Overview of Cisco 1100 Series Integrated Services Routers

The Cisco 1100 Series Integrated Services Routers (ISR) are powerful fixed branch routers based on the Cisco IOS XE operating system. They are multi-core routers with separate core for data plane and control plane. There are two primary models with 8 LAN ports and 4 LAN ports. Features such as Smart Licensing, VDSL2 and ADSL2/2+, 802.11ac with Wave 2, 4G LTE-Advanced and 3G/4G LTE and LTEA Omnidirectional Dipole Antenna (LTE-ANTM-SMA-D) are supported on Cisco 1100 Series ISRs.


Note

Explore the Content Hub, the all new portal that offers an enhanced product documentation experience.

  • Use faceted search to locate content that is most relevant to you.

  • Create customized PDFs for ready reference.

  • Benefit from context-based recommendations.

Get started with the Content Hub at content.cisco.com to craft a personalized documentation experience.

Do provide feedback about your experience with the Content Hub.


The following table lists the router models that belong to the Cisco 1100 Series ISRs.

Cisco 1100 Series ISRs

C1111-8P

C1111-4P

C1111-8PLTEEA

C1111-4PLTEEA

C1111-8PLTELA

C1111-4PLTELA

C1111-8PWE

C1111-4PWE

C1111-8PWB

C1111-4PWB

C1111-8PWA

C1111-4PWA

C1111-8PWZ

C1111-4PWZ

C1111-8PWQ

C1111-4PWN

C1111-8PWN

C1111-4PWQ

C1111-8PWH

C1111-4PWH

C1111-8PWR

C1111-4PWR

C1111-8PWF

C1111-4PWF

C1111-8PLTEEAWE

C1111-4PWD

C1111-8PLTEEAWB

C1111-8PLTEEAWA

C1111-8PLTEEAWR

C1111-8PLTELAWZ

C1111-8PLTELAWN

C1111-8PLTELAWQ

C1111-8PLTELAWH

C1111-8PLTELAWF

C1111-8PLTELAWD

C1101-4P

C1101-4PLTEP

C1101-4PLTEPWX

C1116-4P

C1116-4PLTEEA

C1116-4PWE

C1116-4PLTEEAWE

C1117-4P

C1117-4PLTEEA

C1117-4PLTELA

C1117-4PWE

C1117-4PWA

C1117-4PWZ

C1117-4PM

C1117-4PMLTEEA

C1117-4PMWE

C1117-4PLTEEAWE

C1117-4PLTEEAWA

C1117-4PLTELAWZ

C1117-4PMLTEEAWE

System Requirements

The following are the minimum system requirements:


Note

There is no change in the system requirements from the earlier releases.


  • Memory: 4GB DDR3 up to 16GB

  • Hard Drive: 200GB or higher (Optional). (The hard drive is only required for running services such as Cisco ISR-WAAS.)

  • Flash Storage: 4GB to 32GB


    Note

    There is no change in the flash storage size from the earlier releases. The flash storage size must be equal to the system memory size.


  • NIMs and SM-Xs: Modules (Optional)

  • NIM SSD (Optional)

For more information, see the Cisco 4000 Series ISRs Data Sheet.


Note

For more information on the Cisco WAAS IOS-XE interoperability, refer to the WAAS release notes: https://www.cisco.com/c/en/us/support/routers/wide-area-application-services-waas-software/products-release-notes-list.html


Determining the Software Version

You can use the following commands to verify your software version:

  • For a consolidated package, use the show version command

  • For individual sub-packages, use the show version installed command

Installing a New Software Release

To install, obtain a Cisco IOS XE 16.x consolidated package (image) from Cisco.com. You can find software images at http://software.cisco.com/download/navigator.html. To run the router using individual sub-packages, you also need to first download the consolidated package and extract the individual sub-packages from a consolidated package.

For information about upgrading software, see the “Installing the Software” section in the Software Configuration Guide for the Cisco 1100 Series ISRs.

Feature Navigator

You can use Cisco Feature Navigator to find information about feature, platform, and software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn . An account on cisco.com is not required.

Using the Cisco Bug Search Tool

About the Cisco Bug Search Tool

Use the Cisco Bug Search Tool to access open and resolved bugs for a release.

The tool allows you to search for a specific bug ID, or for all bugs specific to a product and a release.

You can filter the search results by last modified date, bug status (open, resolved), severity, rating, and support cases.

New Features and Important Notes for Cisco ISR 1000 Series, Cisco IOS XE Fuji 16.9.1

This section describes new features in Cisco IOS XE Fuji 16.9.1 that are supported on the Cisco 1000 Series ISRs

New Hardware Features in Cisco 1100 Series ISR Release 16.9.1

There are no hardware features on Cisco 1100 Series Integrated Service Routers for the Cisco IOS XE Fuji 16.9.1 release:

New Software Features in Cisco ISR 1000 Series, Cisco IOS XE Fuji 16.9.1

The following are the new software features introduced in Cisco 1000 Series Integrated Service Routers for Cisco IOS XE Fuji 16.9.1 release:

Application Awareness capability to ZBFW

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbf/configuration/xe-16-9/sec-data-zbf-xe-16-9-book/app-firewall-app-fw.html

Candidate Configuration

A temporary configuration that can be modified without changing running configuration. You can then choose when to update the device's configuration with the candidate configuration, by committing and confirming the candidate configuration.

