Guest

Cisco IOS XE Software

Release Notes for Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Release 2

Table Of Contents

Release Notes for Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Release 2

Contents

Introduction

System Requirements

Software Packaging on the Cisco ASR 1000 Series Routers

RP Memory Recommendations

Hardware Supported

ROMmon Version Requirements

Determining the Software Version

Cisco IOS XE to Cisco IOS Version Number Mapping

Upgrading to a New Software Release

New and Changed Information

New Hardware Features in Cisco IOS XE Release 2.5.0

1-Port Clear Channel OC-12 ATM SPA (SPA-1XOC12-ATM-v2)

New XFP/SFPs Supported with SPAs and the Built-In Gigabit Ethernet Interface

New Software Features in Cisco IOS XE Release 2.5.0

2547oDMVPN - Enabling Traffic Segmentation within DMVPN

AAA - Improvements for Broadband IPv6

ANCP - ATM Support

ATM F4 Ping

ATM Sub-interface Multipoint

ATM VC Ingress Policing

BGP Best External

BGP Multicast Inter-AS (IAS) VPN

BGP PIC Edge for IP/MPLS

BGP VPLS Auto Discovery Support on Route Reflector

Configurable Domain Name Prefix and Suffix Stripping

DHCP - DHCPv6 Prefix Delegation RADIUS VSA

DHCP Enhancements to Support IPv6 Broadband Deployments

DHCPv6 Repackaging

DMVPN Manageability Enhancements

DMVPN: Dynamic tunnels between spokes behind NAT

Dynamic Subscriber Bandwidth Selection

EtherChannel Min-Links

Firewall - VRF-aware ALG support

Flow Based Per Port Channel Load Balancing

IEEE 802.3ad - Faster Link Switchover Time

IEEE 802.3ad MIB

IPv6 Access Services: AAA Support for Cisco VSA IPv6 Attributes

IPv6 Access Services: AAA Support for RFC 3162 IPv6 RADIUS Attributes

IPv6 Access Services: PPPoA

IPv6 Access Services: PPPoE

IPv6 Access Services: Stateless DHCPv6

ISG:AAA Wireless Enhancements

ISG:Accounting: Prepaid

ISG:Authentication:Radius Proxy WiMax Enhancements

ISG:Instrumentation:DHCP Lease Query Support

ISG:Policy Control:Differentiated Initial Policy Control

ISG:Session: Creation: Interface IP Session: L2

ISG:Session: Creation: Interface IP Session: L3

ISG:Session:Multicast:Coexistance

ISG:Session:Static Session Creation

ISSU - Multicast MPLS VPN

ISSU - PPPoEoA

Layer 2 Local Switching - Same-Port Switching for Ethernet VLAN

Layer 2 Local Switching: Ethernet to VLAN

Link Aggregation Control Protocol (LACP) (802.3ad) for Gigabit Interfaces

Local Template-Based ATM PVC Provisioning

MPLS VPN Half Duplex VRF (HDVRF)

MSDP MD5 password authentication

Multicast VPN Extranet Support

Multicast VPN Extranet VRF Select

Multicast VPN Inter-AS Support

Multicast VPN MIB

Multicast-VPN: Multicast Support for MPLS VPN

NAT - VRF aware NAT for MPLS/VPN

NAT - VRF-aware ALG support

NBAR PDLM supported in ASR1000 Release 5

NHRP - CEF rewrite for DMVPN Phase 3 Networks

NHRP MIB for DMVPN Networks

NSF/SSO - Multicast MPLS VPN

PPP Enhancement for Broadband IPv6

PPP Session Queueing on ATM VC

PPPoE Connection Throttling

PPPoE on ATM

PPPoE Session Count MIB

QoS: QoS support for GRE/sVTI Tunnel

QoS: Shape Average Percent CLI

Service Advertisement Framework (SAF)

Sharing IPSec with Tunnel Protection

SSO - LACP

SSO - PPPoE IPv6

SSO - PPPoEoA

VRF Aware Cisco IOS Firewall

Cisco Unified Border Element (Enterprise)

Cisco Unified Border Element (SP Edition)

New Hardware Features in Cisco IOS XE Release 2.4.2

Cisco ASR 1002 Router

New Software Features in Cisco IOS XE Release 2.4.2

NAT - Forced Clear of Dynamic NAT Half Entries

New Hardware Features in Cisco IOS XE Release 2.4.1

New Software Features in Cisco IOS XE Release 2.4.1

IPv6 IPSec Static Virtual Interface

IPSec QoS Group-Based LLQ QoS

ALG Support for SIP T.38 Fax Relay over IP

ISIS Support for IPv6

New Hardware Features in Cisco IOS XE Release 2.4.0

Cisco ASR 1002-Fixed Router

New Shared Port Adapters

New Software Features in Cisco IOS XE Release 2.4.0

IS-IS Support for IPv6

3 Level Egress QoS Policy

802.1P CoS Bit Set for PPP and PPPoE Control Frames

AAA Interim Accounting

ACL—Template ACL/12 Bit ACE

ANCP (Access Node Control Protocol)

ANCP Phase 2.5

Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS)

Any Transport over MPLS (AToM): Ethernet over MPLS: Port Mode (EoMPLS)

Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown

Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute

Asynchronous Rotary Line Queuing

Byte-Based Weighted Random Early Detection

Cache Control Enhancements for Certification Revocation Lists

Certificate—Complete Chain Validation

Cisco IOS SHA2 Support

Cisco Unified Border Element (SP Edition)

Class-Based QoS MIB (CBQoSMIB) Enhancements

CoA—Multi-Service Activation/Deactivation in Single mMessage

Connect-info RADIUS Attribute 77—Configurable ASCII String

DHCP Server Radius Proxy

Enabling ISG to Interact with External Policy Servers

Etherchannel Flow Based Limited 1:1 Redundancy

Ethernet Overhead Accounting

Firewall—NetMeeting Directory (LDAP) ALG Support

Firewall—SIP ALG—Extended Methods

H.323 RAS Support in IOS Firewall

IEEE 802.1Q Tunneling (QinQ) for AToM

IEEE 802.3ad Link Aggregation (LACP)

Integrated Session Border Controller

Interactive OAM and Scaling Improvements

IP over IPv6 Tunnels

IPsec Usability Enhancements

IPv6 Multicast: Bootstrap Router (BSR)

IPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping

IPv6 Multicast: IPv6 BSR Bidirectional Support

IPv6 Multicast: PIM Sparse Mode (PIM-SM)

IPv6 Multicast: Routable Address Hello Option

ISG: Accounting: Per-Service Accounting

ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message

ISG: Policy Control: Policy Server: RADIUS-Based Policing

L2TP Forwarding of PPPoE Tag Information

L2VPN Interworking—Ethernet to VLAN Interworking

L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires

L2VPN Pseudowire Switching

Lawful Intercept

Layer 2 VPN (L2 VPN): Syslog, SNMP Trap, and show Command Enhancements for AToM and L2TPv3

MCP GEC with QoS on memberlink

Modified LNS Dead-Cache Handling

MQC—Traffic Shaping Overhead Accounting for ATM

NAT—NetMeeting Directory (LDAP) ALG Support

NAT SCCP Video Support

NAT—SIP ALG—Extended Methods

NAT Support of H.323v2 RAS

NSF/SSO—Ethernet to Ethernet VLAN Interworking

OCSP—Server Certification from Alternate Hierarchy

Parameterization for ACL and Layer 4 Redirect

Parameterization of QoS ACL

Per Subinterface MTU for Ethernet over MPLS (EoMPLS)

PKI—CLI to Control Certificate Revocation List (CRL) Cache

PPPoE Service Selection

PPPoE Session Limit

PPPoE Smart Server Selection

PPPoE VLAN Session Throttling

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services

QoS: CBQoSMIB Index Enhancements

RADIUS-Based Lawful Intercept

RADIUS-Based Policing Attribute Modifications

RADIUS—CLI to Prevent Sending of Access Request with Blank Username

RSA 4096-Bit Key Generation in Software Crypto Engine Support

SCCP for Video

SSHv2 Enhancements

VLAN ID Rewrite

VPDN LNS Address Checking

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

VRF Aware LI (Lawful Intercept)

New Hardware Features in Cisco IOS XE Release 2.3.2

New Software Features in Cisco IOS XE Release 2.3.2

New Hardware Features in Cisco IOS XE Release 2.3.1

New Software Features in Cisco IOS XE Release 2.3.1

New Hardware Features in Cisco IOS XE Release 2.3.0

New Cisco ASR 1000 Route Processor

New Shared Port Adapters

New Software Features in Cisco IOS XE Release 2.3.0

Any Transport Over MPLS (AToM): ATM Cell Relay Over MPLS: VP Mode

Any Transport over MPLS (AToM): Graceful Restart

Any Transport Over MPLS (AToM): Layer 2 QoS (Quality of Service)

Any Transport Over MPLS (AToM): Single Cell Relay - VC Mode (CRoMPLS)

ATM Conditional debug/show Commands

ATM MIB Enhancements

ATM OAM Ping

ATM OAM Traffic Reduction

ATM PVC F5 OAM Recovery Traps

ATM PVC Trap Enhancements for Segment and AIS/RDI Failures

ATM PVC Trap Support

ATM SNMP Trap and OAM Enhancements

ATM VC Class Support

ATM VP Average Traffic Rate

AToM Tunnel Selection

Auto Secure Manageability

Basic ATM Support of RFC1483

BGP Support for 4-Byte ASN

Cell-Based ATM Shaping per PVP

Consistent and User-Selectable Fail/Open and Fail/Close Operation

Control Plane Policing—Time Based

DHCP Client

DHCP Relay—MPLS VPN Support

Enhanced ATM VC Configuration and Management

Explicit Passive Mode CLI Support

GET VPN Phase 1.2

Group Encrypted Transport VPN (GET VPN)

Integrated Session Border Controller

IPv6 Bidirectional PIM

IPv6 Multicast: Address Family Support for Multiprotocol BGP

IPv6 Source Specific Multicast (SSM) Mapping

ISSU—ATM

ISSU—AToM ATM Attachment Circuit

ISSU—MPLS Traffic Engineering (TE)—Path Protection

L2VPN PW Preferential Forwarding (Active/Standby Status)

L2VPN PW Redundancy—ATM Attachment Circuits

LSP Ping for FEC129 (via VCCV)—RFC4379

MPLS EM—LSP Ping/Trace for LDP & RSVP IPv4 FECs

MPLS EM—MPLS FRR MIB (IETF draft v01)

MPLS EM—MPLS Multipath (ECMP) LSP Tree Trace

MPLS EM—MPLS TE MIB (IETF draft v05)

MPLS LSP Ping/Traceroute and AToM VCCV

MPLS Pseudowire Status Signaling

MPLS Support for Multi-Segment PWs—MPLS OAM/VCCV

MPLS TE—BFD-Triggered Fast Reroute (FRR)

MPLS TE—Fast Tunnel Interface Down Detection

MPLS TE—Node Protection Desired Bit

MPLS Traffic Engineering Forwarding Adjacency

MPLS Traffic Engineering—Policy Routing onto MPLS TE Tunnels

MPLS Traffic Engineering (TE)

MPLS Traffic Engineering (TE)—Configurable Path Calculation Metric for Tunnels

MPLS Traffic Engineering (TE)—Fast Reroute (FRR) Link and Node Protection

MPLS Traffic Engineering (TE)—IP Explicit Address Exclusion

MPLS Traffic Engineering (TE)—LSP Attributes

MPLS Traffic Engineering (TE)—Path Protection

MPLS Traffic Engineering (TE)—RSVP Graceful Restart

MPLS Traffic Engineering (TE)—RSVP Hello State Timer

MPLS Traffic Engineering (TE): Verbatim Path Support

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

NBAR Protocols

NSF/SSO—AToM ATM Attachment Circuit

NSF/SSO—MPLS TE and RSVP Graceful Restart

NSF/SSO—MPLS Traffic Engineering (TE)—Path Protection

Operation, Administration, and Maintenance (OAM) F4 and F5

Per-VC Queueing for ATM

PPP—Max-Payload and IWF PPPoE Tag Support

PPPoE Agent Remote ID and DSL Line Characteristics Enhancement

PPPoE Circuit-ID Tag Processing

PPPoE Relay

PPPoE—Session Limiting on Inner QinQ VLAN

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, FR, and ATM Services

QoS: Match ATM CLP

QoS-per-VC QoS Classification for ATM VP Pseudowires

QoS Priority Percentage CLI Support

Quality of Service: Policies Aggregation

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

RSVP Refresh Reduction and Reliable Messaging

RSVP—Resource Reservation Protocol

SSO—ATM

New Hardware Features in Cisco IOS XE Release 2.2.3

New Software Features in Cisco IOS XE Release 2.2.3

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

MPLS VPN Carrier Supporting Carrier with BGP

MPLS VPN—eBGP Multipath Support for CSC and InterAS MPLS VPNs

MPLS VPN—Load Balancing Support for Inter-AS and CSC VPNs

New Hardware Features in Cisco IOS XE Release 2.2.2

New Software Features in Cisco IOS XE Release 2.2.2

New Hardware Features in Cisco IOS XE Release 2.2.1

New Cisco ASR 1000 Embedded Services Processors

New Shared Port Adapters

New Software Features in Cisco IOS XE Release 2.2.1

AAA Broadcast Accounting

Bidirectional PIM

Cisco Firewall and WAAS Inter-Op

Class-Based Marking

Class Based Weighted Fair Queuing (CBWFQ)

Control Plane Policing (CoPP)

Diffie-Hellman Group Support in IPSec

FPM—Flexible Packet Matching

GRE Tunnel IP Source and Destination VRF Membership

Integrated Session Border Controller

IP SLAs—LSP Health Monitor

IP SLAs—LSP Health Monitor with LSP Discovery

IP SLAs—MPLS VPN Awareness

IPv6 QoS: MQC Packet Classification

IPv6 Routing—EIGRP Support

ISG: Accounting: Per Session, Service and Flow

ISG: Accounting: Postpaid

ISG: Accounting: Tariff Switching

ISG: Authentication: DHCP Option 82 Line ID - AAA Authorization Support

ISG:Flow Control: Flow Redirect (L4, Captive Portal)

ISG: Flow Control: QoS Control: Dynamic Rate Limiting (QU;QD)

ISG: Flow Control: QoS Control: MQC Support for IP Sessions

ISG: Instrumentation: Advanced Conditional Debugging

ISG: Instrumentation: Session and Flow Monitoring (Local and External)

ISG: Network Interface: IP Routed, VRF Aware MPLS

ISG: Network Interface: Tunneled (L2TP)

ISG: Policy Control: Cisco Policy Language

ISG: Policy Control: DHCP Proxy

ISG: Policy Control: ISG-SCE Control Bus

ISG: Policy Control: Multidimensional Identity per Session

ISG: Policy Control: Policy: Domain Based (Auto-Domain, Proxy)

ISG: Policy Control: Policy Server: CoA ASCII Command Code Support

ISG: Policy Control: Policy Server: CoA (QoS, L4 Redirect, User ACL, TimeOut)

ISG: Policy Control: Policy Server: SSG-SESM Protocol

ISG: Policy Control: Policy: Triggers (Time, Volume, Duration)

ISG: Policy Control: RADIUS Proxy Enhancement

ISG: Policy Control: Service Profiles

ISG: Policy Control: User Profiles

ISG: Session: Auth: Single Sign On

ISG: Session: Authentication (MAC, IP, EAP)

ISG: Session: Creation: IP Session: Protocol Event (DHCP, RADIUS)

ISG: Session: Creation: IP Session: Subnet and Source IP: L2

ISG: Session: Creation: IP Session: Subnet and Source IP: L3

ISG: Session: Creation: P2P Session (PPPoE, PPPoXoX)

ISG: Session: LifeCycle: Idle Timeout

ISG: Session: LifeCycle: POD

ISG: Session: Multi-Service Creation and Flow Control

ISG: Session: Protection and Resiliency: Keepalive—ARP, ICMP

ISG: Session: VRF Transfer

L2TP AAA Accounting Include NAS-PORT (VPI/VCI)

L2TP HA Session SSO/ISSU on LAC/LNS

L3 MPLS VPN Over GRE

MPLS LDP— VRF Aware Static Labels

MPLS VPN—Per VRF Label

MPLS VPN: VRF Selection Using Policy Based Routing

Multihop VPDN

Multi-VRF Selection Using Policy Based Routing (PBR)

NAT—Routemaps Outside-to-Inside Support

Packet Classification Based on Layer3 Packet-Length

PBR Support for Multiple Tracking Options

Per Subscriber Firewall on LNS

Policy-Based Routing (PBR)

Policy-Based Routing (PBR) Default Next-Hop Route

Policy Based Routing: Recursive Next Hop

Policy Routing Infrastructure

PPPoE—QinQ Support

QoS—Hierarchical Queuing for Ethernet DSLAMs

RADIUS Route Download

Remote Access to MPLS-VPNs

SGI Interface

VRF Aware System Message Logging (Syslog)

