Arris C4 - CLI Commands for Provisioning the CM MAC Deny List

To Next Page

To Previous Page

Chapter 29: Security

STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide

Where: <addr> is either the IPv4, IPv6, or MAC address of the modem.

Table 111. CLI Commands for Provisioning the CM MAC Deny List

Purpose

CLI Command

Add [remove] a CM MAC to the list.

configure cable modem deny <mac> [no]

Clear the attempt information captured for a particular CM MAC address in

the CM Deny List. If the <mac> is not supplied, then counters for all CMs listed

are cleared.

clear counters cable modem deny [<mac>]

Show interface, time, and count information for specified CM or for all listed

CMs (if no address is specified).

show cable modem deny [<mac>]

Main Page

Default Chapter7
- Table of Contents7
Introduction45
- Overview45
- Intended Audience45
- Prerequisite Skill and Knowledge45
- Purpose46
- Textual Conventions46
- Conventions Used in this Document46
- Admonishments47
Chapter 248
- DOCSIS 2.0 Compliance48
- DOCSIS 3.0 Compliance49
- Fault Detection and Recovery50
- Interfaces and Protocols50
- Security Features50
- Baseline Features and Early Releases51
C4/C4C CMTS Features48
Chapter 374
- Overview74
- Network Diagram75
- Typical Cable Network Architecture75
- C4 Cmts76
- C4C CMTS76
- C4/C4C CMTS Specifications78
- Scalability85
  - C4 CMTS Chassis85
  - C4C CMTS Chassis86
- Voip Call Capacities87
- Ipv4 and Ipv6 Supported Routes87
- Application-Related Specifications89
- DOCSIS-Related Specifications Compliance89
C4/C4C CMTS Specifications74
C4 CMTS General Installation Requirements91
- Safety Precautions92
  - Lifting Safety92
Chapter 492
- Overview92
- C4 CMTS Chassis Handles93
- Electrical Equipment Guidelines94
- Electrostatic Discharge (ESD)94
- C4 CMTS Installation Checklist95
- Unpacking the C4 CMTS97
- Hardware Shipment Checklist98
- Installation Considerations99
- Rack Mounting the C4 CMTS102
  - Internal Air Flow (Side View)102
  - Grounding the Chassis103
- Main Hardware Components104
- Installing Modules in the C4 CMTS108
- Fan Trays110
- Power Conditioning Module and Cabling113
- Chassis Maintenance123
- Replacing the C4 CMTS Chassis123
  - Cleaning the Chassis123
  - Air Filters123
C4C CMTS Installation Requirements125
Chapter 5126
- Safety Precautions126
- Electrostatic Discharge (ESD)129
- Installation Checklist130
- Unpacking the C4C CMTS132
  - Module Protection133
- Installation Considerations134
- Rack Mounting the C4C CMTS137
- Main Hardware Components139
- Power Module and Cabling151
- Power Protection Description159
- C4C CMTS Chassis Maintenance162
- Replacing the C4C CMTS Chassis162
  - Cleaning the Chassis162
  - Air Filters162
Chapter 6165
- SCM Overview165
- SCM Replacement177
- SCM Upgrade to 1GB RAM (SCM II EM)181
- Scm II Em (U)187
- Scm 3187
- Compact Flash195
System Control Module (SCM)165
Router Control Module (RCM)208
- RCM Overview208
- Router Control Module and Rear Filler Panel209
- RCM Hardware210
- Primary Software Functions210
Downstream Cable Access Modules (Dcams)219
- 16D Cable Access Module (16D CAM)219
- Overview219
- XD Cable Access Module (XD CAM)229
- Downstream Parameters242
  - Annex242
  - Downstream Frequency Range248
- XD CAM Field Software Upgrade249
Upstream Cable Access Modules (Ucams)267
- Guidelines268
- 12U Cable Access Module (12U CAM)268
Chapter 9268
- Overview268
- Basic Command Set for Bringing up a 12U CAM274
- Rules and Restrictions for 12U/24U CAM Configuration281
- 24U CAM Upstream Power Level Groups282
  - Annex282
  - Default Admin States286
- Basic Command Set for Bringing up a 24U CAM286
  - Example of Basic Command Sequence for Configuring a 24U in Slot 5286
