The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Cisco IOS Release 15.9(3)M2 - Release Notes for Cisco 5900 Embedded Services Routers (ESR) platforms
Image Information and Supported Platforms
High Security (HSEC) License Support
Permanent License Reservation (PLR)
Additional Throughput Level - C5921
Communications, Services, and Additional Information
The following release notes support the Cisco IOS 15.9(3)M2 release. These releases support the Cisco 5900 Embedded Services Routers (ESR) platforms. These release notes are updated to describe new features, limitations, troubleshooting, recommended configurations, caveats, and how to obtain support and documentation.
This publication consists of the following sections:
■ Image Information and Supported Platforms
Note : You must have a Cisco.com account to download the software.
Cisco IOS Release 15.9(3)M2 includes the following Cisco IOS images:
The latest image files for the 5900 product family can be found here:
This section provides details on new features and functionality available in this release.
The HSEC license removes the curtailment enforced by the U.S. government export restrictions on the encrypted tunnel count and encrypted throughput. Based on export compliance requirement, customers need to purchase an HSEC license to be provided with unlimited encrypted throughput, and unlimited number of crypto resources like encrypted tunnels and sessions.
HSEC implementation on the 5921 restricts encrypted throughput to 250Mbps for non-HSEC licenses. Existing licenses with a throughput level greater than 250Mbps, will be HSEC licenses from this point forward. This requires new mapping between some of the PIDs.
Note : PLR support began with the 15.6(3)M1 release, with Unlimited throughput level. Starting with15.9(3)M, support was added for different throughput levels.
Note : The sale of PLR licenses is limited to government defense and intelligence agency customers.
The PLR licensing feature allows the use of reserved licenses in a disconnected mode. You can optionally request permanent licenses for each 5921. Permanent licenses do not require periodic access to the License Authority. PLR is supported on the universalk9 and universalk9_npe images.
You can have a pool of PLR entitlements from which to draw from in the virtual account on the Cisco Smart Software Manager (CSSM). When the CSSM validates the reservation request code generated by a product instance doing Universal PLR, it will allocate one of these entitlements to the product instance and generate a string (authorization code) to enter (install) on that product instance.
When you install the authorization code, generated by the CSSM, on the product instance any entitlement request made by the product to the Smart Agent will be authorized.
Licensing caveats are as follows:
■Smart license 500Mbps is an HSEC license, therefore, it will not be supported in Evaluation mode
■For non-HSEC licenses the crypto resource restrictions are:
■Crypto resources reserve and free are handled using common PI implementation CERM.
The 15.9(3)M2 release supports a new PLR throughput level of 500 Mbps. See PLR Entitlement.
PLR licensing feature allows using the reserved licenses in a disconnected mode. There are two types of reservation available, specific reservation and Universal reservation. At this time, PLR supports only Universal reservation. To enhance existing PLR feature the request is to provide support of different throughput levels, where as it support only unlimited/max throughput in current implementation. Base PLR support available only with universalk9 and univeralk9_npe images.
In Universal PLR, once license smart reservation cli is configured and license smart reservation install has been successful, the below unlimited throughput entitlement will be activated based on throughput configured, before generating reservation request code.
The following lists some of the CLIs that pertain to this feature.
Enable/disable license reservation feature:
Configure platform plr-throughput level with appropriate throughput before generating request code:
Prints the “Reservation Request Code” that must be pasted into the portal to start the reservation process:
Enters the “Reservation Authorization Code” into the device to complete the process.
Prints the “Reservation Return Code” that must be pasted into the portal to return licenses and delete product instance:
Note : Uses the authorization code previously installed.
Prints the “Reservation Return Code” that must be pasted into the portal to return licenses and delete product instance.
Note : Uses the authorization code from the command line.
Cancels a reservation that is in progress and allows entitlement changes.
In order to switch between license throughputs, the old reservation should be returned if it is already installed:
Note : Take the return code and paste it into the CSSM portal to remove the license.
To switch between license throughputs, when license is not installed but a request code is generated, the old reservation code should be canceled and then generate a new one:
The following documentation is available:
■ Cisco 5900 Embedded Services Routers
■IOS Bulletins—You can find bulletins at:
■Cisco IOS 15.9M cross-platform release notes:
Caveats describe unexpected behavior in Cisco IOS releases. Caveats listed as open in a prior release are carried forward to the next release as either open or resolved.
Note : You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, you can register for an account.
For more information about the Cisco Bug Search Tool, see the Bug Search Tool Help & FAQ.
In DLEP, any restart of the routing protocol process is not updating the metrics.
Symptoms : In a DLEP environment, if there is an OSPFv3 or eigrp protocol reset between two routers, it is not updating the metrics with DLEP peers.
On the C5921, a crash is seen when setting CNS id using TCL script.
■To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.
■To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.
■To submit a service request, visit Cisco Support.
■To discover and browse secure, validated enterprise-class apps, products, solutions and services, visit Cisco Marketplace.
■To obtain general networking, training, and certification titles, visit Cisco Press.
■To find warranty information for a specific product or product family, access Cisco Warranty Finder.
Modifications to this product not authorized by Cisco could void the FCC approval and negate your authority to operate the product.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco website at www.cisco.com/go/offices.