About Cisco ASR 1000 Series Aggregation Services Routers
 Note |
Explore the Content Hub, the all new portal that offers an enhanced product documentation experience.
Get started with the Content Hub at content.cisco.com to craft a personalized documentation experience. Do provide feedback about your experience with the Content Hub. |
Cisco ASR 1000 Series Aggregation Services Routers are Cisco routers deployed as managed service provider routers, enterprise edge routers, and service provider edge routers. These routers use an innovative and powerful hardware processor technology known as the Cisco QuantumFlow Processor.
Cisco ASR 1000 Series Aggregation Services Routers run the Cisco IOS XE software and introduce a distributed software architecture that moves many operating system responsibilities out of the IOS process. In this architecture, Cisco IOS, which was previously responsible for almost all of the internal software processes, now runs as one of many Cisco IOS XE processes while allowing other Cisco IOS XE processes to share responsibility for running the router.
Migrating to Cisco IOS XE Denali 16.3
The Cisco IOS XE Denali 16.3 Migration Guide for Access and Edge Routers contains key information and steps that will help ensure a successful migration from extant Cisco IOS XE 3S releases, Cisco IOS XE Denali 16.2 to Cisco IOS XE Denali16.3. It is critical that you read this information before you begin migration to ensure that you have completed all the prerequisites and that you understand the migration process.
For a list of caveats in this release, see the Caveats section in this document.
New Features and Important Notes
New and Changed Information
The following sections list the new hardware and software features that are supported on the Cisco ASR 1000 Series Aggregation Services Routers.
New Hardware Features in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1
The following hardware features were introduced in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1.
Support for 10x10G EPA
For detailed information, see the following Cisco document:
Support for 18x1G EPA
For detailed information, see the following Cisco document:
ASR1000 Route Processor 3 (RP3)
Cisco ASR 1000 Series Route Processor 3 (Cisco ASR1000-RP3) runs the network operating system, BINOS kernel, and the IOSD (IOS daemon). The Cisco ASR1000-RP3 is supported on the Cisco ASR 1013, Cisco ASR 1006-X, and Cisco ASR 1009-X routers.
For detailed information, see the following Cisco document:
http://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/rp3/asr1_rp3.html
Cisco ASR 1001-HX Router
Cisco ASR 1001-HX Router is a part of the Cisco ASR 1000 Series and offers a compact form factor that consumes less rack space and power while offering 60 Gbps forwarding throughput. Cisco ASR 1001-HX Router supports all general purpose routing and security features of Cisco ASR 1000 Series Aggregation Services Routers.
For detailed information, see the following Cisco document:
New Software Features in Cisco IOS XE Denali Release 16.3.1
The following are the new software features introduced in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.1.
10/40 KM 10G BiDi SFP+
For detailed information, see the following Cisco document:
3-Level User-defined Queuing Policy Support
For detailed information, see the following Cisco document:
40/80KM 1G BiDi SFP
For detailed information, see the following Cisco document:
Allow Use of Same ACL or Router-map on Multiple NAT Statements
For detailed information, see the following Cisco document:
BFD Support on DMVPN
For detailed information, see the following Cisco document:
BGP - mVPN PE-PE Ingress Replication
For detailed information, see the following Cisco document:
BGP IPv6 Admin Distance
For detailed information, see the following Cisco document:
BGP IPv6 Dynamic Neighbor Support and VRF Support
For detailed information, see the following Cisco document:
Consumption of Forked 18x Responses with SDP for CUBE
For detailed information, see the following Cisco document:
CTS SGACL Support on Routers
For detailed information, see the following Cisco document:
Customization of NBAR2 Built-in Protocols
For detailed information, see the following Cisco document:
CVP TCL HA Enhancement
For detailed information, see the following Cisco document:
DMVPN Config Simplification
For detailed information, see the following Cisco document:
DNS Guard for DNS Learning Mechanism
For detailed information, see the following Cisco document:
DNS Protocol Classification Change
For detailed information, see the following Cisco document:
ECMP Loadbalance with Tunnel Visibility
For detailed information, see the following Cisco document:
EVPN VxLAN L3
For detailed information, see the following Cisco document:
IOx: Support 3rd Party Apps in KVMs
For detailed information, see the following Cisco document:
MacSec on ASR1002-HX
The Cisco ASR 1002-HX Router is a part of the Cisco ASR 1000 Series and offers a compact form factor that consumes less rack space and power while offering 100 Gbps forwarding throughput. The Cisco ASR 1002-HX Router supports all the general-purpose routing and security features of the Cisco ASR 1000 Series Aggregation Services Routers.
Effective Cisco IOS XE Denali 16.3.1, MACsec is supported on Cisco ASR 1002-HX Router in the 18-Port 1 Gigabit Ethernet Port Adapter (EPA-18X1GE) and built-in ports. The number of MACsec sessions supported on Cisco ASR 1000 Series Aggregation Services Routers is 464.
MACSec Support
For detailed information, see the following Cisco document:
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/macsec/configuration/xe-16/macsec-xe-16-book.html
MacSec support with ASR1000-MIP100 line card
The Cisco ASR1006-X Router and Cisco ASR1009-X Router create a future-proof modular routing platform to support next generation Forwarding and Route Processor modules with hardware redundancy. The Cisco ASR1006-X Router and Cisco ASR1009-X Router provide up to 200 Gbps slot bandwidth to enable new high density Ethernet linecards utilizing the ASR1000-MIP100 and Ethernet Port Adapters (EPAs), and integrating N+1 power-on-demand design to the ASR1000 portfolio.
Effective Cisco IOS XE Denali 16.3.1, MACsec is supported on Cisco ASR1006-X Router and Cisco ASR1009-X Router in the ASR1000-MIP100 Modular Ethernet Line Card and in the 10-Port 10 Gigabit Ethernet Port Adapter (EPA-10X10GE). In this release, 16 MACSec sessions are supported per 10GE port
Media Monitoring on Control Plane for CUBE
For detailed information, see the following Cisco document:
Multiple SIP-UA Support
For detailed information, see the following Cisco document:
Multitenancy Call Routing and Scaling Enhancements for CUBE
For detailed information, see the following Cisco document:
Multi-Tenant Support for NAT
For detailed information, see the following Cisco document:
Multi-VRF Support for CUBE
For detailed information, see the following Cisco document:
NAT Support on BDI interface
For detailed information, see the following Cisco document:
NSH Service Chaining for IOS-XE
For detailed information, see the following Cisco document:
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wan_nsh/configuration/xe-16/wan-nsh-xe-16-book.html
OSPFv3 Route Filtering Using Distribute-List
For detailed information, see the following Cisco document:
PfRv3 Burst Probing
For detailed information, see the following Cisco document:
PKI Trustpool Enhancements
Effective with Cisco IOS XE Denali 16.3.1, the way PKI Trustpools are managed have changed. The PKI Trustpool Enahancements feature is used for authentication of HTTPS connections built from the router.Common features that leverage this feature include, but not exhaustive, Plug and Play (PnP), Cisco Web Security (CWS), Cisco Umbrella Branch. If you are upgrading to this release, please review the changes to the feature at the following Cisco document:
Polaris YANG Infrastructure
For detailed information, see the following Cisco document:
QoS on GEC portchannel on ASR1k
For detailed information, see the following Cisco document:
QoS Service Group
For detailed information, see the following Cisco document:
Session-ID Support on CUBE
For detailed information, see the following Cisco document:
Set IP Next-hop Unchanged/Next-hop-unchanged Allpaths IPv4/IPv6
For detailed information, see the following Cisco document:
Support for 14 Member-links per GEC Bundle
For detailed information, see the following Cisco document:
Support for IEEE 1588v2 (Precision Clock Synchronization Protocol)
For detailed information, see the following Cisco document:
Transport Hierarchy Support for DNS
For detailed information, see the following Cisco document:
VxLAN GPE Tunnel
For detailed information, see the following Cisco document:
Web User Interface
Supports an embedded GUI-based device-management tool that provides the ability to provision the router, simplifies device deployment and manageability, and enhances user experience. The following features are supported on Web User Interface from Cisco IOS XE Denali 16.3:
-
Software Upgrade
-
Enhanced Interior Gateway Routing Protocol (EIGRP)
-
Network Address Translation (NAT)
-
Virtual Routing and Forwarding (VRF)
-
Application Visibility and Control (AVC)
-
Custom Application
-
Serial Interface
WebEx/Huron Requirements for Video SDP
For detailed information, see the following Cisco document:
New Software Features in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.2
The following are the new software features introduced in Cisco ASR 1000 Series Aggregation Services Routers for Cisco IOS XE Denali Release 16.3.2.
