Release Notes for Cisco 3200MARC Series - Cisco IOS Release 12.2(15)ZL
Available Languages
Table Of Contents
Release Notes for Cisco 3200 Series Mobile Access Routers for Cisco IOS Release 12.2(15)ZL
Determining the Software Version
Upgrading to a New Software Release
New Software Features in Cisco IOS Release 12.2(15)ZL
IPSec in the Mobile IP Environment
New Software Features in Release 12.2(15)T
Open Caveats - Release 12.2(15)ZL
Resolved Caveats - Release 12.2(15)ZL
Cisco 3200 Series Mobile Access Routers
Obtaining Technical Assistance
Obtaining Additional Publications and Information
Release Notes for Cisco 3200 Series Mobile Access Routers for Cisco IOS Release 12.2(15)ZL
June 21, 2004
These release notes for the Cisco 3200 Series Mobile Access Routers describe the enhancements provided in Cisco IOS Release 12.2(15)ZL. These release notes are updated as needed. Use these release notes with Cross-Platform Release Notes for Cisco IOS Release 12.2(15)T located on Cisco.com and the Documentation CD.
For a list of the software caveats that apply to Cisco IOS Release 12.2(15)ZL, see the "Caveats" section and Caveats for Cisco IOS Release 12.2(15)T. The caveats document is updated for every maintenance release and is located on Cisco.com and the Documentation CD.
Contents
This release note contains the following sections:
•
Upgrading to a New Software Release
•
•
System Requirements
This section describes the system requirements for Cisco IOS Release 12.2(15)ZL and includes the following sections:
•
•
Memory Requirements
Table 1 provides the memory requirements for the Cisco IOS feature sets supported by Cisco IOS Release 12.2(15)ZL on the Cisco 3200 Series Mobile Access Router.
Hardware Supported
Cisco IOS Release 12.2(15)ZL supports the Cisco 3200 Series Mobile Access Router. The Cisco 3200 Series Mobile Access Router includes the Cisco 3251 Mobile Access Router Card, Cisco 3201 Serial Mobile Interface Card, and the Cisco 3201 FESMIC, the Fast Ethernet Switch Mobile Interface Card (FESMIC).
For detailed descriptions of new hardware features and which features are supported on each router, see the "New and Changed Information" section. For descriptions of existing hardware features and supported modules, see the configuration guides and additional documents specific to the Cisco 3200 Series Mobile Access Router, which are available on Cisco.com and the Documentation CD at the following location:
http://www.cisco.com/univercd/cc/td/doc/product/access/mar_3200/index.htmDetermining the Software Version
To determine the version of the Cisco IOS software running on your Cisco router, log in to the router and enter the show version EXEC command. The following sample displays command output from a Cisco 3200 series router running Cisco IOS Release 12.2(15)ZL:
Router> show versionCisco Internetwork Operating System SoftwareIOS (tm) 3200 Software (C3200-I11-M), Release 12.2(15)ZL! text deletedConfiguration register is 0x0Upgrading to a New Software Release
You can download either a software image or a configuration file via TFTP or via the console port, a ROM monitor function over the router console port. After downloading, the file is saved to the Flash memory.
Use console download when you do not have access to a TFTP server.
If you are using a PC to download a Cisco IOS image over the router console port at 115,200 bps, ensure that the PC serial port is using a 16550 universal asynchronous transmitter/receiver (UART). If the PC serial port is not using a 16550 UART, we recommend using a speed of 38,400 or less when downloading an Cisco IOS image over the console port.
Configure the PC communications port to match the router console port as follows:
•
•
•
•
Follow the steps below to run Xmodem:
Step 1
Step 2
Following are the syntax and descriptions for the xmodem console download command:
xmodem [-ucyrx] destination_file_name
Feature Set Tables
The Cisco IOS software is packaged in feature sets consisting of software images, depending on the platform. Each feature set contains a specific set of Cisco IOS features. Cisco IOS Release 12.2(15)ZL supports the same feature sets as Release 12.2(15)T, but Cisco IOS Release 12.2(15)ZL can include new features supported by the Cisco 3200 series router.
Table 2 lists the features and feature sets supported in Cisco IOS Release 12.2(15)ZL.
