|
|
July 26, 1999
These release notes for Cisco AS5100 and Cisco AS5200 universal access servers support Cisco IOS Release 11.3 T, up to and including Release 11.3(11)T. These release notes are updated as needed to describe new features, memory requirements, hardware support, software platform deferrals, and changes to the microcode or modem code and related documents.
For a list of the software caveats that apply to Release 11.3(11)T, see the Caveats for Cisco IOS Release 11.3 T document that accompanies these release notes. The caveats document is updated for every maintenance release and is located on Cisco Connection Online (CCO) and the Documentation CD-ROM.
Use these release notes with Cross-Platform Release Notes for Cisco IOS Release 11.3 on CCO and the Documentation CD-ROM.
These release notes describe the following topics:
The Cisco AS5100 and Cisco AS5200 universal access servers are supported in Cisco IOS Release 11.3(11)T. With their optimization for high-speed modem access, the Cisco AS5100 and Cisco AS5200 universal access servers are ideally suited for all traditional dial-up applications, such as host access, electronic mail, file transfer, and dial-in access to a local area network (LAN).
The Cisco AS5100 universal access server is a versatile data communications platform that combines all the functions of an access server, a router, and analog and digital modems into one chassis. Organizations requiring centralized processing capabilities for mobile users and telecommuters will benefit the most from using the Cisco AS5100 universal access server.
The Cisco AS5200 universal access server is a multifaceted data communications platform that provides all of the functions of an access server, a router, modems, and terminal adapters (TAs) in a modular chassis. Mid-sized organizations or service providers requiring centralized processing capabilities for mobile users and telecommuters will benefit the most from using the Cisco AS5200 universal access server.
This section describes the system requirements for Release 11.3 T:
Table 1 describes the memory requirements for the Cisco AS5100 and Cisco AS5200 universal access servers for Release 11.3 T.
| Platform | Feature Sets | Software Images | Image Names | Required Flash Memory | Required DRAM Memory | Runs from |
|---|---|---|---|---|---|---|
| Cisco AS5100 | IP Feature Set | IP | c2500-i-1 | 8 MB | 6 MB | Flash |
IP/IPX/AT/DEC Feature Set | IP/IPX/AT/DEC | c2500-d-1 | 8 MB | 4 MB | Flash | |
Remote Access Server (RAS) Feature Set | Remote Access Server (RAS) | c2500-c-1 | 8 MB | 6 MB | Flash | |
| Cisco AS5200 | IP Feature Set | IP | c5200-i-1 | 8 MB | 8 MB | Flash |
IP Plus | c5200-is-1 | 8 MB | 8 MB | Flash | ||
IP/IPX/AT/DEC Feature Set | IP/IPX/AT/DEC | c5200-d-1 | 8 MB | 8 MB | Flash | |
IP/IPX/AT/DEC Plus | c5200-ds-1 | 8 MB | 8 MB | Flash | ||
Enterprise Feature Set | Enterprise | c5200-j-1 | 16 MB | 8 MB | Flash | |
Enterprise Plus | c5200-js-1 | 16 MB | 8 MB | Flash |
Cisco IOS Release 11.3(11)T supports the Cisco AS5100 and Cisco AS5200 universal access servers. For detailed descriptions of the new hardware features, see the "New and Changed Information" section. Table 2 summarizes the hardware supported on the Cisco AS5100 and Cisco AS5200 universal access servers.
| Interface, Network Module, or Data Rate | Platforms Supported | In1 | |
|---|---|---|---|
LAN Interfaces | Ethernet (AUI) | Cisco AS5100, Cisco AS5200 |
|
MultiChannel Interface (Channelized E1/T1) | Cisco AS5200 |
| |
WAN Data Rates | 48/56/64 kbps | Cisco AS5100, Cisco AS5200 |
|
1.544/2.048 Mbps | Cisco AS5100, Cisco AS5200 |
| |
WAN Interfaces | EIA/TIA-232 | Cisco AS5100, Cisco AS5200 |
|
X.21 | Cisco AS5100, Cisco AS5200 |
| |
V.35 | Cisco AS5100, Cisco AS5200 |
| |
EIA/TIA-449 | Cisco AS5100, Cisco AS5200 |
| |
EIA-530 | Cisco AS5100, Cisco AS5200 |
| |
ISDN PRI | Cisco AS5100, Cisco AS5200 |
| |
E1-G.703/G.704 | Cisco AS5100, Cisco AS5200 |
| |
Channelized T1 | Cisco AS5100, Cisco AS5200 |
| |
Channelized E1 | Cisco AS5100, Cisco AS5200 |
| |
Serial | Cisco AS5100, Cisco AS5200 |
| |
To determine the version of Cisco IOS software running on your Cisco AS5100 or Cisco AS5200 universal access servers, log in to the Cisco AS5100 or AS5200 and enter the show version EXEC command.
router>show version Cisco Internetwork Operating System Software IOS (tm) 5100 Software (c5100-js-l), Version 11.3(11)T, RELEASE SOFTWARE
For information about upgrading to a new software release, see the Cisco IOS Software Release 11.3 Upgrade Paths and Packaging Simplification product bulletin located on CCO at:
Service & Support: Technical Documents: Product Bulletins: Software
Under Cisco IOS 11.3, click Cisco IOS Software Release 11.3 Upgrade Paths (#703: 12/97)
This product bulletin does not contain information specific to Cisco IOS Release 11.3 but provides generic upgrade information that may apply to Cisco IOS Release 11.3.
Cisco IOS Release 11.2(1) and later includes bundled modem code for the Cisco AS5200, which is the firmware or portware that runs on the Microcom 12-port and MICA 6-port modem cards. Bundling eliminates the need to store separate microcode images. When the access server starts, the Cisco IOS software unpacks the modem code and loads the proper code on the modem cards.
