Full Cisco Trademarks with Software License

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on standards documentation, or language that is used by a referenced third-party product.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)

Cisco Catalyst 8000V Edge Software Overview

About Cisco Catalyst 8000V

Cisco Catalyst 8000V Edge Software or Cisco Catalyst 8000V is a software-based, virtual router that combines the functionalities of Cisco Cloud Services Router (Cisco CSR1000V) and Cisco Integrated Services Virtual Router (Cisco ISRv) into a single image that is intended for deployment in cloud and virtual data centers.

Cisco Catalyst 8000V supports NIM modules, runs on any x86 platform, and is supported on ESXi, KVM, NFVIS hypervisors. Further, you can deploy this router on public cloud providers such as Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Alibaba Cloud.

When you deploy Cisco Catalyst 8000V on a VM, the Cisco IOS XE software functions as if it were deployed on a traditional Cisco hardware platform. You can configure different features depending on the Cisco IOS XE software image.

Features

  • Hardware independence: The Cisco Catalyst 8000V router uses the benefits of virtualization in the cloud to provide hardware independence. Since the Cisco Catalyst 8000V runs on a virtual machine, you can use this router on any x86 hardware that the virtualization platform supports.

  • Sharing of resources: The resources used by Cisco Catalyst 8000V are managed by the hypervisor, and these resources can be shared among the VMs. You can regulate the amount of hardware resources that the VM server allocates to a specific VM. You can reallocate resources to another VM on the server.

  • Flexibility in deployment: You can easily move a VM from one server to another. Thus, you can move a Cisco Catalyst 8000V instance from a server in one physical location to a server in another physical location without moving any hardware resources.

  • Enhanced software security - Secure Object Store: In Cisco Catalyst 8000V, storage partitions for NVRAM, licensing, and other data are created as Object stores. The individual Object stores are encrypted to ensure data security, and this product is Cisco Secure Development life cycle (CSDL) compliant. Further, Cisco Catalyst 8000V supports a 16G disk cycle profile.

Software Images and Licenses

The following sections describe the licensing and software images for Cisco Catalyst 8000V.

Cisco Catalyst 8000V Software Licenses

The Cisco Catalyst 8000V is licensed based on throughput, feature-set, and the licensing term. This product supports Cisco Smart Licensing Usage Policy as well as Cisco DNA Licensing. Based on whether you want to go for purchased licenses that go with the Cisco Catalyst 8000V instance, or a subscription-based license, choose one of the following options:

Subscription-Based Licensing via Cisco DNA

You can purchase a subscription license for Cisco Catalyst 8000V through the following three licenses that are available via Cisco DNA:

  • Cisco Catalyst 8000V - Network-Premier

  • Cisco Catalyst 8000V - Network-Advantage

  • Cisco Catalyst 8000V - Network-Essentials

For more information on Cisco Catalyst 8000V DNA licensing, see Cisco DNA Software Routing Subscription Guide.

Bring-Your-Own-Licensing

You also have an option to purchase and use licenses with Cisco Catalyst 8000V as a Bring-Your-Own-License (BYOL) instance or as a Pay-As-You-Go (PAYG) instance.

To use a Cisco Catalyst 8000V - BYOL license, see Licenses and Licensing Models to know to how install and configure your license.

If you have upgraded to Cisco Catalyst 8000V from a Cisco CSR 1000V or a Cisco ISRV, you must use Smart Licensing Using Policy (SLP). Traditional licenses do not work after the upgrade.


Note

Starting from Cisco IOS XE 17.4.1, with the introduction of Smart Licensing Using Policy, even if you configure a hostname for a product instance or device, only the Unique Device Identifier (UDI) is displayed. This change in the display can be observed in all licensing utilities and user interfaces where the hostname was displayed in earlier releases. It does not affect any licensing functionality. There is no workaround for this limitation.

The licensing utilities and user interfaces that are affected by this limitation include only the following:

  • Cisco Smart Software Manager (CSSM),

  • Cisco Smart License Utility (CSLU), and

  • Smart Software Manager On-Prem (SSM On-Prem).


