Release Notes for Cisco 4000 Series ISRs, Cisco IOS XE Denali 16.2

Cisco ISR 4400 Series	Cisco ISR 4300 Series
Cisco ISR 4431	Cisco ISR 4321
Cisco ISR 4451	Cisco ISR 4331
	Cisco ISR 4351

Migrating to Cisco IOS XE Denali 16.2

The Cisco IOS XE Denali 16.2 Migration Guide for Access and Edge Routers contains important information for migrating successfully from Cisco IOS XE 3S to Cisco IOS XE 16.2. Before you begin the migration, read this information to ensure that you have completed all the prerequisites and understand the migration process.

For a list of caveats in this release, see the Open Caveats - Cisco IOS XE Denali 16.2.1 section.

System Requirements

The following are the minimum system requirements:

• Memory: 4GB DDR3 up to 16GB
• Hard Drive: 200GB or higher (Optional). (The hard drive is only required for running services such as Cisco ISR-WAAS.)
• Flash Storage: 4GB to 32GB
• NIMs and SM-Xs: Modules (Optional)
• NIM SSD (Optional)

Recommended Firmware Versions

Table 1 provides information about the recommended Rommon and CPLD versions for releases prior to Cisco IOX XE Denali 16.2.1.

Upgrading the ROMMON Version on the Cisco 4000 Series ISR

For information about ROMMON version that is needed to load the Cisco IOS Denaili 16.2.1 image on a Cisco ISR 4000 Series, see the Cisco IOS XE Denali 16.2 Migration Guide for Access and Edge Routers.

For information about ROMMON and upgrading procedure, see the "ROM Monitor Overview and Basic Procedures” section in the Hardware Installation Guide for the Cisco 4000 Series Integrated Services Routers.

Upgrading Field-Programmable Hardware Devices

The hardware-programmable firmware is upgraded when Cisco 4000 Series ISR contains an incompatible version of the hardware-programmable firmware. To do this upgrade, a hardware-programmable firmware package is released to customers.

Generally, an upgrade is necessary only when a system message indicates one of the field-programmable devices on the Cisco 4000 Series ISR needs an upgrade, or a Cisco technical support representative suggests an upgrade.

From Cisco IOS XE Release 3.10S onwards, you must upgrade the CPLD firmware to support the incompatible versions of the firmware on the Cisco 4000 Series ISR. For upgrade procedures, see the Upgrading Field-Programmable Hardware Devices for Cisco 4000 Series ISRs.

Cisco Unified Threat Defense

The Cisco Unified Threat Defense (UTD) service requires a minimum of 8GB of DRAM and 200GB SSD.

Cisco ISR-WAAS and AppNav-XE Service

The Cisco ISR-WAAS/AppNav service requires a system to be configured with a minimum of
8GB of DRAM and 16GB flash storage. For large service profiles, 16GB of DRAM and 32GB flash storage is required. Also, Cisco ISR-WAAS requires a minimum of 200GB SSD.

IPsec Traffic

IPsec traffic is restricted on the Cisco ISR 4451-X. The router has the same IPsec functionality as a Cisco ISR G2. The default behavior of the router will be as follows (unless an HSECK9 license is installed):

• If the limit of 225 concurrent IPsec tunnels is exceeded, no more tunnels are allowed and the following error message appears:

• When the throughput value for the inbound (decrypted) traffic exceeds 85Mbps, subsequent IPsec traffic in that direction will be dropped and the following message will be displayed:

• To avoid this restriction and enable full IPsec functionality on the router, install an HSECK9 feature license.
• The Cisco 4000 Series ISR does not currently support nested SA transformation such as:

• The Cisco 4000 Series ISR does not currently support COMP-LZS configuration.

Dial on Demand

Dial on demand feature is not supported on Cisco 4000 series platform.

USB Etoken

USB Etoken is not supported on Cisco IOS XE Denali 16.2.1.

New and Changed Information

• New Software Features in Cisco 4000 Series ISR Release Cisco IOS XE Denali 16.2.1

New Software Features in Cisco 4000 Series ISR Release Cisco IOS XE Denali 16.2.1

The following features are supported by the Cisco 4000 Series Integrated Services Routers for Cisco IOS XE Denali 16.2.1:

• For information on migrating from existing Cisco IOS XE 3S releases to the Cisco IOS XE Denali 16.2.1 release, see Cisco IOS XE Denali 16.2 Migration Guide for Access and Edge Routers.
• Supported Technology Configuration Guides—When a technology is supported on Cisco 4000 series ISR, the corresponding technology configuration guide is displayed on the product landing page.
• Web User Interface—Supports an embedded GUI-based device-management tool that provides the ability to provision the router, simplifies device deployment and manageability, and enhances user experience. For information on how access the Web User Interface, see Configure the Router for Web User Interface.
• Cisco Unified Border Element (CUBE) is supported on ISR 4K platforms running Cisco IOS XE Denali 16.2.1 release. For more information on CUBE support in Cisco IOS XE Denali 16.2.1, see http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/read-me-first.html.
• Cisco Unified Communications Manager Express (Unified CME) and Cisco Unified Survivability Remote Site Telephony (Unified SRST) is supported on ISR 4K platforms running Cisco IOS XE Denali 16.2.1.

