Arris C4C - Clear Crypto Sa

To Next Page

To Previous Page

Chapter 46: Command Line Descriptions

STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide

clear crypto sa

Purpose

Removes all IPSec security associations (SAs).

Default Access Level

Command Syntax

clear crypto sa

Supplemental

Information

If the IKE daemon is running during removal, each peer is notified of the shared IPSec SA removal. Also, replacement IPSec SAs are

likely to be created if the IKE daemon is running.

Main Page

Default Chapter7
- Table of Contents7
Introduction45
- Overview45
- Intended Audience45
- Prerequisite Skill and Knowledge45
- Purpose46
- Textual Conventions46
- Conventions Used in this Document46
- Admonishments47
Chapter 248
- DOCSIS 2.0 Compliance48
- DOCSIS 3.0 Compliance49
- Fault Detection and Recovery50
- Interfaces and Protocols50
- Security Features50
- Baseline Features and Early Releases51
C4/C4C CMTS Features48
Chapter 374
- Overview74
- Network Diagram75
- Typical Cable Network Architecture75
- C4 Cmts76
- C4C CMTS76
- C4/C4C CMTS Specifications78
- Scalability85
  - C4 CMTS Chassis85
  - C4C CMTS Chassis86
- Voip Call Capacities87
- Ipv4 and Ipv6 Supported Routes87
- Application-Related Specifications89
- DOCSIS-Related Specifications Compliance89
C4/C4C CMTS Specifications74
C4 CMTS General Installation Requirements91
- Safety Precautions92
  - Lifting Safety92
Chapter 492
- Overview92
- C4 CMTS Chassis Handles93
- Electrical Equipment Guidelines94
- Electrostatic Discharge (ESD)94
- C4 CMTS Installation Checklist95
- Unpacking the C4 CMTS97
- Hardware Shipment Checklist98
- Installation Considerations99
- Rack Mounting the C4 CMTS102
  - Internal Air Flow (Side View)102
  - Grounding the Chassis103
- Main Hardware Components104
- Installing Modules in the C4 CMTS108
- Fan Trays110
- Power Conditioning Module and Cabling113
- Chassis Maintenance123
- Replacing the C4 CMTS Chassis123
  - Cleaning the Chassis123
  - Air Filters123
C4C CMTS Installation Requirements125
Chapter 5126
- Safety Precautions126
- Electrostatic Discharge (ESD)129
- Installation Checklist130
- Unpacking the C4C CMTS132
  - Module Protection133
- Installation Considerations134
- Rack Mounting the C4C CMTS137
- Main Hardware Components139
- Power Module and Cabling151
- Power Protection Description159
- C4C CMTS Chassis Maintenance162
- Replacing the C4C CMTS Chassis162
  - Cleaning the Chassis162
  - Air Filters162
Chapter 6165
- SCM Overview165
- SCM Replacement177
- SCM Upgrade to 1GB RAM (SCM II EM)181
- Scm II Em (U)187
- Scm 3187
- Compact Flash195
System Control Module (SCM)165
Router Control Module (RCM)208
- RCM Overview208
- Router Control Module and Rear Filler Panel209
- RCM Hardware210
- Primary Software Functions210
Downstream Cable Access Modules (Dcams)219
- 16D Cable Access Module (16D CAM)219
- Overview219
- XD Cable Access Module (XD CAM)229
- Downstream Parameters242
  - Annex242
  - Downstream Frequency Range248
- XD CAM Field Software Upgrade249
Upstream Cable Access Modules (Ucams)267
- Guidelines268
- 12U Cable Access Module (12U CAM)268
Chapter 9268
- Overview268
- Basic Command Set for Bringing up a 12U CAM274
- Rules and Restrictions for 12U/24U CAM Configuration281
- 24U CAM Upstream Power Level Groups282
  - Annex282
  - Default Admin States286
- Basic Command Set for Bringing up a 24U CAM286
  - Example of Basic Command Sequence for Configuring a 24U in Slot 5286
  - Accepting Default Parameters for Cable Upstream Channels of 24U CAM288
- Measuring SNR in the 12U/24U CAM289
- Adjusting Channel Settings in Response to Increased CM Scaling298
- How to Take a CAM out of Service and Delete Its Slot298
