Release Notes for StarOS™ Software Version, Release 2026.02.g0

Products

CUPS

Yes

MME

Yes

ePDG

Yes

P-GW

Yes

SAEGW

Yes

SGSN

Yes

Platforms

ASR 5500

No

VPC-DI

Yes

VPC-SI

Yes

First Customer Ship (FCS)

23-Apr-2026

End of Life (EoL)

23-Apr-2026

End of Software Maintenance (EoSM)

22-Oct-2027

End of Vulnerability and Security Support (EoVSS)

22-Oct-2027

Last Date of Support (LDoS)

31-Oct-2028

Software Reliability

Configurable MME S1 HO guard timer duration

This feature allows the network operator to modify the default hardcoded S1 HO guard timer value of 50 seconds into configurable range between 10 to 50 seconds specifically for the inbound S1 handover procedure over the S10 interface.

This prevents external MME timeout issues and optimizes network resource usage during mobility events.

Command introduced: under MME service configuration mode.  

·       default policy handover s10 guard-timer

·       policy handover s10 guard-timer <guard-timer seconds> - Enter the Guard timer intervals between 10-50 seconds.

Software Reliability

MME Emergency Profile Selection based on IMSI Range and Service PLMN ID

This feature enhances MME capabilities to handle network outages by enabling inter-operator roaming for emergency calls. You can now configure LTE Emergency Profiles based on specific IMSI ranges and service PLMN IDs, ensuring communication services during disasters. It allows only authenticated emergency calls while rejecting other attach requests with configured emm cause code. This is achieved by associating LTE Emergency Profiles with operator policies, selected via IMSI and PLMN ID.

Commands introduced:

·       enable-imsi-based-lte-emergency-profile (under mme-service)

·       associate lte-emergency-profile <profile name> (under operator-policy name <policy name>)

Commands updated:

·       attach restrict access-type eps [allow-emergency-auth ] [ emm-cause-code <code>] (under call-control profile <ccp>)

Software Reliability

Delay charging over TLS/QUIC

This feature enables secure delayed charging over TLS/QUIC with improved reliability and flexibility in charging data handling.

Software Reliability

IPv6 Session Affinity

Anchors IPv6 session to the same User Plane (UP) as the HOLD IPv4 session during reassociation, overriding standard UP selection algorithms to ensure dual-stack connections are successful.

Software Reliability

Monitor Subscriber Sessmgr Instance Filtering

Added support for filtering monitor subscriber commands by specific sessmgr instance. This feature is supported only for pgw, sgw, saegw, and ggsn call types.

Software Reliability

Tariff time replication on CUPS

The feature enables replication of Gz tariff time from the Gy bucket. It ensures suppression of Sx Query-URR to prevent signalling storms in CUPS deployments.

Command introduced:

egcdr tariff replicate-ocs-tariff-time-change- This CLI command is configured in Active Charging Service command mode.

Default settings: Disabled-Configuration required to Enable

PGW IMSI Suppression during unauthenticated emergency attach messages

[CSCwt19501]

Previous Behavior:
During unauthenticated emergency attach, the PGW forwards both E164 and IMSI to the PCRF with the r8-standard dictionary enabled under the ims-auth service. The Subscription-Id AVPs include:

·       Subscription-Id-Type: END_USER_E164 (0)

·       Subscription-Id-Data: 9890098900

·       Subscription-Id-Type: END_USER_IMSI (1)

·       Subscription-Id-Data: 404005123456788

New Behavior:
PGW behavior aligns with 3GPP specification 23.401. During unauthenticated IMSI reported by the MME through the “CREATE SESSION REQUEST” message, which is marked with uimsi flag  in Indicator IE. IMSI is suppressed towards the PCRF during unauthenticated emergency attach. The Subscription-Id AVP includes only:

·       Subscription-Id-Type: END_USER_E164 (0)

·       Subscription-Id-Data: 9890098900

Command introduced under the PGW service configuration mode:

subscription-id service-type { closed_rp | ggsn | ha | ipsg | l2tplns | mipv6ha | pdsn | pgw | samog-epdg } { e164 | imsi | nai | lsm-emergency-imei-instead-of-uimsi }

Note: This keyword is configured under the 'ims-auth service' for emergency APNs. It applies only to emergency APNs over TLS/QUIC, providing improved reliability and flexibility for charging data handling.