The modem code release notes are on CCO and the Documentation CD-ROM:
You can reach the release notes on CCO at:
Service & Support: Cisco Product Documentation: Access Servers and Access Routers: Firmware and Portware Information
You can reach the release notes on the Documentation CD-ROM at:
Cisco Product Documentation: Access Servers and Access Routers: Firmware and Portware Information
The Cisco IOS software is packaged in feature sets consisting of software images---depending on the platform. Each feature set contains a specific set of Cisco IOS features.
Release 11.3 T supports the same feature sets as Release 11.3, but Release 11.3 T can include new features supported by the Cisco AS5100 and Cisco AS5200 universal access servers.
| Feature Set | Software Image Name | Feature Set Matrix Term | Software Image | Platforms |
|---|---|---|---|---|
| IP Standard | IP | Basic1 | c2500-i-l | Cisco AS5100 |
Basic | c5200-i-1 | Cisco AS5200 | ||
IP Plus | Basic, Plus2 | c5200-is-l | Cisco AS5200 | |
IP/IPX/AT/DEC Standard | IP/IPX/AT/DEC | Basic | c2500-d-l | Cisco AS5100 |
c5200-d-l | Cisco AS5200 | |||
IP/IPX/AT/DEC Plus | Basic, Plus | c5200-ds-l | Cisco AS5200 | |
Enterprise | Enterprise | Basic | c5200-j-l | Cisco AS5200 |
Enterprise Plus | Basic, Plus | c5200-js-l | Cisco AS5200 | |
Remote Access Server | Remote Access Server | Basic | c2500-c-l | Cisco AS5100 |
| 1This feature is offered in the basic feature set. 2This feature is in the Plus feature set. |
![]() | Caution Cisco IOS images with strong encryption (including, but not limited to 168-bit (3DES) data encryption feature sets) are subject to United States government export controls and have limited distribution. Strong encryption images to be installed outside the United States are likely to require an export license. Customer orders may be denied or subject to delay due to United States government regulations. When applicable, purchaser/user must obtain local import and use authorizations for all encryption strengths. Please contact your sales representative or distributor for more information, or send an e-mail to export@cisco.com. |
Table 4 and Table 5 list the features and feature sets supported by the Cisco AS5100 and Cisco AS5200 in Cisco IOS Release 11.3 and uses the following conventions:
| Feature | Software Images by Feature Sets | |||
|---|---|---|---|---|
| In1 | IP | IP/IPX/AT/ DEC | Remote Access Server | |
| IBM Support | ||||
APPN High Performance Routing |
| No | No | No |
APPN MIB Enhancements |
| No | No | No |
APPN over Ethernet LAN Emulation |
| No | No | No |
APPN Scalability Enhancements |
| No | No | No |
Bisync Enhancements |
| No | No | No |
Cisco MultiPath Channel (CMPC) |
| No | No | No |
DLSw+ Enhancements |
| No | No | No |
FRAS Enhancements |
| No | No | No |
SRB over FDDI on Cisco 4000, 4500, and 4700 Series Routers |
| No | No | No |
TN3270 LU Nailing |
| No | No | No |
TN3270 Server Enhancements |
| No | No | No |
Token Ring LANE |
| No | No | No |
Tunneling of Asynchronous Security Protocols |
| No | No | No |
| Internet | ||||
DRP Server Agent |
| Yes | Yes | No |
DRP Server Agent Enhancements | (2) | Yes | Yes | No |
| IP Routing | ||||
Easy IP (Phase 1) |
| Yes | Yes | Yes |
Hot Standby Router Protocol (HSRP) over ISL in Virtual LAN Configurations |
| No | No | No |
IP Enhanced IGRP Route Authentication | (4) | Yes | Yes | Yes |
| LAN Support | ||||
AppleTalk Access List Enhancements |
| No | Yes | No |
DECnet Accounting |
| No | Yes | No |
IPX Named Access Lists |
| No | Yes | Yes |
IPX SAP-after-RIP |
| No | Yes | Yes |
NLSP Enhancements |
| No | No | No |
NLSP Multicast Support |
| No | Yes | No |
| Management | ||||
Cisco Call History MIB Command Line Interface |
| Yes | Yes | No |
Cisco IOS Internationalization |
| Yes | Yes | Yes |
Entity MIB, Phase 1 |
| Yes | Yes | Yes |
SNMPv2C |
| Yes | Yes | Yes |
Virtual Profiles |
| Yes | Yes | Yes |
VPDN MIB and Syslog Facility | (3) | No | No | Yes |
| Multimedia | ||||
IP Multicast Load Splitting across Equal-Cost Paths |
| Yes | Yes | Yes |
IP Multicast over ATM Point-to-Multipoint Virtual Circuits |
| No | No | No |
IP Multicast over Token Ring LANs |
| Yes | Yes | Yes |
PIM Version 2 | (2) | Yes | Yes | Yes |
Stub IP Multicast Routing |
| Yes | Yes | Yes |
| Quality of Service | ||||
RTP Header Compression |
| Yes | Yes | Yes |
| Security | ||||
Named Method Lists for AAA Authorization and Accounting | (3) | Yes | Yes | Yes |
Additional Vendor-Proprietary RADIUS Attributes | (3) | Yes | Yes | Yes |
