Release Notes for Cisco ASR 1000 Series, Cisco IOS XE Denali 16.3

About Cisco ASR 1000 Series Aggregation Services Routers

Note

Explore the Content Hub, the all new portal that offers an enhanced product documentation experience.

- Use faceted search to locate content that is most relevant to you.

- Create customized PDFs for ready reference.

- Benefit from context-based recommendations.

Get started with the Content Hub at content.cisco.com to craft a personalized documentation experience.

Do provide feedback about your experience with the Content Hub.

Cisco ASR 1000 Series Aggregation Services Routers are Cisco routers deployed as managed service provider routers, enterprise edge routers, and service provider edge routers. These routers use an innovative and powerful hardware processor technology known as the Cisco QuantumFlow Processor.

Cisco ASR 1000 Series Aggregation Services Routers run the Cisco IOS XE software and introduce a distributed software architecture that moves many operating system responsibilities out of the IOS process. In this architecture, Cisco IOS, which was previously responsible for almost all of the internal software processes, now runs as one of many Cisco IOS XE processes while allowing other Cisco IOS XE processes to share responsibility for running the router.

Migrating to Cisco IOS XE Denali 16.3

The Cisco IOS XE Denali 16.3 Migration Guide for Access and Edge Routers contains key information and steps that will help ensure a successful migration from extant Cisco IOS XE 3S releases, Cisco IOS XE Denali 16.2 to Cisco IOS XE Denali16.3. It is critical that you read this information before you begin migration to ensure that you have completed all the prerequisites and that you understand the migration process.

For a list of caveats in this release, see the Caveats section in this document.

New and Changed Information

The following sections list the new hardware and software features that are supported on the Cisco ASR 1000 Series Aggregation Services Routers.

- New Hardware Features in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1

- New Software Features in Cisco IOS XE Denali Release 16.3.1

- New Software Features in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.2

New Hardware Features in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1

The following hardware features were introduced in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1.

Support for 10x10G EPA

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/modular_linecard/asr1_mlc_hig/mlc_asr1_overview.html

Support for 18x1G EPA

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/modular_linecard/asr1_mlc_hig/mlc_asr1_overview.html

ASR1000 Route Processor 3 (RP3)

Cisco ASR 1000 Series Route Processor 3 (Cisco ASR1000-RP3) runs the network operating system, BINOS kernel, and the IOSD (IOS daemon). The Cisco ASR1000-RP3 is supported on the Cisco ASR 1013, Cisco ASR 1006-X, and Cisco ASR 1009-X routers.

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/rp3/asr1_rp3.html

Cisco ASR 1001-HX Router

Cisco ASR 1001-HX Router is a part of the Cisco ASR 1000 Series and offers a compact form factor that consumes less rack space and power while offering 60 Gbps forwarding throughput. Cisco ASR 1001-HX Router supports all general purpose routing and security features of Cisco ASR 1000 Series Aggregation Services Routers.

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/1001HX_1002HX/b_ASR1001HX-1002HX_HIG.html

New Software Features in Cisco IOS XE Denali Release 16.3.1

The following are the new software features introduced in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1.

10/40 KM 10G BiDi SFP+

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/interfaces_modules/transceiver_modules/compatibility/matrix/10GE_Tx_Matrix.html

3-Level User-defined Queuing Policy Support

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_mqc/configuration/xe-16/qos-mqc-xe-16-book/3-level-user-defined-queuing-policy-support.html

40/80KM 1G BiDi SFP

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/interfaces_modules/transceiver_modules/compatibility/matrix/GE_Tx_Matrix.html

Allow Use of Same ACL or Router-map on Multiple NAT Statements

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-dynamc-hsrp.html

BFD Support on DMVPN

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-bfd-support.html

BGP - mVPN PE-PE Ingress Replication

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_mvpn/configuration/xe-16/imc-mvpn-xe-16-book/imc-bgp-mvpn-pe-pe-ingress-replication.html

BGP IPv6 Admin Distance

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16/irg-xe-16-book/bgp-ipv6-adm-distance.html

BGP IPv6 Dynamic Neighbor Support and VRF Support

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16/irg-xe-16-book/bgp-dynamic-neighbors.html

Consumption of Forked 18x Responses with SDP for CUBE

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-forked-18x-responses.html

CTS SGACL Support on Routers

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/xe-16/sec-usr-cts-xe-16-book/sec-cts-sgacl.html

Customization of NBAR2 Built-in Protocols

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/xe-16/qos-nbar-xe-16-book.html

CVP TCL HA Enhancement

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-cvptcl-ha.html

DMVPN Config Simplification

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book.html

DNS Guard for DNS Learning Mechanism

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/xe-16/qos-nbar-xe-16-book.html

DNS Protocol Classification Change

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/xe-16/qos-nbar-xe-16-book.html

ECMP Loadbalance with Tunnel Visibility

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipswitch_cef/configuration/xe-16/isw-cef-xe-16-book/isw-cef-ecmp-loadbalance-with-tunnel-visibility.html

EVPN VxLAN L3

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/xe-16/ce-xe-16-book/evpn-vxlan-l3.html

IOx: Support 3rd Party Apps in KVMs

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/app_hosting/configuration/xe-16/lfc-mgmt-xe-16-book.html

MacSec on ASR1002-HX

The Cisco ASR 1002-HX Router is a part of the Cisco ASR 1000 Series and offers a compact form factor that consumes less rack space and power while offering 100 Gbps forwarding throughput. The Cisco ASR 1002-HX Router supports all the general-purpose routing and security features of the Cisco ASR 1000 Series Aggregation Services Routers.

Effective Cisco IOS XE Denali 16.3.1, MACsec is supported on Cisco ASR 1002-HX Router in the 18-Port 1 Gigabit Ethernet Port Adapter (EPA-18X1GE) and built-in ports. The number of MACsec sessions supported on Cisco ASR 1000 Series Aggregation Services Routers is 464.

MACSec Support

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/macsec/configuration/xe-16/macsec-xe-16-book.html

MacSec support with ASR1000-MIP100 line card

The Cisco ASR1006-X Router and Cisco ASR1009-X Router create a future-proof modular routing platform to support next generation Forwarding and Route Processor modules with hardware redundancy. The Cisco ASR1006-X Router and Cisco ASR1009-X Router provide up to 200 Gbps slot bandwidth to enable new high density Ethernet linecards utilizing the ASR1000-MIP100 and Ethernet Port Adapters (EPAs), and integrating N+1 power-on-demand design to the ASR1000 portfolio.

