Table Of Contents

New and Changed Information

New and Changed Information

---

This chapter provides release-specific information for each new and changed feature in the Cisco Nexus 7000 Series NX-OS Security Configuration Guide, Release 4.0. The latest version of this document is available at the following Cisco website:
http://www.cisco.com/en/US/docs/switches/datacenter/sw/4_0/nx-os/security/configuration/guide/sec_nx-os_config.html

To check for additional information about Cisco NX-OS Release 4.0, see the Cisco Nexus 7000 Series NX-OS Release Notes, Release 4.0 available at the following Cisco website:
http://www.cisco.com/en/US/docs/switches/datacenter/sw/4_0/nx-os/release/notes/401_nx-os_release_note.html

summarizes the new and changed features for the Cisco Nexus 7000 Series NX-OS Security Configuration Guide, Release 4.0, and tells you where they are documented.

Table 1 New and Changed Features for Release 4.0 

Feature	Description	Changed in Release	Where Documented
AAA default user role	You can enable a default user role for remote users who do not have a user role on the device.	4.0(3)	Chapter 2, "Configuring AAA"
Password-strength checking	You can configure NX-OS to allow you to assign only strong passwords.	4.0(3)	Chapter 6, "Configuring User Accounts and RBAC"
SGT propagation for Cisco TrustSec	You can disable security group tag (SGT) propagation on Layer 2 Cisco TrustSec interfaces.	4.0(3)	Chapter 9, "Configuring Cisco TrustSec"
Cisco TrustSec manual configuration	You can configure SAP for Cisco TrustSec manual mode to use 802.1X.	4.0(3)	Chapter 9, "Configuring Cisco TrustSec"
Multiple DHCP server support	You can configure up to four DHCP server addresses per Layer 3 Ethernet interface.	4.0(3)	Chapter 14, "Configuring DHCP Snooping"
IPv6 support in control plane class maps	You can configure the policing of IPv6 packets in control plane class maps.	4.0(3)	Chapter 20, "Configuring Control Plane Policing"
Rate limits for port security packets	You can configure rate limits for port security packets.	4.0(3)	Chapter 21, "Configuring Rate Limits"
Telnet for IPv6	You can create a Telnet session using IPv6.	4.0(2)	Chapter 5, "Configuring SSH and Telnet"
CoPP configuration status	You can display control plane policing (CoPP) configuration status information.	4.0(2)	Chapter 20, "Configuring Control Plane Policing"
Default CoPP policy assignment	You can change the default CoPP policy assignment using the setup command.	4.0(2)	Chapter 20, "Configuring Control Plane Policing"
Default CoPP policies	The default CoPP policies the you can assign using the setup command have changed.	4.0(2)	Chapter 20, "Configuring Control Plane Policing"