Table of Contents

70311_nxos_rn.fm

Cisco Nexus 9000 Series NX-OS Release Notes, Release 7.0(3)I1(1)

This document describes the features, caveats, and limitations for Cisco NX-OS Release 7.0(3)I1(1) software for use on the Cisco Nexus 9000 Series switches and the Cisco Nexus 3164Q switch. Use this document in combination with documents listed in Related Documentation.

shows the online change history for this document.

Table 1 Online History Change

Date

Description

January 31, 2015

Created the release notes for Release 7.0(3)I1(1).

February 10, 2015

Removed old note referring to outdated breakout support.

February 19, 2015

- Added the Max L3 LPM routing mode feature description.

- Added NLB limitation in the “Limitations”.

- Added bug ID CSCuq03168 to “Open Caveats—Cisco NX-OS Release 7.0(3)I1(1)”

February 23, 2015

Added a new line to explain a Cisco ALE port limitation in the “Limitations” section.

February 24, 2015

Updated “VXLAN” with information about the DHCP relay feature.

February 26, 2015

- Updated “VXLAN” with information about configuring rendezvous points.

- Added CSCut11273 to “Open Caveats—Cisco NX-OS Release 7.0(3)I1(1)”.

March 17, 2015

Updated information about N9K-C9332PQ.

April 16, 2015

Removed Known Behavior section.

May 4, 2015

Added new limitations in “Limitations”.

January 11, 2016

Added link to ALE port limitations in “Limitations”.

Contents

This document includes the following sections:

- Introduction

- System Requirements

- New and Changed Information

- Installation Notes

- Upgrade Instructions

- Downgrade Instructions

- Software Maintenance Upgrades

- Limitations

- Unsupported Features

- Caveats

- Related Documentation

- Obtaining Documentation and Submitting a Service Request

Introduction

Cisco NX-OS software is a data center-class operating system designed for performance, resiliency, scalability, manageability, and programmability at its foundation. The Cisco NX-OS software provides a robust and comprehensive feature set that meets the requirements of virtualization and automation in mission-critical data center environments. The modular design of the Cisco NX-OS operating system makes zero-impact operations a reality and enables exceptional operational flexibility.

The Cisco Nexus 9000 Series uses an enhanced version of Cisco NX-OS software with a single binary image that supports every switch in the series, which simplifies image management.

System Requirements

This section includes the following topics:

- Supported Device Hardware

- Supported Optics

- Supported FEX Modules

Supported Device Hardware

lists the Cisco Nexus 9000 Series hardware that Cisco NX-OS Release 7.0(3)I1(1) supports.

