New and Changed Feature Information

This chapter lists all the features that have been added or modified in this guide. The table also contains references to these feature documentation sections.

System Security Features Added or Modified in IOS XR Release 6.5.x

Feature Description Changed in Release Where Documented

MACSec Support on Cisco ASR 9901 Routers

MACSec is supported on the Cisco ASR 9901 Routers running Cisco IOS XR 64-bit operating systems.

Release 6.5.1

Implementing MACsec Encryption chapter

Hardware Support for MACSec

IS-IS Authentication with Keychain

New cryptographic algorithms such as, AES-128-CMAC-96, HMAC-SHA-256, and HMAC-SHA1-96 are added under keychain infra as part of this feature. These algorithms provide more secured authentication.

Release 6.5.1

Implementing Keychain Management chapter

Configuring the Cryptographic Algorithm

OSPF Authentication with Keychain

New cryptographic algorithms such as, HMAC-SHA-256 and HMAC-SHA1-96 are added under keychain infra as part of this feature. These algorithms provide more secured authentication.

Release 6.5.1

Implementing Keychain Management chapter

Configuring the Cryptographic Algorithm

MACsec with Local EAP-TLS Authentication

Feature is introduced.

Release 6.5.1

MACSec Using EAP-TLS Authentication chapter

MACsec with Local EAP-TLS Authentication