VRF-Aware VPDN Tunnels

WCCP L2 Return

WCCP Layer 2 Redirection / Forwarding

WCCP Mask Assignment

WCCP Redirection on Inbound Interfaces

WCCP Version 2

New Hardware Features in Cisco IOS XE Release 2.1.2

New Software Features in Cisco IOS XE Release 2.1.2

New Hardware Features in Cisco IOS XE Release 2.1.1

New Software Features in Cisco IOS XE Release 2.1.1

New Hardware Features in Cisco IOS XE Release 2.1.0

Cisco ASR 1002 Router

Cisco ASR 1004 Router

Cisco ASR 1006 Router

Cisco ASR 1000 Embedded Services Processors

Cisco ASR 1000 Route Processor 1

Cisco ASR 1000 SPA Interface Processor

Shared Port Adapters

1GB USB Flash Token for Cisco ASR 1000 Series

New Software Features in Cisco IOS XE Release 2.1.0

BFD IPv6 Encaps Support

BFD—IPv6 Static Route Support

DHCP—DHCPv6 Relay Agent Notification for Prefix Delegation

DHCP Relay Server ID Override and Link Selection Option 82 Suboptions

DHCPv6 Ethernet Remote ID Option

Integrated Session Border Controller

IPv6: Base Protocols High Availability

IPv6: NSF and Graceful Restart for MP-BGP IPv6 Address Family

IPv6: RIPng Non-Stop Forwarding

IPv6: Static Route Non-Stop Forwarding

MQC—Distribution of Remaining Bandwidth Using Ratio

PPPoE Session Limit Local Override

Quality of Service for Gigabit EtherChannels

QoS: Policies Aggregation

TCP MIB for RFC4022 Support

VLAN Mapping to GEC Member Links

Release Note Only Software Features in Cisco IOS XE Release 2.1.0

8-Way CEF Load Balancing

BGP Reduction in Transient Memory Usage

CEF Support for IP Routing Between IEEE 802.1 Q VLANs

Class-Based Quality of Service Management Information Base

Compression Control

DLR Enhancements: PGM RFC-3208 Compliance

Frame Relay FRF.1.2 Annex A Support

Interfaces MIB: SNMP Context Based Access

ISSU - IGMP Snooping

NAT—Performance Enhancement - Translation Table Optimization

Parse Bookmarks

PPPoE Over Gigabit Ethernet Interface

RADIUS Attribute 52 and 53 Gigaword Support

RADIUS Attribute 77 for DSL

Selective Packet Discard (SPD)

TCP MIB for RFC4022 Support

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

MIBs

Limitations and Restrictions

Limitations and Restrictions in Cisco IOS XE Release 2.3.0

User-Defined Parent Class Limitation (for Hierarchical QoS)

User-Defined Parent Class Limitation (for Conditional Policer)

Tunnel Protection+ Priority Queuing Limitation

Deny ACL Limitation for GET VPN

Limitation on Use of Deny Statements in QoS Classification

Limitations and Restrictions in Cisco IOS XE Release 2.2.3

DMVPN Limitation

Scaling Limits for MLP

Limitations and Restrictions in Cisco IOS XE Release 2.2.1

Cisco Firewall and WAAS Inter-Op Limitations and Restrictions

Control Plane Policing (CoPP) Limitations and Restrictions

Flexible Packet Matching (FPM) Limitations and Restrictions

L2TP AAA Accounting Include NAS-PORT (VPI/VCI) Limitation

Limitations and Restrictions in Cisco IOS XE Release 2.1.1

Maximum Number of Broadband Tunnels Limitation

Maximum Number of IPSec Tunnels Limitation

Limitations and Restrictions in Cisco IOS XE Release 2.1.0

Conditional Policing Feature of QoS Limitation

IPSec Anti-Replay Window Size Limitation

Maximum Number of IPSec Tunnels Limitation

NBAR Protocol Support Limitation

Police Command Limitation

Scaling Limits for MLP

Important Notes

Deferrals

Field Notices and Bulletins

Important Notes About IPSec Support on the Cisco ASR 1000 Series Router

NAT and Firewall ALG Support on Cisco ASR 1000 Series Routers

Important Notes in Cisco IOS XE Release 2.5.0:

QoS: QoS support for GRE/sVTI Tunnel

VRF-Aware NAT

Important Notes in Cisco IOS XE Release 2.3.0

Any Transport Over MPLS (AToM) Support

MPLS TE Support

Important Notes in Cisco IOS XE Release 2.2.2

SSO for L2TP Tunnel Switching Not Supported

Important Notes in Cisco IOS XE Release 2.2.1

100M FX SFP Not Supported on Cisco 2-Port Gigabit Ethernet Shared Port Adapter

Intelligent Service Gateway (ISG) Features Not Supported

Per-Session Multicast Support

Important Notes in Cisco IOS XE Release 2.1.1

Startup Configuration File Backup

Important Notes in Cisco IOS XE Release 2.1.0

High Level Feature Sets Not Supported for the Cisco ASR 1000 Series Routers

Caveats for Cisco IOS XE Release 2

Resolved Caveats—Cisco IOS XE Release 2.4.2

Open Caveats—Cisco IOS XE Release 2.4.1

Resolved Caveats—Cisco IOS XE Release 2.4.1

Open Caveats—Cisco IOS XE Release 2.4.0

Open Caveats—Cisco IOS XE Release 2.3.2

Resolved Caveats—Cisco IOS XE Release 2.3.2

Open Caveats—Cisco IOS XE Release 2.3.1

Resolved Caveats—Cisco IOS XE Release 2.3.1

Open Caveats—Cisco IOS XE Release 2.3.0

Open Caveats—Cisco IOS XE Release 2.2.3

Resolved Caveats—Cisco IOS XE Release 2.2.3

Open Caveats—Cisco IOS XE Release 2.2.2

Resolved Caveats—Cisco IOS XE Release 2.2.2

Open Caveats—Cisco IOS XE Release 2.2.1

Resolved Caveats—Cisco IOS XE Release 2.2.1

Open Caveats—Cisco IOS XE Release 2.1.2

Resolved Caveats—Cisco IOS XE Release 2.1.2

Open Caveats—Cisco IOS XE Release 2.1.1

Resolved Caveats—Cisco IOS XE Release 2.1.1

Open Caveats—Cisco IOS XE Release 2.1.0

Related Documentation

Platform-Specific Documents

Cisco Feature Navigator

Error Message Documentation for Cisco IOS XE Release 2

Cisco IOS XE Software Documentation Set

Open Source License Notices

OpenSSL/Open SSL Project

License Issues

Obtaining Documentation and Submitting a Service Request


Release Notes for Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Release 2


Published: October 4, 2008
Revised: November 25, 2009, OL-16576-13

These release notes for the Cisco ASR 1000 Series Aggregation Services Routers support Cisco IOS XE Release 2.5.0 and earlier Release 2 releases. These release notes are updated as needed to describe new features, caveats, potential software deferrals, and related documents.

For a list of the software caveats that apply to Cisco IOS XE Release 2, see the "Caveats for Cisco IOS XE Release 2" section on page 123.

Cisco recommends that you view the field notices for this release to see if your software or hardware platforms are affected. If you have an account on Cisco.com, you can find field notices at http://www.cisco.com/en/US/customer/support/tsd_products_field_notice_summary.html. If you do not have a Cisco.com login account, you can find field notices at http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html.

Contents

These release notes describe the following topics:

Introduction, page 2

System Requirements, page 3

New and Changed Information, page 19

MIBs, page 106

Limitations and Restrictions, page 109

Important Notes in Cisco IOS XE Release 2.5.0:, page 117

Caveats for Cisco IOS XE Release 2, page 123

Related Documentation, page 301

Open Source License Notices, page 305

Obtaining Documentation and Submitting a Service Request, page 307

Introduction

The Cisco ASR 1000 Series Aggregation Services Routers are the next generation Cisco midrange router products. The Cisco ASR 1000 Series Aggregation Services Routers use an innovative and powerful hardware processor technology known as the Cisco QuantumFlow Processor. The Cisco ASR 1000 Series Routers consist of three different routers: the Cisco ASR 1002 Router, the Cisco ASR 1004 Router, and the Cisco ASR 1006 Router.

The Cisco ASR 1002 Router is a 3-SPA, 2-rack-unit (RU) chassis with one Embedded Services Processor (ESP) slot that comes with the Route Processor (RP), Cisco ASR 1000 Series Shared Port Adapter Interface Processor (SIP), and four Gigabit Ethernet ports built in.

The Cisco ASR 1004 Router is an 8-SPA, 4-RU chassis with one ESP slot, one RP slot, and two SIP slots.

The Cisco ASR 1006 Router is a 12-SPA, 6-rack-unit (RU), hardware-redundant chassis with two Embedded Services Processor (ESP) slots, two Route Processor (RP) slots, and three SIP slots.

For the single-route-processor Cisco ASR 1000 platforms, the Cisco ASR 1002 and Cisco ASR 1004, the Route Processor has a dual Cisco IOS Software option that allows these routers to use Cisco IOS software redundancy, Cisco high-availability features, Nonstop Forwarding (NSF), and In Service Software Upgrades (ISSUs). This option requires the Cisco ASR 1000 Series Route Processor to have 4 GB of DRAM memory.

The Cisco ASR 1006 Router supports fully redundant Route Processors that allow for full Route-Processor hardware redundancy, NSF, ISSU, and future Route-Processor service upgrades.

The Cisco ASR 1000 Series Routers run Cisco IOS XE Software and introduce a distributed software architecture that moves many operating system responsibilities out of the IOS process. In this architecture, Cisco IOS, which previously was responsible for almost all of the internal software processes, now runs as one of many Cisco IOS XE processes while allowing other Cisco IOS XE processes to share responsibility for running the router.

One of the key features of the Cisco IOS XE Software is support for dual Cisco IOS software consolidated packages in a single Route Processor for software redundancy in the 2-RU and 4-RU chassis systems. These dual Cisco IOS consolidated packages can consist of the same software consolidated packages for backup or different software consolidated packages for resilient upgrade.


Note Software redundancy is not supported on the 6-RU chassis.


The Cisco ASR 1000 Series Routers target both enterprise and service provider applications and provide application-specific features for broadband subscriber aggregation and network application services with improved processing performance and high availability.

For information on new features and Cisco IOS commands supported by Cisco IOS XE Release 2, see the "New and Changed Information" section on page 19 and the "Related Documentation" section on page 301.

System Requirements

This section describes the system requirements for Cisco IOS XE Release 2 and includes the following sections:

Software Packaging on the Cisco ASR 1000 Series Routers, page 3

RP Memory Recommendations, page 6

Hardware Supported, page 11

ROMmon Version Requirements, page 11

Determining the Software Version, page 13

Upgrading to a New Software Release, page 18

Cisco IOS XE to Cisco IOS Version Number Mapping, page 18

Software Packaging on the Cisco ASR 1000 Series Routers

The Cisco ASR 1000 Series Routers run Cisco IOS XE Software and use a new software packaging model consisting of:

Consolidated packages

Individual software sub-packages within a consolidated package

Optional software sub-packages outside of consolidated packages

Each Cisco IOS XE consolidated package contains a collection of individual software sub-packages. Each individual software sub-package is an individual software file that controls a different element or elements of the Cisco ASR 1000 Series Router. Some individual sub-packages may be installed per element (for example, per SPA).


Note The sub-package functionality is intended for both upgrade and field support, and not all combinations of sub-packages are supported.


Each individual software sub-package can be upgraded individually, or all individual software sub-packages for a specific Cisco IOS XE consolidated package can be upgraded as part of a complete Cisco IOS XE consolidated package upgrade.

Importantly, IOS (the RPIOS individual software sub-package) is considered one of the individual software sub-packages that makes up the complete Cisco IOS XE consolidated package.

The following are the individual software sub-packages within a consolidated package:

Route Processor

RPBase: Provides the Route-Processor operating system.

RPControl: Provides the control-plane processes that interface between Cisco IOS Software and the rest of the platform.

RPIOS: Provides the Cisco IOS Software kernel, which is where Cisco IOS Software features are stored and run; each consolidated image variant has a different RPIOS sub-package: RPIOS-ipbase, RPIOS-ipbasek9, RPIOS-advipservices, RPIOS-advipservicesk9, RPIOS-adventservices, and RPIOS-adventservicesk9.


Note The RPIOS-advipservices and RPIOS-adventservices sub-packages are only available beginning with Cisco IOS XE Release 2.2.1 and later releases. These two sub-packages are not available with Cisco IOS XE Release 2.1.2 and earlier releases.


RPAccess: Provides components to manage enhanced router access functionality.

ESP

ESPBase: Provides the ESP operating system and control processes, and the Cisco QuantumFlow Processor client, driver, and ucode.

SIP

SIPBase: Provides the SIP operating system and control processes

SIPSPA: Provides the SPA drivers and associated field-programmable device (FPD) image (SPA FPGA image)

A Cisco IOS XE consolidated package allows users to upgrade all individual software sub-packages on the router with a single Cisco IOS XE image download. The Cisco IOS XE consolidated packages available vary based on the Route Processor (RP1 or RP2) installed in the system and the Cisco IOS XE Release.

The following are the RP1 consolidated packages:

Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO

Cisco ASR 1000 Series RP1 IP BASE

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO


Note The Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.2.1 through Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.

The Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO consolidated package is only available beginning with Cisco IOS XE Release 2.2.1 and later releases. This consolidated package is not available with Cisco IOS XE Release 2.1.2 and earlier releases.


The following are the RP2 consolidated packages:

Cisco ASR 1000 Series RP2 IP BASE W/O CRYPTO

Cisco ASR 1000 Series RP2 IP BASE

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES W/O CRYPTO


Note The RP2 consolidated packages are only available beginning with Cisco IOS XE Release 2.3.0 and later releases. The RP2 consolidated packages are not available with Cisco IOS XE Release 2.2.3 and earlier releases.

The Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.3.0 through Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.


The individual software sub-packages within the consolidated packages cannot be downloaded from Cisco.com; only the Cisco IOS XE consolidated packages and optional sub-packages can be downloaded from Cisco.com. Users who want to run the router using individual software sub-packages must first download the consolidated package from Cisco.com and extract the individual software sub-packages from the consolidated package.

In addition to the individual software sub-packages within a consolidated package, optional software sub-packages that are not part of a consolidated package are available. Optional software sub-packages are downloaded separately from Cisco.com and their installation is similar to the installation of an individual software sub-package using a provisioning file. The optional sub-package must be located in the same directory with the provisioning file and the other individual sub-package files. The optional software sub-packages available vary based on the Route Processor (RP) installed in the system: RP1 or RP2:

For the RP1, the optional software sub-package available is the Cisco ASR 1000 Series RP1 WebEx Node (asr1000rp1-sipspawmak9.version.pkg)

For the RP2, the optional software sub-package available is the Cisco ASR 1000 Series RP2 WebEx Node (asr1000rp2-sipspawmak9.version.pkg)


Note The Cisco ASR 1000 Series RP1 WebEx Node and Cisco ASR 1000 Series RP2 WebEx Node optional software sub-packages are only available beginning with Cisco IOS XE Release 2.4.0 and later releases and are only supported in conjunction with a related RP-based Cisco ASR 1000 Series RPx IP BASE, Cisco ASR 1000 Series RPx ADVANCED IP SERVICES, or Cisco ASR 1000 Series RPx ADVANCED ENTERPRISE SERVICES consolidated package. These optional software sub-packages are not supported with earlier Cisco IOS XE releases or with any of the non-CRYPTO consolidated packages.



Note ISSU operation on the Cisco ASR 1002 and Cisco ASR 1004 systems requires the system to be operating in sub-package mode.



Note USB (or any other removable media) cannot be used to boot the system into sub-package mode.


For further information on the advantages and disadvantages of running individual sub-packages or a complete Cisco IOS XE consolidated package, and the process of extracting the individual sub-packages, see the following document:

Cisco ASR 1000 Series Aggregation Services Router Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/chassis/asrswcfg.html

RP Memory Recommendations

The Cisco IOS XE images and packages available vary based on the Route Processor (RP) installed in the system: RP1 or RP2.

Table 1 describes the RP1 consolidated package images, their individual software sub-package contents, and their memory recommendations.

Table 3 describes the RP1 optional sub-package images and their memory recommendations.

Table 3 describes the RP2 consolidated package images, their individual software sub-package contents, and their memory recommendations.

Table 4 describes the RP2 optional sub-package images and their memory recommendations.

Each Cisco IOS XE image also contains two provisioning files: asr1000rpx-packages.image.version.conf and packages.conf. A provisioning file is used for booting only in cases where the individual modules are extracted from the Cisco IOS XE image and then used to run the router. Either provisioning file can be used.


Note No In Service Software Upgrade (ISSU) is possible between different image types.


Table 1 RP1 Memory Recommendations for the Cisco ASR 1000 Series Routers Consolidated Package Images 

Platforms
Image Name
Software Image
Individual Sub-Package Contents
DRAM
Memory
Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO

asr1000rp1-ipbase.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-ipbase.version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-ipbase.version.
conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 IP BASE

asr1000rp1-ipbasek9.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-ipbasek9.version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-ipbasek9.version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO1

asr1000rp1-advipservices.version.
bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-advipservices.
version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-advipservices.
version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES

asr1000rp1-advipservicesk9.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-ipbasek9.version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-advipservicesk9.
version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO2

asr1000rp1-adventservices.version.
bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-adventservices.
version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-adventservices.
version.conf

packages.conf

Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES

asr1000rp1-adventservicesk9.version.bin

asr1000rp1-rpbase.version.pkg

4GB (for Cisco ASR 1002 Router)

2GB-4GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp1-rpcontrol.version.pkg

asr1000rp1-rpaccess.version.pkg

asr1000rp1-rpios-adventservicesk9.
version.pkg

asr1000rp1-espbase.version.pkg

asr1000rp1-sipbase.version.pkg

asr1000rp1-sipspa.version.pkg

asr1000rp1-packages-adventservicesk9.
version.conf

packages.conf

1 The Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.2.1 through Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.

2 The Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO consolidated package is only available beginning with Cisco IOS XE Release 2.2.1 and later releases. This consolidated package is not available with Cisco IOS XE Release 2.1.2 and earlier releases.


