Cisco IOS Release 15.7(3)M - Release Notes for Cisco IR800 Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers

IOx Radius authentication

This feature allows for enabling the AAA login to IOx applications. There are different options:

• If your device shows no aaa new-model in the configuration, it will use local authentication.
• If your device shows aaa new-model in the configuration, there are two different methods of authentication.

– If your device shows no iox aaa authentication in the configuration, it will use the default authentication list, for example: "aaa authentication login default".

– If your device shows iox aaa authentication WORD in the configuration, it will use the newly created list/group you specify.

– To create a login authentication group/list, use aaa authentication login WORD. Then specify the name to use for IOX authentication using iox aaa authentication WORD For example:

Note TACACS+ is unsupported. Only local login and RADIUS are supported.

IOx IPv6 Networking Option

IOx interfaces on IOS now support IPv6 addressing. See the IOx documentation for further information.

Cellular Backoff

Cellular Backoff is a feature introduced in IOS 15.7 for IoT platforms IR800 and CGR1000. It addresses the concerns about Cisco 3/4G router not performing backoff in error handling. When PDP Context activation is failing, modems may receive from a cellular service provider. As a result, when some specific error codes (for example: 29, 33) are received by the modem from a cellular network, the router’s IOS incrementally adds interval in sending PDP Context Activation requests and any IP traffic such as not to load service provider network with requests that are known to IOS as failing. Once PDP Context is established and IP traffic is successful, the Cellular Backoff is removed for normal operation.

This back-off implementation will be a generic design and will NOT be specific to a particular service provider. There will be NO IOS CLI command to disable this new feature either.

Cisco IOS Release 15.7(3)M

The following sections list caveats for Cisco IOS Release 15.7(3)M:

Open Caveats

• CSCvf13036

On the CGR1K, inconsistent RAT preference displays as WCDMA or GLW when UMTS is configured.

When RAT technology is selected to be 'auto', it may show up on some modem firmware as 'GWL' (ie, GSM, WCDMA, or LTE) as RAT preference under 'show cellular slot radio'. This is a cosmetic issue, and does not affect functionality.

Workaround : None

• CSCvb44930

On the CGR1K, firmware upgrade fails with an error code 105. Seen on both the MC7430 and MC7455 modems.

Workaround : Reload the router.

• CSCvf12166

GOS networking fails to come up

Symptoms : Even on a router reload, GOS IPv6 addressing never gets assigned. GOS networking is completely down.

Conditions : When encapsulation dot1q is configured on the GOS sub-interface and BVI attached to it, and then 'shut' the interface and change to another physical interface without dot1q.

Workaround : Default the interface with dot1q encapsulation, even if it is in 'shut' state.

• CSCvc99738:

IKEv2 tunnel fails to come up between Cisco routers after upgrading one router to 15.5(3)S5, 15.5(3)M5

Symptoms : IKEv2 tunnel negotiation between two Cisco routers fails in IKE AUTH exchange after upgrading one of the routers to 15.5(3)S5 or 15.5(3)M5.

Conditions :

1. KEv2 tunnel configured between 2 Cisco routers (IOS or IOS-XE)

2. IKEv2 Fragmentation enabled and IKEv2 IETF fragmentation being negotiated between the two peers.

3. One of the routers is upgraded to15.5(3)S5 or 15.5(3)M5.

4. IKE AUTH packet size exceeds the IKEv2 Fragmentation MTU and hence is fragmented at IKE layer.

Workaround : Disable IKEv2 Fragmentation, or, upgrade the peer as well to 15.5(3)S5 or 15.5(3)M5

• CSCvf91570

On the CGR1K, Third-party modules may show power sequence error when powering up.

Conditions : Starting with Cisco IOS version 15.6(3)M1b, whenever a third-party module is powered up, the following power sequence error log message may be generated.

This is due to an enhancement for power sequence error reporting to ensure that Cisco modules are properly powered up. However, for third-party modules, such power sequence error may be safely ignored as long as the module does not have any temperature sensor.

Workaround : None

• CSCvf75957

Problem Description :

Bundle install failure/timeout, IOx failure

Symptoms:

1. ping to VDS fails:

2. bundle install times out

3. iox applications are not accessible anymore

Conditions:

Typically, when the router is left idle for many weeks and months, there is a possibility to observe this when upgrading to the next software image.

Root Cause:

Root cause was that dual modem logs in VDS were not rotating and size increased in time. Due to lack of memory, bundle install attempts failed. Reload the router before reattempting bundle install and image upgrade.

