UPC DOCSIS training

CMTS and CM configurations

CNO Access Engineering
6 February 2012, Schiphol-Rijk
Agenda
• Introduction
– Signal transmission
– Provisioning flow

• Docsis protocol
– Docsis management traffic
– QoS
– Baseline privacy
– Load balancing

• Docsis 3.0
– I-CMTS and M-CMTS
– Channel Bonding

• CMTS and CM configurations

– Arris, Casa and Cisco CMTS
– Cable modem bootfile

2
HFC Segmentation
• Typically between 4 and 8 DS channels per SG
• Typically between 1 and 4 US channels per SG
• Typical US channel
• 16QAM @ 6.4MHz
• 64QAM @ 3.2MHz 52/65MHz return path

1 down : 2 up segments

• In general avoid more than 8 4 x DS

8MHz
ATDMA
16QAM
6.4MHz
ATDMA
16QAM
6.4MHz
TDMA-ATDMA
16/64QAM
3.2MHz
TDMA-ATDMA
16/64QAM
3.2MHz
ATDMA
16QAM
6.4MHz
ATDMA
16QAM
6.4MHz
TDMA-ATDMA
16/64QAM
3.2MHz
TDMA-ATDMA
16/64QAM
3.2MHz

US channels per MAC f11, f12, f13, f14 f1 f2 f3 f4 f1 f2 f3 f4

domain 

1200 1200
HP HP

FN1 FN2
3
CMTS and CM details
• CMTS information of interest
• Show tech-support
• Log details
• Syslog
• Casa: show log
• Debugging
• Cisco, Casa: debug cable mac-address
• Cisco: terminal monitor
• Casa: logging debug
• Arris: configure logging debug modem filter cmMac
• Configure logging monitor 8
• CM information of interest
• Cable modem bootfile
• Cable modem snmpwalk (from .1.3.6.1)
• Optional: MTA configuration template
• Optional: telnet/CLI debug/logging
4
Casa
• Query unknown CPE MAC with CNR DHCP server
dhcp leasequery enforce
dhcp leasequery message-coding l-query 13 l-uassigned 11 l-unknown 12 l-active 10

• Access-list for management access

access-class in IE-mgmt-in
ip access-list IE-mgmt-in
/* src src-mask dst dst-port src-port */
permit all 89.101.160.15 255.255.255.255 any any any
permit all 89.101.142.26 255.255.255.255 any any any
permit all 172.31.133.5 255.255.255.255 any any any
permit all 172.31.137.5 255.255.255.255 any any any
…
permit all 213.46.242.226 255.255.255.255 any any any
permit udp 89.101.160.4 255.255.255.254 any any any
permit udp 89.101.160.32 255.255.255.224 any any any
permit all 195.34.130.108 255.255.255.255 any any 49
permit all 172.31.132.35 255.255.255.255 any any 49
permit snmp 172.29.64.0 255.255.255.192 any
permit snmp 172.31.132.0 255.255.252.0 any
permit snmp 172.31.136.0 255.255.252.0 any
…
permit snmp 213.46.228.14 255.255.255.255 any
permit snmp 89.101.160.17 255.255.255.255 any
permit snmp 89.101.160.18 255.255.255.255 any
permit 89 any any any any
permit udp any any 520 any
deny icmp type 5 any any
permit icmp any any
deny all any any any any
5
Casa (2)
• NSI with link aggregation
interface trunk 1
gige 0 mode active
gige 1 mode active
load-balance sdip
ip address 188.141.126.94 255.255.255.240
ip ospf authentication message-digest
ip ospf dead-interval 40
ip ospf hello-interval 10
ip ospf retransmit-interval 5
ip ospf transmit-delay 1
ip ospf priority 0
ip ospf message-digest-key 1 md5 ch0ru5
no shutdown
!
interface gige 0
no auto negotiate
no shutdown

interface gige 1
no auto negotiate
no shutdown

6
 Casa (3)
• Modulation profile
modulation-profile 11
request mtdma qpsk off 64 0 16 338 0 16 fixed on 1 1536 qpsk0
initial mtdma qpsk off 640 5 34 338 0 48 fixed on 1 1536 qpsk0
station mtdma qpsk off 384 5 34 338 0 48 fixed on 1 1536 qpsk0
short mtdma 16qam off 168 6 75 338 7 8 shortened on 1 1536 qpsk0
long mtdma 16qam off 192 8 220 338 0 8 shortened on 1 1536 qpsk0
a-short mtdma 16qam off 104 12 75 338 6 8 shortened on 1 1536 qpsk1
a-long mtdma 16qam off 104 16 220 338 0 8 shortened on 6 1536 qpsk1
ugs mtdma 16qam off 104 16 220 338 0 8 shortened on 1 1536 qpsk1

modulation-profile 26
request atdma qpsk off 64 0 16 338 0 16 fixed on 1 1536 qpsk0
initial atdma qpsk off 640 5 34 338 0 48 fixed on 1 1536 qpsk0
station atdma qpsk off 384 5 34 338 0 48 fixed on 1 1536 qpsk0
a-short atdma 16qam off 200 12 75 338 6 8 shortened on 1 1536 qpsk1
a-long atdma 16qam off 200 16 220 338 0 8 shortened on 6 1536 qpsk1
ugs atdma 16qam off 200 16 220 338 0 8 shortened on 1 1536 qpsk1

