Device Support

This release introduces support for the following devices and their respective operating system versions:

• IOS-XR 6.5.35 release on Cisco NCS 4009 devices

• IOS-XR 6.5.35 release on Cisco NCS 4016 devices

• IOS-XR 7.11.21 release on Cisco NCS 540 devices

• IOS-XR 24.3.2 release on Cisco NCS 540 devices

• IOS-XR 24.4.1 release on Cisco NCS 540 devices

• IOS-XR 7.11.21 release on Cisco NCS 540L devices

• IOS-XR 24.3.2 release on Cisco NCS 540L devices

• IOS-XR 24.4.1 release on Cisco NCS 540L devices

• IOS-XR 24.3.2 release on Cisco NCS 560 devices

• IOS-XR 7.11.21 release on Cisco NCS 560 devices

• IOS-XR 24.4.1 release on Cisco NCS 560 devices

• IOS-XR 7.11.21 release on Cisco NCS 5500 devices

• IOS-XR 24.3.2 release on Cisco NCS 5500 devices

• IOS-XR 24.4.1 release on Cisco NCS 5500 devices

• IOS-XR 7.11.21 release on Cisco NCS 5700 devices

• IOS-XR 24.3.2 release on Cisco NCS 5700 devices

• IOS-XR 24.4.1 release on Cisco NCS 5700 devices

• IOS-XR 7.11.21 release on Cisco ASR 9000 routers

• IOS-XR 24.3.2 release on Cisco ASR 9000 routers

• IOS-XR 24.4.1 release on Cisco ASR 9000 routers

• IOS-XR 7.11.21 release on Cisco IOS XRv 9000 series routers

• IOS-XR 24.3.2 release on Cisco IOS XRv 9000 series routers

• IOS-XR 24.4.1 release on Cisco IOS XRv 9000 series routers

• IOS-XR 7.11.21 release on Cisco 8000 series devices

• IOS-XR 24.3.2 release on Cisco 8000 series devices

• IOS-XR 24.4.1 release on Cisco 8000 series devices

• IOS-XR 24.1.1 release on Cisco NCS 1014 devices

• IOS-XR 24.2.11 release on Cisco 8212-48FH-M router

• IOS-XR 24.3.1 release on Cisco 8711-32FH-M router

• Chassis view support for Cisco 8212-48FH-M router

• Chassis view support for Cisco 8711-32FH-M router

• Chassis view support for Cisco 8804-FC1 fabric card on Cisco 8000 series devices

• IOS-XR 24.2.11 release on Cisco NCS1K4-2.4T-K9 and Cisco CIM8-C-K9 line cards

• IOS-XR 24.2.11 release on Cisco NCS1K14-2.4T-X-K9 line card

• Validation of IOS XE 17.15.2 release on Cisco NCS 4200, Cisco ASR 900, Cisco ASR 920, Cisco ASR 903U, Cisco ASR 902U devices

• Validation of IOS-XE 17.12.1 release on Cisco ASR 920 devices

• Validation of IOS-XR 24.1.1 release on Cisco NCS 1014 devices

• Improved handling of event bursts on Cisco NCS 2000 devices using the TL1 interface

Optical

• Regen Constraint Display: The REGEN constraint is now displayed as Regen for Media Channel NC SSON and OCHNC WSON circuits. This includes:

  • Nodes in MCH NC SSON circuits with Cisco NCS 1000 and NCS 2000 series devices acting as REGEN nodes.

  • Nodes in OCHNC WSON circuits with Cisco NCS 2000 series devices as REGEN nodes.

• Manage Auto Circuit Reconciliation for Optical Circuits: The Auto Circuit Reconciliation feature in Cisco EPN Manager ensures alignment between provisioned service data and discovered network data for optical circuits. Users can configure the feature in the settings page to either view or edit provisioned intent data or discovered device data, but not both simultaneously.

• Discovery of OCH-CC circuits for Cisco NCS 1004 devices.

• Provision, manage, and monitor circuits between Cisco NCS 1014 devices with Cisco NCS1K14-2.4T-K9 and Cisco NCS1K14-2.4T-X-K9 line cards, along with a Cisco NCS 2000 device non-SVO topology. You can configure managed links, provision MCH-NC circuits with custom spectrum parameters, and enable automatic discovery of optical circuits (OCH-Trail and OCHCC).

• Optical Links migration from NICE to SD for scale.

• Enhanced Related Circuits/VCs Tab for Optical Circuits: For optical circuits, including Media Channels, Carrier Circuits, OCH-Trails, and OCHCC, the Related Circuits/VCs tab now displays detailed information about all associated lower-hierarchical circuits and their interrelationships.

• Restoration Status Propagation for Media Channel NC SSON: The restoration status of Media Channel NC SSON circuits is now propagated to their carried lower-hierarchical services, including Carrier NC SSON, OCH-Trail, and OCHCC.

Packet

Cisco IOS-XE Support for ACR/DCR and SAToP Framing: Cisco IOS-XE devices running version 17.9.5 or higher now support Adaptive and Differential Clock Recovery (ACR/DCR) and SAToP framing for DS1 and DS3 services over STS1E controllers.

