2-76
Cisco Broadband Cable Command Reference Guide
OL-1581-08
Chapter 2 Cisco CMTS Configuration Commands
cable dynamic-secret
Displaying Rogue Cable Modems
Use the
show cable modem rogue
command to display the cable modems that have failed the dynamic
shared-secret authentication checks:
Router#
show cable modem rogue
Spoof TFTP
MAC Address Vendor Interface Count Dnld Dynamic Secret
AAAA.7b43.aa7f Vendor1 C4/0/U5 2 Yes 45494DC933F8F47A398F69EE6361B017
AAAA.7b43.aa7f Vendor1 C4/0/U5 2 Yes D47BCBB5494E9936D51CB0EB66EF0B0A
BBBB.7b43.aa7f Vendor2 C4/0/U5 2 No 8EB196423170B26684BF6730C099D271
AAAA.7b43.aa7f Vendor1 C4/0/U5 2 No DF8FE30203010001A326302430120603
BBBB.7b43.aa7f Vendor2 C4/0/U5 2 No 300E0603551D0F0101FF040403020106
AAAA.7b43.aa7f Vendor1 C4/0/U5 2 Yes 820101002D1A264CE212A1BB6C1728B3
DDDD.7b43.aa7f Vendor4 C4/0/U5 2 Yes 7935B694DCA90BC624AC92A519C214B9
AAAA.7b43.aa7f Vendor1 C4/0/U5 2 No 3AB096D00D56ECD07D9B7AB662451CFF
Router#
If the CMTS cannot obtain the DOCSIS configuration file from the TFTP server, a message similar to
the following is displayed on the console:
%UBR7200-4-NOCFGFILE: Cannot read modem config file platinum.cm from C3/0: <reason>
where the reason can be one of the following, depending on the error that the TFTP server reported:
•
Compression Failed
•
File too big
•
Invalid Checksum
•
Invalid IP address or hostname
•
Uncompression Failed
•
User Abort
Examples
The following example shows how to configure a cable interface on a Cisco uBR7200 series router with
the
mark
option, so that CMs that fail the MIC verification are allowed to register but are marked in the
show cable modem
displays so that their situation can be further investigated:
Router#
configure terminal
Router(config)#
interface cable 4/0
Router(config-if)#
cable dynamic-secret mark
Router(config-if)#
exit
Router(config)#
exit
Router#
The following example shows how to configure the cable interface on a Cisco uBR7100 series router, so
that CMs that fail the MIC verification are locked with a QoS profile that limits upstream and
downstream service flows to 10 kbps:
Router#
configure terminal
Router(config)#
cable qos permission create
Router(config)#
cable qos permission update
Router(config)#
interface cable 1/0
Router(config-if)#
cable dynamic-secret lock
Router(config-if)#
exit
Router(config)#
exit
Router#