- Explanation of Upstream Parameters299
- Modulation Profiles: Default and User-Defined309
- Optimizing a Modulation Profile311
  - Noise and SNR Versus Modulation Symbol Rate312
Control Complex Redundancy322
- Overview322
- Add Control Complex323
Basic Bring-Up Procedure for the C4 CMTS325
Chapter 11325
- Introduction325
- Verification Steps340
- IP Address Prefixes and Subnets348
- Ipv6 Configuration (Optional)348
Chapter 12351
- Introduction351
- Before You Begin352
- Bring-Up Procedures355
- Basic Bring-Up Procedure358
- Verification Steps366
- Ipv6 Configuration (Optional)372
  - IP Address Prefixes and Subnets373
Basic Bring-Up Procedure for a C4C CMTS351
CAM Sparing375
- Flexcam Hitless CAM Sparing375
- Benefits of Hitless CAM Sparing376
- CAM Sparing PIC Leds376
- Definitions376
- Size of Hitless CAM Spare-Groups376
- Guidelines for CAM Spare Groups377
  - Signal Loss During Failover377
- Configuration Example378
- Deleting a CAM Spare-Group384
Chapter 14386
- Overview386
- MAC Domains387
- Upstream to Downstream Channel Association405
  - Upstream Channel Descriptor Messages405
  - Supervision405
- Cable Plant Topology and Fiber Nodes411
- Service Group Determination and Display416
  - Configure Primary Capability416
  - MAC Domain416
    - Modem and Service Group Association416
    - Recommended Procedures for Topology Changes417
- Channel Sets418
  - Show CLI Commands418
- Receive Channel Configurations and Bonding Groups427
- Display Specific MD-US-SG Service Group427
Cable-Side Configuration386
Interface IP Configuration428
- Subinterfaces (Multiple Vris Per VRF) for Ipv4428
- Overview428
  - Rules of Operation and Guidelines for Subinterfaces429
  - Network Acls430
- Interface Configuration431
- Loopback Interfaces for Routing Protocols438
  - Characteristics of the Loopback Interface438
    - CLI Commands for Active and Loopback Interface439
    - Example of Packet Flow Using Loopback Interface440
- Configuring IP Static Routes441
- Multiple Vrfs441
- Link Aggregation446
Dynamic Routing Protocols457
- Overview of Dynamic Routing457
- Border Gateway Protocol458
  - BGP Version 4458
- Intermediate System-Intermediate System468
- Open Shortest Path First Version 2495
- Open Shortest Path First Version 3502
- Routing Information Protocol521
- Route Redistribution for Ipv4 Addresses532
- Policy-Based Routing (PBR)545
  - Configuring PBR545
  - CLI Commands for PBR553
IP Packet Filters, Subscriber Management560
- Overview560
- Upstream Drop Classifiers583
  - US Drop Classifier Commands583
  - Provisioning583
Baseline Privacy Interface (BPI)585
- BPI Operations586
- Baseline Privacy Key Management (BPKM)586
- Packet Data Encryption586
- Baseline Privacy Operational Overview586
  - Registration587
  - Initialization587
- Baseline Privacy Setup588
- Provisioning X.509 Certificates599
- Baseline Privacy Debugging601
- Baseline Privacy Trap Codes604
- Baseline Privacy: CLI Commands608
- BPI Hybrid Mode Operation611
  - Overview611
  - CLI Commands for BPI Hybrid Mode612
- BPI+ Enforce613
  - CLI Commands614
DOCSIS Set-Top Gateway Configuration616
- Logical Devices in a DSG System616
- Overview616
- DSG Configuration Overview622
- Sample DSG Configuration Scenarios637
- Types of Device Classes644
- Overview644
- Dynamic Host Configuration Protocol (DHCP)646
- Filter Groups Based on Device Class651
Integrated Upstream Agility660
- Overview660
  - Monitoring Upstream Agility State Machines661
  - Limitations662
- Examples of Upstream Agility State Machines663
- Related CLI Commands674
  - Defining Triggers676
- Show Commands679
  - Example of Modifying a State Machine682