Cisco ASR 9000 Series Aggregation Services Routers—New Operating System Support

Cisco 8000 Series Routers—New Operating System Support

Cisco Network Convergence System 540L Series Routers—New Operating System Support

Cisco Network Convergence System 5500 Series—New Operating System Support

Cisco Network Convergence System 560 Series Routers—New Operating System Support

Cisco Network Convergence System 5700 Series Routers—New Operating System Support

Cisco Network Convergence System 540 Series Routers—New Operating System Support

Cisco IOS XRv 9000 Series Aggregation Services Router—New Operating System Support

Cisco NCS 1000 Series Routers—New Operating System Support

Cisco NCS 4000 Series Routers—New Operating System Support

System Behavior and Functionality Updates

• Before the release of Cisco EPN Manager 7.1, the column order under Inventory > Other > Circuits/VCs & Network Interfaces, was maintained as stored in the database. However, starting from Cisco EPN Manager 7.1, there has been a change in the storage mechanism for column order. The column order is now stored in the browser session storage instead of the database. As a result, any adjustments made to the column order will only apply to the current session and will not be permanently saved in the database.

Secure User Inputs to Prevent XSS Vulnerabilities

Cross-site Scripting (XSS) is a security vulnerability that allows attackers to inject malicious scripts into applications. These scripts can be used to steal information or perform other malicious actions. To safeguard the Cisco EPN Manager, it is crucial to avoid certain patterns in user input fields and POST/PUT payloads.

The following patterns have been identified as vulnerable and are blocked by the Cisco EPN Manager's XSS prevention feature. The Cisco EPN Manager will not execute the command or proceed to the next step if it finds these patterns; therefore, ensure they are not used in user inputs or API calls.

• src=’…’ (multiline, case insensitive pattern): Avoid using src= followed by any text or newline within single quotes. For example, <img src='malicious_code'>.

• src=”…” (multiline, case insensitive pattern): Avoid using src= followed by any text or newline within double quotes. For example, <img src="malicious_code">.

• </script> (case insensitive pattern): Avoid using the closing script tag in any form.

• <script…> (multiline, case insensitive pattern): Avoid using the opening script tag with any content inside.

• eval(…) (multiline, case insensitive pattern): Avoid using the eval function in any context. For example, eval('malicious_code').

• expression(…) (multiline, case insensitive pattern).

• javascript: (case insensitive pattern): Avoid using javascript: protocol in any field.

• vbscript: (case insensitive pattern): Avoid using vbscript: protocol.

• onload…= (multiline, case insensitive pattern): Avoid using event handlers like onload in any of the fields.

• <…> (multiline, case insensitive pattern).

• <script…/script> (multiline, case insensitive pattern): Avoid any complete script tags with content.

Limited Scope of Specific Devices

• The Cisco 8608-SYS and Cisco 8011-2X2XP4L platforms do not support provisioning and related use cases for any technology.

Upgrade Issues

• FTP and TFTP are disabled by default.

• Active Threshold Crossing Alarms (TCA) for temperature remain active and are not cleared automatically. Clear these alarms manually.

• You must resync your devices to view ISIS links.

• You must resync LDP-enabled devices to view LDP feature-related information.

• You must recreate the TCAs for inbound/outbound errors and inbound/outbound discards in the Interface Health monitoring policy.

Limitations on Carrier Ethernet Circuit Provisioning

• Promotion of services using the old probe name format is now supported. These probes are listed in the user interface with the appropriate standard OAM Profile name after promotion.

  • Sample profile: profile PM2_3_8_CoS5_DM type cfm-delay-measurement.

• While custom profile names are supported in EPN Manager, modifying brownfield services with a different naming format deletes the existing custom profile and adds a new profile with a supported naming format.

• Inventory models do not correctly display the profiles that are not associated to a service.

• The validation limit for the number of profiles is 100. If you create a new SLA operation profile after 100 existing profiles, the device generates an error and deployment fails.

TLS 1.2 Required for Secured Channel Communication for HTTPS and TLS

Only Transport Layer Security (TLS) 1.2 is supported for HTTPS and TLS related secured communication, for example, RADIUS EAP-TLS.

Support for TLS 1.0, TLS 1.1, and all versions of SSL has been disabled due to security vulnerabilities.

This means that all peer systems and clients that transact with Cisco EPN Manager using HTTPS/TLS must support TLS 1.2. If they do not support TLS 1.2, you must upgrade these systems. Wherever possible, the Cisco EPN Manager documentation highlights the potentially affected systems. Contact your Cisco representative for support in this regard, if necessary.

Reconciliation Report Limitations

If you have not provided a value for an attribute while provisioning a service, the provisioned value for that attribute is displayed as “Missing” in the reconciliation report. The device may have a default value for this attribute, but Cisco EPN Manager does configure this value.

Limitations on Cisco ME 1200 Devices

The Y.1564 performance test does not work if the source/destination is a Cisco ME 1200 device.

Limitations on Cisco NCS 4200 Devices Running IOS-XE 16.8.1

The following functionalities do not work on Cisco NCS 4200 devices running IOS-XE 16.8.1:

• Alarm profile

• Configuration of SONET LOP and CT3 LOP from the GUI

• Admin shut/no shut functionality on SONET/T1/T3 HOP/LOP

Limitations on Cisco NCS 540 and Cisco NCS 5500 devices

Cisco NCS 540 and Cisco NCS 5500 device series do not support Fault-OAM, Wrap-Protection, and BFD.

Use CLI Templates for Configuring PTP Commands

On ASR920 devices with software version 16.9.1, IEEE 1588-2008 BC/MC license is required to execute the 1588 PTP commands.

Configuration and Inventory Not Supported for PTP Templates

The behavior of modeling the configurations that are pushed through PTP templates may not work as expected because the model may not be in place for all the configurations that are pushed through PTP templates. Configuration/Inventory is not supported for these configurations.

Data Center Device Lifecycle Support Only

Cisco EPN Manager provides essential support for a few selected UCS compute systems, Nexus series devices, and the CSR 1000v devices.

LINK_DOWN alarm on sub interfaces in Gig Port

LINK_DOWN alarms will not be generated when a link is down on sub-interfaces in a Gig Port.