Table of Contents

Contents
Introduction
System Requirements

Memory Requirements
Hardware Supported
Determining the Version of Your Software Release
Upgrading to a New Software Release
Feature Set Tables

New and Changed Information

New Features in Release 11.3(5)T through Release 11.3(11)T
New Features in Release 11.3(4)T

IP Type of Service and Precedence for GRE Tunnels
PPP Over Frame Relay

New Features in Release 11.3(3)T

IBM SUPPORT:
RIF Passthru in DLSw+
MANAGEMENT:
VPDN MIB and Syslog Facility
SECURITY:
Named Method Lists for AAA Authorization & Accounting
Additional Vendor-Proprietary RADIUS Attributes
Automated Double Authentication
Certificate Authority Interoperability
Internet Key Exchange Security Protocol
IPSec Network Security
MS-CHAP Support
WAN SERVICES
Always On/Dynamic ISDN (AO/DI)
Microsoft Point-to-Point Compression (MMPC)
Multiple ISDN Switch Types
National ISDN Switch Types for Basic Rate and Primary Rate Interfaces

New Features in Release 11.3(2)T

IBM
Cisco Database Connection---Cisco 4500/4500-M/4700/4700-M only
INTERNET
DRP Server Agent Enhancements
MULTIMEDIA
PIM Version 2
WAN OPTIMIZATION
Enhanced ATM VC Configuration and Management---Cisco 4500/4500-M/4700/4700-M only
Frames-Per-Token Limit
WAN SERVICES
Dialer Watch
MS Callback

New Features in Release 11.3(1)T

SNMP Informs Requests
x Digital Subscriber Line Bridge Support

Important Notes

Image Deferral, Cisco IOS Release 11.3(8)T
Cisco IOS Release 11.3, 11.3 NA, and 11.3 T End of Sales and End of Engineering
Release 11.3(3a) Fixes Caveats CSCdk01707 and CSCdk08772
Enabling IPX Routing
Booting Cisco 4000 Routers
Using LAN Emulation (LANE)
Forwarding of Locally Sourced AppleTalk Packets
Using Source-Route Transparent Bridging (SRT) and Source-Route Bridging (SRB) on Cisco 2500 and Cisco 4000 Routers
Missing Source-Route Bridging Commands
New TACACS+ Attribute-Value (AV) Pair

Caveats
Related Documentation

Release-Specific Documents
Platform-Specific Documents
Feature Modules
Cisco IOS Software Documentation

Documentation Modules and Indexes
Release 11.3 Documentation Set

Service and Support

Software Configuration Tips on the Cisco Technical Assistance Center Home Page

Cisco Connection Online
Documentation CD-ROM

Release Notes for the Cisco 4000 Series for Cisco IOS Release 11.3 T

August 2, 1999

These release notes for the Cisco 4000 series support Cisco IOS Release 11.3 T, up to and including Release 11.3(11)T, which is based on Cisco IOS Release 11.3. These release notes are updated as needed to describe new features, memory requirements, hardware support, software platform deferrals, changes to the microcode or modem code changes, and related documents.

For a list of software caveats that apply to Release 11.3(11)T, see the Caveats for Cisco IOS Release  11.3 T that accompanies these release notes. The caveats document is updated for every maintenance release and is located on Cisco Connection Online (CCO) and the Documentation CD-ROM. For more information about software caveats, see the "Caveats" section later in this document.

Use these release notes with the cross platform Release Notes for Cisco IOS Release 11.3  on CCO and the Documentation CD-ROM.

Contents

These release notes describe the following topics:

• Introduction

• System Requirements

• New and Changed Information

• Important Notes

• Caveats

• Related Documentation

• Service and Support

• Cisco Connection Online

• Documentation CD-ROM

Introduction

The Cisco 4000 series routers offer Flash Memory EPROM technology as a standard feature. Flash Memory EPROMs enable you to distribute new software releases from a central location. After the software is distributed, the routers can reboot from programs stored in local Flash memory.

All models provide a configurable modular router platform by using network processor modules (NPMs)---individual removable cards used for external network connections. Because the router's modules support many variations of protocols, line speeds, and transmission media, the Cisco 4000 series can accommodate all types of network computing environments. As Cisco introduces new modules, the Cisco 4000 series can be upgraded to keep pace with technological advances.

System Requirements

• Memory Requirements

• Hardware Supported

• Determining the Version of Your Software Release

• Upgrading to a New Software Release

• Feature Set Tables

Memory Requirements

Table 1: Memory Requirements for the Cisco 4000 Series

Platform/Feature Set	Image Name	Required Flash Memory	Required DRAM Memory	Runs from
Cisco 4000, Cisco 4000-M
IP	c4000-i-mz	4 MB Flash	161 MB DRAM	RAM
IP Plus	c4000-is-mz	4 MB Flash	16 MB DRAM	RAM
IP Plus 40	c4000-is40-mz	82 MB Flash	16 MB DRAM	RAM
IP Plus IPSec 56	c4000-is56i-mz	82 MB Flash	16 MB DRAM	RAM
IP/IPX/AT/DEC	c4000-d-mz	4 MB Flash	161 MB DRAM	RAM
IP/IPX/AT/DEC Plus	c4000-ds-mz	4 MB Flash	16 MB DRAM	RAM
Enterprise Plus	c4000-js-mz	8 MB Flash	16 MB DRAM	RAM
Enterprise Plus IPSec 56	c4000-js56i-mz	8 MB Flash	16 MB DRAM	RAM
Enterprise/APPN Plus3	c4000-ajs-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise/APPN Plus IPSec 56	c4000-ajs56i-mz	8 MB Flash	32 MB DRAM	RAM
Cisco 4500, 4500-M, Cisco 4700, Cisco 4700-M4
IP	c4500-i-mz	4 MB Flash	165 MB DRAM	RAM
IP Plus	c4500-is-mz	82 MB Flash	165 MB DRAM	RAM
IP Plus 40	c4500-is40-mz	82 MB Flash	165 MB DRAM	RAM
IP Plus IPSec 56	c4500-is56i-mz	82 MB Flash	32 MB DRAM	RAM
IP/IPX/AT/DEC	c4500-d-mz	4 MB Flash	165 MB DRAM	RAM
IP/IPX/AT/DEC Plus	c4500-ds-mz	8 MB Flash	165 MB DRAM	RAM
Enterprise Plus	c4500-js-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise Plus IPSec 56	c4500-js56i-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise/APPN Plus	c4500-ajs-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise/APPN Plus IPSec 56	c4500-ajs56i-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise/APPN/DBConn	c4500-aejs-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise/APPN/DBConn 40	c4500-aejs40-mz	8 MB Flash	32 MB DRAM	RAM
Enterprise/APPN/DBConn/IPSec 56	c4500-aejs56i-mz	8 MB Flash	32 MB DRAM	RAM

18 MB for Cisco IOS Release 11.3(3)T, and 4 MB for Cisco IOS Release 11.3(1)T and 11.3(2)T. 24 MB for Cisco IOS Release 11.3(1)T and 11.3(2)T. 3This image is not supported by the Cisco 4000 router in Cisco IOS Release 11.3(1)T. 4The following images are available in Release 11.3(9)T on the Cisco 4700-M platform: c4500-aejs-mz, c4500-aejs40-mz, c4500-ajs40-mz, c4500-aejs56i-mz, and c4500-js40-mz 532 MB for Cisco IOS Releases 11.3(1)T to 11.3(6)T.