NOA/NPI is added to the servedMSISDN field in the PGWCDRs

[CSCwt19446]

Previous behavior:

servedMSISDN of the PGWCDR does not contain NOA/NPI

New behavior:

PGWCDRs supports the Nature of Address (NOA) and Numbering Plan Indicator (NOI) parameters aligning with 3GPP TS 29.002. These parameters are used in routing calls and messages to determine how a phone number should be interpreted.

Command introduced:

include-msisdn-noa-npi- Indicates NOA/NPI(0x91) in the PGWCDR MSISDN.

Customer impact: When this include-msisdn-noa-npi CLI is enabled you can have the new behavior visibility.

Colocated gateway selection during EPSFallback for roaming PLMN

[CSCwq14755 ]

Previous behavior:

During a Tracking Area Update (TAU) for EPS fallback, roaming subscribers did not utilize the configured co-location or topology criteria for SGW selection.

New behavior:

The gw-selection command within the Call Control Profile configuration mode has been enhanced with the apply-for-roamer option. When this configuration is enabled, roaming subscribers will now undergo SGW selection based on the configured co-location or topology criteria during EPS fallback TAU scenarios.

Customer Impact: The customer will have better control over resource management for roaming subscribers.

ConfD schema compatibility handling [CSCwo47013]

Previous behavior:

During ConfD upgrades, version incompatibilities with persisted schema files could lead to initialization failures and repeated confdmgr crashes; as there was no CLI utility available to clear this data, it was necessary to manually remove the contents of the /mnt/hd-raid/meta/confd directory during the upgrade process to ensure system stability.

New behavior:

A new CLI command, clear confdmgr confd all, has been introduced to clear all persistent ConfD data, which facilitates a clean reinitialization and prevents initialization failures during upgrades.

For more information on the method of procedure, refer to the Upgrade the confd version

CSCwt53217

Unauthorized Session Establishment Triggered by Gy CCR-U and RAR Timing Collision

cups-cp

CSCws31425

sxdemux task memory usage high leading to a restart

cups-cp

CSCws16804

Sx Sess-Mod-Req failure with CC 69 Mandatory IE Incorrect

cups-cp

CSCwr10359

Sessmgr restarted at function egtpc_handle_user_sap_event

cups-cp

CSCwf27561

High number of CC category misses

cups-cp

CSCwq57920

Addition of a trap after the state of the peer user plane changes from configured to not configured or vice versa.

cups-cp

CSCwr87117

Wrong Time Quota observed in second SX_SESSION_MODIFICATION_REQUEST when new quota with RAR Trigger

cups-cp

CSCwr15845

Gy session out of SU reports huge volume threshold in SxModify

cups-cp

CSCws39624

Sessmgr restart due to Segmentation fault: acsmgr_allocate_cups_sef_info()

cups-cp

CSCwq07274

Difference in the volume reported in Sx-Volume Measurement and monsub- CALL STATS

cups-up

CSCwp91767

Abnormal CC-Total-Octets values after UP reload

cups-up

CSCws50507

Memory leak observed in func mme_db_cache_alloc_non_current_security_context w/ n26

mme

CSCwt66319

Observed sessmgr assert during Outbound Handover to peer MME

mme

CSCwt47887

In a failover scenario, MME does not retry properly to all the recieved RR's from DNS based on priority

mme

CSCwt64846

TAU is rejected post inbound HO when MICR check and decor is enabled

mme

CSCwr32050

Emergency call-garbage value seen in bulkstat and show mme-ser statistics lte-emergency-profile profile-name lte1

mme

CSCwq14755

Colocated gateway selection during EPSFallback for roaming PLMN

mme

CSCwt34638

MME rounding down APN-AMBR value received from ULA before comparing with ctx-resp

mme

CSCwt68720

Observing sessmgr crash for function :: mme_egptc_set_pdn_state in version

mme

CSCws66809

GW is sending CCR-U with charging rule report with cause "Rule-Failure-Code: UNSUCCESSFUL_QOS_VALIDATION"

pdn-gw

CSCwt54017

Unexpected S6b Event File Generation on PGW Gateways

pdn-gw

CSCws47075

Unable to convert date-time string in the Diameter credit-control-request message processing.