Bypass NAT Functionality
For detailed information, see the following Cisco document:
IWAN 2.2 - Multiple DMVPN Tunnel Termination
The IWAN 2.2 - Multiple DMVPN Tunnel Termination feature allows you to terminate two or more active DMVPN tunnels. The limitation of only one active tunnel per VRF on a device is not valid anymore. The routing protocol must be configured to ensure that there is one primary path and one or more secondary paths for a network. When Performance Routing (PfR) is used in conjunction with this feature, PfR is used as the primary path as well as the secondary paths so that all paths can be used in an active-active manner. Use the maximum-secondary-paths [eibgp | ibgp ] path command to configure this feature, where the path indicates the number of secondary paths a routing protocol is allowed to install. The range for path is from zero to 32.
Web User Interface - Configuring EIGRP Routing
Enhanced Interior Gateway Routing Protocol (EIGRP) is an interior gateway protocol suited for many different topologies and media. In a well-designed network, EIGRP scales well and provides extremely quick convergence times with minimal network trafficConfiguring EIGRP Routing.
Important Notes
The following sections contain important notes about Cisco ASR 1000 Series Aggregation Services Routers.
Display of Free Memory on the CLI
Starting with this release, the amount of free memory is computed more accurately. The output of the following commands (privileged EXEC mode) displays this information:
-
show memory platform
-
show platform resources
-
show processes memory platform
-
show platform software status control-processor
-
show platform software process list switch active R0 summary
Yang Data Modeling
There is a limitation toYANG data modeling, in which a maximum of 20 simultaneous NETCONF sessions only is supported.
The list of supported leafs (xpaths) in the Native Yang Data Models (ned.yang), Cisco IOS XE Denali 16.3.1 is available at:https://github.com/YangModels/yang.
Recommended Release for Cisco IWAN
Cisco IOS XE Denali 16.3.5 is not recommended for Cisco IWAN due to the following bugs: CSCvf98783, CSCvg35332, and CSCvg05896. Instead, it is recommended to use Cisco IOS XE Denali 16.3.5c for Cisco IWAN, which provides a fix for these bugs. For more details on these bugs, please see Cisco Bug Search Tool.
Deferrals
Cisco IOS software images are subject to deferral. We recommend that you view the deferral notices at the following location to determine whether your software release is affected:
http://www.cisco.com/en/US/products/products_security_advisories_listing.html
Field Notices and Bulletins
-
Field Notices—We recommend that you view the field notices to determine whether your software or hardware platforms are affected. You can find the field notices at the following location:
http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html
-
Bulletins—You can find bulletins at the following location:
http://www.cisco.com/en/US/products/sw/iosswrel/ps5012/prod_literature.html
Caveats
Open and Resolved Bugs
The open and resolved bugs for a release are accessible through the Cisco Bug Search Tool. This web-based tool provides you with access to the Cisco bug tracking system, which maintains information about bugs and vulnerabilities in this product and other Cisco hardware and software products. Within the Cisco Bug Search Tool, each bug is given a unique identifier (ID) with a pattern of CSCxxNNNNN, where x is any letter (a-z) and N is any number (0-9). The bug IDs are frequently referenced in Cisco documentation, such as Security Advisories, Field Notices and other Cisco support documents. Technical Assistance Center (TAC) engineers or other Cisco staff can also provide you with the ID for a specific bug. The Cisco Bug Search Tool enables you to filter the bugs so that you only see those in which you are interested.
In addition to being able to search for a specific bug ID, or for all bugs in a product and release, you can filter the open and/or resolved bugs by one or more of the following criteria:
-
Last modified date
-
Status, such as fixed (resolved) or open
-
Severity
-
Support cases
You can save searches that you perform frequently. You can also bookmark the URL for a search and email the URL for those search results.
Using the Cisco Bug Search Tool
For more information about how to use the Cisco Bug Search Tool, including how to set email alerts for bugs and to save bugs and searches, see Bug Search Tool Help and FAQ.
Before You Begin
You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, you can register for an account.
Procedure
| Step 1 |
In your browser, navigate to the Cisco Bug Search Tool. |
||||||||||||
| Step 2 |
If you are redirected to a Log In page, enter your registered Cisco.com username and password and then, click Log In. |
||||||||||||
| Step 3 |
To search for a specific bug, enter the bug ID in the Search For field and press Enter. |
||||||||||||
| Step 4 |
To search for bugs related to a specific software release, do the following: |
||||||||||||
| Step 5 |
To see more content about a specific bug, you can do the following:
|
||||||||||||
| Step 6 |
To restrict the results of a search, choose from one or more of the following filters:
Your search results update when you choose a filter. |
Caveats in Cisco IOS XE Denali Release 16.3.1
Open Caveats—Cisco IOS XE Denali Release 16.3.1
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
ISR4k dose not send SOLICIT msg in DHCPv6-PD over PPPoE |
|
|
"request platform software console attach" command improvement |
|
|
16.2:Kahuna:R0/0: kernel: FAT-fs (sda1): error seen while booting. |
|
|
16.3: Kahuna:"clock set" is not working after reload. |
|
|
ASR1013: Fails to detect power supply at startup |
|
|
RP3: Polaris : Kernel warning messages seen on console |
|
|
SpeedRacer fan speed cannot be set to 40% |
|
|
Speedracer, Kahuna and Nighster images do not support "show software authenticity" |
|
|
astro_handle_fp_switchover_elc100 Called log messages on FP SO |
|
|
Traffic stalls on Argus-X after both FP reload |
|
|
Correct initialization of ZL registers in MIP100 rommon |
|
|
CRC errors seen during EPA reload/shutdown. |
|
|
Display Third party SFP only if 'service unsupported-transceiver' enable |
|
|
Polaris: Popinac gigE ports not coming up sometimes on FCV image |
|
|
Uneven traffic drops at ingress for 10G with ArgusX and ESP100 |
|
|
ASR1K: CPP performance numbers capture when sent 64 bytepacketsacross PC |
|
|
ASR1k: "sh plat software peer interface-manager rX" missing some info |
|
|
AN: ISR-G3/ASR1K punts CD even after disabling autonomic |
|
|
NHRP ERROR message printed on spoke when BFD is configured only on HUB |
|
|
40K:ipv6 multicast packet loss seen during RP switchover |
|
|
16.3 : Router hangs while verifying mac limit with l2vpn profile |
|
|
PfRv3/ISR4k-channel is unreachable when there is no traffic after clear |
|
|
Polaris: clear domain iwan border channel doesn't work on XE platform |
|
|
Polaris: different probing behavior with probe reduction between ISR/ASR |
|
|
Router crashes with Ipsec/route map configuration changes |
|
|
10 Gig int with macsec config, not up with shut/no shut on both KS/NonKS |
|
|
ASR1001-X, frame counter increased after reload |
|
|
CSR interfaces do not support user settable MTU |
|
|
CSR: Ingress over-subscription not represented by 'show controllers' |
|
|
Polaris_dev: resource service-plane-heavy not take effective with 8vCPU |
|
|
AWS: CSR crashes, loses connectivity after detaching interface |
|
|
PCIe pass-thru w/ ixgbe driver causes MaxTu drops due to TCP reassembly |
|
|
AWS: All CSR interfaces are mapped to eth0 |
|
|
AWS: CSR csr_mgmt container fails to learn default route |
|
|
Config wipeout after add/delete an interface for ESX setup |
|
|
CSR startup config sometimes disappear after reload. |
|
|
CSR1000v linux_iosd_vxe Core Seen After Qcow Install |
|
|
VASI subsystems are not packaged in ipbasek9 image for CSR1K platform |
|
|
[UniScale]CSR loses startup config and picks up gw hostname after crash |
|
|
up14b : Performance drop for Complex QoS case with 362 bytes packet size |
|
|
Crypto low-queue queue-depth goes over queue-limit |
|
|
Trace back observed in CPP_CP process after SSO |
|
|
DMI - AAA authentication/authorization timeout does not try fallback |
|
|
Polaris: Firmware version displayed as "unknown" in latest CGE7 image |
|
|
ASR device is crashing on adding interfaces to AVC through Webui |
|
|
ASR1k crash after making MQC config changes |
|
|
ASR1K-ESP100 crash when a link with tunnels go down |
|
|
Traffic rate getting affected by qos policy |
|
|
NBAR crash@__be_cvla_free_no_reuse_internal |
|
|
Entry leak in the SID_CAM leading to SID_CAM_OVERFLOW |
|
|
Crash when FNF FIA is enabled |
|
|
ESP crash observed while testing with Orange Configs |
|
|
16.3:Image goes missing in stby-bootflash/harddisk after format and reload |
|
|
AWS : CSR Crashed after copying config file using kron-policy |
|
|
163: DTE not going down while applying rx clock less than threshold |
Resolved Caveats—Cisco IOS XE Denali Release 16.3.1
All open bugs reported in Cisco IOS XE Denali Release 16.2.1 have been resolved, unless listed in the “Open Caveats—Cisco IOS XE Denali Release 16.3.1” section.