Hardware Supported

Cisco IOS Release 11.3 T supports the Cisco 4000 series routers:

• Cisco 4000, Cisco 4000-M

• Cisco 4500, Cisco 4500-M

• Cisco 4700, Cisco 4700-M

Table 2: Supported Interfaces on the Cisco 4000 Series

Interface, Network Module, or Data Rate	Platforms Supported
LAN Interfaces
ATM Interface	All Cisco 4000 series platforms
Ethernet (10BaseT)	All Cisco 4000 series platforms
Ethernet (AUI)	All Cisco 4000 series platforms
Fast Ethernet (100BaseFX)	All Cisco 4000 series platforms
Fast Ethernet (100BaseTX)	All Cisco 4000 series platforms
FDDI DAS	All Cisco 4000 series platforms
FDDI multimode (DAS/SAS)	All Cisco 4000 series platforms
FDDI SAS	All Cisco 4000 series platforms
FDDI single-mode	All Cisco 4000 series platforms
16-Mbps Token Ring	All Cisco 4000 series platforms
4-Mbps Token Ring	All Cisco 4000 series platforms
WAN Data Rates
48/56/64 kbps	All Cisco 4000 series platforms
1.544/2.048 Mbps	All Cisco 4000 series platforms
WAN Interfaces and Network Modules
56K/64K DSU/CSU	All Cisco 4000 series platforms
Channelized E1	All Cisco 4000 series platforms
Channelized T1	All Cisco 4000 series platforms
E1-G.703/G.704	All Cisco 4000 series platforms
EIA/TIA-232	All Cisco 4000 series platforms
EIA/TIA-449	All Cisco 4000 series platforms
EIA/TIA-613 (HSSI)	All Cisco 4000 series platforms
EIA-530	All Cisco 4000 series platforms
ISDN BRI	All Cisco 4000 series platforms
ISDN PRI	All Cisco 4000 series platforms
MultiChannel Interface (Channelized E1/T1)	All Cisco 4000 series platforms
Serial	All Cisco 4000 series platforms
V.35	All Cisco 4000 series platforms
X.21	All Cisco 4000 series platforms

Determining the Version of Your Software Release

To determine the version of Cisco IOS software currently running on your device, log in to the router and use the show version EXEC command:

router>show version
Cisco Internetwork Operating System Software 
IOS (tm) 4000 Software (C4000-JS-MZ), Version 11.3(11)T, RELEASE SOFTWARE
 

Upgrading to a New Software Release

For information on upgrading to a new software release, see Cisco IOS Software Release 11.3 Upgrade Paths and Packaging Simplification prod uct bulletin on CCO at:

Service & Support: Product Bulletins: Software

Under Cisco IOS 11.3, click Cisco IOS Software Release 11.3 Upgrade Paths (#703: 12/97).

The Cisco IOS Software Release 11.3 Upgrade Paths and Packaging Simplification product bulletin does not include information specific to Cisco IOS Release 11.3 T, but provides general upgrade information that may apply to Cisco IOS Release 11.3 T.

Feature Set Tables

Cisco IOS software is packaged in feature sets consisting of software images---depending on the platform. Each feature set contains a specific set of Cisco IOS features.

Table 3: Feature Sets Supported by the Cisco 4000 Series

Feature Set		Feature Set Matrix Term	Software Image	Platforms
IP Standard Feature Sets	IP	Basic1	c4000-i-mz	Cisco 4000, Cisco 4000-M
			c4500-i-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	IP Plus	Plus2	c4000-is-mz	Cisco 4000, Cisco 4000-M
			c4500-is-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	IP Plus 40	Plus, Plus 403	c4000-is40-mz	Cisco 4000, Cisco 4000-M
			c4500-is40-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	IP Plus IPSec 56	Plus, Plus IPSec 564	c4000-is56i-mz	Cisco 4000, Cisco 4000-M
			c4500-is56i-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
Desktop IBM Standard Feature Sets	Desktop IBM (IP/IPX/AppleTalk/DEC)	Basic	c4000-d-mz	Cisco 4000, Cisco 4000-M
			c4500-d-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	Desktop IBM Plus (IP/IPX/AppleTalk/DEC Plus)	Plus	c4000-ds-mz	Cisco 4000, Cisco 4000-M
			c4500-ds-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
Enterprise Standard Feature Sets	Enterprise Plus	Plus	c4000-js-mz	Cisco 4000, Cisco 4000-M
			c4500-js-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	Enterprise Plus IPSec 56	Plus, IPSec 56	c4000-js56i-mz	Cisco 4000, Cisco 4000-M
			c4500-js56i-m	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
Enterprise/APPN Standard Feature Set	Enterprise/APPN Plus	Plus	c4000-ajs-mz	Cisco 4000, Cisco 4000-M
			c4500-ajs-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	Enterprise/APPN Plus IPSec 56	Plus, IPSec 56	c4000-ajs56-mz	Cisco 4000, Cisco 4000-M
			c4500-ajs56-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	Enterprise/APPN/ DBConn/Plus	Plus, DBConn	c4000-aejs-mz	Cisco 4000, Cisco 4000-M
			c4500-aejs-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	Enterprise/APPN Plus 40/DBConn	DBConn 40	c4500-aejs40-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M
	Enterprise/APPN/ IPSec 56/DBConn	DBConn, IPSec 56	c4500-aejs56i-mz	Cisco 4500, Cisco 4500-M Cisco 4700, Cisco 4700-M

1This feature set matrix term is offered in the Basic feature set. 2This feature set matrix term is offered in the Plus feature set 3This feature set matrix term is offered in the encryption feature sets which consist of 40-bit (Plus 40) data encryption feature sets. 4This feature set matrix term is offered in the encryption feature sets which consist of 56-bit (Plus 56) data encryption feature sets.

Caution Cisco IOS images with strong encryption (including, but not limited to 168-bit (3DES) data encryption feature sets) are subject to United States government export controls and have limited distribution. Strong encryption images to be installed outside the United States are likely to require an export license. Customer orders may be denied or subject to delay due to United States government regulations. When applicable, you must obtain local import and use authorizations for all encryption strengths. Please contact your sales representative or distributor for more information, or send an e-mail to export@cisco.com.

Table 4 and Table 5 list the features and feature sets supported in Cisco IOS Release 11.3 T by the Cisco 4000/4000-M and Cisco 4500/4500-M/4700/4700-M routers, respectively. Table 4 and Table 5 use the following conventions to identify features:

• Yes---The feature is supported in the feature set.

• No---The feature is not supported in the feature set.

• In---The Cisco IOS release that first introduces a feature. For example, (2) means a feature was introduced in 11.3(2)T. If a cell is empty in this column, the feature was included in the initial base release.