• Downstream channels
interface qam 0/0
annex A
interleave 12
channel 0 frequency 482000000
no channel 0 shutdown
channel 1 frequency 490000000
no channel 1 shutdown
channel 2 frequency 498000000
no channel 2 shutdown
channel 3 frequency 506000000
no channel 3 shutdown
7 no shutdown
Casa (4)
• Service-group/Fiber Node • MAC Domain
service group 1
cable privacy bpi-enforce
qam 0/0/0
cable privacy bpi-plus-enforce
qam 0/0/1
upstream map size 2
qam 0/0/2
qam 0/0/3
interface docsis-mac 1
qam 0/1/0
no shutdown
qam 0/1/1
insertion-interval 50
qam 0/1/2
no early-authentication-encryption
qam 0/1/3
no multicast-dsid-forward
upstream 3/0.0
no upstream channel bonding
upstream 3/0.1
no tftp-proxy
upstream 3/1.0
dhcp-giaddr-primary
upstream 3/1.1
ip bundle 1
downstream 1 interface qam 0/0/0
downstream 2 interface qam 0/0/1
downstream 3 interface qam 0/0/2
downstream 4 interface qam 0/0/3
downstream 5 interface qam 0/1/0
downstream 6 interface qam 0/1/1
downstream 7 interface qam 0/1/2
downstream 8 interface qam 0/1/3
upstream 1 interface upstream 3/0.0/0
upstream 2 interface upstream 3/0.1/0
upstream 3 interface upstream 3/1.0/0
upstream 4 interface upstream 3/1.1/0
upstream 5 interface upstream 3/2.0/0
upstream 6 interface upstream 3/2.1/0
upstream 7 interface upstream 3/3.0/0
upstream 8 interface upstream 3/3.1/0
ip rip authentication mode md5
8
Casa (5)
• Upstream channel: 2 physical channels per port .0 and .1
interface upstream 3/0.0
description "node 54A"
frequency 54000000
channel-width 6400000
power-adjustment continue 8
map-advance dynamic 200
ingress-cancellation 100
logical-channel 0 profile 26
logical-channel 0 minislot 2
logical-channel 0 ranging-backoff 3 6
logical-channel 0 pre-equalization
no logical-channel 0 shutdown
no shutdown

• Docsis Load balancing

load-balance enable

load-balance execution-rule 1
method modem
method utilization dynamic
threshold load 10 enforce 25 minimum 20
interval 60

load-balance policy 1
rule execution 1

load-balance general-group default-settings

policy-id 1
initial-tech direct
enable
9
CMTS and CM details
• IP-Bundle interface across MAC-domains
interface ip-bundle 1
ip address 10.240.96.1 255.255.248.0
ip address 10.163.20.1 255.255.252.0 secondary
ip address 10.133.96.1 255.255.240.0 secondary
ip address 10.96.32.1 255.255.224.0 secondary
ip address 89.101.46.1 255.255.254.0 secondary
ip address 89.101.48.1 255.255.254.0 secondary
ip address 89.101.179.209 255.255.255.252 secondary
ip address 89.101.164.145 255.255.255.252 secondary
ip address 89.101.106.1 255.255.254.0 secondary
ip address 10.163.24.1 255.255.252.0 secondary
ip address 89.101.165.61 255.255.255.252 secondary
ip address 89.101.221.201 255.255.255.252 secondary
cable helper-address 89.101.160.48
cable helper-address 89.101.160.47
ip access-group ie-secure-hfc-in-20110914
ip rip authentication mode md5
ip rip authentication key-chain Soho-RIPv2

interface ip-bundle 1.5

ip address 10.100.26.193 255.255.255.192
cable helper-address 89.101.160.47
cable helper-address 89.101.160.46

10
Cisco
• Modulation profile (A-TDMA)
cable modulation-profile 222 request 0 16 0 22 qpsk scrambler 152 no-diff 32 fixed qpsk0 1 2048
cable modulation-profile 222 initial 5 34 0 48 qpsk scrambler 152 no-diff 64 fixed qpsk0 1 2048
cable modulation-profile 222 station 5 34 0 48 qpsk scrambler 152 no-diff 64 fixed qpsk0 1 2048
cable modulation-profile 222 a-short 4 76 7 22 16qam scrambler 152 no-diff 64 shortened qpsk1 1 2048
cable modulation-profile 222 a-long 10 220 0 22 16qam scrambler 152 no-diff 64 shortened qpsk1 1 2048
cable modulation-profile 222 a-ugs 10 220 0 22 16qam scrambler 152 no-diff 64 shortened qpsk1 1 2048

• Proprietary upstream speed maximization (to be removed)

cable upstream rate-adapt rate 9900000

• Optimizations
cable modem max-cpe 4
cable service attribute ds-bonded downstream-type bonding-enabled
cable service flow activity-timeout 65535
cable service flow inactivity-threshold 3600
cable throttle-ranging