Pay-As-You-Go Licensing

Cisco Catalyst 8000V supports the PAYG Licensing model with Amazon Web Services (AWS) and Microsoft Azure Marketplace. Cisco Catalyst 8000V hourly-billed AMI or Pay As You Go licensing model allows you to consume an instance for a defined period of time. In this licensing model, you can directly launch the instance from the AWS or Azure Marketplace and start using the instances. The licenses are embedded in the image.


Note

For demo or evaluation licenses, contact your Cisco Account Team if you have a direct purchase agreement with Cisco, or your Cisco Partner or Reseller.


For a more detailed overview on Cisco Licensing, go to https://cisco.com/go/licensingguide.

Software Image Nomenclature for Installation Files

The Cisco Catalyst 8000V installation file nomenclature indicates properties supported by the router in a given release.

For example, these are filename examples for the Cisco IOS XE Cupertino 17.9.1a release:

  • c8000v-universalk9.17.09.01a.ova

  • c8000v-universalk9.17.09.01a.iso

  • c8000v-universalk9.17.09.01a.qcow2

The following table lists the filename attributes along with its properties:

Table 1. Installation Filename Attributes

Filename Attribute

Properties

universalk9

Specifies the package that you are installing.

17.09.01a

Indicates that the software image is mapped to the Cisco IOS XE Cupertino 17.9.1a release.

New and Enhanced Features for Cisco IOS XE Cupertino 17.9.x

New and Enhanced Features for Cisco IOS XE 17.9.1a


Note

Cisco IOS XE Cupertino 17.9.1a is the first release for Cisco Catalyst 8000V in the Cisco IOS XE Cupertino 17.9.x release series.


Table 2. Software Features

Feature

Description

Support for ConnectX-5VF vNIC

Cisco Catalyst 8000V now supports the ConnectX-5VF Virtual Network Interface (vNIC) card for deployments in ESXi, KVM, and NFVIS (CSP) environments. This enhancement provides multiple benefits including advanced hardware offloads to reduce CPU resource consumption and enhanced drive for high packet rates and throughput.

See also Requirements for KVM Installation and Installing Cisco Catalyst 8000V in NFVIS Environment.

Support for c5n.18xlarge instance type

Cisco Catalyst 8000V running on Amazon Web Services (AWS) now supports the c5n.18xlarge instance type for deployment. This instance type supports Elastic Fibre Adapter (EFA) that enhances performance especially in network intense solutions.

AWS Enhancements

Cisco Catalyst 8000V running on AWS supports performance enhancements with higher number of queues, thereby increasing the packet processing rate.

Support for Unicast-to-Multicast Destination Reflection

This feature introduces support for configuration of unicast-to-multicast destination reflection to facilitate unicast-to-multicast destination translation and unicast-to-multicast destination splitting. It also provides the capability for users to translate externally received unicast destination addresses to multicast addresses.

Support for BGP additional paths with label-unicast unique mode

This enhancement introduces support for configuring BGP additional paths when label-unicast unique mode is configured.

ACE Scale Limit Per OGACL

This feature provides the capabilities to increase the Common Adaptive Classification Engine (CACE) scale limit per ACL and object group (OG) ACL. Currently, the CACE supports only 64K ACEs per ACL and it can have 64K networks in the source and destination OGs per policy.With the increase in CACE limit to 256K, Cisco Catalyst 8000v Edge Software can now support 150K ACE entries per ACL with 270K ACEs per system across five ACLs. Additionally, the device can support 3000 ACE entries per OGACL and 2400 OGs with 100 networks per OG.Cisco Catalyst 8000v must have 8 GB memory to support this configuration.

Table 3. Cisco Unified Border Element (CUBE) Features

Feature

Description

CUBE: End-to-end Secure Calling for Courtesy Call Back and Unified Contact Center Survivability

With the Cisco Voice Portal (CVP) application, a caller may request an automatedcallback, rather than wait in a queue for an extended period. When an agent becomes available, CVP sends a request to place a call to the original caller. When the call is answered, the agent is connected. With this update, outbound calls over a secure SIP PSTN trunk are possible.