Table 4: Feature List by Feature Set for the Cisco 4000 and Cisco 4000-M Routers

Feature	In	Feature Set
		IP	IP Plus	IP Plus 401	IP Plus IP- Sec 561	IP/ IPX/ AT/ DEC	IP/ IPX/AT/ DEC Plus	Enter-prise Plus	Enter-prise Plus IPSec 561	Enter-prise APPN Plus	Enter-prise/ APPN Plus IPSec 561	Enter-prise/ APPN/ DB Conn
IBM Support
APPN High Performance Routing		No	No	No	No	No	No	No	No	Yes	Yes	Yes
APPN MIB Enhancements		No	No	No	No	No	No	No	No	Yes	Yes	Yes
APPN over Ethernet LAN Emulation		No	No	No	No	No	No	No	No	Yes	Yes	Yes
APPN Scalability Enhancements		No	No	No	No	No	No	No	No	Yes	Yes	Yes
Bisync Enhancements, includes: Bisync 3780 Support BSC Extended Addressing Block Serial Tunneling (BSTUN) over Frame Relay		No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
Cisco Database Connection	(2)	No	No	No	No	No	No	No	No	No	No	No
Cisco MultiPath Channel (CMPC)		No	No	No	No	No	No	No	No	No	No	No
Database Connection Feature		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
DLSw+ Enhancements: Backup Peer Extensions for Encapsulation Types DLSw+ Border Peer Caching DLSw+ MIB Enhancements DLSw+ SNA Type of Service LLC2-to-SDLC Conversion between PU4 Devices NetBIOS Dial-on-Demand Routing UDP Unicast Enhancement		No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
FRAS Enhancements: FRAS Boundary Network Node Enhancement FRAS Dial Backup over DLSw+ FRAS DLCI Backup FRAS Host FRAS MIB SRB over Frame Relay		No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
RIF Passthru in DLSw+	(3)	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
SRB over FDDI on Cisco 4000, 4500, and 4700 series Routers		No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
TN3270 LU Nailing		No	No	No	No	No	No	No	No	No	No	No
TN3270 Server Enhancements		No	No	No	No	No	No	No	No	No	No	No
Token Ring LANE		No	No	No	No	No	No	No	No	No	No	No
Tunneling of Asynchronous Security Protocols		No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
Internet
DRP Server Agent		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
DRP Server Agent Enhancements	(2)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IP Routing
Easy IP (Phase 1)		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Hot Standby Router Protocol (HSRP) over ISL in Virtual LAN Configurations		No	No	No	No	No	No	No	No	No	No	No
IP Enhanced IGRP Route Authentication		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IP Type of Service and Precedence for GRE Tunnels (CSCdj88415)	(4)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No
TCP Enhancements: TCP Selective Acknow- ledgment TCP Timestamp		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
LAN Support
AppleTalk Access List Enhancements		No	No	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes
DECnet Accounting		No	No	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IPX Named Access Lists		No	No	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IPX SAP-after-RIP		No	No	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes
NLSP Enhancements		No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
NLSP Multicast Support		No	No	No	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Management
Cisco Call History MIB Command Line Interface		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Cisco IOS Internationaliz- ation		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Entity MIB, Phase 1		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
SNMPv2C		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Virtual Profiles		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
VPDN MIB and Syslog Facility	(3)	No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	No
Multimedia
IP Multicast Load Splitting across Equal-Cost Paths		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IP Multicast over ATM Point-to- Multipoint Virtual Circuits		No	No	No	No	No	No	No	No	No	No	No
IP Multicast over Token Ring LANs		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
PIM Version 2	(2)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Stub IP Multicast Routing		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Quality of Service
RTP Header Compression		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Security
Named Method Lists for AAA Authorization & Accounting	(3)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No
Additional Vendor- Proprietary RADIUS Attributes	(3)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Automated Double Authentication	(3)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No
Certificate Authority Interoperability	(3)	No	No	No	Yes	No	No	No	Yes	No	Yes	No
Double Authentication		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Encrypted Kerberized Telnet		No	No	No	No	No	No	No	Yes	No	Yes	No
HTTP Security		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Internet Key Exchange Security Protocol	(3)	No	No	No	Yes	No	No	No	Yes	No	Yes	No
IPSec Network Security		No	No	No	Yes	No	No	No	Yes	No	Yes	No
MS-CHAP Support	(3)	No	No	No	No	No	No	Yes	Yes	Yes	Yes	No
Per-User Configuration		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Reflexive Access Lists		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
TCP Intercept		No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
Vendor-Proprietary RADIUS Attributes		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Switching
AppleTalk Routing over ISL and IEEE 802.10 in Virtual LANs		No	No	No	No	No	No	No	No	No	No	No
CLNS and DECnet Fast Switching over PPP		No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
DECnet/VINES/ XNS over ISL: Banyan VINES Routing over ISL Virtual LANs DECnet Routing over ISL Virtual LANs XNS Routing over ISL Virtual LANs		No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
Fast-Switched Policy Routing		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IPX Routing over ISL Virtual LANs		No	No	No	No	No	No	No	No	No	No	No
VIP Distributed Switching Support for IP Encapsulated in ISL		No	No	No	No	No	No	No	No	No	No	No
Terminal Services
Virtual Templates for Protocol Translation		No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
WAN Optimization
ATM MIB Enhancements		No	No	No	No	No	No	No	No	No	No	No
Enhanced ATM VC Configuration, Management	(2)	No	No	No	No	No	No	No	No	No	No	No
Frame-Per-Token Limit	(2)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
PAD Enhancements		No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
PAD Subaddressing		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
WAN Services
Always On/Dynamic ISDN (AO/DI)	(3)	No	No	No	No	No	No	Yes	Yes	Yes	Yes	No
Bandwidth Allocation Control Protocol		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Dialer Watch	(2)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Enhanced Local Management Interface (ELMI)		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Frame Relay Enhancements		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Frame Relay MIB Extensions		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Frame Relay Router ForeSight		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
ISDN Advice of Charge		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
ISDN Caller ID Callback		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
ISDN NFAS		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Layer 2 Forwarding, Fast Switching		No	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes
Leased Line ISDN at 128 kbps		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Microsoft Point-to-Point Compression (MPPC)	(3)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No
MS Callback	(2)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Multiple ISDN Switch Types	(3)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No
National ISDN Switch Types for BRI/PRI Interfaces (NID)	(3)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
PPP over ATM		No	No	No	No	No	No	No	No	No	No	No
PPP over Frame Relay	(4)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Telnet Extensions for Dialout		No	No	No	No	No	No	No	No	No	No	No
X.25 Enhancements		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
X.25 on ISDN		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
X.25 Switching between PVCs and SVCs		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
X.28 Emulation		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes

1This image is available in Cisco IOS Release 11.3(3)T and later releases. It is not available in Cisco IOS Release 11.3(1)T or 11.3(2)T.

New and Changed Information

The following sections list the new features supported by the Cisco 4000 series in Cisco IOS Release 11.3 T. For more information about the features, see the "Related Documentation" section.

New Features in Release 11.3(5)T through Release 11.3(11)T

There were no new features supported by the Cisco 4000 series in Cisco IOS Release 11.3(5)T or later 11.3 T releases.

New Features in Release 11.3(4)T

The following new features are supported by the Cisco 4000 series in Cisco IOS Release 11.3(4)T and later releases.

IP Type of Service and Precedence for GRE Tunnels

Prior to this feature, at generic route encapsulation-based tunnel endpoints, the Type of Service (TOS) bits (including precedence bits) were not copied to the tunnel or GRE IP header that encapsulates the inner packet. Instead, those bits were set to zero. This was not a problem unless the intermediate routers between two tunnel endpoints honored TOS or precedence bits, in which case those settings were ignored.

With the advent of virtual private network (VPN) and QoS (Quality of Service) applications, it is desirable to copy the TOS bits when the router encapsulates the packets using GRE. Thus, intermediate routers between tunnel endpoints can take advantage of the QoS features such as weighted fair queuing (WFQ) and weighted random early detection (WRED).