11
Cisco
• Docsis load balancing
cable tag 1
name d2
docsis-version docsis20
!
cable tag 2
name d3
docsis-version docsis30

cable load-balance docsis-group 8031 index 103

restricted
downstream Modular-Cable 3/2/0 rf-channel 12-14
downstream Cable8/0/3
upstream Cable8/0/3 4-5
method utilization
interval 60
threshold load 20
threshold load minimum 10
policy pure-ds-load
init-tech-list 3
docsis-policy 1
tag d2
tag d3

cable load-balance d30-ggrp-default disable

cable load-balance docsis-enable

cable load-balance rule 1 disable-throughput-lowerbound us 100
cable load-balance docsis-policy 1 rule 1
cable load-balance modem max-failures 15

12
Cisco
• M-CMTS EdgeQAM link
controller Modular-Cable 1/1/0
ip-address 192.168.0.1
modular-host subslot 6/1
rf-channel 0 description al04qam01 DOWNSTREAM 7
rf-channel 0 cable downstream channel-id 24
rf-channel 0 frequency 306750000 annex A modulation 256qam interleave 12
rf-channel 0 ip-address 192.168.0.2 mac-address 1111.1111.1111 depi-remote-id 49152
rf-channel 1 description al04qam01 DOWNSTREAM 7
rf-channel 1 cable downstream channel-id 25
rf-channel 1 frequency 314750000 annex A modulation 256qam interleave 12
rf-channel 1 ip-address 192.168.0.2 mac-address 1111.1111.1111 depi-remote-id 49153
rf-channel 2 description al04qam01 DOWNSTREAM 7
rf-channel 2 cable downstream channel-id 26
rf-channel 2 frequency 322750000 annex A modulation 256qam interleave 12
rf-channel 2 ip-address 192.168.0.2 mac-address 1111.1111.1111 depi-remote-id 49154
rf-channel 3 description al04qam01 DOWNSTREAM 7
rf-channel 3 cable downstream channel-id 27
rf-channel 3 frequency 330750000 annex A modulation 256qam interleave 12
rf-channel 3 ip-address 192.168.0.2 mac-address 1111.1111.1111 depi-remote-id 49155
rf-channel 4 description al04qam01 DOWNSTREAM 7
rf-channel 4 cable downstream channel-id 28
rf-channel 4 frequency 338750000 annex A modulation 256qam interleave 12
rf-channel 4 ip-address 192.168.0.2 mac-address 1111.1111.1111 depi-remote-id 49156
rf-channel 5 description al04qam01 DOWNSTREAM 7
rf-channel 5 cable downstream channel-id 29
…
rf-channel 23 cable downstream channel-id 47
description DTI al04dti01
!

13
Cisco
• Narrowband (non-bonding) channel • Downstream Bonding groups
configuration interface Wideband-Cable1/1/0:0
description DOWNSTREAM 7_1
interface Modular-Cable1/1/0:0 load-interval 60
description DOWNSTREAM 7 cable bundle 2
load-interval 60 cable rf-channel 0 bandwidth-percent 30
cable bundle 2 cable rf-channel 1 bandwidth-percent 30
cable rf-bandwidth-percent 10 cable rf-channel 2 bandwidth-percent 30
! cable rf-channel 3 bandwidth-percent 30
interface Modular-Cable1/1/0:1 cable rf-channel 4 bandwidth-percent 30
description DOWNSTREAM 7 cable rf-channel 5 bandwidth-percent 30
load-interval 60 !
cable bundle 2 interface Wideband-Cable1/1/0:1
cable rf-bandwidth-percent 10 description DOWNSTREAM 7_2
! load-interval 60
interface Modular-Cable1/1/0:2 cable bundle 2
description DOWNSTREAM 7 cable rf-channel 0 bandwidth-percent 30
load-interval 60 cable rf-channel 1 bandwidth-percent 30
cable bundle 2 cable rf-channel 2 bandwidth-percent 20
cable rf-bandwidth-percent 10 cable rf-channel 3 bandwidth-percent 20
!

• 80% of narrowband bandwidth is interface Wideband-Cable1/1/0:2

description DOWNSTREAM 7_3
available for Voice and bandwidth load-interval 60
cable bundle 2
reservations cable rf-channel 2 bandwidth-percent 20
cable rf-channel 3 bandwidth-percent 20
cable rf-channel 4 bandwidth-percent 30
cable rf-channel 5 bandwidth-percent 30