Table 2 Cisco Nexus 9000 Series Hardware

Product ID

Hardware

Quantity

N9K-C9516

Cisco Nexus 9516 16-slot chassis

1

N9K-C9516-FM

Cisco Nexus 9500 Series fabric module

3-6 depending on the line card

N9K-C9516-FAN

Cisco Nexus 9516 fan trays

3

N9K-C9508

Cisco Nexus 9508 8-slot chassis

1

N9K-C9508-FM

Cisco Nexus 9508 Series fabric module

3-6 depending on the line card

N9K-C9508-FAN

Cisco Nexus 9508 fan trays

3

N9K-X9564PX

Cisco Nexus 9500 Series 48-port, 1-/10-Gbps SFP+ plus 4-port QSFP I/O module

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

- Up to 16 in the Cisco Nexus 9516

N9K-X9564TX

Cisco Nexus 9500 Series 48-port, 1-/10-Gbps BASE-T plus 4-port QSFP I/O module

- Up to 8 in the Cisco Nexus 9508

- Up to 4 in the Cisco Nexus 9504

- Up to 16 in the Cisco Nexus 9516

N9K-X9536PQ

Cisco Nexus 9500 36-port, 40 Gigabit Ethernet QSFP aggregation module

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

- Up to 16 in the Cisco Nexus 9516

N9K-X9636PQ1

Cisco Nexus 9500 Series 36-port 40-Gigabit QSFP I/O module

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

N9K-X9464PX

Cisco Nexus 9500 Series 48-port 10-Gigabit SFP+ plus 4-port QSFP I/O module

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

- Up to 16 in the Cisco Nexus 9516

N9K-X9464TX

Cisco Nexus 9500 Series 48-port 10-GBASE-T plus 4-port QSFP I/O module

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

- Up to 16 in the Cisco Nexus 9516

N9K-X9432PQ

Cisco Nexus 9500 Series 32-port 40-Gigabit QSFP I/O module

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

- Up to 16 in the Cisco Nexus 9516

N9K-SC-A

Cisco Nexus 9500 Series System Controller Module

2

N9K-SUP-A

Cisco Nexus 9500 Series supervisor module

2

N9K-SUP-B

Cisco Nexus 9500 Series supervisor B module

2

N9K-PAC-3000W-B

Cisco Nexus 9500 Series 3000 W AC power supply

- Up to 4 in the Cisco Nexus 9504

- Up to 8 in the Cisco Nexus 9508

- Up to 10 in the Cisco Nexus 9516

N9K-C9504

Cisco Nexus 9504 4-slot chassis

1

N9K-C9504-FM

Cisco Nexus 9504 fabric module

3 to 6 depending on line card

N9K-C9504-FAN

Cisco Nexus 9504 fan trays

3

N9K-C9396PX

Cisco Nexus 9300 48-port, 1/10-Gigabit Ethernet SFP+ and 12-port, 40-Gigabit Ethernet QSPF switch

1

N9K-C9396TX

Cisco Nexus 9300 48-port, 1/10-Gigabit Ethernet BASE-T and 12-port, 40-Gigabit Ethernet QSFP switch

1

N9K-C9372PX

Cisco Nexus 9300 48-port, 1/10-Gigabit Ethernet SFP+ and 6-port, 40-Gigabit Ethernet QSFP switch

1

N9K-C9372TX

Cisco Nexus 9300 48-port, 1/10-Gigabit Ethernet BASE-T and 6-port, 40-Gigabit Ethernet QSFP switch

1

N9K-C9332PQ

Cisco Nexus 9300 32-port, 40-Gigabit Ethernet QSFP switch

Note:

- Ports 1 to 26 (except 13 and 14) support 4x10G breakout mode.

- Ports 27 to 32 (ALE uplink ports) support using QSA for 10G SFP/SFP+ transceivers in QSFP+ ports

1

N9K-C93128TX

Cisco Nexus 9300 switch with 96 1-/10-Gigabit BASE-T ports and eight 40-Gigabit Ethernet QSPF ports (The 1-/10-Gigabit BASE-T ports also support a speed of 100 Megabits.)

1

N9K-PAC-650W2

Cisco Nexus 9300 650 W AC power supply, hot air out (red)

2 or less

Cisco Nexus 9300 650 W AC power supply, cold air in (blue)

2 or less

N9K-PAC-1200W3

Cisco Nexus 9300 1200 W AC power supply, hot air out (red)

2 or less

Cisco Nexus 9300 1200 W AC power supply, cold air in (blue)

2 or less

Cisco Nexus 9300 fan 1, hot air out (red)

3

Cisco Nexus 9300 fan 1, cold air in (blue)

3

Cisco Nexus 9300 fan 2, hot air out (red)

3

Cisco Nexus 9300 fan 2, cold air in (blue)

3

NXA-FAN-30CFM-F4

Cisco Nexus 9300 fan, port-side exhaust

4

Cisco Nexus 9300 fan, port-side intake

4

N9K-M12PQ5

Cisco Nexus GEM 9300 uplink module, 12-port, 40-Gigabit Ethernet QSPF

1 (required)

Cisco Nexus GEM 6-port 40-Gigabit Ethernet uplink module for the Cisco Nexus 9396PX, 9396TX, and 93128TX switches

1

1.Not supported on the Cisco Nexus 9516 switch (N9K-C9516).

1.Not supported on the Cisco Nexus 9516 switch (N9K-C9516).

2.For use with the Cisco Nexus 9396 switch (N9K-C9396PX).

2.For use with the Cisco Nexus 9396 switch (N9K-C9396PX).

3.For use with the Cisco Nexus 93128 switch (N9K-C93128TX).

3.For use with the Cisco Nexus 93128 switch (N9K-C93128TX).

4.For use with the Cisco Nexus 9332PQ, 9372PX, and 9372TX switches (N9K-C9332PQ, N9K-C9372PX, and N9K-9372TX).

4.For use with the Cisco Nexus 9332PQ, 9372PX, and 9372TX switches (N9K-C9332PQ, N9K-C9372PX, and N9K-9372TX).

5.The front-panel ports on these GEM modules do not support auto negotiation with copper cables. Manually configure the speed on the peer switch.

5.The front-panel ports on these GEM modules do not support auto negotiation with copper cables. Manually configure the speed on the peer switch.

