IR800

■System Bundled Image: ir800-universalk9-bundle.SPA.157-3.M2

This bundle contains the following components:

–IOS: ir800-universalk9-mz.SPA.157-3.M2

–Guest Operating System: ir800-ref-gos.img.1.6.3.1.gz

–Hypervisor: ir800-hv.srp.SPA.3.0.39

–FPGA: 2.7.0

–BIOS: 13

–MCU Application: 31

CGR1K

■System Bundled image: cgr1000-universalk9-bundle.SPA.157-3.M2

–IOS Version: cgr1000-universalk9-mz.SPA.157-3.M2

–Guest Operating System: cgr1000-ref-gos.img.1.6.3.1.gz

–Hypervisor: cgr1000-hv.srp.SPA.3.0.17

–FPGA: 2.9.0

–BIOS: 14

IR800

The latest image file for the IR800 series is:

https://software.cisco.com/download/navigator.html?mdfid=286287045&flowid=75322

Click on the 807, 809 or 829 link to take you to the specific software you are looking for.

The IR807 link shows only the image file.

The IR809 and IR829 links show three entries to choose:

■IOS Software

■IOx Cartridges

■IOx Fog Node Software

The IR829 also includes downloads for the AP803 Access Point Module:

■ Autonomous AP IOS Software

■ Lightweight AP IOS Software

Note : The ir800-universalk9-bundle.SPA.157-3.M2 bundle can be copied via Trivial File Transfer Protocol (TFTP) or SCP to the IR800, and then installed using the bundle install flash: <image name> command. The ir800-universalk9-bundle.SPA.157-3.M2.bin file can NOT be directly booted using the boot system flash:/image_name. Detailed instructions are found in the Cisco IR800 Integrated Services Router Software Configuration Guide.

Note : The cipher dhe-aes-256-cbc-sha (which is used with the commands ip http client secure-ciphersuite and ip http secure-ciphersuite) is no longer available in IOS 15.6(3)M and later as part of the weak cipher removal process. This cipher was flagged as a security vulnerability.

Caution : On older IOS releases, a problem exists where the MCU upgrade fails to complete and the IR829 stays in bootloader mode. The router will get stuck in ROMMON mode and must be sent back to Cisco with a RMA. The IR829 should only be upgraded to IOS version 15.6(3)M x. For example:
If the IR829 is running 15.5(3)M2, DO NOT upgrade to 15.5(3)M2. Go straight to 15.6(3)M x.

CGR1K

The latest image file for the CGR 1000 Series Cisco IOS image is:

https://software.cisco.com/download/navigator.html?mdfid=284165761&flowid=75122

For details on the CGR1000 installation, please see:

http://www.cisco.com/c/en/us/td/docs/routers/connectedgrid/cgr1000/ios/release/notes/OL-31148-05.html#pgfId-998856

Virtual LPWA support for LoRaWAN

The IR807 now supports Virtual LPWA in the same manner as the IR809/829.

See the Cisco Wireless Gateway for LoRaWAN Data Sheet for details.

For details on managing the LoRaWAN (IXM-LPWA-800) Gateway Module interface to IR800, refer to the Cisco IoT Field Network Director User Guide, Release 4.2.x and Release Notes for IoT Field Network Director, Release 4.2.x:

https://www.cisco.com/c/en/us/support/cloud-systems-management/iot-field-network-director/tsd-products-support-series-home.html

IOS APIs to Enable Native IOx Applications

Note : The IOx Host Device Management service package needs to be installed for this feature to work.

A new configuration command, hdm-enable, has been added in this release to enable the Host Device Management service:

For more information on IOx, please visit:

https://www.cisco.com/c/en/us/support/cloud-systems-management/iox/tsd-products-support-series-home.html

mSATA Card as Additional Storage

Previously, IR829 IOx/Guest-OS legacy systems on which end users can host applications, came with a disk storage of 4GB to store user data. Functionality has been added to the IR829 allowing for a module to add 50 GB or 100 GB of mSATA storage.