  - Accepting Default Parameters for Cable Upstream Channels of 24U CAM288
- Measuring SNR in the 12U/24U CAM289
- Adjusting Channel Settings in Response to Increased CM Scaling298
- How to Take a CAM out of Service and Delete Its Slot298
- Explanation of Upstream Parameters299
- Modulation Profiles: Default and User-Defined309
- Optimizing a Modulation Profile311
  - Noise and SNR Versus Modulation Symbol Rate312
Control Complex Redundancy322
- Overview322
- Add Control Complex323
Basic Bring-Up Procedure for the C4 CMTS325
Chapter 11325
- Introduction325
- Verification Steps340
- IP Address Prefixes and Subnets348
- Ipv6 Configuration (Optional)348
Chapter 12351
- Introduction351
- Before You Begin352
- Bring-Up Procedures355
- Basic Bring-Up Procedure358
- Verification Steps366
- Ipv6 Configuration (Optional)372
  - IP Address Prefixes and Subnets373
Basic Bring-Up Procedure for a C4C CMTS351
CAM Sparing375
- Flexcam Hitless CAM Sparing375
- Benefits of Hitless CAM Sparing376
- CAM Sparing PIC Leds376
- Definitions376
- Size of Hitless CAM Spare-Groups376
- Guidelines for CAM Spare Groups377
  - Signal Loss During Failover377
- Configuration Example378
- Deleting a CAM Spare-Group384
Chapter 14386
- Overview386
- MAC Domains387
- Upstream to Downstream Channel Association405
  - Upstream Channel Descriptor Messages405
  - Supervision405
- Cable Plant Topology and Fiber Nodes411
- Service Group Determination and Display416
  - Configure Primary Capability416
  - MAC Domain416
    - Modem and Service Group Association416
    - Recommended Procedures for Topology Changes417
- Channel Sets418
  - Show CLI Commands418
- Receive Channel Configurations and Bonding Groups427
- Display Specific MD-US-SG Service Group427
Cable-Side Configuration386
Interface IP Configuration428
- Subinterfaces (Multiple Vris Per VRF) for Ipv4428
- Overview428
  - Rules of Operation and Guidelines for Subinterfaces429
  - Network Acls430
- Interface Configuration431
- Loopback Interfaces for Routing Protocols438
  - Characteristics of the Loopback Interface438
    - CLI Commands for Active and Loopback Interface439
    - Example of Packet Flow Using Loopback Interface440
- Configuring IP Static Routes441
- Multiple Vrfs441
- Link Aggregation446
Dynamic Routing Protocols457
- Overview of Dynamic Routing457
- Border Gateway Protocol458
  - BGP Version 4458
- Intermediate System-Intermediate System468
- Open Shortest Path First Version 2495
- Open Shortest Path First Version 3502
- Routing Information Protocol521
- Route Redistribution for Ipv4 Addresses532
- Policy-Based Routing (PBR)545
  - Configuring PBR545
  - CLI Commands for PBR553
IP Packet Filters, Subscriber Management560
- Overview560
- Upstream Drop Classifiers583
  - US Drop Classifier Commands583
  - Provisioning583
Baseline Privacy Interface (BPI)585
- BPI Operations586
- Baseline Privacy Key Management (BPKM)586
- Packet Data Encryption586
- Baseline Privacy Operational Overview586
  - Registration587
  - Initialization587
- Baseline Privacy Setup588
- Provisioning X.509 Certificates599
- Baseline Privacy Debugging601
- Baseline Privacy Trap Codes604
- Baseline Privacy: CLI Commands608
- BPI Hybrid Mode Operation611
  - Overview611
  - CLI Commands for BPI Hybrid Mode612
- BPI+ Enforce613
  - CLI Commands614
DOCSIS Set-Top Gateway Configuration616
- Logical Devices in a DSG System616
- Overview616
- DSG Configuration Overview622
- Sample DSG Configuration Scenarios637
- Types of Device Classes644
- Overview644
- Dynamic Host Configuration Protocol (DHCP)646
- Filter Groups Based on Device Class651
Integrated Upstream Agility660
- Overview660
  - Monitoring Upstream Agility State Machines661
  - Limitations662
- Examples of Upstream Agility State Machines663
