Full Cisco Trademarks with Software License
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)
About Cisco Catalyst 8500 Series Edge Platforms
 Note |
Cisco IOS XE Cupertino 17.9.1a is the first release for Cisco Catalyst 8500 Series Edge Platforms in the Cisco IOS XE Cupertino 17.9.x release series. |
The Cisco Catalyst 8500 Series Edge Platforms are high-performance cloud edge platforms designed for accelerated services, multi-layer security, cloud-native agility, and edge intelligence to accelerate your journey to cloud.
The Cisco Catalyst 8500 Series Edge Platforms includes the following models:
-
C8500-12X4QC
-
C8500-12X
-
C8500L-8S4X
For more information on the features and specifications of Cisco 8500 Series Catalyst Edge Platform, refer the Cisco 8500 Series Catalyst Edge Platform datasheet.
Sections in this documentation apply to all models of unless a reference to a specific model is made explicitly.
Product Field Notice
Cisco publishes Field Notices to notify customers and partners about significant issues in Cisco products that typically require an upgrade, workaround or other user action. For more information, see https://www.cisco.com/c/en/us/support/web/field-notice-overview.html.
We recommend that you review the field notices to determine whether your software or hardware platforms are affected. You can access the field notices from https://www.cisco.com/c/en/us/support/web/tsd-products-field-notice-summary.html#%7Etab-product-categories.
New and Changed Software Features
New and Changed Software Features in Cisco IOS XE 17.9.6
There are no new software features in this release.
New and Changed Software Features in Cisco IOS XE 17.9.5e
There are no new software features in this release.
New and Changed Software Features in Cisco IOS XE 17.9.5a
There are no new software features in this release.
New and Changed Software Features in Cisco IOS XE 17.9.4a
There are no new features in this release. This release provides a fix for CSCwh87343: Cisco IOS XE Software Web UI Privilege Escalation Vulnerability. For more information, see the Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z.
New and Changed Software Features in Cisco IOS XE 17.9.4
There are no new software features in this release.
New and Changed Software Features in Cisco IOS XE 17.9.3a
|
Feature |
Description |
|---|---|
|
Support for broadband features and functionalities with DNA Network Advantage Tier 3 license |
From Cisco IOS XE 17.9.3a release, the following functionalities and features are supported on C8500-12X and C8500-12X4QC platforms with DNA Network Advantage Tier 3 license:
|
New and Changed Software Features in Cisco IOS XE 17.9.2a
There are no new software features in this release.
New and Changed Software Features in Cisco IOS XE 17.9.1a
|
Feature |
Description |
|---|---|
|
You can now use the platform usb disable command to disable the USB ports on Cisco Catalyst 8500 Edge Series platforms. |
|
| Increase ACE Scale Limit Per OGACL |
This feature provides an increase in the ACE (Access Control Engine) scale limit per ACL and OGACL(Object Group Access Control List) as the current implementation of CACE (Common Adaptive Classification Engine) has a total limit of only 64K entries. The scale for this feature is 1D and the scale information for OGACL is 3000 ACE entries per OGACL, 2400 OGs and 100 networks per OG. |
| Logging Destination IP Address and Port Details |
The ip nat settings log-destination command is introduced in Carrier Grade Network Address Translation (CGN) mode to include the destination IP address and the destination port details in the add and delete HSL records. |
|
This feature provides the capabilities to carry both IPv4 and IPv6 traffic using a single IPsec Security Association (SA) that is tunnelled over IPv4. From IOS XE release 17.9.1a onwards, Cisco supports specific subnets in the access control list when the ingress end of the tunnel interface is configured with a third party IPsec client. With the introduction of the SVTI single security association dual stack feature, you can now manage the business-to-business services and other IOT business efficiently. |
|
|
This feature introduces support for configuration of unicast-to-multicast destination reflection to facilitate unicast-to-multicast destination translation and unicast-to-multicast destination splitting. It also provides the capability for users to translate externally received unicast destination addresses to multicast addresses. |
|
|
This enhancement introduces support for extending the packet number (PN) for MACsec frames from 32-bit to 64-bit. The 64-bit extended packet number (XPN) eliminates the need for frequent SAK(Security Association Key) rekey due to exhaustion of the 32-bit PN that may occur in high-capacity links. |
|
|
Support for BGP additional paths with label-unicast unique mode |
This enhancement introduces support for configuring BGP additional paths when label-unicast unique mode is configured. |
|
Smart Licensing Using Policy Features |
|
|
New mechanism to send data privacy related information |
A new mechanism to send data privacy related information was introduced. This information is no longer included in a RUM report. If data privacy is disabled (no license smart privacy{all|hostname|version} command in global configuration mode), data privacy related information is sent in a separate sync message or offline file. Depending on the topology you have implemented, the product instance initiates the sending of this information in a separate message, or CSLU and SSM On-Prem initiates the retrieval of this information from the product instance, or this information is saved in an offline file. For more information, see license smart (global config) |
|
Hostname support |
Support for sending hostname information was introduced. If you configure a hostname on the product instance and disable the corresponding privacy setting (no license smart privacy hostname command in global configuration mode), hostname information is sent from the product instance, in a separate sync message or offline file. Depending on the topology you have implemented, the hostname information is received by CSSM, CSLU, and SSM On-Prem. It is then displayed on the corresponding user interface. For more information, see license smart (global config) With the introduction of this enhancement, the hostname limitation which existed from Cisco IOS XE Amsterdam 17.3.2 to Cisco IOS XE Cupertino 17.8.x – is removed. In these earlier releases, hostname information is not sent or displayed on various licensing utilities (CSSM, CSLU, and SSM On-Prem). |
|
RUM Report Throttling |
For all topologies where the product instance initiates communication, the minimum reporting frequency is throttled to one day. This means the product instance does not send more than one RUM report a day. The affected topologies are: Connected Directly to CSSM, Connected to CSSM Through CSLU (product instance-initiated communication), CSLU Disconnected from CSSM (product instance-initiated communication), and SSM On-Prem Deployment (product instance-initiated communication). This resolves the problem of too many RUM reports being generated and sent for certain licenses. It also resolves the memory-related issues and system slow-down that was caused by an excessive generation of RUM reports. You can override the reporting frequency throttling, by entering the license smart sync command in privileged EXEC mode. This triggers an on-demand synchronization with CSSM or CSLU, or SSM On-Prem, to send and receive any pending data. RUM report throttling also applies to the Cisco IOS XE Amsterdam 17.3.6 and later releases of the 17.3.x train, and Cisco IOS XE Bengaluru 17.6.4 and later releases of the 17.6.x train. From Cisco IOS XE Cupertino 17.9.1, RUM report throttling is applicable to all subsequent releases. |
|
Virtual Routing and Forwarding (VRF) Support |
On a product instance where VRF is supported, you can configure the license smart vrf vrf_string command and use a VRF to send licensing data to CSSM, or CSLU, or SSM On-Prem. Note: When using a VRF, the supported transport types are smartand cslu only.) For more information, see license smart (global config) |
Feature Navigator
You can use Cisco Feature Navigator (CFN) to find information about the features, platform, and software image support on Cisco Catalyst 8500 Series Edge Platforms. To access Cisco Feature Navigator, go to https://cfnng.cisco.com/ An account on cisco.com is not required.
