Skip to content
Skip to search
Skip to footer

System Security Configuration Guide for Cisco 8000 Series Routers, IOS XR Release 25.1.x, 25.2.x, 25.3.x

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents

Find Matches in This Book

Results

Updated:: September 1, 2025

Chapter: New and Changed Feature Information

New and Changed Feature Information
System Security Features Added or Modified in IOS XR Release 25.x.x

New and Changed Feature Information

This chapter lists all the features that have been added or modified in this guide. The table also contains references to these feature documentation sections.

System Security Features Added or Modified in IOS XR Release 25.x.x


Feature	Description	Changed in Release	Where Documented
Channel timeout for SSH sessions	This feature was introduced	Release 25.3.1	Channel timeout for SSH sessions
Unused connection timeout for SSH sessions	This feature was introduced	Release 25.3.1	Unused connection timeout for SSH sessions
MACsec encryption on layer 3 sub-interfaces of 8711-32FH-M line cards	This feature was introduced	Release 25.3.1	MACsec Encryption on Layer 3 Subinterface
Port mode MACsec over multipoint L2VPN services	This feature was introduced	Release 25.3.1	Port mode MACsec over multipoint L2VPN services
RADIUS Change of Authorization for 802.1X and MAB sessions	This feature was introduced	Release 25.3.1	RADIUS Change of Authorization for 802.1X and MAB sessions
MACsec mode on Cisco 8608 routers	This feature was introduced	Release 25.1.1	MACsec mode on PHY
802.1X port-based authentication	This feature was introduced	Release 25.1.1	802.1X port-based authentication
EST protocol for automated certificate provisioning	This feature was introduced	Release 25.1.1	EST protocol for automated certificate provisioning

Was this Document Helpful?

Feedback

Feedback

Contact Cisco

Open a Support Case
(Requires a Cisco Service Contract)