PPP Over Frame Relay

PPP Over Frame Relay allows a router to establish end-to-end Point-to-Point (PPP) sessions over Frame Relay. IP datagrams are transported over the PPP link using RFC 1973 compliant Frame Relay framing. This feature is useful for remote users running PPP to reach their Frame Relay corporate networks.

New Features in Release 11.3(3)T

The following new features are supported by the Cisco 4000 series in Cisco IOS Release 11.3(3)T and later releases.

IBM SUPPORT:

RIF Passthru in DLSw+

By default, DLSw+ terminates the RIF for Token Ring, terminates the LLC for all media types and forwards only data across a WAN with DLSw+ and TCP/IP headers. The RIF is a field in source-route bridged frames that indicates the SRB path the frame should take when traversing a Token Ring network. In the case of an explorer packet, the RIF is a field of the source-route bridged frame that indicates the SRB path that the SRB explorer has traversed so far. The RIF is limited to seven hop counts by the IBM standards. Because DLSw+ terminates the RIF at the virtual ring, the network's scalability increases because the hop count of the packet starts over, and the packet can traverse seven additional hops. Also, RIF termination simplifies network design because ring numbers no longer have to be unique throughout an entire enterprise.

MANAGEMENT:

VPDN MIB and Syslog Facility

The Virtual Private Dialup Network (VPDN) Management Information Base (MIB) feature is intended to support all the tables and objects defined in "Cisco VPDN Management MIB" for the user sessions of the VPDN features. There are a number of commands that provide information and statistics through the Command Line Interface (CLI), but not Simple Network Management Protocol (SNMP); the Cisco VPDN MIB has been created to satisfy the need to provide information and statistics through SNMP.

SECURITY:

Named Method Lists for AAA Authorization & Accounting

In earlier Cisco IOS releases, only named-authentication method lists were supported under Cisco's Authentication, Authorization, and Accounting (AAA) network security services. With Cisco IOS Release 11.3(3)T, AAA has been extended to support both authorization and accounting named-method lists.

Named-method lists for authorization and accounting function the same way as those for authentication; they allow you to define different methods for authorization and accounting and apply those methods on a per-interface or per-line basis.

Additional Vendor-Proprietary RADIUS Attributes

Remote Authentication Dial-In User Server (RADIUS) is an access server authentication, authorization, and accounting protocol originally developed by Livingston, Inc. Although an Internet Engineering Task Force (IETF) draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the network access server and the RADIUS server, some vendors have extended the RADIUS attribute set in a unique way. In this release, Cisco IOS software introduces support for additional vendor-proprietary RADIUS attributes.

Automated Double Authentication

The automated double authentication feature enhances the existing double authentication feature.

Previously, with the existing double authentication feature, a second level of user authentication is achieved when the user Telnets to the network access server or router and enters a username and password. Now, with automated double authentication, the user does not have to Telnet anywhere but instead responds to a dialog box that requests a username and password or PIN.

(For information about the existing double authentication feature, refer to the "Configuring Authentication" chapter of the Cisco IOS Release 11.3 Security Configuration Guide.)

Certificate Authority Interoperability

Certificate Authority (CA) interoperability is provided in support of the IP Security (IPSec) standard. CA interoperability permits Cisco IOS devices and CA devices to communicate so that your Cisco IOS device can obtain and use digital certificates from the CA. Although IPSec can be implemented in your network without the use of a CA, using a CA provides manageability and scalability for IPSec.

For background and configuration information for IPSec, see the "IPSec Network Security"  feature documentation.

Internet Key Exchange Security Protocol

ISAKMP/Oakley is a key management protocol used with the IPSec standard. IPSec is an IP security feature that provides robust authentication and encryption of IP packets.

IPSec can be configured without ISAKMP/Oakley, but ISAKMP/Oakley enhances IPSec by providing additional features, flexibility, and ease of configuration for the IPSec standard.

ISAKMP/Oakley is a hybrid protocol which implements the Oakley key exchange inside the ISAKMP framework.

IPSec Network Security

IPSec is a framework of open standards developed by the Internet Engineering Task Force (IETF).

IPSec provides security for transmission of sensitive information over unprotected networks such as the Internet. IPSec acts at the network layer, protecting and authenticating IP packets between participating IPSec devices ("peers") such as Cisco routers.

IPSec provides the following network security services:

• Privacy---IPSec can encrypt packets before transmitting them across a network.

• Integrity---IPSec authenticates packets at the destination peer to ensure that the data has not been altered during transmission.

• Authentication---Peers authenticate the source of all IPSec-protected packets.

• Anti-replay protection---Prevents capture and replay of packets; helps protect against denial-of-service attacks.

With IPSec, data can be transmitted across a public network without fear of observation, modification, or spoofing. This enables applications such as virtual private networks (VPNs), extranets, and remote user access.

IPSec services are similar to those provided by Cisco Encryption Technology, a proprietary security solution introduced in Cisco IOS Software Release 11.2. (The IPSec standard was not yet available at Release 11.2.) However, IPSec provides a more robust security solution, and is standards-based.

MS-CHAP Support

Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) is the Microsoft version of CHAP and is an extension to RFC 1994. Like the standard version of CHAP, MS-CHAP is used for PPP authentication; in this case, authentication occurs between a PC using Microsoft Windows NT or Microsoft Windows 95 and a Cisco router or access server acting as a network access server (NAS).

MS-CHAP differs from the standard CHAP as follows:

• MS-CHAP is enabled by negotiating CHAP Algorithm 0x80 in LCP option 3, Authentication Protocol.

• The MS-CHAP Response packet is in a format designed to be compatible with Microsoft Windows NT 3.5 and 3.51, Microsoft Windows 95, and Microsoft LAN Manager 2.x. This format does not require the authenticator to store a clear or reversibly-encrypted password.

• MS-CHAP provides an authenticator-controlled authentication retry mechanism.

• MS-CHAP provides an authenticator-controlled change password mechanism.

• MS-CHAP defines a set a "reason-for failure" codes returned in the Failure packet message field.

Depending on the security protocols you have implemented, PPP authentication using MS-CHAP can be used with or without Authentication, Authorization and Accounting (AAA) security services. If you have enabled AAA, PPP authentication using MS-CHAP can be used with both TACACS+ and RADIUS. Two new vendor-specific RADIUS attributes (IETF Attribute 26) were added to enable RADIUS to support MS-CHAP.  

For a complete list of supported IETF and vendor-proprietary RADIUS attributes, refer to the "RADIUS Attributes" appendix in the Cisco IOS Release 11.3 Security Configuration Guide.

WAN SERVICES

Always On/Dynamic ISDN (AO/DI)

Always On/Dynamic ISDN (AO/DI) is an on-demand service that optimizes the use of an existing Integrated Services Digital Network (ISDN) signaling channel (D channel) to transport X.25 traffic. The X.25 D channel call is placed from the subscriber to the packet data service provider. Multilink and TCP/IP protocols are encapsulated within the X.25 logical circuit carried by the D channel. The bearer channels (B channels) use the Multilink protocol without the standard Q.922 and X.25 encapsulations, and invoke additional bandwidth as needed. AODI takes full advantage of existing packet handlers at the central office by using an existing D channel to transport the X.25 traffic. The link associated with the X.25 D channel packet connection is used as the primary link of the Multilink protocol. The D channel is a connectionless, packet oriented link between the Customer Premise Equipment (CPE) and the central office. Since the D channel is always available, it is possible to in turn offer "always available" services. On-demand functionality is achieved by using the B channels to temporarily boost data throughput and are disconnected after use.