- Related CLI Commands674
  - Defining Triggers676
- Show Commands679
  - Example of Modifying a State Machine682
- State Machine Crosschecks683
Channel Bonding685
- Channel Assignment685
- Downstream Channel Bonding (DSCB)690
- Upstream Channel Bonding (USCB)700
- Selective Enabling of USCB Within a MAC Domain703
  - Upstream Graceful TCS Reduction703
- Non-Primary Channel Acquisition for Upstream Channel Bonding705
- Snapshot from Config File with Attribute Mask Set for USCB705
- Partial Service Handling706
- Observability712
- Commands Related to Partial Service714
Ipv6715
- Overview715
- Mdf716
- GMAC Explicit Mode716
- Ipv6 Packet Structure716
- Ipv6 Addressing Architecture717
- C4/C CMTS Security Features for Ipv6723
- Ipv6 Configure Commands724
- Dhcpv6 PDRI and Bulk Lease Query731
- Ipv6 Prefix Stability739
- Ipv6 Distribute Lists748
  - Sample Distribute List for Ospfv3 PD Routes748
  - Cleaning up Stale Routes for Ipv6 Prefix Stability748
IP Video750
- Overview750
- IP Video Architecture751
- IP Video Functionality752
- ASM Architecture754
  - Valid Multicast Address Ranges754
  - ASM Components755
- SSM Architecture756
  - SSM Components757
- IP Video Provisioning758
- IP Video Visibility764
  - Verifying the Configuration764
  - More Show Commands765
- IP Video Monitoring and Management771
  - Current Hour Results772
- CLI Commands for IP Video774
Multicast776
- Overview776
- Multicast Traffic777
- IGMP Implementation779
  - Source-Specific Multicast779
    - DOCSIS Compliance for IGMP779
    - IGMP Terminology779
- Multicast Routing Configurations780
- Forced Downstream Replication of Multicast Traffic789
- Deciding Whether to Use this Feature789
- Operational Guidelines790
- Effects of Enabling MDF on the MAC Domain791
- CLI Commands for Multicast792
Connection Admission Control796
- Overview796
- General CAC Description797
- Packetcable CAC Description797
  - Reserved Bandwidth797
- Multicast CAC Description798
  - Guidelines for CAC Thresholds in Non-Converged System799
  - Guidelines for CAC Thresholds in Converged System800
- Configuring CAC800
- Show Commands801
- For 16D or XD Cams802
- Data Consistency Checks803
  - For 12U or 24U Cams803
  - Preemption of Normal Calls by Emergency Calls803
- Load Balancing of Voice Bearer Flows804
- Disable Feature805
Converged Services (Voice and Data)806
- Qos Levels806
  - Ensuring Qos in a Converged Services Environment806
- Overview806
- Packetcable Multimedia Overview813
Security832
- AAA Overview832
- Local Authentication836
- RADIUS Authentication837
- TACACS+ Source Interface852
- Routing to a Null Interface861
  - CLI Commands for Routing to a Null Interface861
- Source Verification of Cable-Side IP Addresses862
  - For Ipv6862
  - CLI Commands for Source Verification863
- CPE Host Authorization864
  - CLI Commands865
- Advanced CM Configuration File Verification866
Unified Electronic Surveillance875
- UES Overview875
- Calea875
  - Electronic Surveillance Configuration877
  - Electronic Surveillance Logging Messages877
- Legal Intercept878
- PC 2.0 Lawfully Authorized Electronic Surveillance884
Load Balancing890
- General Load Balancing Group (GLBG)891
- Overview891
  - Restricted Load Balancing Group (RLBG)892
- Load Balancing Methods893
- Load Balancing Types893
  - Interactions with Older Cable Modems894
- Load Balancing Policy895
- Load Balancing Rules895
- Global Load Balance Settings898
- Load Balance Thresholds899
- Default Configuration900
- Example Configuration902
  - Verify the Configuration903
- Load Balance Modem Steering905
- Load Balance Actions912
- Failed List Operation921
- Movable and Non-Movable Modems923
- Movable CLI Commands925
- Manual Modem Moves926