For additional information about the supported hardware, see the Hardware Installation Guide for your Cisco Nexus 9000 Series device.

lists the Cisco Nexus 3164Q switch hardware that Cisco NX-OS Release 7.0(3)I1(1) supports.

Table 3 Cisco Nexus 3164Q Switch Hardware

Product ID

Hardware

Quantity

N3K-C3164Q-40GE

Cisco Nexus 3164Q switch

1

N9K-C9300-FAN3

Cisco Nexus 3164Q fan module

3

N9K-PAC-1200W

Cisco Nexus 3164Q 1200W AC power supply

2

.

Supported Optics

.

Table 4 Transceivers and Cables

Product ID

Transceivers and Cables

FET-10G

FET-10G Fabric Extender transceiver module for MMF, 850-nm wavelength, dual LC/PC connector, 100-m reach with laser-optimized OM3 or OM4 multimode fiber

Note This transceiver is supported only on fabric links from a Cisco Nexus 2000 to a Cisco parent switch.

QSFP-40G-SR4

40GBASE-SR4 QSFP transceiver module for MMF, 4-lanes, 850-nm wavelength, 12-fiber MPO/MTP connector

QSFP-40G-CSR4

40GBASE-CSR4 QSFP transceiver module for MMF, 4-lanes, 850-nm wavelength, 12-fiber MPO/MTP connector, 300-m reach with OM3 fiber

QSFP-40G-SR-BD

QSFP bidirectional transceiver module, duplex multimode fiber, LC duplex connector, 100-m reach with OM3 fiber

QSFP-40GE-LR4

40GBASE-LR4 QSFP 40G transceiver module for single mode fiber, 4 CWDM lanes in 1310-nm window muxed inside module, duplex LC connector, 10-km, 40G Ethernet rate only

QSFP-4x10G-AC7M

40GBASE-CR4 QSFP to four 10GBASE-CU SFP+ direct attach breakout cable assembly, 7 meter active

QSFP-4x10G-AC10M

40GBASE-CR4 QSFP to four 10GBASE-CU SFP+ direct attach breakout cable assembly, 10 meter active

QSFP-H40G-CU5M

40GBASE-CR4 QSFP direct-attach copper cable, 5 meter passive

QSFP-H40G-CU3M

40GBASE-CR4 QSFP direct-attach copper cable, 3 meter passive

QSFP-H40G-CU1M

40GBASE-CR4 QSFP direct-attach copper cable, 1 meter passive

QSFP-H40G-ACU7M

40GBASE-CR4 QSFP direct-attach copper cable, 7 meter active

QSFP-H40G-ACU10M

40GBASE-CR4 QSFP direct-attach copper cable, 10 meter active

SFP-10G-SR

10GBASE-SR SFP+ module

SFP-10G-LR

10GBASE-LR SFP+ module

SFP-H10GB-CU1M

10GBASE-CU SFP+ cable 1 meter

SFP-H10GB-CU3M

10GBASE-CU SFP+ cable 3 meter

SFP-H10GB-CU5M

10GBASE-CU SFP+ cable 5 meter

SFP-H10GB-ACU-7M

Active Twinax cable assembly, 7 meter

SFP-H10GB-ACU-10M

Active Twinax cable assembly, 10 meter

GLC-T

1000BASE-T SFP

GLC-SX-MM

GE SFP, LC connector SX transceiver

GLC-LH-SM

GE SFP, LC connector LX/LH transceiver

Supported FEX Modules

The following is a list of FEX modules the Cisco NX-OS Release 7.0(3)I1(1) supports with Cisco Nexus 9372PX and 9396PX switches:

- Cisco Nexus 2224TP

- Cisco Nexus 2232PP

- Cisco Nexus 2232TM and 2232TM-E

- Cisco Nexus 2248PQ

- Cisco Nexus 2248TP and 2248TP-E

- Cisco Nexus B22Dell

- Cisco Nexus B22HP

New and Changed Information

This section lists the new and changed features in Release 7.0(3)I1(1), and includes the following topics:

- New Hardware Features in Cisco NX-OS Release 7.0(3)I1(1)

- New Software Features in Cisco NX-OS Release 7.0(3)I1(1)

New Hardware Features in Cisco NX-OS Release 7.0(3)I1(1)

Cisco NX-OS Release 7.0(3)I1(1) supports the following new hardware features:

- DC power supply support - The Cisco Nexus 9300 Top-of-Rack switches and Cisco Nexus 9500 modular switches support DC power supplies in addition to AC power supplies. The Cisco Nexus 9300 switches support a 930W DC power supply which can be used in place of either the 650 AC power supply or the 1200W AC power supply. The Cisco Nexus 9500 switches support a 3000W DC power supply which can be used in place of a 3000W AC power supply. For both types of switches, you can populate the chassis with all AC power supplies, all DC power supplies, or a mix of AC and DC power supplies to provide the required output of power for the switch.

