Cisco IOS Release 15.8(3)M3b - Release Notes for Cisco CGR1000 Series Connected Grid Routers
Available Languages
Table of Contents
Cisco IOS Release 15.8(3)M3b - Release Notes for Cisco CGR1000 Series Connected Grid Routers
Image Information and Supported Platforms
Warning about Installing the Image
PSIRT ADVISORY - Secure Boot for CGR1000
SD Card Password Protection Warning on the CGR1000
Cisco IOS Release 15.8(3)M3b - Release Notes for Cisco CGR1000 Series Connected Grid Routers
The following release notes support the Cisco IOS 15.8(3)M3b release. These release notes are updated to describe new features, limitations, troubleshooting, recommended configurations, caveats, and provide information on how to obtain support and documentation.
Contents
This publication consists of the following sections:
■
Image Information and Supported Platforms
■ Caveats
Image Information and Supported Platforms
Note : You must have a Cisco.com account to download the software.
Cisco IOS Release 15.8(3)M3b includes the following Cisco IOS images:
■System Bundled image: cgr1000-universalk9-bundle.SPA.158-3.M3b
–IOS Version: cgr1000-universalk9-mz.SPA.158-3.M3b
–Guest Operating System: cgr1000-ref-gos.img.1.8.2.1.gz
Software Downloads
The latest image file for the CGR 1000 Series Cisco IOS image is:
https://software.cisco.com/download/navigator.html?mdfid=284165761&flowid=75122
For details on the CGR1000 installation, please see:
http://www.cisco.com/c/en/us/td/docs/routers/connectedgrid/cgr1000/ios/release/notes/OL-31148-05.html#pgfId-9
Known Limitations
From 15.8(3)M2, SSH to the Guest-OS (IOx) shell is disabled by default.
The ssh access can be enabled using a hidden script for PRIV15 users by following command:
To again disable ssh access to highest privilege user again, run following command:
Major Enhancements
This section provides details on new features and functionality available in this release. Each new feature is proceeded by the platform which it applies to.
PSIRT ADVISORY - Secure Boot for CGR1000
IMPORTANT INFORMATION - PLEASE READ!
FPGA and BIOS have been signed and updated to new versions.
Going forward, for the 15.8 Release Train, this image 15.8(3)M3b is considered as the baseline. Downgrade is STRICTLY UNSUPPORTED to any versions dated prior to this release date! A bundle install to previous releases will cause an error and fail if attempted. Any manual downgrade [non bundle operations] will impair router functionality thereafter.
Note : Due to FPGA/BIOS upgrade cycles, the normal router upgrade/boot time may seem longer than usual. This will occur only on this release. Do not power cycle the device and wait until the IOS prompt is available.
For additional information on the PSIRT see the following:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot
SD Card Password Protection Warning on the CGR1000
The SD Card password location has been changed, which results in an updated FPGA upgrade. As a result, the user is requested to DISABLE the SD Card password protection just prior to the upgrade process. Once upgraded, the user is requested to re-enable the same. This is MANDATORY.
Related Documentation
The following documentation is available:
■Cisco IOS 15.8M cross-platform release notes:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/15-8m/release/notes/15-8-3-m-rel-notes.html
■All of the Cisco CGR 1000 Series Connected Grid Routers documentation can be found here:
http://www.cisco.com/c/en/us/support/routers/1000-series-connected-grid-routers/tsd-products-support-series-home.html
https://www.cisco.com/c/en/us/support/cloud-systems-management/iot-field-network-director/products-installation-and-configuration-guides-list.html
■Cisco IOx Documentation is found here:
https://www.cisco.com/c/en/us/support/cloud-systems-management/iox/tsd-products-support-series-home.html
Caveats
Caveats describe unexpected behavior in Cisco IOS releases. Caveats listed as open in a prior release are carried forward to the next release as either open or resolved.
Note : You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. If you do not have one, you can register for an account.
For more information about the Cisco Bug Search Tool, see the Bug Search Tool Help & FAQ.
Open Caveats
Reload-pending status still shows yes even after SD Card password is disabled and reloaded.
Impact : None, just display of status issue.
Description : iox hyp sched-policy 100 option does not work.
Workaround : Setting values up until 90 works.
Description : DOT11 radio hard reset after sending/receiving traffic via Wifi port on CGR1120.
Symptoms : Results in the dot11 Radio 2/1 interface going into a “down down” state until a reload of the IOS.
Resolved Caveats
The following caveats are fixed with this release:
Symptoms : In some scenarios, CMOS batteries would fail to work under extreme cold conditions and lock up SD Card password. As a solution, SD Card password has been moved to different location.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
Feedback