Read Me First
 Note |
To achieve simplification and consistency, the Cisco SD-WAN solution has been rebranded as Cisco Catalyst SD-WAN. In addition, from Cisco IOS XE SD-WAN Release 17.12.1a and Cisco Catalyst SD-WAN Release 20.12.1, the following component changes are applicable: Cisco vManage to Cisco Catalyst SD-WAN Manager, Cisco vAnalytics to Cisco Catalyst SD-WAN Analytics, Cisco vBond to Cisco Catalyst SD-WAN Validator, Cisco vSmart to Cisco Catalyst SD-WAN Controller, and Cisco Controllers to Cisco Catalyst SD-WAN Control Components. See the latest Release Notes for a comprehensive list of all the component brand name changes. While we transition to the new names, some inconsistencies might be present in the documentation set because of a phased approach to the user interface updates of the software product. |
Related References
User Documentation
Communications, Services, and Additional Information
-
Sign up for Cisco email newsletters and other communications at: Cisco Profile Manager.
-
For information on the latest technical, advanced, and remote services to increase the operational reliability of your network visit Cisco Services.
-
To browse and discover secure, validated enterprise-class apps, products, solutions, and services, visit Cisco Devnet.
-
To obtain general networking, training, and certification titles from Cisco Press Publishers, visit Cisco Press.
-
To find warranty information for a specific product or product family, visit Cisco Warranty Finder.
-
To view open and resolved bugs for a release, access the Cisco Bug Search Tool.
-
To submit a service request, visit Cisco Support.
Documentation Feedback
To provide feedback about Cisco technical documentation use the feedback form available in the right pane of every online document.
Release Notes for Cisco SD-WAN Control Components, Cisco Catalyst SD-WAN Control Components Release 20.12.x
Note |
To achieve simplification and consistency, the Cisco SD-WAN solution has been rebranded as Cisco Catalyst SD-WAN. In addition, from Cisco IOS XE SD-WAN Release 17.12.1a and Cisco Catalyst SD-WAN Release 20.12.1, the following component changes are applicable: Cisco vManage to Cisco Catalyst SD-WAN Manager, Cisco vAnalytics to Cisco Catalyst SD-WAN Analytics, Cisco vBond to Cisco Catalyst SD-WAN Validator, Cisco vSmart to Cisco Catalyst SD-WAN Controller, and Cisco Controllers to Cisco Catalyst SD-WAN Control Components. See the latest Release Notes for a comprehensive list of all the component brand name changes. While we transition to the new names, some inconsistencies might be present in the documentation set because of a phased approach to the user interface updates of the software product. |
These release notes accompany the Cisco Catalyst SD-WAN Control Components, Release 20.12.x, which provides Cisco Catalyst SD-WAN capabilities. They include release-specific information for Cisco Catalyst SD-WAN Controllers, Cisco Catalyst SD-WAN Validators, Cisco SD-WAN Manager as applicable to Cisco Catalyst SD-WAN.
Related Releases
For release information about Cisco IOS XE Catalyst SD-WAN devices, refer to Release Notes for Cisco IOS XE Catalyst SD-WAN device, Cisco IOS XE Release 17.12.x.
What's New for Cisco Catalyst SD-WAN Control Components Release 20.12.x
Cisco is constantly enhancing the Cisco Catalyst SD-WAN solution with every release and we try and keep the content in line with the latest enhancements. The following table lists new and modified features we documented in the Configuration, Command Reference, and Hardware Installation guides.
