Release Notes for Cisco TrustSec 3.0
General Deployability 2013 Release

Published: March 1, 2013

The most current version of this document is available at the following URL:

http://www.cisco.com/en/US/docs/switches/lan/trustsec/release/notes/rn_cts_crossplat.html

Contents

This document contains the following sections:

•New Features, Supported Hardware and Software

•Cisco TrustSec How-To Documents

•Caveats - TrustSec 3.0 General Availability 2013 Release

•Related Documentation

New Features, Supported Hardware and Software

For a complete table of features, platforms, and IOS images supported in the TrustSec 3.0 release, see  the Cisco TrustSec 3.0 Product Bulletin at the following URL:

http://www.cisco.com/en/US/netsol/ns1051/index.html

See also, the Matrix of Cisco TrustSec-Enabled Infrastructure at the following URL:

http://www.cisco.com/en/US/solutions/ns170/ns896/ns1051/trustsec_matrix.html

Cisco TrustSec How-To Documents

TrustSec "How-to" Configuration Guides are classified in the following sections:

•Section 1: Introduction, BootStrapping and Universal Configurations

•Section 2: Deployment Modes

•Section 3: Profiling, Using Cisco ISE and BYOD

•Section 4: Security Group Tagging (SGA) and More

Find all Cisco TrustSec "How-To" documents at the following URL:

http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns744/landing_DesignZone_TrustSec.html

Caveats - TrustSec 3.0 General Availability 2013 Release

Open Caveats

Cisco Catalyst 3750-X Series Switches

Release notes for Catalyst 3750-X Series switches:
http://www.cisco.com/en/US/products/ps10745/prod_release_notes_list.html

Identifier
Technology
Software Release
Description

CSCud33133

CTS

15.0(2)SE

RBACL list is requested even if SG gen-id didn't change.

CSCud38033

CTS

15.0(2)SE

No peer policy requested when link is CTS Manual.


Cisco Catalyst 4500 Series Switches

Release notes for Catalyst 4500 Series switches:
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_release_notes_list.html

Identifier
Technology
Software Release
Description

CSCud97768

CTS

IOS XE 3.3.0SG

CTS link is not established when cts manual is set a with policy dynamic identity.


Cisco Catalyst 6500 Series Switches

Release notes for Catalyst 6500 Series switches:
http://www.cisco.com/en/US/products/hw/switches/ps708/prod_release_notes_list.html

Identifier
Technology
Software Release
Description

CSCud33412

CTS

15.1(1)SY

RBACL gen-id is not shown correctly in the show cts rbacl command.

CSCud66895

CTS

15.1(1)SY

Authorization success counter in CTS interfaces doesn't increase as expected.

CSCud95127

EAP

15.1(1)SY

Catalyst 6K crashes when cts change-password procedure is interrupted.


Cisco Nexus 1000V Series Switches

Release notes for Nexus 1000V Series switches:
http://www.cisco.com/en/US/products/ps9902/prod_release_notes_list.html

Identifier
Technology
Software Release
Description

CSCud06240

SVS

4.2(1)SV2(1.1)

Could not establish SXP connection after reset- FCS-security

CSCuc94663

SVS

4.2(1)SV2(1.1)

HA installation creates confusion.

CSCuc94677

SVS

4.2(1)SV2(1.1)

Cannot perform a switchover if using simple password and duplicated domain.


Cisco Nexus 7000 Series Switches

Release notes for Nexus 7000 Series switches:
http://www.cisco.com/en/US/products/ps9402/prod_release_notes_list.html

Identifier
Technology
Software Release
Description

CSCud28769

CTS

6.1

IP to SGT mapping learned through SXP should be preferred to CLI configuration.


Related Documentation

Document Title
TrustSec Topics

Cisco TrustSec Switch Configuration Guide

•TrustSec feature configurations for Cisco Catalyst series switches

•System error messages

Cisco Secure Access Control System

Cisco Secure Access Control System Release Notes

Open and resolved caveats, referred to as Known and Resolved issues in Cisco ACS documentation

Cisco Secure Access Control System End-User Guides

Cisco Security Group Access configurations for Cisco ACS 5.1 and more recent releases

Cisco Identity Services Engine

Release Notes for Cisco Identity Services Engine

Open and resolved caveats

Cisco Identity Services Engine User Guide

Configuring Cisco Security Group Access policies

Catalyst 3000 Series Switches

Release Notes for Catalyst 3560 and 3750 Switches

Open and resolved caveats

Catalyst 3560 Software Configuration Guides

802.1x configuration procedures

Catalyst 3750 Switch Software Configuration Guides

Catalyst 3750-X Switch Software Configuration Guides

•802.1x configuration procedures

•SXP

•MACsec

Catalyst 4500 Series Switches

Release Note for the Catalyst 4500 Series Switch

Open and resolved caveats

Catalyst 4500 Series Switch Software Configuration Guides

802.1x configuration procedures

Catalyst 6500 Series Switches

Catalyst 6500 Series Release Notes

Open and resolved caveats

Catalyst 6500 Series
Software Configuration Guides

802.1x and TrustSec configuration procedures

Nexus 1000V Series Switches

Cisco Nexus 1000V Series Switches Release Notes

Open and resolved caveats

Cisco Nexus 1000V Security Configuration Guide

TrustSec configurations.

Nexus 7000 Series Switches

Cisco Nexus 7000 Series Switches Release Notes

Open and resolved caveats

Cisco Nexus 7000 Series Switches Configuration Guides

•TrustSec feature configurations for Cisco Nexus 7000 Series switches, Release 4.1 and more recent releases

•802.1x configuration procedures


Cisco IOS Software Documentation

Cisco IOS Document Title
TrustSec Topics

Cisco TrustSec Configuration Guide Cisco IOS XE Release 3S

Router-based SXP configuration

Cisco IOS Master Command List, All Releases

802.1x; SXP