Cisco Evolved Programmable Network Manager 7.0.1 Release Notes

First Published: 2023-04-26

Last Modified: 2023-04-26

Introduction

This document contains the following information about Cisco Evolved Programmable Network Manager 7.0.1:

Functionalities Added

This section lists the new features/functionalities delivered in Cisco EPN Manager 7.0.1.

Device Support

Device/OS Support Added

This section lists the new support provided in Cisco EPN Manager 7.0.1. For a list of all support information, click the gear icon ⚙️ at the top right of the web GUI and choose Help > Supported Devices. For information about Cisco EPN Manager supported devices, see Supported Device Tool.

Cisco Network Convergence System 5700 Series Routers—New Operating System Support

Device Model Device OS
Cisco NCS 5700 Router IOS-XR 7.8.2
Cisco NCS 5700 Router IOS-XR 7.9.1

Cisco ASR 9000 Series Aggregation Services Routers—New Operating System Support

Device Model Device OS
Cisco ASR 9000 Router IOS-XR 7.8.2
Cisco ASR 9000 Router IOS-XR 7.9.1

Cisco Network Convergence System 540 Series Routers—New Operating System Support

Device Model Device OS
Cisco NCS 540 Router IOS-XR 7.8.2
Cisco NCS 540 Router IOS-XR 7.9.1

Cisco 8000 Series Routers—New Operating System Support

Device Model Device OS
Cisco 8000 Router IOS-XR 7.8.2
Cisco 8000 Router IOS-XR 7.9.1

Cisco Network Convergence System 5500 Series—New Operating System Support

Device Model Device OS
Cisco NCS 5500 Series IOS-XR 7.8.2
Cisco NCS 5500 Series IOS-XR 7.9.1

Cisco Network Convergence System 560 Series Routers—New Operating System Support

Device Model Device OS
Cisco NCS 560 Router IOS-XR 7.8.2
Cisco NCS 560 Router IOS-XR 7.9.1

Cisco Network Convergence System 1000 Series—New Operating System Support

Device Model Device OS
Cisco NCS 1010 Router IOS-XR 7.9.1

Supported Installation/Upgrade Paths

The following table lists the valid paths for installing/upgrading to Cisco EPN Manager 7.0.1 from previous versions.

Current Cisco EPN Manager Version Installation Path to Cisco EPN Manager 7.0.1
Cisco EPN Manager 7.0.0 Cisco EPN Manager 7.0.0 > 7.0.1

See the relevant installation guide for installation prerequisites and procedures for Cisco EPN Manager versions.

Download and Install an Update for a Non-HA Deployment

This section describes how to download and install Cisco EPN Manager 7.0.1 on top of an existing Cisco EPN Manager 7.0 installation for non-HA deployments.

Download and Install an Update for a HA Deployment

If you are using external authentication and authorization, after installation you must export the user task information to your AAA server in order to pick up the latest updates.

Synchronize the Inventory of All Devices with the Database (Existing Deployments Only)

If you are using a previous version of Cisco EPN Manager (i.e. this is not a fresh installation), perform a Sync operation on the devices. The Sync operation instructs the Cisco EPN Manager to collect the physical and logical inventory information and save it to the database.

Procedure

  1. Choose Monitor > Network Devices.
  2. Select all devices, then click Sync.

Increase Session Timeout on Servers

Follow these steps to increase the timeout on the primary and secondary servers from 30 minutes to 90 minutes:

Procedure

  1. Log in as the Linux CLI root user.
  2. Save a backup of the web.xml file that is located under /opt/CSCOlumos/tomcatSWUpdate/webapps/ROOT/WEB-INF/ by running the following command (one line):
    cp /opt/CSCOlumos/tomcatSWUpdate/webapps/ROOT/WEB-INF/web.xml /opt/CSCOlumos/tomcatSWUpdate/webapps/ROOT/WEB-INF/web.xml.orig
  3. In the web.xml file (/opt/CSCOlumos/tomcatSWUpdate/webapps/ROOT/WEBINF/web.xml), search for the following:
    <session-timeout>30</session-timeout>
  4. Change the session timeout to 90 minutes:
    <session-timeout>90</session-timeout>
  5. As the Cisco EPN Manager CLI admin user, manually stop and restart the server:
    ncs start
    ncs stop
  6. Ensure that all services are up and running by using this command:
    ncs status

Note: During the patching of the primary and secondary HA servers, both servers will be down.