Table 2 RP1 Memory Recommendations for the Cisco ASR 1000 Series Routers Optional Sub-package Image 

Platforms
Image Name
Software Image
Flash Memory
Cisco ASR 1002 Router
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP1 WebEx Node1

asr1000rp1-sipspawmak9.version.XND.pkg

100MB

1 The Cisco ASR 1000 Series RP1 WebEx Node (asr1000rp1-sipspawmak9.version.pkg) optional software sub-package is only available beginning with Cisco IOS XE Release 2.4.0 and later releases and only supported in conjunction with the Cisco ASR 1000 Series RP1 IP BASE, Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES, or Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES consolidated package. This sub-package is not supported with earlier Cisco IOS XE releases or with any of the non-CRYPTO consolidated packages.



Note The RP2 images are available beginning with Cisco IOS XE Release 2.3.0.


Table 3 RP2 Memory Recommendations for the Cisco ASR 1000 Series Routers Consolidated Package Images 

Platforms
Image Name
Software Image
Individual Sub-Package Contents
DRAM
Memory
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 IP BASE W/O CRYPTO

asr1000rp2-ipbase.version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-ipbase.version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-ipbase.version.
conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 IP BASE

asr1000rp2-ipbasek9.version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-ipbasek9.version. pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-ipbasek9.version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO1

asr1000rp2-advipservices.version.
bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-advipservices.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-advipservices.
version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES

asr1000rp2-advipservicesk9.
version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-advipservicesk9.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-advipservicesk9.
version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES W/O CRYPTO

asr1000rp2-adventservices.version.
bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-adventservices.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-adventservices.
version.conf

packages.conf

Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES

asr1000rp2-adventservicesk9.
version.bin

asr1000rp2-rpbase.version.pkg

8GB-16GB(for Cisco ASR 1004 and Cisco ASR 1006 routers)

asr1000rp2-rpcontrol.version.pkg

asr1000rp2-rpaccess.version.pkg

asr1000rp2-rpios-adventservicesk9.
version.pkg

asr1000rp2-espbase.version.pkg

asr1000rp2-sipbase.version.pkg

asr1000rp2-sipspa.version.pkg

asr1000rp2-packages-adventservicesk9.
version.conf

packages.conf

1 The Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES W/O CRYPTO consolidated package is only available with Cisco IOS XE Release 2.3.0 through the Cisco IOS XE Release 2.3.x. This consolidated package is not available with any other Cisco IOS XE Releases.


Table 4 RP2 Memory Recommendations for the Cisco ASR 1000 Series Routers Optional Sub-package Image 

Platforms
Image Name
Software Image
Flash Memory
Cisco ASR 1004 Router
Cisco ASR 1006 Router

Cisco ASR 1000 Series RP2 WebEx Node1

asr1000rp2-sipspawmak9.version.XND.pkg

100MB

1 The Cisco ASR 1000 Series RP2 WebEx Node (asr1000rp1-sipspawmak9.version.pkg) optional software sub-package is only available beginning with Cisco IOS XE Release 2.4.0 and later releases and only supported in conjunction with the Cisco ASR 1000 Series RP2 IP BASE, Cisco ASR 1000 Series RP2 ADVANCED IP SERVICES, or Cisco ASR 1000 Series RP2 ADVANCED ENTERPRISE SERVICES consolidated package. This sub-package is not supported with earlier Cisco IOS XE releases or with any of the non-CRYPTO consolidated packages.


Hardware Supported

Cisco IOS XE Release 2 supports the following Cisco ASR 1000 Series Routers:

Cisco ASR 1002 Router

Cisco ASR 1004 Router

Cisco ASR 1006 Router

For descriptions of the new hardware features, see the "New and Changed Information" section on page 19.

ROMmon Version Requirements

This section describes the recommended and minimum ROMmon version requirements for Cisco IOS XE Release 2.

The recommended ROMmon versions supported by the ROMmon upgradeable components for each Cisco IOS XE release are listed in the "Recommended ROMmon Versions for Cisco IOS XE Releases" subsection that follows.

The minimum ROMmon versions required to support each specific ROMmon upgradeable component are listed in Table 5.

Recommended ROMmon Versions for Cisco IOS XE Releases

The recommended ROMmon version for Cisco IOS XE Release 2.4.1 and Release 2.4.0 is Version 12.2(33r)XND for all ROMmon upgradeable components.


Note For customers requiring a FIPS 140-2 compliant environment, ROMmon Version 12.2(33r)XND is a required update.


The recommended ROMmon version to support the RP2 for Cisco IOS XE Release 2.3.2 is Version 12.2(33r)XNC0. The recommended ROMmon version to support the ASR1002, RP1, ESP5, ESP10, ESP10-N, ESP20, and SIP10 for Cisco IOS XE Release 2.3.2 is Version 12.2(33r)XNB.

The recommended ROMmon version to support the RP2 for Cisco IOS XE Release 2.3.1 is Version 12.2(33r)XNC0. The recommended ROMmon version to support the ASR1002, RP1, ESP5, ESP10, ESP10-N, ESP20, and SIP10 for Cisco IOS XE Release 2.3.1 is Version 12.2(33r)XNB.

The recommended ROMmon version to support the RP2 for Cisco IOS XE Release 2.3.0 is Version 12.2(33r)XNC0. The recommended ROMmon version to support the ASR1002, RP1, ESP5, ESP10, ESP10-N, ESP20, and SIP10 for Cisco IOS XE Release 2.3.0 is Version 12.2(33r)XNB.

The recommended ROMmon version for Cisco IOS XE Release 2.2.3 is Version 12.2(33r)XNB for all ROMmon upgradeable components.

The recommended ROMmon version for Cisco IOS XE Release 2.2.2 is Version 12.2(33r)XNB for all ROMmon upgradeable components.

The recommended ROMmon version for Cisco IOS XE Release 2.2.1 is Version 12.2(33r)XNB for all ROMmon upgradeable components.

The recommended ROMmon version supported for Cisco IOS XE Release 2.1.2 is Version 12.2(33r)XN2 for all ROMmon upgradeable components.

The recommended ROMmon version supported for Cisco IOS XE Release 2.1.1 is Version 12.2(33r)XN2 for all ROMmon upgradeable components.

The recommended ROMmon version supported for Cisco IOS XE Release 2.1.0 is Version 12.2(33r)XN2 for all ROMmon upgradeable components.


Note The minimum ROMmon version supported for Cisco IOS Release 2.1.x and later releases is Version 12.2(33r)XN2. Version 12.2(33r)XN2 is required to support the Cisco ASR 1002 Router. If support is not required for the Cisco ASR 1002 Router, the minimum ROMmon version required is Version 12.2(33r)XN1.


Table 5 Minimum ROMmon Version Required to Support ROMmon Upgradeable Components

ROMmon Upgradeable Component
12.2(33r)XN2
12.2(33r)XNB
12.2(33r)XNC0
12.2(33r)XND

ASR10021

X

     

ASR1002-F2

X

     

RP1

X

     

RP2

   

X

 

ESP5

X

     

ESP10

X

     

ESP10-N

 

X

   

ESP20

 

X

   

SIP10

X

     

1 ROMmon upgradeable components on the ASR1002: integrated RP1, field-replaceable ESP, and integrated SIP10.

2 ROMmon upgradeable components on the ASR1002-F: integrated RP1, ESP, and SIP10.


Determining the Software Version

To determine the version of the Cisco IOS XE Software (consolidated package) running on your Cisco ASR 1000 Series Router, log in to the router and enter the show version EXEC command:

Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 
12.2(33)XNE, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Wed 25-Nov-09 00:14 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2009 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON

Router uptime is 1 minute
Uptime for this control processor is 4 minutes
System returned to ROM by reload
System image file is "tftp:tftpboot/mcp-6ru-14/vmlinux"
Last reload reason: PowerOn



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco ASR1006 (RP1) processor with 1734099K/6147K bytes of memory.
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
937983K bytes of eUSB flash at bootflash:.
39004543K bytes of SATA hard disk at harddisk:.

Configuration register is 0x0

To determine the version of the individual sub-packages running on your Cisco ASR 1000 Series Router, log in to the router and enter the show version installed command in User EXEC, Privileged EXEC or Diagnostic mode.


Note The checksums in the show version installed output that follows are for example purposes only; the checksum values that appear in your output may vary.


Router# show version installed
Package: Provisioning File, version: n/a, status: active
  File: consolidated:packages.conf, on: RP0
  Built: n/a, by: n/a
  File SHA1 checksum: 76adf62b8efbaf95d78573440f2077d904db849e

Package: rpbase, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-rpbase.02.05.00.122-33.XNE.pkg, on: RP0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: eb6de077001c3374357f56921c1bb87c28b7627c

Package: rpcontrol, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-rpcontrol.02.05.00.122-33.XNE.pkg, on: RP0/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: ea935f60c50ca4e1be774b330f572d6f4c198f77

Package: rpios-adventerprisek9, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.05.00.122-33.XNE.pkg, on: RP0/0
  Built: 2009-11-25_04.20, by: mcpre
  File SHA1 checksum: cc549e80a41b29bc1fc077bd31621171b00549f7

Package: rpaccess, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-rpaccess.02.05.00.122-33.XNE.pkg, on: RP0/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: dfeabe617c816280ad6ed541f860f0427cd36699

Package: rpcontrol, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpcontrol.02.05.00.122-33.XNE.pkg, on: RP0/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: ea935f60c50ca4e1be774b330f572d6f4c198f77

Package: rpios-adventerprisek9, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.05.00.122-33.XNE.pkg, on: RP0/1
  Built: 2009-11-25_04.20, by: mcpre
  File SHA1 checksum: cc549e80a41b29bc1fc077bd31621171b00549f7

Package: rpaccess, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpaccess.02.05.00.122-33.XNE.pkg, on: RP0/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: dfeabe617c816280ad6ed541f860f0427cd36699

Package: rpbase, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpbase.02.05.00.122-33.XNE.pkg, on: RP1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: eb6de077001c3374357f56921c1bb87c28b7627c

Package: rpcontrol, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpcontrol.02.05.00.122-33.XNE.pkg, on: RP1/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: ea935f60c50ca4e1be774b330f572d6f4c198f77

Package: rpios-adventerprisek9, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.05.00.122-33.XNE.pkg, on: RP1/0
  Built: 2009-11-25_04.20, by: mcpre
  File SHA1 checksum: cc549e80a41b29bc1fc077bd31621171b00549f7

Package: rpaccess, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpaccess.02.05.00.122-33.XNE.pkg, on: RP1/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: dfeabe617c816280ad6ed541f860f0427cd36699

Package: rpcontrol, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpcontrol.02.05.00.122-33.XNE.pkg, on: RP1/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: ea935f60c50ca4e1be774b330f572d6f4c198f77

Package: rpios-adventerprisek9, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpios-adventerprisek9.02.05.00.122-33.XNE.pkg, on: RP1/1
  Built: 2009-11-25_04.20, by: mcpre
  File SHA1 checksum: cc549e80a41b29bc1fc077bd31621171b00549f7

Package: rpaccess, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-rpaccess.02.05.00.122-33.XNE.pkg, on: RP1/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: dfeabe617c816280ad6ed541f860f0427cd36699

Package: espbase, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-espbase.02.05.00.122-33.XNE.pkg, on: ESP0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 709a892fe370edac5ad9d7c263fab41092e3ec50

Package: espbase, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-espbase.02.05.00.122-33.XNE.pkg, on: ESP1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 709a892fe370edac5ad9d7c263fab41092e3ec50

Package: sipbase, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-sipbase.02.05.00.122-33.XNE.pkg, on: SIP0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 1d5ba66c64c5dc884e7b5b92ec353cafff33eeeb

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP0/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP0/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP0/2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP0/3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipbase, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-sipbase.02.05.00.122-33.XNE.pkg, on: SIP1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 1d5ba66c64c5dc884e7b5b92ec353cafff33eeeb

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP1/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP1/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP1/2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP1/3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipbase, version: 02.05.00.122-33.XNE, status: active
  File: consolidated:asr1000rp1-sipbase.02.05.00.122-33.XNE.pkg, on: SIP2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 1d5ba66c64c5dc884e7b5b92ec353cafff33eeeb

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP2/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP2/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP2/2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP2/3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipbase, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipbase.02.05.00.122-33.XNE.pkg, on: SIP3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 1d5ba66c64c5dc884e7b5b92ec353cafff33eeeb

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP3/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP3/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP3/2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP3/3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipbase, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipbase.02.05.00.122-33.XNE.pkg, on: SIP4
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 1d5ba66c64c5dc884e7b5b92ec353cafff33eeeb

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP4/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP4/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP4/2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP4/3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipbase, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipbase.02.05.00.122-33.XNE.pkg, on: SIP5
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 1d5ba66c64c5dc884e7b5b92ec353cafff33eeeb

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP5/0
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP5/1
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP5/2
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Package: sipspa, version: 02.05.00.122-33.XNE, status: n/a
  File: consolidated:asr1000rp1-sipspa.02.05.00.122-33.XNE.pkg, on: SIP5/3
  Built: 2009-11-25_04.19, by: mcpre
  File SHA1 checksum: 08607f0d86e59aa4bf3473483c49a4daabd7b9b5

Cisco IOS XE to Cisco IOS Version Number Mapping

Each version of Cisco IOS XE has an associated Cisco IOS version. Table 6 lists these mappings for all released versions of Cisco IOS XE.

Table 6 Cisco IOS XE to Cisco IOS Version Number Mapping 

Cisco IOS XE Version
Cisco IOS Version

02.01.00

12.2(33)XNA

02.01.01

12.2(33)XNA1

02.01.02

12.2(33)XNA2

02.02.01

12.2(33)XNB1

02.02.02

12.2(33)XNB2

02.02.03

12.2(33)XNB3

02.03.00 (Deferred Version)

12.2(33)XNC (Deferred Version)

02.03.00t

12.2(33)XNC0t

02.03.01 (Deferred Version)

12.2(33)XNC1 (Deferred Version)

02.03.01t

12.2(33)XNC1t

02.03.02

12.2(33)XNC2

02.04.00

12.2(33)XND

02.04.01

12.2(33)XND1

02.04.02

12.2(33)XND2

02.05.00

12.2(33)XNE



Note The Cisco IOS XE 2.3.0 and Cisco IOS XE 2.3.1 images are no longer downloadable from Cisco.com. Replacement images (Cisco IOS XE 2.3.0t and Cisco IOS XE 2.3.1t) with exactly the same content and bug fixes are available on Cisco.com. If the Cisco IOS XE 2.3.0 and Cisco IOS XE 2.3.1 images are not causing any issues, no action is necessary. Old image MD5 sums will still be available for verification on the download page. For more details, see CSCsz80074.


Upgrading to a New Software Release

Only Cisco IOS XE consolidated packages can be downloaded from Cisco.com; users who want to run the router using individual sub-packages must first download the image from Cisco.com and extract the individual sub-packages from the consolidated package.

For information about upgrading to a new software release, see the following document:

Cisco ASR 1000 Series Aggregation Services Router Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/chassis/asrswcfg.html

New and Changed Information

This section lists the new hardware and software features that are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2 and contains the following sections:

New Hardware Features in Cisco IOS XE Release 2.5.0, page 19

New Software Features in Cisco IOS XE Release 2.5.0, page 21

New Software Features in Cisco IOS XE Release 2.4.2, page 38

New Software Features in Cisco IOS XE Release 2.4.1, page 38

New Hardware Features in Cisco IOS XE Release 2.4.0, page 40

New Software Features in Cisco IOS XE Release 2.4.0, page 41

New Hardware Features in Cisco IOS XE Release 2.3.2, page 61

New Software Features in Cisco IOS XE Release 2.3.2, page 61

New Hardware Features in Cisco IOS XE Release 2.3.1, page 61

New Software Features in Cisco IOS XE Release 2.3.1, page 61

New Hardware Features in Cisco IOS XE Release 2.3.0, page 61

New Software Features in Cisco IOS XE Release 2.3.0, page 62

New Hardware Features in Cisco IOS XE Release 2.2.3, page 74

New Software Features in Cisco IOS XE Release 2.2.3, page 74

New Hardware Features in Cisco IOS XE Release 2.2.2, page 75

New Software Features in Cisco IOS XE Release 2.2.2, page 75

New Hardware Features in Cisco IOS XE Release 2.2.1, page 75

New Software Features in Cisco IOS XE Release 2.2.1, page 78

New Hardware Features in Cisco IOS XE Release 2.1.2, page 92

New Software Features in Cisco IOS XE Release 2.1.2, page 92

New Hardware Features in Cisco IOS XE Release 2.1.1, page 92

New Software Features in Cisco IOS XE Release 2.1.1, page 93

New Hardware Features in Cisco IOS XE Release 2.1.0, page 93

New Software Features in Cisco IOS XE Release 2.1.0, page 98

Release Note Only Software Features in Cisco IOS XE Release 2.1.0, page 102

New Hardware Features in Cisco IOS XE Release 2.5.0

The following hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.5.0:

1-Port Clear Channel OC-12 ATM SPA (SPA-1XOC12-ATM-v2), page 20

New XFP/SFPs Supported with SPAs and the Built-In Gigabit Ethernet Interface, page 20

1-Port Clear Channel OC-12 ATM SPA (SPA-1XOC12-ATM-v2)

The 1-Port Clear Channel OC-12 ATM SPA is a single-height ATM SPA that can be installed into one SIP subslot. The OC-12 ATM SPA with small form-factor pluggable (SFP) optical transceiver modules provides SONET and SDH network connectivity with a per-port bandwidth of 622.08 Mbps.