Effective Cisco IOS XE Denali 16.3.1, MACsec is supported on Cisco ASR1006-X Router and Cisco ASR1009-X Router in the ASR1000-MIP100 Modular Ethernet Line Card and in the 10-Port 10 Gigabit Ethernet Port Adapter (EPA-10X10GE). In this release, 16 MACSec sessions are supported per 10GE port

Media Monitoring on Control Plane for CUBE

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-voice-quality-monitoring.html

Multiple SIP-UA Support

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-multi-tenants.html

Multitenancy Call Routing and Scaling Enhancements for CUBE

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-multi-vrf.html

Multi-Tenant Support for NAT

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-dynamc-hsrp.html

Multi-VRF Support for CUBE

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-multi-vrf.html

NAT Support on BDI interface

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-addr-consv.html

NSH Service Chaining for IOS-XE

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wan_nsh/configuration/xe-16/wan-nsh-xe-16-book.html

OSPFv3 Route Filtering Using Distribute-List

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/xe-16/iro-xe-16-book/ospfv3-route-filtering-dist-list.html

PfRv3 Burst Probing

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/pfrv3/configuration/xe-16/pfrv3-xe-16-book/pfr-probe-reduction.html

PKI Trustpool Enhancements

Effective with Cisco IOS XE Denali 16.3.1, the way PKI Trustpools are managed have changed. The PKI Trustpool Enahancements feature is used for authentication of HTTPS connections built from the router.Common features that leverage this feature include, but not exhaustive, Plug and Play (PnP), Cisco Web Security (CWS), Cisco Umbrella Branch. If you are upgrading to this release, please review the changes to the feature at the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_pki/configuration/xe-16/sec-pki-xe-16-book/sec-pki-trustpool-mgmt.html

Polaris YANG Infrastructure

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/datamodels/configuration/xe-16/data-models-xe-16-book.html

QoS on GEC portchannel on ASR1k

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_mqc/configuration/xe-16/qos-mqc-xe-16-book/aggregate-etherchannel-quality-of-service.html

QoS Service Group

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_svcgrp/configuration/xe-16/qos-svcgrp-xe-16-book/qos-svcgrp-xe-book.html

Session-ID Support on CUBE

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-session-id.html

Set IP Next-hop Unchanged/Next-hop-unchanged Allpaths IPv4/IPv6

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16/irg-xe-16-book/irg-next-hop.html

Support for 14 Member-links per GEC Bundle

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/xe-16/ce-xe-16-book/ce-ieee-link-bndl-xe.html

Support for IEEE 1588v2 (Precision Clock Synchronization Protocol)

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/configuration/guide/chassis/asrswcfg/1588v2ptp.html

Transport Hierarchy Support for DNS

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/xe-16/qos-nbar-xe-16-book.html

VxLAN GPE Tunnel

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/xe-16/ce-xe-16-book/vxlan-gpe-tunnel.html

Web User Interface

Supports an embedded GUI-based device-management tool that provides the ability to provision the router, simplifies device deployment and manageability, and enhances user experience. The following features are supported on Web User Interface from Cisco IOS XE Denali 16.3:

- Software Upgrade

- Enhanced Interior Gateway Routing Protocol (EIGRP)

- Network Address Translation (NAT)

- Virtual Routing and Forwarding (VRF)

- Application Visibility and Control (AVC)

- Custom Application

- Serial Interface

WebEx/Huron Requirements for Video SDP

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-audio-forced.html

New Software Features in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.2

The following are the new software features introduced in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.2.

Bypass NAT Functionality

For detailed information, see the following Cisco document:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-addr-consv.html

IWAN 2.2 - Multiple DMVPN Tunnel Termination

The IWAN 2.2 - Multiple DMVPN Tunnel Termination feature allows you to terminate two or more active DMVPN tunnels. The limitation of only one active tunnel per VRF on a device is not valid anymore. The routing protocol must be configured to ensure that there is one primary path and one or more secondary paths for a network. When Performance Routing (PfR) is used in conjunction with this feature, PfR is used as the primary path as well as the secondary paths so that all paths can be used in an active-active manner. Use the maximum-secondary-paths [eibgp | ibgp ] path command to configure this feature, where the path indicates the number of secondary paths a routing protocol is allowed to install. The range for path is from zero to 32.

Web User Interface - Configuring EIGRP Routing

Enhanced Interior Gateway Routing Protocol (EIGRP) is an interior gateway protocol suited for many different topologies and media. In a well-designed network, EIGRP scales well and provides extremely quick convergence times with minimal network trafficConfiguring EIGRP Routing.

Important Notes

The following sections contain important notes about Cisco ASR 1000 Series Aggregation Services Routers.

- Display of Free Memory on the CLI

- Yang Data Modeling

- Recommended Release for Cisco IWAN

- Deferrals

- Field Notices and Bulletins

Display of Free Memory on the CLI

Starting with this release, the amount of free memory is computed more accurately. The output of the following commands (privileged EXEC mode) displays this information:

- show memory platform

- show platform resources

- show processes memory platform

- show platform software status control-processor

- show platform software process list switch active R0 summary

Yang Data Modeling

There is a limitation toYANG data modeling, in which a maximum of 20 simultaneous NETCONF sessions only is supported.

The list of supported leafs (xpaths) in the Native Yang Data Models (ned.yang), Cisco IOS XE Denali 16.3.1 is available at:https://github.com/YangModels/yang.

Recommended Release for Cisco IWAN

Cisco IOS XE Denali 16.3.5 is not recommended for Cisco IWAN due to the following bugs: CSCvf98783, CSCvg35332, and CSCvg05896. Instead, it is recommended to use Cisco IOS XE Denali 16.3.5c for Cisco IWAN, which provides a fix for these bugs. For more details on these bugs, please see Cisco Bug Search Tool.

Deferrals

Cisco IOS software images are subject to deferral. We recommend that you view the deferral notices at the following location to determine whether your software release is affected:

http://www.cisco.com/en/US/products/products_security_advisories_listing.html

Field Notices and Bulletins

- Field Notices—We recommend that you view the field notices to determine whether your software or hardware platforms are affected. You can find the field notices at the following location:

http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html

- Bulletins—You can find bulletins at the following location:

http://www.cisco.com/en/US/products/sw/iosswrel/ps5012/prod_literature.html

Open and Resolved Bugs

The open and resolved bugs for a release are accessible through the Cisco Bug Search Tool. This web-based tool provides you with access to the Cisco bug tracking system, which maintains information about bugs and vulnerabilities in this product and other Cisco hardware and software products. Within the Cisco Bug Search Tool, each bug is given a unique identifier (ID) with a pattern of CSCxxNNNNN, where x is any letter (a-z) and N is any number (0-9). The bug IDs are frequently referenced in Cisco documentation, such as Security Advisories, Field Notices and other Cisco support documents. Technical Assistance Center (TAC) engineers or other Cisco staff can also provide you with the ID for a specific bug. The Cisco Bug Search Tool enables you to filter the bugs so that you only see those in which you are interested.

In addition to being able to search for a specific bug ID, or for all bugs in a product and release, you can filter the open and/or resolved bugs by one or more of the following criteria:

- Last modified date

- Status, such as fixed (resolved) or open

- Severity

- Support cases

You can save searches that you perform frequently. You can also bookmark the URL for a search and email the URL for those search results.

Using the Cisco Bug Search Tool

For more information about how to use the Cisco Bug Search Tool, including how to set email alerts for bugs and to save bugs and searches, see Bug Search Tool Help & FAQ.

Before You Begin

You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, you can register for an account.

Procedure

Step 1

In your browser, navigate to the Cisco Bug Search Tool.

Step 2

If you are redirected to a Log In page, enter your registered Cisco.com username and password and then, click Log In.

Step 3

To search for a specific bug, enter the bug ID in the Search For field and press Enter.

Step 4

To search for bugs related to a specific software release, do the following:

1. In the Product field, choose Series/Model from the drop-down list and then enter the product name in the text field. If you begin to type the product name, the Cisco Bug Search Tool provides you with a drop-down list of the top ten matches. If you do not see this product listed, continue typing to narrow the search results.

2. In the Releases field, enter the release for which you want to see bugs.

The Cisco Bug Search Tool displays a preview of the results of your search below your search criteria.

Step 5

To see more content about a specific bug, you can do the following:

- Mouse over a bug in the preview to display a pop-up with more information about that bug.

- Click on the hyperlinked bug headline to open a page with the detailed bug information.

Step 6

To restrict the results of a search, choose from one or more of the following filters:

Filter

Description

Modified Date

A predefined date range, such as last week or last six months.