CUBE: Load Balancing for DNS SRV Host

This enhancement to the DNS session target feature, provides effective call distribution and load balancing of calls based on the preference, priority and availability of hosts provided in DNS SRV Resource Records. This feature further simplifies configuration by allowing effective call distribution with a single dial-peer.

CUBE: Options Ping for DNS SRV Hosts

Previously, CUBE (Local Gateway) had to be configured with separate dial-peers to monitor the availability of individual proxies used in services such as Webex Calling. To simplify this configuration, all targets resolved from a DNS SRV record may now be monitored using a common Options Ping policy defined for a single dial-peer. If a remote server becomes unresponsive, CUBE will busy out that destination, allowing calls to be sent to alternative destinations.

Transfer of Call Detail Records Using SFTP

Cisco IOS gateways can use FTP and now SFTP servers to transfer call accounting files.


Note

Customers using the CUBE WebSocket forking feature with the Cisco Agent Answers solution should not use the Cisco IOS XE Cupertino 17.9.1a release. We recommend that you use the Cisco IOS XE Bengaluru 17.6.x release for this feature.


Table 4. Smart Licensing Using Policy Features

Feature

Description

Managed Service License Agreement (MSLA) Support with Smart Licensing Using Policy.

For Cisco Catalyst 8000V running in the autonomous mode, you can now implement a post-paid model for licenses, where you pay for the actual usage of a license instead of pre-paying for the licenses you may require.

This model requires an MSLA with Cisco, and licenses with subscription ID. (Licenses with subscription IDs to be ordered on Cisco commerce workspace (CCW). The licenses are deposited in the specified Smart Account and Virtual Account in CSSM, with the corresponding subscription IDs.

To complete licensing workflows, you can implement a topology where the product instance interacts directly with Cisco Smart Software Manager (CSSM), via Cisco Smart Licensing Utility (CSLU), or via Smart Software Manager On-Prem (SSM On-Prem), or it can operate in a disconnected mode. A product instance that uses licenses with subscription IDs must also enabled with a "utility mode”. Communication to and from the product instance is flagged to indicate that it is in the utility mode.

A product instance in the utility mode requires a Resource Utilization Measurement Acknowledgement (RUM ACK) installed every 30 days. You are billed based on the throughput and the Cisco DNA subscription tier that is activated and in-use.

New mechanism to send data privacy related information

A new mechanism to send data privacy related information was introduced. This information is no longer included in a RUM report.

If data privacy is disabled (no license smart privacy {all | hostname | version} command in global configuration mode), data privacy related information is sent in a separate sync message or offline file.

Depending on the topology you have implemented, the product instance initiates the sending of this information in a separate message, or CSLU and SSM On-Prem initiates the retrieval of this information from the product instance, or this information is saved in an offline file.

For more information, see license smart (global config).

Hostname support

Support for sending hostname information was introduced.

If you configure a hostname on the product instance and disable the corresponding privacy setting (no license smart privacy hostname command in global configuration mode), hostname information is sent from the product instance, in a separate sync message or offline file.

Depending on the topology you have implemented, the hostname information is received by CSSM, CSLU, and SSM On-Prem. It is then displayed on the corresponding user interface.

For more information, see license smart (global config).

With the introduction of this enhancement, the hostname limitation which existed from Cisco IOS XE Amsterdam 17.3.2 to Cisco IOS XE Cupertino 17.8.x – is removed. In these earlier releases, hostname information is not sent or displayed on various licensing utilities (CSSM, CSLU, and SSM On-Prem).

RUM Report Throttling

For all topologies where the product instance initiates communication, the minimum reporting frequency is throttled to one day. This means the product instance does not send more than one RUM report a day.

