New and Changed Feature Information

This table summarizes the new and changed feature information for the System Security Configuration Guide for Cisco NCS 540 Series Routers, and tells you where they are documented.

System Security Features Added or Modified in IOS XR Release 26.x.x

Feature Description Changed in Release Where Documented

Gated shell access

This feature was introduced.

Release 26.3.1

Gated shell access

SSH client strict host key check

This feature was introduced.

Release 26.3.1

SSH client strict host key checks

IPSec for management traffic

This feature was introduced.

Release 26.3.1

IP Security for Management Traffic

uRPF strict mode

This feature was introduced.

 Release 26.2.1

uRPF strict mode with external TCAM

FIDO2 authentication for SSH

This feature was introduced.

Release 26.2.1

FIDO2 authentication for SSH

SSH key strength: 3072 bits by default

This feature was introduced.

Release 26.1.1

Automatic generation of SSH host-key pairs