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New XFP/SFPs Supported with SPAs and the Built-In Gigabit Ethernet Interface

The following transceiver modules are newly supported on the Cisco ASR 1000 Series Routers for the following SPAs:

Cisco10GBASE-SR XFP transceiver module for MMF, 850-nm wavelength, dual LC connector (XFP-10G-MM-SR)—Supported with the 1-Port 10-Gigabit Ethernet SPA (SPA-1X10GE-L-V2) only on the Cisco ASR-1002, Cisco ASR-1004, and Cisco ASR-1006 routers.

Cisco1000BASE-BX10 SFP module for single-strand SMF, 1490-nm TX/1310-nm RX wavelength (GLC-BX-D)—Supported with the following hardware:

2-Port Gigabit Ethernet SPA (SPA-2X1GE-V2)

5-Port Gigabit Ethernet SPA (SPA-5X1GE-V2)

10-Port Gigabit Ethernet SPA (SPA-10X1GE-V2)

Built-in Gigabit Ethernet interface on the Cisco ASR-1002 router

Cisco 1000BASE-BX10 SFP module for single-strand SMF, 1310-nm TX/1490-nm RX wavelength (GLC-BX-U)—Supported with the following hardware:

2-Port Gigabit Ethernet SPA (SPA-2X1GE-V2)

5-Port Gigabit Ethernet SPA (SPA-5X1GE-V2)

10-Port Gigabit Ethernet SPA (SPA-10X1GE-V2)

Built-in Gigabit Ethernet interface on the Cisco ASR-1002 router

For more information, see the following publications:

For information on optics module compatibility with SPAs on the Cisco ASR 1000 series routers, see the "Modular Optics Compatibility" section of the "SIP and SPA Overview" chapter in the Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/ASRintro.html

For more information about the built-in Gigabit Ethernet interface on the Cisco ASR-1002 routers and optics module compatibility, see the Cisco ASR 1000 Series Aggregation Services Router Hardware Installation Guide at:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

For more information about a specific supported transceiver module and its installation and maintenance, find the corresponding documentation for the supported module at the Cisco Transceiver Modules site at:

http://www.cisco.com/en/US/products/hw/modules/ps5455/prod_installation_guides_list.html

New Software Features in Cisco IOS XE Release 2.5.0

This section lists new and changed features in Cisco IOS XE Release 2.5. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.5:

2547oDMVPN - Enabling Traffic Segmentation within DMVPN, page 23

AAA - Improvements for Broadband IPv6, page 23

ANCP - ATM Support, page 23

ATM F4 Ping, page 23

ATM Sub-interface Multipoint, page 23

BGP Best External, page 24

BGP Multicast Inter-AS (IAS) VPN, page 24

BGP VPLS Auto Discovery Support on Route Reflector, page 24

Configurable Domain Name Prefix and Suffix Stripping, page 25

DHCP - DHCPv6 Prefix Delegation RADIUS VSA, page 25

DHCP Enhancements to Support IPv6 Broadband Deployments, page 25

DHCPv6 Repackaging, page 25

DMVPN Manageability Enhancements, page 25

DMVPN: Dynamic tunnels between spokes behind NAT, page 25

Dynamic Subscriber Bandwidth Selection, page 26

EtherChannel Min-Links, page 26

Firewall - VRF-aware ALG support, page 26

Flow Based Per Port Channel Load Balancing, page 26

IEEE 802.3ad - Faster Link Switchover Time, page 26

IEEE 802.3ad MIB, page 27

IPv6 Access Services: AAA Support for Cisco VSA IPv6 Attributes, page 27

IPv6 Access Services: AAA Support for RFC 3162 IPv6 RADIUS Attributes, page 27

IPv6 Access Services: PPPoA, page 27

IPv6 Access Services: PPPoE, page 27

IPv6 Access Services: Stateless DHCPv6, page 27

ISG:AAA Wireless Enhancements, page 28

ISG:Accounting: Prepaid, page 28

ISG:Authentication:Radius Proxy WiMax Enhancements, page 28

ISG:Instrumentation:DHCP Lease Query Support, page 28

ISG:Policy Control:Differentiated Initial Policy Control, page 28

ISG:Session: Creation: Interface IP Session: L2, page 28

ISG:Session: Creation: Interface IP Session: L3, page 29

ISG:Session:Multicast:Coexistance, page 29

ISG:Session:Static Session Creation, page 29

ISSU - Multicast MPLS VPN, page 29

ISSU - PPPoEoA, page 29

Layer 2 Local Switching - Same-Port Switching for Ethernet VLAN, page 29

Layer 2 Local Switching: Ethernet to VLAN, page 30

Link Aggregation Control Protocol (LACP) (802.3ad) for Gigabit Interfaces, page 30

Local Template-Based ATM PVC Provisioning, page 30

MPLS VPN Half Duplex VRF (HDVRF), page 30

MSDP MD5 password authentication, page 30

Multicast VPN Extranet Support, page 31

Multicast VPN Extranet VRF Select, page 31

Multicast VPN Inter-AS Support, page 31

Multicast VPN MIB, page 31

Multicast-VPN: Multicast Support for MPLS VPN, page 31

NAT - VRF aware NAT for MPLS/VPN, page 32

NAT - VRF-aware ALG support, page 32

NBAR PDLM supported in ASR1000 Release 5, page 32

NHRP - CEF rewrite for DMVPN Phase 3 Networks, page 32

NHRP MIB for DMVPN Networks, page 32

NSF/SSO - Multicast MPLS VPN, page 33

PPP Enhancement for Broadband IPv6, page 33

PPP Session Queueing on ATM VC, page 33

PPPoE Connection Throttling, page 33

PPPoE on ATM, page 33

PPPoE Session Count MIB, page 33

QoS: QoS support for GRE/sVTI Tunnel, page 34

QoS: Shape Average Percent CLI, page 34

Service Advertisement Framework (SAF), page 34

SSO - LACP, page 34

SSO - PPPoE IPv6, page 34

SSO - PPPoEoA, page 35

VRF Aware Cisco IOS Firewall, page 35

Cisco Unified Border Element (Enterprise), page 35

Cisco Unified Border Element (SP Edition), page 36

2547oDMVPN - Enabling Traffic Segmentation within DMVPN

Cisco IOS XE Release 2.5 provides an enhancement that allows you to segment VPN traffic within a DMVPN tunnel.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/sec_DMVPN_xe.html

AAA - Improvements for Broadband IPv6

This feature is supported in Cisco IOS XE Release 2.5.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

ANCP - ATM Support

You can enable ANCP support on an ATM interface by using the enable ancp command. This is one of the optional steps for configuring PVC.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/atm/configuration/guide/atm_cfg_atm_xe.html

ATM F4 Ping

The F4 Operations, Administration, and Maintenance (OAM) Ping without Virtual Path (VP) Creation feature enables you to determine problems at the virtual path (VP) level using the ping command. Using

this feature, you can create and remove virtual circuit identifiers (VCIs) that correspond to the VP segment and the VP end, in the absence of VP configuration. After creating the VCIs you can use the ping atm command to isolate connection problems.

ATM Sub-interface Multipoint

ATM supports two types of interfaces: point-to-point and multipoint.

Point-to-point subinterface—With point-to-point subinterfaces, each pair of routers has its own subnet. If you put the PVC on a point-to-point subinterface, the router assumes that there is only one point-to-point PVC configured on the subinterface. Therefore, any IP packets with a destination IP address in the same subnet are forwarded on this virtual circuit (VC). This is the simplest way to configure the mapping and is therefore the recommended method.

- Multipoint networks—Multipoint networks have three or more routers in the same subnet. If you put the PVC in a point-to-multipoint subinterface or in the main interface (which is multipoint by default), you need to either configure a static mapping or enable inverse Address Resolution Protocol (ARP) for dynamic mapping.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/atm/configuration/guide/atm_cfg_atm_xe.html

ATM VC Ingress Policing

This feature module describes how to configure QoS hierarchical queueing policy maps on sessions and ATM VCs in ATM Digital Subscriber Line Access Multiplexer (A-DSLAM) applications.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/ppp_ses_que_atm_vc_xe.html

BGP Best External

The BGP Best External feature provides the capability of configuring the additional backup paths and advertises the best-external route which is the most preferred route among the routes received by a router from its eBGP peers. The best-external route can be used in case the primary PE fails or the primary PE link fails thereby reducing traffic loss and aiding in achieving faster PIC time.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_bgp/configuration/guide/irg_best_external_xe.html

BGP Multicast Inter-AS (IAS) VPN

The BGP Best External feature provides the capability of configuring the additional backup paths and advertises the best-external route which is the most preferred route among the routes received by a router from its eBGP peers. The best-external route can be used in case the primary PE fails or the primary PE link fails thereby reducing traffic loss and aiding in achieving faster PIC time.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_bgp/configuration/guide/irg_best_external_xe.html

BGP PIC Edge for IP/MPLS

The BGP PIC feature provides the ability to converge BGP routes within sub-seconds instead of multiple seconds and allows you to configure your BGP to minimize traffic loss and improve convergence when a link between the PE and CE router fails.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_bgp/configuration/guide/irg_best_external_xe.html

BGP VPLS Auto Discovery Support on Route Reflector

On the ASR1000, BGP Route Reflector was enhanced to be able to reflect BGP VPLS prefixes without having VPLS explicitly configured on the route reflector. The route reflector reflects the VPLS prefixes to other provider edge (PE) routers so that the PEs do not need to have a full mesh of BGP sessions.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_bgp/configuration/guide/irg_int_features_xe.html

Configurable Domain Name Prefix and Suffix Stripping

VPDN Configurable Domain Name Prefix and Suffix Stripping: This feature allows the NAS to be configured to strip prefixes, suffixes, or both from the full username. The reformatted username is then forwarded to the remote AAA server.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

DHCP - DHCPv6 Prefix Delegation RADIUS VSA

DHCP - DHCPv6 Prefix Delegation RADIUS VSA - "When the user requests a prefix from the prefix delegator, typically the NAS, the prefix is allocated using DHCPv6"

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

DHCP Enhancements to Support IPv6 Broadband Deployments

This feature is supported in Cisco IOS XE Release 2.5.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

DHCPv6 Repackaging

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-dhcp.html

DMVPN Manageability Enhancements

DMVPN session manageability was expanded with DMVPN specific commands for debugging, show output, session and counter control, and system log information.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/sec_DMVPN_xe.html

DMVPN: Dynamic tunnels between spokes behind NAT

The DMVPN: Dynamic Tunnels Between Spokes Behind a NAT Device feature allows Next Hop Resolution Protocol (NHRP) spoke-to-spoke tunnels to be built in Dynamic Multipoint Virtual Private Networks (DMVPNs), even if one or more spokes is behind a Network Address Translation (NAT) device.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/dmvpn_dt_spokes_b_nat_xe.html

Dynamic Subscriber Bandwidth Selection

This feature enables wholesale service providers to sell different classes of service to retail service providers by controlling bandwidth at the ATM virtual circuit (VC) level. ATM quality of service (QoS) parameters from the subscriber domain are applied to the ATM PVC on which a PPPoE or PPPoA session is established.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_con_sub_bdwth_xe.html

EtherChannel Min-Links

The EtherChannel Min-Links feature allows a port channel to be shut down when the number of active links falls below the minimum threshold.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html

Firewall - VRF-aware ALG support

VRF-aware ALG support allows ALG to extract the correct IP-address and VRF-id from cached memory when creating ALG tokens.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_vrf_aware_fwall_xe.html

Flow Based Per Port Channel Load Balancing

The Flow-Based Per Port-Channel Load Balancing feature allows different flows of traffic over a Gigabit EtherChannel (GEC) interface to be identified based on the packet header and then mapped to the different member links of the port channel. You can apply flow-based load balancing or VLAN-manual load balancing to specific port channels.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/lanswitch/configuration/guide/lsw_cfg_flwload_xe.html

IEEE 802.3ad - Faster Link Switchover Time

The IEEE 802.3ad Faster Link Switchover Time feature provides a link failover time of 250 milliseconds or less and a maximum link failover time of 2 seconds. Also, port channels remain in the LINK_UP state to eliminate reconvergence by the Spanning-Tree Protocol.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html

IEEE 802.3ad MIB

The IEEE 802.3ad Link Aggregation Control Protocol (LACP) enables the bundling of physical interfaces on a physical device to achieve more bandwidth than is available using a single interface. The LAG MIB supports the management of interfaces and ports that are part of an LACP port channel and is accessed by a Simple Network Management Protocol (SNMP) manager application.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lacpmib_xe.html

IPv6 Access Services: AAA Support for Cisco VSA IPv6 Attributes

Vendor-specific attributes (VSAs) were developed to support AAA for IPv6

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

IPv6 Access Services: AAA Support for RFC 3162 IPv6 RADIUS Attributes

The AAA attributes for IPv6 are compliant with RFC 3162 and require a RADIUS server capable of supporting RFC 3162.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

IPv6 Access Services: PPPoA

ADSL and dial deployment is available for interfaces with PPP encapsulation enabled, including PPPoA.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

IPv6 Access Services: PPPoE

ADSL and dial deployment is available for interfaces with PPP encapsulation enabled, including PPPoE.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

IPv6 Access Services: Stateless DHCPv6

The stateless DHCPv6 feature allows DHCPv6 to be used for configuring a node with parameters that do not require a server to maintain any dynamic state for the node.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-dhcp_xe.html

ISG:AAA Wireless Enhancements

The ISG: AAA Wireless Enhancements feature enhances ISG Radius proxy functionality to provide additional support for mobile wireless environments. It includes changes to RADIUS attribute 31 processing.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_radius_proxy_xe.html

ISG:Accounting: Prepaid

The ISG:Accounting: Prepaid feature supports ISG prepaid billing and allows ISG to check a subscriber's available credit to determine whether to allow the subscriber access to a service and how long the access can last. ISG supports volume-based and time-based prepaid billing.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_radius_proxy_xe.html

ISG:Authentication:Radius Proxy WiMax Enhancements

The ISG:Authentication:Radius Proxy WiMax Enhancements feature enhances ISG Radius proxy to provide additional support for WiMax broadband environments.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_radius_proxy_xe.html

ISG:Instrumentation:DHCP Lease Query Support

The ISG:Authentication:Radius Proxy WiMax Enhancements feature enhances ISG Radius proxy to provide additional support for WiMax broadband environments.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_radius_proxy_xe.html

ISG:Policy Control:Differentiated Initial Policy Control

The ISG: Policy Control: Differentiated Initial Policy Control feature provides minimal or temporary network access to the subscribers when the RADIUS servers are down or cannot be accessed because of network issues.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_cntrl_policies_xe.html

ISG:Session: Creation: Interface IP Session: L2

The ISG:Session: Creation: Interface IP Session: L2 feature provides the ability to create Layer 2 IP Sessions for ISG for an entire interface or subinterface.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_acess_sub_sessns_xe.html

ISG:Session: Creation: Interface IP Session: L3

The ISG:Session: Creation: Interface IP Session: L3 feature provides the ability to create Layer 3 IP Sessions for ISG for an entire interface or subinterface.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_acess_sub_sessns_xe.html

ISG:Session:Multicast:Coexistance

The ISG Session Multicast Coexistence feature introduces the ability to host all the subscribers and services (data and multicast) on the same VLAN by enabling multicast and IP sessions to coexist on the same subinterface for Cisco 1000 series routers.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_acess_sub_sessns_xe.html

ISG:Session:Static Session Creation

The ISG Static Session Creation feature enables administrator initiated static IP sessions.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_acess_sub_sessns_xe.html

ISSU - Multicast MPLS VPN

This feature is supported in Cisco IOS XE Release 2.5.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-inserv_updg_xe.html

ISSU - PPPoEoA

The Cisco IOS Broadband High Availability Stateful Switchover feature provides the capability for dual Route Processor systems to support stateful switchover of PPPoX sessions and allow applications and features to maintain state while system control and routing protocol execution is transferred between an active and a standby processor.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_ha_svc_sw_up_xe.html

Layer 2 Local Switching - Same-Port Switching for Ethernet VLAN


Note The Layer 2 Local Switching - Same-Port Switching for Ethernet VLAN feature allows you to switch Layer 2 data between two interfaces on the same router, and in some cases to switch Layer 2 data between two circuits on the same interface port.


For more information, see the following document:

http://www.cisco.com/en/US/docs/ios_xe/wan/configuration/guide/wan_l2_lcl_swng_xe.html

Layer 2 Local Switching: Ethernet to VLAN


Note The Layer 2 Local Switching: Ethernet to VLAN feature allows you to switch Layer 2 data between two interfaces on the same router, and in some cases to switch Layer 2 data between two circuits on the same interface port.