Microsoft Point-to-Point Compression (MMPC)

Microsoft Point-to-Point Compression (MPPC) is a scheme used to compress Point-to-Point Protocol (PPP) packets between Cisco and Microsoft client devices. The MPPC algorithm is designed to optimize processor and bandwidth utilization in order to support multiple simultaneous connections. The MPPC algorithm uses a Lempel-Ziv (LZ) based algorithm with a continuous history buffer, called a dictionary.

Multiple ISDN Switch Types

The Multiple ISDN Switch Types feature allows you to configure more than one ISDN switch type per router. You can apply an ISDN switch type on a per interface basis, thus extending the existing global isdn switch-type command to the interface level. This allows Basic Rate Interfaces (BRI) and Primary Rate Interfaces (PRI) to run simultaneously on platforms that support both interface types.

National ISDN Switch Types for Basic Rate and Primary Rate Interfaces

National ISDN Switch Types for Basic Rate and Primary Rate Interfaces introduces changes to ISDN switch types for Primary Rate Interfaces (PRI) and Basic Rate Interfaces (BRI) as follows:

• Adds a new switch type for PRI interfaces (isdn switch-type primary-ni).

• Changes the BRI basic-ni1 switch type to basic-ni (isdn switch-type basic-ni).

• Removes the ISDN vn2 switch type (isdn switch-type vn2) used in France. The existing vn3 switch type (isdn switch-type vn3) supports French vn2 switches.

• Removes the ISDN basic-nwnet3 switch type (isdn switch-type basic-nwnet3) used in Norway. The basic-net3 switch type (isdn switch-type basic-net3) supports Norway NET3 switches.

• Removes the ISDN basic-nznet3 switch type (isdn switch-type basic-nznet3) used by New Zealand NET3 switches. The ISDN basic-net3 switch type (isdn switch-type basic-net3) supports New Zealand NET3 switches.

• Adds the ability to configure outgoing PRI B channel selection for the T1 controller in ascending order (channel 1 to channel 23) or descending order (channel 23 to channel 1). Previously, the router selected a B channel for outgoing calls from the highest free channel in descending order. The E1 controller channel selection for ascending order is channel 1 to 31, and 31 to 1 for descending order.

New Features in Release 11.3(2)T

The following new features are supported by the Cisco 4000 series in Cisco IOS Release 11.3(2)T and later releases.

IBM

Cisco Database Connection---Cisco 4500/4500-M/4700/4700-M only

The Cisco Database Connection feature enables Cisco routers to implement IBM's distributed relational database architecture (DRDA) level 3 over TCP/IP. The Cisco router with Database Connection exists in the TCP/IP network, and clients use the Database Connection IP address and port on the router to connect to the IBM host system that exists in the SNA network.

When Database Connection is configured on a router, client-based Open Database Connectivity (ODBC) applications can connect to IBM's family of IBM D2 relational databases, which include:

• DB2 for OS/390 (MVS)

• DB2 for Virtual Machine (VM)

• DB2 for Virtual Storage Extended (VSE) (SQL/DS)

• DB2 for OS/400

• DB2 Universal Server (AIX, HP-UX, UNIX, Solaris, Windows NT, Windows 95, OS/2, SCO OpenServer)

The router with Database Connection converts DRDA packets over TCP/IP to DRDA packets over APPC (LU 6.2) and then routes them to DB2 databases. Database Connection runs as a TCP/IP daemon on the router, accepting DRDA client connections over TCP/IP. When a client connects to the database on an IBM mainframe host, Database Connection allocates an APPC conversation over SNA to an IBM server, and acts as a gateway between DRDA over TCP/IP and DRDA over APPC.

INTERNET

DRP Server Agent Enhancements

The DRP Server Agent enhancements are as follows:

• DistributedDirector can use BGP Multi-Exit Discriminators in traffic redirection decisions.

• The DRP Server can measure client-to-server link latency (round-trip time) for use in traffic redirection decisions.

MULTIMEDIA

PIM Version 2

Protocol-Independent Multicast (PIM) Version 2 includes the following improvements over PIM Version 1:

• A single, active rendezvous point (RP) exists per multicast group, with multiple backup RPs. This compares to multiple active RPs for the same group in PIM Version 1.

• A bootstrap router (BSR) provides a fault-tolerant, automated RP discovery and distribution mechanism. Thus, routers dynamically learn the group-to-RP mappings.

• Sparse mode and dense mode are properties of a group, as opposed to an interface. We strongly recommend sparse-dense mode, as opposed to either sparse mode or dense mode only.

• PIM Join and Prune messages have more flexible encoding for multiple address families.

• A more flexible Hello packet format replaces the Query packet to encode current and future capability options.

• Register messages to an RP indicate whether they were sent by a border router or a designated router.

• PIM packets are no longer inside IGMP packets; they are standalone packets.

WAN OPTIMIZATION

Enhanced ATM VC Configuration and Management---Cisco 4500/4500-M/4700/4700-M only

The Enhanced ATM VC Configuration and Management feature set includes new and enhanced capabilities that allow you to create and manage ATM PVCs and SVCs with more ease and improved integrity. This feature set includes the following five subfeatures:

• New VC Configuration---Allows you to create ATM permanent virtual circuits (PVCs), switched virtual circuits (SVCs), static maps, and associated virtual circuit (VC) parameters more easily and with fewer errors using new ATM commands in new VC command modes.

• VC Integrity Management---Allows you to manage your ATM PVCs and SVCs so that your router receives immediate notification of when these VCs go down in your network. Upon notification, protocols can reroute packets and prevent unpredictable and relatively long timeout periods.

• PVC Discovery---Allows you to enable your router to automatically assign (or discover) PVCs on an ATM interface or subinterface using information from an attached adjacent switch.

• Multiprotocol Inverse ARP---Allows you to enable a dynamic protocol mapping between an ATM PVC and a network address by configuring Inverse Address Resolution Protocol (Inverse ARP) on ATM PVCs running IP or IPX.

• Rate Queue Tolerance---Allows you to configure a range of peak rates on a single rate queue, thereby improving ATM rate queue usage.

Frames-Per-Token Limit

This feature allows the interface to transmit multiple frames per token, instead of only a single frame at a time. Users can specify the maximum number of frames to be transmitted with each token capture by using the fddi frames per token command. In certain network configurations this can improve throughput.

WAN SERVICES

Dialer Watch

Dialer Watch is a backup feature that integrates dial backup with routing capabilities. Prior dial backup implementations used the following conditions to trigger backup:

• Interesting packets were defined at central and remote routers using Dial on Demand routing (DDR).

• Connection loss occurred on a primary interface using a back up interface with floating static routes.

• Traffic thresholds were exceeded using a dialer load threshold.

Prior backup implementations may not have supplied optimum performance on some networks, such as those using Frame Relay multipoint subinterfaces or Frame Relay connections that do not support end-to-end LMI.

Dialer Watch provides reliable connectivity without relying solely on defining interesting traffic to trigger outgoing calls at the central router. Dialer Watch uses the convergence times and characteristics of dynamic routing protocols. Integrating backup and routing features enables Dialer Watch to monitor every deleted route. By configuring a set of watched routes that define the primary interface, you are able to monitor and track the status of the primary interface as watched routes are added and deleted. Monitoring the watched routes is done in the following sequence:

1. Whenever a watched route is deleted, Dialer Watch checks to see if there is at least one valid route for any of the watched IP addresses defined.