New Software Features in Cisco NX-OS Release 7.0(3)I1(1)

Cisco NX-OS Release 7.0(3)I1(1) includes the new software features described in these sections for the Cisco Nexus 9000 Series switches and the Cisco Nexus 3164Q switch:

- Interfaces Features

– 10G dynamic breakout support - A port can have 10G or 40G bandwidth. Ports that have a 40G or higher bandwidth are considered high bandwidth ports (HBP). The dynamic breakout feature enables you to split any HBP into multiple 10G ports (breakout ports).

Dynamic breakout is supported only on the following:

- X9636PQ, X9432PQ, and X9536PQ line cards on a Cisco Nexus 9500 Series switch

- Cisco Nexus 9332PQ switch (all ports except 13-14 and 27-32 can support breakout) and the Cisco Nexus 3164Q switch

– Symmetric hashing - Symmetric hashing on a port channel ensures that bidirectional traffic uses the same physical interface to effectively monitor traffic on the port channel.

– Tunnel statistics - Provides statistics for an IP tunnel interface. Please note the following caveats for this feature:

- Only IPv4 Unicast forwarding is supported

- No additional features (ACL/QOS/PBR) are supported on tunnel interface

- Tunnel is only supported in Default routing mode

- No PMTU support on tunnel interface

– IPv6 for BFD - Provides IPv6 support for Bidirectional Forwarding Detection (BFD) to enable BGPv6, EIGRPv6, OSPFv3, and IS-ISv6 protocols for BFD.

- Multicast Feature

.

- QoS Feature

– Egress QoS policy - Support for packet Marking and Policing in the egress direction. Interface policy-map statistics are enhanced to support output direction.

- Security Features

– DHCP snooping – Acts like a firewall between untrusted hosts and trusted DHCP servers. DHCP snooping can resolve some types of denial-of-service (DOS) attacks that can be engineered by DHCP messages.

– Dynamic ARP inspection (DAI) – Determines the validity of an ARP packet based on valid IP-to-MAC address bindings stored in a DHCP snooping binding database and ensures that only valid ARP requests and responses are relayed.

– IP source guard (IPSG) – A per-interface traffic filter that permits IP traffic only when the IP address and MAC address of each packet match one of two sources of IP and MAC address bindings: entries in the DHCP snooping binding table or static IP source entries that you configure.

.

- System Management Features

– 1588 timestamping in ERSPAN Type III packets – PTP’s timestamping feature provides timestamp information in the ERSPAN Type III header that can be used to calculate packet latency among edge, aggregate, and core switches.

– TAP aggregation – Allows the aggregation of multiple test access points (TAPs) to help with monitoring and troubleshooting tasks in the data center. Tap aggregation switches link all of the monitoring devices to specific points in the network fabric that handle the packets that need to be observed.

– Precision Time Protocol (PTP) – A time synchronization protocol defined in IEEE 1588 for nodes distributed across a network. It specifies how real-time clocks in the system synchronize with each other.

Note Only these devices support PTP: Cisco Nexus 9332PQ switch (the last 6 physical ports do not support PTP), Cisco Nexus 9396PX switch (all 40G physical ports do not support PTP), Cisco Nexus 9504 or 9508 switch with an X9636PQ line card, and Cisco Nexus 3164Q switch.

For additional information, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide.

- Unicast Features

– EIGRP NSF enhancement – Makes EIGRP wait for the convergence of redistributed protocols being tracked before installing its own routes in the Routing Information Base (RIB) during nonstop forwarding (NSF).

– IPv6 for BFD – Provides IPv6 support for Bidirectional Forwarding Detection (BFD) for the BGP, EIGRP, OSPFv3, and IS-IS Layer 3 routing protocols.

– Max L3 LPM routing mode – You can configure LPM mode 4 on Cisco Nexus 9300 Series switches in order to support significantly more LPM routes, specifically 128,000 IPv4 routes and 20,000 IPv6 routes.