Caveats in Cisco IOS XE Denali Release 16.3.1a
Resolved Caveats—Cisco IOS XE Denali Release 16.3.1a
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Identifier |
Description |
|---|---|
|
BenignCertain on IOS and IOS-XE |
|
|
NTP-PTP: Invalid PTP time during NTP leap second insertion/deletion |
|
|
NTP Leap second add not working in Polaris |
Caveats in Cisco IOS XE Denali 16.3.2
Resolved Caveats—Cisco IOS XE Denali Release 16.3.2
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
Openstack: CSR goes in grub mode if Hard Reset |
|
|
Router crash when removing EzPM configs |
|
|
cpp ipv4 multicast mLRE crash |
|
|
UP01v6 : ISR4321 has performance drop for CEF-IPv6 of -8.63% |
|
|
PfR channels unreachable with quick monitor and quick monitor probes to 1 in 10 secs. |
|
|
ASR1k:16.3_MR smd crash in FIPS Mode |
|
|
ODNS: DNS breaks for hosts when ISR is enabled for both ODNS and Snort |
|
|
16.4: Packet drops observed while verifying BGP Flowspec. |
|
|
Dreamliner failed to power up PD in some kind of case |
Caveats in Cisco IOS XE Denali 16.3.3
Open Caveats—Cisco IOS XE Denali Release 16.3.3
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
ISR4k:EssNoEncapInfo drop seen for pkts transit via PPPoA |
|
|
Power supplies showing "ps fail" when they function fine |
|
|
Random Netclock error messages appearing on console |
|
|
ASR1000 doesn't send PPP ECHO Reply |
|
|
Deletion of channel-group failed on QFP when FR encaps set on associated Serial Int. |
|
|
applying MPLS-TE command on an interface stops the complete traffic |
|
|
IOSd crash in QoS stats |
|
|
Platform does not trigger license release when the port moves into error disable state |
|
|
After reload ASR take incorrect Local Preference withroute- map using RPKI |
|
|
High CPU due to BGP Task process |
|
|
Router crashes using show BGP commands |
|
|
Traceback: loop in Crypto ACL creates CPUHOG then crash at large scale |
|
|
Unable to pass traffic if spoke to spoke fails to build in phase 2 |
|
|
PfRv3: Crash While Evaluating/Moving TC's Between Channels |
|
|
Crash after IWAN does a recalculation in the RIB |
Resolved Caveats—Cisco IOS XE Denali Release 16.3.3
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
As1k @ CFM traffic frames being sent with 2 dot1q tags |
|
|
ASR1000-2T+20X1GE: More than 1Gbps traffic is reported on 1GE port |
|
|
ASR1k-ELC- XCVR disabled after router reload and interface is down |
|
|
EPA-18X1GE and EPA-10x10GE reloads unexpectedly with traffic and EPA OIR |
|
|
IP/ARP connection failed between two direct-connected interfaces |
|
|
Vlan Oversubscription packets are not working. |
|
|
Ingress Unicast traffic not received on the BDI. |
|
|
POS interface doesn't come up on clearing alarms |
|
|
BQS unable to resume processing leading to pending objects constantly increasing |
|
|
Dual QFP Crash triggered by removing service policy from interface with mixed shaper feature enabled |
|
|
POLARIS 16.4: fman_fp and cpp_cp core files seen with L3VPN profile |
|
|
IWAN NBAR may cause a reload with pa_offset_to_addr |
|
|
Entry leak in the SID_CAM leading to SID_CAM_OVERFLOW |
|
|
Ping to ASR1k with a MTU of 10000 Bytes and record option set fails |
Caveats in Cisco IOS XE Denali 16.3.4
Open Caveats—Cisco IOS XE Denali Release 16.3.4
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
Asr1k crashes at PPP process on pushing 4 or more per-user static ipv6 routes |
|
|
ASR1K RP3 running Denali-16.3.2 - silent reload with Last reload reason: PowerOn |
|
|
R0/0: kernel: i2c_master_xfer (line 276): port 0, addr 19, len 1 c2w master failed to send data: |
|
|
ASR1k loopback I/F with Mgmt-intf vrf failed to communicate with peer device via G0 at RP2 |
|
|
BGP crashes when removing advertise-map |
|
|
Crash due memory corruption in AFW |
|
|
ASR1006 crashes due watchdog in the DHCP client process |
|
|
Router might crash due watchdog when creating a new swidb at if_index_allocate_index |
|
|
ASR FP Crash - Memory corruption in libSRTP |
|
|
Cube crashed when "sh sip-ua calls br" command entered |
|
|
IPsec/IKEv2 Installation Sometimes Fails With Simultaneous Negotiations |
|
|
Traceback: loop in Crypto ACL creates CPUHOG then crash at large scale |
|
|
IPSec Tunnel stuck in Up/Down state after shut/no-shut - VPN Interop |
|
|
PfRv3: Unexpected Reload While Evaluating/Moving TC's Between Channels |
|
|
QFP sorter interrupts related to REAL_DISTANCE are fatal when they should be informational |
|
|
router crash with "param long-dur-action disconnect" |
Resolved Caveats—Cisco IOS XE Denali Release 16.3.4
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
ping fail under pppoe configuration |
|
|
EPA-18X1GE/ GLC-TE / asr1000rpx86-universalk9.16.03.03.SPA.bin MDI/MDIX fail |
|
|
ISSU: 16.3.4 <-> 16.5.1 Config_Sync@lacp rate fast after Loadversion in RP2 platforms |
|
|
Crash on fw_ha_chk_selfzone |
|
|
router may crash with ZBFW ACL modification |
|
|
ISATAP Server feature broken on ASR1K |
|
|
ESP crash while doing NAT ALG |
|
|
Platform does not trigger license release when the port moves into error disable state |
|
|
"distance bgp 255 0 0" getting conf under IPv6 AF after some sequence of steps |
|
|
After reload route policy processing not re-evaluate with route-map using match RPKI |
|
|
BGP crashed configuring different update-source interface with v6 LL peering |
|
|
eVPN PMSI VNI decoding / encoding as MPLS label |
|
|
High CPU due to periodic route refresh to VPN peers using rtfilter AF |
|
|
Router crashes using show BGP commands |
|
|
Wrong Source IP Selection for eBGP in EVN/VNET environment |
|
|
Router crashes on configuring bandwidth on the Dialer interface |
|
|
CDP packet causes switch to crash due unexpected exception to CPUvector |
|
|
Crash using EIGRP and DVTI with IKEv2 |
|
|
VNET global vrf neighbor is down after an interface flap |
|
|
Missing FIB subblock causes crash when configuring vrf |
|
|
ASR1k crashed while unconfiguring Netflow |
|
|
Crash occurred with APPNAV on ASRK |
|
|
Need API for ip best source address for given outgoing interface |
|
|
ISATAP Server feature broken on ASR1K |
|
|
Crash in "show ipc all" @ ipc_print_ports_internal |
|
|
CUBE Ent crashes when Diversion header received with no user portion and 'history-info' enabled |
|
|
"crypto ipsec fragmentation before-encryption" command disappears after reload |
|
|
Modifying crypto ACL leads to a removal of crypto map config |
|
|
Crash at update of context nhrp |
|
|
GETVPN GM in "Not initialised" state after ISSU runversion |
|
|
Behavior difference between XE3.17 and Polaris |
|
|
IKEv2 Aggregate-auth Timing Issue |
|
|
IKEv2: Unable to initiate IKE session to a specific peer due to 'in-neg' SA Leak |
|
|
IOS IKEv2 profile NVgen local auth is rejected from startup configuration upon reload |
