What's new
This section lists the changes that were made in this release.
Topic |
Location |
|---|---|
| TLS profile update: TLS 1.2 renegotiation disabled. | TLS profiles |
| Accounting updated for Linux users with UID <1500 | Accounting |
| Disk encryption support on 7220 IXR-H2/H3/H4 and 7220 IXR-D4/D5 platforms | Disk encryption |
| MACsec in WAN mode on single-tag subinterfaces on 7250 IXR Gen 2c+ and 7250 IXR Gen 3 platforms. | MACsec on subinterfaces |
| MACsec in WAN mode on single-tag LAG subinterfaces on 7250 IXR Gen 2c+ and 7250 IXR Gen 3 (excluding mixed systems). | MACsec on LAG subinterfaces |
| Cut-through switching on 7220 IXR-H4, 7220 IXR-H4-32D, and 7220 IXR-H5 platforms. | Switching modes for Ethernet frame forwarding |
| Configurable SSH cryptographic algorithms (cipher, MAC, key exchange, and host key) per SSH server instance | Configuring SSH cryptographic algorithms |
| Maximum number of SSH connections | Configuring the maximum number of SSH connections |
| Configure SSH rekey threshold | Configuring SSH rekey limits |
| Changing default account passwords | Changing default account passwords |
Disabling the default admin and
linuxadmin user accounts |
Disabling the admin and linuxadmin user accounts |
Standard Timetra-SRL-AV-Pair RADIUS VSA (attribute
250) for authorization and command accounting |
Authorization using a RADIUS server; Configuring RADIUS accounting |
Layer 3 micro-segmentation on the 7220 IXR-D4 (td4-mode
2) |
Datapath resource management; Changing datapath resource management settings |
| In gNMI ON_CHANGE subscriptions, SR Linux supports create event notifications that include key leafs to provide differentiation between create events and modify events. | Configuring gNMI ON_CHANGE key leaf inclusion in create notifications |
| Instance names for static routes | Configuring static routes (Legacy model) |
| Instance names for aggregate routes | Configuring aggregate routes |
| Encapsulation of MPLS traffic over GRE tunnels using a static route | MPLS-over-GRE tunnel next hops |
| Rewriting of the DSCP value in MPLS-over-GRE and MPLS-over-UDP packets | DSCP marking for MPLS-over-GRE traffic |
| AWR/ISSU support for static route next-hop CPE check | CPE check |
| LEM resource monitoring enhancements | Displaying LEM resource information |
| IPv6 FIB compression | IPv4/IPv6 FIB LEM optimization |
| Static-route based IPv6 GUE (IP-UDP) tunnel encapsulation | New model for configuring static routes |
| Display system warnings | Displaying configuration details |