Cisco Nexus 3000 Series NX-OS Release Notes, Release 10.4(2)F

December 14, 2023

Cisco NX-OS Release 10.4(2)F became available.

Ease of use

ARP cache limit per interface

From Cisco NX-OS Release 10.4(2)F, the ip arp cache intf-limit command allows you to configure the number of maximum ARP cache entries allowed per interface.

See Cisco Nexus 3548 Switch NX-OS Unicast Routing Configuration Guide and Cisco Nexus 3600 Switch NX-OS Unicast Routing Configuration Guide, Release 10.4(x).

Feature Set

Configuration Replace multiline support

The configuration replace feature is now supported for LDAP on Cisco NX-OS devices.

See Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide and Cisco Nexus 3600 Switch NX-OS System Management Configuration Guide, Release 10.4(x).

CSCwe67479

Headline: Cisco Nexus 3500 switch does not propagate correct PTP clock received from upstream to downstream devices.

Symptoms: PTP clients receive incorrect clock information from Cisco Nexus 3500 switch that is working as a BC device.

Workarounds: None.

CSCwi44292

Headline: Pre-upgrade check on nxos64-msll images does not display the new version correctly during downgrade.

Symptoms: During downgrade from impacted NXOS version to a previous version, pre-upgrade check displays New BIOS version as blank in 10.4(2)F on the following impacted platforms:

·         N3K-C36180YC-R

Workarounds: None.

CSCwh88614

Headline: Evaluation of n9k-standalone-sw for HTTP/2 Rapid Reset Attack vulnerability

Symptoms: This bug has been filed to evaluate the Cisco Nexus 3000 Series Switches and Nexus 9000 Series Switches in standalone NX-OS mode against the following HTTP/2 vulnerability disclosed on October 10, 2023: CVE-2023-44487 - HTTP/2 Rapid Reset
Cisco has reviewed this product and concluded that it is affected by this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ 

Workarounds: Customers who do not require NX-API to support the HTTP/2 protocol can disable that as follows:

1.     Connect to the device CLI.

2.     Save all current NX-API configuration as this configuration will be lost in the course of the following process: switch# show run | inc ^nxapi.

3.     Enable the Bash shell feature and connect to the Bash shell.
switch# conf t
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# feature bash-shell
switch(config)# run bash
bash-4.4$

4.     Create a backup of the NX-API configuration script.
bash-4.4$           sudo              cp                -p
/var/nginx/script/nginx_fe.conf.tpl
/var/nginx/script/nginx_fe.conf.tpl.orig

5.     Disable the HTTP/2 protocol in the NX-API configuration script and quit the Bash shell.
bash-4.4$ sudo sed -i 's/ http2//' /var/nginx/script/nginx_fe.conf.tpl
bash-4.4$ exit
exit

6.     (Optional) Disable the Bash shell feature if you do not need it.
switch(config)# no feature bash-shell

7.     Restart the NX-API feature.
switch(config)# no feature nxapi
switch(config)# feature nxapi

8.     Re-apply the configuration you saved in step 2.
To re-enable the HTTP/2 protocol for the NX-API feature, follow the same procedure as above, but skip step 4 and in step 5 use the following command sequence instead of what is listed above:
bash-4.4$ sudo sed -i 's/ssl;/ssl http2;/' /var/nginx/script/nginx_fe.conf.tpl
bash-4.4$ exit
exit

CSCwh94275

Headline: Nexus 3600 - Stale MPLS Labels after a route change.

Symptoms: Packet drops within MPLS setup. The issue may be confirmed by spotting the differences in the BRIB and LFIB for prefixes which are visible using the command - show bgp vpnv4 unicast <prefix> and show forwarding mpls option_b | in <prefix>.

Workarounds: The current workaround is intrusive - which is to flap the BGP VPNv4 neighborship to the PEs that advertised the prefixes that have the stale label.

N3K-C3524P-XL

Cisco Nexus 3524-XL switch

N3K-C3548P-XL

Cisco Nexus 3548-XL switch

N2200-PAC-400W

Cisco Nexus 2000 or 3000 400W AC power supply, forward airflow (port side exhaust)

N2200-PAC-400W-B

Cisco Nexus 2000 or 3000 400W AC power supply, reverse airflow (port side intake)

N2200-PDC-400W

Cisco Nexus 2000 or 3000 400W DC power supply, forward airflow (port side exhaust)

N3K-PDC-350W-B

Cisco Nexus 2000 or 3000 350W DC power supply, reverse airflow (port side intake)

NXA-FAN-30CFM-B

Cisco Nexus 2000 or 3000 individual fan, reverse airflow (port side intake)

NXA-FAN-30CFM-F

Cisco Nexus 2000 or 3000 individual fan, forward airflow (port side exhaust)

N3K-C3636C-R

The Cisco Nexus 3636C-R is a 1 rack unit (RU) switch with 36 100-Gigabit QSFP28 ports, 40-Gigabit QSFP, 2 management ports, 1 console port, and 1 USB port. The switch supports both port-side exhaust and port-side intake airflow schemes. The switch has two power supplies, one for operations and the other for redundancy. Both power supplies must be either AC power supplies or DC power supplies.

N3K-C36180YC-R

The Cisco Nexus 36180YC-R is a 1 rack unit (RU) switch with 48 1/10/25-Gigabit SFP ports and 6 40Gigabit QSFP/100-Gigabit QSFP28 ports, 1 management port, 1 console port, and 1 USB port. The switch supports both port-side exhaust and port-side intake airflow schemes. The switch has two power supplies, one for operations and the other for redundancy. Both power supplies must be either AC power supplies or DC power supplies.

From Cisco NX-OS Release 10.3(3)F, the following AC ports are supported on Cisco Nexus 36180YC-R (N3K-C36180YC-R):

The following table provides information about spares support:

For information about N3K-C36180YC-R, see Cisco Nexus 3600 Hardware Installation Guide.

Cisco Nexus 3000 Series switch documentation

Cisco Nexus 3000 Series documentation

Cisco NX-OS Software Strategy and Lifecycle Guide

Cisco NX-OS Software Release and Image-naming Convention

Cisco Nexus 3000 and 9000 Series NXAPI REST SDK User Guide and API Reference

Cisco Nexus 3000 and 9000 Series NX-API REST SDK User Guide and API Reference

●   Cisco NX-OS Licensing Guide

●   Cisco Nexus 9000 and 3000 Series NX-OS Switch License Navigator

●   Cisco Nexus Smart Licensing Using Policy User Guide

Licensing Information