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/169/b_169_programmability_cg/NETCONG_YANG.html

Cellular Profile Configration

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/routers/access/1100/software/configuration/xe-16-9/cisco_1100_series_swcfg_xe_16_9_x.html

Setting Up Secure Device Provisioning for Enrollment in a PKI

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_pki/configuration/xe-16-9/sec-pki-xe-16-9-book/sec-pki-xe-16-8-book_chapter_01101.html

IOS-XE: IPSec VPN with DDNS

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/xe-16-9/sec-vpn-availability-xe-16-9-book/sec-realtime-ipsec.html

Runtime Defense: ASLR -kASLR

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mob_pmipv6/configuration/xe-16-9/mob-pmipv6-xe-16-9-book/imo-pmipv6-multipath-support.html

VXLAN support on IOS-XE

For detailed information, see the following Cisco document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/xe-16-9/ce-xe-16-9-book/ce-vxlan-support.html#ref_1060834

Web User Interface

Supports an embedded Graphical User Interface based device-management tool that provides the ability to provision the device, simplifies device deployment and manageability, and enhances user experience. The following features aresupported on Web User Interface:

  • Day Zero Enhancement

  • Open Shortest Path First (OSPF)

  • Snort IPS Enhancement

Open and Resolved Caveats in Cisco IOS XE Fuji 16.9.x

All open and resolved bugs for this release are available in the Cisco Bug Search Tool.

This section contains the following topics:

Resolved Caveats-Cisco IOS XE Fuji 16.9.8

Caveat ID Number

Description

CSCvt53563

Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability

CSCvv12527

Crash in SNMP Engine process while polling chassis id in LLDP

CSCvv78028

Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability

CSCvw25564

Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability

CSCvx16081

Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability

CSCvx37176

Cisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability

CSCvx41294

High CPU usage caused by TCP Timer process

Open Caveats - Cisco IOS XE Fuji 16.9.8

There are no open caveats for this release.

Resolved Caveats-Cisco IOS XE Fuji 16.9.7

Caveat ID Number

Description

CSCuv97577

Mishandling of dsmpSession pointer causes a crash

CSCvr50406

Cisco IOS XE IOx GuestShell USB SSD Namespace Protection Privilege Escalation Vulnerabiliy

CSCvr93458

Hub router crashed when run test_mpol_policy_qos_policy_template testcase

CSCvt70639

Device reload due to tunnel flapping

CSCvt74346

Router may unexpectedly be reloaded when collecting data from the interface using telemetry/Netconf.

CSCvu19733

Evaluation of CVE-2020-11868 for IOS

CSCvv02486

Random MPLS-TE tunnels with explicit-path stay down after egress interface is bounced.

CSCvv26538

Crash due to a NULL pointer while bringing down PPPoE sessions.

CSCvv51048

Memory leak "AAA SESS ATTR"

CSCvv58056

ACLs may be partially loaded into hardware resulting in unexpected drop or permit

CSCvv84345

Cisco ASR 1000 Crash on configuring IP NAT inside source list under VRF

CSCvv88621

GETVPN: All GM will crash when Primary KS recovers its COOP role after network outage

CSCvw06719

"platform ipsec reassemble transit" tail-drops unencrypted IPv4 Fragments with specific payload

CSCvw11902

Passive FTP doesn't work with NAT

CSCvw14836

Cisco ISR router running 16.9.6 crashes authenticating crypto certificate

CSCvw34157

APPNAV CFT Crashes

CSCvw48800

unable to transfer 1500 byte IP packet when using BRI bundled Multilink

CSCvw56517

LMR Unable to hear first seconds of audio

CSCvw57860

Duplicate entries seen in MAC filter table.

Open Caveats - Cisco IOS XE Fuji 16.9.7

Caveat ID Number

Description

CSCvm05934

RSA Keysize > 2048 may cause crash

CSCvt66541

DNAC Wolverine - Crypto PKI-CRL-IO_1 process crashed in crypto_send_pki_request,crypto_crl_io_proc

CSCvu57706

CUBE fails to send calls with below error after updating IOS to 16.9.5 Error (Resource busy)

CSCvu65369

Link auto-negotiation fails between Cisco 1111-4P ES-4 switch module and Meraki MX100

CSCvv36247

Memory Leak in MallocLite / Crypto IKMP

CSCvw96723

CP process crashed while I95 driver was adding an IPC response to the receive ring