Resolved and Open Bugs for Cisco IOS XE 17.9.6
|
Identifier |
Headline |
|---|---|
|
Crypto IKEv2 - Fragmented Authentication packets detected as malformed on third party vendor device |
|
|
Device crashed during SNMPwalk when removing SFP |
|
|
Unexpected reload when using show running-config full | format |
|
|
Unexpected reload due IPV6 TCP packet in QFP |
|
|
IPSEC FlowDB exhaustion |
|
|
QFP stuck threads crash while handling netflow features under autonomous mode |
|
|
IPSEC FlowDB duplicate flow |
|
|
SKA_PUBKEY_DB leak in TDL |
|
|
Device may crash due to Crypto IKMP process |
|
|
Memory leak in crypto IKEv2 |
|
|
IPSec tunnel fails to establish due to error |
|
|
Segmentation fault |
|
|
Unencrypted traffic due to non-functional IPSec tunnel in FlexVPN hub and spoke setup |
|
|
Endpoint tracker using DNS does not log down message when DNS server reachability is lost |
|
|
EzPM application-performance profile cause memory leak and crash with long-lived idle TCP flows |
|
|
Tunnel QoS - Incorrect IP precedence classification |
|
|
Extremely poor DMVPN performance on device with TrustSec |
|
|
Data Plane Crash in ERSPAN Processing |
|
|
Repeated and endless messages |
|
|
Segmentation fault IPSec dummy packet process |
|
|
PKI crash after failing a CRL fetch |
|
|
Device reloaded due to ezManage mobile app service. |
|
|
MPLS elephant flow causing overruns |
|
|
Reload in tcp_sanity due to l4 pointer not set |
|
|
Secure datawipe should reset the configuration register |
|
|
Device should discard IKE notification messages with incorrect DOI |
|
|
MACsec not working under LACP port-channel member port |
|
|
Race condition crash on device |
|
|
Trim installed certificate on upgrade |
|
|
nbound calls through device results in phantom calls |
|
|
Shutting a dialer interface with PPPoA unshuts it automatically |
|
|
FlexVPN client : IPSec tunnels are down due to issue with SADB detach and delete |
|
|
Input overrun errors on interfaces under bursty conditions |
|
|
Device crashes while processing an NWPI trace |
|
|
Device doesn't respond with 250 OK for a DLCX leading to DLCX loop from CUCM side |
|
|
Router rebooted when attempting merge on used CVLA block |
|
|
%IOSXE_MGMTVRF-3-INTF_ATTACH_FAIL error after configuring loopback managment vrf |
|
Identifier |
Headline |
|---|---|
|
Device does not establish BFD sessions after upgrade |
|
|
Speed mismatch in IOS-XE configuration |
|
|
NAT command not readable after reload |
|
|
BFD sessions are down and not recovering for one color after hub replacement |
|
|
Wrong severity for rekey acknowledgement configuration mismatch log message |
|
|
Device crash due to dbgd process |
|
|
Device crash due to SIGSEGV |
|
|
CRC errors increment on down interface of device |
|
|
Device crashed upon increasing the gatekeeper cache size |
|
|
Traceback seen when no dialer interface or peer down |
|
|
Device rebooted unexpectedly due to process NHRP crash |
|
|
Traceback seen due to negative global cache count |
|
|
Unexpected reboot of the ESP seen after enabling platform qos port-channel-aggregate |
|
|
Device data plane crashed when starting a new NWPI trace from this device with NAT DIA/ZBFW |
|
|
Startup configuration failure post PKI server enablement |
|
|
WAN IP is allowed to be configured as system IP |
|
|
ARP incomplete in VRF management interface |
|
|
Device fails to respond with 250 OK when there's a delay from dataplane in gathering statistics |
|
|
Device crash during function to add/delete a MAC address from the MAC accounting table. |
|
|
BFD timers reverting back to default value after negotiating correctly |
|
|
40G interfaces with breakout configurations flap after reload |
|
|
Crash due a segmentation fault due a negative value |
|
|
Add vendor specific parameter for NBAR protocol pack version |
|
|
Device crash with segmentation fault when processing NHRP traffic |
|
|
After deleting a NAT configuration, the IP address still shows up in routing table. |
|
|
Traceback seen constantly |
|
|
QoS more than four remark with set-cos not work |
|
|
Device crash when creating VRF when subscriber event tracing is enabled |
|
|
IKEv2 session is down after reload if identity local address is assigned to interface |
|
|
Unexpected reboot while displaying information from cleared SSS session |
|
|
GETVPN migrating to new KEK RSA key doesn't trigger GM re-registration |
|
|
IOMd memory leak due to POE TDL message |
|
|
Onboarding fails - EAP-TLS failed to fetch IP address |
|
|
Device crashes due to malformed syslog |
|
|
Unable to build two IPSec SAs |
|
|
Fault due to ensor has exceeded it's maximum number of read errors |
|
|
Endpoint tracker does not fail if default route is removed |
|
|
Enable SoS or ROC feature for DSL |
|
|
Enable BFD L2 messages in the punt path for device. |
|
|
Unexpected reboot during PVDM OIR |
|
|
DDNS update retransmission timer fails to work with a traceback error |
|
|
Cellular connection is picking the wrong profile |
|
|
No statistics for the SBFD protocol |
|
|
Static NAT DIA inside static routes being advertised over OMP to remote sites |
|
|
Inconsistencies with openconfig-interfaces:config yang model after defaulting interface |
|
|
ipv6 tcp adjust-mss not working after delete and reconfigure |
|
|
Packet drops observed between LISP EID over GRE Tunnel |
|
|
show crypto ipsec sa output displays incorrect replay status |
Resolved and Open Bugs for Cisco IOS XE 17.9.5e
Resolved Bugs for Cisco IOS XE 17.9.5e
|
Identifier |
Headline |
|---|---|
|
FMFP-3-OBJ_DWNLD_TO_DP_FAILED observed when delete and configure zone-pair back |
|
|
PKI crash after failing a CRL Fetch |
|
|
Custom Application is marked as invalid |
|
|
Memory Leak due to security violation by new MAC address and Del Pend object increases - ACE_IPV4 |
|
|
SKA_PUBKEY_DB leak in TDL |
|
|
Memory leak in fman_rp under acl_db |
|
|
Reboot on IOS-XE during internal SSH certificate check when SSH session is started from device |