| Feature | Description |
|---|---|
|
Cisco Catalyst SD-WAN Getting Started Guide |
|
|
Support for Certificates Without the Organizational Unit Field |
Enterprise certificates that you install on devices do not require the Organizational Unit (OU) field to be defined. Earlier, this field was used as part of the authentication of a device. However, if a signed certificate includes the OU field, the field must match the organization name configured on the device. |
|
Cisco Catalyst SD-WAN Systems and Interfaces |
|
|
Cisco Catalyst SD-WAN Remote Access Configuration in SSL-VPN Mode |
This feature enables you to configure the following Cisco Catalyst SD-WAN Remote Access features for a device in SSL-VPN mode, using Cisco SD-WAN Manager: — Private IP Pool — Authentication — AAA Policy |
|
The following new features are introduced to the feature profiles: — In the System Profile: Flexible Port Speed. — In the Transport Profile: OSPFv3 IPv4 Routing, OSPFv3 IPv6 Routing, T1/E1 Controller — Subfeatures for transport VPN: OSPFv3 IPv4 Routing, OSPFv3 IPv6 Routing, T1/E1 Serial, DSL PPPoE, DSL PPPoA, DSL IPoE, Ethernet PPPoE — In the Service Profile: OSPFv3 IPv4 Routing, OSPFv3 IPv6 Routing, EIGRP Routing, Object Tracker, Object Tracker Group — Subfeatures for service VPN: OSPFv3 IPv4 Routing, OSPFv3 IPv6 Routing, EIGRP Routing, Multilink Controller, Object Tracker, Object Tracker Group — The Route leak to Global VPN option is added to the Route Leak parameter in the service VPN. |
|
|
This feature supports dual devices site configuration using configuration groups, for redundancy. |
|
|
Device tagging has the following new functionalities: — When you add devices to a configuration group using rules, you can choose Match All or Match Any. — You can use Starts With and Ends With operator conditions when you add devices to a configuration group using rules. — In addition, the button formerly called Add New Tag is now Create New Tag. |
|
|
VFR (Virtual Fragmentation Reassembly) and Underlay Fragmentation |
The VFR mechanism reassembles fragmented packets in Cisco Catalyst SD-WAN networks. The packets are fragmented for better transportion and are fragmented while they are travelling through a VFR enabled Cisco IOS XE Catalyst SD-WAN device. Underlay fragmentation fragments packets in the underlying layer of a network. Underlay fragmentation is introduced to easily transport larger packets that exceed the (MTU). |
|
Enhanced Cisco Catalyst SD-WAN Manager Dashboard for Multitenancy |
This feature is enhanced to support consistent user experience in tenant and service providers dashboard. The Cisco Catalyst SD-WAN Manager dashboard provides visibility into the available resources on shared devices. |
|
This feature enables support for Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access Control System (TACACS) authentication in a multitenant deployment on WAN edge devices. |
|
|
This feature is enhanced to support NAT to enforce per tenant maximum limit on the translations. From this release Tier is called Resource Profile in Cisco SD-WAN Manager. |
|
|
Cisco Catalyst SD-WAN Routing Configuration Guide |
|
|
A transport gateway operates as the hub in a hub-and-spoke routing topology. It offers the advantage of achieving this topology without requiring complex routing policy configuration. The following are some uses of a transport gateway:
|
|
|
Hub-and-spoke configuration simplifies the process of configuring a hub-and-spoke topology, making complex centralized control policy unnecessary. Instead, the configuration requires only a few simple configurations: a single command each on (a) the Cisco SD-WAN Controllers serving a network, (b) a router that serves as a hub, and (c) the routers that operate as spokes. |
|
|
You can use affinity groups, affinity group preference, and translation of RIB metrics to ensure symmetric routing of traffic flows across devices in a network. Symmetric routing accommodates various network topologies, including Multi-Region Fabric. To support symmetric routing beyond the overlay network, transport gateways can translate RIB metrics to control plane protocols such as BGP and OSPF. This extends the path preference configuration to routers outside of the overlay network, such as routers in a data center LAN. |
|
|
Cisco Catalyst SD-WAN Policies |
|
|
With this feature, you can apply the recommendations that are available on vAnalytics to Cisco SD-WAN Manager AAR policy and view the applied recommendations on Cisco SD-WAN Manager. |
|
|
When you configure a loopback interface as an ingress or egress transport interface, this feature enables you to collect loopback interface reports in FNF records and is supported for IPv4 and IPv6. A show command is enhanced on the device to display the binding relationship between the loopback and physical interfaces. |
|
|
This feature lets you configure intercepts in the Cisco Catalyst SD-WAN multitenancy mode, and also provides support for Cisco Catalyst SD-WAN Manager clusters. |
|
|
This feature introduces logging enhancements to Cisco Flexible NetFlow for Cisco SD-WAN Analytics. The output of the show flow record command has been enhanced for IPv4 and IPv6 flow records. |
|
|