For more information, see the following document:

http://www.cisco.com/en/US/docs/ios_xe/wan/configuration/guide/wan_l2_lcl_swng_xe.html

Link Aggregation Control Protocol (LACP) (802.3ad) for Gigabit Interfaces

The LACP (802.3ad) for Gigabit Interfaces feature bundles individual Gigabit Ethernet links into a single logical link that provides the aggregate bandwidth of up to four physical links.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html

Local Template-Based ATM PVC Provisioning

The Local Template-Based ATM Provisioning feature enables ATM permanent virtual circuits (PVCs) to be provisioned automatically as needed from a local configuration. ATM PVC autoprovisioning can be configured on a PVC, an ATM PVC range, or a VC class. If a VC class configured with ATM PVC autoprovisioning is assigned to an interface, all the PVCs on that interface will be autoprovisioned; this configuration is sometimes referred to as an infinite range.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/atm/configuration/guide/atm_pvc_prov_xe.html

MPLS VPN Half Duplex VRF (HDVRF)

This feature ensures that VPN clients that connect to the same PE router at the edge of the MPLS VPN use the hub site to communicate.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_vpn_half_dup_vrf_xe.html

MSDP MD5 password authentication

The MSDP MD5 password authentication feature is an enhancement to support MD5 signature protection on a TCP connection between two MSDP peers. This feature provides added security by protecting MSDP against the threat of spoofed TCP segments being introduced into the TCP connection stream.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipmulti/configuration/guide/imc_msdp_im_pim_sm_xe.html

Multicast VPN Extranet Support

The Multicast VPN Extranet Support feature enables service providers to distribute IP multicast content originated from one enterprise site to other enterprise sites. This feature enables service providers to offer the next generation of flexible extranet services, helping to enable business partnerships between different enterprise VPN customers

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipmulti/configuration/guide/imc_mc_vpn_extranet_xe.html

Multicast VPN Extranet VRF Select

The Multicast VPN Extranet VRF Select feature provides the capability for RPF lookups to be performed to the same source address in different VRFs using the group address as the VRF selector. This feature enhances extranet MVPNs by enabling service providers to distribute content streams coming in from different MVPNs and redistributing them from there.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipmulti/configuration/guide/imc_mc_vpn_extranet_xe.html

Multicast VPN Inter-AS Support

The Multicast VPN Inter-AS support feature enables MDTs used for MVPNs to span multiple autonomous systems. Benefits include increased multicast coverage to customers that require multicast to span multiple service providers in an MPLS Layer 3 VPN service with the flexibility to support all options described in RFC 4364. Additionally, the Multicast VPN Inter-AS Support feature may be used to consolidate an existing MVPN service with another MVPN service, such as the case with a company merger or acquisition

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipmulti/configuration/guide/imc_cfg_mc_vpn_sup_xe.html

Multicast VPN MIB

The Multicast VPN MIB feature introduces the capability for SNMP monitoring of an MVPN using the MVPN MIB (CISCO-MVPN-MIB).

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipmulti/configuration/guide/imc_vpn_mib_xe.html

Multicast-VPN: Multicast Support for MPLS VPN

The Multicast VPN feature provides the ability to support multicast over a Layer 3 Virtual Private Network (VPN). As enterprises extend the reach of their multicast applications, service providers can accommodate these enterprises over their Multiprotocol Label Switching (MPLS) core network. IP multicast is used to stream video, voice, and data to an MPLS VPN network core.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipmulti/configuration/guide/imc_cfg_mc_vpn_xe.html

NAT - VRF aware NAT for MPLS/VPN

Enables multiple Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) to be configured to work together on a single device. NAT can determine which MPLS VPN it receives IP traffic from even if the MPLS VPNs are all using the same IP addressing scheme. This enhancement enables multiple MPLS VPN customers to share services while ensuring that each MPLS VPN is completely separate from the other.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_mpls_vpns.html

NAT - VRF-aware ALG support

Enables NAT to support virtual routing and forwarding (VRF) for protocols that require an application level gateway (ALG), such as SIP, H.323, and SCCP/Skinny.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NBAR PDLM supported in ASR1000 Release 5

Network-Based Application Recognition (NBAR) is a classification engine that recognizes and classifies a wide variety of protocols and applications. When NBAR recognizes and classifies a protocol or application, the network can be configured to apply the appropriate quality of service (QoS) for that application or traffic with that protocol.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/clsfy_traffic_nbar_xe.html

NHRP - CEF rewrite for DMVPN Phase 3 Networks

Routers in a Dynamic Multipoint VPN (DMVPN) network can use the Next Hop Resolution Protocol (NHRP) to discover the addresses of other routers and networks behind those routers that are connected to a DMVPN nonbroadcast multiaccess (NBMA) network. NHRP provides a solution that alleviates NBMA network problems, such as hub failure, decreased reliability, and complex configurations.

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iad_nhrp_dmpvn_xe.html

NHRP MIB for DMVPN Networks

The Cisco NHRP MIB feature introduces support for the NHRP MIB, which helps to manage and monitor Next Hop Resolution.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/sec_dmvpn_nhrp_mib.html

NSF/SSO - Multicast MPLS VPN

This feature is supported in Cisco IOS XE Release 2.5.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-nonstp_fwdg_xe.html

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-stfl_swovr_xe.html

PPP Enhancement for Broadband IPv6

This feature is supported in Cisco IOS XE Release 2.5.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-adsl_dial_xe.html

PPP Session Queueing on ATM VC

PPP Session Queuing on ATM Virtual Circuits (VCs) enables you to shape and queue PPP over Ethernet over ATM (PPPoEoA) sessions to a user specified rate.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/ppp_ses_que_atm_vc.html

PPPoE Connection Throttling

PPP over Ethernet (PPPoE) profiles contain configuration information for a group of PPPoE sessions. Multiple PPPoE profiles can be defined for a device, allowing different virtual templates and other PPPoE configuration parameters to be assigned to different PPP interfaces, VLANs, and ATM PVCs that are used in supporting broadband access aggregation of PPPoE sessions.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_baa_xe.html

PPPoE on ATM

This feature module describes the PPP over Ethernet (PPPoE) on ATM feature. The PPPoE on ATM feature provides the ability to connect a network of hosts over a simple bridging-access device to a remote access concentrator.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_ppoe_atm_xe.html

PPPoE Session Count MIB

The PPPoE Session Count Management Information Base feature provides the ability to use Simple Network Management Protocol (SNMP) to monitor in real time the number of PPP over Ethernet (PPPoE) sessions configured on permanent virtual circuits (PVCs) and on a router. This MIB also supports two SNMP traps that generate notification messages when a PPPoE session-count threshold is reached on any PVC or on the router.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_mon_pppoe_snmp_xe.html

QoS: QoS support for GRE/sVTI Tunnel

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_a1.html

QoS: Shape Average Percent CLI

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_a1.html

Service Advertisement Framework (SAF)

As the variety and number of network services grows, providing timely and reliable awareness of these services starts to play a more significant role in increasing productivity and efficiency. As networks grow so too do the services offered by the devices on these networks. Protocols responsible for the service advertisement need to scale to handle this increased load. This feature, Service Advertisement Framework (SAF) provides that function.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/saf/configuration/guide/XE_saf_cg.html

Sharing IPSec with Tunnel Protection

The Sharing IPsec with Tunnel Protection feature allows an IP Security (IPsec) security association database (SADB) to be shared between two or more Generic Routing Encapsulation (GRE) tunnel interfaces, when tunnel protection is used.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/share_ipsec_w_tun_protect_xe.html

SSO - LACP

The SSO - LACP feature supports stateful switchover (SSO), in service software upgrade (ISSU), Cisco nonstop forwarding (NSF),

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html

SSO - PPPoE IPv6

This feature is supported in Cisco IOS XE Release 2.5

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-adsl_dial.html

SSO - PPPoEoA

The Cisco IOS Broadband High Availability (HA) In Service Software Upgrade (ISSU) feature ensures continuous operations of broadband access protocols during software upgrades, downgrades, and service enhancements.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/atm/configuration/guide/ba_ha_svc_sw_up_xe.html

VRF Aware Cisco IOS Firewall

VRF Aware Cisco IOS Firewall applies Cisco IOS Firewall functionality to VRF interfaces when the firewall is configured on an SP or large enterprise edge router. SPs can provide managed services to small and medium business markets.

For more information, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_vrf_aware_fwall_xe.html

Cisco Unified Border Element (Enterprise)

The Cisco Unified Border Element (Enterprise) on the ASR1000 brings a scalable Cisco UBE (Enterprise) options for enterprise customers. Running as a process on the ASR1000 and utilizing the high speed RTP packet processing path, The primary customers are ones who are consolidating TDM trunks. This release focuses on the initial set of functionality completed for SIP Trunks for PSTN access from Service Providers.

The following Cisco Unified Border (Enterprise) features were introduced in Cisco IOS XE Release 2.5.0:

Configurable SIP Parameter Modification

DTMF Events Through SIP Signaling

Enhanced SIP REFER

H.323 to SIP Supplementary Feature Interworking for Session Border Controller (SBC)

iLBC Support for SIP and H.323

IP-IP Gateway for H323 Call Manager to H323 Service Provider Connectivity

IP-to-IP Gateway: SIP-SIP Basic Functionality

SIP - Ability to Send a SIP Registration Message on a Border Element

SIP - Configurable Hostname in Locally Generated SIP Headers

SIP - Core SIP Technology Enhancements

SIP - DNS SRV RFC2782 Compliance

SIP - Enhanced 180 Provisional Response Handling

SIP - Gateway Support for the Bind Command

SIP - INFO Method for DTMF Tone Generation

SIP - Session Initiation Protocol for VoIP

SIP - Session Timer Support

SIP - SIP Basic Feature Functionality for Session Border Controller (SBC)

SIP - SIP Extended Feature Functionality for Session Border Controller (SBC)

SIP - SIP GW Session Timer Support

SIP - Stack Support of TLS

SIP - Support for SESSION REFRESH with reINVITEs

SIP and TEL URL Support

SIP to SIP Supplementary Services for Session Border Controller (SBC)

SIP:SIP Support for Options

Support for negotiation of an audio codec from a list of codecs on each leg of a SIP-SIP call on the Cisco Unified Border Element

Transparent Tunneling of QSIG and Q.931 over SIP-SIP Cisco Unified Border Element

For information about these Cisco Unified Border Element (Enterprise) features, see the following documents:

http://www.cisco.com/en/US/docs/ios/ios_xe/voice_cube_(ent)/configuration/guide/vb_xe_book/vb_xe_book.html

Cisco Unified Border Element (SP Edition)

The following Cisco Unified Border Element (SP Edition) features were introduced in Cisco IOS XE Release 2.5.0:

Call duration monitoring

CDR:Support for CDR Media information

CDR:Granular Timestamp Support

H323:H.245 address in Call PROC

H323:H.323 Registration with Multiple Gatekeepers

H323:H.323 Slow start to H.323 Fast start Interop

H323:H.323 Video codec support (H.261, H.263, H.264)

H.323:In call facility pass through

H323:Interop with Cisco H.323 gatekeeper

H323:ITU H.323v4: Packet-Based Multimedia Communications System

H323:Multiple TCP for H.323

IMS:Support for Authentication via AKA

Interop:Support interworking like CCM-SBC-CME topology

Interworking:CCM-H.323 Slow-start to Fast-start

Interworking:H.323 - SIP Cause code Mapping

Interworking:H.323 and SIP interop services

Interworking:H.323 and SIP message translation

Interworking:H.323 fast start call to SIP call

Interworking:H.323 Slow start calls to SIP calls

Interworking:H.323 to SIP support for Emergency calls

Interworking:H.323/SIP call routing

Interworking:H.323-H.323 Interworking -basic calls

Interworking:SIP to H.323 Fast Start

Interworking:T.38 with H.323-H.323 and SIP-H.323 transcoding.

Media:Fax/Modem upspeed support

Media:SBC will support Pass through Codec Types

Media:Transcoding:For external media-server SBC shall work with MGX 8880 Media server.

Media:Transcoding:SBC shall support external Media Server

Signaling congestion handling enhancement

SIP: Ability to Insert Firewall Parameter in SIP Contact Header

SIP:Ability to adjust "b="""command in SIP INVITE"

SIP:Call forking

SIP:Call Park

SIP:Contact username passthrough (non-IMS case)

SIP:Customizable Late to Early Offer

SIP:Find Me

SIP:Instant Messaging and SIMPLE

SIP:Interoperability for INVITE authentication

SIP:IP - FQDN URI translation

SIP:regular expression based routing

SIP:SDP media line removal

SIP:SIP - Specific Event Notification

SIP:SIP header manipulation with regular expression/privacy

SIP:SIP trunk-group ID routing

SIP:Support for "Supported: Path" under REGISTER request

SIP:Support for IP Realm

SIP:Support for P-KT-UE-IP support

SIP:Support for PRACK/100rel interworking

SIP:Support for Softswitch registration timer shielding

Support for P-called party identifier, P-Associated URI (RFC3445)

Support for Subscriber Policy

For information about these Cisco Unified Border Element (SP Edition) features, see the following documents:

Cisco Unified Border Element (SP Edition) Configuration Guide: Unified Model

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbcu/2_xe/sbcu_2_xe_book.html

Cisco Unified Border Element (SP Edition) Command Reference: Unified Model

http://www.cisco.com/en/US/docs/ios/sbc/command/reference/sbcu_book.html

New Hardware Features in Cisco IOS XE Release 2.4.2

The following hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.4.2:

Cisco ASR 1002 Router

The Cisco +24V DC power supply supports the Cisco ASR 1002 Router with Cisco IOS XE 2.4.2 and later. The Cisco ASR 1002 Router with the new +24V DC power supply is targeted in markets where 24V DC power is required, including, but not limited to, wireless/mobility providers cell-sites.

For information about the Cisco ASR 1002 Router and +24V DC power supply, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

and

Cisco ASR 1002 Quick Start Guide

http://www.cisco.com/en/US/docs/routers/asr1000/quick/start/guide/asr1_qs2.html

New Software Features in Cisco IOS XE Release 2.4.2

This section lists new and changed features in Cisco IOS XE Release 2.4.2. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.4.2:

NAT - Forced Clear of Dynamic NAT Half Entries

Provides an optional keyword (forced) to the existing command clear ip nat translations that enable users to clear the NAT table of active dynamic half entries that have existing children translations.

For more information on NAT -Forced Clear of Dynamic Half Entries, see the following document:

https://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iad_monmain_nat_xe.html

New Hardware Features in Cisco IOS XE Release 2.4.1

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.4.1.

New Software Features in Cisco IOS XE Release 2.4.1

This section lists new and changed features in Cisco IOS XE Release 2.4.1. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.4.1.

IPv6 IPSec Static Virtual Interface, page 39

IPSec QoS Group-Based LLQ QoS, page 39

ALG Support for SIP T.38 Fax Relay over IP, page 39

ISIS Support for IPv6, page 39

IPv6 IPSec Static Virtual Interface

Static Virtual Tunnel Interface (SVTI) configurations can be used for site-to-site connectivity in which a tunnel provides always-on access between two sites. The advantage of using SVTIs as opposed to map configurations is that users can enable dynamic routing protocols on the tunnel interface without the extra 24 bytes required for GRE headers, thus reducing the bandwidth for sending encrypted data.

For more information on SVTIs, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-ipsec_xe.html

IPSec QoS Group-Based LLQ QoS

A limitation exists when IPSec and QoS are configured on an interface. IPSec uses the egress QoS policy to determine if a packet is a high priority packet before it enqueues it in a low latency queue (LLQ) of the crypto processor. For tunnel interfaces when the QoS policy is applied to the egress physical interface, Tunnel Protection is applied on the tunnel interface, and IPSec cannot determine if the packet is a high priority packet. In this scenario, high priority packets are queued to the default queue—increasing latency and traffic loss during oversubscription.

Starting with Cisco IOS XE Release 2.4.1, QoS group-based LLQ for IPSec provides LLQ functionality before crypto for the limitation described earlier. The idea is to use QoS groups to identify high priority traffic in the IPSec module. Packets are marked with a QoS group at the ingress interface. The user designates certain QoS groups to be used as high priority before crypto.

A new IOS XE command allows the user to configure certain QoS groups as high priority for IPSec:

[no] platform ipsec llq qos-group group_num

This command specifies that packets with QoS group group_num (allowed range 1 to 99) are to be treated as high priority packets before crypto and, therefore, are queued into a LLQ before reaching the crypto processor.

ALG Support for SIP T.38 Fax Relay over IP

The SIP Application Layer Gateway has been enhanced to provide NAT and Firewall ALG support for T.38 Fax Relay over IP.

ISIS Support for IPv6

Intermediate System (IS-IS) has been enhanced to provide Internet Protocol version 6 (IPv6).

New Hardware Features in Cisco IOS XE Release 2.4.0

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.4.0:

Cisco ASR 1002-Fixed Router

The Cisco ASR 1002-Fixed (Cisco ASR 1002-F) Router is the smallest of the Cisco ASR 1000 Series Aggregation Services Routers and supports all the general-purpose routing and security features of the Cisco ASR 1002 Router.

The Cisco ASR 1002-F Router uses the same internal control and data-plane architecture as the Cisco ASR 1002 router with the following variations:

Has all integrated components: an integrated route processor (Cisco ASR1000-RP1), an integrated embedded services processor (2.5-Gbps Cisco ASR 1000 Series ESP), and an integrated 4xGE SPA interface (Cisco ASR1000-SIP10)

Supports 2.5 GB of system bandwidth

Is supported only with Cisco IOS XE Release 2.4.0 and later releases

For information about the Cisco ASR 1002-F Router, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1002-F Quick Start Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/quick/start/guide/asr1_qs2F.html

New Shared Port Adapters

Cisco IOS XE Release 2.4.0 introduces support for the following new shared port adapters (SPAs):

POS SPAs

8-Port OC-3 POS SPA (SPA-8XOC3-POS)

2-Port, 4-Port, and 8-Port OC-12 POS SPAs (SPA-2XOC12-POS, SPA-4XOC12-POS, and SPA-8X0C-12-POS)

1-Port OC-48 POS SPA (SPA-1XOC48POS/RPR)

1-Port OC-192 POS SPA (SPA-OC192POS-XFP)

Services SPA

Cisco WebEx Node for ASR 1000 Series (SPA-WMA-K9)

The Cisco WebEx Node for ASR 1000 Series is a full-height SPA designed to run an application which is part of the WebEx MediaTone network management application. The Cisco WebEx Node for ASR 1000 Series improves the functionality of WebEx meeting services by adding the meeting servers into the SPA itself. This technology provides the following advantages:

Improves performance for users inside the company firewall.

