NBAR protocol support per Cisco IOS XE release:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/clsfy_traffic_nbar_xe.html

NSF/SSO—AToM ATM Attachment Circuit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_trnsprt_mlps_atom.html

NSF/SSO—MPLS TE and RSVP Graceful Restart

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_rsvp_graceful.html

NSF/SSO—MPLS Traffic Engineering (TE)—Path Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_path_prot.html

Operation, Administration, and Maintenance (OAM) F4 and F5

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam_f5_cnck.html

Per-VC Queueing for ATM

The Per-VC Queueing for ATM feature on the Cisco ASR 1000 Series Routers supports two sets of queues on a virtual circuit (VC):

Queues on a Shared Port Adapter (SPA) that uses segmentation and reassembly (SAR)

Queues on a Cisco QuantumFlow Processor (QFP)

Configurable SAR queues are not supported on Cisco ASR 1000 Series Routers. SAR allocates two queues per VC, one for high-priority traffic and another for low-priority traffic.

ATM QoS queueing operations on a QFP are carried out using the Modular QoS CLI (MCQ). The tx_limit command is used to change queue size on the QFP.

PPP—Max-Payload and IWF PPPoE Tag Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_ppp_mx_payld_xe.html

PPPoE Agent Remote ID and DSL Line Characteristics Enhancement

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_rmtid_dsl_xe.html

PPPoE Circuit-ID Tag Processing

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_cir_id_tag_pr_xe.html

PPPoE Relay

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_relaydis_ssf_xe.html

PPPoE—Session Limiting on Inner QinQ VLAN

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_qinq_vlan_limt_xe.html

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, FR, and ATM Services

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_edge2edge_mibs.html

QoS: Match ATM CLP

For information about this feature, see the following document:

http://cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/clsfy_netwk_traffic_xe_ps9587_TSD_Products_Configuration_Guide_Chapter.html

QoS-per-VC QoS Classification for ATM VP Pseudowires

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/qos_atm_vp_support.html

QoS Priority Percentage CLI Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/llq_with_pps_xe.html

Quality of Service: Policies Aggregation

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/qos_policies_agg_xe.html

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_rad_a66_enhcmts.html

RSVP Refresh Reduction and Reliable Messaging

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/rsvp_messaging.html

RSVP—Resource Reservation Protocol

The RSVP—Resource Reservation Protocol feature is supported for Multiprotocol Label Switching (MPLS) traffic engineering (TE) based on RFC 2205, Resource ReSerVation Protocol (RSVP - Version 1 Functional Specification, http://www.apps.ietf.org/rfc/rfc2205.html. To enable RSVP, see the ip rsvp bandwidth command in the Cisco IOS Quality of Service Solutions Command Reference.

SSO—ATM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-stfl_swovr_xe.html

New Hardware Features in Cisco IOS XE Release 2.2.3

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.3.

New Software Features in Cisco IOS XE Release 2.2.3

This section lists new and changed features in Cisco IOS XE Release 2.2.3. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.2.3.

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

MPLS VPN Carrier Supporting Carrier with BGP

MPLS VPN—eBGP Multipath Support for CSC and InterAS MPLS VPNs

MPLS VPN—Load Balancing Support for Inter-AS and CSC VPNs

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_carrier_ldp_igp.html

MPLS VPN Carrier Supporting Carrier with BGP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_carrier_bgp.html

MPLS VPN—eBGP Multipath Support for CSC and InterAS MPLS VPNs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_load_share_vpn.html

MPLS VPN—Load Balancing Support for Inter-AS and CSC VPNs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_load_share_vpn.html

New Hardware Features in Cisco IOS XE Release 2.2.2

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.2.

New Software Features in Cisco IOS XE Release 2.2.2

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.2.

New Hardware Features in Cisco IOS XE Release 2.2.1

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.1:

New Cisco ASR 1000 Embedded Services Processors

New Shared Port Adapters

New Cisco ASR 1000 Embedded Services Processors

Cisco IOS XE Release 2.2.1 introduces support for the following new Embedded Services Processors (ESPs):

Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable

The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable (Cisco ASR1000-ESP10-N) is a non-crypto capable version of the encryption-enabled 10-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP10).

The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable provides a Cisco ASR 1000 solution for customers who are under export restrictions and not qualified to implement products that support strong encryption services. The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable feature support is the same as the 10-Gbps Cisco ASR 1000 Series ESP except that IPSec and other data-plane cryptographic features are not supported.

The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable is supported on all Cisco ASR 1000 Series chassis but should only be used with following consolidated packages that do not contain cryptographic (K9) software:

Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO


Note The Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO, Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO, and Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO consolidated packages do not require export qualification and can also run on the encryption-enabled 10-Gbps Cisco ASR 1000 Series ESP. The K9-based consolidated packages (Cisco ASR 1000 Series RP1 IP BASE, Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES and Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES) will never be supported on the Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable hardware.



Note The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable should never be inserted into a chassis using K9 software or the router may reload.



Note The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable and 10-Gbps Cisco ASR 1000 Series ESP should not be mixed in a hardware-redundant chassis.


For information about the Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable New Feature at the following location:

http://www.cisco.com/en/US/partner/docs/routers/asr1000/feature/guides/ASR_depop.html

20-Gbps Cisco ASR 1000 Series ESP

The 20-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP20) supports 20-Gbps bandwidth and is supported on the Cisco ASR 1004 and Cisco ASR 1006 chassis. It can optionally be deployed in customer networks that require 1+1 redundancy on Cisco ASR 1006 Routers. Performance highlights of the 20-Gbps ESP include hardware-assisted policing, encryption capability of 8 Gbps, 16 Mpps forwarding, 256MB of packet memory, 1GB (bytes) of resource memory performance, and special jitter- and latency-minimizing multicast packet replication.

For information about the 20-Gbps Cisco ASR 1000 Series ESP, see the following document:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

New Shared Port Adapters

Cisco IOS XE Release 2.2.1 introduces support for the following new shared port adapters (SPAs):

Channelized SPA

1-Port CHOC-3/CHSTM-1 SPA (SPA-1xCHSTM1/OC3)

POS SPAs

2-Port OC-48 POS/RPR SPA with SFP Optics (SPA-2XOC48POS/RPR)

4-Port OC-48 POS/RPR SPA with SFP Optics (SPA-4XOC48POS/RPR)

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New Software Features in Cisco IOS XE Release 2.2.1

This section lists new and changed features in Cisco IOS XE Release 2.2.1. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.2.1.