– VRRPv3 – VRRP version 3 enables a group of switches to form a single virtual switch in order to provide redundancy and reduce the possibility of a single point of failure in a network.

.

- VXLAN Features

– VXLAN MIB/counters - VXLAN MIB - CISCO-NETWORK-VIRTUALIZATION-OVERLAY-MIB provides SNMP access to manage the configuration, status, and statistics information of the virtual network overlay feature.

– VXLAN bud node - Support for bud-node topology on Cisco 9300 VTEP devices.

Note A bud node is a device that is a VXLAN VTEP device, and at the same time, an IP transit device for the same VXLAN VNIs.

– VXLAN ingress replication - Provides support to replicate multi-destination packets (broadcast, unknown unicast, or multicast packets) to statically defined peers, uses VxLAN unicast, and eliminates the need of a multicast core.

– VXLAN eVPN - Supports a BGP ethernet VPN (EVPN) control plane.

– VXLAN anycast gateway with eVPN - Provides anycast gateway addressing and an overlay network to enable a distributed control plane.

– ARP suppression - Provides suppression of ARP packets, which prevents flooding of ARPs in the core.

Installation Notes

Upgrade Instructions

Downgrade Instructions

Disable the Guest Shell if you need to downgrade from Cisco NX-OS Release 7.0(3)I1(1) to an earlier release.

Software Maintenance Upgrades

Note If you perform a software maintenance upgrade (SMU) and later upgrade your device to a new Cisco NX-OS software release, the new image will overwrite both the previous Cisco NX-OS release and the SMU package file.

Limitations

This section lists limitations related to Cisco NX-OS Release 7.0(3)I1(1).

- Layer 3 routed traffic for missing Layer 2 adjacency information is not flooded back onto VLAN members of ingress units when the source MAC address of routed traffic is a non-VDC MAC address. This limitation is for hardware flood traffic and can occur when the SVI has a user-configured MAC address.

- The neighbor-down fib-accelerate command is supported in a BGP-only environment.

- The uplink module should not be removed from a Cisco Nexus 9300 Series switch that is running Cisco NX-OS Release 7.0(3)I1(1). The ports on the uplink module should be used only for uplinks.

- The PortLoopback and BootupPortLoopback tests are not supported.

- The ASIC Memory-NS test is applicable only for the N9K-X9564PX and N9K-X9564TX line cards.

- Priority flow control (PFC) is supported on Cisco Nexus 9500 Series switches with the N9K-X9636PQ line card. It is not yet supported on Cisco Nexus 9300 Series switches and Cisco Nexus 9500 Series switches with the N9K-X9564PX or N9K-X9564TX line card.

- If you configure the FEX with 100/full-duplex speed and you do not explicitly configure the neighboring device with 100/full-duplex speed, the data packet traffic does not pass properly even though the link appears to be “up.”

– no speed–Auto negotiates and advertises all speeds (only full duplex).

– speed 100–Does not auto negotiate; pause cannot be advertised. The peer must be set to not auto negotiate (only 100 Mbps full duplex is supported).

– speed 1000–Auto negotiates and advertises pause (advertises only for 1000 Mbps full duplex).

- Eight QoS groups are supported only on modular platforms with the following Cisco Nexus 9500 Series line cards:

– N9K-X9636PQ

– N9K-X9464PX

– N9K-X9464TX

– N9K-X9432PQ

- In a non-BGP eVPN environment, the SVI for L2/L3 boundary is expected to be on a non-VTEP routing block (a router attached to a VTEP).

- Cisco NX-OS Release 7.0(3)|1(1) does not support these features from the Cisco Release 6.1(2)|3(3):

– The source interface support for traceroute feature.

– The Cisco NX-OS to ACI conversion feature with the ability to boot the ACI image from Cisco NX-OS mode instead of from the loader> prompt.

– The port-channel subinterface feature is not supported.

- Cisco NX-OS Release 7.0(3)|1(1) supports flooding for Microsoft Network Load Balancing (NLB) unicast mode on Cisco Nexus 9500 Series switches but not on Cisco Nexus 9300 Series switches. NLB is not supported in max-host system routing mode. NLB multicast mode is not supported on Cisco Nexus 9500 or 9300 Series switches.

Note To work around the situation of Unicast NLB limitation, we can statically hard code the ARP and MAC address pointing to the correct interface. Please refer to bug ID CSCuq03168 in detail in the “Open Caveats—Cisco NX-OS Release 7.0(3)I1(1)” section.