The affected topologies are: Connected Directly to CSSM, Connected to CSSM Through CSLU (product instance-initiated communication), CSLU Disconnected from CSSM (product instance-initiated communication), and SSM On-Prem Deployment (product instance-initiated communication).

This resolves the problem of too many RUM reports being generated and sent for certain licenses. It also resolves the memory-related issues and system slow-down that was caused by an excessive generation of RUM reports.

You can override the reporting frequency throttling, by entering the license smart sync command in privileged EXEC mode. This triggers an on-demand synchronization with CSSM or CSLU, or SSM On-Prem, to send and receive any pending data.

RUM report throttling also applies to the Cisco IOS XE Amsterdam 17.3.6 and later releases of the 17.3.x train, and Cisco IOS XE Bengaluru 17.6.4 and later releases of the 17.6.x train. From Cisco IOS XE Cupertino 17.9.1, RUM report throttling is applicable to all subsequent releases.

Virtual Routing and Forwarding (VRF) Support

On a product instance where VRF is supported, you can configure the license smart vrf vrf_string command and use a VRF to send licensing data to CSSM, or CSLU, or SSM On-Prem.

Note 

When using a VRF, the supported transport types are smart and cslu only.

For more information, see license smart (global config).

Resolved and Open Bugs - Cisco IOS XE 17.9.x

Resolved Bugs - Cisco IOS XE 17.9.2a

Bug ID Headline

CSCwc94230

C8000V secondary disk not mounted in AWS

CSCwb52324 C8000V unexpected reload due to QFP ucode crash
CSCwc21739 Nat not requesting further for low ports after initial allocation when cli knob "reserved-ports" set
CSCwc39012 Crash saving tracelogs after "Too many open files" error
CSCwc03478 Vtcp does not support L2 correctly
CSCwc82140 QFP Crash When ZBFW configuration features "log dropped-packets" configuration
CSCwd12591 Ucode crash during FW classification, session frees
CSCwc99668 Routes added by ikev2 getting deleted at responder
CSCwc23077 Firewall drop seen stating Firewall L4
CSCwc78528 DSPware 60.1.1 Release targeting v179_throttle
CSCwc96444 Device is not programming the correct next-hop for unicast prefix with multicast config present
CSCwc49715 Carsh @ UNIX-EXT-SIGNAL: Aborted(6), Process = Check heaps, having PPPoe with cwmp configs
CSCwd06118 IKEv2 Cert-based IPSEC does not work between IOS-XE and AWS
CSCwc77183 Packet duplication is causing drops in payment transactions.
CSCwb89958 Unified Policy HSL not sending sccurate NBAR application information.
CSCwc52538 Flows are not distributed and load-balanced evenly and consistently on the device
CSCwc45950 ZBFW self zone policy drops ssh session on Mgmt-intf 512 ports
CSCwc43794 VRF+NAT Outside Source Static - Drop packets during FTP (Active-mode) execution.
CSCwc79145 Throughput degrades when Local TLOC specified in Data Policy goes down
CSCwc32595 BFD session remains down if interface flap form up/down/up
CSCwb65396 CLI template push fails with error: 'Error: on line 48: line-mode single-wire line 0'
CSCwb90252 Automatically freeing up filesystems stale image or recovered folder (lost+found)
CSCvz89354 Router crashes due to CPUHOG when walking ciscoFlashMIB
CSCwc39865 Subscriber session getting stuck and needs manual clearance
CSCwb48953 Device speed test fails with "Device Error: Speed test in progress" error
CSCwd11365 Needs cert update - Azure CGW creation fails due to NVA provisioning failure
CSCwc72923 ERROR info: Router configuration failed:interface Serial0/1/0:23 isdn switch-type primary-ntt
CSCwc84967 Intermittent double DTMF due to changing timestamp on a DTMF event
CSCwb08057 ISG: Number of lite sessions conversion in progress counter not decrementing on failed account-logon
CSCwc29629 Crashes when Virtual-Access tries to bring-up/bring-down OSPFv3 ipsec crypto session authentication
CSCwd13352 SSH from device shell gets closed after update
CSCwc77177 BFD and control packets are dropped when ACL is applied on gigi to which loopback is bind
CSCwc68132 SIG tunnel tracker packets are dropped by firewall with self zone policy