|
|
fman_fp Memory Leak |
|
|
Endpoint tracker using DNS does not log DOWN message when DNS server reachability is lost |
|
|
CPP unexpectedly reboot due to QFP CPP stuck at waiting for rw_lock - Lock id of 0 released |
Open Bugs for Cisco IOS XE 17.9.5e
| Bug ID | Headline |
|---|---|
| CSCwc39012 | Crash saving tracelogs after too many open files error |
Resolved and Open Bugs for Cisco IOS XE 17.9.5a
Resolved Bugs for Cisco IOS XE 17.9.5a
|
Identifier |
Headline |
|---|---|
|
Device keeps crashing when processing a firewall feature. |
|
|
Device observes memory leak at process SSS manager. |
|
|
write or do write saves the configuration but the RSA keys /SSH is lost after reload. |
|
|
Device policy commit failure displays notification and alarm from Cisco Catalyst SD-WAN Controller. |
|
|
Device packet duplication performance improvement. |
|
|
Device crashed after Cisco Catalyst SD-WAN Manager running Network-Wide Path Insight. |
|
|
Unexpected reboot after establishing control plane of EVPN MPLS and receiving packets. |
|
|
NHRP reply processing dequeues an unrelated request. |
|
|
CPU usage mismatch between show sdwan system status and show proc cpu platform. |
|
|
Device crash with crashinfo files are generated with segmentation fault, and process IPSEC key engine. |
|
|
OMP route is advertised although the route is not available. |
|
|
Port-channel displayed suspended status applying platform qos port-channel-aggregate. |
|
|
Netflow stops working when flow monitor reaches cache limit in the device. |
|
|
Device displays four additional NR bands support - 1, 3, 7, and 28. |
|
|
Running tests on ThousandEyes Agent causes tracebacks on device running TE in docker container. |
|
|
NAT HSL logging vrf-filter is not working. |
|
|
Using special characters in the password while generating TP displays an invalid TP. |
|
|
VPN is established although the peer is using a revoked certificate for authentication. |
|
|
UTD packet drop due to fragmentation for ER-SPAN traffic. |
|
|
Environmental syslog does not appear when power cord is disconnected from the redundant PS. |
|
|
Device crashes while adding a trustpoint to the router . |
|
|
Unexpected device reboot while classifying packet with CTF (Common Flow Table). |
|
|
Device interface data report interval issue for physical interface. |
|
|
CSDL compliance failure : Use of 3DES by IPSec is denied. |
|
|
Unexpected reload on device due to the critical process fman_fp_image in 17.9.3a. |
|
|
Device reboots with sslproxy and utd enabled. |
|
|
Device data plane crashes in Umbrella/OpenDNS processing due to an incorrect UDP length. |
|
|
Configure replace command fails due to the license UDI PID XXX SN:XXXX line on devices. |
|
|
Device packet dup performance improvement. |
|
|
Unexpected reboot after configuring application redundancy. |
|
|
Device software forced reset during high IPC congestion with IPsec. |
|
|
ITU channel configuration is not working on device. |
|
|
Crashed by Track Client thread at access invalid memory location. |
|
|
Unable to migrate from ADSL to VDSL without reboot on device. |
|
|
Crash in IP input process during tunnel encapsulation. |
|
|
Cannot disable DMVPN logging. |
|
|
Crypto PKI-CRL-IO_0 process crash when PKI trustpoint is deleted. |
|
|
Crypto PKI-CRL-IO_0 process crash when PKI trustpoint is requested and deleted. |
|
|
IPv4 connectivity over PPP not restored after reload. |
|
|
Spoke-spoke cache refresh is not working correctly in case of multiple cache entries for same next hop. |
|
|
Vdaemon debug log must mention port-hop and reason prior to DISTLOC. |
|
|
Keyman process crashes while re-generating SSH key in the device. |
|
|
B2B NAT: When configration IP NAT inside/outside on VASI intereface, the ack/seq number is abnormal. |
Open Bugs for Cisco IOS XE 17.9.5a
|
Identifier |
Headline |
|---|---|
|
C-NIM-2T: LED L remains green after port shutdown. |
|
|
IKEv2 - The diagnose feature is taking 11% CPU when brining up the session. |
|
|
Warning and critical CPU utilization thresholds not recomputed when using data-plane-heavy mode. |
|
|
PoE module is does not provide enough power to bring up the ports after an unexpected reload. |
|
|
Segmentation fault observed in ikev2_dupe_delete_reason. |
|
|
Device crash after changing NAT HSL configuration. |
|
|
Device crashed upon increasing the gatekeeper cache size. |
|
|
Enable SoS/ROC feature for DSL. |
|
|
Endpoint tracker triggers a CPU Hog. |
|
|
Traceback on device is seen when no dialer interface or peer down. |
|
|
Unknown appID in ZBFW HSL log. |
|
|
ZBF drops transit WAAS PSH/ACK packet due to invalid ACK number. |
|
|
PKI crash after failing a CRL fetch. |
|
|
NAT command not readable after a reload. |
|
|
DSP reports out of range utilization values in SNMP. |
|
|
Device crashes due to Crypto IKMP process. |
|
|
Packets with unicast MAC get dropped on a Port Channel L2 Sub-intf after a router reboot. |
|
|
CWMP : Add vendor specific parameter for NBAR protocol pack version. |
|
|
The device must discard IKE notification messages with incorrect DOI. |
|
|
Device crashes with Segmentation fault(11), Process = NHRP when processing NHRP traffic. |
|
|
Cosmetic 3G issue - device is displayed as unknown. |
|
|
Traffic is not encrypted and droped over IPsec SVTI tunnel. |
|
|
Device: Static NAT with HSRP stops working after removing / adding standby. |
|
|
DDNS update retransmission timer fails to work with a traceback error. |
|
|
CPP CP SVR crashes after decoding all packets to text (using l2 copy) on fia trace. |
|
|
Cisco SD-WAN custom application is marked as invalid. |
|
|
IPv6 TCP adjust-mss not working after delete and reconfigure. |
|
|
Packet drops observed between LISP EID over GRE tunnel. |
|
|
C-NIM-2T cannot boot up in IOS. |
Resolved and Open Bugs for Cisco IOS XE 17.9.4a
Resolved Bugs for Cisco IOS XE 17.9.4a
All resolved bugs for this release are available in the Cisco Bug Search Tool.