- TCAM resources are not shared when:

– Routed ACL is applied to multiple SVIs (switched virtual interfaces) in the egress direction.

– Applying VACL (VLAN ACL) to multiple VLANs.

- Cisco Nexus 9000 Series hardware does not support range checks (layer 4 operators) in egress TCAM. Because of this, ACL/QoS policies with layer 4 operations-based classification need to be expanded to multiple entries in the egress TCAM. Egress TCAM space planning should take this limitation into account.

- Applying the same QoS policy and ACL on multiple interfaces requires applying the qos-policy with the no-stats option to share the label.

- Limitations for ALE uplink ports are listed at the following URL:

Unsupported Features

This section lists features that are not supported in the current release.

- VXLAN

- PVLANs

- DHCP

- FEX

VXLAN

This section lists VXLAN features that are not supported.

- VXLAN is not supported on Cisco N9500 series switches.

- Switched Port Analyzer (SPAN) Tx for VXLAN traffic is not supported for the access-to-network direction.

- QoS classification is not supported for VXLAN traffic in the network-to-access direction.

- The QoS buffer-boost feature is not applicable for VXLAN traffic.

- ACL and QoS for VXLAN traffic in the network-to-access direction is not supported.

- Native VLANs for VXLAN are not supported. All traffic on VXLAN Layer 2 trunks needs to be tagged.

- Consistency checkers are not supported for VXLAN tables.

- vPC type-1 consistency checkers are not supported for VXLAN configurations.

- BGP eVPN neighbors are not supported over VPC interfaces.

- We do not support VXLAN routing and VXLAN Bud Nodes features on the 3164Q platform.

- DHCP snooping and DAI features are not supported on VXLAN VLANs.

- IGMP snooping is not supported on VXLAN VLANs.

- DHCP relay is supported when the DHCP server is reachable only through the default VRF.

- Configuring an RP (rendezvous point) on a VTEP device is not supported. When configuring a multicast group, the RP should be configured on non-VTEP devices.

VXLAN Topology Restrictions

- FEX host interface ports are not supported for VLANs extended with VXLAN.

- SVI uplinks are not supported on a VTEP when VTEP is in a Bud-Node topology (transit and gateway roles).

VXLAN ACL Limitations

The following ACL related features are not supported:

- Ingress RACL that is applied on an uplink Layer 3 interface that matches on the inner or outer payload in the network-to-access direction (decapsulated path)

- Egress RACL that is applied on an uplink Layer 3 interface that matches on the inner or outer payload in the access-to-network direction (encapsulated path)

- Egress VACL for decapsulated VXLAN traffic

We recommend that you use a PACL or VACL on the access side to filter out traffic entering the overlay network.

PVLANs

Private VLANs (PVLANs) are not supported.

DHCP

DHCP subnet broadcast is not supported.

FEX

- FEX is supported only on the Cisco Nexus 9372PX and 9396PX switches. It is not supported on the other Cisco Nexus 9300 Series switches or the Cisco Nexus 9500 Series switches.

- ASCII replay with FEX needs be done twice for HIF configurations to be applied. The second time should be done after the FEXs have come up.

- IPSG is not supported on FEX ports.

Other Unsupported Features

The following lists other features not supported in the current release:

- Due to a Poodle vulnerability, SSLv3 is no longer supported.

- The Cisco Nexus 9300 Series switches and the Cisco Nexus 3164Q switch do not support the 64-bit ALPM routing mode.

- IPSG is not supported on the following:

– The last 6 40G physical ports on the 9372PX, 9372TX, and 9332PQ switches

– All 40G physical ports on the 9396PX, 9396TX, and 93128TX switches

Caveats

This section includes the following topics:

- Open Caveats—Cisco NX-OS Release 7.0(3)I1(1)

- Resolved Caveats—Cisco NX-OS Release 7.0(3)I1(1)

Open Caveats—Cisco NX-OS Release 7.0(3)I1(1)

lists the open caveats in the Cisco NX-OS Release 7.0(3)I1(1) release. Click the bug ID to access the Bug Search tool and see additional information about the bug.

Table 5 Open Caveats in Cisco NX-OS Release 7.0(3)I1(1)

Bug ID

Description

DHCP relay to a subnet broadcast address does not work.

CSCul18670

command shows the incorrect license if a valid license is installed over an honor license.

CSCun26726

HSRP packet decoding fails with an assertion error.

CSCun34856

All VLANs are suspended if one has a QoS policy but the TCAM is not configured.

