Table of Contents

rn-apic-asa.fm

Release Notes for the Cisco ASA Device Package Software, Version 1.1.1(2) for ACI

Revised: November 17, 2014

This document contains release information for the Cisco ASA Device Package software, Version 1.1.1(2) for ACI, and includes the following sections:

- New Features

- Important Notes

- Installing the Software

- Open Caveats

- Resolved Caveats

- Related Documentation

- Obtaining Documentation and Submitting a Service Request

New Features

We have added support for APIC GUI management operations using wizards. This feature includes the addition of device profiles, function profiles, and feature classification in the device specification file.

Important Notes

- You must preconfigure cluster units before registering them to the APIC. To configure an ASA cluster, see the “ASA Cluster” chapter of the Cisco ASA Series General Operations CLI Configuration Guide for instructions, at:

- In a scenario where there are two identical graphs (identical interfaces) that have one BD with multiple EPGs, it is not possible to support NAT because NAT cannot differentiate between interfaces.

- When you delete NAT on one of the graphs or delete one of the graph instances, the ASA Device Package cannot determine which one you want to delete, and it removes both.

Installing the Software

To install the ASA Device Package software, see the Cisco ASA Integration with the APIC Quick Start Guide for instructions, at:

Downloading the Software from Cisco.com

Open Caveats

If you are a registered Cisco.com user, view more information about each caveat using the Bug Search at the following website:

.

Caveat

Description

CSCuq27823

Failover WARNING messages for ASA data interfaces

CSCuq79514

Threat detection provisioning failures

CSCur00998

ASA DP configure incorrect mgmt IP for secondary failover unit

CSCur17676

ASA DP does not modify the access group of interface

CSCur10983

ASA DP should suppress standby IP, not configure fault

CSCuq66480

ASA DP not changing static route next hop correctly

CSCur12046

ASA DP always raises major fault for any configuration issue on ASA

Resolved Caveats

The following table contains resolved caveats in ASA Device Package Version 1.1.1(2).

If you are a registered Cisco.com user, view more information about each caveat using Bug Search at the following website:

Caveat

Description

CSCur55539

ASA Device Package needs to allow multiple instances of failover_ip

CSCur12769

ASA DP not changing NTP parameters correctly

CSCuq97042

NTP keys cannot be modified via DP, just created/deleted

CSCuq09934

Fault in HA config not handled gracefully

CSCuq90719

ASA DP serviceAudit fails if ASA already has >1 objects configured

CSCup83756

Improve device health by tracking vnsCIf health

Related Documentation

:

For additional information about the APIC, see the Cisco APIC solution website:

Obtaining Documentation and Submitting a Service Request

.

, which lists all new and revised Cisco technical documentation as an RSS feed and delivers content directly to your desktop using a reader application. The RSS feeds are a free service.

This document is to be used in conjunction with the documents listed in the “Related Documentation” section.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

©2014 Cisco Systems, Inc. All rights reserved.