|
|
Cisco IOS and IOS XE System Software SNMP Subsystem Denial of Service Vulnerability |
|
|
2nd isis instance crashes after configuring new connected-prefix-sid-map due to no instance PDB |
|
|
ISIS route oscillation due to ldp sync and interface max metric |
|
|
Crash in IWAG GTP on removing config |
|
|
IWAG leak in MCSA component |
|
|
L2TP Account accuracy: SSS disconnect ACKs are not received for few sessions |
|
|
complete traffic drop with DATA MDTs with latest polaris_dev |
|
|
Crash after the MPLS LDP neighbor flap in the NSR scenario |
|
|
Running command "show policy-map interface" or "show tech nbar" can cause crash |
|
|
Crash on IWAN Hub when TC is uncontrolled and current channel is present |
|
|
Memory Leak due to cent_rt_eigrp_nh_convert |
|
|
PfR Monitoring do not display VRF101 data and reports FVRF incorrectly |
|
|
HTTP connection may fail when IPv6 address is configured on any interface |
|
|
NTP leap second addition/deletion for consecutive leap months not working properly |
|
|
Old Constrained Node Sid not getting deleted from MPLS forwarding table on changing SID |
|
|
OSPF SRTE: CSTR path is not installed in some cases properly. |
|
|
OSPF: IPFRR repair path computation stopped after receiving type 10 opaque EPL lsa. |
|
|
SRTE: Single hope tunnel doesn't install any repair path. |
|
|
SRTE: when i/f address is removed, traceback is seen and adj-sids not destroyed. |
|
|
Tunnel & repair path continuously flapping on disabling SR on next node from head-end. |
|
|
During PKI enrollment, Cisco router rejects CA/RA reply containing HTTP 500 "Internal Server Error" |
|
|
Crash on vtcp parsing in Extended Processing Path for the FIA. |
|
|
16.6: ASR1K: RP crash seen @cpp_bqs_rm_yoda_init_or_save_child. |
|
|
ASR1K ESP100 - Both ESP crashing due to cpp_bqs_srt_yoda_place_child_internal: failed to grow tree |
|
|
cpp_cp process crashes due to sw wdog expiring while creating a queue |
|
|
Crash when interface with multiple tunnels sourced comes up |
|
|
Crash when removing and re-adding bandwidth remaining percent while class-default has fair-queue |
|
|
Dual QFP Crash triggered by removing service policy from interface with mixed shaper feature enabled |
|
|
Multiple Parent Events Per Node lead to a crash |
|
|
Secondary SUP keep crashing @ CPP Client process failed |
|
|
ASR1001-X crashed when add QoS config |
|
|
CPP DRV: Transit Entrenched Recycle Path Does Not Enforce Packet Order |
|
|
ESP100 crashes after manual failover |
|
|
Throughput stuck after applying/removing qos policy |
|
|
SR:RSP2:Object download failure(EOS object)error seen randomly |
|
|
CHUNKBADREFCOUNT crash |
|
|
ASR crashes when attempting SRTP/TLS call |
|
|
Evaluation of all for OpenSSL May 2016 |
|
|
Evaluation of all for Openssl September 2016 |
|
|
SSL Handshake failure with rc4-128-md5 cipher on ASR/ISR platforms |
|
|
Router repeatedly crashing with "%UTIL-3-TREE: Data structure error" |
|
|
Router crashes when running the csim start command |
|
|
ISR4K - Hoot and Holler E&M port cannot be co-located with multicast hub |
Caveats in Cisco IOS XE Denali 16.3.5
Open Caveats—Cisco IOS XE Denali Release 16.3.5
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
ASR1K encryption processor trace file is not valid |
|
|
BGP scanner crashed with add/remove command bgp mpls-local-label |
|
|
IWAN EIGRP SAF - seq number mismatch after branch reload |
|
|
Configuring Packet tracer on IOS-XE triggers a crash intermittently |
|
|
KS merge fails for groups with TBAR due to PST update failure on primary KS |
|
|
ISIS SR: Subtract 3 instead of 2 from PD maximum label support for TILFA |
|
|
ASR1K CGN NAT ASR1K ESP100 crashed with clear ip nat translation * |
Resolved Caveats—Cisco IOS XE Denali Release 16.3.5
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
Crash in ALPS SNMP code |
|
|
[DT]Crash oberseved while sending ANCP port up |
|
|
PPPoE crash: due to invalid dlidx while Virtual Access Interface is not yet attached to Dialer. |
|
|
Power supplies showing "ps fail" when they function fine |
|
|
tracelogs/punt_debug.log* missing when punt keepalive timeout / crash occurs |
|
|
Incorrect status in show facility-alarm status after Gi0 no shut |
|
|
ASR1000-6TGE/2T+20X1GE:- Chunk corruption in XLIF pending process |
|
|
ASR1001-HX/ ASR1002-HX/ MIP-100 not able to send dot1q packet in EoMPLS. |
|
|
cpp-mcplo-ucode crash when layer 2 switching packet |
|
|
ASR1001-X: dot3StatsDuplexStatus gives unknown for tengig and gig interfaces |
|
|
ASR1k 3.16 - ASR1k-ELC- XCVR disabled after router reload and interface is down |
|
|
CPAK-100GE-EPA sends out pause frames continuously when pause frames are received |
|
|
Ping failure on 1G EPA port with SFP GLC-TE/SFP-GE-T |
|
|
ASR1001-X crashes on smc_msg_send_fragment |
|
|
Changing autoneg setting on ASR1K cause link failure on subsequent link flap ( connected to 2960XR) |
|
|
ISR4K crashes after assert failure in PA packet-buffer infrastructure |
|
|
Deletion of channel-group failed on QFP when FR encaps set on associated Serial Int. |
|
|
Crypto device microcode hangs and crashes on ASR1k routers |
|
|
Octeon core hang causing F1/F0 offline |
|
|
ISR4300 shows abnormal large RTT/jitter value in IP SLA udp-jitter v2/v3 |
|
|
MIB counter, ipIfStatsHCOutOctets, does not show correct value |
|
|
NBAR data-plane crash for DNS TXT query with an additional record |
|
|
Crash due to FNF while collecting and adding entries to cache |
|
|
L2TP sessions cannot connect - Report Dataplane error |
|
|
ucode crash@cfg_qos_exported_hier while remving child policy from parent policy |
|
|
SPA-1XCHSTM1/OC3 : IDB Mismatch between Active & Standby RPs in ASR1k |
|
|
input frame and CRC counter increasing on administratively down Tengi interface |
|
|
Standby RP crash at be_ancp_get_dsl_line_attrs |
|
|
BGP crashes when removing advertise-map |
|
|
Duplicate BGP prefixes are not dropped |
|
|
Nested Enhanced Route Refresh requests triggers Stale Prefixes. |
|
|
RFC: BGP sending error sub-code: 8 instead of '4' |
|
|
Router crashes when doing "show ip bgp neighbor" on a flapping BGP neighborship |
|
|
Slow convergence with scale after a core link flaps |
|
|
stale path message for that prefix is noticed when dampening is configured. |
|
|
Crash in Bstun SNMP code |
|
|
Policy-map name 'policy-map PIN-G3/1/3.8' causes TB and subsequent RP Crash on Policy deletion/add. |
|
|
Router crashes on configuring bandwidth on the Dialer interface |
|
|
OSPFv3 AUTH breaks IPv6 traffic intermittently |
|
|
ASR1k IOSD crash due to memory corruption in aaa accounting |
|
|
DHCP NAK is observed with Rebind request |
|
|
Subscriber session not synced to standby while assigning static ip in DHCP |
|
|