The table uses the following conventions:
•
–
–
•
Note
New and Changed Information
The following section identifies the new software features supported by Cisco IOS Release 12.2(15)ZL for the Cisco 3200 Series Mobile Access Router.
New Software Features in Cisco IOS Release 12.2(15)ZL
The following sections list the new software features supported by Cisco IOS Release 12.2(15)ZL for the Cisco 3200 Series Mobile Access Router.
Dynamic CCoA
Dynamic collocated care-of address (CCoA) allows a mobile router to roam to foreign networks in which foreign agents are not deployed. A roaming interface with CCoA attempts to find foreign agents on the link by soliciting and listening for agent advertisements. If a foreign agent is found, the mobile router attempts to register the foreign agent CCoA, and thereafter tries to register only the foreign agent CCoA. If foreign agent is not found, the mobile router tries to register its CCoA and thereafter tries to register only its CCoA.
CCoA support is essential and must be manually enabled on each roaming interface. By default, only foreign agent CCoA processing is enabled by using the ip mobile router-service command.
Preferred Home Agent
Home agent (HA) for the mobile router was previously pre-configured and allowed only one usable home agent configuration. When roaming, a home agent closer to the mobile router may be preferred. This feature will allow a home agent to be selected which is closer to the mobile router.
The HA list is configured on the mobile router. Each HA is configured with a priority. HAs are tried, commencing with the highest priority. If the HA explicitly denies the registration, or if the maximum retry count is exceeded, the mobile router attempts the next highest priority HA.
If the lowest priority HA fails, the mobile router waits until a HA advertisement is received, and then tries to register again starting with the highest priority HA.
IPSec in the Mobile IP Environment
Security associations (SAs) establish trust between two devices in a peer-to-peer relationship. There are two types of security association.
The first is Internet Key Exchange (IKE), which provides negotiation, peer authentication, key management, and key exchange. IKE provides a secure communication channel between two devices that is used to negotiate an encryption algorithm, a hash algorithm, an authentication method, and any relevant group information.
The second type of security association is IPSec Security Association (IPSec SA). Because IPSec SA is unidirectional, it requires separate IPSec SAs be established in each direction to provide non- repudiation, data integrity, and payload confidentiality. Non-repudiation is often necessary to verify that a transaction has taken place, such as a financial exchange between parties. Data integrity verifies that packets are not altered in transit by a third party. Payload confidentiality is provided by encryption.
It might be necessary to protect certain traffic on the mobile network. This is accomplished by enabling IPSec between the mobile router and an IPSec gateway located behind the home agent. Because an IPSec tunnel is established within the Mobile IP tunnel, IKE renegotiation is unnecessary while the mobile router moves about. The result is a secure, scalable mobile networks that is based on standards.
The IPSec encryption algorithm that runs between the mobile router and the IPSec gateway can be either Triple Data Encryption Standard (3DES) or Advanced Encryption Standard (AES). Note that AES provides greater security than DES and is more efficient than 3DES.
QoS in Mobile IP Environment
Quality of Service (QoS) is a measure of performance that reflects router transmission quality and service availability. The mobile router supports the following QoS features in both static and mobile environments:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Note
For more details on QoS, refer to the following URL:
http://www.cisco.com/en/US/tech/tk543/tech_topology_and_network_serv_and_protocol_suite_home.html
BGP
The Border Gateway Protocol (BGP) provides loop-free interdomain routing between autonomous systems. It exchanges network information with other BGP systems by creating a TCP connection to its peers and exchanging routing updates over this connection, including information about the list of autonomous system paths. (An autonomous system [AS] is a set of routers that operate under the same administration.) This information can be used to construct a graph of autonomous system connectivity from which routing loops can be pruned and with which autonomous system-level policy decisions can be enforced. BGP is often run among the networks of Internet service providers (ISPs).
External Modem Support
The external general packet radio service/code division multiple access (GPRS/CDMA) modems provide the mobile access router with a Layer 2 roaming interface. The Mobile IP stack would allow Layer 3 roaming IP connectivity for the mobile access router. These external modems will be connected to a serial interface of the mobile access router; the serial interface of the mobile access router will be running in asynchronous mode.
MIB Support for Mobile IP
The following Management Information Bases (MIBs) are supported in Cisco IOS Release 12.2(15)ZL in addition to those supported in Cisco IOS Release 12.2(11)YQ and Cisco IOS Release 12.2(11)YR.
