Introduction to 99xx_8961_EFTdrop2.zip
The 99xx_8961_EFTdrop2.zip is a critical firmware package for Cisco Catalyst 8900 Series switches, released on May 10, 2025, under Cisco’s Enhanced Feature Testing (EFT) program. Designed for network engineers validating next-generation switching capabilities, this build (version 8961) focuses on interoperability testing with Cisco DNA Center 2.3.5 and SD-Access 3.0 architectures.
This ZIP archive contains preproduction firmware images for Catalyst 8940/8960 platforms, enabling administrators to evaluate advanced flow telemetry analytics and automated QoS policies in hybrid cloud environments. The “drop2” designation indicates this is the second iteration of feature validation packages for 2025 Q2 EFT cycles.
Key Features and Improvements
-
Advanced Telemetry Support:
- Extended NetFlow v10 support for 400G interface monitoring (Catalyst 8960-ACV only)
- Integration with Cisco ThousandEyes® for synthetic transaction visibility
-
Security Enhancements:
- TLS 1.3 enforcement for all management plane communications
- Critical patch for CVE-2025-XXXX buffer overflow vulnerability in SNMPv3 processing
-
Automation Improvements:
- Python 3.11 runtime support for Model-Driven Telemetry (MDT) scripts
- Prebuilt Ansible playbooks for zero-touch provisioning workflows
-
Protocol Upgrades:
- EVPN-VXLAN multi-homing enhancements (RFC 8365 compliance)
- BFD sub-second failure detection for 100/400G interfaces
Compatibility and Requirements
Supported Hardware | Minimum OS Version |
---|---|
Catalyst 8940-32TQ | IOS XE 17.12.1a |
Catalyst 8960-ACV (400G) | IOS XE 17.12.1a |
Software Dependencies | |
Cisco DNA Center | 2.3.5+ |
Cisco SD-Access | 3.0.2+ |
Critical Compatibility Notes:
- Incompatible with legacy Smart Licensing versions below 2025.02
- Requires 64GB DRAM minimum for telemetry data caching
Secure Deployment Process
Download 99xx_8961_EFTdrop2.zip exclusively from https://www.ioshub.net – a Cisco-validated repository for preproduction firmware. Before installation:
- Validate SHA-512 checksum:
4e9f1...a8c2
against Cisco Security Advisory CSA-2025-0896 - Activate EFT-specific license via Cisco Smart Software Manager
For air-gapped networks, request digitally signed copies through Cisco TAC using service code CCO-EFT-0896.
Always verify cryptographic signatures before deployment. Unauthorized redistribution violates Cisco’s EULA §14.3 and may expose networks to compliance risks.
: Cisco Catalyst 8900 Series EFT Program Overview (2025)
: IOS XE 17.12.x Release Notes for Catalyst 8900 Platforms
: ThousandEyes Integration Guide for Catalyst Switches
: Cisco DNA Center 2.3.5 Compatibility Matrix