wrong EIGRP redistribution statement in startup config breaks BGP settings atfer router reload |
|
|
EEM applet will not release the Config Session Lock if it ends when CLI is in configuration mode |
|
|
ASR FP Crash - Memory corruption in libSRTP |
|
|
CUBE is unable to send PRACK to Skype server for inbound calls |
|
|
ASR1K: IOSd crash in kmi_initial_check on null map dereference |
|
|
IPSec crash on ASR1k router while processing KMI |
|
|
IPsec: For sVTI after rekey old SAs are not getting deleted |
|
|
Memory leak seen@crypto_init_show_instance |
|
|
Session coming up late after RP failover due to PD delay in polaris |
|
|
DMVPN : IOS-XE - Unable to pass traffic if spoke to spoke fails to build in phase 2 |
|
|
IOS-XE GETVPN KS crashes while sending cgmGdoiKeyServerRegistrationComplete trap after GM reg |
|
|
asr1k is unable to recover from the tunnel flapping at scale for IKEv2 dmVPN/BGP |
|
|
Crash in Crypto IKEv2 process |
|
|
Dynamic routes don't get propagated if old session is present in In-Active state. |
|
|
Ikev2 SA INIT queue CLI : Fix default behaviour |
|
|
IPSec Tunnel stuck in Up/Down state after shut/no-shut - VPN Interop |
|
|
dqueue not empty prior to destruction crashes ipv4fib_les_switch_wrapper |
|
|
Fixed versions for CSCuz15131 crash when traffic with maximum size is on wire |
|
|
Cisco IOS and Cisco IOS XE Software IPv6 SNMP Message Handling Denial of Service Vulnerability |
|
|
ISIS hello stops to be sent after RSP switchover |
|
|
ISIS RIB and Global RIB out of sync resulting in complete traffic loss |
|
|
Radius attribute Acct-Terminate-Cause - 49 difference |
|
|
assert stop processing leaks memory |
|
|
ASR1k configured as PxTR crashes when booted with 16.5.1 image at LISP fwd background process |
|
|
Unexpected reboot with NAT and Multicast configured |
|
|
Interoperability issue of 16.3.4 with other releases |
|
|
IOSXE-RP Punt Service Process crash @ __be_fmm_flow_int_table_entry_compare |
|
|
PfRv3: Crash in Route-Control Process |
|
|
PfRv3: Crash Observed While Checking/Modifying Channel Prefixes |
|
|
PfRv3: Multiple TCAs Logged Simultaneously May Lead to Crash |
|
|
PFRV3: Site Prefix shows unreachable after removing and adding the specific route for the prefix |
|
|
Site-prefix learning: Prefix withdrawal not working for hub-> branch on 16.6 |
|
|
Site-prefix of Peer BR is not synchronized after shut/no shut BR border |
|
|
The second and later PfRv3 VRF configs are missing after reload |
|
|
Crash in BGP due to regular expressions |
|
|
Crash after show ip ospf database summary command |
|
|
OSPF TILFA SCALE: On reopt or clearing OSPF process, no. of protected prefixes goes down drastically |
|
|
OSPF TILFA SCALE: with 2K Inter-area Prefix Scale, some non-ECMP routes are not getting protected |
|
|
OSPF: Not able to remove ospfv3 config under Virtual-Template |
|
|
OSPF: When anycast present in two areas, when one area is removed, rout not getting installed in RIB |
|
|
Crash during CRL fetch failure |
|
|
EST client pki authentication request goes out to default URL always |
|
|
EST client pki simpleenroll request goes out to default URL always |
|
|
ISR 4300 crashed while importing certificate |
|
|
PKI Server: "Rollover RA Certificate" Becomes "Rollover ID Certificate" After Reload of Router |
|
|
Both ESP crash on changing COS type on ATM VC |
|
|
Both ESP crash on changing shaper rate under port-channel |
|
|
cpp_cp_svr crash seen on ASR1002-X and device keeps rebooting with 16.5.1b |
|
|
fp crash while changing port-channel from vlan based mode to LACP |
|
|
Yoda: Collapse HQF Aggregation Node |
|
|
large NAT policy-map takes long time to download |
|
|
SGACL: cpp_sp_svr crash during CFM EDIT request with reseq_enable = TRUE |
|
|
[UniScale]asr1k peers crashed while unconfiguring testbed devices in IPSEC IPv6 Ikev2/SCM |
|
|
QFP sorter interrupts related to REAL_DISTANCE are fatal when they should be informational |
|
|
ESP ucode crash with ALG for PPTP traffic and PAP is enabled. |
|
|
NAT ALG fails on Multipart SIP Header |
|
|
tcp_getbuffer memory leak - refcount not reduced when packet dropped |
|
|
Crash in Voice DNIS SNMP code |
|
|
Crash observed in Mlpp-Bacd scenario |
|
|
ISR4K - Hoot and Holler multicast replication issue |
|
|
multiple ISR4K VGW's crashed with Segmentation fault(11), Process = DSMP |
|
|
ASSERTION FAILED : ..vtsp.c: vtsp_cdb_assert: then crash |
|
|
ISR4K not correctly handling forked 18X responses with SDP |
|
|
Switch crashed after add "ip wccp 61 global" command during traffic |
Caveats in Cisco IOS XE Denali 16.3.6
Open Caveats—Cisco IOS XE Denali Release 16.3.6
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
NETCONF-YANG/RESTCONF edit config fails silently, subsequent get config reports false-positive |
|
|
IOS-XE router crash from memory corruption during CCB cleanup |
|
|
crash with "debug platform condition ipv4 access-list " |
|
|
unexpected reload due QFP cpp-mcplo-ucode exception |
|
|
Nexthop is wrong in route-import table on branch when delete WAN interface and reconfigure it |
|
|
16.3:Ping failure and router crash while testing PFRv3 scenario |
|
|
Router: CCE crashed with EPC classify pkts |
Resolved Caveats—Cisco IOS XE Denali Release 16.3.6
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
IP SLA http operation with customizable status for return codes |
|
|
Evaluation of Cisco IOS and IOS-XEl for NTP_October_2015 |
|
|
Unexpected crash during SSH operation |
|
|
ASR1k: upgrade rom-monitor filename flash: returns "Invalid File" |
|
|
POLARIS: IPSec FlexVPN PSK does not scale on asr1013/RP2/ESP100 |
|
|
SSH session hangs if it is not closed properly |
|
|
Auto-registration failure warning and RTP port allocation failure |
|
|
BGP session is reset when unrecognized capability received in OPEN message |
|
|
CME No ringback after blind transfer |
|
|
ikev2 fragmentation not working with aes-gcm encryption - hmac failure |
|
|
Ephone-DN remains in down state when restart all is given in telephony-service |
|
|
LDAP authentication reuses old TCP connection |
|
|
Incorrect Radius Server Status when locally defined user called in tester command |
|
|
self-generated packets sent fail over PMIP-MUDP tunnel in LMA |
|
|
Polaris: polaris memory leak in btrace thread deletion: cli_agent. |
|
|
SIP CME relays out "Authorization: header" received from IP Phone. |
|
|
Glare condition exists for mid call DO INVITE when CUBE receives in-dialogue SIP OPTIONS message |
|
|
Configuring Packet tracer on IOS-XE triggers a crash intermittently |
|
|
High CPU due to SNMP ENGINE when polling mplsTunnelHopEntry |
|
|
SCEP enrollment failing with HTTP/1.1 500 Internal Error |
|
|
Asr1k crashes at PPP process on pushing 4 or more per-user static ipv6 routes |
|
|
Crash observed in DHCP SIP |
|
|