Without enhanced application-aware routing enabled, Cisco IOS XE Catalyst SD-WAN device require several minutes to switch traffic from one network path to another to meet SLA requirements when the loss, latency, and jitter exceed specific threshold values. Enabling enhanced application-aware routing speeds the detection of tunnel performance issues. This enables Cisco IOS XE Catalyst SD-WAN devices to redirect traffic away from tunnels that do not meet SLA requirements. |
|
|
Cisco Catalyst SD-WAN Security |
|
|
This feature adds support for Snort engine version 3, which is an upgrade from version 2. |
|
|
IPv6 GRE or IPsec Tunnels Between Cisco Catalyst SD-WAN and Third-Party Devices |
This feature allows you to configure an IPv6 GRE or IPSEC tunnel from a Cisco IOS XE Catalyst SD-WAN device device to a third-party device over a service VPN. |
|
This feature adds support for enabling MACsec using Cisco SD-WAN Manager for Cisco Catalyst SD-WAN devices on the service side. With MACsec enabled using Cisco SD-WAN Manager, communication between devices in the service VPN is protected, thus enhancing security for the service VPN. |
|
|
The OMP routes are typically present in the IOS RIB. The OMP routes aren't present in the IOS FIB containing entries that map destination IP addresses to next-hop IP addresses. The IOS FIB operates independently of the control plane, receiving the forwarding instructions from a centralized Cisco SD-WAN Controller instead of consuming the OMP routes from the IOS RIB. Starting from Cisco IOS XE Catalyst SD-WAN Release 17.12.1a, the OMP prefixes get added to the IOS FIB which improves IP-SGT binding. |
|
|
Cisco Catalyst SD-WAN Cloud OnRamp |
|
|
AWS Cloud WAN is a managed wide-area network (WAN) service. This feature enables you to easily connect and route remote sites, regions and cloud applications over the AWS global network. You can build and operate the wide-area networks using simple network policies and get a complete view of the global network. |
|
|
For the Microsoft Azure West Central US and Australia East regions, added the Standard_D16_v5 Azure instance type, which includes 16 CPU cores and 64 GB of memory. You can deploy this type of instance for SKU scale values of 20, 40, 60, and 80. |
|
|
You can deploy a Cisco Catalyst 8000v Edge Software as the Interconnect Gateway in the Equinix fabric and connect an Cisco Catalyst SD-WAN branch location to the Interconnect Gateway. |
|
|
You can add or modify additional properties of Virtual Private Cloud (VPC) and Virtual Networks (VNets) tags that are associated with a connection. |
|
|
You can identify the gaps or disconnects between Cisco SD-WAN Manager intent and what is realized in the cloud. The audit management helps in understanding if the interconnect cloud and provider states are in sync with the Cisco SD-WAN Manager state. |
|
|
Cisco Catalyst SD-WAN Policy Groups |
|
|
This feature provides a simple, reusable, and structured approach for configuring policies in Cisco Catalyst SD-WAN. You can create a policy group, that is, a logical grouping of policies that is applied to one or more sites or a single device at the site in the network. To deploy the policy group to devices, the devices must be managed by a configuration group in Cisco Catalyst SD-WAN. You can configure policies based on features that are required, recommended, or uniquely used, and then combine them to complete a policy configuration. |
|
|
This feature provides a simple, reusable, and structured approach for configuring security policies in Cisco Catalyst SD-WAN. You can create a security policy, that is, a logical grouping of policies that is applied to one or more sites or a single device at the site in the network. To deploy the policy group to devices, the devices must be managed by a configuration group in Cisco Catalyst SD-WAN. You can configure policies based on features that are required, recommended, or uniquely used, and then combine them to complete a policy configuration. |
|
|
This feature allows you to provision a Mesh or a Hub and Spoke topology policy which is applied to Cisco Catalyst SD-WAN Controllers. This allows exchange of data traffic between two or more Cisco IOS XE Catalyst SD-WAN devices. |
|
|
Cisco Catalyst SD-WAN Monitor and Maintain |
|
|
In the heatmap view, a grid of colored bars displays the alarms as Critical, Major, or Medium & Minor. You can hover over a bar or click it to display additional details at a selected time interval. The intensity of a color indicates the frequency of alarms in a severity level. |
|
|
In the heatmap view, a grid of colored bars displays the events as Critical, Major, or Minor. You can hover over a bar or click it to display additional details at a selected time interval. The intensity of a color indicates the frequency of events in a severity level. |
|
|
This feature introduces enhanced audit logging to monitor unauthorized activity. To view these audit logs, from the Cisco SD-WAN Manager menu, choose . |
|
|
This feature provides enhancements to the Network-Wide Path Insight feature to include support for multiple VPNs for traces, the ability to generate synthetic traffic for traces, options for grouping trace information, support for auto-on tasks, new information on insight displays, and expanded insight summaries. |
|
|
Cisco Catalyst SD-WAN NAT |
|
|
You can configure NAT66 to use multiple WAN Links to direct local IPv6 traffic to exit directly to the internet. |
|
|
Cisco Catalyst SD-WAN Remote Access |
|
|
