- Feature History
- Configuring Ethernet Dataplane Loopback
- Configuring Switched Port Analyzer
- Layer 2 Access Control Lists on EVCs
- Configuring MAC Address Security on Service Instances and EVC Port Channels
- Static MAC Address Support on Service Instances
- MAC Limiting
- WAN MACsec and MKA Support Enhancements
- PPPoE on Bridge Domain Interface
Feature History
The following table lists the new and modified features supported in the Layer 2 Configuration Guide in Cisco IOS XE 17 releases.
Feature | Description |
---|---|
Cisco IOS XE Dublin 17.12.1 |
|
IGE MACsec with PTP support with A900-IMA8CS1Z-M |
The 1GE MACsec with PTP supports configuration with Precision Time Protocol (PTP) packets to mitigate security vulnerabilities on the same router. |
Cisco IOS XE Cupertino 17.8.1 |
|
The MACsec supports 10GE physical layer (PHY) interfaces for N560-IMA-8Q/4L interface module. From this release, MACsec encryption feature is supported on N560-IMA-8Q/4L interface module. |
|
802.1AE WAN MACsec Enhancement for 1GE and 10GE A900-IMA8CS1Z-M |
The 802.1AE WAN MACsec supports 10GE physical layer (PHY) interfaces for A900-IMA8CS1Z-M interface module. From this release, full HA, Power on Self Test (POST) and double tag support are available on A900-IMA8CS1Z-M interface module. The following new command is introduced: show macsec post |
Cisco IOS XE Bengaluru 17.6.1 |
|
802.1AE WAN MACsec for 1GE and 10GE A900-IMA8CS1Z-M |
The WAN MACsec and MKA feature introduce MACsec support on WAN and uplink support and pre-shared key support for the MACsec Key Agreement protocol (MKA). The WAN MACsec supports 1GE and 10GE interfaces for A900-IMA8CS1Z-M interface module. |
Cisco IOS XE Bengaluru 17.5.1 |
|
MAC Security |
The MACsec and Macsec Key Agreement protocol (MKA) features are introduced on the main interface with pre-shared key support for the MKA. This feature is supported on the Cisco RSP3 module. |
Cisco IOS XE Amsterdam 17.3.1 |
|
RSPAN over VPLS Pseudowire Network |
This feature allows the traffic mirroring destination port to be configured as a pseudowire rather than a physical port. This feature lets the designated traffic on the source port to be mirrored over the pseudowire to a remote location. This feature is supported on the Cisco RSP3 module. |