Status

A specific type of bug, such as open or fixed.

Severity

The bug severity level as defined by Cisco. For definitions of the bug severity levels, see Bug Search Tool Help & FAQ .

Rating

The rating assigned to the bug by users of the Cisco Bug Search Tool .

Support Cases

Whether a support case has been opened or not.

Your search results update when you choose a filter.

Open Caveats—Cisco IOS XE Denali Release 16.3.1

All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.

Caveat ID Number

Description

CSCva13738

ISR4k dose not send SOLICIT msg in DHCPv6-PD over PPPoE

CSCut70443

"request platform software console attach" command improvement

CSCva10549

16.2:Kahuna:R0/0: kernel: FAT-fs (sda1): error seen while booting.

CSCuz37780

16.3: Kahuna:"clock set" is not working after reload.

CSCuz30182

ASR1013: Fails to detect power supply at startup

CSCva29676

RP3: Polaris : Kernel warning messages seen on console

CSCva44676

SpeedRacer fan speed cannot be set to 40%

CSCuu16717

Speedracer, Kahuna and Nighster images do not support "show software authenticity"

CSCva34614

astro_handle_fp_switchover_elc100 Called log messages on FP SO

CSCuz65809

Traffic stalls on Argus-X after both FP reload

CSCuz98080

Correct initialization of ZL registers in MIP100 rommon

CSCva42285

CRC errors seen during EPA reload/shutdown.

CSCva57380

Display Third party SFP only if 'service unsupported-transceiver' enable

CSCuy88976

Polaris: Popinac gigE ports not coming up sometimes on FCV image

CSCva57167

Uneven traffic drops at ingress for 10G with ArgusX and ESP100

CSCva29285

ASR1K: CPP performance numbers capture when sent 64 bytepacketsacross PC

CSCuz75265

ASR1k: "sh plat software peer interface-manager rX" missing some info

CSCva33029

AN: ISR-G3/ASR1K punts CD even after disabling autonomic

CSCuz08379

NHRP ERROR message printed on spoke when BFD is configured only on HUB

CSCuz28143

40K:ipv6 multicast packet loss seen during RP switchover

CSCuz75954

16.3 : Router hangs while verifying mac limit with l2vpn profile

CSCuz57939

PfRv3/ISR4k-channel is unreachable when there is no traffic after clear

CSCuz69348

Polaris: clear domain iwan border channel doesn't work on XE platform

CSCuz67795

Polaris: different probing behavior with probe reduction between ISR/ASR

CSCuz17713

Router crashes with Ipsec/route map configuration changes

CSCuz57825

10 Gig int with macsec config, not up with shut/no shut on both KS/NonKS

CSCuy93714

ASR1001-X, frame counter increased after reload

CSCuz58508

CSR interfaces do not support user settable MTU

CSCuz09519

CSR: Ingress over-subscription not represented by 'show controllers'

CSCuz64672

Polaris_dev: resource service-plane-heavy not take effective with 8vCPU

CSCuz76369

AWS: CSR crashes, loses connectivity after detaching interface

CSCva45347

PCIe pass-thru w/ ixgbe driver causes MaxTu drops due to TCP reassembly

CSCva13262

AWS: All CSR interfaces are mapped to eth0

CSCuz64902

AWS: CSR csr_mgmt container fails to learn default route

CSCva11162

Config wipeout after add/delete an interface for ESX setup

CSCuz50549

CSR startup config sometimes disappear after reload.

CSCva20296

CSR1000v linux_iosd_vxe Core Seen After Qcow Install

CSCva27661

VASI subsystems are not packaged in ipbasek9 image for CSR1K platform

CSCuz94912

[UniScale]CSR loses startup config and picks up gw hostname after crash

CSCuz22828

up14b : Performance drop for Complex QoS case with 362 bytes packet size

CSCuz80782

Crypto low-queue queue-depth goes over queue-limit

CSCuz60031

Trace back observed in CPP_CP process after SSO

CSCva56329

DMI - AAA authentication/authorization timeout does not try fallback

CSCuw11002

Polaris: Firmware version displayed as "unknown" in latest CGE7 image

CSCva17867

ASR device is crashing on adding interfaces to AVC through Webui

CSCva00718

ASR1k crash after making MQC config changes

CSCva58151

ASR1K-ESP100 crash when a link with tunnels go down

CSCuz55555

Traffic rate getting affected by qos policy

CSCva02658

NBAR crash@__be_cvla_free_no_reuse_internal

CSCva47695

Entry leak in the SID_CAM leading to SID_CAM_OVERFLOW

CSCva66139

Crash when FNF FIA is enabled

CSCuz00895

ESP crash observed while testing with Orange Configs

CSCva72169

16.3:Image goes missing in stby-bootflash/harddisk after format and reload

CSCva07535

AWS : CSR Crashed after copying config file using kron-policy

CSCva38141

163: DTE not going down while applying rx clock less than threshold

Resolved Caveats—Cisco IOS XE Denali Release 16.3.1

All open bugs reported in Cisco IOS XE Denali Release 16.2.1 have been resolved, unless listed in the “Open Caveats—Cisco IOS XE Denali Release 16.3.1” section.

Resolved Caveats—Cisco IOS XE Denali Release 16.3.1a

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Identifier

Description

CSCvb29204

BenignCertain on IOS and IOS-XE

CSCvb04298

NTP-PTP: Invalid PTP time during NTP leap second insertion/deletion

CSCvb19326

NTP Leap second add not working in Polaris

Resolved Caveats—Cisco IOS XE Denali Release 16.3.2

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Caveat ID Number

Description

CSCuz52914

Openstack: CSR goes in grub mode if Hard Reset

CSCvb46106

Router crash when removing EzPM configs

CSCva80209

cpp ipv4 multicast mLRE crash

CSCvb29458

UP01v6 : ISR4321 has performance drop for CEF-IPv6 of -8.63%

CSCvb77550

PfR channels unreachable with quick monitor and quick monitor probes to 1 in 10 secs.

CSCvb11664

ASR1k:16.3_MR smd crash in FIPS Mode

CSCva31303

ODNS: DNS breaks for hosts when ISR is enabled for both ODNS and Snort

CSCva87492

16.4: Packet drops observed while verifying BGP Flowspec.

CSCvb38535

Dreamliner failed to power up PD in some kind of case

Open Caveats—Cisco IOS XE Denali Release 16.3.3

All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.

Caveat ID Number

Description

CSCvc81017

ISR4k:EssNoEncapInfo drop seen for pkts transit via PPPoA

CSCvc16495

Power supplies showing "ps fail" when they function fine

CSCvc07319

Random Netclock error messages appearing on console

CSCvc89102

ASR1000 doesn't send PPP ECHO Reply

CSCvd10362

Deletion of channel-group failed on QFP when FR encaps set on associated Serial Int.

CSCvc15571

applying MPLS-TE command on an interface stops the complete traffic

CSCvb31243

IOSd crash in QoS stats

CSCvc91743

Platform does not trigger license release when the port moves into error disable state

CSCvc89965

After reload ASR take incorrect Local Preference withroute- map using RPKI

CSCvd16828

High CPU due to BGP Task process

CSCvd15140

Router crashes using show BGP commands

CSCvd06688

Traceback: loop in Crypto ACL creates CPUHOG then crash at large scale

CSCvc78492

Unable to pass traffic if spoke to spoke fails to build in phase 2

CSCvc46230

PfRv3: Crash While Evaluating/Moving TC's Between Channels

CSCvd04871

Crash after IWAN does a recalculation in the RIB

Resolved Caveats—Cisco IOS XE Denali Release 16.3.3

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Caveat ID Number

Description

CSCvc06453

As1k @ CFM traffic frames being sent with 2 dot1q tags

CSCvb30256

ASR1000-2T+20X1GE: More than 1Gbps traffic is reported on 1GE port

CSCvb49832

ASR1k-ELC- XCVR disabled after router reload and interface is down

CSCvc06521

EPA-18X1GE and EPA-10x10GE reloads unexpectedly with traffic and EPA OIR

CSCvb01450

IP/ARP connection failed between two direct-connected interfaces

CSCvc23830

Vlan Oversubscription packets are not working.