Reduces the bandwidth going out of company firewall (to the WebEx MediaTone network).

Provides better security by reducing traffic outside the company.

By moving the switching components of the WebEx Collaboration Cloud into the Cisco WebEx Node for ASR 1000 Series, the WebEx clients in the enterprise network need only connect to the Cisco WebEx Node for ASR 1000 Series. This reduces the traffic between the enterprise network and the WebEx MediaTone network, greatly reducing the customer's Internet bandwidth requirements.

Each Cisco WebEx Node for ASR 1000 Series can be configured to perform either web conferencing or voice and video conferencing, but not both features at the same time. Each Cisco WebEx Node for ASR 1000 Series uses the same software package that includes both features; the conferencing feature that actually runs on each SPA is determined by the WebEx Service Plan the customer has purchased. The WebEx MediaTone network retains the Cisco WebEx Node for ASR 1000 Series configuration files that the SPA retrieves each time the SPA boots. Multiple Cisco WebEx Nodes for ASR 1000 Series can be installed on the same Cisco ASR 1000 Series Router chassis to increase the conferencing performance or to provide conferencing coverage for both web and voice and video sessions.

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New Software Features in Cisco IOS XE Release 2.4.0

This section lists new and changed features in Cisco IOS XE Release 2.4.0. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.4.0.

IS-IS Support for IPv6

3 Level Egress QoS Policy

802.1P CoS Bit Set for PPP and PPPoE Control Frames

AAA Interim Accounting

ACL—Template ACL/12 Bit ACE

ANCP (Access Node Control Protocol)

ANCP Phase 2.5

Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS)

Any Transport over MPLS (AToM): Ethernet over MPLS: Port Mode (EoMPLS)

Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown

Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute

Asynchronous Rotary Line Queuing

Byte-Based Weighted Random Early Detection

Cache Control Enhancements for Certification Revocation Lists

Certificate—Complete Chain Validation

Cisco IOS SHA2 Support

Cisco Unified Border Element (SP Edition)

Class-Based QoS MIB (CBQoSMIB) Enhancements

CoA—Multi-Service Activation/Deactivation in Single mMessage

Connect-info RADIUS Attribute 77—Configurable ASCII String

DHCP Server Radius Proxy

Enabling ISG to Interact with External Policy Servers

Etherchannel Flow Based Limited 1:1 Redundancy

Ethernet Overhead Accounting

Firewall—NetMeeting Directory (LDAP) ALG Support

Firewall—SIP ALG—Extended Methods

H.323 RAS Support in IOS Firewall

IEEE 802.1Q Tunneling (QinQ) for AToMLawful Intercept

IEEE 802.3ad Link Aggregation (LACP)

Integrated Session Border Controller

Interactive OAM and Scaling Improvements

IP over IPv6 Tunnels

IPsec Usability Enhancements

IPv6 Multicast: Bootstrap Router (BSR)

IPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping

IPv6 Multicast: IPv6 BSR Bidirectional Support

IPv6 Multicast: PIM Sparse Mode (PIM-SM)

IPv6 Multicast: Routable Address Hello Option

ISG: Accounting: Per-Service Accounting

ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message

ISG: Policy Control: Policy Server: RADIUS-Based Policing

L2TP Forwarding of PPPoE Tag Information

L2VPN Interworking—Ethernet to VLAN Interworking

L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires

L2VPN Pseudowire Switching

Lawful Intercept

Layer 2 VPN (L2 VPN): Syslog, SNMP Trap, and show Command Enhancements for AToM and L2TPv3

MCP GEC with QoS on memberlink

Modified LNS Dead-Cache Handling

MQC—Traffic Shaping Overhead Accounting for ATM

NAT—NetMeeting Directory (LDAP) ALG Support

NAT SCCP Video Support

NAT—SIP ALG—Extended Methods

NAT Support of H.323v2 RAS

NSF/SSO—Ethernet to Ethernet VLAN Interworking

OCSP—Server Certification from Alternate Hierarchy

Parameterization for ACL and Layer 4 Redirect

Parameterization of QoS ACL

Per Subinterface MTU for Ethernet over MPLS (EoMPLS)

PKI—CLI to Control Certificate Revocation List (CRL) Cache

PPPoE Service Selection

PPPoE Session Limit

PPPoE Smart Server Selection

PPPoE VLAN Session Throttling

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services

QoS: CBQoSMIB Index Enhancements

RADIUS-Based Lawful Intercept

RADIUS-Based Policing Attribute Modifications

RADIUS—CLI to Prevent Sending of Access Request with Blank Username

RSA 4096-Bit Key Generation in Software Crypto Engine Support

SCCP for Video

SSHv2 Enhancements

VLAN ID Rewrite

VPDN LNS Address Checking

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

VRF Aware LI (Lawful Intercept)

IS-IS Support for IPv6

Intermediate System-to-Intermediate System (IS-IS) has been enhanced to support Internet Protocol version 6 (IPv6). For more information on implementing IS-IS support, see the Cisco IOS XE IPv6 Configuration Guide, Release 2 at the following URL:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-is-is_xe_ps9587_TSD_Products_Configuration_Guide_Chapter.html

3 Level Egress QoS Policy

The 3 Level Egress QoS Policy feature allows 3 level hierarchical QoS policies to be applied as an egress service per physical interface or per VLAN (GE) or per subinterface (FR or serial).

At the top level, only class-default with shaping can be configured.

At the medium level, user defined classes can be configured where for each user defined class following can be applied:

Bandwidth Remaining (BR): either as Bandwidth Remaining Ratio (BRR) or Bandwidth Remaining Percentage (BRP) or

shaping or

priority (conditional or unconditional policer)

All of the three items listed above can be configured concurrently with WRED.

At the bottom level, user defined classes can be configured where for each user defined class either policing or marking can be applied.

802.1P CoS Bit Set for PPP and PPPoE Control Frames

The 802.1P CoS Bit Set for PPP and PPPoE Control Frames feature provides the ability to set user priority bits in the IEEE 802.1Q tagged frame to allow traffic prioritization.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_cos_ppp_pppoe_xe.html

AAA Interim Accounting

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html

ACL—Template ACL/12 Bit ACE

The Template ACL feature groups ACLs with many common access control elements (ACEs) into a single ACL that saves system resources.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_tmplacl.html

ANCP (Access Node Control Protocol)

The Access Node Control Protocol feature enhances communication between Digital Subscriber Line Access Multiplexers (DSLAMs) and a broadband remote access server (BRAS), enabling the exchange of events, actions, and information requests between the multiplexer end and the server end. As a result, either end can implement appropriate actions.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_xe.html

ANCP Phase 2.5

The ANCP Phase 2.5 feature allows multiple services to be activated or deactivated by a single Change of Authorization (CoA) message sent from the policy server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_msad_coa_xe.html

Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS)

The Any Transport over MPLS (AToM): Ethernet over MPLS (EoMPLS) feature allows you to transport Layer 2 Ethernet VLAN packets from various sources over an MPLS backbone. Ethernet over MPLS extends the usability of the MPLS backbone by enabling it to offer Layer 2 services in addition to already existing Layer 3 services.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Any Transport over MPLS (AToM): Ethernet over MPLS: Port Mode (EoMPLS)

Ethernet over MPLS (EoMPLS) is the transport of Ethernet frames across an MPLS core. It transports all frames received on a particular Ethernet or virtual LAN (VLAN) segment, regardless of the destination Media Access Control (MAC) information.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown

The Any Transport over MPLS (AToM): Remote Ethernet Port Shutdown feature allows a service provider edge (PE) router on the local end of an Ethernet over MPLS (EoMPLS) pseudowire to detect a remote link failure and cause the shutdown of the Ethernet port on the local customer edge (CE) router. Because the Ethernet port on the local CE router is shut down, the router does not lose data by continuously sending traffic to the failed remote link.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute

The Any Transport over MPLS— Ethernet over MPLS Enhancements: Fast Reroute feature allows AToM to use MPLS traffic engineering (TE) tunnels with fast reroute (FRR) support. This feature enhances FRR functionality for Ethernet over MPLS (EoMPLS).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

Asynchronous Rotary Line Queuing

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/dial/configuration/guide/dia_asyn_que_role.html

Byte-Based Weighted Random Early Detection

The Byte-Based Weighted Random Early Detection feature extends the functionality of WRED. In previous releases, you specified the WRED actions based on the number of packets. With the Byte-Based WRED, you can specify WRED actions based on the number of bytes.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/fsbyte_xe.html

Cache Control Enhancements for Certification Revocation Lists

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert.html

Certificate—Complete Chain Validation

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert.html

Cisco IOS SHA2 Support

The Cisco IOS SHA2 Support feature allows the user to specify a cryptographic hash function for Cisco IOS certificate servers and clients. The cryptographic hash functions that can be specified are Message-Digest algorithm 5 (MD5), Secure Hash Algorithm -- SHA-1, SHA-256, SHA-384, or SHA-512.

The following commands were introduced by this feature: hash (ca-trustpoint) and hash (cs-server). The hash (ca-trustpoint) command sets the hash function for the signature that the Cisco IOS client uses to sign its self-signed certificates. The hash (cs-server) command sets the hash function for the signature that the Cisco IOS certificate authority (CA) uses to sign all of the certificates issued by the server.

Cisco Unified Border Element (SP Edition)

Cisco Unified Border Element (SP Edition) was formerly known as Integrated Session Border Controller.

With Cisco IOS XE Release 2.4.0, Cisco Unified Border Element (SP Edition) can operate in two modes or deployment models:

Unified—In the unified model, both the SBE and DBE logical entities co-exist on the same network element. In this model, the signaling entity controls the media local to the router.

Distributed—In the distributed model, the SBE and the DBE entities reside on different network elements. Logically, each of the SBE entities controls multiple DBE elements, and each DBE can be controlled by multiple SBE entities.


Note For Cisco IOS XE Release 2.3 and earlier releases of the Integrated Session Border Controller, only DBEs in the distributed model are supported.


In addition to introducing support for the SBC unified model, Cisco IOS XE Release 2.4.0 introduces support for the following Session Border Controller (SBC) features:

AAA: End Point Authentication

CAC: Bypass Admission Control for Emergency Calls

CAC: CAC Enforcement Notification

CAC: Configurable Rate Limiting

CAC: DBE Shall Support DSCP Settings

CAC: Policing and Marking Under SBE Control

CAC: Policing: Number Analysis: Depending on Destination Adjacency

CAC: Policing: Per Session Policing

CAC: Policing: SBC Shall Support Whitelisting and Blacklisting Profiles Based on Request for Methods

CAC: Policing: BC Shall Support Policy Based Session Routing

CAC: Priority Handling of Traffic During an Attack or When System's Resources Are Overloaded

CAC: SBE Shall Support Various CAC Mechanisms

CDR: 24 hours CDR Buffering

CDR: Real Time CDRs Can Be Extracted Upon Completion of a Session

CDR: Send CDR to Radius Server

Config: ALARM/Statistics

Config: All Timer Values Should Be Configurable with Default Values

Config: DBE Shall Provide QoS Statistics to SBE in Realtime upon Call Completion

Config: DBE Shall Support to Collect Statistics of the Session

Config: Display Session States in Real-time

Config: Load Balancing

Config: Required Debug Commands

Config: SBE/DBE CLI Consistency

Config: SBE Shall Support the Ability to Specify QoS for the Session Based QoS Categories

Config: Shut/No-Shut of SBE/DBE/SBC

Delta Renegotiation

DoS: DoS (Denial of Service)

DoS: Guard Against DoS Attack at Signaling Level

DoS: Monitoring and Blacklisting Signaling/Media Traffic for a DoS Attack

DoS: Signaling and Control Packets

DoS: Media Pinhole Provides an Alert for Packets with Unknown Source Address

HA: 1:1 Redundancy Support

HA: 2 Seconds Until New Sessions Can Be Established Following Failover

HA: Active Session Preservation Across Failover

HA: Media Path Interruption Should Be Less Than 1 Second During Failover

IMS: Support for P-CSCF Subscription to Subscriber Registration State

Interop: Interop with CCM and SIP IP Phones

Interop: Interop with Cisco SIP Proxy Servers

Interop: Interop with Telepresence System

Media: DTMF Interworking Support

Media: DTMF Support for SIP-Notify

Media: Fax/Modem Passthrough Support

Media: Inter-VPN Media Relay Bypass

Media: Media Packet Updates

Media: RTCP Processing

Media: Support DTMF Processing

Media: Support for RFC 3550 (RTP)

Media: Support for RFC 3551

Media: Support for Video CodecsH.263 and H.264

Media: Support Media Relay

Media: VPN Awareness and Translation

MIB: Support SNMP Call Stats Requirements

MIB: Support SNMP TRAPS Requirements

NAPT: NAPT Traversal

NAT: NAT Traversal

Option to Use CODEC Instead of Bandwidth-Field for Media Bandwidth Allocation

Performance: Jitter Measurement

Performance: Latency Measurement

QoS: DSCP, Pre/TOS, and MPLS EXO\P Marking for Media, Signaling and Control Traffic

Radius: Configurable Radius Authentication/Accounting Server Port

Radius: Support Multiple Radius Servers

Security: Private Extensions to the SIP for Asserted Identity within Trusted Networks

Security: Short Term Requirements for Network Asserted Identity

Security: Support DTLS for SIP Signaling

Security: Support for SRTP

Security: Support Multi-VFF Support for SBC

Security: Support TLS-TLS and TLS-nonTLS Call Support

Security: TLS Encrypted Signaling Across SP-SP Border

SIP: 3xx Support

SIP: Allow Fast Register and Softswitch Shielding to Be Configured Independently

SIP: BYE Storm Pacing

SIP: Call ForwardingBusy

SIP: Call ForwardingNo Answer

SIP: Call ForwardingUnconditional

SIP: Call Hold

SIP: Call Hold Interworking

SIP: Call Hold with MOH

SIP: Call Routing Enhancement

SIP: Caller-ID and Calling Name Delivery

SIP: Click To Dial

SIP: Codec AAC-LD Support

SIP: Consultation Hold

SIP: Delayed Media to Early Media Support

SIP: Delegated Registration

SIP: Dynamic Route Selection

SIP: HTTP Digest Authentication

SIP: Min-SE Support

SIP: Music On Hold (MOH)

SIP: MWI (Message Waiting Indicator)

SIP: Reason Header

SIP: RFC 3262 PRACK (Provisional Response)

SIP: RFC 3264 An Offer/Answer Model with the SDP

SIP: RFC 3892 Referred-By Mechanism

SIP: RFC2976 SIP INFO method

SIP: RFC3261

SIP: session-expire Support

SIP: SIP Aggregation Registration

SIP: SIP Header and Value Manipulation

SIP: SIP Registration Forwarding

SIP: SIP Session Refreshment with re-INVITE

SIP: SIP to Tel URI

SIP: SRTP S-Description Passthrough

SIP: Support for VPN DNS Resolution

SIP: Support 100rel in Supported Header

SIP: Support Fast Registration

SIP: Support for Diversion Header

SIP: Support for SIP Date Header

SIP: Support for SIP JOIN Header

SIP: Support for SIP Profile for Message Normalization

SIP: Support TCP/UDP and Interoperability

SIP: Support Tel URI

SIP: timer Support

SIP: TransferAttended

SIP: TransferUnattended

SIP: TransferInstant

SIP: user=phone Parameter

SIP: Video Support with E.164 and SIP URI

Support Renegotiated Call Over NAT

T.38 Passthrough

Topology-Hiding: Infrastructure and Topology Hiding

TP Support for Secure Media

VPN Awareness and Interconnect

For information about these SBC features, see the following documents:

Cisco Unified Border Element (SP Edition) Configuration Guide: Unified Model

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbcu/2_xe/sbcu_2_xe_book.html


Note Because the Cisco Unified Border Element (SP Edition) Configuration Guide: Unified Model uses a task-oriented approach to SBC features, each individual feature is not necessarily identified by feature name within the configuration guide.