14
Cisco
• MAC Domain cable upstream 1 connector 1
interface Cable6/1/0 cable upstream 1 frequency 29400000
load-interval 60 cable upstream 1 channel-width 3200000 3200000
downstream Modular-Cable 1/1/0 rf-channel 0-2 upstream 0-5 cable upstream 1 description UPSTREAM 7 A
cable tftp-enforce …
no cable mtc-mode cable upstream 1 attribute-mask D
cable dynamic-secret reject nocrypt no cable upstream 1 shutdown
no cable packet-cache cable upstream 2 connector 4
cable default-phy-burst 0 cable upstream 2 frequency 36000000
cable map-advance dynamic 1000 600 cable upstream 2 channel-width 6400000 6400000
cable bundle 2 cable upstream 2 description UPSTREAM 7 A
cable downstream description DOWNSTREAM 7 AC …
cable downstream channel-id 100 no cable upstream 2 shutdown
cable downstream annex A cable upstream 3 connector 5
cable downstream modulation 256qam cable upstream 3 frequency 25450000
cable downstream frequency 354750000 cable upstream 3 channel-width 3200000 3200000
no cable downstream rf-shutdown cable upstream 3 description UPSTREAM 7 A
cable downstream rf-power 60 …
cable upstream max-ports 6 cable upstream 3 attribute-mask D
cable upstream 0 connector 0 no cable upstream 3 shutdown
cable upstream 0 frequency 44000000 cable upstream 4 connector 8
cable upstream 0 channel-width 6400000 6400000 cable upstream 4 frequency 44000000
cable upstream 0 description UPSTREAM 7 A cable upstream 4 channel-width 6400000 6400000
cable upstream 0 docsis-mode atdma cable upstream 4 description UPSTREAM 7 C
cable upstream 0 minislot-size 4 …
cable upstream 0 power-adjust continue 11 no cable upstream 4 shutdown
cable upstream 0 range-backoff 3 6 cable upstream 5 connector 9
cable upstream 0 modulation-profile 222 cable upstream 5 frequency 36000000
cable upstream 0 equalization-coefficient cable upstream 5 channel-width 6400000 6400000
no cable upstream 0 shutdown cable upstream 5 description UPSTREAM 7 C
…
no cable upstream 5 shutdown
15
no keepalive
Cisco
• IP Bundle • Service Groups
interface Bundle3
no ip address cable fiber-node 7
cable arp filter request-send 10 1 description UPSTREAM 7 A
cable arp filter reply-accept 10 1 downstream Modular-Cable 1/1/0 rf-channel 0-5
! downstream Cable6/1/0
interface Bundle3.1 upstream Cable 6/1 connector 0-1 4-5
ip address 10.45.192.1 255.255.224.0 secondary !
ip address 10.162.0.1 255.255.224.0 secondary cable fiber-node 9
ip address 10.162.32.1 255.255.224.0 secondary description UPSTREAM 7 C
ip address 10.45.224.1 255.255.224.0 secondary downstream Modular-Cable 1/1/0 rf-channel 0-5
… downstream Cable6/1/0
ip address 62.195.185.1 255.255.255.0 secondary upstream Cable 6/1 connector 8-9
ip address 10.124.22.65 255.255.255.192 secondary
ip address 10.15.175.129 255.255.255.128
ip access-group secure-hfc-in-20111011 in
ip access-group secure-hfc-out-20110520 out
no ip redirects
no ip unreachables
ip rip authentication mode md5
ip rip authentication key-chain Soho-RIPv2
cable source-verify dhcp
cable dhcp-parse option-60
cable dhcp-giaddr primary
cable helper-address 212.142.39.13
cable helper-address 212.142.39.141

16
Arris
• Load balancing
cable load-balance exclude oui 00.1c.c3
cable load-balance exclude oui 00.50.94
cable load-balance exclude oui 00.d0.37
cable load-balance general-group-defaults init-technique broadcast-ranging
cable load-balance general-group-defaults policy 10
cable load-balance rule 10 enable
cable load-balance rule 10 method utilization
cable load-balance policy 10 rule 10

• Subscriber management cable filters

cable submgmt default filter-group host downstream 201
cable submgmt default filter-group host upstream 201