AAA Broadcast Accounting

Bidirectional PIM

Cisco Firewall and WAAS Inter-Op

Class-Based Marking

Class Based Weighted Fair Queuing (CBWFQ)

Control Plane Policing (CoPP)

Diffie-Hellman Group Support in IPSec

FPM—Flexible Packet Matching

GRE Tunnel IP Source and Destination VRF Membership

Integrated Session Border Controller

Full Support for Wildcard Response

H.248 Protocol—Acknowledgment Support for Three-Way Handshake

H.248 ServiceChange Handoff

Improved Media Timeout Detection

Interim Authentication Header Full Support

IPSec Pinhole Support—Twice NAT for IPv4 and No NAT for IPv6

IP SLAs—LSP Health Monitor

IP SLAs—LSP Health Monitor with LSP Discovery

IP SLAs—MPLS VPN Awareness

IPv6 QoS: MQC Packet Classification

IPv6 Routing—EIGRP Support

ISG: Accounting: Per Session, Service and Flow

ISG: Accounting: Postpaid

ISG: Accounting: Tariff Switching

ISG: Authentication: DHCP Option 82 Line ID - AAA Authorization Support

ISG:Flow Control: Flow Redirect (L4, Captive Portal)

ISG: Flow Control: QoS Control: Dynamic Rate Limiting (QU;QD)

ISG: Flow Control: QoS Control: MQC Support for IP Sessions

ISG: Instrumentation: Advanced Conditional Debugging

ISG: Instrumentation: Session and Flow Monitoring (Local and External)

ISG: Network Interface: IP Routed, VRF Aware MPLS

ISG: Network Interface: Tunneled (L2TP)

ISG: Policy Control: Cisco Policy Language

ISG: Policy Control: DHCP Proxy

ISG: Policy Control: ISG-SCE Control Bus

ISG: Policy Control: Multidimensional Identity per Session

ISG: Policy Control: Policy: Domain Based (Auto-Domain, Proxy)

ISG: Policy Control: Policy Server: CoA ASCII Command Code Support

ISG: Policy Control: Policy Server: CoA (QoS, L4 Redirect, User ACL, TimeOut)

ISG: Policy Control: Policy Server: SSG-SESM Protocol

ISG: Policy Control: Policy: Triggers (Time, Volume, Duration)

ISG: Policy Control: RADIUS Proxy Enhancement

ISG: Policy Control: Service Profiles

ISG: Policy Control: User Profiles

ISG: Session: Auth: Single Sign On

ISG: Session: Authentication (MAC, IP, EAP)

ISG: Session: Creation: IP Session: Protocol Event (DHCP, RADIUS)

ISG: Session: Creation: IP Session: Subnet and Source IP: L2

ISG: Session: Creation: IP Session: Subnet and Source IP: L3

ISG: Session: Creation: P2P Session (PPPoE, PPPoXoX)

ISG: Session: LifeCycle: Idle Timeout

ISG: Session: LifeCycle: POD

ISG: Session: Multi-Service Creation and Flow Control

ISG: Session: Protection and Resiliency: Keepalive—ARP, ICMP

ISG: Session: VRF Transfer

L2TP AAA Accounting Include NAS-PORT (VPI/VCI)

L2TP HA Session SSO/ISSU on LAC/LNS

L3 MPLS VPN Over GRE

MPLS LDP— VRF Aware Static Labels

MPLS VPN—Per VRF Label

MPLS VPN: VRF Selection Using Policy Based Routing

Multihop VPDN

Multi-VRF Selection Using Policy Based Routing (PBR)

NAT—Routemaps Outside-to-Inside Support

Packet Classification Based on Layer3 Packet-Length

PBR Support for Multiple Tracking Options

Per Subscriber Firewall on LNS

Policy-Based Routing (PBR)

Policy-Based Routing (PBR) Default Next-Hop Route

Policy Based Routing: Recursive Next Hop

Policy Routing Infrastructure

PPPoE—QinQ Support

QoS—Hierarchical Queuing for Ethernet DSLAMs

RADIUS Route Download

Remote Access to MPLS-VPNs

SGI Interface

VRF Aware System Message Logging (Syslog)

VRF-Aware VPDN Tunnels

WCCP L2 Return

WCCP Layer 2 Redirection / Forwarding

WCCP Mask Assignment

WCCP Redirection on Inbound Interfaces

WCCP Version 2

AAA Broadcast Accounting

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_accountg.html

Bidirectional PIM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipmulti/configuration/guide/imc_basic_cfg.html

Cisco Firewall and WAAS Inter-Op

The Cisco Firewall and WAAS Interoperability feature enables a router configured with a firewall to successfully communicate with a cache engine, such as a Wide Area Application Acceleration (WAAS) device that is using the Web Cache Communication Protocol (WCCP).

WAAS optimizes remote access to applications.When the cache engine is a WAAS device, it can optimize TCP flow by modifying TCP headers. During the TCP three-way handshake, the WAAS device can add an extra TCP option in the header to indicate that the flow will be optimized. When the TCP session is established, the WAAS device can modify the sequence and acknowledge number in the TCP header to optimize the data flow.

When a Cisco firewall is configured on the router, the packets have to be inspected by the firewall. Depending on the deployment scenario, the firewall inspects packets as follows:

For client-to-server packets, the firewall inspects packets in the redirect path and ignores packets in the return path.

For server-to-client packets, the firewall inspects packets in the return path and ignores packets in the redirect path.

If the firewall encounters a TCP SYN packet with the 0x21 option, the firewall knows that this packet is already a WAAS flow. The firewall will adjust the Layer 4 state to reflect the 2-GB jump in sequence and acknowledge numbers. No Layer 7 inspection will be applied to the flow.

Although the firewall will ignore the same packets in either the redirect or the return path, the firewall must still perform a session lookup to get the information about the direction of the packet (from client to server or server to client).

This feature has the following restrictions:

Only Generic Routing Encapsulation (GRE) redirect and return is supported. Layer 2 redirect and return is not supported.

Certain platforms, such as the Cisco 2800 series, support an inbox network service module (WAAS-NM) that provides WAAS services. The Cisco ASR 1000 series routers do not support inbox network service modules; thus, the router will not support WAAS-NM.

Class-Based Marking

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/mrkg_netwk_traffic.html

Class Based Weighted Fair Queuing (CBWFQ)

CBWFQ extends the standard weighted fair queueing (WFQ) functionality to provide support for user-defined traffic classes. For CBWFQ, you define traffic classes based on match criteria such as protocols, access control lists (ACLs), and input interfaces.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/config_wfq.html

Control Plane Policing (CoPP)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/ctrl_plane_policng.html

Diffie-Hellman Group Support in IPSec

The Diffie-Hellman Group Support in IPSec feature adds support for Diffie-Hellman groups 14, 15, and 16.

