New and Changed Information

This chapter includes the new and changed features for the Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 10.5(x).

New and Changed Information

Table 1. New and Changed Features

Feature

Description

Changed in Release

Where Documented

QKD MACsec fallback support

Added QKD MACsec fallback to Pre-Shared Key (PSK) support to establish a secured MKA session when the primary Postquantum Preshared Key (PPK) fails.

10.5(2)F

Postquantum Preshared Keys (PPK)

Guidelines and Limitations

CoPP configuration consistency

Added support to check CoPP configuration consistency.

10.5(2)F

CoPP Consistency Checker

DACL support on Cisco Nexus 9300 switches

Extended support for the DACL feature on Cisco Nexus 9300-FX3, GX, GX2, H2R, and H1 Series switches.

10.5(2)F

Guidelines and Limitations for Per-User DACL Support for 802.1X

uRPF support

Added uRPF support on Cisco Nexus 9800 Series switches.

10.5(2)F

Guidelines and Limitations for Unicast RPF

Increase RSA key size to 4096 bits

Extended support for RSA key sizes to 4096 bits for SSH and to 3072 and 4096 bits for cryptographic certificates.

10.5(2)F

Generating SSH Server Keys

Configuring SSH Passwordless File Copy

Generating an RSA Key Pair

Support for Dot1x with Voice VLAN

Added support for the 802.1X Voice VLAN feature to enable multi-domain 802.1X authentication on a single port, providing authentication support for both VoIP phone and data client behind it.

10.5(2)F

About 802.1X for Voice VLAN

Critical Authentication

802.1X Guidelines and Limitations for Voice VLAN

Configuring 802.1X for Voice VLAN

Security Group ACL (SGACL) Feature interaction support

Added support of Security Group ACL for the ESI, VXLAN-TE, VXLAN-PBR, CloudSec (DCI), and TRM features.

10.5(1)F

Guidelines and Limitations for IP ACLs