2-77
Cisco Broadband Cable Command Reference Guide
OL-1581-08
Chapter 2 Cisco CMTS Configuration Commands
cable dynamic-secret
Note
If you do not use the
cable qos permission
global configuration command to allow cable modems to
create their own QoS profiles, the CMTS rejects this command and displays the following error message:
%Need permission for modems to create QoS profile
The following example shows how to configure a cable interface so that CMs that fail the MIC
verification are locked with a specific QoS profile:
Router#
configure terminal
Router(config)#
interface cable 1/0
Router(config-if)#
cable dynamic-secret lock 31
Router(config-if)#
exit
Router(config)#
exit
Router#
Note
If the specified QoS profile does not exist, the CMTS rejects this command and displays the following
error message:
%Profile
qos-id
to lock modem does not exist
The following example shows how to configure a cable interface on a Cisco uBR7200 series router, so
that CMs that fail the MIC verification are not allowed to register and must reregister with a valid
DOCSIS configuration file before being allowed to come online:
Router#
configure terminal
Router(config)#
interface cable 3/0
Router(config-if)#
cable dynamic-secret reject
Router(config-if)#
exit
Router(config)#
exit
Router#
The following example shows how to disable the Dynamic Shared Secret feature on a cable interface on
the Cisco uBR10012 router:
Router#
configure terminal
Router(config)#
interface cable 6/1/0
Router(config-if)#
no cable dynamic-secret
Router(config-if)#
exit
Router(config)#
exit
Router#
Related Commands
Command
Description
cable shared-secondary-
secret
Configures one or more secondary shared secret keys that CMs can use to
successfully process the DOCSIS configuration file and register with the
CMTS.
cable shared-secret
Configures an authentication shared secret key that CMs must use to
successfully process the DOCSIS configuration file and register with the
CMTS.
cable tftp-enforce
Requires that all CMs on a cable interface attempt to download a DOCSIS
configuration file using Trivial File Transfer Protocol (TFTP) through the
cable interface before being allowed to register and come online.
clear cable modem lock
Resets the lock on one or more CMs, and reinitializes them, so that they
can reregister with a valid DOCSIS configuration file.
show cable modem
rogue
Displays a list of cable modems that have been marked, locked, or rejected
because they failed the dynamic shared-secret authentication checks.