For more information, see the group (IKE policy) and set pfs commands in the following document:

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_book.html

FPM—Flexible Packet Matching

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_flex_pack_match.html

GRE Tunnel IP Source and Destination VRF Membership

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/interface/configuration/guide/ir_impl_tun.html

Integrated Session Border Controller

Cisco IOS XE Release 2.2.1 introduces support for the following new Integrated Session Border Controller (SBC) features:

Full Support for Wildcard Response

H.248 Protocol—Acknowledgment Support for Three-Way Handshake

H.248 ServiceChange Handoff

Improved Media Timeout Detection

Interim Authentication Header Full Support

IPSec Pinhole Support—Twice NAT for IPv4 and No NAT for IPv6

Full Support for Wildcard Response

Previously Session Border Controller (SBC) supported H.248 wildcard operations that were restricted to W-Modify or W-Subtract requests, which yielded summary wildcard responses. This feature introduces support for a complete wildcard response. A wildcard H.248 Subtract or Modify operation now returns a complete response with per-termination statistics.

H.248 Protocol—Acknowledgment Support for Three-Way Handshake

The data border element (DBE) supports a three-way handshake for H.248 messages. The DBE supports sending of an acknowledgement for a three-way handshake after receiving the transaction response from the media gateway controller (MGC), as described in Annex D.1.2 and Annex D.1.2.2 of H.248.1 v3 Gateway Control Protocol.

H.248 ServiceChange Handoff

The ServiceChange Handoff functionality on Integrated Session Border Controller conforms to section 7.2.8, ServiceChange, and section 7.2.8.1.1, ServiceChangeMethod, of the H.248.1 v3 Gateway Control Protocol. The ServiceChange Handoff functionality allows a media gateway controller (MGC) to hand over control of a media gateway (MG) to another MGC. The MGC sends a ServiceChange message to the MG that it is currently associated with to request that the MG terminate that association and the MG form a new association with an MGC identified in the ServiceChange message.

Improved Media Timeout Detection

In the previous media timeout functionality on the data border element (DBE), if no SBC packets have been seen by the configured number of seconds since the call has been established, then the DBE generates a media timeout alert to the SBE. The Improved Media Timeout Detection feature delays reporting of the media timeout event by instructing the DBE to wait until it has received the first packet since the call has been established. Only then does the media timeout timer start counting the number of seconds for which it has not seen an SBC packet. At the end of the count, the DBE generates an alert to the SBE.

Interim Authentication Header Full Support

Integrated SBC offers full support of Interim Authentication Header (IAH) that conforms to section 10.2, Interim AH Scheme, of the H.248.1 v3 Gateway Control Protocol. An IAH is part of every H.248 message generated by the data border element (DBE) to the media gateway controller (MGC). Information in the IAH is used to authenticate and check the integrity of packets, thus ensuring packet security. The DBE generates an IAH for outgoing H.248 messages and can verify the Authentication Header for incoming H.248 messages. The IAH scheme inserts the IAH within the H.248.1 protocol header.

IPSec Pinhole Support—Twice NAT for IPv4 and No NAT for IPv6

The IPSec Pinhole Support—Twice NAT for IPv4 and No NAT for IPv6 feature adds support for voice calls over IPSec tunnels and adds support for IPSec address-only pinholes. This support enables the DBE to forward IPSec packets when the port cannot be determined because the port is within the encrypted portion of the frame. Thus, IPSec support handles the IPSec requirement that does not allow use of port numbers for session lookup or translation. Currently single IPSec pinholes are supported, whereby both IKE and the encrypted IPSec traffic passes through the same pinhole.

For information about these SBC features, see the following document:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbc/2_xe/sbc_2_xe_book.html

IP SLAs—LSP Health Monitor

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipsla/configuration/guide/sla_lsp_mon_autodisc.html

IP SLAs—LSP Health Monitor with LSP Discovery

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipsla/configuration/guide/sla_lsp_mon_autodisc.html

IP SLAs—MPLS VPN Awareness

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipsla/configuration/guide/sla_overview.html

IPv6 QoS: MQC Packet Classification

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-qos.html

IPv6 Routing—EIGRP Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-eigrp.html

ISG: Accounting: Per Session, Service and Flow

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Accounting: Postpaid

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Accounting: Tariff Switching

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Authentication: DHCP Option 82 Line ID - AAA Authorization Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG:Flow Control: Flow Redirect (L4, Captive Portal)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Flow Control: QoS Control: Dynamic Rate Limiting (QU;QD)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Flow Control: QoS Control: MQC Support for IP Sessions

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Instrumentation: Advanced Conditional Debugging

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Instrumentation: Session and Flow Monitoring (Local and External)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Network Interface: IP Routed, VRF Aware MPLS

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Network Interface: Tunneled (L2TP)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Cisco Policy Language

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: DHCP Proxy

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: ISG-SCE Control Bus

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Multidimensional Identity per Session

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Policy: Domain Based (Auto-Domain, Proxy)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Policy Server: CoA ASCII Command Code Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Policy Server: CoA (QoS, L4 Redirect, User ACL, TimeOut)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Policy Server: SSG-SESM Protocol

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Policy: Triggers (Time, Volume, Duration)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: RADIUS Proxy Enhancement

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: Service Profiles

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Policy Control: User Profiles

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Auth: Single Sign On

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Authentication (MAC, IP, EAP)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Creation: IP Session: Protocol Event (DHCP, RADIUS)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Creation: IP Session: Subnet and Source IP: L2

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Creation: IP Session: Subnet and Source IP: L3

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Creation: P2P Session (PPPoE, PPPoXoX)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: LifeCycle: Idle Timeout

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: LifeCycle: POD

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Multi-Service Creation and Flow Control

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: Protection and Resiliency: Keepalive—ARP, ICMP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

ISG: Session: VRF Transfer

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

L2TP AAA Accounting Include NAS-PORT (VPI/VCI)

The L2TP AAA Accounting Include NAS-PORT (VPI/VCI) feature allows an L2TP Network Server (LNS) to send the NAS Port-ID (attribute 5), as part of the accounting record to the RADIUS authentication, authorization, and accounting (AAA) server.

