Enhanced NAT Management

New and Changed Software Features in Cisco IOS XE 17.15.1a

Feature: Enhanced NAT Management
Description:From Cisco IOS XE 17.15.1a, the Enhanced NAT Management feature enables network operators to safeguard system performance by limiting NAT translations based on CPU usage with the ip nat translation max-entries cpu command. This feature also enables streamlining NAT synchronization in redundant systems using the ip nat settings redundancy optimized-data-sync command.

Feature:Absolute Path for HTTP or HTTPS File Transfer
Description:The File Transfer using HTTP or HTTPs feature allows you to copy files from a remote server to your local device, using the copy command. From Cisco IOS XE 17.15.1a, you must provide the absolute file path when you execute the copy command, to transfer the file.

Feature:Monitoring Software Defined (SD) - Routing Alarms
Description:From Cisco IOS XE 17.15.1a, network administrators can monitor SD-Routing device alarms on Cisco Catalyst SD-WAN Manager. This feature enables SD-Routing devices to record and store various alarms generated by control components and routers. For more information, see Cisco SD-Routing Command Reference Guide.

Feature:Network-Wide Path Insights on Software Defined (SD) - Routing Devices
Description:Network-Wide Path Insights (NWPI) is a tool that allows network administrators to monitor Cisco SD-Routing deployment, identify network and application issues, and optimize the network.

Feature:Configure Multiple WAN Interfaces on Cisco SD-Routing Devices Using a Custom VRF
Description:You can now create a custom VRF that hosts one or more WAN interfaces. You can extend this functionality to create multiple custom VRFs with each VRF hosting multiple WAN interfaces. These WAN interfaces now function as transport interfaces to establish control connections to the Cisco Catalyst SD-WAN Manager. Having multiple WAN interfaces ensures that there is resiliency in control connections and routing of transport traffic.

Feature:Enabling Flow Level Flexible NetFlow Support for SD-Routing Devices
Description:The Flow-level Flexible NetFlow (FNF) feature allows you to monitor the NetFlow traffic and view all the flow-level FNF data that is captured including application-level statistics.

Feature:SD-Routing License Management
Description:This release introduces license management support for SD-Routing devices. The supported licensing workflows include license assignment or configuration, license use, and license usage reporting. Depending on the device, these workflows are performed in the Cisco Catalyst SD-WAN Manager or on the device.

Feature:Seamless Software Upgrade for SD-Routing Devices
Description:This feature explains how to seamlessly upgrade and onboard an existing Cisco Routing device into the Cisco SD-WAN infrastructure.