- State Machine Crosschecks683
Channel Bonding685
- Channel Assignment685
- Downstream Channel Bonding (DSCB)690
- Upstream Channel Bonding (USCB)700
- Selective Enabling of USCB Within a MAC Domain703
  - Upstream Graceful TCS Reduction703
- Non-Primary Channel Acquisition for Upstream Channel Bonding705
- Snapshot from Config File with Attribute Mask Set for USCB705
- Partial Service Handling706
- Observability712
- Commands Related to Partial Service714
Ipv6715
- Overview715
- Mdf716
- GMAC Explicit Mode716
- Ipv6 Packet Structure716
- Ipv6 Addressing Architecture717
- C4/C CMTS Security Features for Ipv6723
- Ipv6 Configure Commands724
- Dhcpv6 PDRI and Bulk Lease Query731
- Ipv6 Prefix Stability739
- Ipv6 Distribute Lists748
  - Sample Distribute List for Ospfv3 PD Routes748
  - Cleaning up Stale Routes for Ipv6 Prefix Stability748
IP Video750
- Overview750
- IP Video Architecture751
- IP Video Functionality752
- ASM Architecture754
  - Valid Multicast Address Ranges754
  - ASM Components755
- SSM Architecture756
  - SSM Components757
- IP Video Provisioning758
- IP Video Visibility764
  - Verifying the Configuration764
  - More Show Commands765
- IP Video Monitoring and Management771
  - Current Hour Results772
- CLI Commands for IP Video774
Multicast776
- Overview776
- Multicast Traffic777
- IGMP Implementation779
  - Source-Specific Multicast779
    - DOCSIS Compliance for IGMP779
    - IGMP Terminology779
- Multicast Routing Configurations780
- Forced Downstream Replication of Multicast Traffic789
- Deciding Whether to Use this Feature789
- Operational Guidelines790
- Effects of Enabling MDF on the MAC Domain791
- CLI Commands for Multicast792
Connection Admission Control796
- Overview796
- General CAC Description797
- Packetcable CAC Description797
  - Reserved Bandwidth797
- Multicast CAC Description798
  - Guidelines for CAC Thresholds in Non-Converged System799
  - Guidelines for CAC Thresholds in Converged System800
- Configuring CAC800
- Show Commands801
- For 16D or XD Cams802
- Data Consistency Checks803
  - For 12U or 24U Cams803
  - Preemption of Normal Calls by Emergency Calls803
- Load Balancing of Voice Bearer Flows804
- Disable Feature805
Converged Services (Voice and Data)806
- Qos Levels806
  - Ensuring Qos in a Converged Services Environment806
- Overview806
- Packetcable Multimedia Overview813
Security832
- AAA Overview832
- Local Authentication836
- RADIUS Authentication837
- TACACS+ Source Interface852
- Routing to a Null Interface861
  - CLI Commands for Routing to a Null Interface861
- Source Verification of Cable-Side IP Addresses862
  - For Ipv6862
  - CLI Commands for Source Verification863
- CPE Host Authorization864
  - CLI Commands865
- Advanced CM Configuration File Verification866
Unified Electronic Surveillance875
- UES Overview875
- Calea875
  - Electronic Surveillance Configuration877
  - Electronic Surveillance Logging Messages877
- Legal Intercept878
- PC 2.0 Lawfully Authorized Electronic Surveillance884
Load Balancing890
- General Load Balancing Group (GLBG)891
- Overview891
  - Restricted Load Balancing Group (RLBG)892
- Load Balancing Methods893
- Load Balancing Types893
  - Interactions with Older Cable Modems894
- Load Balancing Policy895
- Load Balancing Rules895
- Global Load Balance Settings898
- Load Balance Thresholds899
- Default Configuration900
- Example Configuration902
  - Verify the Configuration903
- Load Balance Modem Steering905
- Load Balance Actions912
- Failed List Operation921
- Movable and Non-Movable Modems923
- Movable CLI Commands925
- Manual Modem Moves926
Packet Throttling930
- Overview930