•
•
•
For more details on the MIB Support for Mobile IP feature, and for a list of the MIBs supported, refer to the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/access/mar_3200/mar_conf/m010intr.htm#1035866
New Software Features in Release 12.2(15)T
For information regarding the features supported in the Cisco IOS Release 12.2(15)T, refer to the Cross-Platform Release Notes and New Feature Documentation links at the following location on Cisco.com:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122relnt/xprn122t/index.htm
This URL is subject to change without notice. If it changes, point your web browser to Cisco.com, and click the following path:
Service & Support: Technical Documents: Cisco IOS Software: Release 12.2: Release Notes: Cross-Platform Release Notes (Cisco IOS Release 12.2(15)T)
Caveats
Caveats describe unexpected behavior or defects in the Cisco IOS software releases. Severity 1 caveats are the most serious caveats, severity 2 caveats are less serious, and severity 3 caveats are the least serious of these three severity levels.
Caveats in Cisco IOS Release 12.2(15)T are also in Cisco IOS Release 12.2(15)ZL. For information on caveats in Cisco IOS Release 12.2(15)T, refer to the Caveats for Cisco IOS Release 12.2(15)T document. For information on caveats in Cisco IOS Release 12.2, refer to the Caveats for Cisco IOS Release 12.2 document. These documents list severity 1 and 2 caveats; the documents are located on Cisco.com and the Documentation CD.
Note
Open Caveats - Release 12.2(15)ZL
This section describes possibly unexpected behavior by Cisco IOS Release 12.2(15)ZL. This section includes severity 1 through 3 caveats.
•
When a service policy with NBAR is applied to an interface configured for Mobile IP roaming with reverse tunneling, the tunneled packets are not classified correctly although QoS Preclassify feature is enabled on the tunnel interface.
Workaround
Apply the service policy on the tunnel interface used as the template for Mobile IP tunnels.
•
Workaround
Use an address for the foreign agent's CoA that is different from the CCoA.
•
–
Workaround
Enable keepalives on the serial interface.
–
Workaround
Enable keepalives on the serial interface.
–
Workaround
Power-cycle the Anydata modem.
–
Workaround
Configure the modem printer command on the line corresponding to the serial interface.
–
Workaround
The communication can be restored either by disconnecting and then reconnecting the handset end of the serial cable, or by power-cycling the handset.
–
Workaround
Configure the register lifetime <x> command under ip mobile router. Set x to a lesser value if the modem has to be disconnected.
•
When the Priority HA feature is configured and connectivity to registered HA is lost, a CCoA-registered mobile router may not delete its Mobile IP tunnel to that HA after that HA registration is deleted. This may cause problems for traffic passing though the mobile router when it subsequently registers with another HA.
Workaround
None.
•
Vodafone uses Network Address Translation (NAT)/Port Address Translation (PAT) in its network, which causes problems for Mobile IP, because Mobile IP uses either generic routing encapsulation (GRE) or IP encapsulation that lacks a port to translate.
Workaround
None.
•
Workaround
None.
Resolved Caveats - Release 12.2(15)ZL
This section describes possibly unexpected behavior by Cisco IOS Release 12.2(15)ZL. This section includes severity 1 through 3 caveats.
•
A Cisco device running IOS and enabled for the Border Gateway Protocol (BGP) is vulnerable to a Denial of Service (DOS) attack from a malformed BGP packet. The BGP protocol is not enabled by default, and must be configured in order to accept traffic from an explicitly defined peer. Unless the malicious traffic appears to be sourced from a configured, trusted peer, it would be difficult to inject a malformed packet. BGP MD5 is a valid workaround for this problem.
Cisco has made free software available to address this problem. For more details, please refer to this advisory, available at http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml.
•
A Cisco device running IOS and enabled for the Border Gateway Protocol (BGP) is vulnerable to a Denial of Service (DOS) attack from a malformed BGP packet. The BGP protocol is not enabled by default, and must be configured in order to accept traffic from an explicitly defined peer. Unless the malicious traffic appears to be sourced from a configured, trusted peer, it would be difficult to inject a malformed packet. BGP MD5 is a valid workaround for this problem.