Cisco Unified Border Element (SP Edition) Command Reference: Unified Model

http://www.cisco.com/en/US/docs/ios/sbc/command/reference/sbcu_book.html

Class-Based QoS MIB (CBQoSMIB) Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/cbqos_mib_xe.html

CoA—Multi-Service Activation/Deactivation in Single mMessage

The CoA—Multi-Service Activation/Deactivation in Single mMessage feature allows multiple services to be activated or deactivated by a single Change of Authorization (CoA) message sent from the policy server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_msad_coa_xe.html

Connect-info RADIUS Attribute 77—Configurable ASCII String

The Connect-Info RADIUS Attribute 77 feature enables the network access server (NAS) to report Connect-Info (attribute 77) in RADIUS accounting "start" and "stop" records that are sent to the RADIUS client (dial-in modem). These "start" and "stop" records allow the transmit and receive connection speeds, modulation, and compression to be compared in order to analyze a user session over a dial-in modem where speeds are often different at the end of the connection (after negotiation).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_user_services/configuration/guide/sec_rad_77_connect_xe.html

DHCP Server Radius Proxy

The Dynamic Host Configuration Protocol (DHCP) Server RADIUS Proxy feature is a RADIUS-based address assignment mechanism in which a DHCP server authorizes remote clients and allocates addresses based on replies from a RADIUS server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iad_dhcp_rad_proxy_xe.html

Enabling ISG to Interact with External Policy Servers

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/en_isg_ext_plcy_svrs_xe.html

Etherchannel Flow Based Limited 1:1 Redundancy

The EtherChannel Flow-Based Limited 1:1 Redundancy feature provides a way to configure load balancing at the port-channel level based on different flows of traffic. You can identify different flows of traffic based on key fields in the data packet and balance the traffic load according to those traffic flows. To use EtherChannel flow-based limited 1:1 redundancy, you configure an EtherChannel with two ports (one active and one standby). If the active link goes down, the EtherChannel stays up and the system performs fast switchover to the hot-standby link. When the failed link becomes operational again, the EtherChannel performs another fast switchover to revert to the original active link.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/lanswitch/configuration/guide/lsw_cfg_flwbal.html

Ethernet Overhead Accounting

The Ethernet Overhead Accounting feature enables the router to account for downstream Ethernet frame headers when applying shaping to packets.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/eth_overhead_acctng_xe.html

Firewall—NetMeeting Directory (LDAP) ALG Support

The Firewall—NetMeeting Directory (LDAP) ALG Support feature enables Cisco Firewalls to support Layer 4 LDAP inspection by default. LDAP is an application protocol that is used for querying and updating information stored on directory servers.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_zone_polcy_firew_xe.html

Firewall—SIP ALG—Extended Methods

The Firewall—SIP ALG—Extended Methods feature provides voice security enhancements within the Firewall feature set in Cisco IOS XE software on the Cisco ASR 1000 series routers.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_fw_sip_alg_xe.html

H.323 RAS Support in IOS Firewall

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_h323ras_firewall.html

IEEE 802.1Q Tunneling (QinQ) for AToM

The IEEE 802.1Q Tunneling (QinQ) for AToM feature allows you to configure IEEE 802.1Q Tunneling (QinQ) for AToM. It also permits the rewriting of QinQ tags for Multiple Protocol Label Switching (MPLS) layer 2 VPNs (L2VPNs).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_qnq_tunneling_atom_xe.html

IEEE 802.3ad Link Aggregation (LACP)

The IEEE 802.3ad Link Aggregation (LACP) feature provides a method for aggregating multiple Ethernet links into a single logical channel based on the IEEE 802.3ad standard. This feature helps improve the cost effectiveness of a device by increasing cumulative bandwidth without necessarily requiring hardware upgrades.

For information about this feature, see the Configuring IEEE 802.3ad Link Bundling document:

http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html

Integrated Session Border Controller

The product formerly known as Integrated Session Border Controller is now known as the Cisco Unified Border Element (SP Edition). For information about this feature, see Cisco Unified Border Element (SP Edition).

Interactive OAM and Scaling Improvements

The Interactive OAM and Scaling Improvements feature adds on-demand ping capability to access node control protocol (ANCP) for operations and troubleshooting.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_xe.html

IP over IPv6 Tunnels

For information about this feature, see the following documents:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-tunnel_xe.html

http://www.cisco.com/en/US/docs/ios/ios_xe/interface/configuration/guide/ir_impl_tun_xe.html

IPsec Usability Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_ipsec_vpn_status_monitoring.html

IPv6 Multicast: Bootstrap Router (BSR)

If an RP becomes unreachable, the IPv6 Multicast: Bootstrap Router (BSR) feature allows the RP to be detected and the mapping tables modified so that the unreachable RP is no longer used, and the new tables will be rapidly distributed throughout the domain.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping

TheIPv6 Multicast: IPv6 BSR—Ability to Configure RP Mapping feature allows IPv6 multicast routers to be statically configured to announce scope-to-RP mappings directly from the BSR instead of learning them from candidate-RP messages.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: IPv6 BSR Bidirectional Support

The IPv6 Multicast: IPv6 BSR Bidirectional Support feature allows bidirectional RPs to be advertised in C-RP messages and bidirectional ranges in the BSM.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: PIM Sparse Mode (PIM-SM)

TheIPv6 Multicast: PIM Sparse Mode (PIM-SM) feature uses unicast routing to provide reverse-path information for multicast tree building. PIM-SM is used in a multicast network when relatively few routers are involved in each multicast and these routers do not forward multicast packets for a group, unless there is an explicit request for the traffic.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

IPv6 Multicast: Routable Address Hello Option

The IPv6 Multicast: Routable Address Hello Option feature adds a PIM hello message option that includes all the addresses on the interface on which the PIM hello message is advertised.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipv6/configuration/guide/ip6-multicast_xe.html

ISG: Accounting: Per-Service Accounting

The Intelligent Services Gateway (ISG) Per-Service Accounting feature provides the means to bill for account or service usage. ISG accounting uses the RADIUS protocol to facilitate interaction between ISG and an external RADIUS-based authentication, authorization, and accounting (AAA) or mediation server.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/cfg_isg_acctng_xe.html

ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message

The ISG: Policy Control: Policy Server: Multi-Service Activation in access-accept Message feature allows multiple services to be included in a single RADIUS access-accept message.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ancp/configuration/guide/ancp_msa_acc_xe.html

ISG: Policy Control: Policy Server: RADIUS-Based Policing

The RADIUS-Based Policing feature extends Intelligent Services Gateway (ISG) functionality to allow the use of a RADIUS server to provide subscriber policy information.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_rabapol_xe.html

L2TP Forwarding of PPPoE Tag Information

The L2TP Forwarding of PPPoE Tag Information feature allows you to transfer DSL line information from the L2TP Access Concentrator (LAC) to the L2TP Network Server (LNS). Using this feature, you can also override the nas-port-id and/or calling-station-id VSAs on the LNS with the Circuit-ID and Remote-ID VSA respectively.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

L2VPN Interworking—Ethernet to VLAN Interworking

The L2VPN Interworking—Ethernet to VLAN Interworking feature allows disparate attachment circuits to be connected. An interworking function facilitates the translation between the different Layer 2 encapsulations.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_l2vpn_intrntwkg_xe.html

L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires

The L2VPN Pseudowire Redundancy: Multiple Backup Pseudowires feature allows you to configure up to three backup pseudowires to maintain network connectivity if one pseudowire fails.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/wan_l2vpn_pw_red_xe.html

L2VPN Pseudowire Switching

The L2VPN Pseudowire Switching feature extends layer 2 virtual private network (L2VPN) pseudowires across an interautonomous system (inter-AS) boundary or across two separate multiprotocol label switching (MPLS) networks.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_l2vpn_pseudo_swit_xe.html

Lawful Intercept

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_lawful_intercept.html

Layer 2 VPN (L2 VPN): Syslog, SNMP Trap, and show Command Enhancements for AToM and L2TPv3

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/wan/configuration/guide/wan_l2_tun_pro_v3.html

MCP GEC with QoS on memberlink

Previously available on only port-channel subinterfaces, QoS can now be applied to the main GigabitEtherChannel (GEC) interface, or memberlink. QoS is applied through policy maps.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/lanswitch/configuration/guide/lsw_cfg_gecqos.html

Modified LNS Dead-Cache Handling

The Modified LNS Dead-Cache Handling feature allows you to display and clear (restart) any Layer 2 Tunnel Protocol (L2TP) Network Server (LNS) entry in a dead-cache (DOWN) state. You can use this feature to generate a Simple Network Management Protocol (SNMP) or system message log (syslog) event when an LNS enters or exits a dead-cache state. Once an LNS exits the dead-cache state, the LNS is able to establish new sessions.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

MQC—Traffic Shaping Overhead Accounting for ATM

The MQC—Traffic Shaping Overhead Accounting for ATM feature enables a broadband aggregation system (BRAS) to account for various encapsulation types when applying QoS functionality to packets.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/overhead_acctng_xe.html

NAT—NetMeeting Directory (LDAP) ALG Support

Cisco IOS XE NAT provides ALG support for NetMeeting directory Lightweight Directory Access Protocol (LDAP) messages.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NAT SCCP Video Support

Cisco IOS XE NAT provides Skinny Call Control Protocol (SCCP) message translation support.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NAT—SIP ALG—Extended Methods

Cisco IOS XE NAT supports extended methods for the Session Initiation Protocol (SIP.)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NAT Support of H.323v2 RAS

Cisco IOS XE NAT supports H.225 and H.245 message types, including those sent in the Registration, Admission, and Status (RAS) protocol.

RAS provides a number of messages that are used by software clients and VoIP devices to register their location, request assistance in call set up, and control bandwidth. The RAS messages are directed toward an H.323 gatekeeper.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ipaddr/configuration/guide/iadnat_applvlgw_xe.html

NSF/SSO—Ethernet to Ethernet VLAN Interworking

The NSF/SS0—Ethernet to Ethernet VLAN Interworking features enables stateful switchover (SSO) and nonstop forwarding (NSF) capabilities for Ethernet to VLAN attachment circuits. Changes in the learned MAC address for interworking are reflected on the standby RP so that identical values exist on the Active and Standby RPs.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_trnsprt_mlps_atom_xe.html

OCSP—Server Certification from Alternate Hierarchy

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert.html

Parameterization for ACL and Layer 4 Redirect

The Parameterization for ACL and Layer 4 Redirect feature provides parameterization enhancements for access control lists and Layer 4 redirect.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_l4_redirect_xe.html

Parameterization of QoS ACL

The Parameterization of QoS ACL feature provides enhancements for quality of service (QoS) access control lists (ACLs). This feature allows the authentication, authorization, and accounting (AAA) device to dynamically change parameters.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_rabapol_xe.html

Per Subinterface MTU for Ethernet over MPLS (EoMPLS)

The Per Subinterface MTU for Ethernet over MPLS (EoMPLS) feature provides you with the ability to specify maximum transmission unit (MTU) values in xconnect subinterface configuration mode. When you use xconnect subinterface configuration mode to set the MTU value, you establish a pseudowire connection for situations where the interfaces have different MTU values that cannot be changed.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

PKI—CLI to Control Certificate Revocation List (CRL) Cache

The PKI-CLI to Control Certificate Revocation List (CRL) Cache feature allows the administrator to control the CRL cache size. CRLs are received by Cisco IOS software in Distinguished Encoding Rules (DER) encoded format. Because processing a DER encoded CRL uses CPU memory, Cisco IOS software allows CRLs either to be stored in cache after being processed or to be decoded. Configuring the CRL cache size allows the amount of memory to be decreased (for example, if low memory conditions exist) or to be increased (for example, when a large number of CRLs are being processed), resulting in better performance.

The following commands were introduced or modified by this feature: crypto pki crl cache and show crypto pki crls. The crypto pki crl cache command allows the administrator to set the maximum amount of volatile memory used to cache CRLs. When the crypto pki crl cache command is configured, the show crypto pki crls command output includes information on the CRL cache size.

PPPoE Service Selection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_baa_xe.html

PPPoE Session Limit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_limit_legcfg_xe.html

PPPoE Smart Server Selection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_sss_xe.html

PPPoE VLAN Session Throttling

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_pppoe_baa_xe.html

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services

The Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, Frame Relay, and ATM Services feature provides Simple Network Management Protocol (SNMP) support within an Any Transport over Multiprotocol Label Switching (AToM) infrastructure emulating Ethernet, Frame Relay, and ATM services over packet switched networks (PSNs).

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_edge2edge_mibs_xe.html

QoS: CBQoSMIB Index Enhancements

The QoS: CBQoSMIB Index Enhancements feature allows automatic inclusion of downstream Ethernet frame headers in shaped rate

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/cbqos_mib_xe.html

RADIUS-Based Lawful Intercept

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_lawful_intercept.html

RADIUS-Based Policing Attribute Modifications

The RADIUS-Based Policing Attribute Modifications feature allows the RADIUS server to communicate with the Intelligent Services Gateway (ISG) by embedding specific attributes in Access-Accept and CoA messages. RADIUS-based shaping and policing employs this exchange of attributes to activate and deactivate services, and to modify the active quality of service (QoS) policy applied to a session.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/isg/configuration/guide/isg_rabapol_xe.html

RADIUS—CLI to Prevent Sending of Access Request with Blank Username

The aaa authentication suppress null-username command is used to provide the ability to prevent an Access Request with a blank username from being sent to the RADIUS server. This functionality ensures that unnecessary RADIUS server interaction is avoided, and RADIUS logs are kept short.

For information about this feature, see the "Preventing an Access Request with a Blank Username from Being Sent to the RADIUS Server" subsection in following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

RSA 4096-Bit Key Generation in Software Crypto Engine Support

The RSA 4096-Bit Key Generation in Software Crypto Engine Support feature increases the maximum RSA key size from 2048 bits to 4096 bits for private key operations.

SCCP for Video

The SCCP for Video feature enables Cisco Firewalls to inspect Skinny control packets that are exchanged between a Skinny client and the Cisco Call Manager.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/sec_data_plane/configuration/guide/sec_zone_polcy_firew_xe.html

SSHv2 Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_secure_shell_v2.html

VLAN ID Rewrite

The VLAN ID Rewrite feature enables you to use VLAN interfaces with different VLAN IDs at both ends of the tunnel.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_any_transport_xe.html

VPDN LNS Address Checking

The VPDN LNS Address Checking feature allows an L2TP Access Concentrator (LAC) to check the IP address of the L2TP Network Server (LNS) sending traffic to it during the setup of an L2TP tunnel, thus providing a check for uplink and downlink traffic arriving from different interfaces.

The benefit of the LNS Address Checking feature is avoiding the loss of revenue from users sending back traffic through an alternate network.

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/vpdn/configuration/guide/config_aaa_for_vpdn_xe.html

VPN Routing Forwarding (VRF) Framed Route (Pool) Assignment via PPP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_per_vrf_aaa.html

VRF Aware LI (Lawful Intercept)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_lawful_intercept.html

New Hardware Features in Cisco IOS XE Release 2.3.2

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.2.

New Software Features in Cisco IOS XE Release 2.3.2

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.2.

New Hardware Features in Cisco IOS XE Release 2.3.1

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.1.

New Software Features in Cisco IOS XE Release 2.3.1

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.1.

New Hardware Features in Cisco IOS XE Release 2.3.0

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.3.0:

New Cisco ASR 1000 Route Processor

New Shared Port Adapters

New Cisco ASR 1000 Route Processor

Cisco IOS XE Release 2.3.0 introduces support for the following new Route Processor (RP):

Cisco ASR 1000 Series Route Processor 2

The Cisco ASR 1000 Series Route Processor 2 (Cisco ASR1000-RP2) is the second-generation route processor for the Cisco ASR 1000 Series Aggregation Services Router. The Cisco ASR1000-RP2 provides advanced routing capabilities, monitors and manages the other components of the Cisco ASR 1000 Series Aggregation Services Router, and provides a processing engine for integrated applications. In addition to the current route processing features and benefits of the Cisco ASR 1000 Series Route Processor 1(Cisco ASR1000-RP1), the Cisco ASR1000-RP2, supports:

Memory scalability up to 16 GB DRAM

8 GB or 16 GB of synchronous dynamic RAM (SDRAM) in 4 SDRAM slots. A route processor with 8 GB can hold four 8 GB dual in-line memory modules (DIMMs); whereas a route processor with 16 GB can hold four 4-GB DIMMs.

80 GB hard disk drive (HDD) for the storage and portability of code storage, boot, configurations, logs.

The Cisco ASR1000-RP2 is supported as a modular component on the Cisco ASR 1004 and Cisco ASR 1006 routers.

The Cisco ASR 1006 Router contains two RP slots to support full hardware redundancy for RP2s within the same router.

For information about the Cisco ASR1000-RP2, including a table that highlights the major differences between it and the Cisco ASR1000-RP1, see the following document:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

New Shared Port Adapters

Cisco IOS XE Release 2.3.0 introduces support for the following new shared port adapters (SPAs):

ATM SPAs

1-Port OC-3 ATM SPA (SPA-1XOC3-ATM-V2)

3-Port OC-3 ATM SPA (SPA-3XOC3-ATM-V2)

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New Software Features in Cisco IOS XE Release 2.3.0

This section lists new and changed features in Cisco IOS XE Release 2.3.0. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.3.0.