Resolved Caveats-Cisco IOS XE Fuji 16.9.6

Caveat ID Number

Description

CSCvh24730

PfRv3: Crash while Printing the Same TCA Message

CSCvi22263

Crash when IOS is adapting shaping with Adaptive QoS over DMVPN configured

CSCvi67613

Protocol type for GRE header doesn't work consistently with "cts sgt inline" enable over auto-tunnel

CSCvm40582

Crash when entering username with aaa common-criteria policy password

CSCvm82184

Memory leak under Key Manager (keyman) process

CSCvn02456

Router crashes when the calls doesn't establish after making 2 calls when we set "max-conn 2"

CSCvn33902

CPU Spike seen due to "VTEMPLATE BKG OW Process" when disconnecting PPP users 100 session/sec rate

CSCvp46937

Sync failure and hung calls observed on standby

CSCvp88044

Performance Monitor crash

CSCvq39840

CiscoFlashFile - Get-Next request takes longer time for last file on directory.

CSCvq43004

Need to check qfp ucode crash with RTCP traffic - chunk memory corruption in RTCP path

CSCvr10592

After putting caller on hold - caller call leg tx packets are increasing in CUBE

CSCvr28935

IOS crash in DHCPd Receive with Unnumbered interfaces

CSCvr66463

With CRL fetch failed, stuck at Failed to send the request. There is another request in progress

CSCvr75640

LNS crash with Segmentation fault(11) in L2TP mgmt daemon

CSCvr76593

Memory leak in CC-API_VCM and CCSIP_SPI_CONTROL

CSCvr89957

CFT crashed frequently

CSCvs00961

Memory leak under CCSIP_UDP_SOCKET / MallocLite

CSCvs04194

Process = Exec crash seen on dmap longevity testbed with clear cry sa peer several times

CSCvs08368

FlexVPN Hub Memory Leak in AAA process when IKEv2 sessions are being established

CSCvs12349

NeMo tunnel is down after cellular interface config is overwritten

CSCvs28073

IOS-XE device has memory leak in linux_iosd-imag

CSCvs29412

x509 SSH authentication incorrect UPN value selected

CSCvs42075

crash with shared-line command

CSCvs46847

RTP/SRTP interworking fails when 180 and 183 have different to-tag

CSCvs70206

CUBE DNS cache clear should be limited only to the matched connection id

CSCvs86573

Connect message is never forwarded to the calling side

CSCvs92848

Crash due to DHCP relay

CSCvt04814

CPP crash due to a long QoS Policy and Class name

CSCvt05460

IOS-XE: NAT not work for Active FTP

CSCvt06707

C1111-LTE Observe data stalling after cellular interface has been loaded with data traffic for while

CSCvt08178

CUBE crashes when SIP call is forked with active SIP KPML subscription

CSCvt10151

Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability UTD

CSCvt21373

unexpected reload in CPP ucode forced by nat 514 .

CSCvt33018

MACsec 128/256 XPN on 40g/100g, stop passing traffic for one of AN and interface link flap seen

CSCvt48480

Flow monitor is removed from interface configuration on reload

CSCvt49705

Device Crash observed with NAT and once there is traffic from outside

CSCvt51433

Process sessmgrd crash due to clear radius sg-stats command.

CSCvt52825

Memory leak in SCCP TLS Client on unexpected deregister event

CSCvt54305

Device crashed after Boost license expire

CSCvt61876

IOS-XE FW feature crashes while inspecting TCP packet with incorrect session packet state.

CSCvt65588

FlexVPN IKEv2 Tunnel route removed after establishing new IKEv2 SA to another peer

CSCvt73592

missing/corrupt IOS-XE PKSC10 format

CSCvt89337

Incorrect Source IP when resolving DNS

CSCvt91720

router see http wsma request as coming from 192.168.1.5

CSCvt99552

CUBE/LGW: Certificate Unknown Error is observed when cn-san-validate server is configured

CSCvu01690

CPUHOGS produced while executing the command - client fireall access-list ?

CSCvu04426

ISR1K/4K reloads with erroneous reload cause code

CSCvu04665

CUBE keeps sending REINVITES to peer legs leading to high CPU and eventually crashes.

CSCvu11115

IOS-XE MTP Fails to Interwork DTMF RFC2833 from Payload 100 to Payload 101

CSCvu11993

ZBFW drops selfzone generated packets from CPU to host with invalid reason in 16.12.x routers

CSCvu14823

Crash on IOS-XE router when authenticating expired IPSec peer certificate

CSCvu20470

Memory leak in STUN/MallocLite on ISRG2 CUBE/SIP GW routers leading to memory exhaustion over time.

