New and Changed Information

This chapter contains the following sections:

New and Changed Information

The following table provides an overview of the significant changes to this guide for this current release. The table does not provide an exhaustive list of all changes made to the configuration guide or of the new features in this release.

Feature

Description

Added or Changed in Release

Where Documented

Secure Login Enhancements

You can now enhance the security of a router by configuring options to automatically block further login attempts during a possible denial-of-service (DoS) attack.

6.0(2)U6(7)

Secure Login Enhancements

Redirect HTTP methods

You can now intercept and redirect the specific HTTP methods to a server connected to specific port.

6.0(2)U5(1)

Configuring ACL Using HTTP Methods to Redirect Requests

LOU Thresholds

You can configure the LOU threshold to conserve the LOU registers and use TCAMs for expansions based on the threshold values.

6.0(2)U5(1)

Configuring the LOU Threshold

IP-in-IP Decapsulation Enabled

Cisco Nexus 3000 Series switch drops all the packets when feature tunnel is not configured and also when the tunnel is configured but the tunnel interface is not configured or the tunnel interface is in shut down state.

6.0(2)U5(1)

Guidelines and Limitations for CoPP

CoPP Configuration Examples

Egress RACLs on L3 Port Channels

Added the limitation that you cannot configure egress RACLs on L3 Port Channels.

6.0(2)U5(1)

Guidelines and Limitations for ACLs

Source IP Address Configuration

You can now configure source IP addresses for RADIUS, TACACS, SSH, and Telnet

6.0(2)U4(1)

Configuring the SSH Source Interface

Configuring the Telnet Source Interface

CoPP

Added descriptions of static CoPP classes.

6.0(2)U4(1)

Static CoPP Classes

Consistency Checker

The RACL consistency checker was introduced to compare the hardware and software configuration for consistency and display the results.

6.0(2)U2(1)

Triggering the RACL Consistency Checker

ACL Logging

ACL logging allows you to monitor flows that hit specific access control lists.

6.0(2)U2(1)

Configuring Access Control Lists

Support for DHCPv6 relay

The DHCPv6 relay agent forwards DHCPv6 configurations between source and destination ports.

6.0(2)U1(2)

Configuring DHCP Snooping