Table Of ContentCisco IWAN Application on APIC-EM Release
Notes, Release 1.6.1
First Published: 2018-03-01
Last Modified: 2018-03-08
Cisco IWAN Application on APIC-EM Release Notes, Release
1.6.1
ThesereleasenotesprovideasummaryofthecomponentsinCiscoIntelligentWideAreaNetworkApplication
(CiscoIWANApp),Release1.6.1.
CiscoIWANApp(ortheCiscoIWANonAPIC-EM)extendsSoftwareDefinedNetworkingtothebranch
withanapplication-centricapproachbasedonbusinesspolicyandapplicationrules.ThisprovidesITcentralized
managementwithdistributedenforcementacrossthenetwork.
CiscoIWANAppautomatesandorchestratesCiscoIWANdeploymentswithanintuitivebrowser-based
GUI.AnewroutercanbeprovisionedinamatterofminuteswithoutanyknowledgeoftheCommandLine
Interface(CLI).BusinessprioritiesaretranslatedintonetworkpoliciesbasedonCiscobestpracticesand
validateddesigns.CiscoIWANAppdramaticallyreducesthetimerequiredforconfiguringadvancednetwork
servicesthroughtheuseofautomationandsimple,predefinedworkflows.
CiscoIWANAppoffersaturnkeysolutionthatallowsITtogetoutoftheweedsofmanaginglow-level
semanticslikeVPN,QoS,optimization,ACLpolicies.Instead,ITcanfocusonthebiggerpicture,suchas,
aligningnetworkresourceswithbusinessprioritiesanddeliveringoutstandinguserexperiencethatresultin
betterbusinessoutcomes.
CiscoIWANAppincludesthefollowingfeatures:
•Zerotouchprovisioning—Plugandplayforremotedeviceswithoutuserintervention
•Simpleworkflows—Usecasedrivenwithstep-by-stepandsite-to-siteprovisioning
•Businesslevelpolicies—Rulesdrivenetworkactions,abstractionofunderlyingpolicyconfiguration
•Networkmonitoring—Status,alertingofnetworkissues
What’s New in Cisco IWAN App Release 1.6.1
ThefollowingfeaturesareavailableinCiscoIWANAppRelease1.6.1.
Feature Name Description
Portrange/IPsubnetbasedcustomapp AbilitytospecifyaportrangeoranIPsubnetwhen
defininganewNBAR2customapplication.
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
1
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Separation of Cisco IWAN Application from APIC-EM Releases
Feature Name Description
NATIP/Customportenhancement AbilitytospecifycustomNATport,andtomodify
NATIPandportsettingsafterprovisioning(DayN).
Deleteserviceprovideraddresspools AbilitytodeleteIPaddresspoolswhentheyarenot
usedonanyhuborspokerouter.
MCselectiononbranchsites Abilitytoselectmastercontroller(MC)deviceduring
provisioning(Day0)ofabranchsitewithtworouters.
SupportforCiscoISR900SeriesRouters,Cisco1100 SupportaddedforCisco900SeriesIndustrialRouters,
SeriesISR,andCiscoISR4221Router Cisco1100SeriesIntegratedServicesRouter,and
Cisco4221IntegratedServicesRouteratbranchsites.
Separation of Cisco IWAN Application from APIC-EM Releases
CiscoIWANapprelease1.3.2introducedanewapproachtoIWANappreleases.Beginningwiththisrelease:
•TheIWANapphasbeendecoupledfromtheAPIC-EMreleaseschedule,andfromtheAPIC-EM
installationandupgradeprocesses.
•IWANappreleasenumberingisnowindependentofAPIC-EMreleasenumbering.
•DownloadtheIWANappseparatelyfromAPIC-EM,theninstallorupgradetheappusingtheAPIC-EM
“AppManagement”page.SeeCiscoIWANApplicationonCiscoAPIC-EMUserGuide,Release1.6.1
fordetailsaboutdeployment.
Integral Part of APIC-EM
WhilethereleasescheduleandinstallationarenowhandledseparatelyfromAPIC-EM,CiscoIWANApp
continuestobeanintegralpartofAPIC-EMandcontinuestoappearintheAPIC-EMGUIasbefore.
SystemrequirementsfortheAPIC-EMcontinuetoapplytoCiscoIWANApp.
SeeCiscoIWANAppSoftwareCompatibilityinCiscoIWANAppReleaseforinformationaboutthesoftware
compatiblewithCiscoIWANAppreleases,includingAPIC-EMandCiscoPrimeInfrastructureversions.
Supported Cisco Platforms and Software Releases in Cisco IWAN App Release
1.6.1
CiscoIWANAppRelease1.6.1supportsthefollowingCiscorouterplatformsandsoftwarereleases.
