User guide

23
Release Notes for Cisco 2500 Series for Cisco IOS Release 12.0 T
78-5563-07 Rev.H0
New and Changed Information
Cisco IOS software-based, integrated firewall solution scales to meet the bandwidth and performance
requirements of any network. It also maximizes a Cisco router investment by combining multiprotocol
routing functionality with sophisticated security policy enforcement throughout the network.
The Cisco IOS Firewall feature set delivers cost-effective perimeter security packaged with advanced
features like stateful, application-based filtering, dynamic per-user authentication and authorization,
defense against network attacks, Java blocking, and real-time alerts. Because it is completely
interoperable with Cisco IOS software features including NAT, VPN tunneling protocols, Cisco Express
Forwarding (CEF), AAA extensions, Cisco encryption technology, and Cisco IOS IPSec, It is a
complete, integrated VPN solution.
IS-to-IS Multiarea Support
As IS-to-IS networks grow, they are usually organized into a backbone area (Level 2) connected to local
areas (Level 1). Routers establish Level 1 adjacencies to perform local area routing, and Level 2
adjacencies to perform routing between Level 1 areas. Previously, a Cisco router could route between
the backbone (Level 2) area and at most a single Level 1 area.
The IS-IS Multiarea Support feature supports configuration of multiple Level 1 IS-to-IS areas on a
single router. This configuration is especially useful in networks where devices support only Level 1
routing and are organized in a number of small Level 1 areas that cannot be aggregated for performance
reasons.
Layer 2 Tunneling Protocol Dial-out
The Layer 2 Tunneling Protocol (L2TP) Dial-Out feature enables L2TP Network Servers (LNSs) to
tunnel dial-out VPDN calls using L2TP as the tunneling protocol. This feature enables a centralized
network to efficiently and inexpensively establish a virtual point-to-point connection with any number
of remote offices.
Using the L2TP Dial-Out feature, Cisco routers can carry both dial-in and dial-out calls in the same
L2TP tunnels.
Previously, only dial-in VPDN calls were supported.
L2TP dial-out involves two devices: an LNS and an L2TP Access Concentrator (LAC). When the LNS
wants to perform L2TP dial-out, it negotiates an L2TP tunnel with the LAC. The LAC then places a PPP
call to the client(s) the LNS wants to dial-out to.
Multicast Routing Monitor
The Multicast Routing Monitor (MRM) feature is a management diagnostic tool that provides network
fault detection and isolation in a large multicast routing infrastructure. It is designed to notify a network
administrator of multicast routing problems in near real time.
MRM has three components that play different roles: the Manager, the Test Sender, and the Test
Receiver. The Manager can reside on the same device as the Test Sender or Test Receiver. You can test
a multicast environment using test packets (perhaps before an upcoming multicast event), or you can
monitor existing IP multicast traffic.
You create a test based on various test parameters, name the test, and start the test. The test runs in the
background and the command prompt returns. If the Test Receiver detects an error (such as packet loss
or duplicate packets), it sends an error report to the router configured as the Manager. The Manager
immediately displays the error report. Also, by issuing a certain show command, you can see the error