Cisco Catalyst SD-WAN Remote Access Configuration in SSL-VPN mode Using Cisco SD-WAN Manager |
This feature enables you to configure Cisco Catalyst SD-WAN Remote Access for a device in SSL-VPN mode, using Cisco SD-WAN Manager. |
|
User Login Options |
|
|
You can to configure Cisco SD-WAN Manager to lock out users who have not logged in for a designated number of consecutive days. |
|
|
You can configure Cisco SD-WAN Manager to lock out users who have made a designated number of consecutive unsuccessful login attempts within a designated period. |
|
|
You can configure Cisco SD-WAN Manager to require Duo multifactor authentication (MFA) to verify the identity of users before they can log in to Cisco SD-WAN Manager. |
|
|
Cisco IOS XE SD-WAN Qualified Command Reference |
|
|
The following troubleshooting commands are added:
|
|
|
This command allows you to lock out users who have made a designated number of consecutive unsuccessful login attempts within a designated period, or who have not logged in for a designated number of days |
|
|
This command allows you to require Duo multifactor authentication (MFA) to verify the identity of users before they can log in. |
|
| Feature | Description |
|---|---|
|
Cisco Catalyst SD-WAN Security |
|
|
This feature enhances the security dashboard to provide greater flexibility while troubleshooting security threats down to a device level in Cisco Catalyst SD-WAN. |
|
|
Cisco Catalyst SD-WAN Analytics |
|
|
Easy Onboarding of Cisco SD-WAN Analytics into Cisco Catalyst SD-WAN Manager |
This feature enables you to easily onboard Cisco SD-WAN Analytics into Cisco SD-WAN Manager. |
|
Cisco Catalyst SD-WAN Monitor and Maintain |
|
|
Global Network View with Network-Wide Path Insight Integration |
Network-Wide Path Insight is now integrated with the global network view. This feature also introduces enhancements to the geomap view by providing real-time monitoring of the health of each site. Global Topology View is now called as Global Network View in Cisco SD-WAN Manager. |
Important Notes, Known Behaviors, and Workarounds
-
If your ConfigDB (Neo4j) username contains a – (hyphen), the ConfigDB upgrade fails, for example, db-admin. Remove the hyphen before you upgrade the ConfigDB.
-
The following enhancements are available in Cisco SD-WAN Manager while configuring multiple IdPs for single sign-on:
-
You can set one IdP as a default IDP.
-
While configuring a domain name, you have the option to enter a domain name with a wildcard (*), which will make that domain the default domain. If a default domain is configured, you can log in to a domain with just the user ID (john) without requiring you to enter an user ID in email address format (john@mystore.com).
-
-
From Cisco Catalyst SD-WAN Manager Release 20.12.x, Cisco SD-WAN Manager accepts only HTTP POST requests for logging out from Cisco SD-WAN Manager. It does not support the use of the GET method for this function.
Refer to developer.cisco.com for more details.
Cisco SD-WAN Manager Upgrade Paths
For compatibility information and server recommendations, see Cisco Catalyst SD-WAN Controller Compatibility Matrix and Server Recommendations.
For information about Cisco SD-WAN Manager upgrade procedure, see Upgrade Cisco SD-WAN Manager Cluster.
| Starting Cisco SD-WAN Manager Version | Destination Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
20.6.x |
20.7.x |
20.8.x |
20.9.x |
20.10.x |
20.11.x |
20.12.x |
|||||||
|
20.6.x |
Not Supported |
Direct Upgrade |
Direct Upgrade |
Direct Upgrade |
Step upgrade from 20.6.1, 20.6.2, and 20.6.3 either to 20.6.4 or 20.9.x. or Direct upgrade from 20.6.4 and later releases. For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Step upgrade from 20.6.1, 20.6.2, and 20.6.3 either to 20.6.4 or 20.9.x. or Direct upgrade from 20.6.4 and later releases. For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Step upgrade from 20.6.1, 20.6.2, and 20.6.3 either to 20.6.4 or 20.9.x. or Direct upgrade from 20.6.4 and later releases. For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
||||||
|
20.7.x |
Not Supported |
Not Supported |
Direct Upgrade |
Direct Upgrade |
Step upgrade from 20.9.x For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Step upgrade from 20.9.x For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Step upgrade from 20.9.x For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
||||||
|
20.8.x |
Not Supported |
Not Supported |
Not Supported |
Direct Upgrade |
Step upgrade from 20.9.x For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Step upgrade from 20.9.x For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Step upgrade from 20.9.x For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
||||||
|
20.9.x |
Not Supported |
Not Supported |
Not Supported |
Not Supported |
Direct upgrade For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Direct Upgrade For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
Direct Upgrade For cluster upgrade procedure using CLI: request nms configuration-db upgrade
|
||||||
|
20.10.x |
Not Supported |
Not Supported |
Not Supported |
Not Supported |
Not Supported |
Direct Upgrade |
Direct Upgrade |
||||||
|
20.11.x |
Not Supported |
Not Supported |
Not Supported |
Not Supported |
Not Supported |
Not Supported |
Direct Upgrade |
||||||
*To check the free disk space using CLI,
-
Use the vshell command to switch to vshell.
