for Cisco 4000 Series ISRs

Improvements

• End-of-Sale and End-of-Life Announcement for the Cisco 4000 Series Integrated Service Routers
• Managing the SD-Routing Devices Using Cisco SD-WAN Manager
• Support for Automatic Log Deletion
• Support for Secure Factory Reset

Cisco Unified Border Element (CUBE) Features

• GCM Ciphers for WebSocket-based Media Forking
• IPv6 Flows in High Availability
• Cover Buffer Enhancements for VoIP Trace

Resolved Bugs

CSCwe57163 - Device having kernel NULL pointer dereference, address: 0000000000000138 kernel panic crash.
CSCwe31226 - Issues/discrepancies around CPU alarms generated and sent.
CSCwe82666 - Not all HSL entries get pushed if more than 1 HSL entries are configured.
CSCwe43341 - TLS control-connections down, traffic from controller dropped with SdwanImplicitAclDrop.
CSCwe18124 - MACsec remains marked as Secured, but randomly the traffic stops working.
CSCwe18276 - Route-map not getting effect when its applied in OMP for BGP routes.
CSCwb74821 - Unexpected behavior due to unstable power source.
CSCwe81182 - (EPC, packet-trace) for IPsec running COFF (Crypto Offload).
CSCwe63222 - Certificate output is not getting changed on renew when Cloud Certificate Authorization is automated.
CSCwe93905 - NAT ALG is changing the Call-ID within SIP message header causing calls to fail.
CSCwe90501 - Device upgrade fails due to advertise aggregate with VRF.
CSCwe85195 - AAR: BoW feature ignoring color preference from Tiered Transport preference configuration.
CSCwe14885 - VPN is established although the peer is using a revoked certificate for authentication.
CSCwe06507 - Device drops packets with reason 55 (Forus) when port forwarding is enabled from outside to inside.
CSCwd53710 - Crash seen when umbrella/zscaler template pushed to device when name_lookup takes > 30 sec.
CSCwe66318 - NAT entries expire on standby router.
CSCwd84599 - Dataplane memory utilization issue - 97% QFP DRAM memory utilization.
CSCwd59722 - Unexpected reboot due to IOSXE-WATCHDOG: Process = Crypto IKMP.
CSCwe70374 - Platform punt-policer is not configurable.
CSCwe73408 - For some error condition platform_properties may double free.
CSCwd42523 - Same label is assigned to different VRFs.
CSCwe12194 - Auto-update cycle incorrectly deletes certificates.
CSCwe57239 - All USB internal communcation is closed when using platform usb disable command.
CSCvz82148 - %CRYPTO_SL_TP_LEVELS-6-VAR_NEW_VALUE message is observed in each write configuration with same crypto value.
CSCwe85421 - BFD session down with interface flap.
CSCwe95606 - Double GR_Additional log enablement defect.
CSCwe31471 - Segmentation fault when per-tunnel QoS configuration withdraw.
CSCwe89404 - No way audio when using secure hardware conference with secure endpoints.
CSCwd39257 - IOS-XE CPP crash when entering no ip nat create flow-entries.
CSCwe70642 - AAR overlay actions are applied to DIA traffic.
CSCwa96399 - Configuring entity-information xpath filter causes syslogs to print, does not return data.
CSCwe79007 - Device unexpected reload when doing IPS test with UTD IPS engine.
CSCwe31281 - Autotunnel IPsec tracker: Tracker does not come up at all.
CSCwd93401 - AppNav-XE: Policy-map edit on cluster with multiple service context fails to program TCAM.
CSCwf65696 - Non-fabric- load the minimal bootstrap configs again if device rebooted without saving the configurations.
CSCwd76648 - Port-channel DPI load-balancing not utilizing all the member-links.
CSCwe39011 - GARP on port up/up status from router is not received by remote peer device.
CSCwb39206 - Enable VFR CLI.
CSCwe85022 - Device is showing 4 additional NR bands support - 1, 3, 7, and 28.

Open Bugs

CSCwf70854 - Changes to speed on the interface via CLI/GUI do not go through unless first done via shell access.
CSCwf72079 - Device unexpectedly reloads due to LocalSoft.
CSCwh06834 - Using special characters in the password while generating TP generates an invalid TP.
CSCwh06870 - APN password in plain text when device profile is configured.
CSCwf87292 - Punt keep alive failure crash on controller-managed device apparently due to data packets.
CSCwf83850 - With Pure IPv6, minimal bootstrap unable to onboard Non-Fabric - IPv6 config missing in WAN int G1.
CSCwf94294 - Misprograming during vpn-list change under data policy.
CSCwf55145 - SFP transceiver DOM not working after some time. However, interface forwards the traffic as expected.
CSCwf94052 - BFD going down for newly onboarded device.
CSCwf61720 - Device No licenses in use after upgrading from traditional to Smart licensing IOS-XE versions.
CSCwf80927 - Speed tests to internet from device will fail sometimes.
CSCwf84522 - Device unexpected rebooted while classifying packet with CTF (Common Flow Table).
CSCwh00320 - show run and other show commands not in sync after removing GigabitEthernet3.
CSCwf44703 - NAT64 prefix is not originated into OMP.
CSCwf99947 - Crash when modifying tunnel after running show crypto commands.
CSCwf77252 - SIP calls not working on device with ZBFW enabled.
CSCwf96416 - Could not access any device show commands at all.
CSCwf67564 - Device observes Memory Leak at process SSS Manager.
CSCwf34171 - configure replace command fails due to the license udi PID XXX SN:XXXX line on IOS-XE devices.
CSCwh00963 - Unable to migrate from ADSL to VDSL without reboot.
CSCwf69062 - SDRA-SSLVPN : The SSLVPN session closes with re-authentication error after some interval of time.
CSCwf79264 - Traffic forwarded to wrong VPN. Hence, traffic gets wrong zonepair matched and gets dropped.
CSCwf71557 - IPv4 connectivity over PPP not restored after reload.
CSCwf45486 - OMP to BGP redistribution leads to incorrect AS_Path Installation on chosen next-hop.
CSCwh01313 - Unexpected reboot due QFP UCode due to IPSec functions.
CSCwf95527 - BFD entries removed.
CSCwe26895 - Router has LocalSoftADR crash, writes flat core, and reloads.
CSCwh01318 - Multiple crashes observed on platform due to memory exhaustion.
CSCwf71116 - Static route keep advertising via OMP even though there is no route.
CSCwf60120 - Static NAT entry gets deleted from running configuration, but remains in startup configuration.
CSCwh00332 - B2B NAT: when configration ip nat inside/outside on VASI intereface, ack/seq number abnormal.
CSCwf78735 - Device uses the NIM-1T/4T card for interconnection, and NAT+ GRE over IPsec cannot be applied.
CSCwf84960 - C-NIM-2T: LED L remains green after port shutdown.
CSCwf49390 - Device crashes@crypto_map_unlock_map_head.
CSCwh67812 - Unable to configure crypto map on a physical interface due to which crypto map-based VPN's cannot be formed.