Ethernet Connectivity Fault Management (CFM) is a service-level OAM protocol that provides tools for monitoring and troubleshooting end-to-end Ethernet services per VLAN. This includes proactive connectivity monitoring, fault verification, and fault isolation. CFM can be deployed in an EVPN network. You can monitor the connections between the nodes using CFM in an EVPN network.

For more information about this feature, see the EVPN Overview chapter in the L2VPN and Ethernet Services Configuration Guide for Cisco NCS 540 Series Routers.

Encapsulated Remote Switched Port Analyzer (ERSPAN) transports mirrored traffic over an IP network. The traffic is encapsulated at the source router and is transferred across the network. The packet is decapsulated at the destination router and then sent to the destination interface.

For more information, see Interface and Hardware Component Configuration Guide for Cisco NCS 540 Series Routers.

The Layer 3 QinQ feature allows you to terminate Layer 3 VPN service transport over QinQ subinterfaces. This feature enables you to increase the number of VLAN tags in an interface and increment the number of subinterfaces. Customers of service providers often have specific requirements for VLAN tags and the number of VLANs they support. Different customers require separate VLAN ranges to avoid network overlaps in the same service-provider network, and to prevent mixing of traffic of different customers in the same network infrastructure. Assigning unique range of VLAN IDs to each customer restricts customer configurations and exceeds the VLAN limit of 4096 of the 802.1Q specification. This feature allows you to enable the dual tag and efficiently manage customers services.

See L3VPN Configuration Guide for Cisco NCS 540 Series Routers.

This feature helps capturing the exact packet size of the ingress Netflow packet.

Earlier, when a L2VPN packet with a destination MAC address starting with number 6 is received, the packet gets wrongly decoded as IPv6 packet; the packet size consequently gets reported inaccurately to the collector.

For more information on Netflow, see the Netflow Configuration Guide for Cisco NCS 540 Series Routers.

The command, hw-module profile netflow fpc-enable is introduced.

The OpenConfig (OC) data models are defined by the OC community to create configuration and retreive operational state data of the network. This release supports:

• OC-LLDP data model for event-driven telemetry.

• OC-Interfaces-Aggregate data model to manage aggregated interfaces. This model augments the existing oc-interfaces data model.

See .

In any network, there can be static delays on PTP path due to different route selection for forward and reverse PTP traffic or due to any node having different delay for ingress or egress path. These delays can impact PTP accuracy due to the asymmetry in PTP.

PTP asymmetry readjustment feature provides an option to configure this static delay on slave for every master. This value can be configured in nanoseconds.

For more information on PTP asymmetry, see Network Synchronization Configuration Guide for Cisco NCS 540 Series Routers.

With this release, you now have the ability to perform Layer 2 (802.1p) marking on Layer 3 flows in the egress direction. This allows you to re-mark the priority of Ethernet packets on L3VPN traffic, but only in the peering mode. (To enable the peering feature, use the hw-module profile qos ingress-model peering configuration. You must reload the router for the hw-module configuration to be functional.)

See Modular QoS Configuration Guide for Cisco NCS 540 Series Routers.

On Cisco NCS 540, the number of bridge domains that you can configure with Bridge Group Virtual Interface (BVI) on a physical interface is 682; on a bundle interface is 750. The number of bridge domains that you can have without BVI on physical and bundle interfaces is 1500.

The above mentioned scale value is calculated when a single attachment circuit is configured on a bridge domain. The scale value reduces if you want to configure more than one attachment circuit on a bridge domain.

Unreported traffic drops in MPLS networks could be difficult to detect and isolate. They can be caused by user configuration, out-of-sync neighbors, or incorrect data-plane programming. Segment Routing Data Plane Monitoring (SR DPM) provides a scalable solution to address data-plane consistency verification and detection of unreported traffic drops. SR DPM validates the actual data plane status of all FIB entries associated with SR IGP prefix SIDs. SR DPM uses existing MPLS OAM tools and leverages SR forwarding principles to enforce test traffic paths.