pdn-gw

CSCws13802

Traffic is being re-directed in error by the PGW due to GOR ruledef update

pdn-gw

CSCwr56361

Assertion failure: EGTP-C service is being used by another MME/SGW/PGW service

pdn-gw

CSCwq60822

PGW is sending '0x40' for IpAddress instead of '0x04'

pdn-gw

CSCws50662

Assertion failure at diameter/diabase/diabase'

pdn-gw

CSCwt19446

Incorrect MSISDN Encoding: Missing NOA/NPI Octet in PGW-CDRs 3GPP TS 32.298 Compliance

pdn-gw

CSCwt96279

Some of the http flows are not getting accelerated

pdn-gw

CSCwr95955

PGW (VPC) incorrectly charges for Router Solicitation (RS) packets in IPv6 sessions.

pdn-gw

CSCwr48395

sessmgr restart at sn_aaa_client_action_item_lookup_by_key()

pdn-gw

CSCws18654

Legacy-GW: VzW ASR5500: sessmgr restart observed at PC: [0684595b/X] sessmgr_ipv4_process_user_pkt_part3() when perform the unconfigure / configure of new apn, new rulebase, new fw-nat-policy and SRP switchover on stdby

pdn-gw

CSCwt51790

Active-charging MBR change after Gx CCR-U

pdn-gw

CSCws47044

PGW Session Setup Failure: Static IPv4 Address Mismatch for APN "nemo-cust101"

pdn-gw

CSCwt37898

Some of the http flows are not getting accelerated

pdn-gw

CSCws62168

P-CSCF Address Missing in CSRsp When DNS Returns Only CNAME Without Resource Records

pdn-gw

CSCwt03412

High speed traffic is not reported in CDR and Gy

pdn-gw

CSCwt19501

PGW sends the IMSI in the CCR-I message to the PCRF for unauthenticated emergency calls

pdn-gw

CSCwr44475

UDP quic traffic detection problem

pdn-gw

CSCwt95240

MFP4.0 April 2026 the build need to support cilium instead of calico. Hitting issues with calico during RCM deployment. Also, rcm ned needs correction to proper 4G CUPS based RCM NED currently its 5G SMI based.

nso-mob-fp

CSCwm96403

Mobility MFP 3.4.3 / CommandSanitizer incorrectly removing configuration from string

nso-mob-fp

CSCwt06603

Context removal & addition leads to incorrect flow creation leading to TCP flows recognized incorrect

cups-cp

CSCwt30038

sessctrl_handle_mgr_notify_server_list_ipaddr_status_update()

cups-up

CSCwt86456

Zero volume Usage seen in UNIT_BEFORE_TARIFF_CHANGE in Gy CCR Update while validity Time

cups-cp

CSCwt94942

While Rulebase change CP creates the Static rule URRs causing Gy Replicate functionality

cups-cp

CSCwt55278

Multiple TCP connection over X3 interface

cups-up

CSCwt99888

Silent sessctrl restart during booting up of n:m UP after reload/switchover. Crash list not updated

cups-up

CSCwu05660

Valgrind Observations seen for April26 FCS release

cups-up

CSCwt98942

Multiple sessmgr restart with Assertion failure at diameter/diabase/diabase with acsmgr_mscc_tx_timeout()

pdn-gw

CSCwt76990

WhatsApp calls blocking accuracy problem

pdn-gw

CSCwt90758

Error: application communication failure upon running RCM Ops-Center commands

rcm

StarOS package

2026.02.g0

21.28.m43.100466

ADC P2P Plugin

2.74.16.2789

RCM

20260417-160533Z

ESC

6.0.0.55

CVIM

5.0.4

Host OS

RHEL 9.2

RedHat OpenStack

RHOSP 17.1

Intel XL710C NIC Version

Driver version: i40e-2.17.4

Firmware: 7.00 0x80005119 0.385.115

CIMC

4.2 (3)

NSO MFP

4.0

Note: MFP 4.0 includes two OpenStack NED versions: 4.2.33 and 4.2.34. For deployments using Red Hat OpenStack Platform 13, it is recommended to use NED version 4.2.33 due to an API version incompatibility between NED 4.2.34 and OSP 13.

NSO

nso-mob-fp-4.0-2026.02.g0.zip

Contains the signed NSO software image, the signature file, a verification script, the x509 certificate, and a README file containing information on how to use the script to validate the certificate.

VPC companion package

companion-vpc-2026.02.g0.zip

Contains numerous files pertaining to this version of the VPC including SNMP MIBs, RADIUS dictionaries, ORBEM clients. These files pertain to both VPC-DI and VPC-SI, and for trusted and non-trusted build variants.