CSCvb36753

Ingress Unicast traffic not received on the BDI.

CSCvb21886

POS interface doesn't come up on clearing alarms

CSCvc48813

BQS unable to resume processing leading to pending objects constantly increasing

CSCvb82048

Dual QFP Crash triggered by removing service policy from interface with mixed shaper feature enabled

CSCvb76638

POLARIS 16.4: fman_fp and cpp_cp core files seen with L3VPN profile

CSCvb09881

IWAN NBAR may cause a reload with pa_offset_to_addr

CSCva47695

Entry leak in the SID_CAM leading to SID_CAM_OVERFLOW

CSCvb87341

Ping to ASR1k with a MTU of 10000 Bytes and record option set fails

Open Caveats—Cisco IOS XE Denali Release 16.3.4

All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.

Caveat ID Number

Description

CSCvd69608

Asr1k crashes at PPP process on pushing 4 or more per-user static ipv6 routes

CSCve41768

ASR1K RP3 running Denali-16.3.2 - silent reload with Last reload reason: PowerOn

CSCve45753

R0/0: kernel: i2c_master_xfer (line 276): port 0, addr 19, len 1 c2w master failed to send data:

CSCve57422

ASR1k loopback I/F with Mgmt-intf vrf failed to communicate with peer device via G0 at RP2

CSCvc58538

BGP crashes when removing advertise-map

CSCve32217

Crash due memory corruption in AFW

CSCve44393

ASR1006 crashes due watchdog in the DHCP client process

CSCve13491

Router might crash due watchdog when creating a new swidb at if_index_allocate_index

CSCve59273

ASR FP Crash - Memory corruption in libSRTP

CSCur42069

Cube crashed when "sh sip-ua calls br" command entered

CSCve08418

IPsec/IKEv2 Installation Sometimes Fails With Simultaneous Negotiations

CSCvd06688

Traceback: loop in Crypto ACL creates CPUHOG then crash at large scale

CSCve07263

IPSec Tunnel stuck in Up/Down state after shut/no-shut - VPN Interop

CSCvc46230

PfRv3: Unexpected Reload While Evaluating/Moving TC's Between Channels

CSCve08943

QFP sorter interrupts related to REAL_DISTANCE are fatal when they should be informational

CSCve59906

router crash with "param long-dur-action disconnect"

Resolved Caveats—Cisco IOS XE Denali Release 16.3.4

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Caveat ID Number

Description

CSCvb21929

ping fail under pppoe configuration

CSCvd90801

EPA-18X1GE/ GLC-TE / asr1000rpx86-universalk9.16.03.03.SPA.bin MDI/MDIX fail

CSCve09829

ISSU: 16.3.4 <-> 16.5.1 Config_Sync@lacp rate fast after Loadversion in RP2 platforms

CSCvc88902

Crash on fw_ha_chk_selfzone

CSCvc39443

router may crash with ZBFW ACL modification

CSCvc10866

ISATAP Server feature broken on ASR1K

CSCvc83037

ESP crash while doing NAT ALG

CSCvc91743

Platform does not trigger license release when the port moves into error disable state

CSCvd61632

"distance bgp 255 0 0" getting conf under IPv6 AF after some sequence of steps

CSCvc89965

After reload route policy processing not re-evaluate with route-map using match RPKI

CSCvc99820

BGP crashed configuring different update-source interface with v6 LL peering

CSCvd09584

eVPN PMSI VNI decoding / encoding as MPLS label

CSCvd16828

High CPU due to periodic route refresh to VPN peers using rtfilter AF

CSCvd15140

Router crashes using show BGP commands

CSCvd43437

Wrong Source IP Selection for eBGP in EVN/VNET environment

CSCvb20224

Router crashes on configuring bandwidth on the Dialer interface

CSCuy27746

CDP packet causes switch to crash due unexpected exception to CPUvector

CSCvc96709

Crash using EIGRP and DVTI with IKEv2

CSCvc65604

VNET global vrf neighbor is down after an interface flap

CSCvc14385

Missing FIB subblock causes crash when configuring vrf

CSCvc55378

ASR1k crashed while unconfiguring Netflow

CSCvd27889

Crash occurred with APPNAV on ASRK

CSCvd58820

Need API for ip best source address for given outgoing interface

CSCvc35453

ISATAP Server feature broken on ASR1K

CSCuz63888

Crash in "show ipc all" @ ipc_print_ports_internal

CSCvc66912

CUBE Ent crashes when Diversion header received with no user portion and 'history-info' enabled

CSCvc34235

"crypto ipsec fragmentation before-encryption" command disappears after reload

CSCvd40880

Modifying crypto ACL leads to a removal of crypto map config

CSCvc09368

Crash at update of context nhrp

CSCvc75262

GETVPN GM in "Not initialised" state after ISSU runversion

CSCvc35196

Behavior difference between XE3.17 and Polaris

CSCvc59750

IKEv2 Aggregate-auth Timing Issue

CSCvd69373

IKEv2: Unable to initiate IKE session to a specific peer due to 'in-neg' SA Leak

CSCvd39741

IOS IKEv2 profile NVgen local auth is rejected from startup configuration upon reload

CSCvb94392

Cisco IOS and IOS XE System Software SNMP Subsystem Denial of Service Vulnerability

CSCvd25106

2nd isis instance crashes after configuring new connected-prefix-sid-map due to no instance PDB

CSCvc51408

ISIS route oscillation due to ldp sync and interface max metric

CSCvc49232

Crash in IWAG GTP on removing config

CSCvb47581

IWAG leak in MCSA component

CSCvc15923

L2TP Account accuracy: SSS disconnect ACKs are not received for few sessions

CSCvc17525

complete traffic drop with DATA MDTs with latest polaris_dev

CSCvc82325

Crash after the MPLS LDP neighbor flap in the NSR scenario

CSCvd01488

Running command "show policy-map interface" or "show tech nbar" can cause crash

CSCvd41270

Crash on IWAN Hub when TC is uncontrolled and current channel is present

CSCvd36813

Memory Leak due to cent_rt_eigrp_nh_convert

CSCvd29705

PfR Monitoring do not display VRF101 data and reports FVRF incorrectly

CSCvc62532

HTTP connection may fail when IPv6 address is configured on any interface

CSCvc65670

NTP leap second addition/deletion for consecutive leap months not working properly

CSCvc19234

Old Constrained Node Sid not getting deleted from MPLS forwarding table on changing SID

CSCvc12420

OSPF SRTE: CSTR path is not installed in some cases properly.

CSCvc71872

OSPF: IPFRR repair path computation stopped after receiving type 10 opaque EPL lsa.

CSCvc54359

SRTE: Single hope tunnel doesn't install any repair path.

CSCvc23238

SRTE: when i/f address is removed, traceback is seen and adj-sids not destroyed.

CSCvc54211

Tunnel & repair path continuously flapping on disabling SR on next node from head-end.

