Cisco CSR 1000v Series Cloud Services Routers Overview


Note

Explore the Content Hub, the all new portal that offers an enhanced product documentation experience.

  • Use faceted search to locate content that is most relevant to you.

  • Create customized PDFs for ready reference.

  • Benefit from context-based recommendations.

Get started with the Content Hub at content.cisco.com to craft a personalized documentation experience.

Do provide feedback about your experience with the Content Hub.


Virtual Router

The Cisco CSR 1000v Cloud Services Router is a cloud-based virtual router deployed on a virtual machine (VM) instance on x86 server hardware. It supports a subset of Cisco IOS XE software features and technologies, providing Cisco IOS XE security and switching features on a virtualization platform.

When the Cisco CSR 1000v is deployed on a VM, the Cisco IOS XE software functions as if it were deployed on a traditional Cisco hardware platform. You can configure different features depending on the Cisco IOS XE software image.

Secure Connectivity

The Cisco CSR 1000v provides secure connectivity from an enterprise network (such as in a branch office or data center) to the public or private cloud.

Technologies Supported by a Platform

A platform’s product landing page lists technology configuration guides for Cisco IOS XE technologies that the platform supports.

In each technology configuration guide, a Feature Information table indicates when a feature was introduced to the technology. For some features, the table also indicates when additional platforms have added support for the feature.

To determine whether a particular platform supports a technology, view the list of technology configuration guides posted on the platform’s product landing page. For example, see Cisco Cloud Services Router 1000v Series.

System Requirements

Software Images and Licenses

The following sections describe the licensing and software images for the Cisco CSR 1000v.

Cisco CSR 1000v Evaluation Licenses

Evaluation license availability depends on the software version:

The following evaluation licenses are available:

  • IPBASE technology package license with 10 Gbps maximum throughput

  • SEC technology package license with 5 Gbps maximum throughput

  • APPX technology package license with 5 Gbps maximum throughput

  • AX technology package license with 2.5 Gbps maximum throughput

If you need an evaluation license for the Security technology package, or for an AX technology package with higher throughput, contact your Cisco service representative.

For instructions on obtaining and installing evaluation licenses, see the “Installing CSL Evaluation Licenses for Cisco IOS XE 3.13S and Later” section of the Cisco CSR 1000v Software Configuration Guide .

Cisco CSR 1000v Software Licenses

Cisco CSR 1000v software licenses are divided into feature set licenses. Supported feature licenses depend on the release.

Current License Types

(Cisco IOS XE Everest 16.4.1 or later) The following license types are supported:

  • IPBase: Basic Networking Routing (Routing, HSRP, NAT, ACL, VRF, GRE, QoS)

  • Security: IPBase package + Security features (IP Security VPN, Firewall, MPLS, Multicast)

  • AX: IPBase package + Security features + Advanced Networking features (AppNav, AVC, OTV and LISP)

  • APPX Package: IPBase package + Advanced Networking features - Security features (IP security features not supported)

Legacy License Types

Three legacy technology packages—Standard , Advanced , and Premium —were replaced in Cisco IOS XE Release 3.13 with the IPBase , Security , and AX technology packages.

Features Supported by License Packages

For more information about the Cisco IOS XE technologies supported in the feature set packages, see the overview chapter of the Cisco CSR 1000v Series Cloud Services Router Software Configuration Guide.

Throughput

The Cisco CSR 1000v router provides both perpetual licenses and term subscription licenses that support the feature set packages for the following maximum throughput levels:

  • 10 Mbps

  • 50 Mbps

  • 100 Mbps

  • 250 Mbps

  • 500 Mbps

  • 1 Gbps

  • 2.5 Gbps

  • 5 Gbps

  • 10 Gbps

Throughput levels are supported for different feature set packages in each version. For more information about how the maximum throughput levels are regulated on the router, see the Cisco CSR 1000v Cloud Services Router Software Configuration Guide.

Memory Upgrade

A memory upgrade license is available to add memory to the Cisco CSR 1000v (Cisco IOS XE 3.11S or later). This license is available only for selected technology packages.

Additional Information about Licenses and Activation

For more information about each software license, including part numbers, see the Cisco CSR 1000v Router Datasheet . For more information about the standard Cisco IOS XE software activation procedure, see the Software Activation Configuration Guide, Cisco IOS XE Release 3S .