VPC-DI

qvpc-di-2026.02.g0.bin.zip

Contains the VPC-DI binary software image that is used to replace a previously deployed image on the flash disk in existing installations.

qvpc-di_T-2026.02.g0.bin.zip

Contains the trusted VPC-DI binary software image that is used to replace a previously deployed image on the flash disk in existing installations.

qvpc-di-2026.02.g0.iso.zip

Contains the VPC-DI ISO used for new deployments; a new virtual machine is manually created and configured to boot from a CD image.

qvpc-di_T-2026.02.g0.iso.zip

Contains the trusted VPC-DI ISO used for new deployments, a new virtual machine is manually created and configured to boot from a CD image.

qvpc-di-template-vmware-2026.02.g0.zip

Contains the VPC-DI binary software image that is used to on-board the software directly into VMware.

qvpc-di-template-vmware_T-2026.02.g0.zip

Contains the trusted VPC-DI binary software image that is used to on- board the software directly into VMware.

qvpc-di-template-libvirt-kvm-2026.02.g0.zip

Contains the same VPC-DI ISO identified above and additional installation files for using it on KVM.

qvpc-di-template-vmware-2026.02.g0.zip

Contains the VPC-DI binary software image that is used to on-board the software directly into VMware.

qvpc-di-template-libvirt-kvm_T-2026.02.g0.zip

Contains the same trusted VPC-DI ISO identified above and additional installation files for using it on KVM.

qvpc-di-2026.02.g0.qcow2.zip

Contains the VPC-DI binary software image in a format that can be loaded directly with KVM using an XML definition file, or with OpenStack.

qvpc-di_T-2026.02.g0.qcow2.zip

Contains the trusted VPC-DI binary software image in a format that can be loaded directly with KVM using an XML definition file, or with OpenStack.

VPC-SI

intellig3nt_onboarding-2026.02.g0.zip

Contains the VPC-SI onboarding signature package that is used to replace a previously deployed image on the flash disk in existing installations.

qvpc-si-2026.02.g0.bin.zip

Contains the VPC-SI binary software image that is used to replace a previously deployed image on the flash disk in existing installations.

qvpc-si_T-2026.02.g0.bin.zip

Contains the trusted VPC-SI binary software image that is used to replace a previously deployed image on the flash disk in existing installations.

qvpc-si-2026.02.g0.iso.zip

Contains the VPC-SI ISO used for new deployment. A new virtual machine is manually created and configured to boot from a CD image.

qvpc-si_T-2026.02.g0.iso.zip

Contains the trusted VPC-SI ISO used for new deployments a new virtual machine is manually created and configured to boot from a CD image.

qvpc-si-template-vmware-2026.02.g0.zip

Contains the VPC-SI binary software image that is used to on-board the software directly into VMware.

qvpc-si-template-vmware_T-2026.02.g0.zip

Contains the trusted VPC-SI binary software image that is used to on-board the software directly into VMware.

qvpc-si-template-libvirt-kvm-2026.02.g0.zip

Contains the same VPC-SI ISO identified above and additional installation files for using it on KVM.

qvpc-si-template-libvirt-kvm_T-2026.02.g0.zip

Contains the same trusted VPC-SI ISO identified above and additional installation files for using it on KVM.

qvpc-si-2026.02.g0.qcow2.zip

Contains the VPC-SI binary software image in a format that can be loaded directly with KVM using an XML definition file, or with OpenStack.

qvpc-s3_T-2026.02.g0.qcow2.zip

Contains the trusted VPC-SI binary software image in a format that can be loaded directly with KVM using an XML definition file, or with OpenStack.

RCM

rcm-vm-airgap-2026.02.g0.ova.zip

Contains the RCM software image that is used to on-board the software directly into VMware.

rcm-vm-airgap-2026.02.g0.qcow2.zip

Contains the RCM software image in a format that can be loaded directly with KVM using an XML definition file, or with OpenStack.

rcm-vm-airgap-2026.02.g0.vmdk.zip

Contains the RCM virtual machine disk image software for use with VMware deployments.

Microsoft Windows

Open a command line window and type the following command:

> certutil.exe -hashfile <filename>.<extension> SHA512

Apple MAC

Open a terminal window and type the following command:

$ shasum -a 512 filename.extension

Linux

Open a terminal window and type the following command:

$ sha512sum filename.extension

OR

$ shasum -a 512 filename.extension

Note: filename is the name of the file.

extension is the file extension (for example, .zip or .tgz).

Cisco ASR 5500 documentation

StarOS documentation

Cisco Ultra Packet Core documentation

CUPS documentation

Service request and additional information

Cisco Support