cable filter group 201

index 1 dest-port 135
index 1 ip-proto 257
index 1 match-action drop
index 2 dest-port 137
index 2 ip-proto 257
index 2 match-action drop
index 3 dest-port 138
index 3 ip-proto 257
index 3 match-action drop
index 4 dest-port 139
index 4 ip-proto 257
index 4 match-action drop
index 5 dest-port 445
index 5 ip-proto 257
index 5 match-action drop
exit
17
 Arris
• Modulation profile (A-TDMA)
cable modulation-profile 5
iuc 1 mod qpsk pre-len 64 diff false fec-tbytes 0 fec-len 16 seed 338 burst-len 0 guard-time-size 8 last-cw false scrambler true docsis-
mode atdma
iuc 1 pre-type qpsk1 int-depth 1 int-blocksize 2048
iuc 3 mod qpsk pre-len 640 diff false fec-tbytes 5 fec-len 34 seed 338 burst-len 0 guard-time-size 48 last-cw false scrambler true docsis-
mode atdma
iuc 3 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 4 mod qpsk pre-len 384 diff false fec-tbytes 5 fec-len 34 seed 338 burst-len 0 guard-time-size 48 last-cw false scrambler true docsis-
mode atdma
iuc 4 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 9 mod qam16 pre-len 104 diff false fec-tbytes 6 fec-len 78 seed 338 burst-len 14 guard-time-size 8 last-cw true scrambler true docsis-
mode atdma
iuc 9 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 10 mod qam16 pre-len 104 diff false fec-tbytes 8 fec-len 224 seed 338 burst-len 0 guard-time-size 8 last-cw true scrambler true
docsis-mode atdma
iuc 10 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 11 mod qam16 pre-len 104 diff false fec-tbytes 6 fec-len 78 seed 338 burst-len 0 guard-time-size 8 last-cw true scrambler true docsis-
mode atdma
iuc 11 pre-type qpsk1 int-depth 0 int-blocksize 2048
exit
cable modulation-profile 6
iuc 1 mod qpsk pre-len 64 diff false fec-tbytes 0 fec-len 16 seed 338 burst-len 0 guard-time-size 8 last-cw false scrambler true docsis-
mode atdma
iuc 1 pre-type qpsk1 int-depth 1 int-blocksize 2048
iuc 3 mod qpsk pre-len 640 diff false fec-tbytes 5 fec-len 34 seed 338 burst-len 0 guard-time-size 48 last-cw false scrambler true docsis-
mode atdma
iuc 3 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 4 mod qpsk pre-len 384 diff false fec-tbytes 5 fec-len 34 seed 338 burst-len 0 guard-time-size 48 last-cw false scrambler true docsis-
mode atdma
iuc 4 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 9 mod qam64 pre-len 104 diff false fec-tbytes 12 fec-len 81 seed 338 burst-len 11 guard-time-size 8 last-cw true scrambler true
docsis-mode atdma
iuc 9 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 10 mod qam64 pre-len 104 diff false fec-tbytes 16 fec-len 223 seed 338 burst-len 0 guard-time-size 8 last-cw true scrambler true
docsis-mode atdma
iuc 10 pre-type qpsk1 int-depth 0 int-blocksize 2048
iuc 11 mod qam64 pre-len 104 diff false fec-tbytes 12 fec-len 81 seed 338 burst-len 0 guard-time-size 8 last-cw true scrambler true
docsis-mode atdma
iuc18
11 pre-type qpsk1 int-depth 0 int-blocksize 2048
exit
Arris
• MAC Domain
interface cable-mac 1 interface cable-mac 1.2
description "cable-mac 1" ip address 89.134.175.254 255.255.248.0
cable freq-ds-min 112 ip address 80.98.239.254 255.255.254.0 secondary
cable freq-ds-max 858 ip address 188.142.165.254 255.255.254.0 secondary
cable freq-us-max 65 ip address 188.142.184.254 255.255.255.0 secondary
cable us-freq-range Extended ip address 195.184.163.30 255.255.255.224 secondary
cable cm-ip-prov-mode ipv4only cable helper-address 213.46.246.80
cable verbose-cm-rcp cable helper-address 213.46.246.81
cable dynamic-rcc ip vrf forwarding 03617050:HU_INTERNET
cable downstream-bonding-group dynamic enable cable source-verify dhcp authoritative
cable upstream-bonding-group dynamic enable exit
cable mult-tx-chl-mode interface cable-mac 1.3
cable cm-status enabled no ip address 10.140.191.254 255.255.192.0
exit ip address 10.172.191.254 255.255.192.0 secondary
interface cable-mac 1.0 ip vrf forwarding 03617002:HU_STB
ip address 10.11.175.254 255.255.240.0 exit
ip address 10.11.249.254 255.255.255.0 secondary interface cable-mac 1.4
cable helper-address 213.46.246.80 cable-modem ip address 172.25.171.254 255.255.252.0
cable helper-address 213.46.246.81 cable-modem ip address 10.126.239.254 255.255.254.0 secondary
ip vrf forwarding 03617003:HU_CM ip address 172.25.227.254 255.255.252.0 secondary
cable dhcp-giaddr policy ip vrf forwarding 03617001:HU_EMTA
cable source-verify dhcp authoritative exit
cable submgmt default filter-group host upstream 10
exit
interface cable-mac 1.1
ip address 10.11.16.254 255.255.255.0
ip vrf forwarding 03617050:HU_INTERNET
ip rip authentication mode md5
ip rip authentication key-chain staticip
exit
19
Arris
• Downstream channels • Upstream channels
interface cable-downstream 13/0
interface cable-upstream 1/0
cable cable-mac 1
cable ingress-cancellation interval 100
cable channel-id 1
exit
cable frequency 402000000
interface cable-upstream 1/0.0
no shutdown
cable cable-mac 1 interface cable-upstream 1/0.1
exit
cable channel-id 1 cable cable-mac 1
interface cable-downstream 13/1
cable pre-eq-enable true cable channel-id 13
cable cable-mac 1
cable modulation-profile 6 cable channel-width 6400000
cable channel-id 2
cable docsis-mode atdma cable frequency 45000000
cable frequency 410000000
cable channel-width 6400000 cable power-level 25
no shutdown
cable frequency 45000000 cable supervision 13/0
exit
cable power-level 25 cable supervision 13/1
interface cable-downstream 13/2
cable rangebackoff 2-5 cable supervision 13/2
cable cable-mac 1
cable supervision 13/0 cable supervision 13/3
cable channel-id 3
cable supervision 13/1 cable supervision 13/4
cable frequency 418000000
cable supervision 13/2 cable supervision 13/5
no shutdown
cable supervision 13/3 cable supervision 13/6
exit
cable supervision 13/4 cable supervision 13/7
interface cable-downstream 13/3
cable supervision 13/5 exit
cable cable-mac 1
cable supervision 13/6 interface cable-upstream 1/0
cable channel-id 4
cable supervision 13/7 cable connector 0
cable frequency 426000000
exit exit
no shutdown
exit interface cable-upstream 1/0.0
no shutdown
exit
interface cable-upstream 1/0.1
shutdown
exit
interface cable-upstream 1/0 no shutdown