CSCvd58884

During PKI enrollment, Cisco router rejects CA/RA reply containing HTTP 500 "Internal Server Error"

CSCvd69397

Crash on vtcp parsing in Extended Processing Path for the FIA.

CSCvd82881

16.6: ASR1K: RP crash seen @cpp_bqs_rm_yoda_init_or_save_child.

CSCvc71183

ASR1K ESP100 - Both ESP crashing due to cpp_bqs_srt_yoda_place_child_internal: failed to grow tree

CSCvc83373

cpp_cp process crashes due to sw wdog expiring while creating a queue

CSCvd68301

Crash when interface with multiple tunnels sourced comes up

CSCvc80135

Crash when removing and re-adding bandwidth remaining percent while class-default has fair-queue

CSCvc74759

Dual QFP Crash triggered by removing service policy from interface with mixed shaper feature enabled

CSCvd23034

Multiple Parent Events Per Node lead to a crash

CSCvd47310

Secondary SUP keep crashing @ CPP Client process failed

CSCvd23920

ASR1001-X crashed when add QoS config

CSCve01564

CPP DRV: Transit Entrenched Recycle Path Does Not Enforce Packet Order

CSCvc79819

ESP100 crashes after manual failover

CSCvb28686

Throughput stuck after applying/removing qos policy

CSCva31708

SR:RSP2:Object download failure(EOS object)error seen randomly

CSCvd68050

CHUNKBADREFCOUNT crash

CSCvc26599

ASR crashes when attempting SRTP/TLS call

CSCuz52528

Evaluation of all for OpenSSL May 2016

CSCvb48683

Evaluation of all for Openssl September 2016

CSCut35260

SSL Handshake failure with rc4-128-md5 cipher on ASR/ISR platforms

CSCvb72458

Router repeatedly crashing with "%UTIL-3-TREE: Data structure error"

CSCvb27784

Router crashes when running the csim start command

CSCvd18792

ISR4K - Hoot and Holler E&M port cannot be co-located with multicast hub

Open Caveats—Cisco IOS XE Denali Release 16.3.5

All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.

Caveat ID Number

Description

CSCvf81695

ASR1K encryption processor trace file is not valid

CSCvf60961

BGP scanner crashed with add/remove command bgp mpls-local-label

CSCvg05896

IWAN EIGRP SAF - seq number mismatch after branch reload

CSCvd11419

Configuring Packet tracer on IOS-XE triggers a crash intermittently

CSCvg09010

KS merge fails for groups with TBAR due to PST update failure on primary KS

CSCuz16455

ISIS SR: Subtract 3 instead of 2 from PD maximum label support for TILFA

CSCvg03683

ASR1K CGN NAT ASR1K ESP100 crashed with clear ip nat translation *

Resolved Caveats—Cisco IOS XE Denali Release 16.3.5

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Caveat ID Number

Description

CSCve54313

Crash in ALPS SNMP code

CSCvc77706

[DT]Crash oberseved while sending ANCP port up

CSCvd73062

PPPoE crash: due to invalid dlidx while Virtual Access Interface is not yet attached to Dialer.

CSCvc16495

Power supplies showing "ps fail" when they function fine

CSCvc42059

tracelogs/punt_debug.log* missing when punt keepalive timeout / crash occurs

CSCvf13960

Incorrect status in show facility-alarm status after Gi0 no shut

CSCvc48365

ASR1000-6TGE/2T+20X1GE:- Chunk corruption in XLIF pending process

CSCvf59830

ASR1001-HX/ ASR1002-HX/ MIP-100 not able to send dot1q packet in EoMPLS.

CSCvf11991

cpp-mcplo-ucode crash when layer 2 switching packet

CSCve25878

ASR1001-X: dot3StatsDuplexStatus gives unknown for tengig and gig interfaces

CSCve53205

ASR1k 3.16 - ASR1k-ELC- XCVR disabled after router reload and interface is down

CSCvd62780

CPAK-100GE-EPA sends out pause frames continuously when pause frames are received

CSCvd90801

Ping failure on 1G EPA port with SFP GLC-TE/SFP-GE-T

CSCvf50756

ASR1001-X crashes on smc_msg_send_fragment

CSCvd63476

Changing autoneg setting on ASR1K cause link failure on subsequent link flap ( connected to 2960XR)

CSCve44236

ISR4K crashes after assert failure in PA packet-buffer infrastructure

CSCvd10362

Deletion of channel-group failed on QFP when FR encaps set on associated Serial Int.

CSCve70876

Crypto device microcode hangs and crashes on ASR1k routers

CSCuw94493

Octeon core hang causing F1/F0 offline

CSCuu68879

ISR4300 shows abnormal large RTT/jitter value in IP SLA udp-jitter v2/v3

CSCvc83900

MIB counter, ipIfStatsHCOutOctets, does not show correct value

CSCvf01501

NBAR data-plane crash for DNS TXT query with an additional record

CSCve08344

Crash due to FNF while collecting and adding entries to cache

CSCvb50530

L2TP sessions cannot connect - Report Dataplane error

CSCve47695

ucode crash@cfg_qos_exported_hier while remving child policy from parent policy

CSCvf05057

SPA-1XCHSTM1/OC3 : IDB Mismatch between Active & Standby RPs in ASR1k

CSCvb78322

input frame and CRC counter increasing on administratively down Tengi interface

CSCuw97842

Standby RP crash at be_ancp_get_dsl_line_attrs

CSCvc58538

BGP crashes when removing advertise-map

CSCvd90251

Duplicate BGP prefixes are not dropped

CSCve68911

Nested Enhanced Route Refresh requests triggers Stale Prefixes.

CSCuz20869

RFC: BGP sending error sub-code: 8 instead of '4'

CSCvf62916

Router crashes when doing "show ip bgp neighbor" on a flapping BGP neighborship

CSCve51657

Slow convergence with scale after a core link flaps

CSCvf24713

stale path message for that prefix is noticed when dampening is configured.

CSCve57697

Crash in Bstun SNMP code

CSCvd63393

Policy-map name 'policy-map PIN-G3/1/3.8' causes TB and subsequent RP Crash on Policy deletion/add.

CSCvb20224

Router crashes on configuring bandwidth on the Dialer interface

CSCvd19860

OSPFv3 AUTH breaks IPv6 traffic intermittently

CSCvd80715

ASR1k IOSD crash due to memory corruption in aaa accounting

CSCve61344

DHCP NAK is observed with Rebind request

CSCve81985

Subscriber session not synced to standby while assigning static ip in DHCP

CSCvb86484

wrong EIGRP redistribution statement in startup config breaks BGP settings atfer router reload

CSCvc98571

EEM applet will not release the Config Session Lock if it ends when CLI is in configuration mode

CSCve59273

ASR FP Crash - Memory corruption in libSRTP

CSCvf92057

CUBE is unable to send PRACK to Skype server for inbound calls

CSCvf81579

ASR1K: IOSd crash in kmi_initial_check on null map dereference

CSCve10917

IPSec crash on ASR1k router while processing KMI

CSCvd99474

IPsec: For sVTI after rekey old SAs are not getting deleted

CSCvf11237

Memory leak seen@crypto_init_show_instance

CSCve87898

Session coming up late after RP failover due to PD delay in polaris

CSCvc78492

DMVPN : IOS-XE - Unable to pass traffic if spoke to spoke fails to build in phase 2

CSCvf34835

IOS-XE GETVPN KS crashes while sending cgmGdoiKeyServerRegistrationComplete trap after GM reg

CSCve20850

asr1k is unable to recover from the tunnel flapping at scale for IKEv2 dmVPN/BGP

CSCvb75167

Crash in Crypto IKEv2 process

CSCvd54358

Dynamic routes don't get propagated if old session is present in In-Active state.