Remove HA Configuration

Procedure

  1. Login to the Cisco EPN Manager GUI as a user with Administrator privileges.
  2. On the left sidebar, choose Administration > Settings > High Availability.
  3. Click HA Configuration > Remove.
  4. On the primary server, go to Administration > Settings > High Availability and confirm that the Configuration Mode field displays HA Not Configured.
  5. Log in to the health monitor page of the secondary server page and confirm that HA not Configured appears under the State tab.

Install Device Pack and Point Patch on Primary and Secondary Servers

Procedure

  1. Before you begin, make sure you have the password (authentication key) that was created when HA was enabled. You will need it to install the maintenance pack on the secondary server.
  2. Make sure no backups are in progress.
  3. On the secondary server, update the time zone using a soft link.
    ln -sf /usr/share/zoneinfo/$(grep ^clock /storedconfig/active/startupconfig | cut -d " " -f 3) /etc/localtime
    This ensures that the compliance server will be up and running on the secondary server after failover.

Install the Device Pack and Point Patch on the Primary Server

  1. From the left sidebar, choose Administration > Licenses and Software Update > Software Update.
  2. Download the latest update either using the Download from Cisco.com option via the EPNM GUI, or by directly logging in to Cisco.com from a browser. The file will have the prefix cepnm7.0-ppx- buildxxx.ubf.
  3. Depending on the location the file was saved to, select either upload from local computer or copy from the server local disk.
  4. When the file has been loaded, Click the Install button associated with EPN Manager update.
  5. Click Yes in the confirmation message pop-up window to proceed with the installation.
  6. Cisco EPN Manager will auto-restart and the Cisco EPN Manager web GUI will not be accessible for some time. (may take up to an hour)

Install Cisco EPN Manager on Secondary Servers

Procedure

  1. Log into the secondary server's web page.
  2. Enter the authentication key and click Login.
  3. Click the Software Update button.
  4. You will be transferred to a login page. Login to Cisco EPN Manager as administrator.
  5. Download the latest update either using the Download from Cisco.com option via the Cisco EPN Manager GUI, or by directly logging in to Cisco .com from a browser. The file will have the prefix cepnm7.0-ppx- buildxxx.ubf.
  6. Depending on the location the file was saved to, select either Upload from local computer or Copy from server's local disk.
  7. Once the file has been loaded, Click the Install button associated with EPN Manager update.
  8. Click Yes in the confirmation message pop-up window to proceed with the installation.
  9. Cisco EPN Manager will auto-restart and the Cisco EPN Manager web GUI will not be accessible for some time. (may take up to an hour)

Verify Installation on Secondary Server

Procedure

  1. Start an SSH session with the Cisco EPN Manager server and log in as the Cisco EPN Manager CLI admin user.
  2. Run the ncs status command to ensure that, at a minimum, the following services are up and running: Health Monitor, Database, NMS, SAM Daemon, DA Daemon, Compliance Engine. Note that for optimal Cisco EPN Manager functionality, all services should be up and running.
  3. Once the web GUI is accessible, verify the installation and version in the secondary server's HM web page. Where serverIP is the IP address or host name of the secondary server.
  4. Enter the authentication key and click Login.
  5. In the Uploaded Update Files tab, verify that the MPx ubf file (in the format cepnm.7.0-ppx- buildxxx.ubf) is listed and that the In Use status is Yes.
  6. Ensure that all services are up and running by running this command: ncs status