Cisco has made free software available to address this problem. For more details, please refer to this advisory, available at http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml.
Related Documentation
The following sections describe the documentation available for the Cisco 3200 Series Mobile Access Routers. Typically, these documents consist of hardware and software installation guides, Cisco IOS configuration and command references, system error messages, feature modules, and other documents.
Documentation is available as electronic documents, except for feature modules and the Cisco IOS release notes, which are available online on Cisco.com and the Documentation CD-ROM.
Use these release notes with the documents listed in the following sections:
Release-Specific Documents
The following documents are specific to Release 12.2 and apply to Cisco IOS Release 12.2(15)ZL. They are located on Cisco.com and the Documentation CD-ROM (under the heading Service & Support):
•
Technical Documents: Cisco IOS Software: Release 12.2: Release Notes: Cisco 3200 Series Routers: Release Notes for Cisco 3200 Series Mobile Access Routers for Release 12.2(15)ZL
•
Technical Documents: Cisco IOS Software: Release 12.2: Release Notes: Cisco IOS Release 12.2(15)T
•
Technical Documents: Product Bulletins
•
Technical Documents: Cisco IOS Software: Release 12.2: Caveats
Note
Platform-Specific Documents
Hardware installation guides, configuration and command reference guides, and additional documents are available for the Cisco 3200 Series Mobile Access Routers on Cisco.com and the Documentation CD-ROM.
Cisco 3200 Series Mobile Access Routers
Documentation specific to the Cisco 3200 Series Mobile Access Routers is available on Cisco.com and the Documentation CD at the following location:
http://www.cisco.com/univercd/cc/td/doc/product/access/mar_3200/index.htm
Obtaining Documentation
These sections explain how to obtain documentation from Cisco Systems.
World Wide Web
You can access the most current Cisco documentation on the World Wide Web at this URL:
Translated documentation is available at this URL:
http://www.cisco.com/public/countries_languages.shtml
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which is shipped with your product. The Documentation CD-ROM is updated monthly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual subscription.
Ordering Documentation
You can order Cisco documentation in these ways:
•
http://www.cisco.com/cgi-bin/order/order_root.pl
•
http://www.cisco.com/go/subscription
•
Documentation Feedback
You can submit comments electronically on Cisco.com. In the Cisco Documentation home page, click the Fax or Email option in the "Leave Feedback" section at the bottom of the page.
You can e-mail your comments to bug-doc@cisco.com.
You can submit your comments by mail by using the response card behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from online tools by using the Cisco Technical Assistance Center (TAC) Web Site. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC Web Site.
Cisco.com
Cisco.com is the foundation of a suite of interactive, networked services that provides immediate, open access to Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.
Cisco.com is a highly integrated Internet application and a powerful, easy-to-use tool that provides a broad range of features and services to help you with these tasks:
•
•
•
•
•
If you want to obtain customized information and service, you can self-register on Cisco.com. To access Cisco.com, go to this URL:
Technical Assistance Center
The Cisco Technical Assistance Center (TAC) is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two levels of support are available: the Cisco TAC Web Site and the Cisco TAC Escalation Center.
Cisco TAC inquiries are categorized according to the urgency of the issue:
•
•
•
•
The Cisco TAC resource that you choose is based on the priority of the problem and the conditions of service contracts, when applicable.
Cisco TAC Web Site
You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving both cost and time. The site provides around-the-clock access to online tools, knowledge bases, and software. To access the Cisco TAC Web Site, go to this URL:
All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC Web Site. The Cisco TAC Web Site requires a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:
http://www.cisco.com/register/
If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC Web Site, you can open a case online by using the TAC Case Open tool at this URL:
http://www.cisco.com/tac/caseopen
If you have Internet access, we recommend that you open P3 and P4 cases through the Cisco TAC Web Site.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.
To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
Before calling, please check with your network operations center to determine the level of Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
http://www.cisco.com/en/US/products/products_catalog_links_launch.html
•
•
http://www.cisco.com/go/packet
•
http://www.cisco.com/go/iqmagazine
•
http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html
•
http://www.cisco.com/en/US/learning/le31/learning_recommended_training_list.html
This document is to be used in conjunction with the documents listed in the `Related Documentation' section.
Copyright © 2003, Cisco Systems, Inc. All rights reserved.
Feedback