CSCuo86036

Spurious error messages appear when a MCT port-channel member is shut.

CSCup32728

An ACL or source VLAN on a SPAN session affects traffic on other sessions.

CSCup35239

The Ethanalyzer does not see packets that egress on a virtual interface.

CSCup55774

No drop counters are displayed when a FEX HIF is congested.

CSCuq03168

Microsoft NLB traffic being routed into the destination VLAN is experiencing packet loss.

CSCuq36330

BFD neighbors are not supported on Cisco ALE port subinterfaces.

CSCuq68788

Traffic is not spanned if SPAN ACL and policy-based routing are enabled.

CSCur22618

command returns empty output when executed for FEX HIF interfaces.

CSCur30555

type queing does not show statistics for FEX HIF interfaces.

CSCur37816

When QoS Lite TCAM is configured, policer violated statistics shown as part of the show policy-map interface command are reported as 0 instead of NA (Not-Applicable).

CSCur46879

When copying the tunnel configuration file to running, the tunnel may flap before stabilizing.

CSCur59482

Policer action is not supported when QoS policy type qos is applied with no-stats keyword.

CSCur61647

command still reports FEX QoS incompatibility during downgrade from 3.2 to earlier versions of software.

CSCur63227

BGP prefixes can experience temporary traffic drop during supervisor switchover when BGP prefixes have the Nexthop learned over BGP (Recursive Nexthop) in the presence of a default route in the system.

CSCur68966

BFDv6 session keeps flapping "Reason: Control Detection Time Expired."

CSCur87839

Traffic cannot be routed using policy-based routing if the next-hop reachability is across the vPC peer link and the local vPC leg is down.

CSCus06693

ERPSAN sessions with destination on port-channel sub-interface is not supported.

CSCus07061

When a remote end of a vPC port channel member is shut down, the local end takes ~10 secs to shutdown. This only occurs when the port channel is 'active', i.e., has LACP enabled.

CSCus27641

Budnode is currently not supported when using SVI links.

CSCus29812

When the interface is in the STP block state, and DHCP snoop is configured on the VLANs of this interface, the DHCP packets coming from the VLANs cannot be blocked by STP.

CSCus41382

High CPU utilization for L2RIB on changing the source-interface with HIGH SCALE.

Workaround: shut the NVE and loopback interfaces, let routes be cleaned up, then unshut the interfaces.

CSCus47689

On a VPC peer switch, when uplinks to IP core are down, Broadcast, Unknown unicast, or Multicast (BUM) packets ingressing on the switch cannot be forwarded to remote ingress replication VTEPs.

CSCus58475

Vntag-mgr times out after changing VLANS for a range of 20 vPC port-channels.

CSCus60275

Some receivers see duplicate traffic when the peer_link_exclude_flag is set to FALSE for some groups (for some VLANS) that have a source on a VPC VLAN.

CSCus63613

When a user reloads the active supervisor, the standby supervisor also reloads. During the reload process, the Service Policy Manager (SPM) cannot send data to the standby supervisor. A syslog is observed, notifying the active supervisor that the SPM has not successfully updated its data base to the standby supervisor. The active supervisor reloads the standby supervisor again, and the standby supervisor eventually reaches a good standby state.

CSCus64140

VXLAN:BGP-EVPN sessions fail to come up after removing and re-adding “nv overlay evpn” configuration.

CSCus69937

When the overlay BGP has multiple BGP session with the same peer, there is a routing loop.

CSCut11273

The policy element and event manager automatically restart after 24 days.

Resolved Caveats—Cisco NX-OS Release 7.0(3)I1(1)

lists the resolved caveats in the Cisco NX-OS Release 7.0(3)I1(1) release. Click the bug ID to access the Bug Search tool and see additional information about the bug.

Table 6 Resolved Caveats in Cisco NX-OS Release 7.0(3)I1(1)

Bug ID

Description

CSCul96005

The syslog does not report why ports go into an error disabled state.

CSCum58876

The QA-tested scalability limit for multicast on the Nexus 9500 is 40 outgoing interfaces (OIFs) per multicast route (i.e. per (*,G) or (S,G) entry). When this is exceeded, unexpected behavior has been observed.

CSCum89074

Currently, the manufacture date in the "show hardware" command displays as Year xx Week xx, where the year is an offset value. Request is for this to be shown in a Year xxxx Week xx format.

CSCun74378

is an invalid command.