-
In vshell, use the df -kh | grep boot command.
**Cluster upgrade must be performed using CLI
Cluster upgrade must be performed using CLI
-
The cluster upgrade procedure must be performed only on one node in the cluster
-
Enter login credentials, if prompted. Login credentials are prompted if all Cisco SD-WAN Manager server establish control connection with each other. After a successful upgrade, all configuration-db services are UP across the cluster and the application-server is started.Enter login credentials, if prompted. Login credentials are prompted if all Cisco SD-WAN Manager server establish control connection with each other. After a successful upgrade, all configuration-db services are UP across the cluster and the application-server is started.
Resolved and Open Bugs for Cisco SD-WAN Controllers 20.12.x
Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.3
Resolved Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.3
|
Identifier |
Headline |
|---|---|
|
Unable to configure tracker group when object tracker is configured as route. |
|
|
Cisco SD-WAN Manager Log Poisoning bypass |
|
|
Cisco SD-WAN Manager Audit Log CSV payload injection |
|
|
Cisco SD-WAN Manager Malicious File Upload vulnerability |
|
|
The DCA folder is piling UP with small files which is exhausting the space. |
|
|
Cisco SD-WAN Manager is creating config with 3 x "router eigrp" configs which is not supported. |
|
|
APN profile password was found in plain text when Cellular profile template was configured. |
|
|
Cisco SD-WAN Manager GUI becomes unavailable due to authentication errors against configuration-db. |
|
|
Cloud on ramp for multicloud deploy fails with error : Azure Error: RequestDisallowedByPolicy |
|
|
Cisco SD-Branch: Failed to create network design: Failed to update one or more device profiles |
|
|
Cluster creation may fail due to store ID mismatch in neo4j. |
|
|
The HSEC license installation from the workflow does not complete. |
|
|
/var/log/vconfd is filled with repeated messages pointing to Python cb_get_object error. |
|
|
LAN intf name in dual router config group workflow is getting modified after CG creation. |
|
|
MT: Centralized policy push with overlapping sites is returing success but Cisco SD-WAN Controller rejects it. |
|
|
Cisco SD-WAN Manager Template push failure | Failed to update configuration - CLI generation failed. |
|
|
Control Session PPS increase and reset during the upgrade for Cisco vEdge device. |
|
|
Replication takes 4+ hours to inject the 100MB of data on standby cluster-no make primary to switch |
|
|
The Auto-Correct audit feature is deleting the cloudgateways in Multicloud after connectivity issues. |
|
|
Cisco SD-WAN Manager - Unable to add devices to Cloud on Ramp for SaaS due to timeout while loading device list. |
|
|
The usage of policy group for security configuration random push error. |
|
|
Alarm:Analytics is enabled but relevant license is not present. |
|
|
Cannot scroll up/down the drop down check list properly. |
|
|
Fix error message on Cisco SD-WAN Manager when deploying configuration group have policy group attached. |
|
|
Any new created Policy-Config will effact the update history of other Policy-Groups. |
|
|
During periodic audit of Azure CoR if there is an AuthorizationFailed, Cisco SD-WAN Manager will remove CoR. |
|
|
API call for dataservice/management/elasticsearch/index/size/estimate is failing. |
|
|
"Set CSR Properties" for Controllers Cert Auth setting on Cisco SD-WAN Manager GUI is not getting disabled |
|
|
Dual device site workflow is not generating correct key for vrrp IP address variable. |
|
|
The SNMPv3 is not listening on IPv6 interface after Cisco SD-WAN Manager reload. |
|
|
The vdaemon file is incomplete when generating a Cisco SD-WAN Manager admin-tech using GUI. |
|
|
CLI Add-On Template's Config Diff shows wrong configuration. |
|
|
20.9: IP Subnet Pool is not discovered when creating Azure CGW using existing vHUB. |
|
|
The DCA process is continuously restarting after upgrade to 20.9.3.2 |
|
|
After upgrading the Cisco SD-WAN Manager from 20.6.x to 20.9.3 ES, the standby Cisco SD-WAN Manager reports down status. |
|
|
API call (dataservice/device/tloc) retrieve an additional color which is not present on the device. |
|
|
Cisco SD-WAN Manager is not starting new traces due to high scaled full mesh network. |
|
|
20.9/20.12: enforce character length validation for user, usergroup, password via confD |