For more information, see the Using Segment Routing OAM chapter in the Segment Routing Configuration Guide for Cisco NCS 540 Series Routers.

Previously, prefix redistribution from IS-IS to another IS-IS instance or protocol was limited to SR algorithm 0 (regular SPF) prefix SIDs; SR algorithm 1 (Strict SPF) and SR algorithms 128-255 (Flexible Algorithm) prefix SIDs were not redistributed along with the prefix. The Segment Routing IS-IS Flexible Algorithm Prefix SID Redistribution feature allows redistribution of strict and flexible algorithms prefix SIDs from IS-IS to another IS-IS instance or protocols. This feature is enabled automatically when you configure redistribution of IS-IS Routes with strict or Flexible Algorithm SIDs.

See .

Tree Segment Identifier (TreeSID) is a tree-building solution that uses a controller (SR-PCE using PCEP) to calculate the point-to-multipoint (P2MP) tree using SR policies. TreeSID uses a single MPLS label for building a multicast replication tree in an SR network. TreeSID does not require multicast control protocols such as RSVP, mLDP, and PIM.

A P2MP SR policy provides an SR-based TE solution for transporting multicast traffic. It works on existing data-plane (MPLS and IP) and supports TE capabilities and single/multi routing domains. At each node of the tree, the forwarding state is represented by the same segment (using a global TreeSID allocated from the SRLB). P2MP SR policy supports fast protection and prevents transient loop/loss when updating the path of a P2MP SR policy.

See NCS 540.

The Tunable MAC Address Aging Timer feature allows you to configure the MAC aging time between 300 seconds to 30,000 seconds. The defualt value is 300 seconds.

For more information about this feature, see the L2VPN and Ethernet Services Configuration Guide for Cisco NCS 540 Series Routers.

SSHv2 server and client connections support enabling of CBC mode ciphers 3DES-CBC and AES-CBC at the same time. These ciphers are disabled by default.

See Configuring CBC Mode Ciphers.

Type 6 password encryption securely stores plain text key strings for authenticating BGP, IP SLA, IS-IS, OSPF, and RSVP sessions.

This feature is applicable for the Cisco N540-24Z8Q2C-SYS, N540X-ACC-SYS, N540-ACC-SYS, N540-28Z4C-SYS-A/D, N540-12Z20G-SYS-A/D, N540X-12Z16G-SYS-A/D and N540X-16Z4G8Q2C-A/D variants.

See Implementing Type 6 Password Encryption.

Commands introduced or modified:

Following are some of the additional features supported for this release:

• CLI Show Command for Fabric Multicast Queues (FMQs) — For the command show controllers npu stats voq base 0 instance all location 0/0/CPU0, keyword voq base 0 is enabled.

• IP SLA v4: ICMP, MPLS, UDP, Responder

• Telemetry Congestion Management

The IOS XR 7.0.1 Cisco N540-28Z4C-SYS-A/D, N540-12Z20G-SYS-A/D, N540X-12Z16G-SYS-A/D, and N540X-16Z4G8Q2C-A/D variants introduce an optimized software infrastructure.

For more information, see Software Installation Guide for Cisco NCS 540 Series Routers, Release 7.0.x. To set up the router, see the System Setup Guide for Cisco NCS 540 Series Routers, Release 7.0.x.

PTP Profiles are now supported on the following Cisco NCS 540 router variant:

• N540X-16Z4G8Q2C-A/D

For more information about the PTP profile support, see Network Synchronization Configuration Guide for Cisco NCS 540 Series Routers.

From Cisco IOS XR Software Release 7.0.1 and later, the management plane and control plane components that were part of the Cisco IOS XR security package (k9sec package) are moved to the base Cisco IOS XR software image. These include SSH, SCP, and SFTP. This segregation of package components makes the software more modular. It also gives you the flexibility of including or excluding the security package as per your requirements.

The base package and the security package allow FIPS, so that the control plane can negotiate FIPS-approved algorithms.

