Image Information and Supported Platforms
The following release notes support Cisco IOS Releases 15.6(3)M0a and higher releases. These release notes are updated to describe new features, limitations, troubleshooting, recommended configurations, caveats, and how to obtain support and documentation.
Note You must have a Cisco.com account to download the software.
Cisco IOS Release 15.6(3)M0a includes the following Cisco IOS images:
This bundle contains the following components:
– Guest Operating System: Cisco-GOS,version-1.1.0.4
– IOS: final version 15.6(3)M0a
The latest image file for the IR809 and IR829 can be found at:
https://software.cisco.com/download/navigator.html?mdfid=286287045&flowid=75322
Note The ir800-universalk9-bundle.SPA.156-3.M0a.bin bundle must be copied via Trivial File Transfer Protocol (TFTP) to the IR800, and then installed using the bundle install flash:
<image name> command. The ir800-universalk9-bundle.SPA.156-3.M0a.bin file can NOT be directly booted using the boot system flash:/image_name.
Detailed instructions are found in the Cisco IR829 and IR809 Integrated Services Router Hardware Installation Guides.
Note The cipher dhe-aes-256-cbc-sha (which is used with the commands ip http client secure-ciphersuite and ip http secure-ciphersuite) is no longer available in IOS 15.6(3)M and later as part of the weak cipher removal process. This cipher was flagged as a security vulnerability.
This release has the following limitations or deviations for expected behavior:
Caveat CSCvf76265 crosses over several different IOS software releases, and is a platform driver code issue. It is included here as a known limitation with the IR800 and CGR Industrial Routers.
On both the CGR1000 and IR800, the core dump fails to write into the local flash. The IOS is running as a virtual machine and then hypervisor is running underneath. The local flash is provided by the hypervisor as a virtual disk. When a crash occurs, this virtual disk is no longer available therefore copying to flash will fail. The workaround is to use an ftp server to copy the core dump to.
The following documentation is available:
http://www.cisco.com/c/en/us/td/docs/ios/15_6m_and_t/release/notes/15_6m_and_t.html
http://www.cisco.com/c/en/us/support/routers/800-series-industrial-routers/tsd-products-support-series-home.html
This release has the following limitations or deviations for expected behavior:
C8xx supports the following features under Ge0:
All of the Cisco IR800 Industrial Integrated Services Router documentation can be found here:
http://www.cisco.com/c/en/us/support/routers/800-series-industrial-routers/tsd-products-support-series-home.html
Caveats describe unexpected behavior in Cisco IOS releases. Caveats listed as open in a prior release are carried forward to the next release as either open or closed (resolved).
Note You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, you can register for an account.
For more information about the Cisco Bug Search Tool, see the Bug Search Tool Help & FAQ.
After upgrading the modem on a CGR1240, the modem needed to be power-cycled in order to bring it up.
When executing a series of show and configuration commands quickly on an ISR-G2, via an SSH session, an SSH Process Thrash message is generated.
When executing multiple commands, wait a few seconds between each command.
LED status report for PoE is inconsistent across different commands.
After completion of a bundle installation, the Guest OS might not function.
Perform a bundle installation with the Guest OS running. After the bundle installation is completed with Guest OS updated, the device needs to be reloaded.
It is recommended to shutdown the Guest OS before performing a bundle install. After the bundle installation is completed, the device needs to be reloaded.
IR829 is not getting GPS data after router bootup
After router bootup, sometimes the modem is up but does not get GPS data.
Cisco IOS cannot decode certificate lifetime past the year 2099
The validity end-time for either CA certificate or certificates must be 2099 or earlier. Cisco IOS cannot decode dates past 2099. BER/DER decoding failure will be generated during authentication and enrollment phases.
Registration on the CGR1K, IR800, and C819 will always fails after a flash format or folder deletion.
Once a device has been tunnel-provisioned (including those that have been registered to FND), any attempt to format its flash partition or delete the managed folder on the flash will cause any future registration (e.g. after a router reload, or a fresh ZTD operation) to fail.
java.io.IOException: Failed to retrieve inventory from device. Reason: [invalid cli command] Sent [[show iox host list detail | format flash:/managed/odm/cg-nms.odm, show iox application list | format flash:/managed/odm/cg-nms.odm]]
Access the FND's Oracle database and delete the MD5 checksum of the updated odm file for these eid's from the database.