Resolved Bugs in Cisco IOS XE 17.15.1a

• CSCwj83844
  Default queue size is too low for configure QoS bandwidth.
• CSCwj51700
  CPP crashes after reconfiguring ip nat settings pap limit ... bpa feature in high QFP state.
• CSCwk42634
  %PMAN-0-PROCFAILCRIT: R0/0: pvp: A critical process vip_confd_startup_sh has failed (rc 6).
• CSCwk33173
  EzPM application-performance profile cause memory leak and crash with long-lived idle TCP flows.
• CSCwk16333
  Device repeatedly crashing in FTMd due to FNF flow add.
• CSCwj96852
  Return traffic for outside to inside NAT traffic received on one TLOC is forwarded out of other TLOC.
• CSCwj06950
  DSL module gets stuck in a booting state.
• CSCwj95633
  SAIE application - No data to display over vManage for IOS XE router.
• CSCwk39131
  Device crashed when issuing show sdwan ftm next-hop chain all.
• CSCwk22225
  FTMd crashes after receiving credentials feature template update from vManage.
• CSCwj48909
  Coredump observed in tracker module while running cxp_sig_auto_tunnel suite.
• CSCwk23723
  Mean queue calculation is incorrect on WRED hierarchical QoS.
• CSCwj31476
  DSL device feature template suite fails with CONFD ERROR no switchport access vlan 4.
• CSCwk45165
  fman_fp Memory Leak on device.
• CSCwj84949
  Unencrypted traffic due to non-functional IPSec tunnel in FLEXVPN hub and spoke Setup.
• CSCwj90614
  High CPU utilisation for confd_cli.
• CSCwi81026
  SDWAN BFD sessions flapping during IPSec rekey in scaled environment.
• CSCwk39268
  sdn-network-infra-iwan failing to renew with "hash sha256" >
• CSCwj76662
  High memory utilization due to ftmd process.
• CSCwk31715
  After deleting a NAT configuration, the IP address still shows up in routing table.
  CSCwk12524
  Device reloaded due to ezManage mobile app service.
• CSCwk44078
  GETVPN/Migrating to new KEK RSA key does not trigger GM re-registration.
• CSCwj23674
  Dialer interface MAX MTU for PPPOA is 1492.
• CSCwk22942
  Unable to build two IPSec SAs with same sourceor destination where one peer is PAT'd through the other.
• CSCwj96092
  ICMP tracker type (from echo to timestamp) change causes tracker to fail.
• CSCwj99827
  Device unexpectedly reloads due to a crash in vDaemon process.
• CSCwi99454
  cEdgeFNF test_tunnel_name_change_CSCvt57024 case failed due to session of pm5 was not alive.
• CSCwj02401
  Router reloaded when generating admin tech while processing very high number of flows.
• CSCwj40223
  appRouteStatisticsTable sequence misordered in CISCO-SDWAN-APP-ROUTE-MIB or OS returns wrong order.
• CSCwk19725
  Add FNF cache limit for show sdwan app-fwd flows for CSCwj02401.
• CSCwj86794
  Device crashes while processing an NWPI trace.
• CSCwk42253
  Unexpected reboot when a HTTP connection failed with 404 on a controller mode router.
• CSCwj67591
  SD-Routing brownfield - chassis activate effective only after second re-try - with new uuid.
• CSCwj32347
  DIA endpoint tracker not working with ECMP routes.
• CSCwj41728
  Unable to install the TE agent using http link in CLI
  Open Bugs in Cisco IOS XE 17.15.1a
• CSCwk75733
  Custom applications may not be programmed properly.
• CSCwk89256
  Speed mismatch in IOS XE configuration after device template push for device.
• CSCwk85704
  sd-routing:match traffic-category through vManage add-on CLI push failed.
• CSCwk28794
  SNMP returns incorrect value for the interface when using switchport.
• CSCwk86355
  File transfer fails from vManage 20.9.5 /home/admin to cEdge 17.6.5 bootflash: lost connection.
• CSCwk49806
  Router rebooted unexpectedly due to process NHRP crash.
• CSCwk81360
  Cisco IOS-XE router can reboot unexpectedly while configuring NAT static translation.
• CSCwk62954
  Multiple match address local interface <int> not pushed from vManage under crypto profile.
• CSCwk63722
  Startup configuration failure post PKI server enablement.
• CSCwk97092
  MKA session not coming up after shut/no shut with EVC.
• CSCwm07564
  Data-policy local-tloc-list breaks RTP media stream.
• CSCwk54544
  SD-WAN ZBFW TCAM misprogramming after rules are reordered on device.
• CSCwk74298
  Device denied for template push and some show commands with error application communication failure.
• CSCwk86062
  LTE NIM-EM7455, Modem Locks Up after reboot of router, modem reset or cellular profile change.
• CSCwk98578
  ipv6 crypto map not shown in interface configuration.
• CSCwk70630
  Cannot import device certificate.
• CSCwk97930
  Crash occurs when IPv6 packets with link-local source are forwarded to SDWAN tunnels.
• CSCwm13223
  Crashes in IOSd due to malformed DMVPN-5-NHRP_RES_REPLY_IGNORE Syslog.
• CSCwk79454
  Endpoint tracker does not fail if default route is removed.
• CSCwi40697
  Modem may not come back up from FW upgrade with LM960A18 and FN980 modems.
• CSCwk52677
  DSL router crashing due to %PLATFORM-3-ELEMENT_CRITICAL memory level/iomd process.
• CSCwk90014
  NAT DIA traffic getting dropped due to port allocation failure.
• CSCwi87546
  Device unexpectedly rebooted due to QFP CPP stuck at waiting for rw_lock - Lock id of 0 released.
• CSCwk61238
  RRI static not populating route after reload if stateful IPSec is configured.
• CSCwm12851
  Device uses 3DES as default rekey algorithm for GETVPN.
• CSCwk95044
  CSCwj42249.SPA.smu.bin drops when packet duplication link fails-over.
• CSCwj87028
  Cflowd showing custom APP as unknown for egress traffic when using DRE opt.
• CSCwk20995
  PPPoE session with sub-interface getting stuck after reboot.
• CSCwm08545
  Centralized policy policer worked per PC on the same site not per site/vpn-list.
• CSCwf62943
  System image file is not set to packages.conf when image expansion fails due to disk space.
• CSCwm00309
  Packets not hitting the correct data policy after modifying the action of a sequence.