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
2
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Supported Cisco Platforms and Software Releases in Cisco IWAN App Release 1.6.1
Platform Models Software Release
Cisco4000SeriesIntegrated ISR4221 CiscoIOSXEEverest16.6.1
ServicesRouters ISR4321 CiscoIOSXEEverest16.6.21
ISR4331 CiscoIOSXEDenali16.3.5
ISR4351
ISR4431
ISR4451-X
CiscoASR1000Series ASR1001 CiscoIOSXEEverest16.6.1
AggregationServicesRouters
ASR1001-X CiscoIOSXEEverest16.6.2
ASR1001-HX CiscoIOSXEDenali16.3.5
ASR1002
ASR1002-X
ASR1002-HX
ASR1004
ASR1006
ASR1006-X
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
3
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Supported Cisco Platforms and Software Releases in Cisco IWAN App Release 1.6.1
Platform Models Software Release
Cisco1100SeriesIntegrated CiscoIOSXEEverest16.6.2
ServicesRouters
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
4
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Supported Cisco Platforms and Software Releases in Cisco IWAN App Release 1.6.1
Platform Models Software Release
C1111-4P
C1111-4PLTEEA
C1111-4PLTELA
C1111-4PWA
C1111-4PWB
C1111-4PWD
C1111-4PWE
C1111-4PWF
C1111-4PWH
C1111-4PWN
C1111-4PWQ
C1111-4PWR
C1111-4PWZ
C1111-8P
C1111-8PLTEEA
C1111-8PLTEEAWA
C1111-8PLTEEAWB
C1111-8PLTEEAWE
C1111-8PLTEEAWR
C1111-8PLTELA
C1111-8PLTELAWD
C1111-8PLTELAWF
C1111-8PLTELAWH
C1111-8PLTELAWN
C1111-8PLTELAWQ
C1111-8PLTELAWZ
C1111-8PWA
C1111-8PWB
C1111-8PWE
C1111-8PWF
C1111-8PWH
C1111-8PWN
C1111-8PWQ
C1111-8PWR
C1111-8PWZ
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
5
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Supported Cisco Platforms and Software Releases in Cisco IWAN App Release 1.6.1
Platform Models Software Release
C1116-4P
C1116-4PLTEEA
C1116-4PLTEEAWE
C1116-4PWE
C1117-4P
C1117-4PLTEEA
C1117-4PLTEEAWA
C1117-4PLTEEAWE
C1117-4PLTELA
C1117-4PLTELAWZ
C1117-4PM
C1117-4PMLTEEA
C1117-4PMLTEEAWE
C1117-4PMWE
C1117-4PWA
C1117-4PWE
C1117-4PWZ
VirtualRouters CloudServicesRouter1000V CiscoIOSXEEverest16.6.1
ENCS5400(ISRv) CiscoIOSXEEverest16.6.2
CiscoIOSXEDenali16.3.5
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
6
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Supported Cisco Platforms and Software Releases in Cisco IWAN App Release 1.6.1
Platform Models Software Release
CiscoIntegratedServicesRouters C891-24X-K9 CiscoIOS15.7(3)M
Generation2(ISR-G2)Series
C891F-K9
Routers—800Series
C891FW-A-K9
C891FW-E-K9
C892-FSP-K9
C896VAG-LTE-GA-K9
C896VA-K9
C897VAB-K9
C897VAG-LTE-GA-K9
C897VAG-LTE-LA-K9
C897VAGW-LTE-GAEK9
C897VA-K9
C897VAMG-LTE-GA-K9
C897VA-M-K9
C897VAM-W-E-K9
C897VAW-A-K9
C897VAW-E-K9
C898EAG-LTE-GA-K9
C898EAG-LTE-LA-K9
C898EA-K9
C899G-LTE-GA-K9
C899G-LTE-JP-K9
C899G-LTE-LA-K9
C899G-LTE-NA-K9
C899G-LTE-ST-K9
C899G-LTE-VZ-K9
CiscoIntegratedServicesRouters ISR1921 CiscoIOS15.7(3)M
Generation2(ISR-G2)Series
ISR1941
Routers—1900Series
CiscoIntegratedServicesRouters ISR2901 CiscoIOS15.7(3)M
Generation2(ISR-G2)Series
ISR2911
Routers—2900Series
ISR2921
ISR2951
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
7
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Limitations and Restrictions
Platform Models Software Release
CiscoIntegratedServicesRouters ISR3925 CiscoIOS15.7(3)M
Generation2(ISR-G2)Series
ISR3925E
Routers—3900Series
ISR3945
ISR3945-E
1 AppliestoCiscoISR4221Router
Limitations and Restrictions
Note ItisrecommendedthatyouupgradetoNBAR2AdvancedProtocolPack27.0.0onyourdeviceswiththe
recommendedlatestCiscoIOSandCiscoIOSXEsoftwarereleases.