- RCM Protocol Policing931
  - RCM Protocol CLI Commands931
  - Maintaining Performance During Excessive Traffic931
    - Set Specific Global/Protocol Packet Throttling931
    - Display Protocol-Throttling Settings and Counts932
- Upstream Cable Protocol Throttling933
- ARP/ICMP Throttling940
- Quality of Service Mechanisms943
- Traffic Shaping CLI Commands945
  - Set Peak Traffic Rate for DOCSIS 1.1 COS945
    - Shaping Versus Policing Summary945
    - Traffic Shaping Implementation945
- Power Boost Cap946
Access Control Lists948
- Overview948
  - Named Access Lists949
- Data Plane Filter IP Acls950
- Ipv6 Acls955
  - Example 1955
  - Example 2955
Internet Protocol Detail Record957
- Overview957
- Exporter Services958
- Collector Connectivity960
- Inter-Operations961
  - Simultaneous Sessions961
  - Data Acknowledgment961
- Surveillance962
- Configuration963
Host Names, User Ids, and Password Recovery970
- How to Administer the Host Name and User Ids970
  - Configure a Host Name970
- How to Add and Delete Users971
  - Syslog Server Ipaddress971
- Configuring Privilege Levels and Local Authentication972
  - Passwords in Show Running-Config972
- User Profiles973
- Password Recovery975
  - Enabling Password Recovery Using the Application Dialog975
  - Sample Bootloader Dialog for Password Recovery976
Clock Synchronization Protocol980
- Local (Internal) Clock980
- Overview980
  - Clock Commands981
  - Setting the Internal Clock984
    - Show Clock Network984
    - Show Clock Timezone984
- Network Time Protocol985
  - NTP Server and Authentication Commands985
  - Configure NTP Client986
- Secure NTP989
Service Class Names991
- Overview991
- Service Class Name Details992
- Commands for Adding Service Class Names999
- Integrated Service Class Agility (ISCA)1001
- Operational Considerations for ISCA1001
- Calculating Average Usage1003
- Feature Interactions1003
- CLI Commands Used for ISCA1004
  - CLI Commands Related to Integrated Service Class Agility1004
  - Sample Configuration Commands for ISCA1006
- Dynamic Service Class Modifications1007
- DSCP Marking for Downstream Subscriber Traffic1010
Per-Subscriber Throughput1012
- Overview1012
- Two Display Formats1013
Additional Classifier Support1018
- Description1018
- Overview1018
- Operation1020
Diagnostics1022
- Overview1022
- Problem Isolation1023
- Take Module Out-Of-Service1024
- Diagnostic Logging1028
- Diagnostic Failure and Recovery1029
  - Recovery1030
Logging1031
- Overview1031
- Event Messages1032
- Event Message Routing1034
- Logging History Buffer1036
- System Console1046
- Monitor (Telnet or Secure Shell)1048
- Local Log (Volatile)1050
- Simple Network Management Protocol Management Station1057
Fully-Qualified Domain Name (FQDN)1070
- Overview1070
  - Limited Support for FQDN Feature1071
- Operational Concerns1071
- CLI Commands for FQDN1073
- FQDN Rejection Scenarios1075
Bsod L2VPN1076
- Background Information1077
- Additional Information1080
- Enabling Bsod1081
- Screenshot of Modem Configuration File1082
- CLI Commands for L2VPN1083
- Show Commands for L2VPN and Bsod1084
- Sample BSOD Configuration Using BSOD Capable and Legacy (Ppoe) Modems1086
- Bsod L2VPN Configuration Via CLI1087
- CLI Commands for Configuring Cms for Use with L2VPN Tunnels1087
Standard and Enterprise Mibs1090
- SNMP MIB Variable Descriptions1090
  - Overview1090
- Enterprise Mibs1094
CLI Overview1099
- Access Levels and Modes1099
- Keyboard Shortcuts1105
- CLI Editing Shortcuts1105
- CLI Command Features1106
- Show Cable Modem Column Feature1123
  - Command Parameters1123
  - Help Enhancements1125

Arris C4C - Clear Crypto Sa

Table of Contents

Related product manuals