Enable HA and Verify HA Status

Procedure

  1. Enable High Availability.
    • Log in to the Cisco EPN Manager web GUI as a user with Administrator privileges.
    • In the left sidebar menu, choose Administration > Settings > High Availability.
    • Click HA Configuration and enter the secondary server IP address, the secondary server authentication key, and an email address to which the Cisco EPN Manager should send HA state change notifications.
    • If you are using virtual IP addressing in your HA setup (if the primary and secondary servers are in the same subnet), check the Enable Virtual IP check box and enter the one or more virtual IP addresses.
    • Click Save, then wait until the servers are synchronized.
    • Verify that the Configuration Mode is HA Enabled.
  2. Verify the primary server's HA status.
    • Click HA Status on the left.
    • Check that the Current State Mode displays Primary Active.
  3. Verify the secondary server's HA status.
    • Log in to the secondary server's web page.
    • Enter the authentication key and click Login.
    • Verify that the Current State Mode is Secondary Syncing (with a green check mark).

Important Notes

Upgrade Issues

Active Threshold Crossing Alarms (TCA)

Limitations on Carrier Ethernet Circuit Provisioning

TLS 1.2 Required for Secured Channel Communication for HTTPS and TLS

Only Transport Layer Security (TLS) 1.2 is supported for HTTPS and TLS related secured communication, for example, RADIUS EAP-TLS.

Support for TLS 1.0, TLS 1.1, and all versions of SSL has been disabled due to security vulnerabilities. This means that all peer systems and clients that transact with Cisco EPN Manager using HTTPS/TLS must support TLS 1.2. If they do not support TLS 1.2, you must upgrade these systems. Wherever possible, the Cisco EPN Manager documentation highlights the potentially affected systems. Please contact your Cisco representative for support in this regard, if necessary.

Reconciliation Report Limitations

If you have not provided a value for an attribute while provisioning a service, the provisioned value for that attribute is displayed as “Missing" in the reconciliation report. The device may have a default value for this attribute, but Cisco EPN Manager does not configure this value.

Limitations on ME 1200 Devices

The Y.1564 performance test does not work if the source/destination is a ME 1200 device.

Limitations on Editing Alarm Notification Policies

If the upgrade conditions of existing categories are different from the condition of categories on 5.1, then the conditions post upgrade will not match. As a result, policy might not be created or UI selection might not take place for the unmatched events. In this case, you should delete the upgraded policies and create a new one.

Cisco EPN Manager Bugs

Limitations on NCS 4200 Devices Running IOS-XE 16.8.1

The following functionalities do not work on NCS 4200 devices running IOS-XE 16.8.1:

Limitations on NCS540 and NCS5500 devices

NCS540 and NCS5500 device series do not support Fault-OAM, Wrap-Protection and BFD.

Use CLI Templates for Configuring PTP Commands

On ASR920 devices with software version 16.9.1, IEEE 1588-2008 BC/MC license is required to execute the 1588 PTP commands.

Configuration and Inventory Not Supported for PTP Templates

The behavior of modeling the configurations pushed through PTP templates may not work as expected because the model may not be in place for all the configurations pushed through PTP templates. Configuration/Inventory is not supported for these configurations.

Deprecation of Support for ONS 10.00.10, 10.01.00, 10.03.00

ONS 10.00.10, 10.01.00, and 10.03.00 are no longer supported on Cisco NCS 2002, 2006 and 2015 devices.

Data Center Device Lifecycle Support Only

Cisco EPN Manager provides foundation lifecycle support for UCS compute systems, CSR 1000v, and Nexus series devices but does not provide data center topology.

LINK_DOWN alarm on sub interfaces in Gig Port

LINK_DOWN alarms will not be generated when link is down on sub interfaces in a Gig Port.

Open Bugs

The table below lists the open bugs in Cisco EPN Manager Release 7.0.1 according to the following criteria:

Resolved Bugs

High-impact bugs that are likely to affect Cisco EPN Manager workflows.