CSCvc78694

Ikev2 SA INIT queue CLI : Fix default behaviour

CSCve07263

IPSec Tunnel stuck in Up/Down state after shut/no-shut - VPN Interop

CSCuz15131

dqueue not empty prior to destruction crashes ipv4fib_les_switch_wrapper

CSCvd97524

Fixed versions for CSCuz15131 crash when traffic with maximum size is on wire

CSCvb14640

Cisco IOS and Cisco IOS XE Software IPv6 SNMP Message Handling Denial of Service Vulnerability

CSCuy09470

ISIS hello stops to be sent after RSP switchover

CSCvd21785

ISIS RIB and Global RIB out of sync resulting in complete traffic loss

CSCvd60080

Radius attribute Acct-Terminate-Cause - 49 difference

CSCve47374

assert stop processing leaks memory

CSCvd72530

ASR1k configured as PxTR crashes when booted with 16.5.1 image at LISP fwd background process

CSCvd47567

Unexpected reboot with NAT and Multicast configured

CSCve98696

Interoperability issue of 16.3.4 with other releases

CSCve86613

IOSXE-RP Punt Service Process crash @ __be_fmm_flow_int_table_entry_compare

CSCve61713

PfRv3: Crash in Route-Control Process

CSCve14782

PfRv3: Crash Observed While Checking/Modifying Channel Prefixes

CSCve43611

PfRv3: Multiple TCAs Logged Simultaneously May Lead to Crash

CSCvf29213

PFRV3: Site Prefix shows unreachable after removing and adding the specific route for the prefix

CSCve80719

Site-prefix learning: Prefix withdrawal not working for hub-> branch on 16.6

CSCve92511

Site-prefix of Peer BR is not synchronized after shut/no shut BR border

CSCve15722

The second and later PfRv3 VRF configs are missing after reload

CSCvc07577

Crash in BGP due to regular expressions

CSCvf51341

Crash after show ip ospf database summary command

CSCvd48206

OSPF TILFA SCALE: On reopt or clearing OSPF process, no. of protected prefixes goes down drastically

CSCvd73491

OSPF TILFA SCALE: with 2K Inter-area Prefix Scale, some non-ECMP routes are not getting protected

CSCvd40276

OSPF: Not able to remove ospfv3 config under Virtual-Template

CSCvd38714

OSPF: When anycast present in two areas, when one area is removed, rout not getting installed in RIB

CSCvd67254

Crash during CRL fetch failure

CSCvd38619

EST client pki authentication request goes out to default URL always

CSCve29882

EST client pki simpleenroll request goes out to default URL always

CSCve53984

ISR 4300 crashed while importing certificate

CSCvd69749

PKI Server: "Rollover RA Certificate" Becomes "Rollover ID Certificate" After Reload of Router

CSCve52258

Both ESP crash on changing COS type on ATM VC

CSCve42512

Both ESP crash on changing shaper rate under port-channel

CSCve48009

cpp_cp_svr crash seen on ASR1002-X and device keeps rebooting with 16.5.1b

CSCve49596

fp crash while changing port-channel from vlan based mode to LACP

CSCve40432

Yoda: Collapse HQF Aggregation Node

CSCve76827

large NAT policy-map takes long time to download

CSCvf74154

SGACL: cpp_sp_svr crash during CFM EDIT request with reseq_enable = TRUE

CSCvd72277

[UniScale]asr1k peers crashed while unconfiguring testbed devices in IPSEC IPv6 Ikev2/SCM

CSCve08943

QFP sorter interrupts related to REAL_DISTANCE are fatal when they should be informational

CSCve98056

ESP ucode crash with ALG for PPTP traffic and PAP is enabled.

CSCva28875

NAT ALG fails on Multipart SIP Header

CSCvc60745

tcp_getbuffer memory leak - refcount not reduced when packet dropped

CSCve60402

Crash in Voice DNIS SNMP code

CSCvf18162

Crash observed in Mlpp-Bacd scenario

CSCve71893

ISR4K - Hoot and Holler multicast replication issue

CSCve21448

multiple ISR4K VGW's crashed with Segmentation fault(11), Process = DSMP

CSCut98625

ASSERTION FAILED : ..vtsp.c: vtsp_cdb_assert: then crash

CSCvf19607

ISR4K not correctly handling forked 18X responses with SDP

CSCuy68013

Switch crashed after add "ip wccp 61 global" command during traffic

Open Caveats—Cisco IOS XE Denali Release 16.3.6

All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.

Caveat ID Number

Description

CSCvf80757

NETCONF-YANG/RESTCONF edit config fails silently, subsequent get config reports false-positive

CSCvg05452

IOS-XE router crash from memory corruption during CCB cleanup

CSCvg94600

crash with "debug platform condition ipv4 access-list "

CSCvh14715

unexpected reload due QFP cpp-mcplo-ucode exception

CSCvh47124

Nexthop is wrong in route-import table on branch when delete WAN interface and reconfigure it

CSCvh96950

16.3:Ping failure and router crash while testing PFRv3 scenario

CSCvh97792

Router: CCE crashed with EPC classify pkts

Resolved Caveats—Cisco IOS XE Denali Release 16.3.6

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Caveat ID Number

Description

CSCus14734

IP SLA http operation with customizable status for return codes

CSCuw85826

Evaluation of Cisco IOS and IOS-XEl for NTP_October_2015

CSCux86075

Unexpected crash during SSH operation

CSCuy74937

ASR1k: upgrade rom-monitor filename flash: returns "Invalid File"

CSCuy91126

POLARIS: IPSec FlexVPN PSK does not scale on asr1013/RP2/ESP100

CSCva46459

SSH session hangs if it is not closed properly

CSCva89792

Auto-registration failure warning and RTP port allocation failure

CSCva92216

BGP session is reset when unrecognized capability received in OPEN message

CSCvb00288

CME No ringback after blind transfer

CSCvb34443

ikev2 fragmentation not working with aes-gcm encryption - hmac failure

CSCvb53469

Ephone-DN remains in down state when restart all is given in telephony-service

CSCvb65024

LDAP authentication reuses old TCP connection

CSCvc18534

Incorrect Radius Server Status when locally defined user called in tester command

CSCvc26134

self-generated packets sent fail over PMIP-MUDP tunnel in LMA

CSCvc61653

Polaris: polaris memory leak in btrace thread deletion: cli_agent.

CSCvc63958

SIP CME relays out "Authorization: header" received from IP Phone.

CSCvc77378

Glare condition exists for mid call DO INVITE when CUBE receives in-dialogue SIP OPTIONS message

CSCvd11419

Configuring Packet tracer on IOS-XE triggers a crash intermittently

CSCvd16501

High CPU due to SNMP ENGINE when polling mplsTunnelHopEntry

CSCvd64670

SCEP enrollment failing with HTTP/1.1 500 Internal Error

CSCvd69608

Asr1k crashes at PPP process on pushing 4 or more per-user static ipv6 routes

CSCvd80837

Crash observed in DHCP SIP

CSCvd96815

Enhancement: Un-controlled TC in DISCARDED state is dropped instead of RIB-routed

CSCve09104

Command "segment-routing mpls" under router isis 1 not getting NVGEN'd

CSCve53263

Configured Speed/Duplex are not supported on Mgmt Eth port

CSCve54486

Crash when attempting to assign nonexistent/shutdown VLAN to 802.1x port

CSCve55089

BGP crashes at bgp_ha_sso_enable_ssomode

CSCve57506

IPv6 ESP traffic incorrectly dropped after decryption by IPv6 interface access-list

CSCve59906

router crash with "param long-dur-action disconnect"

CSCve68771

Crash in TCL/AFW processes

CSCve74806

Standby Router crash when there is a m-line shrink case within the dialog.