For more information, see the System Security Configuration Guide for Cisco NCS 540 Series Routers.

SSHv2 server and client connections support enabling of CBC mode ciphers 3DES-CBC and AES-CBC at the same time. These ciphers are disabled by default.

See Configuring CBC Mode Ciphers.

Following caveats are applicable to Cisco N540-24Z8Q2C-SYS, N540X-ACC-SYS, N540-ACC-SYS, N540-28Z4C-SYS-A/D, N540-12Z20G-SYS-A/D, N540X-12Z16G-SYS-A/D, and N540X-16Z4G8Q2C-A/D variants.

Following caveats are applicable to Cisco N540-28Z4C-SYS-A/D, N540-12Z20G-SYS-A/D, N540X-12Z16G-SYS-A/D, and N540X-16Z4G8Q2C-A/D variants.

This table lists the Cisco IOS XR Software feature set matrix (packages) with associated filenames.

This table lists the Cisco IOS XR Software feature set matrix (packages) with associated filenames.

Log in to the router and enter the show version command on the Cisco N540-24Z8Q2C-SYS, N540X-ACC-SYS, and N540-ACC-SYS variants:

RP/0/RP0/CPU0:ROUTER#show version 
Fri Aug 30 12:31:42.774 IST
Cisco IOS XR Software, Version 7.0.1
Copyright (c) 2013-2019 by Cisco Systems, Inc.

Build Information:
 Built By     : ahoang
 Built On     : Thu Aug 29 16:22:09 PDT 2019
 Built Host   : iox-ucs-026
 Workspace    : /auto/srcarchive15/prod/7.0.1/ncs540/ws
 Version      : 7.0.1
 Location     : /opt/cisco/XR/packages/

cisco NCS-540 () processor
System uptime is 1 hour 20 minutes

Log in to the router and enter the show version command on the Cisco N540-28Z4C-SYS-A/D, N540-12Z20G-SYS-A/D, N540X-12Z16G-SYS-A/D and N540X-16Z4G8Q2C-A/D variants:

RP/0/RP0/CPU0:R3-CL-PE1#show version         
Cisco IOS XR Software, Version 7.0.1 LNT
Copyright (c) 2013-2019 by Cisco Systems, Inc.

Build Information:
 Built By     : ahoang
 Built On     : Fri Aug 30 04:06:13 2019
 Build Host   : iox-ucs-021
 Workspace    : /auto/srcarchive15/prod/7.0.1/ncs540l/ws
 Version      : 7.0.1
 Label        : 7.0.1

cisco NCS540L (C3708 @ 1.70GHz)
System uptime is 2 hours, 43 minutes

Use the show command in EXEC mode to view the hardware components with their current FPD version and status. The status of the hardware must be CURRENT; Running and Programed version must be the same.

Log in to the router and enter the show fpd package and show hw-module fpd commands on the Cisco N540-24Z8Q2C-SYS, N540X-ACC-SYS, and N540-ACC-SYS variants:

RP/0/RP0/CPU0:ROUTER#show fpd package 
Fri Aug 30 12:32:22.573 IST

=============================== ================================================
                                        Field Programmable Device Package
                                ================================================
                                               Req     SW      Min Req   Min Req
Card Type            FPD Description           Reload  Ver     SW Ver  Board Ver
=================== ========================== ====== ======= ======== =========
--------------------------------------------------------------------------------
N540-24Z8Q2C-M          Bootloader(A)              YES     1.12    1.12    0.0  
                        CPU-IOFPGA(A)              YES     0.03    0.03    0.0  
                        MB-IOFPGA(A)               YES     0.18    0.18    0.0  
                        MB-MIFPGA                  YES     0.04    0.04    0.0  
                        SATA(A)                    NO      5.00    5.00    0.0  
--------------------------------------------------------------------------------
N540-ACC-SYS         Bootloader(A)              YES     1.12    1.12    0.0  
                     CPU-IOFPGA(A)              YES     0.03    0.03    0.0  
                     MB-IOFPGA(A)               YES     0.18    0.18    0.0  
                     MB-MIFPGA                  YES     0.04    0.04    0.0  
                     SATA(A)                    NO      5.00    5.00    0.0  
--------------------------------------------------------------------------------
N540X-ACC-SYS        Bootloader(A)              YES     1.12    1.12    0.0  
                     CPU-IOFPGA(A)              YES     0.03    0.03    0.0  
                     MB-IOFPGA(A)               YES     0.18    0.18    0.0  
                     MB-MIFPGA                  YES     0.04    0.04    0.0  
                     SATA(A)                    NO      5.00    5.00    0.0  

