Skip to content
Skip to search
Skip to footer

System Security Configuration Guide for Cisco 8000 Series Routers, IOS XR Release 24.1.x, 24.2.x, 24.3.x, 24.4.x

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents

Find Matches in This Book

Results

Updated:: December 16, 2024

Chapter: New and Changed Feature Information

New and Changed Feature Information
System Security Features Added or Modified in IOS XR Release 24.x.x

New and Changed Feature Information

This chapter lists all the features that have been added or modified in this guide. The table also contains references to these feature documentation sections.

System Security Features Added or Modified in IOS XR Release 24.x.x


Feature	Description	Changed in Release	Where Documented
Per-NPU Hash Rotation	This feature was introduced.	Release 24.4.1	Per-NPU hash rotation
MACsec Encryption on Layer 3 Subinterface	This feature was introduced.	Release 24.4.1	MACsec Encryption on Layer 3 Subinterface
Multi-auth MAC Authentication Bypass	This feature was introduced.	Release 24.4.1	MAC Authentication Bypass
IPv6 support for CA enrollment URL	This feature was introduced.	Release 24.4.1	CA Enrollment URL
MACsec Encryption on 8711-32FH-M	This feature was introduced.	Release 24.4.1	Hardware Support for MACsec
MACsec Encryption on 8212-48FH-M	This feature was introduced.	Release 24.3.1	Hardware Support for MACsec
MACsec Encryption on 88-LC1-52Y8H-EM	This feature was introduced.	Release 24.3.1	Hardware Support for MACsec
RADIUS with DTLS Protection	This feature was introduced.	Release 24.2.11	RADIUS with DTLS Protection
DSCP Marking from TCP Connection Phase for SSH Packets	This feature was introduced.	Release 24.1.1	DSCP Marking for SSH Packets
Multi-Factor Authentication for SSH	This feature was introduced.	Release 24.1.1	Multi-Factor Authentication for SSH
Interaction with MASA through gRPC	This feature was introduced.	Release 24.1.1	Interaction with MASA through gRPC
Pre-upload Pinned-Domain Certificate	This feature was introduced.	Release 24.1.1	Integration with MASA through web-application
Lawful Intercept	This feature was introduced.	Release 24.1.1	Implementing lawful intercept

Was this Document Helpful?

Feedback

Feedback

Contact Cisco

Open a Support Case
(Requires a Cisco Service Contract)