Automated Double Authentication | (3) | Yes | Yes | No |
Double Authentication |
| Yes | Yes | Yes |
Encrypted Kerberized Telnet |
| No | No | No |
HTTP Security |
| Yes | Yes | Yes |
Per-User Configuration |
| Yes | Yes | Yes |
Reflexive Access Lists |
| Yes | Yes | Yes |
TCP Intercept |
| No | No | No |
Vendor-Proprietary RADIUS Attributes |
| Yes | Yes | Yes |
| Switching | ||||
AppleTalk Routing over ISL and IEEE 802.10 in Virtual LANs |
| No | No | No |
CLNS and DECnet Fast Switching over PPP |
| No | No | No |
DECnet/VINES/XNS over ISL |
| No | No | No |
Fast-Switched Policy Routing |
| Yes | Yes | Yes |
IPX Routing over ISL Virtual LANs |
| No | No | No |
VIP Distributed Switching Support for IP Encapsulated in ISL |
| No | No | No |
| Terminal Services | ||||
Virtual Templates for Protocol Translation |
| No | No | Yes |
Telnet Extensions to Dialout |
|
|
|
|
| WAN Optimization | ||||
ATM MIB Enhancements |
| No | No | No |
PAD Enhancements |
| No | No | Yes |
PAD Subaddressing |
| Yes | Yes | Yes |
| WAN Services | ||||
Bandwidth Allocation Control Protocol |
| Yes | Yes | No |
Dialer Watch | (2) | Yes | Yes | Yes |
Frame Relay Enhancements |
| Yes | Yes | Yes |
Frame Relay MIB Extensions |
| Yes | Yes | Yes |
Frame Relay Router ForeSight |
| Yes | Yes | Yes |
ISDN Advice of Charge |
| Yes | Yes | No |
ISDN Caller ID Callback |
| Yes | Yes | No |
ISDN NFAS |
| No | No | No |
ISDN Multiple Switch Type | (3) | Yes | Yes | No |
Layer 2 Forwarding---Fast Switching |
| No | No | Yes |
Leased Line ISDN at 128 kbps |
| No | No | No |
MS Callback Server | (2) | Yes | Yes | Yes |
Microsoft Point-to-Point Compression (MPPC) | (3) | Yes | Yes | Yes |
National IDSN Switch Types for BRI and PRI Interfaces | (3) | Yes | Yes | No |
PPP over ATM |
| No | No | No |
Telnet Extensions for Dialout |
| Yes | Yes | Yes |
X.25 Enhancements |
| Yes | Yes | Yes |
X.25 on ISDN |
| Yes | Yes | No |
X.25 Switching between PVCs and SVCs |
| Yes | Yes | Yes |
X.28 Emulation |
| Yes | Yes | Yes |
| Feature | Software Images by Feature Set | ||||||
|---|---|---|---|---|---|---|---|
| In1 | IP | IP Plus | IP/IPX/AT/ DEC | IP/IPX/AT/ DEC Plus | Enterprise | Enterprise Plus | |
| IBM Support | |||||||
APPN High Performance Routing |
| No | No | No | No | No | No |
APPN MIB Enhancements |
| No | No | No | No | No | No |
APPN over Ethernet LAN Emulation |
| No | No | No | No | No | No |
APPN Scalability Enhancements |
| No | No | No | No | No | No |
Bisync Enhancements, includes:
|
| No | No | No | No | Yes | Yes |
Cisco MultiPath Channel (CMPC) |
| No | No | No | No | No | No |
DLSw+ Enhancements, includes:
|
| No | No | No | No | Yes | Yes |
FRAS Enhancements, includes:
|
| No | No | No | No | Yes | Yes |
SRB over FDDI on Cisco 4000, 4500, and 4700 Series Routers |
| No | No | No | No | No | No |
RIF Passthru in DLSw+ | (3) | No | No | No | No | Yes | Yes |
TN3270 LU Nailing |
| No | No | No | No | No | No |
TN3270 Server Enhancements |
| No | No | No | No | No | No |
Token Ring LANE |
| No | No | No | No | No | No |
Tunneling of Asynchronous Security Protocols |
| No | No | No | No | Yes | Yes |
| Internet | |||||||
DRP Server Agent |
| Yes | Yes | Yes | Yes | Yes | Yes |
DRP Server Agent Enhancements | (2) | Yes | Yes | Yes | Yes | Yes | Yes |
| IP Routing | |||||||
Easy IP (Phase 1) |
| No | Yes | No | Yes | No | Yes |
Hot Standby Router Protocol (HSRP) over ISL in Virtual LAN Configurations |
| No | No | No | No | No | No |
IP Enhanced IGRP Route Authentication |
| Yes | Yes | Yes | Yes | Yes | Yes |
IP Type of Service and Precedence for GRE Tunnels (CSCdj88415) | (4) | Yes | Yes | Yes | Yes | Yes | Yes |
TCP Enhancements, includes:
|
| Yes | Yes | Yes | Yes | Yes | Yes |
| LAN Support | |||||||
AppleTalk Access List Enhancements |
| No | No | Yes | Yes | Yes | Yes |
DECnet Accounting |
| No | No | Yes | Yes | Yes | Yes |
IPX Named Access Lists |
| No | No | Yes | Yes | Yes | Yes |
IPX SAP-after-RIP |
| No | No | Yes | Yes | Yes | Yes |
NLSP Enhancements |
| No | No | No | No | Yes | Yes |
NLSP Multicast Support |
| No | No | Yes | Yes | Yes | Yes |
| Management | |||||||
Cisco Call History MIB Command Line Interface |
| Yes | Yes | Yes | Yes | Yes | Yes |
Cisco IOS Internationalization |
| Yes | Yes | Yes | Yes | Yes | Yes |
Entity MIB, Phase 1 |
| Yes | Yes | Yes | Yes | Yes | Yes |
SNMPv2C |
| Yes | Yes | Yes | Yes | Yes | Yes |
Virtual Profiles |
| Yes | Yes | Yes | Yes | Yes | Yes |
VPDN MIB and Syslog Facility | (3) | No | Yes | No | Yes | Yes | Yes |
| Multimedia | |||||||
IP Multicast Load Splitting across Equal-Cost Paths |