|
Bug ID |
Description |
|---|---|
|
Cisco IOS XE Software Web UI Privilege Escalation Vulnerability. For more information, see Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z |
Open Bugs for Cisco IOS XE 17.9.4a
| Bug ID | Headline |
|---|---|
| CSCwf26875 |
Ten0/0/2 from port-channel going to suspended status applying platform qos port-channel-aggregate . |
| CSCwe95072 |
Unexpected reload due to memory corruption when modifying and access list. |
| CSCwf52751 |
CLI template fails to attach to device with error access-denied. |
| CSCwf55145 |
SFP transceiver DOM not working after some time, however interface forwards the traffic as expected. |
| CSCwf24164 |
Netflow stops working when flow monitor reaches cache limit in C8500L. |
| CSCwd61988 |
Output packet bytes calculation biase when we enable QoS on port channel. |
| CSCwf41492 |
NHRP BFD flaps randomly with dynamic tunnel (NHRP phase 3) in DMVPN. |
| CSCwe14885 |
VPN is established although the peer is using a revoked certificate for authentication. |
| CSCwc86434 |
Static NAT DIA inside static routes being advertised over OMP to remote sites. |
| CSCwd17272 |
UTD packet drop due to fragmentation for ER-SPAN traffic. |
| CSCwe25815 |
Crash due to dtl push/pop on wait loop. |
| CSCwf55243 |
Device is crashing while adding a trustpoint to the router. |
| CSCwf62757 |
C8500L interface data report interval issue for physical interface. |
| CSCwe85301 |
Crypto PKI-CRL-IO_0 process crash when PKI trustpoint is being deleted. |
| CSCwf34171 |
configure replace command fails due to the license udi PID XXX SN:XXXX line on IOS-XE devices. |
| CSCwf41450 |
Device reloads changing the resource profile. |
| CSCvz82148 |
%CRYPTO_SL_TP_LEVELS-6-VAR_NEW_VALUE message is observed in each write config with same crypto value. |
| CSCwf25735 |
QoS more than four remark with set-cos not work. |
| CSCwf00276 |
Packets with L2TP headers cause device to crash. |
| CSCwd39257 |
IOS-XE cpp crash when entering no ip nat create flow-entries . |
| CSCwf03193 |
Device crash with crashinfo files were generated with segmentation fault, process IPSEC key engine. |
| CSCwf60120 |
Static NAT entry gets deleted from running config; but remains in startup config. |
| CSCwf51206 |
EVPN: BUM traffic is not flooded to bridge domain interface. |
| CSCwf31934 |
C8500L - executing show platform hardware qfp active fbd-flowdb dump leads to a crash. |
| CSCwf11394 |
IOS XE debug log should mention port-hop and reason prior to DISTLOC. |
| CSCwe51910 |
SNMP ifindex persist does not work. |
Resolved and Open Bugs for Cisco IOS XE 17.9.4
Resolved Bugs for Cisco IOS XE 17.9.4
| Bug ID | Headline |
|---|---|
| CSCwf48808 |
FlexVPN: Stale client routes stuck in RIB on FlexServer. |
| CSCwe93905 |
NAT ALG is changing the Call-ID within SIP message header causing calls to fail. |
| CSCwf02225 |
Device freezes for show commands. |
| CSCwe28204 |
C8500L: control connection over L3 Tloc extension failing as no NAT table entry created. |
| CSCwe24210 |
SNMP MIB does not show correct firmware version for LTE module. |
| CSCwe18124 |
MACsec remains marked as secured, but randomly the traffic stops working. |
| CSCwe25076 |
ALG breaks NBAR recognition impacting application firewall performance. |
| CSCwd87195 |
NAT configuration with redundancy, mapping id and match-in-vrf options with no-alias support. |
| CSCwf08698 |
Device crashes unexpectedly due to a fault in the TLSCLIENT_PROCESS. |
| CSCwd34941 |
NAT configuration with no-alias option is not preserved after reload. |
| CSCwf47796 |
NHRP cache entries flood matching a /32 default route. |
| CSCwf09758 |
Watchdog crash while importing a large CRL file. |
| CSCwe41946 |
DTMF is failing through IOS MTP during call on-hold. |
| CSCwe37123 |
C8500 platform uses excessive memory when configuring ACLs with Large Object Groups. |
| CSCwe12194 |
Auto-Update cycle incorrectly deletes certificates. |
| CSCwd49309 |
uCode crash seen on device with traffic pointing to segfault in coff handler. |
| CSCwe33793 |
Memory allocation failure with extended antireplay enabled. |
| CSCwe66318 |
NAT entries expire on standby device. |
| CSCwe31471 |
Segmentation fault when per-tunnel qos config withdraw. |
| CSCwd59722 |
Unexpected reboot due to IOSXE-WATCHDOG prrocess. |
| CSCwe70374 |
Platform punt-policer is not configurable. |
| CSCwe20008 |
SNMP MIB OID changing its last index. |
| CSCwf47563 |
Device is crashing after importing the trustpoint with rsakeypair. |
| CSCwe18058 |
Unexpected reload with IPS. |
| CSCwd73783 |
Observed qfp-ucode-wlc crash. |
| CSCwe39011 |
GARP on port up/up status from device is not received by remote peer device. |
| CSCwf39490 |
MCID (Malicious Call Identification) gets broken due to custom prefix setting under STCAPP FAC. |
| CSCwe19084 |
NAT: Traffic is not translated to the same global address though PAP is configured. |
| CSCwe69783 |
Device can lose its config during a triggered resync process if lines are in an off-hook state. |
| CSCwe89404 |
No way audio when using secure hardware conference with secure endpoints. |
| CSCwe41234 |
Device race condition causes no ringing for analog phones. |
| CSCwa96399 |