Packet Throttling930
- Overview930
- RCM Protocol Policing931
  - RCM Protocol CLI Commands931
  - Maintaining Performance During Excessive Traffic931
    - Set Specific Global/Protocol Packet Throttling931
    - Display Protocol-Throttling Settings and Counts932
- Upstream Cable Protocol Throttling933
- ARP/ICMP Throttling940
- Quality of Service Mechanisms943
- Traffic Shaping CLI Commands945
  - Set Peak Traffic Rate for DOCSIS 1.1 COS945
    - Shaping Versus Policing Summary945
    - Traffic Shaping Implementation945
- Power Boost Cap946
Access Control Lists948
- Overview948
  - Named Access Lists949
- Data Plane Filter IP Acls950
- Ipv6 Acls955
  - Example 1955
  - Example 2955
Internet Protocol Detail Record957
- Overview957
- Exporter Services958
- Collector Connectivity960
- Inter-Operations961
  - Simultaneous Sessions961
  - Data Acknowledgment961
- Surveillance962
- Configuration963
Host Names, User Ids, and Password Recovery970
- How to Administer the Host Name and User Ids970
  - Configure a Host Name970
- How to Add and Delete Users971
  - Syslog Server Ipaddress971
- Configuring Privilege Levels and Local Authentication972
  - Passwords in Show Running-Config972
- User Profiles973
- Password Recovery975
  - Enabling Password Recovery Using the Application Dialog975
  - Sample Bootloader Dialog for Password Recovery976
Clock Synchronization Protocol980
- Local (Internal) Clock980
- Overview980
  - Clock Commands981
  - Setting the Internal Clock984
    - Show Clock Network984
    - Show Clock Timezone984
- Network Time Protocol985
  - NTP Server and Authentication Commands985
  - Configure NTP Client986
- Secure NTP989
Service Class Names991
- Overview991
- Service Class Name Details992
- Commands for Adding Service Class Names999
- Integrated Service Class Agility (ISCA)1001
- Operational Considerations for ISCA1001
- Calculating Average Usage1003
- Feature Interactions1003
- CLI Commands Used for ISCA1004
  - CLI Commands Related to Integrated Service Class Agility1004
  - Sample Configuration Commands for ISCA1006
- Dynamic Service Class Modifications1007
- DSCP Marking for Downstream Subscriber Traffic1010
Per-Subscriber Throughput1012
- Overview1012
- Two Display Formats1013
Additional Classifier Support1018
- Description1018
- Overview1018
- Operation1020
Diagnostics1022
- Overview1022
- Problem Isolation1023
- Take Module Out-Of-Service1024
- Diagnostic Logging1028
- Diagnostic Failure and Recovery1029
  - Recovery1030
Logging1031
- Overview1031
- Event Messages1032
- Event Message Routing1034
- Logging History Buffer1036
- System Console1046
- Monitor (Telnet or Secure Shell)1048
- Local Log (Volatile)1050
- Simple Network Management Protocol Management Station1057
Fully-Qualified Domain Name (FQDN)1070
- Overview1070
  - Limited Support for FQDN Feature1071
- Operational Concerns1071
- CLI Commands for FQDN1073
- FQDN Rejection Scenarios1075
Bsod L2VPN1076
- Background Information1077
- Additional Information1080
- Enabling Bsod1081
- Screenshot of Modem Configuration File1082
- CLI Commands for L2VPN1083
- Show Commands for L2VPN and Bsod1084
- Sample BSOD Configuration Using BSOD Capable and Legacy (Ppoe) Modems1086
- Bsod L2VPN Configuration Via CLI1087
- CLI Commands for Configuring Cms for Use with L2VPN Tunnels1087
Standard and Enterprise Mibs1090
- SNMP MIB Variable Descriptions1090
  - Overview1090
- Enterprise Mibs1094
CLI Overview1099
- Access Levels and Modes1099
- Keyboard Shortcuts1105
- CLI Editing Shortcuts1105
- CLI Command Features1106
- Show Cable Modem Column Feature1123
  - Command Parameters1123
  - Help Enhancements1125

Arris C4 - CLI Commands for Provisioning the CM MAC Deny List

Table of Contents

Related product manuals