New and Changed Feature Information

This table summarizes the new and changed feature information for the System Security Configuration Guide for Cisco NCS 5500 Series Routers, and tells you where they are documented.

System Security Features Added or Modified in IOS XR Release 24.x.x

Feature Description Changed in Release Where Documented

MAC Authentication Bypass

This feature was introduced.

Release 24.3.1

MAC Authentication Bypass

Layer 2 Untagged Sub-interface configuration in IEEE 802.1X Port-based Authentication

This feature was introduced.

Release 24.2.1

802.1X Port-Based Authentication

DSCP Marking from TCP Connection Phase for SSH Packets

This feature was introduced.

Release 24.1.1

DSCP Marking for SSH Packets

MACsec support for 1 GbE Optical SFPs

This feature was introduced.

Release 24.1.1

 Hardware Support Matrix for MacSec

Multi-Factor Authentication for SSH

This feature was introduced.

Release 24.1.1

Multi-Factor Authentication for SSH

Interaction with MASA through gRPC

This feature was introduced.

Release 24.1.1

Interaction with MASA through gRPC

Pre-upload Pinned-Domain Certificate

This feature was introduced.

Release 24.1.1

Interacting with MASA Through Web Application