Configuring entity-information xpath filter causes syslogs to print, does not return data. |
| CSCwe06518 |
C8500-12X ~23% degradation in IPSEC IPv6 profile for 1400B. |
| CSCwc89823 |
Device crashes due to CPUHOG when walking ciscoFlashMIB @snmp_platform_get_flash_file_info. |
| CSCwe32862 |
Device IOS-XE crash while executing AES crypto functions. |
| CSCwf37888 |
Device packet duplication: duplicate packets are counted on primary tunnel interface statistics. |
| CSCwd68994 |
ISAKMP profile doesn't match as per configured certificate maps. |
| CSCwd35047 |
Failed to ping gateway while configuring SharedLOM with console, TE1 interface until router reload. |
| CSCwd49177 |
ISG: L2-connected subscriber: IPv6 prefix delegation is not reachable when packet are switched. |
Open Bugs for Cisco IOS XE 17.9.4
| Bug ID | Headline |
|---|---|
| CSCwf26875 |
Ten0/0/2 from port-channel going to suspended status applying platform qos port-channel-aggregate . |
| CSCwe95072 |
Unexpected reload due to memory corruption when modifying and access list. |
| CSCwf52751 |
CLI template fails to attach to device with error access-denied. |
| CSCwf55145 |
SFP transceiver DOM not working after some time, however interface forwards the traffic as expected. |
| CSCwf24164 |
Netflow stops working when flow monitor reaches cache limit in C8500L. |
| CSCwd61988 |
Output packet bytes calculation biase when we enable QoS on port channel. |
| CSCwf41492 |
NHRP BFD flaps randomly with dynamic tunnel (NHRP phase 3) in DMVPN. |
| CSCwe14885 |
VPN is established although the peer is using a revoked certificate for authentication. |
| CSCwc86434 |
Static NAT DIA inside static routes being advertised over OMP to remote sites. |
| CSCwd17272 |
UTD packet drop due to fragmentation for ER-SPAN traffic. |
| CSCwe25815 |
Crash due to dtl push/pop on wait loop. |
| CSCwf55243 |
Device is crashing while adding a trustpoint to the router. |
| CSCwf62757 |
C8500L interface data report interval issue for physical interface. |
| CSCwe85301 |
Crypto PKI-CRL-IO_0 process crash when PKI trustpoint is being deleted. |
| CSCwf34171 |
configure replace command fails due to the license udi PID XXX SN:XXXX line on IOS-XE devices. |
| CSCwf41450 |
Device reloads changing the resource profile. |
| CSCvz82148 |
%CRYPTO_SL_TP_LEVELS-6-VAR_NEW_VALUE message is observed in each write config with same crypto value. |
| CSCwf25735 |
QoS more than four remark with set-cos not work. |
| CSCwf00276 |
Packets with L2TP headers cause device to crash. |
| CSCwd39257 |
IOS-XE cpp crash when entering no ip nat create flow-entries . |
| CSCwf03193 |
Device crash with crashinfo files were generated with segmentation fault, process IPSEC key engine. |
| CSCwf60120 |
Static NAT entry gets deleted from running config; but remains in startup config. |
| CSCwf51206 |
EVPN: BUM traffic is not flooded to bridge domain interface. |
| CSCwf31934 |
C8500L - executing show platform hardware qfp active fbd-flowdb dump leads to a crash. |
| CSCwf11394 |
IOS XE debug log should mention port-hop and reason prior to DISTLOC. |
| CSCwe51910 |
SNMP ifindex persist does not work. |
Resolved and Open Bugs for Cisco IOS XE 17.9.3a
Resolved Bugs for Cisco IOS XE 17.9.3a
| Bug ID | Headline |
|---|---|
| CSCwd45402 | MSR Unicast-To-Multicast not working if Dst and Src are the same in service reflect configuration |
| CSCwd90168 | Unexpected reload after running show voice dsp command while an ISDN Call Disconnects |
| CSCwd16559 | ISG FFR: ARP request to reroute nexthop IP is not triggered if ARP entry not in ARP table |
| CSCwc27307 | Service Engine YANG Support for ZBFW |
| CSCwd16664 | GetVPN long SA - GM re-registration after encrypting 2^32-1 of packets in one IPSEC SA |
| CSCwd81357 | QoS Classification not working for DSCP or ACL + MPLS EXP |
| CSCwd89338 | Clear ISG existing lite-session upon reception of DHCP packet for same client |
| CSCwc99823 | Fman crash seen in SGACL@ fman_sgacl_calloc |
| CSCwd71458 | Outgoing number of bytes decrease in device interface |
| CSCwd44439 | Device crashing at fman_sdwan_nh_indirect_delete_from_hash_table |
| CSCwd25107 | Interface VLAN 1 placed in shutdown state when configured with ip address pool |
| CSCwd05356 | Device observing error %HW_FLOWDB-3-HW_FLOWDB_DBLINSTALL_FEATOBJ |
| CSCwd61255 | Data plane crash on device when making per-tunnel QoS configuration changes with scale |
| CSCwe01015 | IKEv2/IPSec - phase 2 rekey failing when peer is behind NAT |
| CSCwd03869 | CEF DPI load-balancing causes out of order packets |
| CSCwc65697 | Device crashing and restarting during call flow with new image |
| CSCwd84599 | Dataplane memory utilization issue - 97% QFP DRAM memory utilization |
| CSCwd01326 | Device crashes with SIGABRT within cio infra under heavy load |
| CSCwd84391 | Device incorrectly drops ip fragments due to reassembly timeout despite fix for CSCwb74917 |
| CSCwe03614 | CWMP : MAC address of ATM interface is not included in Inform message |
| CSCwd38943 | GETVPN: KS reject registration from a public IP |
| CSCwd06372 | Unconditional excessive logging in eogre tunnel error handling case |
| CSCvy14316 | MPLS VPN traffic dropped due FDB OOM with cause FIAError under scale flow number (<1M) |