Any Transport Over MPLS (AToM): ATM Cell Relay Over MPLS: VP Mode

Any Transport over MPLS (AToM): Graceful Restart

Any Transport Over MPLS (AToM): Layer 2 QoS (Quality of Service)

Any Transport Over MPLS (AToM): Single Cell Relay - VC Mode (CRoMPLS)

ATM Conditional debug/show Commands

ATM MIB Enhancements

ATM OAM Ping

ATM OAM Traffic Reduction

ATM PVC F5 OAM Recovery Traps

ATM PVC Trap Enhancements for Segment and AIS/RDI Failures

ATM PVC Trap Support

ATM SNMP Trap and OAM Enhancements

ATM VC Class Support

ATM VP Average Traffic Rate

AToM Tunnel Selection

Auto Secure Manageability

Basic ATM Support of RFC1483

BGP Support for 4-Byte ASN

Cell-Based ATM Shaping per PVP

Consistent and User-Selectable Fail/Open and Fail/Close Operation

Control Plane Policing—Time Based

DHCP Client

DHCP Relay—MPLS VPN Support

Enhanced ATM VC Configuration and Management

Explicit Passive Mode CLI Support

GET VPN Phase 1.2

Group Encrypted Transport VPN (GET VPN)

Integrated Session Border Controller

IPv6 Bidirectional PIM

IPv6 Multicast: Address Family Support for Multiprotocol BGP

IPv6 Source Specific Multicast (SSM) Mapping

ISSU—ATM

ISSU—AToM ATM Attachment Circuit

ISSU—MPLS Traffic Engineering (TE)—Path Protection

L2VPN PW Preferential Forwarding (Active/Standby Status)

L2VPN PW Redundancy—ATM Attachment Circuits

LSP Ping for FEC129 (via VCCV)—RFC4379

MPLS EM—LSP Ping/Trace for LDP & RSVP IPv4 FECs

MPLS EM—MPLS FRR MIB (IETF draft v01)

MPLS EM—MPLS Multipath (ECMP) LSP Tree Trace

MPLS EM—MPLS TE MIB (IETF draft v05)

MPLS LSP Ping/Traceroute and AToM VCCV

MPLS Pseudowire Status Signaling

MPLS Support for Multi-Segment PWs—MPLS OAM/VCCV

MPLS TE—BFD-Triggered Fast Reroute (FRR)

MPLS TE—Fast Tunnel Interface Down Detection

MPLS TE—Node Protection Desired Bit

MPLS Traffic Engineering Forwarding Adjacency

MPLS Traffic Engineering—Policy Routing onto MPLS TE Tunnels

MPLS Traffic Engineering (TE)

MPLS Traffic Engineering (TE)—Configurable Path Calculation Metric for Tunnels

MPLS Traffic Engineering (TE)—Fast Reroute (FRR) Link and Node Protection

MPLS Traffic Engineering (TE)—IP Explicit Address Exclusion

MPLS Traffic Engineering (TE)—LSP Attributes

MPLS Traffic Engineering (TE)—Path Protection

MPLS Traffic Engineering (TE)—RSVP Graceful Restart

MPLS Traffic Engineering (TE)—RSVP Hello State Timer

MPLS Traffic Engineering (TE): Verbatim Path Support

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

NBAR Protocols

NSF/SSO—AToM ATM Attachment Circuit

NSF/SSO—MPLS TE and RSVP Graceful Restart

NSF/SSO—MPLS Traffic Engineering (TE)—Path Protection

Operation, Administration, and Maintenance (OAM) F4 and F5

Per-VC Queueing for ATM

PPP—Max-Payload and IWF PPPoE Tag Support

PPPoE Agent Remote ID and DSL Line Characteristics Enhancement

PPPoE Circuit-ID Tag Processing

PPPoE Relay

PPPoE—Session Limiting on Inner QinQ VLAN

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, FR, and ATM Services

QoS: Match ATM CLP

QoS-per-VC QoS Classification for ATM VP Pseudowires

QoS Priority Percentage CLI Support

Quality of Service: Policies Aggregation

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

RSVP Refresh Reduction and Reliable Messaging

RSVP—Resource Reservation Protocol

SSO—ATM

Any Transport Over MPLS (AToM): ATM Cell Relay Over MPLS: VP Mode

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

Any Transport over MPLS (AToM): Graceful Restart

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_atom_grace_rstrt.html

Any Transport Over MPLS (AToM): Layer 2 QoS (Quality of Service)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

Any Transport Over MPLS (AToM): Single Cell Relay - VC Mode (CRoMPLS)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

ATM Conditional debug/show Commands

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_con_deb_supp.html

ATM MIB Enhancements

The Cisco AAL5 MIB adds a proprietary extension to the standard ATM MIB (RFC 1695) to provide per-VC statistic counters that are currently displayed in response to the Cisco IOS show atm vc command for a specified virtual circuit. This MIB extension allows SNMP network management system applications to query the same variables (SNMP objects) as those that can be gathered from the Cisco IOS command- line interface.

The Cisco AAL5 MIB provides SNMP access to four new statistics counters defined for AAL5 virtual connections: incoming packet counter, outgoing packet counter, incoming octet counter, and outgoing octet counter. The Cisco AAL5 MIB groups these four counters in a table called cAal5VccTable.

The proprietary extension of the Cisco AAL5 MIB supports all the tables and objects defined in the Cisco AAL5 MIB for ATM interfaces acting as endpoints of ATM connections that run Cisco IOS XE Release 2.3 software and later releases.

ATM OAM Ping

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam_ping.html

ATM OAM Traffic Reduction

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam.html

ATM PVC F5 OAM Recovery Traps

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_cfg_atm.html

ATM PVC Trap Enhancements for Segment and AIS/RDI Failures

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam_f5_cnck.html

ATM PVC Trap Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_snmp_oam_enh.html

ATM SNMP Trap and OAM Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_snmp_oam_enh.html

ATM VC Class Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

ATM VP Average Traffic Rate

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_vp_avg_tfc_rate.html

AToM Tunnel Selection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_any_transport.html

Auto Secure Manageability

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_autosecure.html

Basic ATM Support of RFC1483

The Basic ATM Support of RFC1483 feature provides the basic functions of asynchronous transfer mode (ATM) and compliance with RFC1483.

Documentation URLs are being updated and will be provided soon.

BGP Support for 4-Byte ASN

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/iproute/configuration/guide/irp_bgp_overview.html

Cell-Based ATM Shaping per PVP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/qos_atm_vp_support.html

Consistent and User-Selectable Fail/Open and Fail/Close Operation

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

Control Plane Policing—Time Based

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/ctrl_plane_policng.html

DHCP Client

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcp_client.html

DHCP Relay—MPLS VPN Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcp_rly_agt.html

Enhanced ATM VC Configuration and Management

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_cfg_atm.html

Explicit Passive Mode CLI Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

GET VPN Phase 1.2

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

Group Encrypted Transport VPN (GET VPN)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_encrypt_trns_vpn.html

Integrated Session Border Controller

Cisco IOS XE Release 2.3.0 introduces support for the following new Integrated Session Border Controller (SBC) features:

In-Service Provisioning of H.248 Controllers

RTCP Policing (with the additional new functionality of RTCP maximum burst size (mbs) policing equal to 5% of RTP mbs)

For information about these SBC features, see the following document:

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbc/2_xe/sbc_2_xe_book.html

IPv6 Bidirectional PIM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-multicast.html

IPv6 Multicast: Address Family Support for Multiprotocol BGP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-multicast.html

IPv6 Source Specific Multicast (SSM) Mapping

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-multicast.html

ISSU—ATM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-inserv_updg_xe.html

ISSU—AToM ATM Attachment Circuit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_trnsprt_mlps_atom.html

ISSU—MPLS Traffic Engineering (TE)—Path Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_path_prot.html

L2VPN PW Preferential Forwarding (Active/Standby Status)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/l2vpn_pw_preferential_forwarding.html

L2VPN PW Redundancy—ATM Attachment Circuits

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/wan/configuration/guide/wan_l2vpn_pw_red_ps9587_TSD_Products_Configuration_Guide_Chapter.html

LSP Ping for FEC129 (via VCCV)—RFC4379

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ldp_te_lsp_vccv.html

MPLS EM—LSP Ping/Trace for LDP & RSVP IPv4 FECs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ldp_te_lsp_vccv.html

MPLS EM—MPLS FRR MIB (IETF draft v01)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_fast_rr_mib.html

MPLS EM—MPLS Multipath (ECMP) LSP Tree Trace

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_em_multipath_tree.html

MPLS EM—MPLS TE MIB (IETF draft v05)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_mib.html

MPLS LSP Ping/Traceroute and AToM VCCV

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ldp_te_lsp_vccv.html

MPLS Pseudowire Status Signaling

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_pw_status.html

MPLS Support for Multi-Segment PWs—MPLS OAM/VCCV

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/multisegmentpseudowires.html

MPLS TE—BFD-Triggered Fast Reroute (FRR)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_bfd_frr.html

MPLS TE—Fast Tunnel Interface Down Detection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_link_node_prot.html

MPLS TE—Node Protection Desired Bit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_link_node_prot.html

MPLS Traffic Engineering Forwarding Adjacency

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_fwd_adjacency.html

MPLS Traffic Engineering—Policy Routing onto MPLS TE Tunnels

Cisco IOS XE Release 2.3.0 supports mapping packets to MPLS Traffic Engineering tunnels.

For more information, see the set interface command in the Cisco IOS IP Routing Protocols Command Reference at the following URL:

http://www.cisco.com/en/US/docs/ios/iproute/command/reference/irp_pi2.html

MPLS Traffic Engineering (TE)

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_enhance.html

MPLS Traffic Engineering (TE)—Configurable Path Calculation Metric for Tunnels

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_cfg_path_calc.html

MPLS Traffic Engineering (TE)—Fast Reroute (FRR) Link and Node Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_frr_node_prot.html

MPLS Traffic Engineering (TE)—IP Explicit Address Exclusion

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_expl_address.html

MPLS Traffic Engineering (TE)—LSP Attributes

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_lsp_attr.html

MPLS Traffic Engineering (TE)—Path Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_path_prot.html

MPLS Traffic Engineering (TE)—RSVP Graceful Restart

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_rsvp_graceful.html

MPLS Traffic Engineering (TE)—RSVP Hello State Timer

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_rsvp_hello.html

MPLS Traffic Engineering (TE): Verbatim Path Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_verbatim_path.html

MPLS VPN—Explicit Null Label Support with BGP IPv4 Label Session

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_ce_vpn_explicit.html

NBAR Protocols

For information about this feature, see the following document, which also includes a table listing the NBAR protocol support per Cisco IOS XE release:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/clsfy_traffic_nbar_xe.html

NSF/SSO—AToM ATM Attachment Circuit

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_trnsprt_mlps_atom.html

NSF/SSO—MPLS TE and RSVP Graceful Restart

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/mpls/configuration/guide/mp_te_rsvp_graceful_xe.html

NSF/SSO—MPLS Traffic Engineering (TE)—Path Protection

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_path_prot.html

Operation, Administration, and Maintenance (OAM) F4 and F5

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/atm/configuration/guide/atm_oam_f5_cnck.html

Per-VC Queueing for ATM

The Per-VC Queueing for ATM feature on the Cisco ASR 1000 Series Routers supports two sets of queues on a virtual circuit (VC):

Queues on a Shared Port Adapter (SPA) that uses segmentation and reassembly (SAR)

Queues on a Cisco QuantumFlow Processor (QFP)

Configurable SAR queues are not supported on Cisco ASR 1000 Series Routers. SAR allocates two queues per VC, one for high-priority traffic and another for low-priority traffic.

ATM QoS queueing operations on a QFP are carried out using the Modular QoS CLI (MCQ). The tx_limit command is used to change queue size on the QFP.

PPP—Max-Payload and IWF PPPoE Tag Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_ppp_mx_payld_xe.html

PPPoE Agent Remote ID and DSL Line Characteristics Enhancement

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_rmtid_dsl_xe.html

PPPoE Circuit-ID Tag Processing

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_cir_id_tag_pr_xe.html

PPPoE Relay

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_relaydis_ssf_xe.html

PPPoE—Session Limiting on Inner QinQ VLAN

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/bbdsl/configuration/guide/bba_qinq_vlan_limt_xe.html

Pseudowire Emulation Edge-to-Edge MIBs for Ethernet, FR, and ATM Services

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_edge2edge_mibs.html

QoS: Match ATM CLP

For information about this feature, see the following document:

http://cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/clsfy_netwk_traffic_xe_ps9587_TSD_Products_Configuration_Guide_Chapter.html

QoS-per-VC QoS Classification for ATM VP Pseudowires

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/qos_atm_vp_support.html

QoS Priority Percentage CLI Support

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/llq_with_pps_xe.html

Quality of Service: Policies Aggregation

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/qos/configuration/guide/qos_policies_agg_xe.html

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_rad_a66_enhcmts.html

RSVP Refresh Reduction and Reliable Messaging

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/rsvp_messaging.html

RSVP—Resource Reservation Protocol

The RSVP—Resource Reservation Protocol feature is supported for Multiprotocol Label Switching (MPLS) traffic engineering (TE) based on RFC 2205, Resource ReSerVation Protocol (RSVP - Version 1 Functional Specification, http://www.apps.ietf.org/rfc/rfc2205.html. To enable RSVP, see the ip rsvp bandwidth command in the Cisco IOS Quality of Service Solutions Command Reference.

SSO—ATM

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/ios_xe/ha/configuration/guide/ha-stfl_swovr_xe.html

New Hardware Features in Cisco IOS XE Release 2.2.3

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.3.

New Software Features in Cisco IOS XE Release 2.2.3

This section lists new and changed features in Cisco IOS XE Release 2.2.3. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.2.3.

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

MPLS VPN Carrier Supporting Carrier with BGP

MPLS VPN—eBGP Multipath Support for CSC and InterAS MPLS VPNs

MPLS VPN—Load Balancing Support for Inter-AS and CSC VPNs

MPLS VPN Carrier Supporting Carrier Using LDP and an IGP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_carrier_ldp_igp.html

MPLS VPN Carrier Supporting Carrier with BGP

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_carrier_bgp.html

MPLS VPN—eBGP Multipath Support for CSC and InterAS MPLS VPNs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_load_share_vpn.html

MPLS VPN—Load Balancing Support for Inter-AS and CSC VPNs

For information about this feature, see the following document:

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_load_share_vpn.html

New Hardware Features in Cisco IOS XE Release 2.2.2

There are no new hardware features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.2.

New Software Features in Cisco IOS XE Release 2.2.2

There are no new software features supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.2.

New Hardware Features in Cisco IOS XE Release 2.2.1

The following new hardware features are supported by the Cisco ASR 1000 Series Routers for Cisco IOS XE Release 2.2.1:

New Cisco ASR 1000 Embedded Services Processors

New Shared Port Adapters

New Cisco ASR 1000 Embedded Services Processors

Cisco IOS XE Release 2.2.1 introduces support for the following new Embedded Services Processors (ESPs):

Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable

The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable (Cisco ASR1000-ESP10-N) is a non-crypto capable version of the encryption-enabled 10-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP10).

The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable provides a Cisco ASR 1000 solution for customers who are under export restrictions and not qualified to implement products that support strong encryption services. The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable feature support is the same as the 10-Gbps Cisco ASR 1000 Series ESP except that IPSec and other data-plane cryptographic features are not supported.

The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable is supported on all Cisco ASR 1000 Series chassis but should only be used with following consolidated packages that do not contain cryptographic (K9) software:

Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO

Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO

Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO


Note The Cisco ASR 1000 Series RP1 IP BASE W/O CRYPTO, Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES W/O CRYPTO, and Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES W/O CRYPTO consolidated packages do not require export qualification and can also run on the encryption-enabled 10-Gbps Cisco ASR 1000 Series ESP. The K9-based consolidated packages (Cisco ASR 1000 Series RP1 IP BASE, Cisco ASR 1000 Series RP1 ADVANCED IP SERVICES and Cisco ASR 1000 Series RP1 ADVANCED ENTERPRISE SERVICES) will never be supported on the Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable hardware.



Note The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable should never be inserted into a chassis using K9 software or the router may reload.



Note The Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable and 10-Gbps Cisco ASR 1000 Series ESP should not be mixed in a hardware-redundant chassis.


For information about the Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

Cisco ASR 1000 Embedded Services Processor 10G Non Crypto Capable New Feature at the following location:

http://www.cisco.com/en/US/partner/docs/routers/asr1000/feature/guides/ASR_depop.html

20-Gbps Cisco ASR 1000 Series ESP

The 20-Gbps Cisco ASR 1000 Series ESP (Cisco ASR1000-ESP20) supports 20-Gbps bandwidth and is supported on the Cisco ASR 1004 and Cisco ASR 1006 chassis. It can optionally be deployed in customer networks that require 1+1 redundancy on Cisco ASR 1006 Routers. Performance highlights of the 20-Gbps ESP include hardware-assisted policing, encryption capability of 8 Gbps, 16 Mpps forwarding, 256MB of packet memory, 1GB (bytes) of resource memory performance, and special jitter- and latency-minimizing multicast packet replication.

For information about the 20-Gbps Cisco ASR 1000 Series ESP, see the following document:

Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/ASR1hwig.html

New Shared Port Adapters

Cisco IOS XE Release 2.2.1 introduces support for the following new shared port adapters (SPAs):

Channelized SPA

1-Port CHOC-3/CHSTM-1 SPA (SPA-1xCHSTM1/OC3)

POS SPAs

2-Port OC-48 POS/RPR SPA with SFP Optics (SPA-2XOC48POS/RPR)

4-Port OC-48 POS/RPR SPA with SFP Optics (SPA-4XOC48POS/RPR)

For information about the SPAs supported on the Cisco ASR 1000 Series Routers, see the following documents:

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Hardware Installation Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/asr_sip_spa_hw.html

Cisco ASR 1000 Series Aggregation Services Routers SIP and SPA Software Configuration Guide at the following location:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.html

New Software Features in Cisco IOS XE Release 2.2.1

This section lists new and changed features in Cisco IOS XE Release 2.2.1. Some features may have been released in earlier Cisco IOS software releases and have been changed in Cisco IOS XE Release 2.2.1.

AAA Broadcast Accounting

Bidirectional PIM

Cisco Firewall and WAAS Inter-Op

Class-Based Marking

Class Based Weighted Fair Queuing (CBWFQ)

Control Plane Policing (CoPP)

Diffie-Hellman Group Support in IPSec

FPM—Flexible Packet Matching

GRE Tunnel IP Source and Destination VRF Membership

Integrated Session Border Controller

Full Support for Wildcard Response

H.248 Protocol—Acknowledgment Support for Three-Way Handshake

H.248 ServiceChange Handoff

Improved Media Timeout Detection

Interim Authentication Header Full Support

IPSec Pinhole Support—Twice NAT for IPv4 and No NAT for IPv6

IP SLAs—LSP Health Monitor

IP SLAs—LSP Health Monitor with LSP Discovery

IP SLAs—MPLS VPN Awareness

IPv6 QoS: MQC Packet Classification

IPv6 Routing—EIGRP Support

ISG: Accounting: Per Session, Service and Flow

ISG: Accounting: Postpaid

ISG: Accounting: Tariff Switching

ISG: Authentication: DHCP Option 82 Line ID - AAA Authorization Support