Enhancement: Un-controlled TC in DISCARDED state is dropped instead of RIB-routed |
|
|
Command "segment-routing mpls" under router isis 1 not getting NVGEN'd |
|
|
Configured Speed/Duplex are not supported on Mgmt Eth port |
|
|
Crash when attempting to assign nonexistent/shutdown VLAN to 802.1x port |
|
|
BGP crashes at bgp_ha_sso_enable_ssomode |
|
|
IPv6 ESP traffic incorrectly dropped after decryption by IPv6 interface access-list |
|
|
router crash with "param long-dur-action disconnect" |
|
|
Crash in TCL/AFW processes |
|
|
Standby Router crash when there is a m-line shrink case within the dialog. |
|
|
In-dialog options ping received post ACK (call completion) cause cube to change codec and no audio |
|
|
BGP RR changes tunnel parameters for bgp evpn route type 3 |
|
|
ASR1k netflow crash at flow_def_field_list_copy_with_callback |
|
|
voiprtp_register_transport_port_manager_and_reserve: Alloc ports failed, min: 8000, max: 48199 248 |
|
|
No all IPv6 GRE crypto tunnels may come up or recover from flapping at scale |
|
|
Ipsec Session Fail After Up/down Link Between Dmvpn Tunnel |
|
|
QFP exmem memory leak in cpp_fm_sce_result_chunk |
|
|
Watchdog crash at sla_resp_config_command when executing the "show run" command |
|
|
router crash after EEM-wanfailover script triggered |
|
|
CUBE can't handle mid-call re-invite when midcall-signalling passthrough mediachange is configured |
|
|
Crash in SSH Process due to SCP memory corruption |
|
|
Cisco IOS and IOS XE Software Plug-and-Play PKI API Certificate Validation Vulnerability |
|
|
IOS-XE DMVPN Per-tunnel QoS not working on CSR1k without AX license |
|
|
Voice Gateway crash due to memory corruption while finding DN index during redirect |
|
|
GETVPN: TBAR sync "timer is not running" after KS upgrade causing anti-reply drops and GM outages |
|
|
Traceback: Stack master crash at dot1x authentication |
|
|
Router crash during T38 fax bitrate negotiation |
|
|
Cisco IOS and IOS XE Software IOS daemon Cross-Site Scripting Vulnerability |
|
|
After on the vnic edit on the fly changes - LAN-SRIOV sub interface ping fails after Reboot of ISRv |
|
|
BGP w/global import/export crashes when several nbrs deleted simultaneously |
|
|
ESP crashed - double_exception_has_occured - malformed PIM packet over GRE tunnel & ERR_DTL_INV_ADDR |
|
|
IS-IS support for mult-instance redistribution for IPv6. |
|
|
Crash when printing IPSEC anti-replay error |
|
|
Crash in SDP Passthru when T.38 as 1st mline in mid-call SDP |
|
|
[UniScale]isr4431 crashes while finding NDR with max oif number per multicast grp at scale |
|
|
CRL download fails due to "failed to create getcacert message" |
|
|
B2B NAT HA: Stale NAT translations stuck on primary router after communication loss with standby |
|
|
ASR1K crashes due to crypto microcode with no corefile/crashinfo |
|
|
IPv6 BGP network advertized not seen in the peer |
|
|
ASR1K encryption processor trace file is not valid |
|
|
Recommitx2: ASR1006-X memory leak fman_rp after sending 100,000,0 ARP entries |
|
|
Missing ip route to cellular interface after router reload or modem power cycle |
|
|
GETVPN // Primary KS sending rekey first to GM's and then to Secondary KS via scheduled rekey. |
|
|
show gtp parameters causes RP to crash |
|
|
Input policy-map classify traffic incorrectly - ISR4331 |
|
|
Stale Mac entry in MLRIB |
|
|
ZBF crashes on standby |
|
|
ISIS redistribute connected not working for IPV6 routes |
|
|
RE-INVITE and OPTIONS Glare not handled by CUBE |
|
|
router crashed after triggers with debug |
|
|
IWAN EIGRP SAF - seq number mismatch after branch reload |
|
|
Crash at cc_detect_mute_call |
|
|
DMVPN session get stuck in NHRP and UP-NO-IKE state without active IKEv2 session until rekey |
|
|
ASR1k ESP may crash after a switchover if IPsec configured |
|
|
Polaris: Crash observed while client association with key-wrap enabled in controller. |
|
|
Memory leak with DMVPN tunnel protection ipsec |
|
|
Crash when doing snmp walk for ipAddressEntry |
|
|
Stale Mac entry in MLRIB additional fix |
|
|
Site-prefix learning: Unexpected Reboot in 'IP RIB Update' Process after 'no domain default' |
|
|
ASR1K -LNS ESP crash after failing/flapping TeGig interfaces |
|
|
Traceback: OCSP creates a large number of lists and triggers a memory problem |
|
|
ASR1000 resets unexpectedly with reason as LocalSoft on Polaris Release |
|
|
Device IP address AV pair replaced with 192.168.1.5 |
|
|
PKI: All SCEP requests fail with "Failed to send the request. There is another request in progress" |
|
|
Polaris 16.3.5: Unexpected Reboot with Device Classifier enabled |
|
|
CFD: pnp config upgrade failed when IFS returns size 0 for all TFTP files |
|
|
qos/cce AOM pending batch ack due to BQS pending config |
|
|
Traceback: Crash on WAAS menu prompt for WAN Interface |
|
|
BGP sets the wrong Local Preference for routes validated by RPKI server |
|
|
ESP crashed - cpp_cp failed in cpp_qm_event_proc_defer_parent_event |
|
|
Crypto Traceback: Router crash at 'Crypto Support' segmentation fault |
|
|
AToM: MSPW VC Down with Reason as No VC Remote Label Binding Received on RP SSO |
|
|
CUBE Router crashed - Critical software exception, Process = CCH323_CT |
|
|
IOS-XE GM router might crash after the rekey method is changed from unicast to multicast |
|
|
Device IP address AV pair replaced with 192.168.1.5 |
|
|
IOSd crash while applying dial peer configuration |
|
|
PKI: Device crash during crl download with multiple CDP URI |
|
|
Memory leak for CCSIP_TCP_SOCKET and CCSIP_UDP_SOCKET on CUBE |
|
|
ESP crashes with high scale QoS configuration |
|
|
Spoke-to-spoke site-prefix reachability checking should be removed |
|
|
FP crash with scaled IKE sessions. |
|
|
ESP crash when flapping interface with l2tp tunnels that have qos applied to the tunnels. |
|
|
Router crashes after interface flap where sessions get moved from one interface to another |
|
|
CLI 'aaa common-criteria' not available on IPBASEK9 license |
|
|
FP crash @cpp_qm_create_queue while adding fair-queue |
Caveats in Cisco IOS XE Denali 16.3.7
Resolved Caveats—Cisco IOS XE Denali Release 16.3.7
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
ASR1K FNF IPV4 Export MTU is fixed at 1500 bytes |
|
|
R0/0: ASR1002-X kernel: bullseye_i2c_master_xfer Error Repeats Every Hour |
|
|
Crash after IWAN does a recalculation in the RIB |
|
|
IP TUNNELS: Overlapping Loopback Interface Causes Incorrect Forwarding Decision with AppNav and PfR |
|
|
Crash on Session Border Control bad chunk free |
|
|
Router runs Denali 16.3.x may crash with AFW_application_process when sip call disconnect |
|
|
Route-map not checked when packet is flowing from OUT to IN with Static Nat |
|
|
Router crash on polling cEigrpPeerEntry |
|
|
Hub MC continues to send EIGRP SAF hellos after adjacency removed |
