Cisco cBR 8 Configuration Guide

Password: <password>
Router#
Step 4
Use the dir bootflash command to verify that the bootflash has sufficient space for the DOCSIS root certificate
(approximately 1,000 bytes of disk space):
Example:
Router# dir bootflash:
Directory of bootflash:/
1 -rw- 3229188 Dec 30 2002 15:53:23
cbrsup-universalk9.2015-03-18_03.30_johuynh.SSA.bin
3407872 bytes total (250824 bytes free)
Router#
If you delete files from the bootflash to make room for the DOCSIS root certificate, remember to use
the squeeze command to reclaim the free space from the deleted files.
Tip
Step 5
Use the copy tftp bootflash command to copy the DOCSIS root certificate to the router’s bootflash memory.
(The file must be named “root-cert” on the bootflash for the CMTS to recognize it as the root certificate.)
Example:
Router# copy tftp bootflash:
Address or name of remote host []? tftp-server-ip-address
Source filename []? CableLabs_DOCSIS.509
Destination filename [CableLabs_DOCSIS.509]? root-cert
Loading CableLabs_DOCSIS.509 from tftp-server-ip-address (via FastEthernet0/0): !
[OK - 996/1024 bytes]
996 bytes copied in 4.104 secs (249 bytes/sec)
Router#
You can also copy the root certificate to a PCMCIA Flash Disk (disk0 or disk1). However, because
Flash Disks are not secure and easily removed from the router, we recommend that you keep the root
certificate in the bootflash for both operational and security reasons.
Tip
Step 6
Verify that the DOCSIS root certificate has been successfully copied to the bootflash memory:
Example:
Router# dir bootflash:
Directory of bootflash:/
1 -rw- 3229188 Dec 30 2002 15:53:23
cbrsup-universalk9.2015-03-18_03.30_johuynh.SSA.bin
2 -rw- 996 Mar 06 2002 16:03:46 root-cert
3408876 bytes total (248696 zxbytes free)
Router#
Step 7
(Optional) After the first cable modem has registered using BPI+, you can use the show crypto ca trustpoints
command to display the Root certificate that the CMTS has learned:
The show crypto ca trustpoints command does not display the root certificate until after at least
one cable modem has registered with the CMTS using BPI+ encryption. Alternatively, you can use
the unsupported command test cable generate in privileged EXEC mode to force the CMTS to
register the root certificate.
Note
Example:
Router# show crypto ca trustpoints
Root certificate
Cisco cBR Series Converged Broadband Routers Quality of Services Configuration Guide for Cisco IOS XE
Fuji 16.7.x
52
DOCSIS 1.1 for the Cisco CMTS Routers
Downloading the DOCSIS Root Certificate to the CMTS

Cisco cBR 8 Specifications

General

Brand	Cisco
Model	cBR 8
Category	Network Router
Language	English