CSCvu27953

Crash due to a segmentation fault in the "IPsec background proc" process

CSCvu34009

Calls going through T1 are rejected with "no dsps found" Analog/TDM Hairpin calls

CSCvu40093

Crash when tearing down a PPPoE client session

CSCvu50302

Survivability.tcl recovery procedure fails on Ingress GW of CCE call flow

CSCvu52218

Router crashes frequently on NBAR

CSCvu87786

CUBE Segmentation Fault @ sipSPIFreeOneSCB due to corrupt ccb

CSCvu92620

Secure key agent memory leak in 16.9 and only in 16.9

CSCvv14026

Unexpected Reload after running 'show voice dsp' command while an ISDN Call Disconnects

Open Caveats - Cisco IOS XE Fuji 16.9.6

Caveat ID Number

Description

CSCvm94970

[UniScale]Crash seen on csr1k during NAT44 hsl scale test when clearing max NAT translations

CSCvu16200

Router May Crash When a SSH session is Closed After a TACACS Configuration Change (Part 2)

CSCvu35559

Memory corruption crash when device is booting up

CSCvu57706

CUBE fails to send calls with below error after updating IOS to 16.9.5 Error (Resource busy)

CSCvv21125

Interface qlimit size decreases causing output / tail drops

CSCvv26538

Crash due to a NULL pointer while bringing down PPPoE sessions.

Resolved Caveats-Cisco IOS XE Fuji 16.9.5

Caveat ID Number

Description

CSCts28315

DHCP-pd reflect the Advertised prefix in Request message

CSCvm40582

Crash when entering username with aaa common-criteria policy password

CSCua95810

IOS PKI: trustpoint doesn't rollover regenerated RSA keys.

CSCvh57657

NAT MIB not populated when using traditional NAT

CSCvj00317

Memory leak VOIP *MallocLite*

CSCvj29514

CME: Toll fraud app not automatically trusting traffic from phones

CSCvj72294

memory leak @ CCSIP_SPI_CONTR

CSCvk37212

vEWLC:High amount of wncd memory leaks observed@crypto_encrypt_data_params_create_internal on scale

CSCvm25921

Signaling interface inactive on "show snmp mib ifmib ifindex de" on IOS 16.6.3

CSCvn76837

DMVPN Phase 2 shortcut triggered from a spoke behind PAT may end up in stuck DNX state

CSCvp27139

Async lines configuration is not retrievable over netconf

CSCvp31779

Router Running IOS-XE 16 Crashes when Stopping EPC with ACL

CSCvp47723

ISR4K CME no way audio on calls across E1/PRI, reboot resolves for sometime

CSCvp68166

CDETS to follow up fix "P-bit Sev Err Secs" increasing in patterns of 256 in SM-X-1T3/E3 in ISR4451

CSCvp69393

Router crashes after snmpget to OID related to NHRP

CSCvp72039

Ucode crash in infra with injected jumbo packet

CSCvp81958

BGL18 Alpha: Cat9x00 hitting "No connections to Shell Manager available for processing the command"

CSCvp93108

ISR4k Crash seen in skinny_unreserve_xcode_stream on 16.9

CSCvp94050

cpp_bqs_srt_yoda_csr_tree_seid_initialize:1744 is not in "placed" state

CSCvp95156

Memory leak in linux_iosd when polling mabClientIndexTest mib.

CSCvq07419

DMVPN - Loopback interface as Tunnel source; packet not hitting NAT when egressing DMVPN device

CSCvq08255

Neptune: 10G link does not come up after reload with GE-T SFP inserted in FPGE SFP slot

CSCvq10660

ASR1006-X: cpp_cp_svr: QFP0.0 CPP Driver LOCKDOWN encountered due to previous fatal error

CSCvq20936

CUBE router crashed due to memory corruption in subscription control block

CSCvq25297

BRI leased line can't come up automatically after remove/insert one side's cable

CSCvq29575

Voice gateway crash due to segmentation fault in process CCSIP_DNS

CSCvq30306

IOSXE: IOMD / TDL leak seen with tdl_response_xcode_stat_side_t

CSCvq31129

AppNav: Optimization failed with Asymmetrical traffic, VRF, FNF and NBAR

CSCvq33004

Account logon failing for both direct and indirect lite-session in 16.9.3

CSCvq33563

AFW_application_process triggers a crash with voice conference

CSCvq41777

CUBE ha crash of standby unit after call hold from video endpoint

CSCvq43550

C1111-4P doesn't restart authentication for "clear authen session" if "authen open" the port

CSCvq44603

ISR 4k Reloads Unexpectedly, Crashing in the "IP NAT Ager" Process

CSCvq49000

Supervisor reloaded due to cpp_cp_svr process crashing

CSCvq57205

Recording failures with XMF media forking and SIP preservation timer

CSCvq58144

cpp_cp_svr crash in cpp_bqs_rm_yoda_select_sch_exponent

CSCvq58237

Supervisor reload due to cpp_cp_svr crash.

CSCvq61590

ESP reload due to cpp_cp_svr exception at cpp_bqs_exponent_cnt_validate

CSCvq65366

Cube might crash when sending a SIP message over TLS

CSCvq71094

Core seen in ISR when removing the service-insertion config and committing it back

CSCvq71864

Crash after executing "show archive config differences"

CSCvq72298

Router crashed on running show policy-map interface <> output command

CSCvq74418

connectivity is broken on ingress-replication L2DP/VXLAN

CSCvq80928

CME/BE4K SNR: Crash when config changes are made while SNR call is active

CSCvq81620

Router crashes with ZBF HA sync.

