 Feedback
|
Table Of Contents
Release Notes for Cisco uBR7100 Series for Cisco IOS Release 12.3 BC
Overview of Cisco Universal Broadband Routers
Cisco uBR7100 Series Universal Broadband Routers
Cisco uBR7111 and Cisco uBR7111E Universal Broadband Routers
Cisco uBR7114 and Cisco uBR7114E Universal Broadband Routers
Universal Broadband Router Overview
Determining Your Software Release
Upgrading to a New Software Release
DOCSIS System Interoperability on the Cisco uBR7100 Series CMTS
DOCSIS 1.0 and 1.0+ Extensions
New Hardware Features in Cisco IOS Release 12.3(21a)BC9
New Software Features in Cisco IOS Release 12.3(21a)BC9
New Hardware Features in Cisco IOS Release 12.3(23)BC6
New Software Features in Cisco IOS Release 12.3(23)BC5
New Hardware Features in Cisco IOS Release 12.3(23)BC5
New Software Features in Cisco IOS Release 12.3(23)BC5
New Hardware Features in Cisco IOS Release 12.3(23)BC4
New Software Features in Cisco IOS Release 12.3(23)BC4
New Hardware Features in Cisco IOS Release 12.3(21a)BC8
New Software Features in Cisco IOS Release 12.3(21a)BC8
New Hardware Features in Cisco IOS Release 12.3(23)BC3
New Software Features in Cisco IOS Release 12.3(23)BC3
New Hardware Features in Cisco IOS Release 12.3(23)BC2
New Software Features in Cisco IOS Release 12.3(23)BC2
Subscriber Traffic Management Version 1.2
New Hardware Features in Cisco IOS Release 12.3(21a)BC7
New Software Features in Cisco IOS Release 12.3(21a)BC7
New Hardware Features in Cisco IOS Release 12.3(23)BC1
New Software Features in Cisco IOS Release 12.3(23)BC1
New Hardware Features in Cisco IOS Release 12.3(21a)BC6
New Software Features in Cisco IOS Release 12.3(21a)BC6
New Hardware Features in Cisco IOS Release 12.3(21a)BC5
New Software Features in Cisco IOS Release 12.3(21a)BC5
New Hardware Features in Cisco IOS Release 12.3(23)BC
DOCSIS Timing & Control Card (DTCC)
New Software Features in Cisco IOS Release 12.3(23)BC
New Hardware Features in Cisco IOS Release 12.3(21a)BC4
New Software Features in Cisco IOS Release 12.3(21a)BC4
New Hardware Features in Cisco IOS Release 12.3(21a)BC3
New Software Features in Cisco IOS Release 12.3(21a)BC3
New Hardware Features in Cisco IOS Release 12.3(21a)BC2
New Software Features in Cisco IOS Release 12.3(21a)BC2
New Hardware Features in Cisco IOS Release 12.3(21a)BC1
New Software Features in Cisco IOS Release 12.3(21a)BC1
New Hardware Features in Cisco IOS Release 12.3(21)BC
New Software Features in Cisco IOS Release 12.3(21)BC
Automatic Virtual Interface Bundles
Per Downstream Static Multicast
SAMIS Source Address Management
New Hardware Features in Cisco IOS Release 12.3(17b)BC9
New Software Features in Cisco IOS Release 12.3(17b)BC9
New Hardware Features in Cisco IOS Release 12.3(17b)BC8
New Software Features in Cisco IOS Release 12.3(17b)BC8
New Hardware Features in Cisco IOS Release 12.3(17b)BC7
New Software Features in Cisco IOS Release 12.3(17b)BC7
New Hardware Features in Cisco IOS Release 12.3(17b)BC6
New Software Features in Cisco IOS Release 12.3(17b)BC6
New Hardware Features in Cisco IOS Release 12.3(17b)BC5
New Software Features in Cisco IOS Release 12.3(17b)BC5
New Hardware Features in Cisco IOS Release 12.3(17b)BC4
New Software Features in Cisco IOS Release 12.3(17b)BC4
Downstream Load Balancing Distribution with Upstream Load Balancing
New Hardware Features in Cisco IOS Release 12.3(17b)BC3
New Software Features in Cisco IOS Release 12.3(17b)BC3
New Hardware Features in Cisco IOS Release 12.3(17a)BC2
New Software Features in Cisco IOS Release 12.3(17a)BC2
Advanced-Mode DOCSIS Set-Top Gateway Issue 1.2
New Hardware Features in Cisco IOS Release 12.3(17a)BC1
New Software Features in Cisco IOS Release 12.3(17a)BC1
New Hardware Features in Cisco IOS Release 12.3(17a)BC
New Software Features in Cisco IOS Release 12.3(17a)BC
Configurable Leasequery Server
Dynamic Channel Change (DCC) for Load balancing
DSX Messages and Synchronized PHS Information
High Availability Support for Encrypted IP Multicast
Management Information Base (MIB) Changes and Enhancements
Pre-equalization Control for Cable Modems
show cable modem Command Changes
New Hardware Features in Cisco IOS Release 12.3(13a)BC6