The pluggable mSATA cards are NOT hot-swappable, the device must be powered down to install or remove it. The cards are installed in the mSATA slot (formerly known as Limited Modularity slot). Additional details are available in the Cisco IR829 Industrial Integrated Services Router Hardware Installation Guide.

mSATA SKUs lists the new SKUs.

Table 1 mSATA SKUs

Software Configuration

Note : Functionality-wise, there are no configuration and troubleshooting differences to the end-user in IOS or IOx, with or without mSATA. The system simply recognizes the additional storage.

There are some CLI commands that will show information that pertains to the mSATA storage. Examples are show inventory, and show platform msata.

In the above example, new output is shown in blue. Note that the IR829 PID changed to IR829M if the mSATA is available. The mSATA PID states if it is a 50GB or 100GB module. The same information is displayed using the show diag command as well.

Note : The above information is shown in the show diag command as well.

There are some new SNMP OIDs created for the new IR829M SKUs.

Related IOx Documentation

See the following documentation for additional information:

Cisco IR829 Industrial Integrated Services Router Hardware Installation Guide.

Cisco IR800 Integrated Services Router Software Configuration Guide

Cisco IOx Documentation is found here:

https://www.cisco.com/c/en/us/support/cloud-systems-management/iox/tsd-products-support-series-home.html

Cisco IOx Developer information is found here:

https://developer.cisco.com/docs/iox/

Cisco IOS Release 15.7(3)M2

The following sections list caveats for Cisco IOS Release 15.7(3)M2:

Open Caveats

■ CSCvi59098

show run does not reflect show line stats when line configs pushed through stty from Guest-OS

Symptoms : Functionally there is no impact. the show line CLI reflects the correct data. The show run | i line' CLI alone reflects the same information for both line1 and line2, only when pushed from Guest-OS.

Workaround : N/A, no functional impact.

■ CSCvi59013

Serial relay line propagation not working from guest-os after making config edits in IOS

Workaround : Configuration can either be pushed from the Guest-OS or IOS. If using both interchangeably, you need to execute 'no relay line propagation' or ' relay line propagation' each time.

■ CSCvi14609

IOS image fails to boot if env var set in rommon mode

Symptoms : IOS image will not bootup from rommon2

Workaround : Set BOOT_IOS_SEQUENCE=0

■ CSCvi61559

Autoboot sequence sometimes stops at 16, instead of 20.

Symptoms : When there is a boot failure, for example a bootable image is not found, autoboot sequence failure should go all the way to 20. On occasion, the retries will only attempt 16 or 17 times.

Workaround : There is no workaround.

Resolved Caveats

The following caveats are fixed with this release:

■ CSCvh00968

Dynamic MAC learning fails with 'mac-address-table secure' configuration

■ CSCve34257

Autoboot suspension on repeated toggle during IOS bootup changed from 4 to 20.

Symptoms : To prevent constant IOS boot loop, for example with a bad configuration, the reboot loop to has been locked at 20. This helps prevent battery drain. The previous value was 4, now it has changed to 20 to give more leeway.

Workaround : In rommon mode, manually set BOOT_IOS_SEQUENCE=0. This is a new feature enhancement.

■ CSCvf36269

Cisco IOS and IOS XE Software Plug-and-Play PKI API Certificate Validation Vulnerability.

Symptoms : A vulnerability in the Cisco Network Plug and Play application of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data using an invalid certificate.

The vulnerability is due to insufficient certificate validation. An attacker could exploit this vulnerability by supplying a crafted certificate to the affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections.

Conditions : Device configured with the Cisco Plug and Play feature enabled and, with the PKI API feature enabled.

Special Note : Be aware that from this release going forward, Plug and Play made subject name alternative as mandatory field.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2018 Cisco Systems, Inc. All rights reserved.