2. If there is no valid route, the primary line is considered down and unusable.

3. If there is a valid route for at least one of the defined watched IP addresses, and if the route is pointing to an interface other than the backup interface configured for Dialer Watch, the primary link is considered up.

4. In the event that the primary link goes down, Dialer Watch is immediately notified by the routing protocol and the secondary link is brought up.

5. After the secondary link is up, at the expiration of each idle timeout, the primary link is rechecked.

6. If the primary link remains down, the idle timer is indefinitely reset.

7. If the primary link is up, the secondary backup link is disconnected. Additionally, a disable timer can be set to create a delay for the secondary link to disconnect, after the primary link is reestablished.

MS Callback

The MS Callback feature provides client-server callback services for Microsoft Windows 95 and Microsoft Windows NT clients. MS Callback supports the Microsoft Callback Control Protocol (MSCB). MSCB is Microsoft's proprietary protocol that is used by Windows 95 and Windows NT clients. MS Callback supports negotiated PPP Link Control Protocol (LCP) extensions initiated and agreed upon by the Microsoft client. MS Callback is added to existing PPP Callback functionality. Therefore, if you configure your Cisco access server to perform PPP Callback using Cisco IOS Release 11.3(2)T or later, MS Callback is automatically available.

New Features in Release 11.3(1)T

The following new features are supported by the Cisco 4000 series in Cisco IOS Release 11.3(1)T and later releases.

SNMP Informs Requests

This feature allows routers to send inform requests to SNMP managers. Routers can send notifications to SNMP managers when particular events occur. For example, an agent router may send a message to a manager when the agent router experiences an error condition.

SNMP notifications can be sent as traps or inform requests. Traps are unreliable because the receiver does not send any acknowledgment when it receives a trap. The sender cannot determine if the trap was received. However, an SNMP manager that receives an inform request acknowledges the message with an SNMP response PDU. If the manager does not receive an inform request, it does not send a response. If the sender never receives a response, the inform request can be sent again.

Thus, informs are more likely to reach their intended destination. Because they are more reliable, informs consume more resources in the router and network. Unlike a trap, which is discarded as soon as it is sent, an inform request must be held in memory until a response is received or the request times out.

Also, traps are sent only once, while an inform request may be retried several times. The retries increase traffic and contribute to a higher overhead on the network. Thus, traps and inform requests provide a trade-off between reliability and resources. If it is important that the SNMP manager receives every notification, use inform requests. On the other hand, if you are concerned about traffic on your network or memory in the router, and you do not need to receive every notification, use traps.

x Digital Subscriber Line Bridge Support

This feature enables you to configure a router for intelligent bridge flooding for x digital subscriber line and other bridge applications.

Important Notes

Image Deferral, Cisco IOS Release 11.3(8)T

Cisco IOS Release 11.3(8)T was deferred to Release 11.3(8)T1 on all software images to incorporate corrections to the following caveats:

• CSCdk86294---The D channel is always in the shutdown state when non-facility associated signalling is configured.

• CSCdk80809---Enhanced Interior Gateway Routing Protocol (EIGRP) has difficulty converging on certain routes.

For more information on these caveats, refer to Bug Navigator II, which is available at http://www.cisco.com/support/bugtools. On CCO, click this path:

Service & Support: Online Technical Support: Software Bug Toolkit: Bug Navigator II

Cisco IOS Release 11.3, 11.3 NA, and 11.3 T End of Sales and End of Engineering

End of Engineering (EOE) means there are no more regularly scheduled maintenance releases. The following maintenance release scheduled on the EOE date are only available through CCO and Field Service Operations---not through manufacturing:

• Cisco IOS Releases 11.3, 11.3 NA, and 11.3 T are scheduled to reach End of Sales (EOS) status with maintenance Releases 11.3(10), 11.3(10)NA, and 11.3(10)T.

• Releases 11.3, 11.3 NA, and 11.3 T are scheduled to reach EOE with Releases 11.3(11), 11.3(11)NA, and 11.3(11)T.

EOS and EOE releases are subject to change. For the most up-to-date information on the status of EOS or EOE, see End of Sales and End of Engineering for Cisco IOS Software Releases  product bulletin on CCO.

Ongoing support for functionality in Releases 11.3, 11.3 NA, and 11.3 T is available in Cisco IOS Release 12.0(3)T and later maintenance releases of Cisco IOS Release 12.0 on CCO at:

Service & Support: Product Bulletins: Software

Under Cisco IOS 11.3, click on End of Sales and End of Engineering for Cisco IOS Software Releases 11.3 and 11.3 T (#847: 12/98) or Cisco IOS Software 11.3 NA EOS and EOE (#849:12/98)

Release 11.3(3a) Fixes Caveats CSCdk01707 and CSCdk08772

The Cisco 7500 RSP2 and RSP4 products in Cisco IOS Releases 11.3(1) through 11.3(3) were deferred due to a severe defect. It was determined that this caveat was significant enough to merit a software rebuild. The rebuild includes the caveat fix and is renumbered to 11.3(3a).

The defect is bug CSCdk01707 and is described as follows:

• When the system gets an Error interrupt, a 4-byte IOS data area will get accidentally overwritten. Because of this, the system may reload with a "Bus Error Exception" message. The error interrupt may be caused by events like an HSA Slave state transition on HSA systems, fatal system errors (like a parity error), or non-fatal errors (like a QAERROR with Null/reuse link error).

Software Releases affected: This caveat affects all systems configured with dual RSPs (HSA feature). All "v" images for the following Cisco IOS Releases have been deferred: 11.1(18.1)CA through 11.1(18.2)CA, 11.1(16.3)CC through 11.1(17.4)CC, 11.1(17)CT, 11.2(12.3)P through 11.2(13.4)P, 11.3(1) through 11.3(3), and 11.3(1)T through 11.3(3)T.

Solution: To eliminate the problems mentioned, we strongly recommend that you download and install one of the following Cisco IOS software release updates: 11.1(18)CA, 11.1(18)CC, 11.1(18)CT, 11.2(14)P, 11.3(3a) and 11.3(3a)T.

[CSCdk01707]

CSCdk08772 is a duplicate of CSCdk01707 and is described as follows:

• Dual RSPs in a High System Availability (HSA) configuration in a Cisco 7500 router will crash and reload in cycles during bootup when using the RSP-DSV Desktop/Plus/VIP image for versions later than 11.2(12a)P. [CSCdk08772]

CSCdk01707 was caused by CSCdj36366, which is described as follows:

• On RSP-based platforms, the message which reports a write bus error may report an incorrect value for the address of the bad access. [CSCdj36366]

Release 11.3(3a) and all subsequent releases of Cisco IOS Release 11.3 software include the fix for this caveat.

Enabling IPX Routing

The Token Ring interface is reset whenever IPX routing is enabled on that interface.

Booting Cisco 4000 Routers

You must use the Cisco Release 9.14 rxboot image for Cisco 4000 routers because the Release 11.0 rxboot image is too large to fit in the ROMs. (Note that rxboot image size is not a problem for Cisco 4500 routers.)

However, because the Release 9.14 rxboot image does not recognize new network processor modules, such as the Multiport Basic Rate Interface (MBRI), its use causes two problems:

• You cannot boot from a network server over BRI lines. Instead, you can only boot from a network server over other media or use the copy tftp flash command to copy images over BRI or other media to Flash memory. If you use the copy tftp flash command over a BRI interface, you must be running the full system image.