| Yes | Yes | Yes | Yes | Yes | Yes |
IP Multicast over ATM Point-to-Multipoint Virtual Circuits |
| No | No | No | No | No | No |
IP Multicast over Token Ring LANs |
| No | No | No | No | No | No |
PIM Version 2 |
| Yes | Yes | Yes | Yes | Yes | Yes |
Stub IP Multicast Routing |
| Yes | Yes | Yes | Yes | Yes | Yes |
| Quality of Service | |||||||
RTP Header Compression |
| Yes | Yes | Yes | Yes | Yes | Yes |
| Security | |||||||
Named Method Lists for AAA Authorization and Accounting | (3) | Yes | Yes | Yes | Yes | Yes | Yes |
Additional Vendor-Proprietary RADIUS Attributes | (3) | Yes | Yes | Yes | Yes | Yes | Yes |
Automated Double Authentication | (3) | Yes | Yes | Yes | Yes | Yes | Yes |
Double Authentication |
| Yes | Yes | Yes | Yes | Yes | Yes |
Encrypted Kerberized Telnet |
| No | No | No | No | No | No |
HTTP Security |
| Yes | Yes | Yes | Yes | Yes | Yes |
MS-CHAP Support | (3) | No | No | No | No | Yes | Yes |
Per-User Configuration |
| Yes | Yes | Yes | Yes | Yes | Yes |
Reflexive Access Lists |
| Yes | Yes | Yes | Yes | Yes | Yes |
TCP Intercept |
| No | No | No | No | Yes | Yes |
Vendor-Proprietary RADIUS Attributes |
| Yes | Yes | Yes | Yes | Yes | Yes |
| Switching | |||||||
AppleTalk Routing over ISL and IEEE 802.10 in Virtual LANs |
| No | No | No | No | No | No |
CLNS and DECnet Fast Switching over PPP |
| No | No | No | No | Yes | Yes |
DECnet/VINES/XNS over ISL, includes:
|
| No | No | No | No | Yes | Yes |
Fast-Switched Policy Routing |
| Yes | Yes | Yes | Yes | Yes | Yes |
IPX Routing over ISL Virtual LANs |
| No | No | No | No | No | No |
VIP Distributed Switching Support for IP Encapsulated in ISL |
| No | No | No | No | No | No |
| Terminal Services | |||||||
Telnet Extensions to Dialout |
| Yes | Yes | Yes | Yes | Yes | Yes |
Virtual Templates for Protocol Translation |
| No | Yes | No | Yes | Yes | Yes |
| WAN Optimization | |||||||
ATM MIB Enhancements |
| No | No | No | No | No | No |
PAD Enhancements |
| No | Yes | No | Yes | Yes | Yes |
PAD Subaddressing |
| Yes | Yes | Yes | Yes | Yes | Yes |
| WAN Services | |||||||
Always On/Dynamic ISDN (AO/DI) | (3) | No | No | No | No | Yes | Yes |
Bandwidth Allocation Control Protocol |
| Yes | Yes | Yes | Yes | Yes | Yes |
Dialer Watch | (2) | Yes | Yes | Yes | Yes | Yes | Yes |
Frame Relay Enhancements |
| Yes | Yes | Yes | Yes | Yes | Yes |
Frame Relay MIB Extensions |
| Yes | Yes | Yes | Yes | Yes | Yes |
Frame Relay Router ForeSight |
| Yes | Yes | Yes | Yes | Yes | Yes |
ISDN Advice of Charge |
| Yes | Yes | Yes | Yes | Yes | Yes |
ISDN Caller ID Callback |
| Yes | Yes | Yes | Yes | Yes | Yes |
ISDN NFAS |
| Yes | Yes | Yes | Yes | Yes | Yes |
Layer 2 Forwarding---Fast Switching |
| No | Yes | No | Yes | Yes | Yes |
Leased Line ISDN at 128 kbps |
| No | No | No | No | No | No |
MS Callback | (2) | Yes | Yes | Yes | Yes | Yes | Yes |
Microsoft Point-to-Point Compression (MPPC) | (3) | Yes | Yes | Yes | Yes | Yes | Yes |
Multiple ISDN Switch Types | (3) | Yes | Yes | Yes | Yes | Yes | Yes |
National ISDN Switch Types for BRI and PRI Interfaces (NI2) | (3) | Yes | Yes | Yes | Yes | Yes | Yes |
PPP over ATM |
| No | No | No | No | No | No |
Stackable Home Gateway | (3) | No | Yes | No | Yes | Yes | Yes |
Telnet Extensions for Dialout |
| Yes | Yes | Yes | Yes | Yes | Yes |
X.25 Enhancements |
| Yes | Yes | Yes | Yes | Yes | Yes |
X.25 on ISDN |
| Yes | Yes | Yes | Yes | Yes | Yes |
X.25 Switching between PVCs and SVCs |
| Yes | Yes | Yes | Yes | Yes | Yes |
X.28 Emulation |
| Yes | Yes | Yes | Yes | Yes | Yes |
The following sections list the new features supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3 T. For more information about these features, see the "Related Documentation" section.
There are no new hardware or software enhancements supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3(7)T through Release 11.3(11)T.
The following new software enhancements are supported by the Cisco AS5100 and Cisco AS5200 access servers in Cisco IOS Release 11.3(6)T and later releases.
The following three new cas-custom commands are available for the Cisco AS5200 in Cisco IOS Release 11.3(6)T:
as5100_1(config-ctrl-cas)# debounce-time?<16-40> Debounce Time in Milliseconds
as5100_1(config-ctrl-cas)# seizure-ack-time?<2-100> Seizure to Acknowledge time in Milliseconds
as5100_1(config-ctrl-cas)# release-guard-time?<1-2000> Release Guard Time in MillisecondsThe following additional countries now support E1 R2 signaling:
See the "E1 R2 Signaling" section for more information about this feature.
