Cisco Cisco IOS Software Release 15.2(1)T Aggregierten Daten
![Cisco](https://files.manualsbrain.com/attachments/7380d0050044647c30f5c24bbbf5d0c0b6d9bb84/common/fit/150/50/faa183d287233c52228cfea3dbc2a127fe780f60564fcb0955d9c3d1cd23/brand_logo.png)
Product Bulletin
© 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 1 of 9
Cisco IOS Software Release 15.2(1)T New
Features and Hardware Support
Features and Hardware Support
Product Bulletin No. 682635
Cisco IOS
®
Software Release 15.2(1)T provides the latest innovations for the world’s most demanding networks,
designed for the borderless network to provide a unified architecture that is easier to operate, more reliable, and
more secure.
New features are fully integrated with extensive capabilities already available in Cisco IOS Software Release
15.1(4)M to provide solutions for enterprise, service provider, and smart-grid networks. New features include:
●
VPN encryption acceleration support
●
Security enhancements including more IPv6 VPN functionality
●
Cisco
®
Unified Communications Border Element (CUBE) enhancements
●
Deep packet inspection capabilities for IPv6 with enhanced Network Based Application Recognition
(NBAR)
Cisco IOS Software 15.2(1)T supports Cisco 800 Series Routers; Cisco 1900, 2900, and 3900 Series Integrated
Services Routers; the Cisco 1861E Integrated Services Router; and the Cisco CGR 2010 Connected Grid Router.
New Features and Hardware Support
ISM-VPN for VPN Acceleration
Cisco IOS Software Release 15.2(1)T will provide support for the Integrated Services Module (ISM) for VPN
acceleration. ISM-VPN offloads crypto processing to the dedicated hardware to free up the house router resources
for other Cisco IOS features such as firewall, quality of service (QoS), or Network Address translation.
The module offers plug-and-play capability, allowing quick and easy installation. It provides up to 3 to 5 times
throughput improvement over the onboard crypto engine on ISR-G2 and supports hardware acceleration on
advanced cryptographic algorithms, such as Internet Key Exchange Version 2 (IKEv2), and Suite B.
VPN and Security Enhancements
Group Member Removal and Policy Replacement for Group Encrypted Transport VPN
The group member (GM) removal feature facilitates efficient removal of unwanted GMs from the network without
modifying the existing network operation. Network operators can remove a group member instantly from the key
server (KS). This action instructs the key server to send a message to all group members to redownload policies
and rejoin the group if they are allowed. This causes the unauthenticated group member to be rejected from the
group as per the security policy.
Policy replacement for group encrypted transport VPN (GETVPN) creates a new EXEC command to allow the KS
to trigger rekey on demand after the configuration changes are completes. GETVPN policy changes alone will not
trigger rekey anymore. When customers change the policy and exit from config mode, a syslog message will be