Open Bugs - Cisco IOS XE 17.9.2a

Bug ID Headline

CSCwc99038

C8000V (Autonomous) stuck in Day-0 prompt with the customdata having invalid syntax

CSCwd44006 Control connection on the device doesn't come-up with reverse proxy using Enterprise Certificate
CSCwd33966 Unable to configure the local BGP as-path-list
CSCwd23810 IOS-XE: High CPU utilization caused by NHRP
CSCwd17579 Router crashing with reason CPU Usage due to Memory Pressure exceeds threshold (Reboot)
CSCwa14636 Device stopped forwarding traffic. Suspect OMPd is busy
CSCwd38626 Repeating SYS-2-PAK_SUBBLOCK_BADSIZE: 4 -Process= ""
CSCvz55282 Serviceability enhancements for config migration failures between releases
CSCwd17381 NAT/DIA traffic is skipping UTD in forward direction after SSNAT path from service-side
CSCwd13050 After an upgrade, the device moved into Out of Sync status
CSCwd12955 NAT translation is not correctly sent to the hub router from branch when SSNAT and UTD are configured
CSCwd15560 With 2 sequences, should not skip if the match is different and action is same
CSCwd36621 CERM may kick in due to IPSec sessions initiated for on-demand tunnels
CSCwd44586 Login banner config is changed after upgrade
CSCwd37410 0365 and MS Teams applications access issues when using DIA with app-list match in data-policy
CSCwc28468 Device always fails to push any template if it is running in the FIPS mode
CSCwc99823 FMAN crash seen in SGACL@ fman_sgacl_calloc
CSCwd29334 Upgrade failures due to inability to establish netconf connection from the device to upgrade-confirm
CSCwd45508 Device does not form BFD across Serial link when upgrading
CSCwa96399 Configuring "entity-information" xpath filter causes syslogs to print, does not return data
CSCwd34941 NAT configuration with the no-alias option is not preserved after reload
CSCwd12330 Invalid TCP checksum in SYN flag packets that pass through the router

CSCwd18131

Device not reachable after configuring platform resource service-plane-heavy

CSCwd18028

After deleting CSP, New CCM bringup on existing CSP is stuck in "Initializing CCM" on MT cluster

Resolved Bugs - Cisco IOS XE 17.9.1a

Bug ID Headline
CSCvz65764 Peer MSS shows incorrect value
CSCwa95092 When Object-group used in an ACL is updated, it takes no effect
CSCwb39822 MLX5 Driver error on a C8000V in Microsoft Azure causes excessive debug printing
CSCwb02142 Traceback: fman_fp_image core after clearing packet-trace conditions
CSCwb49857 Memory leaks on keyman process when key is not found
CSCwa65728 Large number of DH failures
CSCwb11389 NAT translation stops suddenly (ip nat inside doesn't work)
CSCwa84919 "Revocation-check crl none" does not failover to NONE DNAC-CA
CSCwb39098 Router crashed after new IPv6 address assigned when router used specific configuration
CSCwa69101 Initiator unclassified ip-address LQipv4 command has no effect
CSCwa67886 UDP based DNS resolution doesn't work with IS-IS EMCP on IOX-XE
CSCvz84588 Destination prefix packets getting dropped because forwarding plane is not programming the next hop
CSCwb27486 New Key for NBAR app and NBAR category without OGREF optimized
CSCwa72273 ZBFW dropping return packets from Zscalar tunnel post upgrade
CSCwa49101 OMP origin protocol comparison cleanup
CSCwb17282 Router crashes when clearing a VPDN session
CSCwb21645 NAT traffic gets dropped when default route changes from OMP to NAT DIA route
CSCwa98617 Memory leak in AEM chunks related to firewall
CSCwb18223 SNMP v2 community name encryption problem
CSCwb31587 Subject-alt-name attribute in certificate trustpoint causes Windows NDES/CA to reject SCEP requests
CSCwb51238 Router unexpectedly reloads two times when netflow show commandis executed
CSCwb12647 Router crashes for stuck threads in cpp on packet processing
CSCwa48512 CoR intercepted DNS reply packets dropped with drop code 52 (FirewallL4Insp) if UTD enabled also
CSCvz28950 DMVPN phase 2 connectivity issue between two spokes
CSCwa78348 Traceback: IOS-XE reload after Segmentation fault on Process = SSS Manager
CSCvz81664 Enabling or Disabling OMP Overlay AS Prevents Connected Routes from Being Advertised in OMP
CSCwa08847 ZBFW policy stops working after modifying the zone pair
CSCwb15331 Keyman memory leak using public keys
CSCwb34625 C8000V auto mode: static ip from bootstrap config overwritten by dhcp on fresh install
CSCvw50622 Nhrp network resolution not working with link-local ipv6 address.
CSCwa57873 Incorrect reload reason - Last reload reason: LocalSoft for Netconf Initiated request
CSCwb51595 Missing IOS config (voice translation rule) on upgrade
CSCwb18315 Umbrella DNS security policy doesn't work with Cloud onRamp with SIG tunnels
CSCwb13850 License boot level not detected with Day0 after C8000V boots on NFVIS platforms