RP/0/RP0/CPU0:ROUTER#show hw-module fpd 
Fri Aug 30 12:32:47.496 IST
                                                               FPD Versions
                                                               =================
Location   Card type             HWver FPD device       ATR Status   Running Programd
-----------------------------------------------------------------------------------
0/RP0      N540-24Z8Q2C-M        1.0   MB-MIFPGA            CURRENT    0.04    0.04  
0/RP0      N540-24Z8Q2C-M        1.0   Bootloader           CURRENT    1.12    1.12  
0/RP0      N540-24Z8Q2C-M        1.0   CPU-IOFPGA           CURRENT    0.03    0.04  
0/RP0      N540-24Z8Q2C-M        1.0   MB-IOFPGA            CURRENT    0.18    0.18  
RP/0/RP0/CPU0:ROUTER#

Log in to the router and enter the show fpd package and show hw-module fpd commands on the Cisco N540-28Z4C-SYS-A/D, N540-12Z20G-SYS-A/D, N540X-12Z16G-SYS-A/D and N540X-16Z4G8Q2C-A/D variants:

RP/0/RP0/CPU0:R3-CL-PE1#show fpd package 

=============================== ================================================
                                        Field Programmable Device Package
                                ================================================
                                               Req     SW      Min Req   Min Req
Card Type            FPD Description           Reload  Ver     SW Ver  Board Ver
=================== ========================== ====== ======= ======== =========
--------------------------------------------------------------------------------
N540-12Z20G-SYS-A    IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540-12Z20G-SYS-D    IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540-28Z4C-SYS-A     IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540-28Z4C-SYS-D     IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540X-12Z16G-SYS-A   IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540X-12Z16G-SYS-D   IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540X-16Z4G8Q2C-A    IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  
--------------------------------------------------------------------------------
N540X-16Z4G8Q2C-D    IoFpga                     YES     1.31    1.31    0.0  
                     IoFpgaGolden               YES     1.31    1.31    0.0  
                     Primary-BIOS               YES     1.09    1.09    0.0  
                     StdbyFpga                  YES     0.31    0.31    0.0  
                     StdbyFpgaGolden            YES     0.31    0.31    0.0  
                     TamFw                      YES     4.11    4.11    0.0  
                     TamFwGolden                YES     4.11    4.11    0.0  

RP/0/RP0/CPU0:R3-CL-PE1# show hw-module fpd 
FPD Versions
=================
Location Card type HWver FPD device          ATR       Status Running Programd
-----------------------------------------------------------------------------------
0/RP0/CPU0 N540-28Z4C-SY 0.1 IoFpga               CURRENT        1.31 1.31
0/RP0/CPU0 N540-28Z4C-SY 0.1 IoFpgaGolden    B    CURRENT             1.31
0/RP0/CPU0 N540-28Z4C-SY 0.1 Primary-BIOS    S    CURRENT        1.09 1.09
0/RP0/CPU0 N540-28Z4C-SY 0.1 StdbyFpga       S    CURRENT        0.31 0.31
0/RP0/CPU0 N540-28Z4C-SY 0.1 StdbyFpgaGolden BS   CURRENT             0.31
0/RP0/CPU0 N540-28Z4C-SY 0.1 TamFw           S    CURRENT        4.11 4.11
0/RP0/CPU0 N540-28Z4C-SY 0.1 TamFwGolden     BS   CURRENT             4.11