Cisco 50GBASE SFP56 Modules on C9600-LC-48YL and C9600-LC-40YL4CD

Supported transceiver module product numbers:

• SFP-50G-LR-S

For information about the module, see Cisco 50GBASE SFP56 Modules Data Sheet. For information about device compatibility, see the Transceiver Module Group (TMG) Compatibility Matrix.

Cisco 10GBASE SFP+ Module

Supported transceiver module product numbers:

• SFP-10G-T-X

For information about the module, see Cisco 10GBASE SFP+ Modules Data Sheet. For information about device compatibility, see the Transceiver Module Group (TMG) Compatibility Matrix.

BGP EVPN VXLAN support on Cisco Catalyst 9600 Series Supervisor 2 Module (C9600X-SUP-2)

The Cisco Catalyst 9600 Series Supervisor 2 Module supports the following BGP EVPN VXLAN features:

• Layer 2 and Layer 3 overlay with IPv4 and IPv6 hosts

• Multicast replication for Broadcast, Unknown Unicast, Multicast (BUM) traffic

• Distributed Anycast Gateway

• EVPN VXLAN External Connectivity with VRF-Lite and IEEE 802.1Q network

This release does not support Ingress Replication, Multi-Homing and Centralized Default Gateway.

BGP EVPN VXLAN with IPv6 in the Underlay (VXLANv6)

Introduces support for IPv6 addressing in the underlay of a BGP EVPN VXLAN fabric. In a new deployment, you can build your BGP EVPN VXLAN fabric with IPv6 underlay. For an existing BGP EVPN VXLAN fabric with IPv4 underlay, you can seamlessly migrate to an IPv6 or dual stack underlay.

Cisco DNA Service for Bonjour

Cisco DNA Service for Wide Area Bonjour (Multicast DNS Mode only) and Local Area Bonjour in Unicast Mode for Multi-Layer Network and Routed Access Network was introduced on Cisco Catalyst 9600 Series Supervisor 2 Module (C9600X-SUP-2).

Cisco StackWise Virtual

Cisco StackWise Virtual is a network system virtualization technology that pairs two switches into one virtual switch to simplify operational efficiency with a single control and management plane.

Starting with this release, the feature is supported on the Cisco Catalyst 9600 Series Supervisor 2 Module (C9600X-SUP-2).

(Network Advantage)

Custom EAPoL

Allows customization of the default EAPoL EtherType to configure MACsec with EtherType as 876F.

DHCP Gleaning

Introduces support for a read–only DHCP snooping functionality that allows components to register and glean only DHCP version 4 packets.

(Network Essentials and Network Advantage)

Enhanced Password Security Through Updated Combination Rule

The character-repetition and restrict-consecutive-letters keywords were introduced for the aaa common-criteria policy command.

MACsec Fallback Key Support with High Availability

Introduces support for the MACsec Fallback Key feature with High Availability. The MACsec Fallback Key feature establishes an MKA session with the pre-shared fallback key whenever the PSK fails to establish a session because of key mismatch.

(Network Advantage)

NAT support on L3 Port Channel

Introduces support for configuring NAT on Layer 3 port channel using the interface port-channel command.

Programmability

• Upgrade YANG Models to YANG 1.1

• YANG Data Models

The following programmability features are introduced in this release:

• Upgrade YANG Models to YANG 1.1: Cisco-defined YANG models are in YANG Version 1.1 in Cisco IOS XE Dublin 17.10.1 and later releases.

  (Network Advantage)

• YANG Data Models: For the list of Cisco IOS XE YANG models available with this release, navigate to: https://github.com/YangModels/yang/tree/master/vendor/cisco/xe/17101.

  (Network Advantage)

PTPv2 with Cisco StackWise Virtual

Introduces support for PTPv2 with Cisco StackWise Virtual.

(Network Advantage)

RADIUS Automated Testing Probe-on

The command automate-tester probe-on was introduced. It starts a dead timer and packets are sent to the external RADIUS server after the timer expires.

Reflexive Access Lists (IPv4)

Reflexive access lists allow IP packets to be filtered based on upper-layer session information.

(Network Advantage)

Secure Data Wipe

Introduces support for performing factory reset by using the keyword all secure in the factory-reset command. This option performs data sanitisation and securely resets the device.

(Network Essentials and Network Advantage)

SGACL Monitor Mode and SGACL Logging

Introduces support for SGACL Monitor Mode and SGACL Logging on the Cisco Catalyst 9600 Series Supervisor 2 Module.

(Network Advantage)

SHA256 based Password-masking support

You can use the masked-secret keyword on the enable algorithm type command and username command. The keyword masks the secret input and converts to the selected encryption.

(Network Essentials and Network Advantage)

Standalone Mode on Layer 3 EtherChannels

Introduces support for configuring standalone mode/independent mode on Layer 3 EtherChannels.

Stateful NAT64

Introduces support for a translation mechanism that translates IPv6 packets into IPv4 packets and vice versa. Packets generated in an IPv6 network can be sent to an IPv4 network within the IPv6 network using the Stateful NAT64 translator.

There are no new WebUI features in this release.