New Hardware Features

There are no new or changed hardware features in the Cisco IOS XE Amsterdam 17.2.1r release.

New Software Features

Cisco IOS XE Amsterdam 17.2.1r is the first release for Cisco 1000 Series Integrated Services Routers in the Cisco IOS XE Amsterdam 17.2.1 release series.

• Install and Deploy Cisco IOS XE and Cisco IOS XE SD-WAN Functionality on Edge Routers: This feature supports the use of a single universalk9 image to deploy Cisco IOS XE SD-WAN and Cisco IOS XE functionality on all the supported devices. The universalk9 image supports two modes - Autonomous mode (IOS XE features) and controlled mode (SD-WAN features).

• 6VPE over DMVPN with IPv6 Transport: With IPv6 support over DMVPN Provider Edge Routers (6VPE), you can create multi-tenant IPv6 LAN prefixes using an IPv6 DMVPN transport over the IPv4 overlay network

• Block BGP Dynamic Neighbor Sessions: With this feature, you can block a router from establishing BGP dynamic neighbor sessions with certain nodes in a BGP peer group; these nodes are identified with their IP addresses. The ability to shut down or prevent the creation of BGP dynamic neighbor sessions may be useful when a peer needs maintenance.

• CPLD Field-Programmable Upgrade: The field-programmable upgrade is performed on a need basis to address any specific issues with the hardware-programmable devices. During an upgrade, you can use field-programmable commands to display the package file version, display progress or perform a CPLD upgrade.

• Control Router Access with Passwords and Privilege Levels: A simple way of providing terminal access control in your network is to use passwords and assign privilege levels. Password protection restricts access to a network or network device. Privilege levels define commands that users can enter after they have logged into a network device.

• CUBE: Smart License Trunk Side Counting: Support for Smart Licensing is based on dynamic call counting.

  For a more detailed overview on Cisco Licensing, go to https://cisco.com/go/licensingguide.

• Debug Commands for PIM and VRF: This feature introduces debug commands for VRF (debug condition vrf) and PIM (debug ip pim) details, where, the debug condition vrf command limits the debug output to a specific virtual routing and forwarding (VRF) instance. And the debug ip pim command displays the PIM packets received and transmitted, as well as any PIM related events.

• DHCP Unicast Support on IOS-XE: This feature introduces support for unicast mode on DHCP, which helps in splitting the horizon, and therefore improving security of the network.

• EBGP Route Propagation without Policies: With this feature, you can configure an EBGP router to not propagate routes to and from an EBGP neighbor when at least one inbound and one outbound policy are not configured for the neighbor.

• Fail Close Revert Mode: When there is no rekey or the group member is unable to re-register to the key server, group members in GETVPN can remove the downloaded key server policy, and therefore returns to the fail close mode.

• L2TP - Tunneling and Forwarding Protocols: The Layer2 Tunneling Protocol on the Cisco 1000 Integrated Services Routers platform now allows L2TP tunnelling and forwarding of Layer2 protocols.

• L2TPv3 on Switch Virtual Interface: Routed interfaces and sub interfaces supports L2TPv3, which is now extended to Service Virtual interface (SVI).

• LISP Support for TCP Authentication Option: Use TCP Authentication Option (TCP AO) to secure against spoofed TCP segments in the sessions between an ETR and an MS.

• NetFlow Exported Packet with VPN-ID: With VPN-ID in netflow exported packet, you can now identify a VPN using the MPLS VPN-ID.

• Partial Configuration on CPE: With this feature, you can now apply the partial configuration of the CPE using the download RPC method in CWMP instead of a manual configuration.

• Reset Button: This functionality is used to recover the Cisco 1000 series ISRs that go into non-responsive mode. To boot a non-responsive device, press the Reset button to install the preconfigured “golden.bin” image and “golden.cfg” configurations.

• Support for Spoke Nodes in MPLS over DMVPN: You can now configure a spoke node as either a P node or PE node in an MPLS over DMVPN deployment. To configure the spoke node, MP-BGP is required to redistribute the route or label information between the spoke node and a PE node behind it.