| CSCwd85580 | Device unexpected reload after set ospfv3 authentication null command |
| CSCwd33202 | DHCP behavior issue when BDI interface is enabled on WAN and SVI interface |
| CSCwd06923 | Stale IP alias left after NAT statement got removed |
| CSCwd47123 | ISG uses identifier mac-address 0000.0000.0000 when DHCP LQ does not reply |
| CSCwd72312 | GETVPN : Traffic drops seen on GM after rekey installing policies |
| CSCwc14688 | Single WAN Interface subslot 0/0 timing |
| CSCwd07516 | Memory leak under linux_iosd-imag related to SNMP. |
Open Bugs for Cisco IOS XE 17.9.3a
| Bug ID | Headline |
|---|---|
| CSCwd39257 | IOS-XE cpp crash when entering no ip nat create flow-entries |
| CSCwd63783 | Memory leak in process caused device reload |
| CSCwe19084 | NAT: Traffic is not translated to the same global address though PAP is configured. |
| CSCwe09805 | OID for SNMP monitoring of DSP resources are not working as expected |
| CSCwe25076 | ALG breaks NBAR recognition impacting application firewall performance. |
| CSCwe14885 | VPN is established although the peer is using a revoked certificate for authentication |
| CSCwe24491 | Static NAT with HSRP stops working after removing / adding standby |
| CSCwe28204 | Control connection over L3 Tloc extension failing as no NAT table entry created |
| CSCwd17272 | UTD Packet drop due to fragmentation for ER-SPAN traffic |
| CSCwe32862 | Device crash while executing AES crypto functions |
| CSCwc28468 | Device fails if running in FIPS mode. |
| CSCwd68994 | Unable to match on customer profile based on certificate-map |
| CSCwc06327 | PFP policy in SRTE, RIB resolution in FC bring down ipsec tunnel interface- stuck at linestate down |
| CSCwe07349 | Device goes down with I2C bus stuck |
| CSCwe38732 | IP CEF load sharing command is being changed by device |
| CSCwd34941 | NAT configuration with no-alias option is not preserved after reload |
Resolved and Open Bugs for Cisco IOS XE 17.9.2a
Resolved Bugs for Cisco IOS XE 17.9.2a
| CSCwc21739 | NAT not requesting further for low ports after initial allocation when cli knob reserved-ports is set |
| CSCwc39012 | Crash saving tracelogs after too many open files error |
| CSCwc03478 | VTCP does not support L2 correctly |
| CSCwc82140 | QFP crash When ZBFW Configuration Features log dropped-packets configuration |
| CSCwd12591 | Device ucode crash during FW Classification, Session Frees |
| CSCwc99668 | Routes added by IKEv2 getting deleted at responder |
| CSCwc23077 | Firewall drop seen stating FirewallL4 seen on device |
| CSCwc78528 | DSPware 60.1.1 release targeting throttle |
| CSCwc44851 | Bootstrap failing on device |
| CSCwc96444 | Device is not programming correct next-hop for unicast prefix with multicast config present |
| CSCwc49715 | carsh @ UNIX-EXT-SIGNAL: Aborted(6), Process = Check heaps, having PPPoe with cwmp configs |
| CSCwd06118 | IKEv2 Cert-based IPSEC not working between IOS XE and AWS |
| CSCwb52324 | Device unexpected reload due to QFP ucode crash |
| CSCwc43794 | Device VRF+NAT Outside Source Static - Drop packets during FTP (Active-mode) execution. |
| CSCwc77183 | Packet duplication is causing drops in payment transactions with device. |
| CSCwc20170 | Device reloads unexpectedly due to Critical FTMd Fault when VRF configuration is pushed |
| CSCwb89958 | Unified Policy HSL not sending properly NBAR application information. |
| CSCwc89328 | Multiple devices experienced crashes every 4-5min |
| CSCwc52538 | Device flows are not distributed and load-balanced evenly and consistently |
| CSCwc45950 | ZBFW self zone policy drops ssh session on Mgmt-intf 512 ports |
| CSCwb90252 | Automatically freeing up filesystems stale image or recovered folder (lost+found) |
| CSCwc79145 | Throughput degrades when Local TLOC specified in data policy goes down |
| CSCwc32595 | BFD sessions remains down if interface flap form up/down/up |
| CSCwb65396 | Device fails with error: 'Error: on line 48: line-mode single-wire line 0' |
| CSCvz91309 | Crash due to IOSXE-WATCHDOG due to management port traffic storm |
| CSCvz89354 | Device crashes due to CPU HOG |
| CSCwc39865 | Subscriber session getting stuck and needs clearing it manually |
| CSCwb48953 | Device failing with device error: Speed test in progress |
| CSCwd11365 | Needs cert update - Azure CGW creation fails due to NVA provisioning failure |
| CSCwc72923 | ERROR info: Device configuration failed:interface Serial0/1/0:23 isdn switch-type primary-ntt |
| CSCwc84967 | Intermittent double DTMF due to changing timestamp on a DTMF event |
| CSCwb08057 | Number of lite sessions conversion in progress counter not decrementing on failed account-logon |
| CSCwc29629 | Crashes when virtual-cccess tries to bring-up/bring-down OSPFv3 ipsec crypto session authentication |
| CSCwd13352 | SSH from device getting closed after update. |
| CSCwc77177 | BFD and control packets are dropped when ACL is applied on gigi to which loopback is bind |
| CSCwc68132 | SIG tunnel tracker packets are dropped by firewall with self zone policy |
| CSCwb67406 | The IPSLA udp-jitter V3 (optimize timestamp+precision microseconds) does not work on |