|
|
Cisco SD-WAN Manager GUI becomes very slow when a large template. |
|
|
The option to add Switchport in the Configuration Group Templates is not available. |
|
|
Cannot overwrite a FW security policy with a CLI add-on template, configuration is not seen on device |
|
|
Device template fails on 20.6.5.2 due to SNMP community string. |
|
|
Solution: "Failed to create/initialize database : vmanagedb" and node1 UI is not accessible. |
|
|
20.13: Missing control-connection CLI Generation in CG. |
|
|
"Routing DNA Essentials: Tier 0: 05M" is not available to choose in Cisco SD-WAN Manager GUI |
|
|
Cisco SD-WAN Manager 20.12.1 / admintech upload tool is failing. |
|
|
Cisco SD-WAN Manager: Unable to login SSH including ciscotacro/ciscotacrw. |
|
|
SDCI-Azure connection creation failsAzure Error:PublicIpWithBasicSkuNotAllowedOnExpressRouteGateways |
|
|
Intermittently the SSO user with tenantadmin privilege only getting basic access. |
|
|
Issue with accessing Cisco SD-WAN Manager 20.6.6 GUI using upper-case letter on TACACS username |
|
|
On-prem: New cloud services OTP doesn't get updated via API if OTP is already present in db. |
|
|
Cisco SD-WAN Manager DR fails in the event that a vBond is unreachable. |
|
|
DR Replication taking 2 hours for ~100 MB Size |
|
|
Licenses unapplied from License Management in Cisco SD-WAN Manager after DR failover/failback. |
|
|
The ssh and ntp are enabled by default in config. groups |
Open Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.3
|
Identifier |
Headline |
|---|---|
|
Change partition task stuck, during Cisco SD-WAN Manager upgrade activation from 20.12 to 20.14. |
|
|
Cisco Catalyst SD-WAN Controller upgrade from 20.9.4.1-li to 20.12.2-li fails because of CDB boot error. |
|
|
Unable to push template due to "no ip cef distributed" |
|
|
Fail to deploy config group when AAA accounting "start stop" is set to False. |
|
|
Lan Tracker: Configuration are not saved with correct ip address. |
|
|
Cisco SD-WAN Manager || Intermittent request time out while trying to access administration user groups. |
|
|
The ip name-server command not pushed to Cisco IOS XE Catalyst SD-WAN device. |
|
|
Cisco IOS XE Catalyst SD-WAN device- dns-server addresses in dhcp config are pushed in wrong order. |
|
|
Multiple alarms APIs RBAC is not working as expected. |
|
|
Failed to deploy device with Policy Group. Connection event can be set for inspect action only. |
|
|
6 + 6 DR cluster elects replication leader which has no config-db and fails to connect to neo4j |
|
|
The statistics-database stops importing data with reason : Bulk insertion failur |
Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.2
Resolved Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.2
| Identifier | Headline |
|---|---|
|
20.12.2: Alarms corresponding to events are not showing up on Cisco SD-WAN Manager for few devices with DR configuration. |
|
|
Cisco SD-WAN Manager Malicious File Upload vulnerability |
|
|
Cannot overwrite a FW security policy with a CLI add on template. |
|
|
SD-WAN workflows ST and MT VNF primary image path is missing additional file path specified in virtual image page. |
|
|
Edit of variables in additional settings is not working. |
|
|
Unable to add more than 30 VPN Interface SVI. |
|
|
Cisco Catalyst SD-WAN Controller withdraws TLOC RIB out after going into GR. |
|
|
Cisco Catalyst SD-WAN Controller policy is not sending the updated TLOC information. |
|
|
Software initiated reboot due to OMPD crash (segmentation fault). |
|
|
Fixed typo in diagnostics log filename. |
|
|
The app-server java process is not initiating in 6 node 20.6 cluster . |
|
|
Template push failed post Cisco SD-WAN Manager upgrade from 20.4 to 20.9 "udp udp-src-dst-port-list source range" |
|
|
Suppress OMP advertisement of stale versioned TLOCs on Cisco Catalyst SD-WAN Controller |
|
|
Template shows out of sync due to control flap caused by hardware Cisco Catalyst SD-WAN Edge device enterprise cert install. |
|
|
Template push fails when ZBFW policy has sequences matching UDP ports 500/4500 in Cisco SD-WAN Manager 20.9 |
|
|
Cisco SD-WAN Manager GUI SaaS probe endpoint type URL is not allowing to use "-" character as value. |
|
|
SD-WAN workflows/20.12.2: LAN OSPFv3 IPv4/IPv6: sub-feature parcel failed to be saved. |
|
|
Application list with duplicate name entries in "Group of Interest". |
|
|
