Cisco Cisco IOS Software Release 12.2(4)B

The following sections contain important notes about Cisco IOS Release 12.2(4)B7 that can apply to the 
Cisco 6400 aggregator.

If you currently have a Cisco 6400 broadband aggregator running Cisco IOS Release 12.2(2)B, and you 
are upgrading to Cisco IOS Release 12.2(4)B7, note the differences detailed in 

You must enable CEF before Service Selection Gateway 
(SSG) can be enabled.

You must enable CEF on the router before you can enable SSG 
functionality. If CEF is not enabled and you attempt to configure 
SSG, the following error message is displayed:

SSG : Please enable ip cef first

You can enable CEF in global configuration mode using the 
following command:

Router(config)# ip cef 

However, if required, you can disable CEF at the individual 
interface level without affecting SSG.

When a data packet is received from a user, SSG checks 
in the default network and open garden networks. If the 
check fails, the packet is checked and forwarded to the 
connected services of the user.

When a data packet is received from a user, SSG attempts to 
forward the packet by doing a longest match in the connected 
services of the user. If the packet is not destined for the connected 
services, SSG attempts to forward the packet to the configured 
default network or open garden networks.

If the user is connected to an Internet service, SSG checks if the 
destination IP address of the packet falls in the default network or 
open garden networks. If so, the packet is forwarded to the correct 
destination; otherwise, the packet is forwarded to the Internet 
service.

When SSG is enabled, there is an extra packet processing 
overhead for packets from non-SSG interfaces. Every 
packet from a non-SSG interface is intercepted and 
minimally processed by SSG. This introduces an extra 
latency for packets from non-SSG interfaces.

There is no extra packet processing latency for packets from 
non-SSG configured interfaces. Only packets from configured 
SSG interfaces are intercepted and processed by SSG. 

Domain Name System (DNS) domain lookup is done first 
in the domains configured in the open garden services. If 
a match is not found, then DNS domain lookup is done in 
the connected services of the user.

DNS domain lookup is done first in the connected services of the 
user. If a match is not found, then DNS domain lookup is done in 
the domains configured in the open garden services.