There are no new hardware nor software enhancements supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3(5)T.
The following new software enhancement is supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3(4)T and later releases.
Before the IP Type of Service and Precendence for GRE Tunnels feature, at generic route encapsulation-based tunnel endpoints, the Type of Service (TOS) bits (including precedence bits) were not copied to the tunnel or GRE IP header that encapsulates the inner packet. Instead, those bits were set to zero. This was not a problem unless the intermediate routers between two tunnel endpoints honored TOS or precedence bits, in which case those settings were ignored.
With the advent of virtual private network (VPN) and Quality of Service (QoS) applications, it is desirable to use GRE to copy the TOS bits when the router encapsulates the packets. Thus, intermediate routers between tunnel endpoints can take advantage of the QoS features, such as weighted fair queuing (WFQ) and weighted random early detection (WRED).
The following new software enhancements are supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3(3)T and later releases.
In earlier Cisco IOS releases, only named authentication method lists were supported under Cisco's Authentication, Authorization, and Accounting (AAA) network security services. With Cisco IOS Release 11.3(3)T, AAA was extended to support both authorization and accounting named method lists.
Named method lists for authorization and accounting function the same way as those for authentication: They allow you to define different methods for authorization and accounting and apply those methods on a per-interface or per-line basis.
Remote Authentication Dial-In User Server (RADIUS) is an access server authentication, authorization, and accounting protocol originally developed by Lucent Technologies Remote Access Business Unit (formerly Livingston, Inc.). Although an Internet Engineering Task Force (IETF) draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the network access server and the RADIUS server, some vendors have extended the RADIUS attribute set in a unique way. In this release, Cisco IOS software introduces support for additional vendor-proprietary RADIUS attributes. Users who have implemented security solutions using a vendor-proprietary implementation of RADIUS can now integrate Cisco access routers into their networks more easily.
For a complete list of supported IETF and vendor-proprietary RADIUS attributes, see the "RADIUS Attributes" appendix in the Cisco IOS Release 11.3 Security Configuration Guide.
The Automated Double Authentication feature enhances the existing double authentication feature.
Previously, with the existing double authentication feature, a second level of user authentication is achieved when the user Telnets to the network access server or router and enters a username and password. Now, with automated double authentication, the user does not have to Telnet anywhere but instead responds to a dialog box that requests a username and password or PIN.
For information about the existing double authentication feature, see the "Configuring Authentication" chapter of the Cisco IOS Release 11.3 Security Configuration Guide.
Microsoft Point-to-Point Compression (MPPC) is a scheme used to compress Point-to-Point Protocol (PPP) packets between Cisco and Microsoft client devices. The MPPC algorithm is designed to optimize processor and bandwidth utilization in order to support multiple simultaneous connections. The MPPC algorithm uses a Lempel-Ziv (LZ)-based algorithm with a continuous history buffer, called a dictionary.
Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) is the Microsoft version of CHAP. Like the standard version of CHAP, MS-CHAP is used for PPP authentication; in this case, authentication occurs between a PC using Microsoft Windows NT or Microsoft Windows 95 and a Cisco router or access server acting as a network access server (NAS).
MS-CHAP differs from the standard CHAP as follows:
Depending on the security protocols you have implemented, PPP authentication using MS-CHAP can be used with or without Authentication, Authorization and Accounting (AAA) security services. If you have enabled AAA, PPP authentication using MS-CHAP can be used in conjunction with both TACACS+ and RADIUS.
For a complete list of supported IETF and vendor-proprietary RADIUS attributes, see the "RADIUS Attributes" appendix in the Cisco IOS Release 11.3 Security Configuration Guide.
The Multiple ISDN Switch Types feature allows you to configure more than one ISDN switch type per router. You can apply an ISDN switch type on a per interface basis, thus extending the existing global isdn switch-type command to the interface level. This allows Basic Rate Interfaces (BRI) and Primary Rate Interfaces (PRI) to run simultaneously on platforms that support both interface types.
The isdn tei command is also extended to the interface level. Terminal endpoint negotiation (TEI) determines when Layer 2 is activated (powerup or first-call).
National ISDN Switch Types for Basic Rate and Primary Rate Interfaces introduces changes to ISDN switch types for Primary Rate Interfaces (PRI) and Basic Rate Interfaces (BRI) as follows:
The Virtual Private Dialup Network (VPDN) Management Information Base (MIB) feature is intended to support all the tables and objects defined in "Cisco VPDN Management MIB" for the user sessions of the VPDN features. There are a number of commands which provide information and statistics through the Command Line Interface (CLI) but not Simple Network Management Protocol (SNMP); the Cisco VPDN MIB and Syslog Facility has been created to satisfy the need to provide information and statistics through SNMP.
Always On/Dynamic ISDN (AO/DI) is an on demand service that optimizes the use of an existing Integrated Services Digital Network (ISDN) signaling channel (D channel) to transport X.25 traffic. The X.25 D channel call is placed from the subscriber to the packet data service provider. Multilink and TCP/IP protocols are encapsulated within the X.25 logical circuit carried by the D channel. The bearer channels (B channels) use the Multilink protocol without the standard Q.922 and X.25 encapsulations, and invoke additional bandwidth as needed. AODI takes full advantage of existing packet handlers at the central office by using an existing D channel to transport the X.25 traffic. The link associated with the X.25 D channel packet connection is used as the primary link of the Multilink protocol. The D channel is a connectionless, packet oriented link between the Customer Premise Equipment (CPE) and the central office. Because the D channel is always available, it is possible to in turn offer "always available" services. On-demand functionality is achieved by using the B channels to temporarily boost data throughput and are disconnected after use.