Click the identifier link to view the impact and workaround for the bug in the Bug Search Tool. Use this tool to track the status of the open bugs.

Bugs Description
CSCwe73405 Vulnerabilities in code mirror 3.19.0 CVE-2020-7760
CSCwc78979 Bellatrix: Coherent DSP is giving error in response post modify operation
CSCwd12284 [GA]: UI partially or completely not displaying Coherent port if device admin status is changed
CSCwd99608 [GA]: Span loss value from XML is mismatch from Device
CSCwe10195 EPNM 7.0GA I151 Build Nessus Detects High Vulnerability Plugin Id 168497
CSCwe12754 NCS 1010 - Device manual sync is needed after enabling alarm manager settings
CSCwe21883 EPNM 6.1.1.1 Build33: Nessus Detects Vulnerabilities
CSCwe27958 Exception is thrown when creating L3VPN untagged service provision
CSCwe37602 EPNM 5.0.2.5 Build769: Nessus Detects Vulnerabilities
CSCwe38852 7.0.1 - i153B unsigned UBF #28 installation Failed
CSCwe47917 Apache Tomcat 9.0.0.M1 < 9.0.71
CSCwe62265 7.0.1 154B > server crash observed after performing y1564 test on a l2vpn service
CSCwe66098 Vulnerabilities in jackson-databind 2.13.3
CSCwe66142 Vulnerabilities in netty 4.1.72.Final
CSCwe73473 Vulnerabilities in commons-beanutils - multiple versions
CSCwe77311 EPNM_7_0_1_GA: Image activation fails for c8000v device when erase flash option is enabled
CSCwe83895 EPNM7.0.1GA 155A Build105 Nessus Detects Vulnerabilities
CSCwf00112 38 Reports Templates only getting displayed on Report Lunch Pad
CSCwe07091 Cisco Evolved Programmable Network Manager Command Injection Vulnerability
CSCwe14957 7.0 GA BnR upgrade, Reports filter criteria not updated during the upgrade for some reports.
CSCwe17035 EPNM 7.0GA I151C: Nessus Detects Vulnerabilities
CSCwe23019 Backup job can't backup db caused by hardcoded number 650 in db_size.sh
CSCwe23573 EPNM 6.0.2 - Memory leak in HMMain – CARS JNI call
CSCwe24786 setTP of LoopBack for NCS2K self-response attributes Admin and Oper state values is not-applicable
CSCwe29279 DB connection leak in inventory module
CSCwe29295 DB Connection leak from NBI-restconf
CSCwe36146 Optical legacy (non-wson) circuits are in partial discovery state
CSCwe36292 For not existing protection profile, provisioning OTN service fails with an invalid error
CSCwe42670 NCS1K4-2-QDD-C-K9: In muxponder-slice mode slice deletion failed via EPNM
CSCwe43155 Loopback interface is removed when changing sonet from protected to working with ACR configuration
CSCwe47418 Clock commands failing on NCS 5001 platform
CSCwe47889 GA > 7.0.1 > MLT throws error for access-evpl over SR
CSCwe48459 If 3*100 or 4*100 is created, epnm does not push breakout to hwmodule
CSCwe48959 When notset is executed, the dac rate does not display the default value
CSCwe48980 the boundary value of Configured TX Power/CD-MIN/CD-MAX is changed in 7.9.1
CSCwe51877 setTP of wavelength for NCS2K, in self response "tp.wavelength" gets frequency instead wavelenght
CSCwe54471 7.0/7.1 : CEM Modify leads to Partial Discovery : TdmCmPWCnPrtclEndpnt Object is missing
CSCwe56282 Flex Algorithm is failing to save in MBC under Segment Routing
CSCwe57774 Show interfaces non-dynamic support not working for IOS XR 6.9.1 onwards
CSCwe61615 REPT EVT FXFR events cause exception shown in nms-optical-fault log and GUI not showing the events