New Software Features in Cisco IOS Release 12.3(13a)BC6
New Hardware Features in Cisco IOS Release 12.3(13a)BC5
New Software Features in Cisco IOS Release 12.3(13a)BC5
New Hardware Features in Cisco IOS Release 12.3(13a)BC4
New Software Features in Cisco IOS Release 12.3(13a)BC4
New Hardware Features in Cisco IOS Release 12.3(13a)BC3
New Software Features in Cisco IOS Release 12.3(13a)BC3
New Hardware Features in Cisco IOS Release 12.3(13a)BC2
New Software Features in Cisco IOS Release 12.3(13a)BC2
New Hardware Features in Cisco IOS Release 12.3(13a)BC1
New Software Features in Cisco IOS Release 12.3(13a)BC1
New Hardware Features in Cisco IOS Release 12.3(13a)BC
New Software Features in Cisco IOS Release 12.3(13a)BC
Access List Support for COPS Intercept
DOCSIS 1.0 Concatenation Override
Enhanced Rate Bandwidth Allocation (ERBA) Support for DOCSIS 1.0 Cable Modems
Service Independent Intercept (SII) Support on the Cisco uBR7100 CMTS
Optional Upstream Scheduler Modes
New Hardware Features in Cisco IOS Release 12.3(9a)BC8
New Software Features in Cisco IOS Release 12.3(9a)BC8
New Hardware Features in Cisco IOS Release 12.3(9a)BC7
New Software Features in Cisco IOS Release 12.3(9a)BC7
New Hardware Features in Cisco IOS Release 12.3(9a)BC6
New Software Features in Cisco IOS Release 12.3(9a)BC6
New Hardware Features in Cisco IOS Release 12.3(9a)BC5
New Software Features in Cisco IOS Release 12.3(9a)BC5
New Hardware Features in Cisco IOS Release 12.3(9a)BC4
New Software Features in Cisco IOS Release 12.3(9a)BC4
New Hardware Features in Cisco IOS Release 12.3(9a)BC3
New Software Features in Cisco IOS Release 12.3(9a)BC3
New Hardware Features in Cisco IOS Release 12.3(9a)BC2
New Software Features in Cisco IOS Release 12.3(9a)BC2
New Hardware Features in Cisco IOS Release 12.3(9a)BC1
New Software Features in Cisco IOS Release 12.3(9a)BC1
New Hardware Features in Cisco IOS Release 12.3(9a)BC
New Software Features for Cisco IOS Release 12.3(9a)BC
Cisco Broadband Troubleshooter 3.2
Cisco IOS Release 12.3(9a)BC Command-Line Interface (CLI) Enhancements
DOCSIS Set-Top Gateway Issue 1.0
MIBs Changes and Updates in Cisco IOS Release 12.3(9a)BC
Subscriber Traffic Management (STM) Version 1.1
How to Upgrade to Cisco IOS Release 12.3(21)BC
New Command Information for Cisco IOS Release 12.3(21)BC3
New and Changed Command Reference for Cisco IOS Release 12.3(9a)BC
Open Caveats for Release 12.3(21a)BC9.
Resolved Caveats for Release 12.3(21a)BC9
Open Caveats for Release 12.3(23)BC8
Resolved Caveats for Release 12.3(23)BC8
Open Caveats for Release 12.3(23)BC6
Resolved Caveats for Release 12.3(23)BC6
Open Caveats for Release 12.3(23)BC5
Resolved Caveats for Release 12.3(23)BC5
Open Caveats for Release 12.3(23)BC4
Resolved Caveats for Release 12.3(23)BC4
Open Caveats for Release 12.3(21a)BC8
Resolved Caveats for Release 12.3(21a)BC8
Open Caveats for Release 12.3(23)BC3
Resolved Caveats for Release 12.3(23)BC3
Open Caveats for Release 12.3(23)BC2
Resolved Caveats for Release 12.3(23)BC2
Open Caveats for Release 12.3(21a)BC7
Resolved Caveats for Release 12.3(21a)BC7
Open Caveats for Release 12.3(23)BC1
Resolved Caveats for Release 12.3(23)BC1
Open Caveats for Release 12.3(21a)BC6
Resolved Caveats for Release 12.3(21a)BC6
Open Caveats for Release 12.3(21a)BC5
Resolved Caveats for Release 12.3(21a)BC5
Open Caveats for Release 12.3(23)BC
Resolved Caveats for Release 12.3(23)BC
Open Caveats for Release 12.3(21a)BC4
Resolved Caveats for Release 12.3(21a)BC4
Open Caveats for Release 12.3(21a)BC3
Resolved Caveats for Release 12.3(21a)BC3
Open Caveats for Release 12.3(21a)BC2
Resolved Caveats for Release 12.3(21a)BC2
Open Caveats for Release 12.3(21a)BC1
Resolved Caveats for Release 12.3(21a)BC1
Open Caveats for Release 12.3(21)BC
Resolved Caveats for Release 12.3(21)BC
Open Caveats for Release 12.3(17b)BC9
Resolved Caveats for Release 12.3(17b)BC9
Open Caveats for Release 12.3(17b)BC8
Resolved Caveats for Release 12.3(17b)BC8
Open Caveats for Release 12.3(17b)BC7
Resolved Caveats for Release 12.3(17b)BC7
Open Caveats for Release 12.3(17b)BC6
Resolved Caveats for Release 12.3(17b)BC6
Open Caveats for Release 12.3(17b)BC5
Resolved Caveats for Release 12.3(17b)BC5