Devices are not receiving the preference via the policy in a Multi-Tenant environment. |
|
|
SD-WAN workflows missing nocloud property in payload when checked in Cisco SD-WAN Manager NFV config group UI. |
|
|
TACACS netadmin users are not able to acess vshell on 20.12. |
|
|
20.12:AWS-With Pure IPV6 overlay, vbond vpn 0 ge0/0 interface if-oper-status down after power off/on. |
|
|
Massive update for feature template fails. |
|
|
Application SLA traffic policy with base action allow without any match field is ignored. |
|
|
Cisco SD-WAN Manager configures incorrect IKEv2 lifetime for IPSec tunnels. |
|
|
Routes missing on a Cisco Catalyst SD-WAN Edge devices in a graceful-restart scenario. |
|
|
In Multi-Tenant Cisco SD-WAN Manager, Equinix ICGW is stuck in LIVE state, and not changing to ACTIVE state. |
|
|
Unable to create Azure CGW using NVA created from Azure Portal. |
|
|
Error unlocking device configuration mode to CLI mode. |
Open Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.2
| Identifier | Headline |
|---|---|
|
Cisco SD-WAN Manager_20.12.1 / admintech upload tool is failing. |
|
|
Multiple alarms APIs RBAC is not working as expected. |
|
|
Unable to push template due to "no ip cef distributed". |
|
|
20.13:SDCI connection using Multicloud TGW marked as success / traffic fails. |
|
|
Failed to deploy configuartion group when AAA accounting "start stop" is set to False. |
|
|
The usage of policy group for security configuration has random push error. |
|
|
Cisco SD-WAN Manager DR fails in the event that a Cisco Catalyst SD-WAN Validator is unreachable. |
|
|
Cisco SD-WAN Manager GUI becomes very slow when a large template with 1000+ variables is uploaded. |
|
|
The NAT DIA interface < name> overload egress-interface < interface> is not pushed to Cisco IOS XE Catalyst SD-WAN device. |
Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.1
Resolved Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.1
|
Identifier |
Headline |
|---|---|
|
Double GR_Additional log enablement defect |
|
|
Cisco SD-WAN Manager Log Poisoning bypass |
|
|
Cisco SD-WAN Manager Audit Log CSV payload injection |
|
|
Cisco Catalyst SD-WAN : Decommissioning or deleting device did not release the license. |
|
|
- AAR Default SLA values changing by the system |
|
|
Cisco SD-WAN Manager deletes the custom folder whenever editing the IPS settings |
|
|
Cisco IOS XE Catalyst SD-WAN device unified security policy template fails to enable geo database |
|
|
20.11/12 ST/MT: updating app server logo via nms command is not working |
|
|
Cisco SD-WAN Manager does not recognize the resource group for resource group admin login via TACACS |
|
|
OSPFv3 - "Advertise" command not appearing on OSPFv3 for IPV4 address-family |
|
|
Scroll up or down under feature template box change the values. |
|
|
Unable to update DHCP Tunnel interface template if template was cloned from factory default template |
|
|
Cisco SD-WAN Manager GUI : Incorrect Average Values for Latency/Jitter/Loss percentage for Edge Routers |
|
|
Template pushed with wrong APN settings, Cisco SD-WAN Manager shows wrong APN config even after rollbacked. |
|
|
Wireless Template cannot be attached to a C1113-8PLTELAWZ device |
|
|
Cisco SD-WAN Manager not including net mask for BGP for a /32 |
|
|
Topology API showing only data links on Cisco Edge devices |
|
|
Cloud Gateway Attachment is not shown for dedicated mode after tag is unmapped |
|
|
Unable to edit the user group's created under Administration > Manage Users. |
|
|
Cisco SD-WAN Manager unable to parse certain timezones and is triggering certificate installation process |
|
|
Cisco Catalyst SD-WAN CoR for SaaS - Enable O365 Application Error |
|
|
Need to hide/remove "key" field in TACACS server configuration in AAA template |
|
|
Cisco SD-WAN Manager scrollbar is executing several API calls that slow down the performance |
|
|
Cisco SD-WAN Manager: cURL may flag error on ca cert file "Error in the time fields of certificate" |
|
|
20.9 Autotunnel Ipsec tracker:Tracker does not come up at all on vedge |
|
|
aaamgr process restarts unexpectedly |
|
|
Cisco SD-WAN Manager is loading continuously when a new user access is created with Network Hierarchy. |
|
|
OSPFv3 - "distance" command not showing under address-family ipv4 |
|
|
Cisco SD-WAN Manager pushing DH group (14,15,16) for SIG template for IKEv2 (unsupported by Umbrella) |
|
|