Limitations and Restrictions

In Cisco IOS XE Release 2.2.1, the L2TP AAA Accounting Include NAS-PORT feature does not support the asynchronous transfer mode (ATM) virtual path identifier/virtual channel identifier (VPI/VCI) pair.

L2TP HA Session SSO/ISSU on LAC/LNS

The L2TP HA Session SSO/ISSU on a LAC/LNS feature provides a generic Stateful Switchover/In Service Software Upgrade (SSO/ISSU) mechanism for Layer 2 Tunneling Protocol (L2TP) on a Layer 2 Access Concentrator (LAC) and a Layer 2 Network Server (LNS). This feature preserves all fully-established Point-to-Point Protocol (PPP) and L2TP sessions (including Multihop) during an SSO switchover, or an ISSU upgrade or downgrade.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/vpdn/configuration/guide/l2tp_sso.html

L3 MPLS VPN Over GRE

L3 MPLS VPN over GRE provides a mechanism for tunneling Multi Protocol Label Switching (MPLS) packets over a non-MPLS network.

The L3 MPLS VPN over GRE feature utilizes MPLS over Generic Routing Encapsulation (MPLSoGRE) to encapsulate MPLS packets inside IP tunnels; thus creating a virtual point-to-point link across non-MPLS networks. This allows users of primarily MPLS networks to continue to use existing non-MPLS legacy networks until migration to MPLS is possible.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vpn_gre.html

MPLS LDP— VRF Aware Static Labels

The MPLS LDP-VRF-Aware Static Labels document explains how to configure the MPLS LDP-VRF-Aware Static Labels feature and Multiprotocol Label Switching (MPLS) static labels.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vrf_aware_static.html

MPLS VPN—Per VRF Label

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vpn_per_vrf_lbl.html

MPLS VPN: VRF Selection Using Policy Based Routing

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vpn_vrf_select_rt.html

Multihop VPDN

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/vpdn/configuration/guide/config_multihop_vpdn_ps9587_TSD_Products_Configuration_Guide_Chapter.html

Multi-VRF Selection Using Policy Based Routing (PBR)

The Multi-VRF Selection Using Policy-Based Routing feature allows a specified interface on a provider edge (PE) router to route packets to Virtual Private Networks (VPNs) based on packet length or match criteria defined in an IP access list.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_mltvrf_slct_pbr.html

NAT—Routemaps Outside-to-Inside Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iadnat_addr_conserv.html

Packet Classification Based on Layer3 Packet-Length

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/class_l3_pkt_length.html

PBR Support for Multiple Tracking Options

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/irp_prb_mult_track.html

Per Subscriber Firewall on LNS

The Per-Subscriber Firewall on LNS feature enables the zone-based policy firewall configuration model to be implemented on the Cisco ASR 1000 Series Router. Zone-based policy firewall is a unidirectional firewall policy between groups of interfaces known as zones. (Previously, Cisco firewalls were configured as an inspect rule only on interfaces. Traffic entering or leaving the configured interface was inspected based on the direction that the inspect rule was applied.) Now, interfaces are assigned to zones, and inspection policies are applied to traffic moving between the zones. Interzone policies offer considerable flexibility and granularity, so different inspection policies can be applied to multiple host groups connected to the same router interface.

In addition to the zone-based policy firewall model, the Per-Subscriber Firewall on LNS feature introduces the following additional functionality for the Cisco ASR 1000 Series Router:

Dynamic zone assignment for virtual access interfaces

Subscribers can be assigned to a zone in one of two ways:

Using the configuration on the virtual-template interface, which can be useful when placing subscribers in a default zone.

Using the RADIUS vendor-specific attribute (VSA), which enables zone assignment to be determined when the session is authorized.

PPP session-level granularity for zone-based policy firewall

Stateful inspection and application monitoring occur at the PPP session, enabling the full suite of firewall and broadband features to be applied per subscriber, simultaneously. That is, extra routers or service blades are not required to support the firewall functionality. The firewall functionality is applied by the packet processor engine (PPE) in the forwarding path for broadband traffic.

Per-subscriber drop log messages

Service providers can track drops on a per-subscriber basis by including the subscriber's username in the drop log messages. These drop log messages can also be sent to an off-box server for additional processing.

Zone pairs with matching source and destination zones

Service providers can customize the firewall policy for traffic between subscribers in the same zone. Customization is useful for overriding the default behavior, which is the passage of all traffic within the same zone.

For more information on zone-based policy firewalls, see the following documents:

Zone-Based Policy Firewall

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_zone_polcy_firew.html

Zone-based Policy Firewall Design and Application Guide

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml

Policy-Based Routing (PBR)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/irp_ip_prot_indep.html


Note Cisco IOS XE Release 2 only supports PBR on IPv4; Cisco IOS Release 2 does not support IPv6 PBR.


Policy-Based Routing (PBR) Default Next-Hop Route

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/irp_ip_prot_indep.html

Policy Based Routing: Recursive Next Hop

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/pbr_recur_next_hop.html

Policy Routing Infrastructure

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/irp_ip_prot_indep.html

PPPoE—QinQ Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/bbdsl/configuration/guide/bba_pppoe_qinq.html

QoS—Hierarchical Queuing for Ethernet DSLAMs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/hier_que_eth_dslams.html

RADIUS Route Download

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_rad_route_dwnld.html

Remote Access to MPLS-VPNs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ra_mpls_vpns.html

SGI Interface

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/isg/configuration/guide/2_xe/isg_2_xe_book.html

VRF Aware System Message Logging (Syslog)

The VRF Aware System Message Logging (Syslog) feature allows a router to send system logging (syslog) messages to a syslog server host connected through a Virtual Private Network (VPN) routing and forwarding (VRF) interface.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vrf_aware_loggng.html

VRF-Aware VPDN Tunnels

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/vpdn/configuration/guide/additional_vpdn_feat_ps9587_TSD_Products_Configuration_Guide_Chapter.html#wp1106398

WCCP L2 Return

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html

WCCP Layer 2 Redirection / Forwarding

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html

WCCP Mask Assignment

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html

WCCP Redirection on Inbound Interfaces

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html

WCCP Version 2

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html

New Hardware Features in Cisco IOS XE Release 2.1.2

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.1.2.

New Software Features in Cisco IOS XE Release 2.1.2

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.1.2.

New Hardware Features in Cisco IOS XE Release 2.1.1

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.1.1.

New Software Features in Cisco IOS XE Release 2.1.1

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.1.1.