CSCvq85556

QoS configuration download failed when device reloading

CSCvq90361

NHRP process crash on using same tunnel address on multiple spokes

CSCvq97906

"DHCPD Receive" process crash

CSCvq98999

ISR4451-X / 16.09.01 / Crash when IPSEC SA installation fails

CSCvq99498

Crashes when trying to bring-up / bring-down IPsec crypto session for OSPFv3

CSCvr00983

Unrecoverable Error with PVDM in 0/4 and Thule+dreamliner in 1/0 on ISR4300

CSCvr01327

incorrect Total number of translations on show ip nat translations

CSCvr01454

Punt fragment crash when receive EoGRE packets which have many fragments

CSCvr05213

Smart licensing PID and SN logs filling up the IOSRP tracelogs

CSCvr06666

ISR4K Router CPP ucode Crash due IPv4 Fragmented packets

CSCvr12455

KPML dialing fails after CSCvq20936 commit

CSCvr13213

Session unauthorized as Redirect ACL Failure. Failed attribute name POSTURE_REDIRECT.

CSCvr17169

qfp ucode crash with media monitor

CSCvr17670

ISR G3, ASR1K crash after VoIP AAA test

CSCvr24316

Router crashes due to Segmentation Fault when 'ccb' gives a NULL Pointer

CSCvr26524

Crash due to NBAR classification

CSCvr27777

ASR1k - Egress byte count is innacurate

CSCvr33415

Router may crash unexpectedly with Segmentation fault(11), Process = DSMP

CSCvr42310

Removing and adding ACL to ASR1K is causing Tracebacks and download to DP failed errors

CSCvr48349

ESP ucode crashed when running NAT with bpa (CGN)

CSCvr51860

Observed Traceback with SRTP-RTP call after hold/resume

CSCvr58230

While signalling forking the CUBE is not Sending Re-INVITE for T.38 with the Authorized header.

CSCvr58352

Prince: Keepalive pkts dropped when serial link congested with data traffic

CSCvr66754

CME-ISR4K: BLF working Inconsistently on 16.09.03 [Bad code fix was done in CSCvk49797]

CSCvr76534

ISR4k : Crash seen at Process Exec

CSCvr80706

ASR1006 tunnels are flapping CPP crash

CSCvr90926

CUBE is updating the resolved IP only after the REGISTER expires

CSCvr96597

IOS-XE crash after doing a SCEP enrollment

CSCvr99034

ISR 4K router crash during updating the OpenDNS bypass whitelist

CSCvs13960

IWAN High CPU and Memory

CSCvs29535

IWAN crash related to DCA channel

CSCvs47682

Router crashed on removing trustpoint on dspfarm profile

Open Caveats - Cisco IOS XE Fuji 16.9.5

Caveat ID Number

Description

CSCve89377

RFGW-10 Sup Moka CRC Causes Slot 3-10 Linecard Restarts

CSCvm94970

[UniScale]Crash seen on csr1k during NAT44 hsl scale test when clearing max NAT translations

CSCvn02456

Router crashes when the calls doesn't establish after making 2 calls when we set "max-conn 2"

CSCvp45666

Kernel crash in netfilter

CSCvq84990

Remove show ip/ipv6 access-list from syncfd-<ewlc-SIT>17.1-Observed Traceback followed by IOSD crash

CSCvq91046

ASR1k crash in NAT code when processing PPTP traffic

CSCvq93850

Passive FTP will fail when going over NAT and either client or server are off a SM-X-ES3

CSCvr28935

IOS crash in DHCPd Receive with Unnumbered interfaces

CSCvr75640

LNS crash with Segmentation fault(11) in L2TP mgmt daemon

CSCvr76593

Memory leak in CC-API_VCM and CCSIP_SPI_CONTROL

CSCvs00961

Memory leak under CCSIP_UDP_SOCKET / MallocLite

CSCvs04194

Process = Exec crash seen on dmap longevity testbed with clear cry sa peer several times

CSCvs10497

cpp_cp_svr fast memory leak when nbar custom protocol is configured

CSCvs60195

ASR1K ucode crash after too many locks in ZBF pair setup

Resolved Caveats-Cisco IOS XE Fuji 16.9.4

Caveat ID Number

Description

CSCvg29037

Traceback is observed during mid-call media IP and port change

CSCvk20560

491 not sent in a multiple re-invites in DO2EO scenario

CSCvk62792

IKE Fragmentation payload incorrectly marked as critical

CSCvm01420

CUBE crashes at sipSPI_ipip_vcc_CheckCodecSetType

CSCvm19399

CRL file is getting overwritten when PKI server turns up after reload

CSCvm39894

False authorizations and authentications even without radius server for dot1x/mab