• If you use the rxboot image on a Cisco 4000 router that is already configured, the following error messages are displayed, with one pair of messages for each BRI interface configured:

Bad interface specification
No interface specified - IP address
Bad interface specification
No interface specified - IP address

Using LAN Emulation (LANE)

Note the following information regarding the LAN Emulation (LANE) feature in Cisco IOS Release 11.3:

• LANE is available for use with Cisco 4500, 4700, 7000, and 7500 series routers connected to either an LS100 or LS1010 switch. LANE requires at least version 3.1(2) of the LS100 software, which requires a CPU upgrade if you are currently running software prior to version 2.5.

• The LS2020 cannot be used for LANE because it does not support UNI 3.0 and point-to-multipoint SVCs.

• Routing of IP, IPX, AppleTalk, DECnet, VINES, and XNS is supported.

• HSRP is supported.

• LANE does not support CLNS or LANE over PVCs.

• AppleTalk Phase 1 cannot be routed to AppleTalk Phase 2 via LANE.

Forwarding of Locally Sourced AppleTalk Packets

Cisco's implementation of AppleTalk does not forward packets with local-source and destination network addresses. This behavior does not conform to the definition of AppleTalk in Apple Computer's Inside AppleTalk publication. However, this behavior is designed to prevent any possible corruption of the AppleTalk Address Resolution Protocol (AARP) table in any AppleTalk node that is performing MAC-address gleaning.

Using Source-Route Transparent Bridging (SRT) and Source-Route Bridging (SRB) on Cisco 2500 and Cisco 4000 Routers

Certain products containing the Texas Instruments TMS380C26 Token Ring controller do not support source-route transparent bridging (SRT). SRT is the concurrent operation of SRB and transparent bridging on the same interface. The affected products, shipped between March 30, 1994, and January 16, 1995, are the Cisco 4000 NP-1R, Cisco 4000 NP-2R, Cisco 2502, Cisco 2504, Cisco 2510, Cisco 2512, Cisco 2513, and Cisco 2515.

Units shipped before March 30, 1994, or after January 16, 1995, are not affected. They use the Texas Instruments TMS380C16 Token Ring controller, which supports SRT.

SRT support is necessary in two situations:

• Token Ring networks are configured to SRB protocols such as SNA and NetBIOS, and they transparently bridge other protocols, such as IPX.

• SNA or NetBIOS uses SRB, and Windows NT is configured to use NetBIOS over IP. Certain other configuration alternatives do not require SRT. (Contact the Technical Assistance Center for more information.)

As of Cisco IOS Release 10.3(1), SRB in the following Cisco IOS feature sets is no longer supported: IP, IP/IPX, and Desktop. To use SRB, you need one of the following feature sets: IP/IBM base, IP/IPX/IBM base, IP/IPX/IBM/APPN, Desktop/IBM base, Enterprise, or Enterprise/APPN. In most non-IBM Token Ring environments, the multiring feature in IP, IP/IPX, and Desktop eliminates the need for IP/IBM base, IP/IPX/IBM base, IP/IPX/IBM/APPN, Desktop/IBM base, Enterprise, or Enterprise/APPN.

Missing Source-Route Bridging Commands

Due to a production problem, many source-route bridging commands were omitted from the printed version of the Cisco IOS Software Command Summary (78-4746-01). For complete documentation of all source-route bridging commands refer to the Bridging and IBM Networking Command Reference (78-4743-01). You can also obtain the most current documentation on Cisco Connection Online (CCO) or on the Documentation CD-ROM.

New TACACS+ Attribute-Value (AV) Pair

A new authorization feature was added in Cisco IOS Release 11.3(1) that allows for separate configuration and authorization of Multilink PPP. This can cause MLP authorization to fail in TACACS+ servers that do not include the relevant authorization permissions in the configuration.

For TACACS+, the following attribute-value (AV) pair should be added for all users who are allowed to negotiate Multilink PPP:

service = ppp protocol = multilink {

Caveats

Caveats describe unexpected behavior or defects in Cisco IOS software releases. Severity 1 caveats are the most serious caveats; severity 2 caveats are less serious.

For information on caveats in Cisco IOS Release 11.3 T, see Caveats for Cisco IOS Release 11.3 T   on CCO and the Documentation CD-ROM.

All caveats in Release 11.3 are also in Release 11.3 T.

For information on caveats in Cisco IOS Release 11.3, see the "Important Notes and Caveats for Release 11.3"  section in the Cross-Platform Release Notes for Cisco IOS Release 11.3  on CCO and the Documentation CD-ROM. These release notes list severity 1 and 2 caveats affecting all maintenance releases.

Related Documentation

The following sections describe the documentation available for the Cisco 4000 series routers. These documents consist of hardware and software installation guides, Cisco IOS configuration and command references, system error messages, feature modules, and other documents.

Documentation is available as printed manuals or electronic documents, except for feature modules, which are only available online.

Use these release notes with these documents:

• Release-Specific Documents

• Platform-Specific Documents

• Feature Modules

• Cisco IOS Software Documentation

Release-Specific Documents

The following documents are specific to Release 11.3 and are located on CCO and the Documentation CD-ROM:

• Release Notes for Cisco IOS Release 11.3

On CCO:

Service & Support: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Release Notes for Cisco IOS Release 11.3

On the Documentation CD-ROM:

Cisco IOS Software Configuration: Cisco IOS Release 11.3: Release Notes for Cisco IOS Release 11.3

• Product bulletins, field notices, and other release-specific documents on CCO:

Service & Support: Technical Documents

• Caveats document

On CCO:

Service & Support: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Product Specific Release Notes for Cisco IOS Release 11.3: Caveats for Cisco IOS Release 11.3 T

On the Documentation CD-ROM:

Cisco IOS Software Configuration: Cisco IOS Release 11.3: Product Specific Release Notes for Cisco IOS Release 11.3: Caveats for Cisco IOS Release 11.3 T

Platform-Specific Documents

The documents listed below are available for the Cisco 4000 series routers. These documents are also available online on CCO and on the Documentation CD-ROM.

• Cisco 4000 Hardware Installation and Maintenance

• Cisco 4000 Series Installation Guide

• Cisco 4000 Series Configuration Notes

• Cisco 4000 Series Regulatory Compliance and Safety Information

• Redundant Power Systems

• Network Processor Two-Port Ethernet Full-Duplex (NP-2E-FDX)

• FDDI Frames-Per-Token Limit for the Cisco 4000 Series

• Platform-specific release notes

On CCO:

Service & Support: Documentation Home Page: Access Servers and Access Routers: Modular Access Routers: Cisco 4000 Series Routers

On the Documentation CD-ROM:

Access Servers and Access Routers: Modular Access Routers: Cisco 4000 Series Routers

Feature Modules

Feature modules describe new features supported by Release 11.3 T and are updates to the Cisco IOS documentation set. A feature module consists of a brief overview of the feature, benefits, configuration tasks, and a command reference. As updates, the feature modules are available online only. Feature module information is incorporated in the next printing of the Cisco IOS documentation set.

On CCO:

Service & Support: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Cisco IOS 11.3T New Features

On the Documentation CD-ROM:

Cisco Product Documentation: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Cisco IOS 11.3T New Features

Cisco IOS Software Documentation

The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and several other supporting documents which are shipped with your order in electronic form on the Documentation CD-ROM---unless you specifically ordered the printed versions.