New Hardware Features in Cisco IOS XE Release 2.1.0

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.1.0:

Cisco ASR 1002 Router

Cisco ASR 1004 Router

Cisco ASR 1006 Router

Cisco ASR 1000 Embedded Services Processors

Cisco ASR 1000 Route Processor 1

Cisco ASR 1000 SPA Interface Processor

Shared Port Adapters

1GB USB Flash Token for Cisco ASR 1000 Series

Cisco ASR 1002 Router

The Cisco ASR 1002 Router (3-SPA, 2-RU chassis) comes with an integrated Route Processor (RP), an integrated SPA Interface Processor (SIP), four built-in Gigabit Ethernet ports, and is configurable with either the 5 Gbps or 10 Gbps Embedded Services Processor (ESP). The Cisco ASR 1002 Router supports the following components:

One Cisco ASR 1000 Series Embedded Services Processor (ESP). Either the 5-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP5) or the 10-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP10).

One Cisco ASR 1000 Series Route Processor 1 (Cisco ASR1000-RP1) with 4-GB DRAM (memory is not factory- or field-upgradeable) integrated in the chassis

Four built-in Gigabit Ethernet ports

One Cisco ASR 1000 SPA Interface Processor 10 (Cisco ASR1000-SIP10) integrated in the chassis

Up to three fixed SPAs integrated in the chassis

Dual (redundant) power supplies, option of either AC or DC power supply

Running on Cisco IOS XE Software, the Cisco ASR 1002 Router supports software redundancy, Cisco high-availability features, Nonstop Forwarding (NSF), and In Service Software Upgrades (ISSUs) without redundant hardware.

For information about the Cisco ASR 1002 Router, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1002 Quick Start Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/quick/start/guide/asr1_qs2.html

Cisco ASR 1004 Router

The Cisco ASR 1004 Router (8-SPA, 4-RU chassis) comes with one Route Processor (RP) slot, one Embedded Services Processor (ESP) slot, two SPA Interface Processor (SIP) slots, and provides 10 Gbps throughput support. The Cisco ASR 1004 Router supports the following components:

One Cisco ASR 1000 Series Embedded Services Processor (Cisco ASR1000-ESP10)

One Cisco ASR 1000 Series Route Processor 1 (Cisco ASR1000-RP1)

Up to two Cisco ASR 1000 Series SPA Interface Processors (Cisco ASR1000-SIP10s)

Up to eight SPAs

Dual (redundant) power supplies, option of either AC or DC power supply

Running on Cisco IOS XE Software, the Cisco ASR 1004 Router supports software redundancy, Cisco high-availability features, NSF, and ISSUs without redundant hardware.

For information about the Cisco ASR 1004 Router, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1004 Quick Start Guideat the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/quick/start/guide/asr1_qs4.html

Cisco ASR 1006 Router

The Cisco ASR 1006 Router (12-SPA, 6-RU chassis) provides the option of hardware-redundant Route Processor (RP) and Embedded Services Processor (ESP) support. Its features include two ESP slots, two RP slots, three SIP slots, and 10 Gbps throughput support. The Cisco ASR 1006 Router supports the following components:

Dual Cisco ASR 1000 Series Embedded Services Processors (Cisco ASR1000-ESP10s)

Dual Cisco ASR 1000 Series Route Processor 1s (Cisco ASR1000-RP1s)

Up to three Cisco ASR 1000 Series SPA Interface Processors (Cisco ASR1000-SIP10s)

Up to twelve SPAs

Dual (redundant) power supplies, option of either AC or DC power supply


Note When multiple ESPs, RPs, and SIPs are used, the amount of memory should be equal for like components. (The amount of memory in both ESPs should be equal, the amount of memory in both RPs should be equal, and the amount of memory in each SIP should be equal.) Earlier releases may have a few field replaceable units (FRUs) that support different amounts of memory.


Running on Cisco IOS XE Software, the Cisco ASR 1006 Router supports hardware redundancy, NSF, ISSUs, and future Route-Processor service upgrades.


Note Software redundancy is not supported on the Cisco ASR 1006 Router.


For information about the Cisco ASR 1006 Router, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1006 Quick Start Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/quick/start/guide/asr1_qs6.html

Cisco ASR 1000 Embedded Services Processors

The Cisco ASR 1000 Series Embedded Services Processors (ESPs) provide the centralized forwarding-engine options for the Cisco ASR 1000 Series Routers. Based on the first generation of the hardware and software architecture known as the Cisco QuantumFlow Processor, the Cisco ASR 1000 Series ESPs are responsible for the data-plane processing tasks, and all network traffic flows through them. The modules perform all baseline packet routing operations, including MAC classification, Layer 2 and Layer 3 forwarding, Quality of Service (QoS) classification, policing and shaping, security access control lists (ACLs), virtual private networks (VPNs), load balancing, and NetFlow. They are also responsible for features such as firewalls, intrusion prevention, Network Based Application Recognition (NBAR), and Network Address Translation (NAT).

The Cisco ASR 1000 Series Routers support two ESPs:

5-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP5), which is only supported on the Cisco ASR 1002 chassis

10-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP10), which is supported on all Cisco ASR 1000 Series chassis

5-Gbps Cisco ASR 1000 Series ESP

The 5-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP5) supports 5-Gbps bandwidth, an encryption capability of 1 Gbps, and is supported exclusively on the Cisco ASR 1002 chassis.

10-Gbps Cisco ASR 1000 Series ESP

The 10-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP10) supports 10-Gbps bandwidth, is supported on all Cisco ASR 1000 Series chassis, and can optionally be deployed in customer networks that require 1+1 redundancy on Cisco ASR 1006 Routers. Performance highlights of the 10-Gbps ESP include hardware-assisted policing, encryption capability of 3 Gbps, and special jitter- and latency-minimizing multicast packet replication.

For information about the 5-Gbps Cisco ASR 1000 Series ESP and the 10-Gbps Cisco ASR 1000 Series ESP, see the following document:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1000 Route Processor 1

The Cisco ASR 1000 Series Route Processor 1 (Cisco ASR1000-RP1) is the main control plane processor in the chassis and is responsible for:

All control processor communication (such as running the operating system, managing control traffic, storing files, system logging, and most management-type tasks).

Processing locally destined control-plane packets and RP-switched packets.

Central network clocking.

Certain control plane functions related to PPPoE and Session Border Controller (SBC) functions. (These functions are the single largest source of RP overhead.)

Cisco ASR 1000 Series field replaceable unit (FRU) online insertion and removal (OIR).