The alarm contact configuration command syntax changed in 15.6(3)M.
In the 15.6(3)M or later releases, there is a slight change in the command syntax for the alarm contact configuration. If alarm contact is configured in IOS images prior to 15.6(3)M, and the device is upgraded to15.6(3)M, the alarm contact will need to be reconfigured using the new command syntax. Otherwise, the alarm contact setting will be lost.
Pre-15.6(3)M with hyphen between alarm and contact:
Post-15.6(3)M with no hyphen between alarm and contact:
Reconfigure the alarm contact after upgrading to 15.6(3)M.
LED status report is inconsistent across different commands
Conditions : PoE LED will go back and forth between yellow and green when there is a PoE device in deny power state. Typing show platform led
or show platform led summary
will sometimes show yellow, sometimes shows green.
Workaround : Remove the device that has been denied for power allocation
Media-type rs485 is configurable under IR800 serial port 0 interface (async1), however the serial port 1 (async1) interface does not support media-type rs485.
Conditions : When you configure 'media-type rs485" under the async1 interface, the configuration is acceptable.
On the IR829 with a 4GModem, the modem can enter into an unknown state after several modem resets.
Conditions : After 100+ modem resets and attach to BSS, the modem enters into a state where it no longer displays modem info on IOS ( show cellular 0 all
). It neither attaches to the BSS or sends IP traffic. Modem seems to respond to the AT commands.
Enabling GPS on the CGR1000 3G/4G cellular controller will lock up the console.
Conditions : The regular GPS settings for 3G or 4G cellular controller in the CGR1000 routers must not be used. Cellular modem-based GPS in CGR1000 routers is not supported.
Workaround : Only a CONFIG RESET button recovery may help to restore the CGR1000 back to working condition.
CGR1000 GOS image version is not matching the version in the filename.
Conditions : The version in the CGR1000 GOS file name " cgr1000-ref-gos.img.1.30.gz
" is 1.30, but after a bundle install and restarting the IOX VM, the GOS version being retrieved from " sh platform guest-os " is 1.29.
Inconsistent version numbering for the Ref-GOS image name in the IR800 bundle image.
Conditions : In the IR800 bundle image, the REF GOS image name is: ir800-ref-gos.img.2.3.gz
.
Installing the GOS image will produce this version string:
Installation: Cisco-GOS,version-1.0.0.2
I nstallation: Cisco-GOS,version-1.0.0.2
The IR800 GOS image is properly versioned in the form: ir800-ioxvm-1.0.0.x
On an IR829 running dual modems, you cannot collect crash dumps on both modems simultaneously.
Conditions : Cannot collect crash dump on the second modem if crash dump already collected on the first modem.
Workaround : Reload the router and then collect crash dump on the second modem
After a firmware upgrade, the router has to be reloaded.
Workaround : There is no workaround.
IR8x9 router reboots after setting up energy wise and executing show energywise
command.
Conditions : Energy wise has to be set on the router. If it is not show energywise command returns information that it is disabled.
energywise domain iss-lab security shared-secret 0 energywisesecret
After last command router reboots itself.
Bundle install failure/timeout, IOx failure
3. iox applications are not accessible anymore
Typically, when the router is left idle for many weeks and months, there is a possibility to observe this when upgrading to the next software image.
Root cause was that dual modem logs in VDS were not rotating and size increased in time. Due to lack of memory, bundle install attempts failed. Reload the router before reattempting bundle install and image upgrade.
Issue is seen in all software images supporting dual modem [15.6(3)M and beyond]
Reload IOS and system will recover.
On IR829 and IR809 platform, there is a Wpan2 interface shown by default in 15.6(3)M2 and beyond software images.
The show run command will by default show an additional interface, regardless of whether LoRa modem is attached or not.
Benign Certain on IOS and IOS-XE
See the full details of this PSIRT here:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb29204
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.