CSCwe62723 EPNM_7_0_1_GA:Observing failed to update the boot config error message while c8000v image activation
CSCwe66205 Bright ZRP: ASR9912: Controllers-->Optics0/3/0/0 --> "DAC Rate" field is not editable
CSCwe66810 7.0.1 RON SOL > epnm continues to show ots port as admin down after its made admin down/up in device
CSCwe67273 Vulnerabilities in wss4j 1.6.9
CSCwe67276 Bright ZRP: EPNM not throwing any error when same SD and SF BER values are selected on Coherent port
CSCwe67383 Bright ZRP: Configured Tx-power range in EPNM should be from -150 to 50 instead of -150 to 0
CSCwe67571 Vulnerabilities in postgresql-jdbc 9.4.1212.jre7
CSCwe68524 Vulnerabilities in mina 2.0.5, 2.0.1
CSCwe68710 Vulnerabilities in tzinfo 1.2.2
CSCwe68909 cisco-resource-physical:node with depth att will not work in case there is unmanaged device
CSCwe70051 Bright ZRP: ASR9K: Controllers-->Optics: All DAC rate showing on device should be supported on EPNM
CSCwe72263 Bright ZRP: ASR9k: "Configured Wavelength" is not getting updated properly after setting "1528773"
CSCwe73143 loopback seeing to Line is not updated to device
CSCwe73797 Missing i18n - deviceTrend - device health dashboard
CSCwe73888 NCS1010 OLC span loss missing data from 7.9.1 , with respect to 7.7.1
CSCwe73958 OSPF link down , is not making physical link down in EPNM for NCS1010
CSCwe76131 range validation is still shown an older value in Configured Tx Power/CD-Min/CD-MAX
CSCwe76315 OCHCC Prov Wizard doesn't list out all the client ports available
CSCwe81224 Breakout info is not updated in EPNM if it is created in Device
CSCwe81345 NCS1K4: Inventory status not updated after physically removing optics from the card
CSCwe81394 Dac rate , device accepts , EPNM not accpting ,an error messge for not accepting is also not clear
CSCwe83247 Bright ZRP: Error message still shows the old value range for configured Tx Power
CSCwe91017 "Alarms and Events" under Administration -> System Settings comes empty
CSCwc64497 6.1 Install Guide update
CSCwd19417 In MPLS-LDP "Downstream Max Label" accepts value only till 32768 while device accepts till 1048575
CSCwd62509 XSS-Vulnerability in Alaram Policies Page
CSCwe00397 Weekly Schedule Report's Every field has issue with max values in both GA & LA
CSCwe19705 CE-Update Scenario is failing for EVPN service - 7.0GA | 151C BUILD#595
CSCwe36308 While creating circuit via restconf, circuit creation failes when 'Label' parameter is not provided
CSCwe46388 For OTDR Scan with invalid distance, should be 400 Bad Request but getting 500 error
CSCwe56299 In MPLS-LDP "Downstream Max Label" accepts value only till 32768 while device accepts till 40960
CSCwe62189 In setTP Fiber attributes validation, error code should be 400 Bad Request but getting 500 error
CSCwe62196 In setTP NNI controller validation, instead 400 Bad Request getting 500 & also error tag changed
CSCwe62972 EPN - install - certs config not initialized
CSCwe69943 Device is allowed to set CD-MIN/CD-MAX to 0, however EPNM throws a warning
CSCwd90369 GA:Localization : In the Opticalphysical/Ethernet PM Dashboard, PM counters titles not localized
CSCwe36277 Sensors graphs - value in tooltip is rounded & trimmed to 3 numbers after digit