Selection of the active Cisco ASR1000-RP1 and Cisco ASR 1000 Series Embedded Services Processor, and notification of the SIP of these events.

On the Cisco ASR 1002 Router, the Cisco ASR1000-RP1 is integrated in the chassis and comes with 4-GB DRAM (memory is neither factory- nor field-upgradeable).

On the Cisco ASR 1004 and Cisco ASR 1006 routers, the Cisco ASR1000-RP1 is supported as a modular component and supports two memory options:

2-GB DRAM

4-GB DRAM

The Cisco ASR 1006 Router contains two RP slots to support full hardware redundancy for RP1s within the same router.

For information about the Cisco ASR1000-RP1, see the following document:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1000 SPA Interface Processor

The Cisco ASR 1000 Series SPA Interface Processor (SIP) (Cisco ASR1000-SIP10) accepts up to 4 half-height or 2 full-height Cisco SPAs, including Ethernet, Packet over SONET/SDH (POS), and Serial SPAs, providing up to 10-Gbps connection to the system backplane with an ability to differentiate traffic based on Layer 2 or Layer 3 header information.

The Cisco ASR 1000 Series SIP is built into the Cisco ASR1002 chassis and supported as a modular component on the Cisco ASR1004 and Cisco ASR1006 chassis. The Cisco ASR 1004 chassis contains two SIP slots; the Cisco ASR 1006 chassis contains three SIP slots.

For information about the Cisco ASR 1000 Series SIP, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

Shared Port Adapters

Shared Port Adapters (SPAs) provide the physical interfaces for router connectivity ranging from copper, channelized, POS, and Ethernet.

The Cisco ASR 1000 Series Routers support the following SPAs:

Serial SPAs

2-Port and 4-Port T3/E3 Serial SPA (SPA-2XT3/E3, SPA-4XT3/E3)

2-Port and 4-Port Channelized T3 SPA (SPA-2XCT3/DS0, SPA-4XCT3/DS0)

8-Port Channelized T1/E1 Serial SPA (SPA-8XCHT1/E1)

4-Port Serial Interface SPA (SPA-4XT-Serial)

Ethernet SPAs

4-Port and 8-Port Fast Ethernet SPA (SPA-4X1FE-TX-V2, SPA-8X1FE-TX-V2)

1-Port 10-Gigabit Ethernet SPA (SPA-1X10GE-L-V2)

2-Port Gigabit Ethernet SPA (SPA-2X1GE-V2)

5-Port Gigabit Ethernet SPA (SPA-5X1GE-V2)

8-Port Gigabit Ethernet SPA (SPA-8X1GE-V2)

10-Port Gigabit Ethernet SPA (SPA-10X1GE-V2)

POS SPAs

1-Port OC-12c/STM-4 POS SPA (SPA-1XOC12-POS)

2-Port and 4-Port OC-3 POS SPA (SPA-2XOC3-POS, SPA-4XOC3-POS)

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

1GB USB Flash Token for Cisco ASR 1000 Series

The Cisco ASR 1000 Series Routers support a 1GB USB Flash Token for Cisco ASR 1000 Series. This USB Flash token can be used to store images, configuration files, or any other type of data, and can also be used to boot a consolidated package on the router. (The USB Flash token can not be used to boot sub-packages on the router.)


Caution Only Cisco ASR 1000 RP1 1GB USB flash memory (the 1GB USB Flash Token for Cisco ASR 1000 Series) is supported for use with the Cisco ASR 1000 Series Routers.

New Software Features in Cisco IOS XE Release 2.1.0

This section describes new and changed features in Cisco IOS XE Release 2.1.0. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.1.0. To determine if a feature is new or changed, refer to the feature history table at the beginning of the feature module for that feature. Links to feature modules are included. If a feature does not have a link to a feature module, that feature is documented only in the release notes, and information about whether the feature is new or changed will be available in the feature description provided.


Note This section is not cumulative and list only new features that were introduced for Cisco IOS XE Release 2.1.0. For information about inherited features, refer to the Cisco Feature Navigator tool at http://www.cisco.com/go/fn.


BFD IPv6 Encaps Support

BFD—IPv6 Static Route Support

DHCP—DHCPv6 Relay Agent Notification for Prefix Delegation

DHCP Relay Server ID Override and Link Selection Option 82 Suboptions

DHCPv6 Ethernet Remote ID Option

Integrated Session Border Controller

IPv6: Base Protocols High Availability

IPv6: NSF and Graceful Restart for MP-BGP IPv6 Address Family

IPv6: RIPng Non-Stop Forwarding

IPv6: Static Route Non-Stop Forwarding

MQC—Distribution of Remaining Bandwidth Using Ratio

PPPoE Session Limit Local Override

Quality of Service for Gigabit EtherChannels

QoS: Policies Aggregation

TCP MIB for RFC4022 Support

VLAN Mapping to GEC Member Links

BFD IPv6 Encaps Support

The Bidirectional Forwarding Detection for IPv6 (BFDv6) protocol provides fast forwarding path failure detection times for all media types, encapsulations, topologies, and routing protocols. In addition to fast forwarding path failure detection, BFD provides a consistent failure detection method for network administrators. The BFD IPv6 Encaps Support feature updates the Bidirectional Forwarding Protocol (BFD) protocol to provide IPv6 support and accommodate IPv6 addresses.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-bfd.html

BFDIPv6 Static Route Support

The BFD—IPv6 Static Route Support feature enables BFD for IPv6 to be used to verify next-hop reachability for IPv6 static routes.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-bfd.html

DHCP—DHCPv6 Relay Agent Notification for Prefix Delegation

The DHCP—DHCPv6 Relay Agent Notification for Prefix Delegation feature allows the router working as a DHCPv6 relay agent to find prefix delegation options by reviewing the contents of a DHCPv6 packet that is being relayed by the relay agent to the client.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-dhcp.html

DHCP Relay Server ID Override and Link Selection Option 82 Suboptions

The DHCP Relay Server ID Override and Link Selection Option 82 Suboptions feature enables the relay agent to be part of all DHCP message exchanges by supporting the use of two suboptions of the relay agent information option (option 82). This design allows DHCPv4 to operate in networks where direct communication between the client and server is not possible or desired. When used together, these two suboptions enable the deployment of an architecture where it is desirable to have all DHCP traffic flow through the relay agent, allowing for greater control of DHCP communications.