By default, DLSw+ terminates the RIF for Token Ring, terminates the LLC for all media types and forwards only data across a WAN with DLSw+ and TCP/IP headers. The RIF is a field in source-route bridged frames that indicates the SRB path the frame should take when traversing a Token Ring network. In the case of an explorer packet, the RIF is a field of the source-route bridged frame that indicates the SRB path that the SRB explorer has traversed so far. The RIF is limited to seven hop counts by the IBM standards. Because DLSw+ terminates the RIF at the virtual ring, the network's scalability increases because the hop count of the packet starts over, and the packet can traverse seven additional hops. Also, RIF termination simplifies network design because ring numbers no longer have to be unique throughout an entire enterprise.
However, some environments do not function properly if the RIF is terminated. For that reason, DLSw+ now supports the RIF Passthru feature, in which the entire source-route bridged path appears in the RIF.
The following new software enhancements are supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3(2)T and later releases.
Dialer Watch is a backup feature that integrates dial backup with routing capabilities. Previous dial backup implementations used the following conditions to trigger backup:
Previous backup implementations might not have supplied optimum performance on some networks, such as those using Frame Relay multipoint subinterfaces or Frame Relay connections that do not support end-to-end LMI.
Dialer Watch provides reliable connectivity without relying solely on defining interesting traffic to trigger outgoing calls at the central router. Dialer Watch uses the convergence times and characteristics of dynamic routing protocols. Integrating backup and routing features enables Dialer Watch to monitor every deleted route. By configuring a set of watched routes that define the primary interface, you are able to monitor and track the status of the primary interface as watched routes are added and deleted. Watched routes are monitored in the following sequence:
1. Whenever a watched route is deleted, Dialer Watch checks to see if there is at least one valid route for any of the watched IP addresses defined.
2. If there is no valid route, the primary line is considered down and unusable.
3. If there is a valid route for at least one of the defined watched IP addresses, and if the route is pointing to an interface other than the backup interface configured for Dialer Watch, the primary link is considered up.
4. In the event that the primary link goes down, Dialer Watch is immediately notified by the routing protocol and the secondary link is brought up.
5. Once the secondary link is up, the primary link is rechecked at the expiration of each idle timeout.
6. If the primary link remains down, the idle timer is reset indefinitely.
7. If the primary link is up, the secondary backup link is disconnected. Additionally, a disable timer can be set to create a delay for the secondary link to disconnect after the primary link is reestablished.
The Direct Response Protocol (DRP) Server Agent enhancements are as follows:
R2 signaling is an international signaling standard that is common to channelized E1 networks. However, there is no single signaling standard for R2. The ITU-T Q.400-Q.490 recommendation defines R2, but a number of countries and geographic regions implement R2 in entirely different ways. Cisco Systems addresses this challenge by supporting many localized implementations of R2 signaling in its Cisco IOS software.
Cisco Systems E1 R2 signaling default is ITU, which is supported in the following countries: Denmark, Finland, Germany, Hong Kong (ITU variant), Russia (ITU variant), and South Africa (ITU variant). The expression "ITU variant" means there are multiple R2 signaling types in the specified country, but Cisco supports the ITU variant.
Cisco Systems also supports specific local variants of E1 R2 signaling in the following regions, countries, and corporations:
Argentina, Australia, Brazil, China, Columbia, Costa Rica, East Europe (includes Croatia, Russia, and Slovak Republic), Ecuador ITU, Ecuador LME, Greece, Guatemala, Hong Kong (uses the China variant), Indonesia, Israel, Korea, Malaysia, New Zealand, Paraguay, Peru, Philippines, Saudi Arabia, Singapore, South Africa (Panaftel variant), Telmex corporation (Mexico), Telnor corporation (Mexico), Thailand, Uruguay, Venezuela, and Vietnam.
The MS Callback feature provides client/server callback services for Microsoft Windows 95 and Microsoft Windows NT clients. MS Callback supports the Microsoft Callback Control Protocol (MSCB). MSCB is a Microsoft proprietary protocol used by Windows 95 and Windows NT clients. MS Callback supports negotiated PPP Link Control Protocol (LCP) extensions initiated and agreed to by the Microsoft client. MS Callback is added to existing PPP Callback functionality. Therefore, if you configure your Cisco AS5100 to perform PPP Callback using Cisco IOS Release 11.3(2)T or later, MS Callback is automatically available.
MS Callback supports AAA security models using a local database or AAA server.
MSCB uses LCP callback options with suboption type 6. The Cisco MS Callback feature supports clients with a user-specified callback number and server-specified (preconfigured) callback number.
MS Callback does not affect non-Microsoft machines that implement standard PPP LCP extensions as described in RFC 1570. In this scenario, MS Callback is transparent.
Protocol-Independent Multicast (PIM) Version 2 includes the following improvements over PIM Version 1:
PIM Version 1, together with the Auto-RP feature, can perform the same tasks as the PIM Version 2 BSR. However, Auto-RP is a standalone protocol, separate from PIM Version 1, and is Cisco proprietary. PIM Version 2 is a standards track protocol in the Internet Engineering Task Force (IETF).
Cisco's PIM Version 2 implementation allows good interoperability and transition between Version 1 and Version 2. You can upgrade to PIM Version 2 incrementally. PIM Versions 1 and 2 can be configured on different routers within one network. Internally, all routers on a shared media network must run the same PIM version. Therefore, if a PIM Version 2 router detects a PIM Version 1 router, the Version 2 router downgrades itself to Version 1 until all Version 1 routers have been shut down or upgraded.