Issue is seen in all software images supporting dual modem [15.6(3)M and beyond]

Workaround :

Reload IOS and system will recover.

• CSCvd41974

Problem Description :

On IR829 and IR809 platform, there is a Wpan2 interface shown by default in 15.6(3)M2 and beyond software images.

Condition :

The show run command will by default show an additional interface, regardless of whether LoRa modem is attached or not.

Workaround :

None

• CSCvf74520

Problem Description :

The IR829 keeps reloading back to IOS when the ignition management is enabled and the ignition is OFF.

Condition :

When the ignition management is enabled and the ignition is OFF, the IR829 does not stay shut down when its ignition off-timer expires. It keeps reloading back to IOS, getting shut down again and the same cycle repeats. The battery will be eventually drained due to this repeated cycle.

Workaround :

There is no workaround. Customers are recommended to use 15.6(3)M2 to avoid this problem.

Resolved Caveats

The following caveats are fixed with this release:

• CSCvd70062

The running-config always shows the gyroscope-reading enable setting even if the feature is disabled. The default setting for the gyroscope-reading feature is disabled, and the setting is supposed to be no gyroscope-reading enable in the running-config.

Workaround :

Issue the EXEC command show platform gyroscope-data to check whether the feature is actually enabled or disabled.

• CSCvd76690

Bundle install redundant lengthy time-out right after reload.

On the IR800 series, right after router reboot, the IOS-VDS hb failure syslog message comes in quite late. Because of this, if the user erroneously tries a bundle install, the following is observed:

Expected - Bundle install should immediately timeout/fail stating vds not up

Observation - Bundle install continues for next 15 minutes and then times out.

Expected - VDS eventually comes up within a minute or two, and can be reached

Observation - Even though VDS is now accessible, bundle install continues to timeout. So no value add in letting it run.

Workaround :

Ping the IP address 127.1.3.1. Proceed with bundle install only if the ping to VDS succeeds.

• CSCvd74884

On repeated reload, MCU reattempts to upgrade application firmware.

This problem occurs very rarely on the IR800 series. Observed syslog:

%NOTICE: The system booted with MCU in bootloader mode, which triggers the MCU upgrade.For MCU upgrade, MCU must be in bootloader mode. MCU is going to bootloader mode This might cause System reload.

Workaround :

Device eventually comes back up in a couple of reboots.

• CSCvc53663

On the CGR1K series, SSH enabling/disabling for IOX does not work consistently.

When SSH server is enabled or disabled in GOS VM using the iox host exec disablessh/enablessh xxxx command, the operation may randomly fail or succeed.

Workaround :

Repeat the command several times until it succeeds.

• CSCvc12365

On the 800 series routers, configured with Dialer Watch configurations, if the interface cellular is up and device is reloaded, the dial-out does not happen and IP does not appear on cellular interface.

Workaround :

Perform a shut then noshut on the cellular interface.

• CSCvc80191

On the CGR1K series, an ungraceful IOX shutdown may cause previously running apps to get stuck in deployed or failed state after booting.

If an app is deployed and running and the device is power-cycled or the GOS VM is ungracefully restarted, the app may be stuck in deployed or failed state after booting.

Workaround :

Uninstall the app prior to power-cycling the router or ungracefully restart the GOS VM. Re-install the app after booting.

• CSCvc81796

Cgroups error message may occasionally show up during apps operations, such as install/uninstall.

When an app is installed or uninstalled, this error message may show up in the GOS VM console:

/ software/apps/work/repo-proc# cgroup: cgcreate (762) created nested cgroup for controller "memory"
which has incomplete hierarchy support. Nested cgroups may change behavior in the future. cgroup: "memory" requires setting use_hierarchy to 1 on the root.

Workaround :

None

• CSCvd74257

BVI host list detail only shows IPv6, not IPv4 address.

On the IR800 series, IPv4 address does not show up in host list detail. Functionally no impact to Guest-OS, user can ping, ssh IOx v4 interface. It is just TPM issue.

Workaround :

Reboot router. No functional impact of defect.

• CSCvd74252

SFP-GE-T in IR829 throws traceback as unrecognized device.

Workaround :

Sometimes on system reload it recovers as well.

• CSCvd47333

On the IR800 series, GOS restart times out with multiple applications running.

With the new graceful shutdown of applications implementation, CAF takes longer to shutdown the apps. GOS restart times out.

Workaround :

Wait for 5 minutes. Applications should come up by themselves.

 

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

 

© 2017 Cisco Systems, Inc. All rights reserved.