IOS-XE version recommendation

[CSCO10662744_2]

Hi all,

We’re looking at 3.6.4, 3.6.6, and Denali-16.3.2.

Mainly need a stable network to support normal L2 switching, and 802.1x/ISE.
If we can also get ERSPAN, that would be a plus, but not a requirement.

3.6.4 is listed as the recommended version in ISE 2.1’s compatibility matrix:
http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/compatibility/ise_sdt.html#pgfId-55038

3.6.6 is listed as the recommended version on CCO download link:
https://software.cisco.com/download/release.html?mdfid=284455428&softwareid=282046477&release=3.6.6E&relind=AVAILABLE&rellifecycle=MD&reltype=latest

Denali-16.3.2 would provide ERSPAN functionality, because N9K’s don’t support traditional RSPAN.
Any idea when the secure access BU will start testing & certification for the Denali-16 train?

Besides the ISE deployment, we’re also trying to address a high-CPU issue on some of the Cat3K’s, and TAC is recommending 3.6.6, but the support engineer has no insight into the ISE deployment.
Some other folks reported having the same high CPU behavior:
https://supportforums.cisco.com/discussion/12321066/cisco-3850x-very-high-cpu-stack-mgr-process

TIA

[Leo Laohoo]

Denali is the way to go.  Cisco will no longer be releasing any maintenance releases for the 3.X range.  

[CSCO10662744_2]

Thanks Leo.

Have you (or anyone else) run the Denali train w/ success, especially in 802.1x/ISE deployments?

Again we're very interested in Denali just for its ERSPAN support, but we need a stable network that can support ISE as primary objective.

[jedavis]

I have a couple of dozen WS-C3850-12XS-E switches that are being deployed as distribution/aggregation switches.  I opened a TAC case asking about the readiness of Denali and I just got the standard "the suggested images are still pointing to the current Nova images 03.x.x" response.  I would be interested in any feedback anyone has on this version.  As I said, I am just performing basic switching and routing in this deployment.  Any opinions from someone with experience with the Denali versions is appreciated.

TIA! - Jeff

[CSCO10662744_2]

We went w/ 3.6.6 to be safe, but I too, am interested in knowing how stable Denali is, from anyone who's deployed it in production.