CSCup70194

A Nexus 9000 switch may not bring up OSPF neighbors with 3 OSPF process crashes after a system reload and subsequent supervisor swtichover.

CSCuq03078

command output does not show bitcount.

CSCuq14429

CLI port-channel load-balance src-dst ip/ip-gre/ip-l4port/ip-l4port-vlan/ip-vlan/l4port/mac fex all is not available on the Sapparo platform (TOR, N9K-C9372TX).

CSCuq95162

The FEX physical entity in the SNMP entity MIB is not fully supported.

CSCuq96586

FEX port auto negotiation status shows always 'off' although auto negotiation is turned on by default, and does work as expected. No functional impact.

CSCuq98668

The ip source interface icmp-errors command does not work for traceroute6.

CSCur09444

Entering sh run int vlan x shows the commands in a different order every time you enter it.

CSCur42587

For base-T ports, 1000-base-T, and 10G-base-T, auto-neg can not be turned off.

For base-X ports, auto-neg can be disabled, but we do not have a way to configure fixed speed leaves auto-neg on.

CSCur48215

Connecting a n9k-9564PX to a spectracom GM causes continuous link flaps.

CSCur60470

When experiencing a large amount of Unicast Route changes in vPC topology, the PIM process may skip a heartbeat and be restarted.

CSCur61812

The current Module Status Change trap does not contain module or slot information.

CSCur68618

Two different symptoms have been seen:

1) Traffic destined to VIP is looped on a backup/ listening/ standby switch.

2) VMAC is programmed in hardware as a gateway MAC on backup/ listening/ standby switch.

CSCur69668

Inband cannot interpret some 802.1p frames.

CSCur70425

When changing the native vlan on a trunk port, the peer device does not see the CDP neighbor anymore when configured as an L3 port.

CSCur72541

N9K-C9396PX with QSFP-40G-SR, seeing input errors, IntMacRx-Er incrementing on multiple 40G trunk interfaces on 9396 chassis running 6.1(2)I3(1).

CSCur97510

Implement show tech-support ns on NorthStar based platforms.

CSCus00304

The dynamically allocated shared memory for mrib does not grow past the default 3072 size.

CSCus04099

On Nexus 6000/7000/9000, SSH/telnet connection is refused.

CSCus15407

The show incompatibility nxos <image version lower than 3.3> command gives an incorrect message for cmd ip icmp-errors source-interface <intf> cmd.

CSCus23966

When the maximum IPv6 LPM routes is hit, the Percentage Utilization of IPv6 LPM Routes: displays 12.48% instead of 99% or 100% under the show hardware internal forwarding table utilization. Also, when the maximum IPv6 host routes is hit, the Percentage Utilization of IPv6 host routes shows as 55.71% instead of the correct 99% or 100%.

CSCus29415

The following Cisco products include a version of NTPd that is affected by the vulnerabilities identified by the Common Vulnerability and Exposures (CVE) IDs: CVE-2014-9293, CVE-2014-9294, CVE-2014-9295 and CVE-2014-9296

CSCus35280

Need a periodic chassis SPROM read test in GOLD to detect SPROM read failures during runtime.

CSCus69060

POAP through Inband interface from 6.1(1),6.1(2),6.1(3) releases to 7.(0)3 fails due to script execution timeout.

Related Documentation

The entire Cisco Nexus 9000 Series NX-OS documentation set is available at the following URL:

The Cisco Nexus 3164Q Switch - Read Me First is available at the following URL:

Configuration Guides

Cisco Nexus 9000 Series NX-OS Layer 2 Switching Configuration Guide

Cisco Nexus 9000 Series NX-OS Virtual Machine Tracker Configuration Guide

Cisco Nexus 9000 Series NX-OS VXLAN Configuration Guide

Other Software Documents

Cisco Nexus 9000 Series Software Upgrade and Downgrade Guide

Cisco Nexus 9000 Series NX-OS System Messages Reference

Hardware Documents

Release Notes

s

Documentation Feedback

To provide technical feedback on this document, or to report an error or omission, please send your comments to nexus9k-docfeedback@cisco.com. We appreciate your feedback.

Obtaining Documentation and Submitting a Service Request

, which also lists all new and revised Cisco technical documentation, at:

Open a service request online at:

as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/). This product includes software written by Tim Hudson (tjh@cryptsoft.com).

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco Nexus 9000 Series NX-OS Release Notes, Release 7.0(3)I1(1)

© 2013 - 2015 Cisco Systems, Inc. All rights reserved.