Chapter 29: Security
STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved. 868
Table 109. CLI Commands for TFTP Enforce and Dynamic Secret
Enable TFTP Enforce on a cable-mac.
Note: if no parameter is specified, then the enforcement
action defaults to reject.
configure interface cable-mac <mac> cable
tftp-enforce [block | lock | mark-only]
Disable TFTP Enforce for all modems on a cable-mac.
configure interface cable-mac <mac> cable
tftp-enforce no
Enable Dynamic Secret on a cable-mac. An enforcement
action must be specified.
configure interface cable-mac <mac> cable
dynamic-secret {block | lock | mark | reject}
Disable Dynamic Secret for all modems on a cable-mac.
configure interface cable-mac <mac> cable
dynamic-secret no
Globally enable [disable] both TFTP Enforce and Dynamic
Secret.
Note: by default these are enabled for both IPv4 and IPv6. All
that is required is to enable it on the cable-mac.
configure cable global proxy-tftp [no]
Globally enable TFTP Enforce and Dynamic Secret for all IPv4
or all IPv6 modems.
configure cable global proxy-tftp [ipv4-only |
ipv6-only]
If the previous command has been executed, re-enable TFTP
Enforce and Dynamic Secret for all IPv4 and all IPv6 modems.
configure cable global proxy-tftp
Show status of TFTP Enforce and Dynamic Secret. Shows one
of four states: enabled, disabled, IPv4 modems only, IPv6
modems only.
show cable global-settings
Note: If the global setting is enabled, then cable-mac settings determine which modems have TFTP or Dynamic Secret. The global
settings disabled, IPv4, and IPv6 override the cable-mac settings.
Show status of TFTP Enforce and Dynamic Secret for a specific
cable-mac.
show interface cable-mac <mac> detail
Show modems that failed TFTP Enforce or Dynamic Secret.
To Next Page
Loading...
Need help?
General
