SAE Core Function Pack Release 2.3.0 Release Notes Introduction The SAE Core Function Pack (FP) is a collection of multiple reusable NSO packages organized in layers. This FP supports on-boarding of both physical and virtual infrastructures. Services can be built on top of the FP using the strongly typed service models. The FP supports pushing Day1 configurations to the VNF via generic key-value pair paradigm. To deploy the VNFs, NSO uses VNF descriptors that are compliant with the ETSI-MANO specifications. Cisco Secure Agile Exchange Solution enables enterprises to quickly and securely interconnect users to applications by virtualizing the network edge and extending it to colocation centers. Large enterprises can benefit by deploying the solution themselves working with colocation centers or Colo providers can deploy SAE in multi-tenant mode and provide SAE services to its customers. NSO SAE Core Function Pack can help orchestrate service chains on managed hardware. Cisco End User License Agreement This software is governed by the Cisco End User License Agreement available at the following URL: http://www.cisco.com/c/en/us/td/docs/general/warranty/English/EU1KEN_.html Minimum System Requirements +----------------+--------------+--------------+-----------------+-----------------+ | OS | Ubuntu | Red Hat | CentOS | MacOSX | +----------------+--------------+--------------+-----------------+-----------------+ | Minimum Server | CPU-8 Cores | CPU-8 Cores | CPU-8 Cores | CPU-8 Cores | | Configuration | RAM-64 GB | RAM-64 GB | RAM-64 GB | RAM- 64 GB | | | Disk-250GB | Disk-250GB | Disk-250GB | Disk-250GB | |----------------+--------------+--------------+-----------------+-----------------+ | Version | | | | | | | 18.04 LTS | 7.3 (Maipo) | 7.4 (Core) | 10.12.6. | +----------------+--------------+--------------+-----------------+-----------------+ Supported NSO Version: 5.2.3.6 Supported Packages: --------------------------------------- NAME VERSION ---------------------------------------- cfp-catalog 1.0.4 cisco-apicdc-gen-3.12 3.12.3 cisco-dc-core-fp 1.0.1 cisco-dc-core-fp-common 1.0.1 cisco-dc-core-fp-rfs 1.0.1 cisco-etsi-nfvo 4.4.1 cisco-extension-framework 2.3.0 cisco-nx-cli-5.18 5.18.3 cisco-sae-asav-extension 2.3.0 cisco-sae-avi-extension 2.3.0 cisco-sae-core-fp 2.3.0 cisco-sae-core-fp-cfs 2.3.0 cisco-sae-core-fp-common 2.3.0 cisco-sae-core-fp-release 2.3.0 cisco-sae-core-fp-status 2.3.0 cisco-sae-f5-extension 2.3.0 cisco-sae-ftdv-extension 2.3.0 cisco-sae-netrounds-extension 2.3.0 core-fp-common 1.9.1 csp-nc-1.0 1.0 csp-vim 2.3.0 custom-template-utils 2.2.1 day1-templates 2.3.0 esc 5.3.0.94 etsi-sol003-gen-1.13 1.13.13 fxos-vim 2.3.0 infra-discovery 2.3.0 netrounds-ncc-nc-1.0 1.0 nfv-ro 2.3.0 openstack-cos-gen-4.2 4.2.21 resource-manager 3.5.2 tailf-etsi-rel3-nfvo-pftd 2.3.0 --------------------------------------------------- Devices Tested +-----------------+---------------------------------------------------------------------------+ | Device | Firmware Version | +-----------------+---------------------------------------------------------------------------+ | ESC on CSP | 5.3.0.102 | | ESC on VMware | SAE does not claim support for ESC on VMware* | +-----------------+---------------------------------------------------------------------------+ | CSP-2100 | | | CSP-5400 | | | CSP 5444 | | | CSP-5456 | 2.9.0.303 | | NIC Card-X710 | | | NIC Card-X520 | | | NIC Card-XL710 | | +-----------------+---------------------------------------------------------------------------+ | N9K | 9.3.3, nxos.7.0.3.I7.8.bin | | N9K-C9394C | | | N9K-C93180YC-FX | | | N9K-C93180YC-EX | | | N9K-C93108TC-EX | | +-----------------+---------------------------------------------------------------------------+ | APIC | 5.1(1k) | +-----------------+---------------------------------------------------------------------------+ | APIC Leaf | System: 15.0(1k) | +-----------------+---------------------------------------------------------------------------+ VNF's Tested +-----------------------------------------------------------------------+ | VNF | Version | +------------+----------------------------------------------------------+ | CSR1000v | csr1000v-universalk9.16.12.03.qcow2 | | | csr1000v-universalk9.17.02.01r.qcow2 | +------------+----------------------------------------------------------+ | ASAv | asav9-14-1-10.qcow2 | +------------+----------------------------------------------------------+ | FTDv | Cisco_Firepower_Threat_Defense_Virtual-6.5.0-115.qcow2 | +------------+----------------------------------------------------------+ | Palo Alto | PA-VM-KVM-9.0.4.qcow2 | | | PA-VM-KVM-9.1.0.qcow2 | +------------+----------------------------------------------------------+ | AVI | controller_18_1_5.qcow2 | | Controller | controller_18_1_3a.qcow2 | +------------+----------------------------------------------------------+ | AVI SE | Download AVI SE qcow2 from AVI Controller | +------------+----------------------------------------------------------+ | Fortinet | 6.0.2 | +------------+----------------------------------------------------------+ | PFTD | cisco-ftd.6.3.0.83.csp | | | cisco-ftd.6.4.0.102.SPA.csp | +------------+----------------------------------------------------------+ | Netrounds | netrounds-test-agent_2.27.0.9.qcow2 | | | netrounds-test-agent_2.29.2.13.qcow2 | +------------+----------------------------------------------------------+ Installation Instruction for the SAE 2.3.0 Release SAE installer is in signed bin format. Please download it and extract with following command sh nso-5.2.3.6-cisco-sae-core-fp-2.3.0.signed.bin Then extract nso-5.2.3.6-cisco-sae-core-fp-2.3.0.tar.gz. Please refer to "SAE-Core-Function-Pack-Installation-Guide-Version-2.3.0" for information on how to install SAE CoreFP. Note :- Installation only supports: Python3.6 and above Open/Oracle JDK upgrades to 11 or above Features Supported: * SAE version 2.2.0 to 2.3.0 upgrade * Mixed SAE versions per site * Support for VXLAN traffic handoff on external end point Bug Fixed Since SAE 2.2.0 Release: +------------+--------+------------------------------------------------------------------------------------------------------+ | Defect | Source | Description | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvx19517 | CDETS | SAE should support Sites with different CSP/VNF/NED/ESC versions | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvx19591 | CDETS | VNID handoff Method-CFP | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvw38045 | CDETS | Services not deleted completely after deleting them followed by deleting the site | | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvw88287 | CDETS | Custom template utils to allow single iteration or variable | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvx27712 | CDETS | RO fails = RO should check for enough CPUs when affinity rules are used | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvy11974 | CDETS | Clean-up action for service chain is stuck | +------------+--------+------------------------------------------------------------------------------------------------------+ | CSCvy03401 | CDETS | VNID handoff should support up to 16 Million VNID's | +------------+--------+------------------------------------------------------------------------------------------------------+ Known issues: Please refer CDET enclosures for work around. +------------+---------------------------------------------------------------------------------------------------------------+ | CSCvw54128 | SAE-ACI: Custom-template error on 2nd Fab-EPGW by NIC_1_IP_ADDRESS value is not provided | +------------+---------------------------------------------------------------------------------------------------------------+ | CSCvw66936 | Any update to APIC cluster fails when the data link between the leaf and the on-boarded APIC is down | +------------+---------------------------------------------------------------------------------------------------------------+ | CSCvw76626 | Ran out of ip addresses on fabric end of HA HC with Spine-Leaf or ACI environment | +------------+---------------------------------------------------------------------------------------------------------------+ | CSCvw77024 | recover-vnf-on-vim for VNFs failed from a down CSP to another with CSP local storage in non-cluster | +------------+---------------------------------------------------------------------------------------------------------------+ | CSCvy49846 | NED Migration for N9k erroring out with " Internal Error" Message | +------------+---------------------------------------------------------------------------------------------------------------+