CSCvm42441

Router crash when clearing ip nat translations

CSCvm45068

IOS CUBE Ent does not show 'media anti-trombone' in configuration

CSCvm51112

"clear crypto sa vrf MyVrf" triggers crash after updating pre-shared-keys

CSCvm58960

"VoIP dial-Peer <XX> is Busied out" printed in log every 2 minutes when destination is not reachable

CSCvm61279

Crash under AFW_application_process with shared-line configuration

CSCvm62419

Crash at CCB of RTPSPI at the moment of creating a disconnect timer

CSCvm65384

SNMP PKI trap are generated with wrong OID of 6999 instead of 854 per OID assignment

CSCvm74894

PKI authentication should proceed even if GetCACaps return any http failure

CSCvm76295

[SAP] syncfd fails to start on reload after upgrade to new ES image

CSCvm76452

IPSec background crash while sending SNMP trap

CSCvm76590

CUBE doesn't forward 200 OK in SRTP-RTP scenario with TCL script on Dial-peer

CSCvm86397

CUBE: Crash observed at rbuf_ooh_handler

CSCvm92019

Media Ant-Trombone does not properly handle a Re-Invite utilizing a Replaces Header

CSCvm92061

ISR1K Fails to Send Multicast Traffic When Also Receiving The Same Group From a Non-direct Source

CSCvm93603

IP change on dialer-int does not trigger a correct "local cryto entpt"in DMVPN

CSCvm94112

DSM-3-INTERNAL: Internal Error : No DSM handle provided traceback on TDM voice gateway

CSCvm94788

Device reloads when applying #client <IP> vrf Mgmt-vrf server-key 062B0C09586D590B5656390E15

CSCvm94891

Crash caused by a "TLB Modification exception" after processing a null chunk in "IP Input" process.

CSCvm99036

CUBE Crash in CCSIP_SPI_CONTROL process

CSCvm99045

IOS-XE PKI: Certificate with 4 dashes imported in trustpool gets lost after reboot

CSCvn00218

CUBE Crash in sipSPIAppAddCallInfoUI

CSCvn01681

IPv6 To/From headers malformed with TCL IVR Script and header-passing

CSCvn07614

Out of Band DTMF Events Not Passing to CUCM via SCCP When Using IOS MTP

CSCvn14737

Crash with SIP call

CSCvn15588

loss of two way audio with Skinny Phone, Line instance does not work until the next reboot.

CSCvn18500

Certificate map does not work always with UPN in SAN field

CSCvn18790

Cube crash with %SDP-3-SDP_PTR_ERROR

CSCvn27497

ISR1k ping fails with MTU value 1560

CSCvn33961

SSRC-field in RTCP gets changes to 0 when going through TRP present in the media path.

CSCvn36359

CUBE doesn't forward INVITE with "midcal-signalling passthru media-change" during a video escalation

CSCvn41467

Recommit of CSCvm99778 - eca/ewlc/qwlc/mewlc Sanity : AP join failed.

CSCvn47534

RTP/SRTP interworking fails when 18x w/o SDP is before 183 w/SDP

CSCvn53969

Memory leak in SMD process due to AAA Idle-timer not being freed

CSCvn64296

Crash when making an external call

CSCvn64397

Incorrect syntax in CRL download URL cause crash

CSCvn67837

TCP port takes 4 minutes to get released after it is closed

CSCvn71041

TACACS group server is not seen, when "transport-map type console test" is configured.

CSCvn78349

FlexVPN with password encryption - keyring aaa LIST password 6 xxxxx encrypted again upon reload

CSCvq60252

PBR works although an interface is down.

CSCvn78961

Subscribers cannot re-login due to CoA time-out (lite-sessions in routed mode)

CSCvo00968

Radius attr 32 NAS-IDENTIFIIER not sending the FQDN.

CSCvo15141

CLI "nat force-on" in voice service voip not working as expected

Open Caveats - Cisco IOS XE Fuji 16.9.4

Caveat ID Number

Description

CSCvh59431

Byte counters for physical interface and subinterface don't match

CSCvj00317

Memory leak VOIP *MallocLite*

CSCvk39056

memleak_detect script errors "can't use floating-point value as operand of -"

CSCvn76837

DMVPN Phase 2 shortcut triggered from a spoke behind PAT may end up in stuck DNX state

CSCvp45666

Kernel crash in netfilter

CSCvp65151

CPP Stuck thread when processing IPv6 traffic

CSCvp69393

Router crashes after snmpget to OID related to NHRP

CSCvq25297

BRI leased line can't come up automatically after remove/insert one side's cable

CSCvq26821

shaper of the internal crypto interface is incorrectly programmed

CSCvq30306

IOSXE: IOMD / TDL leak seen with tdl_response_xcode_stat_side_t

CSCvq31129

AppNav: Optimization failed with Asymmetrical traffic, VRF, FNF and NBAR

CSCvq31871

Router crashes with ZBF HA sync.