|
|
IOS-XE router crash from memory corruption during CCB cleanup |
|
|
[ASR1006-X] After reload LC show as "inserted" |
|
|
KS merge fails for groups with TBAR due to PST update failure on primary KS |
|
|
IOS-XE routers: Memory leak observed on process ivr: peer_item_t in AFW_application_process |
|
|
Pass load balancing information in IP header to container |
|
|
IOS-XE MOS scores always show 4.x even with massive packet loss. |
|
|
Cisco IOS XE Software Diagnostic Shell Path Traversal Vulnerability |
|
|
packet drop seen intermittently if 40G traffic sent via cts interface |
|
|
MAB CWA broken with ISE 2.3 CCO |
|
|
Few Stale session are observed during vpdn longetivity |
|
|
Mgig stack keeps crashing while configuring with Radius commands |
|
|
CENT: branch MC crashed @ cent_pdp_msg_send_from_pickexit after CSCup19724 |
|
|
load-balance advanced moving traffic to fallback path when primary path are not over utilized |
|
|
Crash when receiving EVPN NLRI with incorrect NLRI length field value |
|
|
CVLA crash on memory merge scan task |
|
|
Punted IPv6 NS packets input queue build-up memory exhaustion |
|
|
ASR1006-X SIP's timestamp is not synced with RP timestamp. |
|
|
SIP40 in slot 5 of ASR1013 when inserted ESP-200 in F1 by replacing ESP-40, showed ESI lock failure |
|
|
Sporadic Crashes Due to IPSec (during ISAKMP AAA interaction) |
|
|
iwan router crash while updating pmi policy |
|
|
cpp-mcplo-ucode crash when layer 2 switching packet |
|
|
NAT MIB not populated when using traditional NAT |
|
|
NULL remote_hostname from LAC |
|
|
ASR1K - ECMP load-balance w/ DPI L2TP Tunnel visibility and QoS may generate ucode crash |
|
|
CPP crash stuck thread detected multikey_hash_replace_int |
|
|
Chunk corruption crash related to PNP or Guestshell |
|
|
IOS-XE Voice NIM/PVDM Service-Engine Admin Down leads to one-way audio |
|
|
Interop vrrp doesnt work between cedge and vedge |
|
|
Local LAN-only prefix present in master route-import table but not present in site prefix DB |
|
|
ASR1004 started relaying clients' DHCP Discover messages to DHCP Server with the wrong IP address |
|
|
LACP Rate defaults to fast with no way to change it to normal |
|
|
cpp_cp_svr crashes, causing reload |
|
|
ZBF not able to identify the WAAS optimized flow and drops ACK |
|
|
Router cpp_cp_svr process crashes at cpp_qm_event_parent_event_create |
|
|
BQS pending deferred is stuck |
|
|
FP cpp_cp_svr crash @cpp_bqs_srt_yoda_place_child |
|
|
Router crash due to PuntInject Keepalive Process - kmalloc failures |
|
|
PFRv3 RC FIA is not enabeld on interfaces with one of sub-interface with xconnect config |
|
|
ASR1006-X EPA card input errors |
|
|
IOS-XE - FTP closing connection as NAT device does not process the 230 reply message |
|
|
MIP100 get struck in disconnecting state on FP reload |
|
|
Interface on ASR1001-X will become down/down after shut/no shut |
|
|
Router crashes when DMVPN tunnel moves accoss ports |
|
|
H.245 messages are not translated by NAT outside when H.323 video call is initiated from Out-2-In |
|
|
CDP packets not getting encapsulated over multipoint GRE tunnel |
|
|
C1111-8P: random commands may trigger TACACS+ to crash |
|
|
Memory leaks seen at PKI_name_list_add(0xa139cc0)+0x3e |
|
|
Unexpected Reset, Crypto IKMP Segmentation fault with IPSec AAA Configuration |
|
|
vif interface counters do not increment with multicast service reflection on IOS-XE |
|
|
ASR1K Datapath is not passing CTS tagging over PfRV3 auto-tunnel with "cts sgt inline" |
|
|
Protocol type for GRE header doesn't work consistently with "cts sgt inline" enable over auto-tunnel |
|
|
ASR1k | Segmentation fault in dhcp_sip process |
|
|
Memory leak seen when having same src mac -address with different src ip address |
|
|
CPP 0 failure Stuck Thread resulting in Unexpected Reboot |
|
|
ASR1001-x crash due to wrong packet size |
|
|
ZBFW HA: active router stuck in cold standby state after shut no shut the wan interface |
|
|
PnP DHCP discovery over VRF fails when using server FQDN in option 43 string |
|
|
CPP crash on L2TP router |
|
|
H225 gatekeeper request dropping under "ALG PARSER" with ZBF |
|
|
IOS: Crypto Ruleset fails to get deleted |
|
|
Crash during Generic Call Filter Module cleanup |
|
|
debug platform condition start causes keepalive failures with Vasi interface |
|
|
%PMIPV6-5-TUNNELDELETE: |
|
|
Memory size in smand process increases on 3850/3650 without any services, uplinks nor configuration |
|
|
default channel operation state changing from I/O to D/O failed when zero-sla enabled |
|
|
Telnet Sessions Hang/Become unavailable at execution of "show run" |
|
|
dynamic vlan assignment causes all sisf entires under the port to be deleted |
|
|
Memory leak@CENT-BR-0 when change the path label frequently |
|
|
LAN Switches does not learn the right ED upon OTV failover |
|
|
DNS ALG will not work when trying to match specific destination hosts |
|
|
FlexVPN || DHCP entries not flushing for ikev2 timed out reconnect sessions |
|
|
Snmp v2 breaks due to Authentication failure, bad community string, 16.03.06 |
|
|
PLR channel is not muted for some time |
|
|
Modification to ZBFW access-lists do not reflect in TCAM |
Open Caveats—Cisco IOS XE Denali Release 16.3.7
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
HIGH CPU observation on FMAN RP ESS EVENT TRACING |
|
|
Standby switch crash whem removing kron scheduler command |
|
|
ASR1K crash in tplus_handle_req_timeout |
|
|
ASR1K - No kernel/coredump generated with watchdog reload event |
|
|
Crash while doing a conference call |
|
|
ASR1001-X crash due to free block at tty_handle |
Caveats in Cisco IOS XE Denali 16.3.8
Resolved Caveats—Cisco IOS XE Denali Release 16.3.8
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
FlexVPN: Hostname in DHCP is incorrect when using AnyConnect |
|
|
IOS-XE CUBE HA crash |
|
|
CUBE reloaded with reason: RG-application reload on voice-b2bha RG |
|
|
ASR1K BGP scanner crash when change VRF and BGP configuration |
|
|
APPNAV - Overlapping Loopback Interface Causes Incorrect Forwarding Decision with AppNav and PfR |
|
|
PFRv3 Incorrect reported value of TCA threshold in traffic-class router change history |
|
|
iBGP dynamic peer using TTL 1 |
|
|
ASR1009-X/RP2:power supplies are seen as ASR1000X-FAN and Insufficient number of power supplies (0) |
|
|
Standby RP crashes due to shortage of memory when running OSPF |
|
|
link local multicast packets are received when the SVI is in down state |
|
|
CUBE does not update Session number after receiving a 491 request Pending Message |
|
|
ASR1002-X router crashed in cpp_qm_event_collapse_hl_node |
|
|
ASR1k unexpected crash when appNav holds a stale pointer. |
|
|
EPA-1X100GE/CPAK-100G-SR4 stays in a down/down state after a reset. |
