Managing the SD-Routing Devices Using Cisco SD-WAN Manager

Improvements

• Managing the SD-Routing Devices Using Cisco SD-WAN Manager
• Profile Clean-up on LTE Modems Using Factory Reset Button
• Quantum-Safe Encryption Using Post-Quantum Preshared Keys
• Support for Automatic Log Deletion
• TrustSec and Software-Defined Access Scale Measurement

Cube Features

• CUBE/LGW: Cover Buffer Enhancements for VoIP Trace

Bug fixes

CSCwe82666 - Not all HSL entries get pushed to device if more than 1 HSL entries are configured via vManage.
CSCwe31226 - Issues/discrepancies around CPU alarms generated and sent to vManage from cEdge.
CSCwe43341 - TLS control-connections down, traffic from controller dropped with SDWAN implicit ACL drop.
CSCwe18124 - MACSEC remains marked as SECURED, but randomly the traffic stops working.
CSCwe18276 - Route-map not getting effect when its applied in OMP for BGP routes.
CSCwf83850 - With Pure IPv6, minimal bootstrap unable to onboard Non-Fabric - ipv6 config missing in wan int G1.
CSCwb74821 - Unexpected behavior due to unstable power source.
CSCwe81182 - (EPC, packet-trace) for IPsec running COFF (Crypto OFFLOAD).
CSCwe93905 - NAT ALG is changing the Call-ID within SIP message header causing calls to fail.
CSCwe90501 - Upgrade fails due to advertise aggregate with vrf.
CSCwe85195 - AAR: BoW feature ignoring color preference from tiered transport preference configuration
CSCwe14885 - VPN is established although the peer is using a revoked certificate for authentication.
CSCwd53710 - Crash seen when umbrella/zscaler template pushed to device when name_lookup takes 30 sec.
CSCwe66318 - NAT entries expire on standby router.
CSCwf83985 - With pure IPv6 overlay, vbond vpn 0 ge0/0 interface if-oper-status down after power off/on.
CSCwd84599 - Dataplane memory utilization issue - 97% QFP DRAM memory utilization
CSCwd59722 - Unexpected reboot due to IOSXE-WATCHDOG: Process = Crypto IKMP.
CSCwe70374 - Device punt-policer is not configurable.
CSCwe73408 - For some error condition platform_properties may double free.
CSCwd42523 - Same label is assigned to different VRFs
CSCwe12194 - Auto-update cycle incorrectly deletes certificates.
CSCwe57239 - All usb internal communication is closed when using platform usb disable command.
CSCvz82148 - %CRYPTO_SL_TP_LEVELS-6-VAR_NEW_VALUE message is observed in each write config with same crypto value.
CSCwe85421 - cEdge BFD session down with interface flap.
CSCwe83169 - Pseudowire control word not working on device.
CSCwe95606 - Double GR_Additional log enablement defect.
CSCwe31471 - Segmentation fault in SDWAN PB rx when per-tunnel qos config withdraw.
CSCwe89404 - No way audio when using secure Hardware conference with secure endpoints.
CSCwd39257 - IOS-XE cpp crash when entering no ip nat create flow-entries.
CSCwe63222 - Certificate output is not getting changed on renew when cloud certificate authorization is automated.
CSCwe70642 - AAR overlay actions are applied to DIA traffic.
CSCwa96399 - Configuring entity-information xpath filter causes syslogs to print, does not return data.
CSCwe79007 - cEdge unexpected reload when doing ips test with UTD ips engine.
CSCwe31281 - Autotunnel IPsec tracker: Tracker does not come up at all on vEdge.
CSCwd93401 - AppNav-XE: Policy-map edit on cluster with multiple service context fails to program TCAM.
CSCwd76648 - Port-channel DPI Load-balancing not utilizing all the member-links.
CSCwe39011 - GARP on port up/up status from router is not received by remote peer device.
CSCwb39206 - Enable VFR CLI in sdwan mode.
CSCwe85022 - Telstra Cert: FN980 modem is showing 4 additional NR bands support - 1, 3, 7, and 28.

Open issues

CSCwf70854 - Changes to speed on the interface via CLI/GUI does not go through unless first done via shell access.
CSCwf72079 - Device unexpectedly reloads due to LocalSoft.
CSCwh06834 - Using special characters in the password while generating TP generates an invalid TP.
CSCwh06870 - APN password in plain text when cellular controller profile is configured.
CSCwf87292 - Punt keep alive failure crash on device controller managed apparently due to for us data packets.
CSCwf83850 - With pure IPv6, minimal bootstrap unable to onboard non-fabric - IPv6 config missing in wan int G1.
CSCwf94294 - Misprograming during vpn-list change under data policy.
CSCwf55145 - SFP transceiver DOM not working after some time, however interface forwards the traffic as expected.
CSCwf94052 - BFD going down for newly onboarded device.
CSCwf61720 - No licenses in use after upgrading from traditional to Smart Licensing IOS-XE versions.
CSCwf80927 - Speed tests to internet from device triggered.
CSCwf84522 - Unexpected rebooted while classifying packet with CTF (Common Flow Table).
CSCwf44703 - NAT64 prefix is not originated into OMP.
CSCwf99947 - Crash when modifying tunnel after running show crypto commands
CSCwf77252 - SIP calls not working on device with ZBFW enabled.
CSCwf96416 - Can not access any show sdwan commands at all.
CSCwf67564 - Device observes Memory Leak at process SSS Manager.
CSCwf34171 - Configure replace command fails due to the license udi PID XXX SN:XXXX line on IOS-XE devices.
CSCwh00963 - Unable to migrate from ADSL to VDSL without reboot.
CSCwf69062 - SDRA-SSLVPN : The SSL VPN session closes with re-authentication error after some interval of time.
CSCwf79264 - Traffic forwarded to wrong VPN hence traffic gets wrong zonepair matched and gets dropped.
CSCwf71557 - IPv4 connectivity over PPP not restored after reload.
CSCwf45486 - OMP to BGP redistribution leads to incorrect AS_Path installation on chosen Next-Hop.
CSCwh01313 - Unexpected reboot due qfp uCode due to IPSec functions.
CSCwf95527 - BFD entries removed.
CSCwe26895 - Router has Local Soft ADR crash, writes flat core, and reloads.
CSCwh01318 - Multiple crashes observed on platform due to memory exhaustion.
CSCwf71116 - Static route keep advertising via OMP even though there is no route.
CSCwf60120 - Static NAT entry gets deleted from running config; but remains in startup config
CSCwh00332 - B2B NAT: when configuration ip nat inside/outside on VASI intereface, ack/seq number abnormal.
CSCwf49390 - Crashes@crypto_map_unlock_map_head.