CSCve75919

In-dialog options ping received post ACK (call completion) cause cube to change codec and no audio

CSCvf05864

BGP RR changes tunnel parameters for bgp evpn route type 3

CSCvf11721

ASR1k netflow crash at flow_def_field_list_copy_with_callback

CSCvf16338

voiprtp_register_transport_port_manager_and_reserve: Alloc ports failed, min: 8000, max: 48199 248

CSCvf16448

No all IPv6 GRE crypto tunnels may come up or recover from flapping at scale

CSCvf24607

Ipsec Session Fail After Up/down Link Between Dmvpn Tunnel

CSCvf24928

QFP exmem memory leak in cpp_fm_sce_result_chunk

CSCvf30703

Watchdog crash at sla_resp_config_command when executing the "show run" command

CSCvf31368

router crash after EEM-wanfailover script triggered

CSCvf33947

CUBE can't handle mid-call re-invite when midcall-signalling passthrough mediachange is configured

CSCvf35507

Crash in SSH Process due to SCP memory corruption

CSCvf36269

Cisco IOS and IOS XE Software Plug-and-Play PKI API Certificate Validation Vulnerability

CSCvf36888

IOS-XE DMVPN Per-tunnel QoS not working on CSR1k without AX license

CSCvf38050

Voice Gateway crash due to memory corruption while finding DN index during redirect

CSCvf39474

GETVPN: TBAR sync "timer is not running" after KS upgrade causing anti-reply drops and GM outages

CSCvf43271

Traceback: Stack master crash at dot1x authentication

CSCvf48159

Router crash during T38 fax bitrate negotiation

CSCvf60862

Cisco IOS and IOS XE Software IOS daemon Cross-Site Scripting Vulnerability

CSCvf63269

After on the vnic edit on the fly changes - LAN-SRIOV sub interface ping fails after Reboot of ISRv

CSCvf63541

BGP w/global import/export crashes when several nbrs deleted simultaneously

CSCvf65522

ESP crashed - double_exception_has_occured - malformed PIM packet over GRE tunnel & ERR_DTL_INV_ADDR

CSCvf67269

IS-IS support for mult-instance redistribution for IPv6.

CSCvf68261

Crash when printing IPSEC anti-replay error

CSCvf70383

Crash in SDP Passthru when T.38 as 1st mline in mid-call SDP

CSCvf73320

[UniScale]isr4431 crashes while finding NDR with max oif number per multicast grp at scale

CSCvf74829

CRL download fails due to "failed to create getcacert message"

CSCvf76535

B2B NAT HA: Stale NAT translations stuck on primary router after communication loss with standby

CSCvf80163

ASR1K crashes due to crypto microcode with no corefile/crashinfo

CSCvf80495

IPv6 BGP network advertized not seen in the peer

CSCvf81695

ASR1K encryption processor trace file is not valid

CSCvf86462

Recommitx2: ASR1006-X memory leak fman_rp after sending 100,000,0 ARP entries

CSCvf89608

Missing ip route to cellular interface after router reload or modem power cycle

CSCvf89894

GETVPN // Primary KS sending rekey first to GM's and then to Secondary KS via scheduled rekey.

CSCvf92460

show gtp parameters causes RP to crash

CSCvf94948

Input policy-map classify traffic incorrectly - ISR4331

CSCvf95077

Stale Mac entry in MLRIB

CSCvf95141

ZBF crashes on standby

CSCvf96035

ISIS redistribute connected not working for IPV6 routes

CSCvf97230

RE-INVITE and OPTIONS Glare not handled by CUBE

CSCvg02533

router crashed after triggers with debug

CSCvg05896

IWAN EIGRP SAF - seq number mismatch after branch reload

CSCvg14256

Crash at cc_detect_mute_call

CSCvg15158

DMVPN session get stuck in NHRP and UP-NO-IKE state without active IKEv2 session until rekey

CSCvg17971

ASR1k ESP may crash after a switchover if IPsec configured

CSCvg20200

Polaris: Crash observed while client association with key-wrap enabled in controller.

CSCvg21440

Memory leak with DMVPN tunnel protection ipsec

CSCvg28395

Crash when doing snmp walk for ipAddressEntry

CSCvg31493

Stale Mac entry in MLRIB additional fix

CSCvg45247

Site-prefix learning: Unexpected Reboot in 'IP RIB Update' Process after 'no domain default'

CSCvg46973

ASR1K -LNS ESP crash after failing/flapping TeGig interfaces

CSCvg52560

Traceback: OCSP creates a large number of lists and triggers a memory problem

CSCvg60135

ASR1000 resets unexpectedly with reason as LocalSoft on Polaris Release

CSCvg60288

Device IP address AV pair replaced with 192.168.1.5

CSCvg74048

PKI: All SCEP requests fail with "Failed to send the request. There is another request in progress"

CSCvg75380

Polaris 16.3.5: Unexpected Reboot with Device Classifier enabled

CSCvg76912

CFD: pnp config upgrade failed when IFS returns size 0 for all TFTP files

CSCvg77410

qos/cce AOM pending batch ack due to BQS pending config

CSCvg84039

Traceback: Crash on WAAS menu prompt for WAN Interface

CSCvg85879

BGP sets the wrong Local Preference for routes validated by RPKI server

CSCvg89855

ESP crashed - cpp_cp failed in cpp_qm_event_proc_defer_parent_event

CSCvg90226

Crypto Traceback: Router crash at 'Crypto Support' segmentation fault

CSCvg92437

AToM: MSPW VC Down with Reason as No VC Remote Label Binding Received on RP SSO

CSCvg94978

CUBE Router crashed - Critical software exception, Process = CCH323_CT

CSCvg98890

IOS-XE GM router might crash after the rekey method is changed from unicast to multicast

CSCvh00038

Device IP address AV pair replaced with 192.168.1.5

CSCvh05611

IOSd crash while applying dial peer configuration

CSCvh17481

PKI: Device crash during crl download with multiple CDP URI

CSCvh24315

Memory leak for CCSIP_TCP_SOCKET and CCSIP_UDP_SOCKET on CUBE

CSCvh26560

ESP crashes with high scale QoS configuration

CSCvh47443

Spoke-to-spoke site-prefix reachability checking should be removed

CSCvh53691

FP crash with scaled IKE sessions.

CSCvh57091

ESP crash when flapping interface with l2tp tunnels that have qos applied to the tunnels.

CSCvh58702

Router crashes after interface flap where sessions get moved from one interface to another

CSCvh60525

CLI 'aaa common-criteria' not available on IPBASEK9 license

CSCvh64729

FP crash @cpp_qm_create_queue while adding fair-queue

Resolved Caveats—Cisco IOS XE Denali Release 16.3.7

All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.

