Cisco Cisco IOS XE 3.5E
4
Release Notes for Catalyst 3650 Series Switch, Cisco IOS XE Release 3.7.xE
OL-32621-01
New Features
•
Support is added for the following access points:
–
(supported only in Local mode)
•
VLAN tagging is supported on
•
mDNS Service Discovery Gateway Phase 3—The Service Discovery Gateway feature enables
multicast Domain Name System (mDNS) to operate across Layer 3 (L3) boundaries. In this phase,
features such as de-congestion of incoming mDNS traffic, redistribution of service withdrawal
messages, a filter criterion for learning services available on a specific interface, and the periodic
browsing of services on specific interfaces are introduced.
multicast Domain Name System (mDNS) to operate across Layer 3 (L3) boundaries. In this phase,
features such as de-congestion of incoming mDNS traffic, redistribution of service withdrawal
messages, a filter criterion for learning services available on a specific interface, and the periodic
browsing of services on specific interfaces are introduced.
•
AVC top ‘N’ users per application—This feature enables you to know network usage information
on a per user basis within an application. This feature is enabled by default and is available if AVC
is enabled.
on a per user basis within an application. This feature is enabled by default and is available if AVC
is enabled.
•
AN Infra—Autonomic networking makes network devices intelligent by introducing
self-management concepts that simplify network management for the network operator.
self-management concepts that simplify network management for the network operator.
•
CDP Bypass—The sessions are established in single and multi-host modes for IP Phones. However,
if voice VLAN and 802.1x on an interface port is enabled, then the CDP Bypass is enabled when the
host mode is set to single or multi host mode.
if voice VLAN and 802.1x on an interface port is enabled, then the CDP Bypass is enabled when the
host mode is set to single or multi host mode.
Note
By default the host mode is set to single mode in <legacy> mode and multi-authentication in the
edge mode.
edge mode.
Use the following commands to configure CDP bypass:
Switch> enable
Switch# configure terminal
Switch(config)# interface <interface-id>
Switch(config-if)# switchport mode access
Switch(config-if)# switchport voice vlan <vlan-id>
Switch(config-if)# authentication port-control auto
Switch(config-if)# authentication host-mode single | multi-host
Switch(config-if)# dot1x pae authenticator
•
VRRPv3 for IPv4 and IPv6—Enables a group of devices to form a single virtual device, to eliminate
the single point of failure, which is inherent to a static default routed environment.
the single point of failure, which is inherent to a static default routed environment.
•
WebAuth sleeping client—Allows successfully authenticated devices to stay logged in for a
configured period without reauthentication.
configured period without reauthentication.
The following CLI is added under the webauth parameter map:
sleeping-client timeout timeout-in-minutes
Restrictions:
–
There is one-to-one mapping between device MAC and username/password. Once an entry is
added to sleeping-client cache, the device/user gets policies for the user stored in the cache.
Therefore, any other user using the device also gets the same policies as the user stored in the
sleeping-client cache. The user can force normal authentication by logging out. To do that, the
user must explicitly enter the following URL:
added to sleeping-client cache, the device/user gets policies for the user stored in the cache.
Therefore, any other user using the device also gets the same policies as the user stored in the
sleeping-client cache. The user can force normal authentication by logging out. To do that, the
user must explicitly enter the following URL:
http[s]://<Virtual IP/Virtual Host>/logout.html