Release Notes for the Cisco ASA Device Package Software, Version 1.2(3) for ACI

Release Notes for the Cisco ASA Device Package Software, Version 1.2(3) for ACI

---

Revised: April 24, 2017

Published: November 12, 2015

This document contains release information for the Cisco ASA Device Package software, Version 1.2(3) for ACI, and includes the following sections:

• Supported ASA Models
• Supported APIC Versions
• New Features in 1.2(3.4)
• New Features in 1.2(3.10)
• Important Notes
• The Policy Manager Lock Ups when an Incomplete BGP XML is Sent
• Installing the Software
• Downloading the Software from Cisco.com
• Bug Search
• Open Caveats in the ASA Device Package Version 1.2(3.10)
• Resolved Caveats in the ASA Device Package Version 1.2(3)
• Resolved Caveats in the ASA Device Package Version 1.2(3.10)
• Resolved Caveats in ASA Device Package Version 1.2(3.11)
• Resolved Caveats in ASA Device Package Version 1.2(3.14)
• Resolved Caveats in ASA Device Package Version 1.2(3.15)
• Related Documentation
• Obtaining Documentation and Submitting a Service Request

Supported ASA Models

The following table lists the supported ASA models.

Supported APIC Versions

Cisco ASA Device Package Software supports only the version of APIC that it is shipped with.

New Features in 1.2(3.4)

We have added support for the following:

• Newly supported NAT commands and options:

– Source and destination interfaces

– Interface (including IPv6) for the source and destination mapped address

– For dynamic NAT, the pat-pool command, including the options of extended, include-reserve, and round-robin

• The access control entry log command, along with the options of level, interval, and disable
• Both the global and interface service resetinbound and service resetoutbound commands
• The XML examples in version 1.2(3) are compatible with version 1.2(2).

New Features in 1.2(3.10)

We added support for the following:

• The dns domain-lookup command for a service graph interface.
• The logging host command for a service graph interface.
• The monitor-interface command.
• The mtu command.

Important Notes

Pay attention to the following important notes:

• The ASAv does not support multiple context mode.
• ACE with dynamic EPG requires ASA image 9.3.2 or later.

The Policy Manager Lock Ups when an Incomplete BGP XML is Sent

Symptom The Policy Manager crashes when the l3Out that is used for BGP peering for the service appliance has an incomplete configuration (CSCuw03425).

Conditions The l3Out used for BGP peering for the service appliance is missing l3extRsNodeL3OutAtt.

Workaround Make sure that the l3Out contains l3extRsNodeL3OutAtt. This problem will be fixed in a subsequent release.

The following shows the BGP XML example with l3extRsNodeL3OutAtt:

Installing the Software

To upgrade, you do not need to remove the previous package if your APIC has the fix for CSCuv4353, which fixed the need to delete the previous package before upgrading. Otherwise, to upgrade from an older version to a newer, you need to remove the old version from APIC first, then install the new version.

To install the ASA Device Package software, see Cisco ASA Quick Start Guide for APIC Integration, 1.2 for instructions.

Downloading the Software from Cisco.com

If you have a Cisco.com login, you can obtain the ASA Device Package image from the following website:

https://software.cisco.com/download/release.html?i=!y&mdfid=286119613&softwareid=286279676&release=1.2.3.1&os=

Bug Search

If you are a registered Cisco.com user, view more information about each caveat using Bug Search at the following website:

https://tools.cisco.com/bugsearch

Open Caveats in the ASA Device Package Version 1.2(3.10)

The following table contains the open caveats in ASA Device Package Version 1.2(3.10):

Resolved Caveats in the ASA Device Package Version 1.2(3)

The following table contains the resolved caveats in ASA Device Package Version 1.2(3):

Resolved Caveats in the ASA Device Package Version 1.2(3.10)

The following table contains the resolved caveats in ASA Device Package Version 1.2(3.10):

Resolved Caveats in ASA Device Package Version 1.2(3.11)

The following table contains the resolved caveats in ASA Device Package Version 1.2(3.11):

Resolved Caveats in ASA Device Package Version 1.2(3.14)

The following table contains the resolved caveats in ASA Device Package Version 1.2(3.14):

Resolved Caveats in ASA Device Package Version 1.2(3.15)

The following table contains the resolved caveats in ASA Device Package Version 1.2(3.15):

Related Documentation

For additional information about the ASA, see Navigating the Cisco ASA Series Documentation.

For additional information about the APIC, see the Cisco Application Centric Infrastructure Security Solution website.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation as an RSS feed and delivers content directly to your desktop using a reader application. The RSS feeds are a free service.