Get Information about Cisco EPN Manager Bugs

Use the Bug Search tool (BST) to get the latest information about Cisco EPN Manager bugs. BST allows partners and customers to search for software bugs based on product, release, and keyword, and it aggregates key data such as bug details, product, and version.

Cisco EPN Manager bugs may be caused by defects in a device's platform or operating system. In such cases, the Cisco EPN Manager bug will be resolved when the hardware/operating system bug is resolved.

Procedure

  1. Log into the Bug Search Tool.
  2. To list all bugs for this version, click the Select from list hyperlink that is next to the Product field and select the product.
    • Choose Cloud and Systems Management > Routing and Switching Management > Cisco Evolved Programmable Network (EPN) Manager and then select the required product version.
    • When the results are displayed, use the filter and sort tools to find bugs according to their status, severity, how recently they were modified, if any support cases are associated with them, and so forth.

Note: If you do not have a Cisco.com username and password, you can register for them at http://tools.cisco.com/RPF/register/register.do

Accessibility Features

For a list of accessibility features in Cisco EPN Manager 7.0.1, contact accessibility@cisco.com.

All product documents are accessible. If you would like to receive the product documentation in audio format, braille, or large print, contact accessibility@cisco.com.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product Documentation.

Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.


File Info : application/pdf, 17 Pages, 289.19KB

PDF preview unavailable. Download the PDF instead.

bk cisco evolved programmable network manager 7 0 1 release notes

References

DITA Open Toolkit XEP 4.30.961; modified using iText 2.1.7 by 1T3XT

Related Documents

Preview Cisco Crosswork Workflow Manager Device Onboarding Guide
A comprehensive guide to Cisco Crosswork Workflow Manager's Device Onboarding package, detailing the process of automating software image installation and configuration for network devices using Zero-Touch Provisioning (ZTP).
Preview Upgrading Cisco CBR Series Converged Broadband Routers for Cisco IOS XE Release 3.18SP
This document provides detailed instructions for upgrading Cisco CBR Series Converged Broadband Routers to Cisco IOS XE Release 3.18SP. It covers software and firmware upgrades, including specific procedures for consolidated and subpackage modes, as well as firmware verification and troubleshooting.
Preview Cisco Crosswork Workflow Manager Solutions 2.0 Device Onboarding Guide
A comprehensive guide to onboarding network devices using Cisco Crosswork Workflow Manager Solutions 2.0. This document details the Device Onboarding package, its prerequisites, and the step-by-step process for configuring and deploying network devices.
Preview Cisco NCS 5500 Series Routers Release Notes 6.1.2 | New Features & Updates
Discover the latest features, hardware support, and important updates for Cisco NCS 5500 Series Routers with Cisco IOS XR Release 6.1.2. Essential reading for network professionals.
Preview Cisco IOS XRd and IOS XR Release 25.1.2 Release Notes
This document provides release notes for Cisco IOS XRd and IOS XR Release 25.1.2, detailing supported deployments, related resources, and legal information. It is an extended maintenance release with no new software features or hardware.
Preview Cisco Catalyst 9300 Switches: Stacking and High Availability Configuration Guide (Cisco IOS XE Cupertino 17.8.x)
This guide provides detailed instructions for configuring stacking and high availability features on Cisco Catalyst 9300 Series Switches running Cisco IOS XE Cupertino 17.8.x. It covers essential topics such as managing switch stacks, implementing nonstop forwarding with stateful switchover (NSF/SSO), graceful insertion and removal (GIR), and 1:1 redundancy for enhanced network resilience and uptime.
Preview Release Notes for Cisco Catalyst 3650 Series Switch, Cisco IOS XE 3.6.xE
This document provides release notes for Cisco IOS XE software version 3.6.xE for the Catalyst 3650 Series Switch, detailing new features, enhancements, and important updates for enterprise network management.
Preview Cisco IOS XR Release 24.1.1: Release Notes for ASR 9000 Series Routers
Comprehensive release notes for Cisco IOS XR Software Release 24.1.1, detailing new features, enhancements, behavior changes, and supported hardware for the Cisco ASR 9000 Series Routers, aiming to improve network agility and automation.