CSCvq43004

Need to check qfp ucode crash with RTCP traffic - chunk memory corruption in RTCP path

CSCvq50202

Class-attributes duplicated after EAP reauthen. in ISG radius proxy scenario

CSCvq57862

cable-detect command not reflecting proper status in Analog ports on IOS-XE platforms

CSCvq57996

RADIUS attribute 4 (NAS-IP-Address) is not honored

CSCvq58144

cpp_cp_svr crash in cpp_bqs_rm_yoda_select_sch_exponent

CSCvq67003

CPP microcode core file generated due to HW interrupt

CSCvq71864

Crash after executing "show archive config differences"

CSCvq72298

Router crashed on running show policy-map interface <> output command

CSCvq73575

TCP traceroute - response ICMP TTL exceeded packet dropped by ZBFW with NAT enabled

CSCvq74418

connectivity is broken on ingress-replication L2DP/VXLAN

CSCvq75610

IWAN router crash after upgrading to 16.3.8

CSCvq78529

IOSd Segmentation Fault on CTS enabled SDA fabric-edge switch stack

CSCvq81620

Router crashes with ZBF HA sync.

CSCvq85329

NEAT/CISP:authenticate SVI interface for Supplicant switch in NEAT port when spanning-tree disabled

CSCvq85913

FlexVPN with password encryption -- after MasterKey change password in profile is not working

CSCvq87063

getvpn suiteb:KS sends delete payload to gm's while scheduled rekey after primary KS dead/readded

CSCvq90361

NHRP process crash on using same tunnel address on multiple spokes

CSCvq91789

When issuing ip helper-addresss x.x.x.x command, "sh run" and "sh run all" show differently

CSCvq93830

IOS XE: RSA Keys randomly getting wiped out after rebooting

CSCvq94679

[SDA] Crash due to Segmentation fault(11), Process = ARP Input

CSCvq95517

Segmentation Fault in IP RIB Update following Virtual-Access Interface flap

CSCvq95756

IPSec SA creation failure causes crash in fman-fp-image

CSCvq97365

2 interfaces of client in different vrf connected to same vlan of server not able to get ip via dhcp

CSCvq97906

"DHCPD Receive" process crash

CSCvq98095

Gi0/0/0 interface stays up/up and LED green after cable removed

Resolved Caveats-Cisco IOS XE Fuji 16.9.3

Caveat ID Number

Description

CSCvg29037

Traceback is observed during mid-call media IP and port change

CSCvk20560

491 not sent in a multiple re-invites in DO2EO scenario

CSCvk62792

IKE Fragmentation payload incorrectly marked as critical

CSCvm01420

CUBE crashes at sipSPI_ipip_vcc_CheckCodecSetType

CSCvm19399

CRL file is getting overwritten when PKI server turns up after reload

CSCvm39894

False authorizations and authentications even without radius server for dot1x/mab

CSCvm42441

Router crash when clearing ip nat translations

CSCvm45068

IOS CUBE Ent does not show 'media anti-trombone' in configuration

CSCvm51112

"clear crypto sa vrf MyVrf" triggers crash after updating pre-shared-keys

CSCvm58960

"VoIP dial-Peer <XX> is Busied out" printed in log every 2 minutes when destination is not reachable

CSCvm61279

Crash under AFW_application_process with shared-line configuration

CSCvm62419

Crash at CCB of RTPSPI at the moment of creating a disconnect timer

CSCvm65384

SNMP PKI trap are generated with wrong OID of 6999 instead of 854 per OID assignment

CSCvm74894

PKI authentication should proceed even if GetCACaps return any http failure

CSCvm76295

[SAP] syncfd fails to start on reload after upgrade to new ES image

CSCvm76452

IPSec background crash while sending SNMP trap

CSCvm76590

CUBE doesn't forward 200 OK in SRTP-RTP scenario with TCL script on Dial-peer

CSCvm86397

CUBE: Crash observed at rbuf_ooh_handler

CSCvm92019

Media Ant-Trombone does not properly handle a Re-Invite utilizing a Replaces Header

CSCvm92061

ISR1K Fails to Send Multicast Traffic When Also Receiving The Same Group From a Non-direct Source

CSCvm93603

IP change on dialer-int does not trigger a correct "local cryto entpt"in DMVPN

CSCvm94112

DSM-3-INTERNAL: Internal Error : No DSM handle provided traceback on TDM voice gateway

CSCvm94788

Device reloads when applying #client <IP> vrf Mgmt-vrf server-key 062B0C09586D590B5656390E15

CSCvm94891

Crash caused by a "TLB Modification exception" after processing a null chunk in "IP Input" process.

CSCvm99036

CUBE Crash in CCSIP_SPI_CONTROL process

CSCvm99045

IOS-XE PKI: Certificate with 4 dashes imported in trustpool gets lost after reboot

CSCvn00218

CUBE Crash in sipSPIAppAddCallInfoUI

CSCvn01681

IPv6 To/From headers malformed with TCL IVR Script and header-passing

CSCvn07614

Out of Band DTMF Events Not Passing to CUCM via SCCP When Using IOS MTP

CSCvn14737

Crash with SIP call

CSCvn15588

loss of two way audio with Skinny Phone, Line instance does not work until the next reboot.