| CSCwd56336 | BFD sessions are not coming up after flapping the interface due to low ftm rate |
| CSCwd56015 | UTD skipped when interface UTD config is used to enable/disable UTD |
Open Bugs for Cisco IOS XE 17.9.2a
| CSCwd45363 | IPsec throughput level / ambiguous outputs |
| CSCwd33966 | Unable to configure the local BGP as-path-list. |
| CSCwd23810 | IOS XE: A high CPU utilization caused by NHRP |
| CSCwd44006 | Control Connection on device doesn't come-up with reverse proxy using enterprise certificate |
| CSCwa14636 | Device stopped forwarding traffic. Suspect OMPd is busy |
| CSCwd38626 | Repeating SYS-2-PAK_SUBBLOCK_BADSIZE: 4 -Process= "" |
| CSCvz55282 | Serviceability enhancements for config migration failures between releases |
| CSCwd17381 | NAT/DIA traffic is skipping UTD in forward direction after SSNAT path from service-side |
| CSCwd13050 | After upgrade device moved into Out of Sync status. |
| CSCwd12955 | NAT translation is not correctly sent to hub router from branch when SSNAT and UTD are configured |
| CSCwd15560 | With two sequences, should not skip if the match is different and action is same |
| CSCwd36621 | CERM may kick in due to IPSec sessions initiated for on-demand tunnels |
| CSCwd44586 | Login banner config is changed after upgrade |
| CSCwd37410 | 0365 and MS Teams applications access issues |
| CSCwc28468 | Device always fails to push any template to device if device is running in FIPS mode. |
| CSCwc99823 | Fman crash seen in SGACL@ fman_sgacl_calloc |
| CSCwd29334 | Upgrade failures due to inability to establish netconf connection to upgrade-confirm |
| CSCwd45508 | Device does not form BFD across serial link when upgrading |
| CSCwd17579 | Device crashing with reason CPU usage due to memory pressure exceeds threshold(Reboot) |
| CSCwd34941 | NAT configuration with no-alias option is not preserved after reload |
| CSCwd12330 | Invalid TCP checksum in SYN flag packets passing through device |
Resolved and Open Bugs for Cisco IOS XE 17.9.1a
Resolved Bugs for Cisco IOS XE 17.9.1a
| Bug ID | Headline |
|---|---|
| CSCvz65764 | Peer MSS value showing incorrect |
| CSCwa95092 | When Object-group used in a ACL is updated, it takes no effect |
| CSCwb33968 | Device failed to display active flows when flow count is high on the device. |
| CSCwa98144 | No negotiation auto command changing to negotiation auto after reload |
| CSCwb02142 | Traceback: fman_fp_image core after clearing packet-trace conditions |
| CSCwb49857 | Memory leaks on keyman process when key is not found |
| CSCwa65728 | Large number of DH failures |
| CSCwb11389 | NAT translation stops suddenly(ip nat inside does not work) |
| CSCwa84919 | "Revocation-check crl none" does not failover to NONE DNAC-CA |
| CSCwb39098 | Router crashed after new IPv6 address assigned when router use specific configuration |
| CSCwa69101 | Initiator unclassified ip-address LQipv4 command has no effect |
| CSCwa67886 | UDP based DNS resolution doesn't work with IS-IS EMCP on IOS-XE |
| CSCvz84588 | Destination prefix packets getting dropped because forwarding plane is not programming the next hop. |
| CSCwb27486 | New key for NBAR app and NBAR category without OGREF optimized |
| CSCwa72273 | ZBFW drops return packets from Zscalar tunnel post upgrade. |
| CSCwa49101 | OMP origin protocol comparison cleanup |
| CSCwb17282 | Router crashing when clearing a VPDN session |
| CSCwa94158 | Device media type is not correct after removing an SFP |
| CSCwb21645 | NAT traffic gets dropped when default route changes from OMP to NAT DIA route |
| CSCwb12647 | Device crash for stuck threads in cpp on packet processing |
| CSCwb18223 | SNMP v2 community name encryption problem |
| CSCwb16723 | Traceroute not working on device with NAT |
| CSCwb31587 | Subject-alt-name attribute in certificate trustpoint causes Windows NDES/CA to reject SCEP requests |
| CSCwb51238 | Device reload unexpectedly two times when enter netflow show command |
| CSCwa98617 | Memory Leak in AEM chunks related to firewall. |
| CSCwa48512 | CoR intercepted DNS reply packets dropped with drop code 52 (FirewallL4Insp) if UTD enabled |
| CSCwa93664 | ThousandEyes container may fail to get installed on device |
| CSCvz28950 | DMVPN phase 2 connectivity issue between two spokes |
| CSCwa78348 | Traceback: IOS-XE reload after Segmentation fault on Process |
| CSCvz81664 | Enabling or Disabling OMP Overlay AS prevents connected routes from being advertised in OMP |
| CSCwa49721 | Device with firewall configured incorrectly dropping return packets when routing between VRFs |
| CSCwb43423 | IOS XE image installation fails |
| CSCwa08847 | ZBFW policy stops working after modifying the zone pair |
| CSCwb15331 | Keyman memory leak using public keys |
| CSCvw50622 | Nhrp network resolution not working with link-local ipv6 address. |
| CSCwb59736 | BFD tunnel are zero |
| CSCwa57873 | Incorrect reload reason - Last reload reason: Netconf Initiated request |
| CSCwb51595 | Missing IOS config (voice translation rule) on upgrade |
| CSCwb18315 | Umbrella DNS security policy doesn't work on device with SIG tunnels |
Open Bugs for Cisco IOS XE 17.9.1a
| Bug ID | Headline |
|---|---|