20
Arris
• Service Groups
cable fiber-node "11H038"
cable-downstream 13/0 13/1 13/2 13/3 13/4 13/5 13/6 13/7
cable-upstream 1/6 1/7 1/8 1/9
exit
cable fiber-node "11H063"
cable-downstream 13/0 13/1 13/2 13/3 13/4 13/5 13/6 13/7
cable-upstream 1/0 1/1 1/2 1/3
exit

• Arris Linecards BP11C4R04# show version

Chassis Type: C4
Slot Description HW Version Software Version Uptime
0 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
1 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
2 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
3 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
4 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
5 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
6 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
7 CAM (0D, 12U) CAM-01122W/K03 CMTS_V07.04.01.25 35 days 10:48:37
8 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
9 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
10 CAM (0D, 12U) CAM-01122W/K04 CMTS_V07.04.01.25 35 days 10:48:37
11 CAM (0D, 12U) CAM-01122W/K03 CMTS_V07.04.01.25 35 days 10:48:37
12 CAM (24D, 0U) CAM-20032W/G04 CMTS_V07.04.01.25 35 days 10:51:45
13 CAM (24D, 0U) CAM-20032W/G02 CMTS_V07.04.01.25 35 days 10:51:45
14 CAM (24D, 0U) CAM-20032W/G02 CMTS_V07.04.01.25 35 days 10:51:45
15 CAM (24D, 0U) CAM-20032W/G04 CMTS_V07.04.01.25 35 days 10:51:45
17 RCM A RCM-01000W/D04 CMTS_V07.04.01.25 35 days 10:58:00
18 RCM B RCM-01000W/D04 CMTS_V07.04.01.25 35 days 10:51:44
19 SCM A SCM-02440W/B07 CMTS_V07.04.01.25 35 days 11:00:29
21
20 SCM B SCM-02440W/B08 CMTS_V07.04.01.25 35 days 10:54:13
Modem Bootfile
• Generated by docsis tool on Sourceforge written by Cornel Ciocirlan
• Bootfile contains a list of TLV parameters
Main
{
NetworkAccess 1;
SnmpMibObject saRgDeviceUserChangedFlag.0 HexString 0x08000000 ;
SwUpgradeServer 89.101.160.37;
SnmpMibObject docsDevSwAdminStatus.0 Integer 2; /* allowProvisioningUpgrade */
/* Vendor Specific SA */
SnmpMibObject saCmArpRateLimit.0 Integer 0 ;
SnmpMibObject cmAPWeb.0 Integer 2; /* open-access */
SnmpMibObject saCmWebAccessLevel.1 Integer 1; /* systemOnly */
SnmpMibObject saCmWebAccessLevel.2 Integer 2; /* basic */
SnmpMibObject saCmMtaProvisioningMode.0 Integer 2; /* twoConfigFilesDHCP */
SnmpMibObject saCmMtaDecryptMtaConfigFile.0 Integer 2; /* RSA-CM-cert */
SnmpMibObject saCmMtaDevice.0 Integer 1; /* enable */
SnmpMibObject saCmMtaCliAccessPasswordType.0 Integer 0; /* plain */
SnmpMibObject saCmMtaCliAccessInterface.0 HexString 0x80 ;
SnmpMibObject saCmMtaCliAccessUsername.0 String "<removed>" ;
SnmpMibObject saCmMtaCliAccessPassword.0 String "<removed>" ;
SnmpMibObject saCmMtaCliAccessType.0 Integer 1; /* enableTelnetPermanent */
SnmpMibObject saCmSwModel.1 String "EPC2203" ;
SnmpMibObject saCmSwFilename.1 String "fw/epc2203-ESIP-12-v202r1262-080915.bin" ;
SnmpMibObject saCmSwServer.1 IPAddress 89.101.160.37 ;
SnmpMibObject saCmSwAdminStatus.1 Integer 2; /* saCmSwAllowProvisioningUpgrade */
SnmpMibObject saCmSwMethod.1 Integer 2; /* unsecure */
SnmpMibObject saCmSwModel.2 String "EPC2425" ;
SnmpMibObject saCmSwFilename.2 String "fw/epc2425-ESIP-12-v202r12812-100729s_upc.bin" ;
SnmpMibObject saCmSwServer.2 IPAddress 89.101.160.37 ;
SnmpMibObject saCmSwAdminStatus.2 Integer 2; /* saCmSwAllowProvisioningUpgrade */
22 SnmpMibObject saCmSwMethod.2 Integer 2; /* unsecure */
Modem bootfile
• Vendor Specific SA settings
SnmpMibObject saRgDeviceRemoteWebAccessEnable.0 Integer 2; /* false */
SnmpMibObject saRgDot11CurrentChannel.0 Gauge32 0 ;
SnmpMibObject saRgIpMgmtWanTtl.0 Integer 0 ;
SnmpMibObject saRgIpMgmtApplySettings.0 Integer 0 ;
SnmpMibObject saRgDot11BssSecurityMode.32 Integer 2; /* wpaPsk */
SnmpMibObject saRgDot11BssSecurityMode.33 Integer 2; /* wpaPsk */
SnmpMibObject saRgDot11BssEnable.33 Integer 2; /* disable */
SnmpMibObject saRgDot11Country.0 Integer 7; /* europe */
SnmpMibObject saRgDot11WpaGroupRekeyInterval.32 Integer 120 ;
SnmpMibObject saRgDot11WpaGroupRekeyInterval.33 Integer 120 ;
SnmpMibObject saRgIpMgmtLanMode.33 Integer 2; /* router */
SnmpMibObject saRgDot11WpaAlgorithm.32 Integer 2; /* tkipPlusAes */
SnmpMibObject saRgDot11WpaAlgorithm.33 Integer 2; /* tkipPlusAes */
SnmpMibObject saRgDot11PrivacyWpsPushButtonTime.0 Integer 0 ;
SnmpMibObject saRgFirewallTrafficDetect.0 HexString 0x00; /* portScan */
VendorSpecific
{
VendorIdentifier 0x00407b; /* SA OUI */
GenericTLV TlvCode 38 TlvLength 1 TlvValue 0x01;
GenericTLV TlvCode 106 TlvLength 1 TlvValue 0x01;
GenericTLV TlvCode 107 TlvString “<removed>"; /* tlv length = 7 */
GenericTLV TlvCode 108 TlvString "<removed>"; /* tlv length = 7 */
}