Caveat ID Number

Description

CSCue23560

ASR1K FNF IPV4 Export MTU is fixed at 1500 bytes

CSCux20847

R0/0: ASR1002-X kernel: bullseye_i2c_master_xfer Error Repeats Every Hour

CSCvd04871

Crash after IWAN does a recalculation in the RIB

CSCvd14310

IP TUNNELS: Overlapping Loopback Interface Causes Incorrect Forwarding Decision with AppNav and PfR

CSCve23281

Crash on Session Border Control bad chunk free

CSCve56437

Router runs Denali 16.3.x may crash with AFW_application_process when sip call disconnect

CSCvf06123

Route-map not checked when packet is flowing from OUT to IN with Static Nat

CSCvf84349

Router crash on polling cEigrpPeerEntry

CSCvg03444

Hub MC continues to send EIGRP SAF hellos after adjacency removed

CSCvg05452

IOS-XE router crash from memory corruption during CCB cleanup

CSCvg06428

[ASR1006-X] After reload LC show as "inserted"

CSCvg09010

KS merge fails for groups with TBAR due to PST update failure on primary KS

CSCvg30991

IOS-XE routers: Memory leak observed on process ivr: peer_item_t in AFW_application_process

CSCvg33454

Pass load balancing information in IP header to container

CSCvg34731

IOS-XE MOS scores always show 4.x even with massive packet loss.

CSCvg41950

Cisco IOS XE Software Diagnostic Shell Path Traversal Vulnerability

CSCvg45950

packet drop seen intermittently if 40G traffic sent via cts interface

CSCvg47772

MAB CWA broken with ISE 2.3 CCO

CSCvg87048

Few Stale session are observed during vpdn longetivity

CSCvg94908

Mgig stack keeps crashing while configuring with Radius commands

CSCvg95562

CENT: branch MC crashed @ cent_pdp_msg_send_from_pickexit after CSCup19724

CSCvg97010

load-balance advanced moving traffic to fallback path when primary path are not over utilized

CSCvh06249

Crash when receiving EVPN NLRI with incorrect NLRI length field value

CSCvh14715

CVLA crash on memory merge scan task

CSCvh21717

Punted IPv6 NS packets input queue build-up memory exhaustion

CSCvh22348

ASR1006-X SIP's timestamp is not synced with RP timestamp.

CSCvh22775

SIP40 in slot 5 of ASR1013 when inserted ESP-200 in F1 by replacing ESP-40, showed ESI lock failure

CSCvh32216

Sporadic Crashes Due to IPSec (during ISAKMP AAA interaction)

CSCvh48610

iwan router crash while updating pmi policy

CSCvh57242

cpp-mcplo-ucode crash when layer 2 switching packet

CSCvh57657

NAT MIB not populated when using traditional NAT

CSCvh61453

NULL remote_hostname from LAC

CSCvh70356

ASR1K - ECMP load-balance w/ DPI L2TP Tunnel visibility and QoS may generate ucode crash

CSCvh75132

CPP crash stuck thread detected multikey_hash_replace_int

CSCvh79942

Chunk corruption crash related to PNP or Guestshell

CSCvh83215

IOS-XE Voice NIM/PVDM Service-Engine Admin Down leads to one-way audio

CSCvh83319

Interop vrrp doesnt work between cedge and vedge

CSCvh85788

Local LAN-only prefix present in master route-import table but not present in site prefix DB

CSCvh96821

ASR1004 started relaying clients' DHCP Discover messages to DHCP Server with the wrong IP address

CSCvh99576

LACP Rate defaults to fast with no way to change it to normal

CSCvi01745

cpp_cp_svr crashes, causing reload

CSCvi02816

ZBF not able to identify the WAAS optimized flow and drops ACK

CSCvi11065

Router cpp_cp_svr process crashes at cpp_qm_event_parent_event_create

CSCvi12657

BQS pending deferred is stuck

CSCvi13062

FP cpp_cp_svr crash @cpp_bqs_srt_yoda_place_child

CSCvi16454

Router crash due to PuntInject Keepalive Process - kmalloc failures

CSCvi21288

PFRv3 RC FIA is not enabeld on interfaces with one of sub-interface with xconnect config

CSCvi23169

ASR1006-X EPA card input errors

CSCvi24515

IOS-XE - FTP closing connection as NAT device does not process the 230 reply message

CSCvi27958

MIP100 get struck in disconnecting state on FP reload

CSCvi31038

Interface on ASR1001-X will become down/down after shut/no shut

CSCvi32156

Router crashes when DMVPN tunnel moves accoss ports

CSCvi38391

H.245 messages are not translated by NAT outside when H.323 video call is initiated from Out-2-In

CSCvi42002

CDP packets not getting encapsulated over multipoint GRE tunnel

CSCvi44988

C1111-8P: random commands may trigger TACACS+ to crash

CSCvi54878

Memory leaks seen at PKI_name_list_add(0xa139cc0)+0x3e

CSCvi56463

Unexpected Reset, Crypto IKMP Segmentation fault with IPSec AAA Configuration

CSCvi63840

vif interface counters do not increment with multicast service reflection on IOS-XE

CSCvi66343

ASR1K Datapath is not passing CTS tagging over PfRV3 auto-tunnel with "cts sgt inline"

CSCvi67613

Protocol type for GRE header doesn't work consistently with "cts sgt inline" enable over auto-tunnel

CSCvi70145

ASR1k | Segmentation fault in dhcp_sip process

CSCvi72480

Memory leak seen when having same src mac -address with different src ip address

CSCvi79674

CPP 0 failure Stuck Thread resulting in Unexpected Reboot

CSCvi86082

ASR1001-x crash due to wrong packet size

CSCvi86983

ZBFW HA: active router stuck in cold standby state after shut no shut the wan interface

CSCvi96164

PnP DHCP discovery over VRF fails when using server FQDN in option 43 string

CSCvj02081

CPP crash on L2TP router

CSCvj03263

H225 gatekeeper request dropping under "ALG PARSER" with ZBF

CSCvj23301

IOS: Crypto Ruleset fails to get deleted

CSCvj27172

Crash during Generic Call Filter Module cleanup

CSCvj29593

debug platform condition start causes keepalive failures with Vasi interface

CSCvj38384

%PMIPV6-5-TUNNELDELETE:

CSCvj41163

Memory size in smand process increases on 3850/3650 without any services, uplinks nor configuration

CSCvj41550

default channel operation state changing from I/O to D/O failed when zero-sla enabled

CSCvj49476

Telnet Sessions Hang/Become unavailable at execution of "show run"

CSCvj52681

dynamic vlan assignment causes all sisf entires under the port to be deleted

CSCvj57502

Memory leak@CENT-BR-0 when change the path label frequently

CSCvj67042

LAN Switches does not learn the right ED upon OTV failover

CSCvj67623

DNS ALG will not work when trying to match specific destination hosts

CSCvj70568

FlexVPN || DHCP entries not flushing for ikev2 timed out reconnect sessions

CSCvj76285

Snmp v2 breaks due to Authentication failure, bad community string, 16.03.06

CSCvj84104

PLR channel is not muted for some time

CSCvk15062

Modification to ZBFW access-lists do not reflect in TCAM

Open Caveats—Cisco IOS XE Denali Release 16.3.7

All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.

Caveat ID Number

Description

CSCvg67820

HIGH CPU observation on FMAN RP ESS EVENT TRACING

CSCvj64493

Standby switch crash whem removing kron scheduler command

CSCvj68607

ASR1K crash in tplus_handle_req_timeout

CSCvj88805

ASR1K - No kernel/coredump generated with watchdog reload event

CSCvj90089

Crash while doing a conference call

CSCvk24143

ASR1001-X crash due to free block at tty_handle

Platform-Specific Documentation

For information about associated services and modules in Cisco ASR 1000 Series Aggregation Services Routers, see: Documentation Roadmap for Cisco ASR 1000 Series, Cisco IOS XE 16.x Releases.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product Documentation.

To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the . RSS feeds are a free service.

Notices