This feature also introduces the capability to manually configure the interface for the relay agent to use as the source IP address for messages relayed to the DHCP server. This configuration allows the network administrator to specify a stable, hardware-independent IP address (such as a loopback interface).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcpservidlink_mcp.html

DHCPv6 Ethernet Remote ID Option

The DHCPv6 Ethernet Remote ID Option feature adds the remote-ID option to relayed (RELAY-FORWARD) DHCPv6 packets.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-dhcp.html

Integrated Session Border Controller

The Integrated Session Border Controller (SBC) is introduced on the Cisco ASR 1000 Series Routers. The Integrated SBC is integrated with other features on the Cisco ASR 1000 Series Routers, without requiring additional application-specific hardware, such as service blades, or the need to create an overlay network of standalone SBC appliances.

Session border controllers are used as key components in interconnecting Voice over IP (VoIP) and multimedia networks of different enterprise customers and service providers. SBCs are deployed at the edge of networks to meet the need for secure, intelligent border element functions. Using SBCs, the end user can make voice and video calls to another end user without being concerned about protocols, network reachability, or safety of the network.

The SBC enables direct IP-to-IP interconnect between multiple administrative domains for session-based services providing protocol and signaling interworking, security, Quality of Service (QoS), network hiding, statistics gathering, and admission control and management.

Currently the data border element (DBE) functionality of the Integrated Session Border Controller is supported on the Cisco ASR 1000 Series Routers.

For information about this feature, see the following documents:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbc/2_xe/sbc_2_xe_book.html

http://www.cisco.com/en/US/docs/ios/sbc/command/reference/sbc_book.html

IPv6: Base Protocols High Availability

The IPv6: Base Protocols High Availability feature enables IPv6 neighbor discovery to support stateful switchover.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-mptcl_bgp.html

IPv6: NSF and Graceful Restart for MP-BGP IPv6 Address Family

The IPv6: NSF and Graceful Restart for MP-BGP IPv6 Address Family feature adds graceful restart capability support for IPv6 BGP unicast, multicast, and VPNv6 address families, enabling Cisco nonstop forwarding (NSF) functionality for BGP IPv6. The BGP graceful restart capability allows the BGP routing table to be recovered from peers without keeping the TCP state.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-mptcl_bgp.html

IPv6: RIPng Non-Stop Forwarding

The IPv6: RIPng Non-Stop Forwarding feature enables IPv6 RIP to support nonstop forwarding.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-rip.html

IPv6: Static Route Non-Stop Forwarding

The IPv6: Static Route Non-Stop Forwarding feature enables IPv6 static routes to support nonstop forwarding.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-stat_routes.html

MQCDistribution of Remaining Bandwidth Using Ratio

The MQCDistribution of Remaining Bandwidth Using Ratio feature allows service providers to configure a bandwidth-remaining ratio on subinterfaces and class queues. This ratio specifies the relative weight of a subinterface or queue with respect to other subinterfaces or queues. During congestion, the router uses this bandwidth-remaining ratio to determine the amount of excess bandwidth (unused by priority traffic) to allocate to a class of nonpriority traffic.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/bwdth_remain_ratio.html

PPPoE Session Limit Local Override

The PPPoE Session Limit Local Override feature enables the session limit configured locally on the broadband remote access server (BRAS) or L2TP access concentrator (LAC) to override the per-NAS-port session limit downloaded from the RADIUS server when Subscriber Service Switch (SSS) preauthorization is enabled.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/bbdsl/configuration/guide/bba_ppoe_sllov.html

Quality of Service for Gigabit EtherChannels

The Quality of Service: Policies Aggregation feature allows the default traffic classes of different policy maps on the same physical interface to be configured as a single traffic class within the Modular QoS CLI. The Quality of Service for Gigabit EtherChannels feature extends the functionality introduced in the Quality of Service: Policies Aggregation feature by allowing the default traffic classes of different member links in the same Gigabit EtherChannel bundle to be configured as a single traffic class within the Modular QoS CLI.

This feature is documented as part of the Quality of Service: Policies Aggregation feature.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/qos_policies_agg.html

QoS: Policies Aggregation

The QoS: Policies Aggregation feature allows the default traffic classes of different policy maps on the same physical interface to be configured as a single traffic class within the Modular QoS CLI.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/qos_policies_agg.html

TCP MIB for RFC4022 Support

The TCP MIB for RFC 4022 Support feature introduces support for RFC 4022, Management Information Base for the Transmission Control Protocol (TCP). RFC 4022 is an incremental change of the TCP MIB to improve the manageability of TCP.

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:

http://www.cisco.com/go/mibs

VLAN Mapping to GEC Member Links

The VLAN Mapping to GEC Member Links feature allows for the static assignment of user traffic as identified by a VLAN ID to a given member link of a GEC bundle. Network administrators can manually assign VLAN subinterfaces to a primary and secondary link. Load balancing to downstream equipment can be configured, regardless of the downstream equipment capabilities, and will provide failover protection by redirecting traffic to the secondary member link if the primary link fails. Member links are supported with up to 16 bundles per chassis.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/lanswitch/configuration/guide/lsw_cfg_gecvlan.html

Release Note Only Software Features in Cisco IOS XE Release 2.1.0

This section describes features that are supported in Cisco IOS XE Release 2.1.0 but that are documented only in the release notes and do not have a link to a feature module. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.1.0.

8-Way CEF Load Balancing

BGP Reduction in Transient Memory Usage

CEF Support for IP Routing Between IEEE 802.1 Q VLANs

Class-Based Quality of Service Management Information Base

Compression Control

DLR Enhancements: PGM RFC-3208 Compliance

Frame Relay FRF.1.2 Annex A Support

Interfaces MIB: SNMP Context Based Access

ISSU - IGMP Snooping

NAT—Performance Enhancement - Translation Table Optimization

Parse Bookmarks

PPPoE Over Gigabit Ethernet Interface

RADIUS Attribute 52 and 53 Gigaword Support

RADIUS Attribute 77 for DSL

Selective Packet Discard (SPD)

TCP MIB for RFC4022 Support

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

8-Way CEF Load Balancing

Destination IP prefixes are added to the routing table by routing protocols or static routes. Each path is a valid route to reach the destination prefix. The set of active paths is the set of paths with the best cost. Cisco Express Forwarding load balancing is the ability to share the traffic to a destination prefix over up to eight active paths (an increase from the previous support of six active paths). Load among the active paths can be distributed per destination.

BGP Reduction in Transient Memory Usage

The BGP Reduction in Transient Memory Usage feature implements a reduction in transient memory usage by BGP when BGP updates are built in Cisco IOS XE Release 2.