PIM uses the BSR to discover and announce RP-set information for each group prefix to all the routers in a PIM domain. This is the same function accomplished by Auto-RP, but the BSR is part of the PIM Version 2 specification. The BSR mechanism interoperates with Auto-RP.
To avoid a single point of failure, you can configure several candidate BSRs in a PIM domain. A BSR is elected among the candidate BSRs automatically; they use bootstrap messages to discover which BSR has the highest priority. This router then announces to all PIM routers in the PIM domain that it is the BSR.
Routers that are configured as candidate RPs then unicast to the BSR the group range for which they are responsible. The BSR includes this information in its bootstrap messages and disseminates it to all PIM routers in the domain. Based on this information, all routers will be able to map multicast groups to specific RPs. As long as a router is receiving the bootstrap message, it has a current RP map.
The following new software enhancement is supported by the Cisco AS5100 and Cisco AS5200 universal access servers in Cisco IOS Release 11.3(1)T and later releases.
The SNMP Inform Requests feature allows routers to send inform requests to SNMP managers.
Access Servers can send notifications to SNMP managers when particular events occur. For example, an agent router might send a message to a manager when the agent router experiences an error condition. SNMP notifications can be sent as traps or inform requests. Traps are unreliable because the receiver does not send any acknowledgment when it receives a trap. The sender cannot determine if the trap was received. However, an SNMP manager that receives an inform request acknowledges the message with an SNMP response PDU. If the manager does not receive an inform request, it does not send a response. If the sender never receives a response, the inform request can be sent again. Thus, informs are more likely to reach their intended destination.
Because they are more reliable, informs consume more resources in the access server and in the network. Unlike a trap, which is discarded as soon as it is sent, an inform request must be held in memory until a response is received or the request times out. Also, traps are sent only once, while an inform may be retried several times.
The retries increase traffic and contribute to a higher overhead on the network. Thus, traps and inform requests provide a trade-off between reliability and resources. If it is important that the SNMP manager receives every notification, use inform requests. However, if you are concerned about traffic on your network or memory in the access server and you do not need to receive every notification, use traps.
The following sections contain important notes about Cisco IOS Release 11.3 T that might apply to the Cisco AS5100 and Cisco AS5200 universal access servers.
end of Engineering (EOE) means that there are no more regularly scheduled maintenance releases. The last maintenance release scheduled on the EOE date is only available through CCO and Field Service Operations---not through manufacturing.
EOS and EOE releases are subject to change. For the most up-to-date information on the status of EOS or EOE, see the End of Sales and End of Engineering for Cisco IOS Software Releases product bulletins located on CCO.
Ongoing support for functionality in Releases 11.3, 11.3 NA, and 11.3 T is available in Cisco IOS Release 12.0(3)T and later maintenance releases of Cisco IOS Release 12.0 on CCO at:
Service & Support: Product Bulletins: Software
Under Cisco IOS 11.3, click End of Sales and End of Engineering for Cisco IOS Software Releases 11.3 and 11.3 T (#847: 12/98) or Cisco IOS Software 11.3 NA EoS and EoE (#849:12/98)
Cisco IOS Release 11.3(8)T was deferred to Release 11.3(8)T1 on all software images to incorporate corrections to the following caveats:
For more information on these caveats, see Bug Navigator II. Bug Navigator II is available at http://www.cisco.com/support/bugtools. On CCO, click this path:
Service & Support: Online Technical Support: Software Bug Toolkit: Bug Navigator II.
Because of a production problem, many source-route bridging commands were omitted from the printed version of Cisco IOS Software Command Summary (78-4746-XX). For documentation of all source-route bridging commands, see the Bridging and IBM Networking Command Reference (78-4743-XX). You can also obtain the most current documentation on CCO or on the Documentation CD-ROM.
Cisco is conducting an internal review of the build and distribution processes associated with its 40-bit Cisco IOS cryptographic products. To provide seamless access to Cisco IOS 40-bit encryption capability, Cisco will provide access to the most current 40-bit encryption images, beginning with Cisco IOS Release 11.2 (12), 11.2(12)P, and 11.3(2).
The following 40-bit encryption images are unavailable indefinitely:
This review is not related to any new or previously unreported caveats. The information gathered in the review will be used to implement new automated development and order-processing applications.
A new authorization feature that allows you to separately configure and authorize Multilink PPP was added in Cisco IOS Release 11.3(1). This feature can cause MLP authorization to fail in Terminal Access Controller Access Control System (TACACS+) servers that do not include authorization permissions in the configuration.
For TACACS+, add the following attribute-value (AV) pair for all users who are allowed to negotiate Multilink PPP:
service = ppp protocol = multilink {
Caveats describe unexpected behavior or defects in Cisco IOS software releases. For information on caveats in Cisco IOS Release 11.3 T, refer to the Caveats for Cisco IOS Release 11.3 T document which is located on CCO and the Documentation CD-ROM.
All caveats in Release 11.3 are also in Release 11.3 T.
For information on caveats in Cisco IOS Release 11.3, refer to the "Important Notes and Caveats for Release 11.3" section in the cross-platform Release Notes for Cisco IOS Release 11.3 document which is located on CCO and the Documentation CD-ROM. These release notes list severity 1 and 2 caveats affecting all maintenance releases. Severity 1 caveats are the most serious caveats; severity 2 caveats are less serious.
The following sections describe the documentation available for the Cisco AS5100 and Cisco AS5200 universal access servers. These documents consist of hardware and software installation guides, Cisco IOS configuration and command references, system error messages, and other documents.
Documentation is available as printed manuals or electronic documents.
Use these release notes with these documents:
The following documents are specific to Release 11. 3 and are located on CCO and the Documentation CD-ROM.
These documents are available for the Cisco AS5100 and Cisco AS5200 universal access servers on CCO and the Documentation CD-ROM.
