Cisco IOS Software Releases 12.2 SB

Table Of Contents

Cisco IOS Security: Securing User Services Features in Cisco IOS Release 12.2(33)XNE

Software Features in Cisco IOS Release 12.2(33)XNE

Cisco IOS Security: Securing User Services Features in Cisco IOS Release 12.2(33)XNE

---

This document provides a list of Cisco IOS Security: Securing User Services features that have migrated from Cisco IOS Release 12.2(33)SB to Cisco IOS Release 12.2(33)XNE. Links to the feature documentation are included.

Feature guides may contain information about more than one feature. To find information about a specific feature within a feature guide, see the Feature Information table at the end of the guide.

Feature guides document features that are supported on many different software releases and platforms. Your Cisco IOS software release or platform may not support all the features documented in a feature guide. See the Feature Information table at the end of the feature guide for information about which features in that guide are supported in your software release. Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

For the latest feature information and caveats, see the release notes for your platform and software release at the following URL: http://www.cisco.com/en/US/docs/ios/12_2sb/release/notes/122XN.html.

See the following sections for a list of features:

•Software Features in Cisco IOS Release 12.2(33)XNE

Software Features in Cisco IOS Release 12.2(33)XNE

AAA Authorization and Authentication Cache

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_aaa_auth_cache.html

AAA CLI Stop Record Enhancement

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_per_vrf_aaa.html

AAA DNIS Map for Authorization

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_radius.html

AAA Double Authentication Secured by Absolute Timeout

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_aaa_double_auth.html

AAA Per-User Scalability

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

AAA Resource Accounting

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html

AAA Server Group

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_radius.html

AAA Server Group Deadtimer

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_aaa_dead_server.html

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_radius.html

AAA Server Group Enhancements

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html

AAA Server Groups Based on DNIS

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_tacacs+.html

AAA Session MIB

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html

Additional Vendor-Proprietary Radius Attributes

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_vsa_rad_discnct.html

Attribute Filtering Per-Domain and VRF Aware Framed-Routes

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_per_vrf_aaa.html

Attribute Screening for Access Requests

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_att_scrn_accreq.html

Challenge Handshake Authentication Protocol (CHAP)

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

Connection Accounting

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_accountg.html

Double Authentication

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

Dynamic Per VRF AAA

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_per_vrf_aaa.html

Encrypted Kerberized Telnet

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_kerberos.html

Encrypted Vendor Specific Attributes

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_encrypt_ven_attr.html

Enhanced Password Security

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_sec_4cli.html

Enhanced Test Command

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_enhanced_tst_cmd.html

Framed-Route in RADIUS Accounting

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_frame_rte.html

Image Verification

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_image_verifctn.html

Kerberos V Client Support

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_kerberos.html

LLID Blocking

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_logic_lne_id.html

Local AAA Server

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_loc_aaa_srvr.html

MS-CHAP Version 1

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

Message Banners for AAA Authentication

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

Named Method Lists for AAA Authorization and Accounting

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authorizatn.html

Offload Server Accounting Enhancement

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_offload_enhance.html

Password Authentication Protocol (PAP)

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_authentifcn.html

Per VRF AAA

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_per_vrf_aaa.html

RADIUS

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_radius.html

RADIUS Attribute 44 (Accounting Session ID) in Access Requests

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_ov_ietf_attr.html

RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_a66_enhcmts.html

RADIUS for Multiple User Datagram Protocol Ports

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_radius.html

RADIUS Logical Line ID

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_logic_lne_id.html

RADIUS NAS-IP-Address Configurability

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_nas_ip_cfg.html

RADIUS Progress Codes

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_progrs_codes.html

RADIUS Push for MOD CLI Policies

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_vsa_pmap.html

RADIUS Route Download

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_route_dwnld.html

RADIUS Server Load Balancing

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_load_bal.html

RADIUS Server Reorder on Fail

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_reorder_fail.html

Role-Based Access Control CLI Commands

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_role_base_cli.html

Secure Shell SSH Version 1 Integrated Client

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_secure_shell.html

Secure Shell SSH Version 1 Server Support

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_secure_shell.html

Sticky IP

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_rad_8_accss_req.html

TACACS+

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_tacacs+.html

TACACS+ Per VRF

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_vrf_tacas_svrs.html

Throttling of AAA (RADIUS) Records

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_throtl_aaa.html

Vendor-Specific RADIUS Attributes

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_vsa_rad_discnct.html

CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0910R)

© 2009 Cisco Systems, Inc. All rights reserved.