23
Modem bootfile
• Vendor specific Technicolor/Thomson settings
SnmpMibObject tmmCmMtaDevice.0 Integer 1; /* enable */
SnmpMibObject tmmCmMtaCountMtaAsCpe.0 Integer 0; /* false */
SnmpMibObject tmmCmMtaApplyIpFiltersToMta.0 Integer 0; /* false */
SnmpMibObject tmmCmMtaProvisioningMode.0 Integer 2; /* twoConfigFiles */
SnmpMibObject tmmCmMtaDhcpPktcOption.0 Integer 0; /* require122 */
SnmpMibObject cmTelnetServerControl.0 Integer 1; /* start */
SnmpMibObject cmTelnetUserName.0 String "<removed>" ;
SnmpMibObject cmTelnetPassword.0 String "<removed>" ;
SnmpMibObject cmTelnetSessionTimeout.0 Integer 0 ;
SnmpMibObject cmHttpLanAccessLevel.0 Integer 1; /* Basic */
SnmpMibObject cmHttpWanAccessLevel.0 Integer 2; /* Advanced */
SnmpMibObject cgHttpAltAccessUsername.0 String "<removed>" ;
SnmpMibObject cgHttpAltAccessPassword.0 String "<removed>" ;
SnmpMibObject cmStandByButton.0 Integer 0; /* Disabled */
SnmpMibObject cgUiFirewallIpFloodDetectionEnabled.0 Integer 2; /* disabled */
SnmpMibObject cmDevSwReleaseCode.1 String "STBA" ;
SnmpMibObject cmDevSwModelName.1 String "TWG870U" ;
SnmpMibObject cmDevSwHWVersion.1 String "1.0" ;
SnmpMibObject cmDevSwServer.1 IPAddress 89.101.160.37 ;
SnmpMibObject cmDevSwFilename.1 String "fw/TWG870U-BA.01.31-101119-F-1C1.bin" ;
SnmpMibObject cmDevSwAdminStatus.1 Integer 2; /* allowProvisioningUpgrade */
SnmpMibObject cmDevSwReleaseCode.2 String "STB9" ;
SnmpMibObject cmDevSwModelName.2 String "TWG870U" ;
SnmpMibObject cmDevSwHWVersion.2 String "1.0" ;
SnmpMibObject cmDevSwServer.2 IPAddress 89.101.160.37 ;
SnmpMibObject cmDevSwFilename.2 String "fw/TWG870U-BA.01.31-101119-F-1C1.bin" ;
SnmpMibObject cmDevSwAdminStatus.2 Integer 2; /* allowProvisioningUpgrade */
VendorSpecific
{
VendorIdentifier 0x001095; /* <removed> OUI */
GenericTLV TlvCode 38 TlvLength 1 TlvValue 0x01;
GenericTLV TlvCode 171 TlvLength 1 TlvValue 0x01;
24
}
Modem bootfile
• BPI+
GlobalPrivacyEnable 1;
BaselinePrivacy
{
AuthTimeout 10;
ReAuthTimeout 10;
AuthGraceTime 600;
OperTimeout 10;
ReKeyTimeout 10;
TEKGraceTime 600;
AuthRejectTimeout 60;
SAMapWaitTimeout 1;
SAMapMaxRetries 4;
}