The documents listed below are available for the Cisco AS5100 access servers. These documents are also available online at Cisco Connection Online (CCO) and on the Documentation CD-ROM.
You can reach the Cisco AS5100 documentation on CCO at:
Service & Support: Cisco Product Documentation: Access Servers and Access Routers: Access Servers: Cisco AS5100
You can reach the Cisco AS5100 documentation on the Documentation CD-ROM at:
Cisco Product Documentation: Access Servers and Access Routers: Access Servers: Cisco AS5100
The documents listed below are available for the Cisco AS5200 access servers. These documents are also available online at Cisco Connection Online (CCO) and on the Documentation CD-ROM.
You can reach the Cisco AS5200 documentation on CCO at:
Service & Support: Cisco Product Documentation: Access Servers and Access Routers: Access Servers: Cisco AS5200
You can reach the Cisco AS5200 documentation on the Documentation CD-ROM at:
Cisco Product Documentation: Access Servers and Access Routers: Access Servers: Cisco AS5200
Feature modules describe new features supported by Release 11.3 T and are updates to the Cisco IOS documentation set. A feature module consists of a brief overview of the feature, benefits, configuration tasks, and a command reference. As updates, the feature modules are available online only. Feature module information is incorporated in the next printing of the Cisco IOS documentation set.
You can reach the feature modules on CCO at:
Service & Support: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Release Notes for Cisco IOS Release 11.3: New Features in Release 11.3
You can reach the feature modules on the Documentation CD-ROM at:
Cisco Product Documentation: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Release Notes for Cisco IOS Release 11.3: New Features in Release 11.3
The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and several other supporting documents, which are shipped with your order in electronic form on the Documentation CD-ROM---unless you specifically ordered the printed versions.
Each module in the Cisco IOS documentation set consists of two books: a configuration guide and a corresponding command reference. Chapters in a configuration guide describe protocols, configuration tasks, Cisco IOS software functionality, and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Use each configuration guide with its corresponding command reference.
On CCO and the Documentation CD-ROM, two master hot-linked documents provide information for the Cisco IOS software documentation set.
You can reach these documents on CCO at:
Service & Support: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Cisco IOS 11.3 Configuration Guides, Command References: Configuration Guide Master Index or Command Reference Master Index
You can reach these documents on the Documentation CD-ROM at:
Cisco Product Documentation: Cisco IOS Software Configuration: Cisco IOS Release 11.3: Cisco IOS 11.3 Configuration Guides, Command References: Configuration Guide Master Index or Command Reference Master Index
Table 6 describes the contents of the Cisco IOS Release 11.3 software documentation set, which is available in electronic form and also in printed form if ordered.
You can reach the Cisco IOS documentation set from CCO at:
Service & Support: Cisco Product Documentation: Cisco IOS Software Configuration: Cisco IOS Release 11.3
You can reach the Cisco IOS documentation set on the Documentation CD-ROM at:
Cisco Product Documentation: Cisco IOS Software Configuration: Cisco IOS Release 11.3
| Books | Chapter Topics |
|---|---|
| Configuration Fundamentals Overview |
| IP Addressing |
| AppleTalk |
| Apollo Domain |
| ATM |
| AAA Security Services |
| Interface Configurations |
| Dial-In Port Setup |
| Switching Paths for IP Networks |
| Transparent Bridging |
| Voice over IP |
| Classification |
|
|
|
|
For service and support for a product purchased from a reseller, contact the reseller, who offers a wide variety of Cisco service and support programs described in "Service and Support" of Cisco Information Packet shipped with your product.
For service and support for a product purchased directly from Cisco, use CCO.
If you have a CCO login account, you can access the following URL, which contains links and tips on configuring your Cisco products:
http://www.cisco.com/kobayashi/serv_tips.shtml
This URL is subject to change without notice. If it changes, point your Web browser to CCO and click on this path: Products & Technologies: Products: Technical Tips.
The following sections are provided from the Technical Tips page:
Cisco Connection Online (CCO) is Cisco Systems' primary, real-time support channel. Maintenance customers and partners can self-register on CCO to obtain additional information and services.
Available 24 hours a day, 7 days a week, CCO provides a wealth of standard and value-added services to Cisco's customers and business partners. CCO services include product information, product documentation, software updates, release notes, technical tips, the Bug Navigator, configuration notes, brochures, descriptions of service offerings, and download access to public and authorized files.
CCO serves a wide variety of users through two interfaces that are updated and enhanced simultaneously: a character-based version and a multimedia version that resides on the World Wide Web (WWW). The character-based CCO supports Zmodem, Kermit, Xmodem, FTP, and Internet e-mail, and it is excellent for quick access to information over lower bandwidths. The WWW version of CCO provides richly formatted documents with photographs, figures, graphics, and video, as well as hyperlinks to related information.
You can reach CCO in the following ways:
For a copy of CCO's Frequently Asked Questions (FAQ), contact cco-help@cisco.com. For additional information, contact cco-team@cisco.com.
Cisco documentation and additional literature are available in a CD-ROM package, which package that ships with your product. The Documentation CD-ROM, a member of the Cisco Connection Family, is updated monthly. Therefore, it might be more current than printed documentation. To order additional copies of the Documentation CD-ROM, contact your local sales representative or call customer service. The CD-ROM package is available as a single package or as an annual subscription. You can also access Cisco documentation on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com.
If you are reading Cisco product documentation on the World Wide Web, you can submit comments electronically. Click Feedback in the toolbar and select Documentation. After you complete the form, click Submit to send it to Cisco. We appreciate your comments.

![]()
![]()
![]()
![]()
![]()
![]()
![]()
Posted: Thu Jul 22 18:26:44 PDT 1999
Copyright 1989-1999©Cisco Systems Inc.