CEF Support for IP Routing Between IEEE 802.1 Q VLANs

Cisco Express Forwarding (CEF) is supported on interfaces on which IEEE 802.1Q encapsulation has been enabled at the subinterface level. You no longer have to disable CEF operation on interfaces that are using IEEE 802.1Q encapsulation on VLAN subinterfaces.

Class-Based Quality of Service Management Information Base

The Class-Based Quality of Service Management Information Base (Class-Based QoS MIB) provides read access to class-based QoS configurations. This MIB also provides QoS statistics information based on the Modular QoS CLI, including information regarding class map and policy map parameters.

This Class-Based QoS MIB is actually two MIBs: CISCO-CLASS-BASED-QOS-MIB and CISCO-CLASS-BASED-QOS-CAPABILITY-MIB.

Compression Control

The PPP Compression Control Protocol (CCP) defines a method for negotiating data compression over PPP links. These links can be either leased lines or circuit switched WAN links such as ISDN. PPP CCP allows vendors to support multiple data compression algorithms.

DLR Enhancements: PGM RFC-3208 Compliance

In compliance with RFC 3208, the DLR Enhancements: PGM RFC-3208 Compliance feature adds off-tree designated local repairer (DLR) support and redirecting poll response (POLR) capability for upstream DLRs to the Cisco implementation of Pragmatic General Multicast (PGM).

Frame Relay FRF.1.2 Annex A Support

The FRF.1.2 Annex A Support feature is also called Local Management Interface (LMI) segmentation. It supports an enhancement to the Frame Relay LMI protocol where LMI full status messages are segmented because of MTU constraints or large numbers of permanent virtual circuits (PVCs). This feature is useful when the maximum MTU size is insufficient to accommodate the large number of PVCs on the link. During Frame Relay internetworking with other Layer 2 protocols, the MTUs on each interface must match. In software without the FRF.1.2 Annex A Support feature, you cannot change the MTU size on the Frame Relay side and place all PVC data into one LMI packet. The FRF.1.2 Annex A Support feature removes this limitation.

The FRF.1.2 Annex A standard adds a new message type "Full status continued" to an LMI packet. When a DCE determines that it cannot fit all PVCs into one packet (enforced by the MTU size), the message type is set to "Full status continued." The DTE responds to "Full status continued" messages that are sent to this packet immediately instead of waiting for the T391 timer to expire. The DCE sends the remaining PVCs in one or more "Full status continued" messages until all the remaining PVCs can fit into one message. At this point, a normal "Full status" message is sent.

If the DTE receives a "Full status" or "Full status continued" STATUS message in response to a "Full status continued" STATUS ENQUIRY message, this exchange indicates a lower-valued data-link connection identifier (DLCI) than the prior "Full status continued" STATUS message (and is considered to be an error event), and PVC information elements (IEs) are not processed. The next time the T391 timer expires, the "Full status" STATUS ENQUIRY procedure is reinitiated.

This feature follows the FRF.1.2 implement agreement [1] and allows Cisco IOS software to be compliant with the FRF.1.2 standard. The implementation is platform-independent and applies to all platforms running Cisco IOS software that support Frame Relay. This feature interoperates only with existing Cisco IOS software releases where all PVCs can be reported in one packet. A router running the new functionality must be able to interoperate with routers running existing Cisco IOS software releases and with routers that support the new functionality using the continuation status request and reply frames. Only LMI types Q.933A and ANSI support the FRF.1.2 Annex A standard.

You can track "Full status continued" packets by using the debug frame-relay lmi command in privileged EXEC mode. An extra field, 04, has been added to the display output. The following example indicates where in the report to look for this field (the text is in bold for this example):

17:42:39: Serial1(out): StEnq, myseq 126, yourseen 125, DTE up 
17:42:39: datagramstart = 0x40058DA4, datagramsize = 13 
17:42:39: FR encap = 0x00010308 
17:42:39: 00 75 51 01 04 53 02 7E 7D 

The string segment "active/inactive" in the display of the show interface commands indicates whether the FRF.1.2 Annex A standard is triggered. The report indicates active when routers receive the "Full status continued" message; otherwise, the report indicates inactive.

Interfaces MIB: SNMP Context Based Access

The Interfaces MIB (IF-MIB) has been modified to support context-aware packet information in Virtual Route Forwarding (VRF) environments. VRF environments require that contexts apply to Virtual Private Networks (VPNs) so that clients can be given selective access to the information stored in the IF-MIB. Clients that belong to a particular VRF can access information about the interface from the IF-MIB that belongs to that VRF only. When a client tries to get information from an interface that is associated with a particular context, the client can see only the information that belongs to that context and cannot see IF-MIB information that is associated with interfaces that are connected to another VRF to which it is not entitled. No commands have been modified or added to support this feature.

The IF-MIB supports all tables that are defined in RFC 2863 and the CISCO-IFEXTENSION-MIB.

ISSU - IGMP Snooping

This ISSU - IGMP Snooping feature adds ISSU support for IGMP Snooping.

NATPerformance Enhancement - Translation Table Optimization

The NAT - Performance Enhancement - Translation Table Optimization feature provides greater structure for storing translation table entries and an optimized look up in the table for associating table entries to IP connections.

Parse Bookmarks

The Parse Bookmarks feature quickly processes consecutive similar commands, such as access-lists and prefix-lists, up to five times faster. The Parse Bookmarks feature reduces boot time and load time for large configurations with many similar consecutive commands. This feature is an enhancement to the parsing algorithm; therefore no configuration changes are needed.

PPPoE Over Gigabit Ethernet Interface

The PPPoE over Gigabit Ethernet Interface feature enhances PPP over Ethernet (PPPoE) functionality by adding support for PPPoE and PPPoE over IEEE 802.1Q VLANs on Gigabit Ethernet interfaces.

RADIUS Attribute 52 and 53 Gigaword Support

The RADIUS Attribute 52 and Attribute 53 Gigaword Support feature introduces support for Attribute 52 (Acct-Input-Gigawords) and Attribute 53 (Acct-Output-Gigawords) in accordance with RFC 2869. Attribute 52 keeps track of the number of times the Acct-Input-Octets counter has rolled over the 32-bit integer throughout the course of the provided service; attribute 53 keeps track of the number of times the Acct-Output-Octets counter has rolled over the 32-bit integer throughout the delivery of service. Both attributes can be present only in Accounting-Request records where the Acct-Status-Type is set to "Stop" or "Interim-Update." These attributes can be used to keep accurate track of and bill for usage.