|
|
CUBE fails to handle second SDP Offer during initial dialog setup |
|
|
ASR1001X @incorrect traffic statistics reported of port-channel sub interface using SNMP. |
|
|
Crash while doing a conference call |
|
|
PKI:-IP address parsing issue while printing the subject name if classless IP is used in Trustpoint |
|
|
Channel with wrong label may be created on hub border |
|
|
OSPF SR uloop : After issuing "clear ip ospf process". ospf process crashed. |
|
|
Unable to remove command 'ip nat inside destination' |
|
|
ISIS for IP is enabled/installing routes in the RIB while IP routing is disabled |
|
|
491 not sent in a multiple re-invites in DO2EO scenario |
|
|
ASR1001-X crash due to free block at tty_handle |
|
|
High Availability system with two Voice Gateways - Crash |
|
|
BGP 'address-family ipv4' sub-configuration is not shown in the running configuration |
|
|
WAAS Policy Configuration push may caused AppNav Class-maps programming issue in TCAM |
|
|
ASR1000-6TGE / ASR1000-2T+20X1GE in status Unknown after Active RP3 OIR |
|
|
CUBE incorrectly fomats SIP SDP |
|
|
CUBE is not responding to SIP INFO |
|
|
ISDN PRI calls getting dropped with cause 47 because of bad interaction between CDAPI and TSP layers |
|
|
"%FMFP-3-OBJ_DWNLD_TO_DP_FAILED:fman_fp_image:xxx" appears when configured "ip port-map" on ISR44xx. |
|
|
CRL file is getting overwritten when PKI server turns up after reload |
|
|
ASR1001-HX 10GE SFP+ ports may operate as 1000Mbps |
|
|
Hairpin call to PSTN fails with primary-net5 switch-type on ISR4k. |
|
|
ASR1002-X crash due to ccp_cp_svr going into lockdown state. |
|
|
"VoIP dial-Peer <XX> is Busied out" printed in log every 2 minutes when destination is not reachable |
|
|
ISSU:NetFlow not exporting flow resulting in new feature not working after ISSU. |
|
|
SNMP OID conflict.Trap being generated with wrong oid 6999.it should be 854 |
|
|
PKI authentication should proceed even if GetCACaps return any http failure |
|
|
IPSec background crash while sending SNMP trap |
|
|
ASR1k crash due to QoS in case of 4k subscribers per subinterface |
|
|
[MiFID] [Inbox-HA] VRF-ID is set to 65535 after switchover, call fails |
|
|
Media Ant-Trombone does not properly handle a Re-Invite utilizing a Replaces Header |
|
|
100FX OPNEXT SFP does not come up on ASR1001-X |
|
|
CUBE Crash in sipSPIAppAddCallInfoUI |
|
|
iWAN router PDP crash |
|
|
Crash with SIP call |
|
|
CUBE-HA: Standby CUBE reports error VOICE_HA-3-DATA_RECREATE_ERR: (STBY-Create) in CCAPI module |
|
|
CUBE doesn't forward INVITE with "midcal-signalling passthru media-change" during a video escalation |
|
|
Recommit of CSCvm99778 - eca/ewlc/qwlc/mewlc Sanity : AP join failed. |
|
|
iWAN domain password is overwritten by the global password, "password encryption aes" |
Open Caveats—Cisco IOS XE Denali Release 16.3.8
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
Router crash occurs while running Dell software update |
|
|
Router reloads on 'show track' command when there is track object for deleted serial sub-interface. |
|
|
IOS FW thread crashed with Stuck CPP Thread - tw timer lock |
|
|
fman_fp crash removing from forward list |
Caveats in Cisco IOS XE Denali 16.3.9
Resolved Caveats—Cisco IOS XE Everest Release 16.3.9
All resolved bugs for this release are available in the Cisco Bug Search Tool through the Resolved Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
nginx crashes when username containing formatted string logs into WebUI |
|
|
Memory leak Crypto IKEv2 at ikev2_ios_psh_set_route_info |
|
|
Incorrect handling of SIGVTALRM (signal 26) |
|
|
Crash on OPF_CSR32_OPF_LOGIC_ERR_LEAF_INT__INT_START_OF_BURST_MARKER_ERR |
|
|
High CPU due to Alignment Corrections - SMEF & IWAN |
|
|
Rekey Timer are same for both the Server and Client |
|
|
Router crash - AFW_application_process |
|
|
"clear crypto sa vrf MyVrf" triggers crash after updating pre-shared-keys |
|
|
Software crash due to memory corruption after packet trace was enabled. |
|
|
Router Crashes When PKI-CRL-IO_0 Runs out of Stack Space During Failed DNS Lookup for CA Server |
|
|
ASR1002-HX crashed after huge traffic is transmitted over it |
|
|
Memory leak in SMD process due to AAA Idle-timer not being freed |
|
|
FlexVPN with password encryption - keyring aaa LIST password 6 xxxxx encrypted again upon reload |
|
|
PKI "revocation check crl none" does not fallback if CRL not reachable |
|
|
PKI incorrect fingerprint calulation during CA authentication |
|
|
ASR1000 / ISR4300 Console Hang with line speed set to 115200 in 16.3 |
|
|
ISR 4331, wrongly adding to Port to subscriber field after translation. |
|
|
MaxSusRate is not working with service class |
|
|
Crash at Process = SCCP Auto Config |
|
|
IPSec-Session count in "show crypto eli" reaches max causing VPN failure |
|
|
in.telnetd process consumes 100% CPU in show process cpu platform sorted |
|
|
Missing Calling-Station-ID in Accounting Ticket for Web-Tal locations |
|
|
When sending account-logon ISG do not reply with ACK nor NACK. |
|
|
Traffic stops flowing on Xconnect tunnel when upgraded to 16.9.2 |
|
|
%PERF_MON_ASYNC-3-MEM: Memory cleanup failed - ssrc db cache results in PMI not created on BR |
|
|
Unexpected reload in btrace routines due to division by NULL. |
|
|
bqs may select an inaccurate rate |
|
|
ASR1001-x crash while configuring policy-map |
|
|
Crash due to too many DSPs |
|
|
Crash after Media monitor look up. |
|
|
EPA-CPAK-2X40GE boots on 16.3.x even though it is not supported until 16.4.1 on ASR1002-HX |
Open Caveats—Cisco IOS XE Denali Release 16.3.9
All open bugs for this release are available in the Cisco Bug Search Tool through the Open Bug Search.
|
Caveat ID Number |
Description |
|---|---|
|
Stateful features enhancement for big flow (Elephant flow) -CFT infra dependency |
|
|
ACL dropping packets after updating it - %CPPEXMEM-3-NOMEM |
|
|
SR: CFLOW input intf index is 0xffffffff for Service-engine DSP module interface |
|
|
ISR4K CUBE send first register with wrong ip address after reload - SIP-UA |
|
|
Subscribers cannot re-login due to CoA time-out (lite-sessions in routed mode) |
|
|
FMAN crash due to Flexible Netflow (fnf) |
|
|
IOS-XE Router may crash when attempting to Fragment Corrupted IPv4 Packet |
|
|
Router unexpected reloads when doing ipv4_nat_destroy_addrport_bind |
|
|
When FQDN used for APN, IOS DNS resolves FQDN to IP, but GTP stays in DNS pending and IP 0.0.0.0 |
|
|
Router crashes due to a call loop |
|
|
CHUNKBADROOTCHUNKPTR: Bad root chunk pointer in chunk header post SSO - ASR1K |
|
|
CUBE HA - Global bind is removed during interface flap |
|
|
DMVPN - Packet is encapsulated but not encrypted going out DMVPN tunnel |
|
|
Router ucode crash with NAT with interface flap |
Feedback