Support for the X25 over TCP (XOT)

X.25 is an ITU standard for packet switching Wide Area Network (WAN). This is used in the Telecommunication industry over serial interfaces that are replaced by IP Network. An X25 connection can be established by using a PAD connection similar to Telnet/SSH. The IR1101 router has only one asynchronous serial interface where features of X25 are not supported. However, we can communicate to the X25 edge devices using by using feature TCP over X25 (XOT). With XOT, we can directly establish a PAD connection to X25 edge devices. Also, we can assign default or customized profiles to the access-groups by changing various parameters of X25 packets.

For additional information about XOT for IOS-XE, see the following:

Wide-Area Networking Configuration Guide: X.25 and LAPB, Cisco IOS XE

Support for YANG Data Models (Call-home)

The YANG models supported for the call-home feature are similar to the earlier releases of Cisco-IOS-XE, and the same is supported on 17.1 release of IOS-XE on IR1101. The following references are available for earlier YANG models:

For additional information about call-home for IOS-XE, see the following:

Software Activation Configuration Guide, Cisco IOS XE Release 3S

Support for Model Driven support for GNMI Telemetry Dial-In

Similar to YANG models, there is support on IOS-XE for open source models defined by Google and is referred as Google Network Management Interface (GNMI). Configurations of GNMI can be verified either with Secure or Insecure Mode.

Secure Mode

Secure Mode establishes secure connection using OpenSSL certificates between client and server. It sends GNMI telemetry updates using open source gnmi_cli tool.

Insecure Mode

Insecure Mode sends GNMI telemetry updates between client and server using open source pygnmi tool.

For additional information about GNMI Telemetry see the following reference:

Programmability Configuration Guide, Cisco IOS XE

Yang Data Model Support for Scada

The Cisco IOS XE 17.1.1 introduces support for the Cisco IOS XE YANG model for the Scada System. Previous releases already provided Yang models in other areas.

Option to Enable or Disable USB Access

USB flash drives offer inexpensive and easy storage space for the routers to store the images, configuration files and other files.

Note	The IR1101 supports ext2 and vfat file systems for USB flash drives.

The IR1101 supports hot plug/unplug of USB flash drives. To access the USB flash drive, insert the device into Router's USB interface. Once the USB is recognized, an alert message is seen on the console:

Aug 1 11:08:53.198 PDT: %IOSD_INFRA-6-IFS_DEVICE_OIR: Device usbflash0 added

After this message is seen, the USB flash drive is accessible. Users can access the USB contents using the dir usbflash0: command:

Device#dir usbflash0:
Directory of usbflash0:/
 
5 drwx 512 Aug 23 2019 10:42:18 -07:00 System Volume Information
6 -rwx 35 Aug 27 2019 17:40:38 -07:00 test.txt
 
206472192 bytes total (206470144 bytes free)
Device#

Contents can be copied to and from the USB flash drive using the copy command. Once the copy is complete, a log message showing number of bytes copied is displayed.

Device#copy flash:test.txt usbflash0:
Destination filename [test.txt]? <Enter>
Copy in progress...C
35 bytes copied in 0.020 secs (1750 bytes/sec)
Device#

While hot plug/unplug of a USB flash drive is supported, the functionality comes with security vulnerabilities. To prevent users from copying sensitive information to the USB flash drive, USB enable/disable functionality has been added.

By default, the USB flash drive is enabled. If a user wishes to disable USB, they can do so using the disable command:

Device# config terminal
Device(config)#platform usb disable
Device(config)#end

Once the USB flash drive has been disabled, the file system is not shown on the Device and syslog messages will not be displayed when the USB is inserted. Users will not be able to access the contents of the USB.

For example:

Device#dir usbflash0:
dir usbflash0:
^
% Invalid input detected at '^' marker.
 
Device#

The USB is enabled by issuing a no with the disable command:

Device#config terminal
Device(config)#no platform usb disable
Device(config)#end

The USB status can be displayed using the following command:

Device#show platform usb status
USB enabled
Device#

Day 0 Web User Interface

Note	A Day 0 configuration is defined as a device that is fresh out of the box with no startup-configuration.

Effective with IOS-XE Release 17.1.1, the Day 0 Web User Interface (WebUI) will be supported on the IR1101. Day 0 WebUI is supported only on LAN ports. These are FastEthernet ports 0/0/1 – 0/0/4 on the IR1101. Connect either a Windows, Linux or Mac PC/Laptop to one of the LAN ports of the IR1101 and boot the router on Day 0. The PC/Laptop should be configured to obtain an IP address through DHCP.

Once the router boots up in Day 0, the PC/Laptop will acquire IP address in 192.168.1.x network and can access WebUI using the IP address of 192.168.1.1 with any browser. After the configuration is applied through the WebUI, the router will display the message "Day 0 config done. Stopping autoinstall"

Cisco Catalyst IR1101 Rugged Series Router

IR1101 documentation landing page.

Product Independent Documentation

Cisco IOS XE 17.x

Cisco SD-WAN

Downgrading from 16.12.1 to 16.11.1x

Symptoms: If an IR1101 with RJ45 Gig0/0/0 WAN is downgraded from 16.12.1 to 16.11.1 x or earlier, it will cause the Gig0/0/0 to fail to come up because its media-type is set to media-type sfp. The problem occurs because 16.12.1 or later automatically selects the correct media-type of the Gig0/0/0 interface, while 16.11.1x and earlier does not have that capability.

Workaround: Specifically set the correct media-type for the Gig0/0/0 interface (e.g. media-type rj45) prior to any downgrade.

An IR1101 operating in SDWAN Controller-mode must not downgrade to Cisco IOS XE Release 17.1.1. This is not supported for SDWAN. Instead, use Cisco IOS XE Release 16.12.1.

Note	Cisco IOS XE Release 16.12.1 supports separate Autonomous (non-SDWAN) and SDWAN Controller-mode images.

P-LTEA-EA/P-LTEA-LA pluggable module

When operating on release 17.1.1, if you install a P-LTEA-EA/P-LTEA-LA pluggable module into the Expansion Module (IRM-1100-SP or IRM-1100-SPMI), it will not function correctly. Upgrading to release 17.2.x will correct this issue.