Virtual ACNS(vACNS) support in ACNS 5.5.31 and later allows you to quickly deploy vACNS instances on VMWare ESXi hosts such as the Cisco Unified Computing System (UCS). The ACNS Content Distribution Manager can manage vACNS instances in the same graphical interface through which it manages other ACNS devices in the network. In addition, the virtual Content Distribution Manager can manage both physical and vACNS instances. A separate vACNS license is required for vACNS support. See the Cisco Virtual ACNS Software Installation and Configuration Guide for details.
New alarms for Virtual ACNS
New alarms are added for Virtual ACNS
An alarm ‘IncorrectDiskSize’ is added, which is set to raise when appropriate disk size is not configured for vACNS.
An alarm ‘servicedisable’ is added, which is set to raise, if the services are disabled during improper system resource allocation or if device is not registered with CDM.
IPMI Tool Support
IPMI tool is supported in ACNS to query hardware event logs and inventory information. Unexpected hardware related events which cannot be traced through logs can be identified using IPMI tool.
The following EXEC mode CLIs are implemented.
show ipmi fru
show ipmi sel
Note ACNS hardware models that support the IPMI tool are 674,7341, 7371.
Windows Live stream validation support in CDM GUI
Windows Live stream URLs can be validated (a check for digital media streams compliance with Advanced Systems Format (ASF) Specification) from CDM GUI page.
A button is introduced in the Windows live program configuration page of CDM GUI to validate the windows live stream.
This option displays details regarding the live stream along with errors/recommendations if any.
CLI for Windows Livestream validation
A CLI is added to validate Windows Livestream URLs (a check for digital media streams compliance with Advanced Systems Format (ASF) Specification). This CLI displays details regarding the Live stream along with errors/recommendations if any.
show stream url <Test url>
Support to disable NAS-identifier attribute in NTP access-request packet
A new cli 'radius-server include-attribute-32' is added in ACNS. NAS identifier attribute (32) added to NTP access-request packet by default.
To disable NAS-identifier attribute 'no radius-server include-attribute-32' can be used.
Removal of support for SSL v2 and SSL v3 protocols for HTTPS server
For HTTPS Servers support of protocols SSL v2 and SSL v3 is removed to avoid vulnerability Padding Oracle Attack (POODLE). We recommend to use only TLS v1 protocol.
This change is reflected in CDM GUI while creating new HTTPS Server. ‘Deprecated’ message is added to SSL v2, SSL v3 and SSL v2/v3. TLS v1 is made as default for newly created https server. However, existing configurations remains unaltered.We recommend to change the SSL protocol to TLSV1, if SSL v2, SSL v3 or SSL v2,v3 is configured currently.
While configuring protocol-version for HTTPS server using CLI, option‘tlsv1-only’ is supported. Other options ‘sslv2-only’, ‘sslv23-tlsv1’ and ‘sslv3-only’ are removed. Also ‘tlsv1-only’ is made as default for newly created https server. However, existing configurations remains unaltered. We recommend to change the SSL protocol to TLSV1, if SSL v2, SSL v3 or SSL v2,v3 is configured currently.
Hardware Platforms Supported in the ACNS Software
Table 1 shows the hardware platforms supported in each ACNS software release. An “X” indicates that the software supports the hardware models listed in that row.
Table 1 Hardware and ACNS Software Compatibility Matrix
Note ACNS 5.5.31 is the required minimum software release for the virtual ACNS appliances. ACNS 5.5.31 and later supports all the hardware models along with Virtual Content Engines. VCExxx is supported on UCS-B, UCS-C and UCS-E models. The ACNS 5.4.3 release is the required minimum software release for the WAE-512 and WAE-612 appliances. The ACNS 5.3.3 release is the required minimum software release for the WAE-511, WAE-611, and WAE-7326 appliances. The ACNS 5.5.13 release is the required minimum software release for ACNS-VB running on WAAS virtual blade. ACNS 5.5.27 is the required minimum software release for WAE-7371.
Software Component Versions Supported in the ACNS Software
Table 2 describes the integrated SmartFilter and Websense versions that are supported in the ACNS software.
Table 2 Component Versions Supported in the ACNS Software
1.The integrated Websense Enterprise software Version 5.5 in the ACNS software requires a minimum of 512 MB of RAM. We recommend that you upgrade the RAM on your device to 512 MB or greater, or move your integrated Websense server to another device that has at least 512 MB of RAM. When additional Websense components are enabled (such as the Network Agent), the ACNS software requires a minimum of 1 GB of RAM.
The following software component restrictions apply to the NME-WAE-502:
On-box SmartFilter is not supported on the NME-WAE-502 running ACNS version 5.5.7 and later. Off-box SmartFilter is supported on the NME-WAE-502 running ACNS version 5.5.7 and later.
On-box Websense is not supported on the NME-WAE-502 running ACNS version 5.5.7 and later. Off-box Websense is not supported on the NME-WAE-502 running ACNS versions 5.5.7 and 5.5.9. Off-box Websense is supported in ACNS version 5.5.11 and later.
Performance is optimal when Websense Enterprise Manager, the Websense Policy Server, and all other Websense components are situated in the same LAN. If all components are not in the same LAN, you may experience communication latency between Websense Enterprise Manager and other components. A significant increase in latency may lead to a communication failure.
Software Version 5.5.41 Resolved and Open Caveats
The following sections list the resolved and open caveats in the ACNS 5.5.41 release.
Configuring Cisco Access Routers and the NME-WAE Network Module for ACNS Deployments
Cisco ACNS Command Reference, Release 5.5
Cisco ACNS Software API Guide, Release 5.5
The Content Distribution Manager GUI and the Content Engine GUI both have context-sensitive online help that can be accessed by clicking the HELP button. ACNS software includes the following online help systems:
Content Distribution Manager GUI online help system for centrally managed ACNS networks
Content Engine GUI online help system for locally deployed Content Engines
Obtaining Documentation, Obtaining Support, and Security Guidelines
For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.