Configure the Router for Web User Interface

This section explains how to configure the router to access Web User Interface.

Web User Interface require the following basic configuration to connect to the router and manage it.

• An http or https server must be enabled with local authentication.
• A local user account with privilege level 15 and accompanying password must be configured.
• Vty line with protocol ssh/telnet must be enabled with local authentication. This is needed for interactive commands.
• You can use the Cisco IOS CLI to enter the necessary configuration commands. To use this method, see Entering the Configuration Commands Manually.

Entering the Configuration Commands Manually

If you don’t want to use the factory default configuration because the router already has a configuration, or for any other reason, you can use the procedure in this section to add each required command to the configuration.

To enter the Cisco IOS commands manually, complete the following steps:

---

Step 1 Log on to the router through the Console port or through an Ethernet port.

Step 2 If you use the Console port, and no running configuration is present in the router, the Setup command Facility starts automatically, and displays the following text:

Enter no so that you can enter Cisco IOS CLI commands directly.

If the Setup Command Facility does not start automatically, a running configuration is present, and you should go to the next step.

Step 3 When the router displays the user EXEC mode prompt, enter the enable command, and the enable password, if one is configured, as shown in the following example:

Step 4 Enter config mode by entering the config terminal command, as shown in the following example.

Step 5 Using the command syntax shown, create a user account with privilege level 15.

Step 6 If no router interface is configured with an IP address, configure one so that you can access the router over the network. The following example shows the interface Fast Ethernet 0 configured.

If you are going to connect the PC directly to the router, the PC must be on the same subnet as this interface.

Step 7 Configure the router as an http server for nonsecure communication, or as an https server for secure communication.

To configure the router as an http server, enter the ip http server command shown in the example:

To configure the router as an https server, enter the ip http secure-server command shown in the example:

Step 8 Configure the router for local authentication, by entering the ip http authentication local command, as shown in the example:

Step 9 Configure the vty lines for privilege level 15. For nonsecure access, enter the transport input telnet command. For secure access, enter the transport input telnet ssh command. An example of these commands follows:

 

---

Using the Cisco Bug Search Tool

For more information about how to use the Cisco Bug Search Tool, including how to set email alerts for bugs and to save bugs and searches, see Bug Search Tool Help & FAQ.

Before You Begin

---

Note You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, you can register for an account.

---

Step 1 In your browser, navigate to the Cisco Bug Search Tool.

Step 2 If you are redirected to a Log In page, enter your registered Cisco.com username and password and then, click Log In.

Step 3 To search for a specific bug, enter the bug ID in the Search For field and press Enter.

Step 4 To search for bugs related to a specific software release, do the following:

a. In the Product field, choose Series/Model from the drop-down list and then enter the product name in the text field. If you begin to type the product name, the Cisco Bug Search Tool provides you with a drop-down list of the top ten matches. If you do not see this product listed, continue typing to narrow the search results.

b. In the Releases field, enter the release for which you want to see bugs.

The Cisco Bug Search Tool displays a preview of the results of your search below your search criteria.

Step 5 To see more content about a specific bug, you can do the following:

• Mouse over a bug in the preview to display a pop-up with more information about that bug.
• Click on the hyperlinked bug headline to open a page with the detailed bug information.

Step 6 To restrict the results of a search, choose from one or more of the following filters:

Your search results update when you choose a filter.

 

Caveats in Cisco 4000 Series Integrated Services Routers

This section contains the following topics:

• Open Caveats - Cisco IOS XE Denali 16.2.2
• Resolved Caveats - Cisco IOS XE Denali 16.2.2
• Open Caveats - Cisco IOS XE Denali 16.2.1
• Resolved Caveats - Cisco IOS XE Denali 16.2.1

Open Caveats - Cisco IOS XE Denali 16.2.2

There are no open caveats in this release.

Resolved Caveats - Cisco IOS XE Denali 16.2.2

All resolved bugs for this release are available in the Cisco Bug Search Tool.

Open Caveats - Cisco IOS XE Denali 16.2.1

All open bugs for this release are available in the Cisco Bug Search Tool.

Resolved Caveats - Cisco IOS XE Denali 16.2.1

There are no resolved caveats in this release.

Platform-Specific Documentation

For information about the Cisco 4000 Series ISRs and associated services and modules, see:

Documentation Roadmap for the Cisco 4000 Series ISRs,Cisco IOS XE Denali 16.x.

Cisco IOS Software Documentation

The Cisco IOS XE Denali 16.x software documentation set consists of Cisco IOS XE Denali 16.x configuration guides and Cisco IOS command references. The configuration guides are consolidated platform-independent configuration guides organized and presented by technology. There is one set of configuration guides and command references for the Cisco IOS XE Denali 16.x release train. These Cisco IOS command references support all Cisco platforms that are running any Cisco IOS XE Denali 16.x software image.

See http://www.cisco.com/en/US/products/ps11174/tsd_products_support_series_home.html

Information in the configuration guides often includes related content that is shared across software releases and platforms.

Additionally, you can use Cisco Feature Navigator to find information about feature, platform, and software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on cisco.com is not required.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html.

Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.

This document is to be used in conjunction with the documents listed in the “Related Documentation” section.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2016 Cisco Systems, Inc. All rights reserved.

 Printed in the USA on recycled paper containing 10% postconsumer waste.