Software Image Nomenclature for OVA, ISO, and QCOW2 Installation Files

The Cisco CSR 1000v installation file nomenclature indicates properties supported by the router in a given release.

For example, these are filename examples for the Cisco IOS XE Everest 16.4.1 release:

  • csr1000v-universalk9.16.04.01.ova

  • csr1000v-universalk9.16.04.01.iso

  • csr1000v-universalk9.16.04.01.qcow2

The filename attributes are listed below, along with the release properties.

Table 1. OVA Installation Filename Attributes

Filename Attribute

Properties

Example:universalk9

Installed image package.

03.09.00a.S.153-2.S0a

Indicates that the software image is for the Cisco IOS XE 3.9.0aS release image (mapped to the Cisco IOS 15.3(2) release).

std or ext

Standard release or extended maintenance support release.

Features and Notes: Cisco IOS XE Fuji 16.7

Features

Features—Cisco IOS XE Fuji 16.7.1

The following new software features are supported on the Cisco CSR 1000v for Cisco IOS XE Fuji 16.7.1.

Notes

The following section includes important notes about the Cisco CSR 1000v for Cisco IOS XE Fuji 16.7.

Fingerprint Commands

The following two fingerprint commands are no longer supported: show license fingerprint and debug license fingerprint .

Service Engine Memory Usage

(Cisco IOS XE Fuji 16.7.1 or higher)—if a Cisco CSR 1000v is configured with 8 GB and it has a service-engine-heavy or control-plane-extra-heavy template installed, it allows the service engine to use up to 4 GB of the memory. (6 GB for the service engine if 12GB memory is configured, and up to 8 GB for the service engine if 16 GB is configured.)

(Cisco IOS XE Everest 16.6.x or lower)—if a Cisco CSR 1000v configured with 8 GB has a service-engine-heavy template installed, it allows the service engine to use up to 3 GB of the memory. (4 GB for the service engine if 12 GB and higher memory is configured).

Deferrals

Cisco IOS software images are subject to deferral. We recommend that you view the deferral notices at the following location to determine whether your software release is affected:

https://tools.cisco.com/security/center/publicationListing.x

Field Notices

Limitations and Restrictions in Cisco IOS XE Fuji 16.7

There are no new limitations and restrictions in Cisco IOS XE Fuji 16.7

Caveats

Overview

Caveats, or “bugs,” describe unexpected behavior. Severity 1 caveats are the most serious. Severity 2 caveats are less serious. Severity 3 caveats are moderate caveats. This section includes severity 1, severity 2, and selected severity 3 caveats.

Terminology

The Dictionary of Internetworking Terms and Acronyms contains definitions of acronyms that are not defined in this document:

http://docwiki.cisco.com/wiki/Category:Internetworking_Terms_and_Acronyms_(ITA)

Bug Search Tool

If you have an account on Cisco.com, you can also use the Bug Search Tool (BST) to find select caveats of any severity. To reach the Bug Search Tool, log into Cisco.com and go to https://tools.cisco.com/bugsearch/search .

If a defect that you have requested cannot be displayed, it may be because the defect number does not exist or the defect does not have a description available.

You can use to the Bug Search Tool to view new and updated caveats: https://tools.cisco.com/bugsearch/search .

For Best Bug Search Tool Results

For best results when using the Bug Search Tool:

  • In the Product field, enter Cloud Services Router.

  • In the Releases field, enter one or more Cisco IOS XE releases of interest. The search results include caveats related to any of the releases entered in this field.

The tool provides autofill while you type in these fields to assist in entering valid values.

A search using release number 16.6 should find the caveats for Cisco IOS XE Everest 16.6.1.