Cisco SD-WAN Manager is modifying load_balance .json leading to the edges to be disconnected. |
|
|
Certificate output is not getting changed on renew when Cloud Certificate Authorization is Automated |
|
|
Cisco SD-WAN Manager is not generating alarm notifications to be sent to Webhooks server. |
|
|
168 Cisco vEdge 5000 device inbuilt certificate expiring on 12th Nov 2023 |
|
|
Cisco SD-WAN Software Denial of Service Vulnerability |
Open Bugs for Cisco Catalyst SD-WAN Control Components Release 20.12.1
|
Identifier |
Headline |
|---|---|
|
20.10 20.11- Localhost can't be modified to IP in Cluster management Page : GRPC error CO for ZK |
|
|
Multiple alarms APIs RBAC is not working as expected |
|
|
20.12-Tacacs server configuration broken for cloud-init config |
|
|
Unable to create Azure CGW using NVA created from Azure Portal |
|
|
Application SLA Traffic Policy with Base Action Allow without any match field is ignored |
|
|
Cannot save application priority & SLA profile if intf value from drop down list is used first time |
|
|
Licenses unapplied from License Management in Cisco SD-WAN Manager after DR failover/failback |
|
|
In Multi-Tenant Cisco SD-WAN Manager, Equinix ICGW is stuck in LIVE state, not changing to ACTIVE state |
|
|
Cisco SD-WAN Manager UI should show the error when Upper case letter present in " User Group Name" |
|
|
17.12 OGREF: Add Cisco SD-WAN Manager restriction for OGREF toggle |
|
|
IPv6 Neighbor doesn't establish with default Application SLA Traffic Policy Simple workflow |
Cisco Catalyst SD-WAN Control Components Compatibility Matrix and Server Recommendations
For compatibility information and server recommendations, see Cisco Catalyst SD-WAN Control Components Compatibility Matrix and Server Recommendations.
Cisco Catalyst SD-WAN Manager API
For information on Cisco SD-WAN Manager Release 20.12.x APIs, see Cisco SD-WAN Manager API.
Cisco SD-WAN Manager GUI Changes
This section presents a comparative summary of the significant GUI changes between Cisco vManage Release 20.11.1 and Cisco Catalyst SD-WAN Manager Release 20.12.1.
Monitor Overview Page
Cisco Catalyst SD-WAN Manager Release 20.12.1 includes the following GUI changes to the page. For more information about the page, see Cisco SD-WAN Manager Monitor Overview.
-
The Global Topology view is called as Global Network View in Cisco SD-WAN Manager.
Figure 1. Global Network View in Monitor - Overview Page 
Click the eye icon to view the tunnel connection with aggregated tunnel health between the sites. Click the arrow on the left to open the network hierarchy menu.
Figure 2. Device Details for the Selected Site in Global Network View 
-
Cisco Catalyst SD-WAN Manager's security dashboard is enhanced to provide greater flexibility in troubleshooting security threats.
Figure 3. Enhancements to the Security Dashboard Through Modified Dashlets in the Monitor - Security Page 
Configuration Page
New submenus are added to the Configuration menu in Cisco Catalyst SD-WAN Manager menu.
New menus are available in the page to configure policy groups and security policies.
In-product Help
In a single-tenant deployment, access help content for Cisco SD-WAN Manager UI pages by clicking the Help icon at the top-right corner of a page. The help content is displayed in a slide-in pane in the same browser window.
Starting from Cisco SD-WAN Manager Release 20.12.x, In-product help is available for a majority of the Cisco SD-WAN Manager UI pages.
Cisco DNA Sense
Access help content for Cisco SD-WAN Manager UI pages using Cisco DNA Sense by clicking the ? icon at the top-right corner and choose Online Documentation from the drop-down list.
Cisco DNA Sense is not enabled by default for all the users. You should enroll and configure your Cisco SD-WAN Manager using the instructions provided in the Online Documentation pane. The help content from Cisco DNA Sense is displayed across all major Cisco SD-WAN Manager pages once you enroll.
If your Cisco SD-WAN Manager is already enrolled to Cisco DNA Sense, choose Online Documentation from the ? drop-down.
Ask Cisco Networking Bot
To access the Cisco Networking Bot click the Help(?) icon and choose Ask Cisco Networking from the drop-down list.
You can use Cisco Networking Bot chat to get relevant answers to your questions.
Related Documentation
Full Cisco Trademarks with Software License
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)
Feedback