WhenusingEasyQoSandCiscoIWANApponAPIC-EM,youmustadheretothefollowing:
•Thenetworksegmentsforeachsolutionaredisjoint.AdevicecontrolledbytheIWANsolutioncannot
simultaneouslybecontrolledbytheEasyQoSsolution.ApplicationareofglobalscopeacrossAPIC-EM
andassuch,customapplicationscreatedinEasyQoSapplicationmayshowupintheIWANsolutionif
applicabletotheWANsolution.
•YoumustcompletethefollowingtasksondevicesclaimedbyEasyQoS,tobringthemintheIWAN
workflow:
◦QoSpolicytagsshouldberemovedpriortobeingclaimed
◦ThedevicemustbecleanedofremainingEasyQoSpolicyorconfigurationandthedevicemust
broughttogreenfieldstate.
Hub Router EIGRP Process Downtime During Upgrade
WhenupgradingtoCiscoIWANApp1.6.1,afterclickingtheUpgradeNetworkbutton(arequiredstepin
theupgradeprocess),CiscoIWANApppushesaseriesofcommandstothehubBRrouters,whichtriggers
routingtableupdatesfromhubrouterstobranchsiterouters.Duringthisupdateandresynchronizationprocess,
thehubrouter’sEIGRPprocessisinactive.ThelengthofthisEIGRPdowntimedependsonthenumberof
branchsiteroutersundergoingupdate,andmaybeseveralminutes.
Thisoccursonlywhenoperatinganetworkwithaddressingwithinoneofthefollowingsubnets:10.0.0.0/8,
172.16.0.0/12,192.168.0.0/16.
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
8
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
Caveats
Caveats
Open Caveats in Cisco IWAN App Release 1.6.1
Caveat ID Number Description
CSCvg24770 TransitHubprovisioningfailed-InternalError
CSCvg16446 Cannotrecoverfromcustomerconfigurationfailure
CSCvc46613 Spokeprovisionfailureduetomultipleusersaredefinedandthenotallofthemare
tried
CSCvb95745 Unabletoaddadevicethatwasdeletedwiththesitethatfailedatbusinesspolicy
configphase
CSCve03315 CustomConfig:Repeatedappearanceofcustom-templateinformview
CSCvg42688 IWANApp1.6andPrime3.2.1:IssuesloadingQueueDropchartswhenappsarein
Criticalhealth
CSCvg46690 PnP1.6.0:ImageupgradefailsforDualRouterdeploymentviaIWANApp
Resolved Caveats in Cisco IWAN App Release 1.6.1
Caveat ID Number Description
CSCvh01474 Changespokemetricunderroute-mapsforPOPPreference
CSCvg31669 HUBFailedwith“InternalErrorinIWAN”afterupgradingto1.6iftheMPLS-BRis
notreachable
CSCvg28133 HubprovisioningfailedasvalidationallowedVRFconfigurationonHUBBorder
RouterLANinterface
CSCvg25786 SCALE:Twobranchesstuckin“In-Progress”whencreatingnewcustomapplication
CSCvh63640 PromptuserbeforepushingRFC1918routingchangesinIWANAppversionupgrades
CSCvh63657 EnsureDCroutingprefixesareleakedincertainPfRtopologiestoavoidblackhole
CSCvh63681 EnableproperMPOLPTQoSchecksforHubBRdeployment
CSCvh61137 Redistributemetricchangedto20000onallHubBR'safterupgrade
CSCvh01474 Changespokemetricunderroute-mapsforUSI
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
9
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
System Requirements
System Requirements
ThefollowingsectionsdescribethesystemrequirementsforCiscoIWANApp:
Hardware Requirements
CiscoIWANApprequiresaserverwiththefollowingcapabilities/software:
•Server—64-bitx86
•CPU—6(2.4GHz)
•RAM—32GB
Note:Foramulti-hosthardwaredeployment(twoorthreehosts),32GBRAMissufficientforeachhost.
•Storage—500Gigabytesorpreferably1TerabyteHDD
•NetworkAdapter—1x
•200MBpsDiskI/Ospeed
Software Requirements
ForCiscoIWANonAPIC-EM,thefollowingsoftwareisrequiredontheserver:
•Browser
◦Chrome(version50.0orhigher)
◦MozillaFirefox(version46.0orhigher)
Cisco IWAN App Software Compatibility in Cisco IWAN App Release
ThefollowingtabledescribescompatibleandrecommendedsoftwareversionsforoperationwiththeCisco
IWANapplication,runningonCiscoAPIC-EM.
Cisco IWAN Application on APIC-EM Release Notes, Release 1.6.1
10
Description:Cisco IWAN App offers a turnkey solution that allows IT to get out of the weeds of managing low-level semantics like VPN Ability to specify a port range or an IP subnet when defining a new . This occurs only when operating a network with addressing within one of the following subnets: 10.0.0.0/8,.