CSCvn18500

Certificate map does not work always with UPN in SAN field

CSCvn18790

Cube crash with %SDP-3-SDP_PTR_ERROR

CSCvn27497

ISR1k ping fails with MTU value 1560

CSCvn33961

SSRC-field in RTCP gets changes to 0 when going through TRP present in the media path.

CSCvn36359

CUBE doesn't forward INVITE with "midcal-signalling passthru media-change" during a video escalation

CSCvn41467

Recommit of CSCvm99778 - eca/ewlc/qwlc/mewlc Sanity : AP join failed.

CSCvn47534

RTP/SRTP interworking fails when 18x w/o SDP is before 183 w/SDP

CSCvn53969

Memory leak in SMD process due to AAA Idle-timer not being freed

CSCvn64296

Crash when making an external call

CSCvn64397

Incorrect syntax in CRL download URL cause crash

CSCvn67837

TCP port takes 4 minutes to get released after it is closed

CSCvn71041

TACACS group server is not seen, when "transport-map type console test" is configured.

CSCvn78349

FlexVPN with password encryption - keyring aaa LIST password 6 xxxxx encrypted again upon reload

CSCvn78961

Subscribers cannot re-login due to CoA time-out (lite-sessions in routed mode)

CSCvo00968

Radius attr 32 NAS-IDENTIFIIER not sending the FQDN.

CSCvo15141

CLI "nat force-on" in voice service voip not working as expected

Open Caveats - Cisco IOS XE Fuji 16.9.3

Caveat ID Number

Description

CSCvn56017

Crash while processing ISIS updates when DiffServ-TE is enabled

CSCvn78203

Router crashed when printing logs while constructing rekey packets (GETVPN)

CSCvo18177

IPV4 routes on the global routing table learnt via BGP refreshes upon adding or removing a VRF

CSCvo24170

Crash due to chunk corruption in ISIS code

CSCvo35606

Dialer interface shutdown caused crash of router.

CSCvo36188

Crash at NAT clear

CSCvo62122

IOS-XE Router may crash when attempting to Fragment Corrupted IPv4 Packet

CSCvo62584

DHCP discover packets were being dropped at firewall since UDP source port as 0.

Resolved Caveats-Cisco IOS XE Fuji 16.9.2

Caveat ID Number

Description

CSCvj69654

OSPF originates default route without "default-information originate"

CSCvj73544

OSPF routing loop for external route with multiple VLINKs/ABRs

CSCvj92862

Viptela-netconf returns 255 length byte-stream chars instead of actual length for OSPFV2 Key-string

CSCvj95351

OSPF SR uloop : After issuing \"clear ip ospf process\". ospf process crashed

CSCvk00446

BGP high CPU when config 256k vxlan static route

CSCvk10633

BGP crash while running show command and same time bgp peer reset

CSCvk52512

C1100 router stops forwarding traffic when doing bulk configurations on device via telnet

CSCvk35032

TSN: Maximum HSRP Groups on FPGE interface not match the HW capability

CSCvj74614

ISR1111-4P Ping issue between LAN inetrface and directly connected switch

CSCvm06270

ICMP unrechables are not sent to the client on C1117 platform

Open Caveats - Cisco IOS XE Fuji 16.9.2

Caveat ID Number

Description

CSCvm99745

Can't configure multiple CFM IP SLA with the same source MEP on ISR1k

CSCvm92061

ISR1K Fails to Send Multicast Traffic When Also Receiving The Same Group From a Non-direct Source

CSCvj12370

cpp_cp_svr crash in bqs while running QMRT test tool

CSCvk59169

Strict SID has NOT been enabled in ISIS segment-routing

CSCvm52543

Subscriber session hangs after the upgrade and reload

CSCvm78822

config-sync failure aaa authorization commands

CSCvn02047

Configuring more than 5k NAT entries cause high CPU utilization even with no traffic

Resolved Caveats - Cisco IOS XE Fuji 16.9.1

All resolved bugs for this release are available in the Cisco Bug Search Tool.

Caveat ID Number

Description

CSCvf34608

Excessive Reflector Tracelogs

CSCvh66642

uIDB leaks at the DMVPN hub if the route to remote NBMA is not learned

CSCvj70308

C1111 Gi0/0/1 not passing packets when autoneg is disabled

Open Caveats - Cisco IOS XE Fuji 16.9.1

Caveat ID Number

Description

CSCvj47652

NIM-VAB-A: Configured in ADSL2+ mode brings up the ethernet interface.

CSCvj56758

C1101-4PLTEP-EM74xx: No free dialer causes data call fails after another SIM slot is activated.

CSCvj71853

sdavc_ppdk.pack force command is not accepted during boot up

CSCvk12152

Unable to remove the ip nat inside destination command.