Open Bugs - Cisco IOS XE 17.9.1a

Bug ID Headline
CSCvz65764 Peer MSS shows incorrect value
CSCwb11389 NAT translation stops suddenly(IP nat inside doesn't work)
CSCwa84919 "Revocation-check crl none" does not failover
CSCwb42807 After Enforce Software Version (ZTP) completes successfully, it automatically rolls back
CSCwb04815 NHRP process takes more CPU when IP nhrp redirect is configured
CSCwa72273 ZBFW drops return packets post device upgrade
CSCwb25137 [XE NAT] Source address translation for multicast traffic fails with route-map
CSCwb18223 SNMP v2 community name encryption problem
CSCwb55683 Large number of IPSec tunnel flapping occurs when underlay is restored
CSCwb12647 Device crashes for stuck threads in cpp on packet processing
CSCwb24123 Registration of spoke fails with dissimilar capabilities
CSCwb21645 NAT traffic gets dropped when default route changes from OMP to NAT DIA route
CSCwa08847 ZBFW policy stops working after modifying the zone pair
CSCwb45422 Crash due to IPv4 reassembly
CSCvw50622 Nhrp network resolution not working with link-local ipv6 address
CSCwb29362 Evaluation of IOS-XE for OpenSSL CVE-2022-0778 and CVE-2021-4160
CSCwa74499 ZBFW seeing the SIP ALG incorrectly dropping traffic and resetting connection
CSCwa68540 FTP data traffic broken when UTD IPS is enabled in both the service VPN

CSCwb27900

WebSocket forking connection failed for Voice VRF scenario

CSCwa48122

SIP OAuth http request to fetch keys from CUCM fails after bootup as interface is down

CSCwc65697

Router crashes with CUBE WebSocket forking flows

Communications, Services, and Additional Information

  • To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.

  • To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.

  • To submit a service request, visit Cisco Support.

  • To discover and browse secure, validated enterprise-class apps, products, solutions and services, visit Cisco Marketplace.

  • To obtain general networking, training, and certification titles, visit Cisco Press.

  • To find warranty information for a specific product or product family, access Cisco Warranty Finder.

Cisco Bug Search Tool

Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software.

Documentation Feedback

To provide feedback about Cisco technical documentation, use the feedback form available in the right pane of every online document.

Troubleshooting

For the most up-to-date, detailed troubleshooting information, see the Cisco TAC website at https://www.cisco.com/en/US/support/index.html.

Go to Products by Category and choose your product from the list, or enter the name of your product. Look under Troubleshoot and Alerts to find information for the issue that you are experiencing.