Field Notices

We recommend that you view the field notices for the current release to determine whether your software or hardware platforms are affected. You can access the field notices from the following location:

http://www.cisco.com/c/en/US/support/tsd_products_field_notice_summary.html

Caveats: Cisco IOS XE Fuji 16.7.1

Open Caveats—Cisco IOS XE Fuji 16.7.1

Caveat ID Number

Description

CSCvf53023

ISRv: Hot add of multiple vnics fails to add some

CSCvf53724

Crash when delete an interface on CSR1000v

Resolved Caveats—Cisco IOS XE Fuji 16.7.1

Caveat ID Number

Description

CSCvf63269

After on the vnic edit on the fly changes - LAN-SRIOV sub interface ping fails after Reboot of ISRv

CSCvf93716

AWS/Azure - unable to ssh into CSR1000v if configured with 192.x.x.x subnet

Caveats: Cisco IOS XE Fuji 16.7.2

Open Caveats—Cisco IOS XE Fuji 16.7.2

Caveat ID Number

Description

CSCve08418

IPsec/IKEv2 Installation Sometimes Fails With Simultaneous Negotiations

CSCvf89894

GETVPN // Primary KS sending rekey first to GMs and then to Secondary KS via scheduled rekey

CSCvg09010

KS merge fails for groups with TBAR due to PST update failure on primary KS

CSCvg90226

Crypto Traceback: Router crash at Crypto Support segmentation fault

CSCvg98890

IOS-XE GM router might crash after the rekey method is changed from unicast to multicast

CSCvh32216

Sporadic Crashes Due to IPSec (during ISAKMP AAA interaction)

CSCvi11665

Virtual-service guest IP accepts broadcast address

CSCvi63653

AZURE: Cisco CSR 1000v crashing with CPP stuck thread

CSCvj29777

Cisco CSR 1000v High platform memory utilization reported with memory add-on License

CSCvj46153

Memory corruption after non zero REFCOUNT during IPSEC sibling allocation

Resolved Caveats—Cisco IOS XE Fuji 16.7.2

Caveat ID Number

Description

CSCuv90519

Map is not updated with socket change on local address change

CSCvd04871

Crash after IWAN does a recalculation in the RIB

CSCvd90560

Incorrect channel next-hop for branch to branch traffic

CSCve15722

The second and later PfRv3 VRF configs are missing after reload

CSCvf07576

router reloaded when doing show BGP RT filter routes

CSCvf16626

IWAN router unexpectedly reboots while updating pmi policy

CSCvf31193

CSR1k: Crash observed @ __be_cent_br_check_valid_ndb_prefix

CSCvf51773

NHRP redirect overriding routing table

CSCvf73693

Cisco ISR 4321 crash @ BGP Router for bfd bgp when sending traffic

CSCvg45247

Site-prefix learning: Unexpected Reboot in "IP RIB Update" Process after "no domain" default

CSCvg52560

Traceback: OCSP creates a large number of lists and triggers a memory problem

CSCvg54149

TCP socket flap due to keepalive timeout with message stuck in queue for Multi-VRF dual BR setup

CSCvg62161

Prefix SID delete after SSO

CSCvg74048

PKI: All SCEP requests fail with "Failed to send the request. There is another request in progress"

CSCvg75315

ASR1K BGP scanner crash when change VRF and BGP configuration

CSCvg94908

Mgig stack keeps crashing while configuring with Radius commands

CSCvh17481

PKI: Device crash during crl download with multiple CDP URI

CSCvh47443

Spoke-to-spoke site-prefix reachability checking should be removed

CSCvh51038

[168] OSPF process crash on P router when "router ospf <>" is unconfigured on another PE or P router

CSCvh57108

CPUHOG on QoS statistics collection for DMVPN. QoS crash with DMVPN/NHRP.

CSCvh57340

DMVPN: Crypto session stuck into UP-IDLE status after reconfiguring tunnel

CSCvh58909

OSPFv3 cost calculation not correct in some specific topology

CSCvh66033

IKEv2 - Crash with segmentation fault when debugs crypto ikev2 are enabled

CSCvh95376

ASR1k reloaded after IPv4 RR stress test

CSCvi01558

iBGP dynamic peer using TTL 1

CSCvi08470

OSPF: process crashed when the interface priority is configured for 0

CSCvi54878

Memory leaks seen at PKI_name_list_add(0xa139cc0)+0x3e

CSCvi74088

Link local multicast packets are received when the SVI is in down state

CSCvi83419

Router crash when removing route-target and with hard clear

CSCvj16818

ISR 4431 crashing immediately following auto-CA certificate renewal

CSCvj23301

IOS: Crypto Ruleset fails to be deleted