| CSCwc39012 | Crash saving tracelogs after Too many open files error |
| CSCwc56896 | crash in ipv6_tunnel_macaddr while adding/removing gre multi-point tunnel mode |
| CSCwc18977 | Crash with "IPE_CPE_U14_CSR32_IPE_CPE_ERR_CPE_MISC_LEAF_INT__INT_CPE_MALGN_ADDR_ERR " error |
| CSCwb89958 | Unified Policy HSL not sending properly NBAR application information. |
| CSCwc27208 | BFD sessions not coming up because of ANTI-REPLAY-FAILURES |
| CSCwb74821 | yang-management process confd is not running |
| CSCwc44851 | bootstrap failing on device |
| CSCwc55684 | Layer 7 health check doesn't work on Loopback interfaces |
| CSCwc52538 | Device flows are not distributed and load-balanced evenly and consistently |
| CSCwc55260 | Memory leak due to FTMd process |
| CSCwc69881 | Device lost configuration due to multiple power cycles on site |
| CSCwb55514 | Crash seen after enabling platform qos port-channel-aggregate |
| CSCwc20170 | Dvice reloads unexpectedly due to critical FTMd Fault when VRF Configuration is pushed |
| CSCwb88621 | Device unable to establish control connection due to out of order DTLS packets. |
| CSCwc37465 | Static NAT configuration in CLI with the no-alias keyword cannot be retrieved via NETCONF/YANG |
| CSCwc50477 | Device crashed in ipv4_nat_create_out2in_session_entry |
| CSCwc67465 | Device can not be upgraded |
| CSCwc19171 | High cpu on sip (mip100) due to mcpcc-lc-ms caused by link up/down interrupts |
| CSCwc26669 | TLB miss for lock address during FNF cache lookup |
| CSCwc32595 | BFD sessions remains down if interface flap form up/down/up |
| CSCvz91309 | Crash due to IOSXE-WATCHDOG due to management port traffic storm |
| CSCwc38529 | Traffic seems not inspected by UTD when umbrella is set |
| CSCwc63563 | Unable to set specific speed and duplex values on SFP ports on IOS-XE routing platforms |
| CSCwc39865 | Subscriber session getting stuck and needs clearing it manually |
| CSCwc53885 | IOS-XE no ip nat config is allowed to be committed and removes nat routes among other nat config |
| CSCwc55467 | BFD Tunnel on device is not staying up, 1 out of 40 tunnels |
| CSCwc42978 | Device looses all BFD sessions with Invalid SPI |
| CSCwc67171 | Tracebacks at cgm_avlmgr_class_init and cpuhog_key_init |
| CSCwb08057 | Number of lite sessions conversion in progress counter not decrementing on failed account-logon |
| CSCwc63337 | Destination not reachable if configured as a next for a static route resolvable via non /32 OMP |
| CSCwc29629 | Crashes when virtual-access tries to bring-up/bring-down OSPFv3 ipsec crypto session authentication |
| CSCwc23077 | Firewall drop seen stating FirewallL4 seen on device |
| CSCwc68132 | SIG tunnel tracker packets are dropped by firewall with self zone policy |
| CSCwb67406 | The IPSLA udp-jitter V3 (optimize timestamp+precision microseconds) does not work on device |
| CSCwc70511 | Device reloaded unexpectedly |
ROMmon Release Requirements
Use the following tables to determine the ROMmon version required for your Catalyst 8500 model:
| DRAM | Minimum ROMmon | Recommended ROMmon | |
|
C8500-12X4QC & C8500-12X |
16GB(default) |
17.2(1r) |
17.11(1r) |
|
32GB |
17.2(1r) |
17.11(1r) |
|
|
64GB |
17.3(2r) |
17.11(1r) |
|
| C8500-20X6C | All variants |
17.10(1r) |
17.10(1r) |
|
C8500L-8S4X |
- |
17.10(1r) - |
17.14(1r) |
Note |
In case of C8500L-8S4X platform, the ROMmon image is bundled with the Cisco IOS XE software image which ensures that when the device is booted up, the ROMmon image is also automatically upgraded to the recommended version. |
|
ROMmon Release for C8500-12X4QC, C8500-12X |
Fixes |
|---|---|
| 17.3(1r) | Supports 64GB DRAM for C8500-12X4QC & C8500-12X |
| 17.10 (1r) | Added support for new platform C8500-20X6C |
| 17.11(1r) | Fixed a issue in data wipe feature |
|
ROMmon Release for C8500L-8S4X |
Fixes |
|---|---|
| 17.14(1r) |
CSCwf98337 - Evaluation of C8500L-8S4X for Intel 2023.3 IPU and SMRAM vulnerabilities CSCwe21026 - Evaluation of C8500L-8S4X for Intel 2023.1 IPU and SMM vulnerabilities |
Related Documentation
Communications, Services, and Additional Information
-
To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.
-
To get the business results you’re looking for with the technologies that matter, visit Cisco Services.
-
To submit a service request, visit Cisco Support.
-
To discover and browse secure, validated enterprise-class apps, products, solutions and services, visit Cisco DevNet.
-
To obtain general networking, training, and certification titles, visit Cisco Press.
-
To find warranty information for a specific product or product family, access Cisco Warranty Finder.
Cisco Bug Search Tool
Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software.
Documentation Feedback
To provide feedback about Cisco technical documentation, use the feedback form available in the right pane of every online document.
Troubleshooting
For the most up-to-date, detailed troubleshooting information, see the Cisco TAC website at https://www.cisco.com/en/US/support/index.html.
Go to Products by Category and choose your product from the list, or enter the name of your product. Look under Troubleshoot and Alerts to find information for the issue that you are experiencing.
Feedback