MaxCPE 4;

25
Modem bootfile
• Traffic classifiers
DsPacketClass
MaxClassifiers 12;
{
UsPacketClass
ClassifierRef 102;
{
ServiceFlowRef 102;
ClassifierRef 2;
RulePriority 1;
ServiceFlowRef 2;
ActivationState 1;
RulePriority 64;
IpPacketClassifier
ActivationState 1;
{
IpPacketClassifier
IpProto 17;
{
DstPortStart 5060;
IpProto 17;
DstPortEnd 5060;
SrcPortStart 5060;
}
SrcPortEnd 5060;
}
}
}
UsPacketClass
{
ClassifierRef 3;
ServiceFlowRef 2;
LLCPacketClassifier
{
EtherType 0x030f16;
}
ActivationState 1;
}

26
Modem bootfile
• Service flows
UsServiceFlow
{
UsServiceFlowRef 2;
QosParamSetType 7;
TrafficPriority 4;
MaxRateSustained 160000;
MinReservedRate 12000;
SchedulingType 2;
RequestOrTxPolicy 0x00000088;
}
DsServiceFlow
{
DsServiceFlowRef 101;
QosParamSetType 7;
TrafficPriority 1;
MinReservedRate 0;
AdmQosParamsTimeout 0;
MaxRateSustained 110000000;
MaxTrafficBurst 42600;
}
DsServiceFlow
{
DsServiceFlowRef 102;
QosParamSetType 7;
TrafficPriority 4;
MaxRateSustained 160000;
MinReservedRate 12000;
}

27
Modem bootfile
• SNMP Access and, LLC filter and IP filters
SnmpMibObject docsDevNmAccessIp.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessIpMask.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessCommunity.1 String "<removed>" ;
SnmpMibObject docsDevNmAccessControl.1 Integer 2; /* read */
SnmpMibObject docsDevNmAccessInterfaces.1 String "@" ;
SnmpMibObject docsDevNmAccessStatus.1 Integer 4; /* createAndGo */
SnmpMibObject docsDevFilterLLCUnmatchedAction.0 Integer 1; /* discard */
SnmpMibObject docsDevFilterLLCIfIndex.1 Integer 0 ;
SnmpMibObject docsDevFilterLLCProtocolType.1 Integer 1; /* ethertype */
SnmpMibObject docsDevFilterLLCProtocol.1 Integer 2048 ;
SnmpMibObject docsDevFilterLLCStatus.1 Integer 4; /* createAndGo */
SnmpMibObject docsDevFilterLLCIfIndex.2 Integer 0 ;
SnmpMibObject docsDevFilterLLCProtocolType.2 Integer 1; /* ethertype */
SnmpMibObject docsDevFilterLLCProtocol.2 Integer 2054 ;
SnmpMibObject docsDevFilterLLCStatus.2 Integer 4; /* createAndGo */
SnmpMibObject docsDevFilterIpDefault.0 Integer 2; /* accept */
SnmpMibObject docsDevFilterIpControl.1 Integer 1; /* discard */
SnmpMibObject docsDevFilterIpIfIndex.1 Integer 2 ;
SnmpMibObject docsDevFilterIpDirection.1 Integer 1; /* inbound */
SnmpMibObject docsDevFilterIpBroadcast.1 Integer 2; /* false */
SnmpMibObject docsDevFilterIpSaddr.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevFilterIpSmask.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevFilterIpDaddr.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevFilterIpDmask.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevFilterIpProtocol.1 Integer 17 ;
SnmpMibObject docsDevFilterIpSourcePortLow.1 Integer 0 ;
SnmpMibObject docsDevFilterIpSourcePortHigh.1 Integer 65535 ;
SnmpMibObject docsDevFilterIpDestPortLow.1 Integer 67 ;
SnmpMibObject docsDevFilterIpDestPortHigh.1 Integer 67 ;
SnmpMibObject docsDevFilterIpStatus.1 Integer 4; /* createAndGo */
28
Modem bootfile
• C-CVC and MIC
CoSignerCVCData 0x3082037130820259a0030201020210569578200cc553659…;
CoSignerCVCData 0x0403131d436f646520566572696669636174696f6e20436…;
CoSignerCVCData 0x6dff7915d7f7811b17d13e4559122cb2b947707c95e15a2…;
CoSignerCVCData 0x91a3810f0871ef56b7ac48302df3b2f255ec1d26250de32…;
/* CmMic 53d7b07d48c16b40cd7918ad4ad75ed2; */
/* CmtsMic 2f7dccb109c0d8b55289eaa800879fe3; */
/*EndOfDataMkr*/
/* Pad */
}

• CM uses MIC to verify integrity of downloaded bootfile from TFTP server

• CMTS uses MIC to verify integrity of settings received from the CM. The CMTS-
MIC can be generated with a shared secret only known by the CMTS and the
bootfile generator.

29
Title divider slide
<<Title of the presentation>>
<<Day Month Year>>

30