Documentation Modules and Indexes

Each module in the Cisco IOS documentation set consists of two books: a configuration guide and a corresponding command reference. Chapters in a configuration guide describe protocols, configuration tasks, and Cisco IOS software functionality and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Each configuration guide can be used with its corresponding command reference.

On CCO and the Documentation CD-ROM, two master hot-linked indexes provide indexing information for the Cisco IOS software documentation set.

On CCO:

Service & Support: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Cisco IOS 11.3 Configuration Guides, Command References: Configuration Guide Master Index or Command Reference Master Index

On the Documentation CD-ROM:

Cisco IOS Software Configuration: Cisco IOS Release 11.3: Cisco IOS 11.3 Configuration Guides, Command References: Configuration Guide Master Index or Command Reference Master Index

To reach documentation related to an index entry, click on the page number following the entry.

Release 11.3 Documentation Set

Table 5 details the contents of the Cisco IOS Release 11.3 software documentation set. The document set is available in electronic form, and also in printed form upon request.

On CCO:

Service & Support: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 11.3

On the Documentation CD-ROM:

Cisco IOS Software Configuration: Cisco IOS Release 11.3

Table 6: Cisco IOS Software Release 11.3 Documentation Set

Books	Chapter Topics
Configuration Fundamentals Configuration Guide Configuration Fundamentals Command Reference	Configuration Fundamentals Overview Cisco IOS User Interfaces File Management Interface Configuration System Management
Network Protocols Configuration Guide, Part 1 Network Protocols Command Reference, Part 1	IP Addressing IP Services IP Routing Protocols
Network Protocols Configuration Guide, Part 2 Network Protocols Command Reference, Part 2	AppleTalk Novell IPX
Network Protocols Configuration Guide, Part 3 Network Protocols Command Reference, Part 3	Apollo Domain Banyan VINES DECnet ISO CLNS XNS
Wide-Area Networking Configuration Guide Wide-Area Networking Command Reference	Wide-Area Networking Overview ATM Frame Relay SMDS X.25 and LAPB
Security Configuration Guide Security Command Reference	AAA Security Services Security Server Protocols Traffic Filtering Network Data Encryption Passwords and Privileges Neighbor Router Authentication IP Security Options
Dial Solutions Configuration Guide Dial Solutions Command Reference	Business Applications and Scenarios Dial-In Port Setup Dial-In Terminal Services and Remote Note Configuration Dial Authentication Dial-on-Demand Routing (DDR) Dial Backup Dial-Out Modem Pooling Large-Scale Dial Solutions Dial-Related Addressing Services (NAT/Easy IP) Cost-Control Solutions Network Traffic over ISDN Channels X.25 over ISDN Virtual Private Dialup Networks
Cisco IOS Switching Services Configuration Guide Cisco IOS Switching Services Command Reference	Switching Paths for IP Networks NetFlow Switching Virtual LAN (VLAN) Routing LAN Emulation
Bridging and IBM Networking Configuration Guide Bridging and IBM Networking Command Reference	Transparent Bridging Source-Route Bridging Remote Source-Route Bridging DLSw+ STUN and BSTUN LLC2 and SDLC IBM Network Media Translation DSPU and SNA Service Point Support SNA Frame Relay Access Support APPN NCIA Client/Server Topologies IBM Channel Attach
Configuration Guide Master Index Command Reference Master Index

Service and Support

For service and support for a product purchased from a reseller, contact the reseller, who offers a wide variety of Cisco service and support programs described in "Service and Support" of Cisco Information Packet shipped with your product.

For service and support for a product purchased directly from Cisco, use CCO.

Software Configuration Tips on the Cisco Technical Assistance Center Home Page

If you have a CCO login account, you can access the following URL, which contains links and tips on configuring your Cisco products:

http://www.cisco.com/kobayashi/serv_tips.shtml

This URL is subject to change without notice. If it changes, point your Web browser to CCO  and click on this path: Products & Technologies: Products: Technical Tips.

The following sections are provided from the Technical Tips page:

• Access Dial Cookbook---Contains common configurations or recipes for configuring various access routes and dial technologies.

• Field Notices---Notifies you of any critical issues regarding Cisco products and includes problem descriptions, safety or security issues, and hardware defects.

• Frequently Asked Questions---Describes the most frequently asked technical questions about Cisco hardware and software.

• Hardware---Provides technical tips related to specific hardware platforms.

• Hot Tips---Describes popular tips and hints gathered from the Cisco Technical Assistance Center (TAC). Most of these documents are available from the TAC Fax-on-demand service. To reach Fax-on-demand and receive documents at your fax machine from the United States, call 888-50-CISCO (888-502-4726). From other areas, call 650-596-4408.

• Internetworking Features---Lists tips on using and deploying Cisco IOS software features and services.

• Sample Configurations---Provides actual configuration examples that are complete with topology and annotations.

• Software Products---Contains Cisco IOS Software Bulletins, Cisco TCP/IP Suite 100, General Cisco IOS, Internet/Intranet Applications and Software, Network Management, Network Protection Software Tips, and WAN Switching Products and Software.

• Special Collections---Lists other helpful documents, including Case Studies, References & Request for Comments (RFCs), and Security Advisories.

Cisco Connection Online

Cisco Connection Online (CCO) is Cisco Systems' primary, real-time support channel. Maintenance customers and partners can self-register on CCO to obtain additional information and services.

Available 24 hours a day, 7 days a week, CCO provides a wealth of standard and value-added services to the Cisco customers and business partners. CCO services include product information, product documentation, software updates, release notes, technical tips, the Bug Navigator, configuration notes, brochures, descriptions of service offerings, and download access to public and authorized files.

CCO serves a wide variety of users through two interfaces that are updated and enhanced simultaneously: a character-based version and a multimedia version that resides on the World Wide Web (WWW). The character-based CCO supports Zmodem, Kermit, Xmodem, FTP, and Internet e-mail, and it is excellent for quick access to information over lower bandwidths. The WWW version of CCO provides richly formatted documents with photographs, figures, graphics, and video, as well as hyperlinks to related information.

You can reach CCO in the following ways:

• WWW:  http://www.cisco.com

• WWW:  http://www-europe.cisco.com

• WWW:  http://www-china.cisco.com

• Telnet:  cco.cisco.com

• Modem:  From North America, 408 526-8070; from Europe, 33 1 64 46 40 82. Use the following terminal settings: VT100 emulation; databits: 8; parity: none; stop bits: 1; and connection rates up to 28.8 kbps.

For a copy of CCO's Frequently Asked Questions (FAQ), contact cco-help@cisco.com. For additional information, contact cco-team@cisco.com.

Documentation CD-ROM

Cisco documentation and additional literature are available in a CD-ROM package, which ships with your product. The Documentation CD-ROM, a member of the Cisco Connection Family, is updated monthly. Therefore, it may be more current than printed documentation. To order additional copies of the Documentation CD-ROM, contact your local sales representative or call customer service. The CD-ROM package is available as a single package or as an annual subscription. You can also reach Cisco documentation on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com.

If you are reading Cisco product documentation on the World Wide Web, you can submit comments electronically. Click Feedback in the toolbar, select Documentation, and click Enter the feedback form. After you complete the form, click Submit to send it to Cisco. We appreciate your comments.

Posted: Fri Jul 30 18:59:36 PDT 1999
Copyright 1989-1999©Cisco Systems Inc.