Open Caveats for Release 12.3(17b)BC4
Resolved Caveats for Release 12.3(17b)BC4
Open Caveats for Release 12.3(17b)BC3
Resolved Caveats for Release 12.3(17b)BC3
Open Caveats for Release 12.3(17a)BC2
Resolved Caveats for Release 12.3(17a)BC2
Open Caveats for Release 12.3(17a)BC1
Resolved Caveats for Release 12.3(17a)BC1
Open Caveats for Release 12.3(17a)BC
Resolved Caveats for Release 12.3(17a)BC
Open Caveats for Release 12.3(13a)BC6
Resolved Caveats for Release 12.3(13a)BC6
Open Caveats for Release 12.3(13a)BC5
Resolved Caveats for Release 12.3(13a)BC5
Open Caveats for Release 12.3(13a)BC4
Resolved Caveats for Release 12.3(13a)BC4
Open Caveats for Release 12.3(13a)BC3
Resolved Caveats for Release 12.3(13a)BC3
Open Caveats for Release 12.3(13a)BC2
Resolved Caveats for Release 12.3(13a)BC2
Open Caveats for Release 12.3(13a)BC1
Resolved Caveats for Release 12.3(13a)BC1
Open Caveats for Release 12.3(13a)BC
Resolved Caveats for Release 12.3(13a)BC
Open Caveats for Release 12.3(9a)BC8
Resolved Caveats for Release 12.3(9a)BC8
Open Caveats for Release 12.3(9a)BC7
Resolved Caveats for Release 12.3(9a)BC7
Open Caveats for Release 12.3(9a)BC6
Resolved Caveats for Release 12.3(9a)BC6
Open Caveats for Release 12.3(9a)BC5
Resolved Caveats for Release 12.3(9a)BC5
Open Caveats for Release 12.3(9a)BC4
Resolved Caveats for Release 12.3(9a)BC4
Open Caveats for Release 12.3(9a)BC3
Resolved Caveats for Release 12.3(9a)BC3
Open Caveats for Release 12.3(9a)BC2
Resolved Caveats for Release 12.3(9a)BC2
Open Caveats for Release 12.3(9a)BC1
Resolved Caveats for Release 12.3(9a)BC1
Open Caveats for Release 12.3(9a)BC
Resolved Caveats for Release 12.3(9a)BC
Cisco IOS Software Documentation Set
Release 12.3 Documentation Set
Obtaining Documentation, Obtaining Support, and Security Guidelines
Release Notes for Cisco uBR7100 Series for Cisco IOS Release 12.3 BC
Revised: September 23, 2009, OL-16010-07The release notes for Cisco IOS Release 12.3BC for the Cisco uBR7100 series universal broadband routers describe the enhancements and caveats for all releases in the cable-specific, early deployment, 12.3BC release trains. Some of the most recent releases in 12.3BC include 12.3(17b)BCx-, 12.3(21a)BCx-, and 12.3(23)BCx-based releases.
These release notes are updated with each release in the train. This update adds information for Cisco IOS Release 12.3(23)BC5. For a list of the updated caveats that apply to each release, see the "Caveats" section and also the Caveats for Cisco IOS Release 12.3 T. Use these release notes in conjunction with the cross-platform Release Notes for Cisco IOS Release 12.3 T located on Cisco.com and the Documentation CD-ROM.
Cisco recommends that you view the field notices for this release to see if your software or hardware platforms are affected. If you have an account on Cisco.com, you can find field notices at http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html. If you do not have a Cisco.com login account, you can find field notices at http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html.
Contents
These release notes describe the following topics:
•
Obtaining Documentation, Obtaining Support, and Security Guidelines
Introduction
For information on new features and the Cisco IOS documentation set supported by Cisco IOS Release 12.3(23)BC5, see the "New and Changed Information" section and the "Related Documentation" section.
Overview of Cisco Universal Broadband Routers
The Cisco uBR7100 series universal broadband routers—the Cisco uBR7111, Cisco uBR7111E, Cisco uBR7114, and Cisco uBR7114E—are based on the Data-over-Cable Service Interface Specification (DOCSIS) standards and designed to be installed at small cable operators and multiple dwelling unit (MDU) operators to enable them to offer services such as e-mail, high-speed Internet access, voice, and digital video over a bidirectional cable television and IP backbone network. The universal broadband routers function as the cable modem termination system (CMTS) for subscriber-end devices such as Cisco uBR905, Cisco uBR924, and Cisco uBR925 cable access routers, and other DOCSIS-compliant cable modems (CMs) and set-top boxes (STBs).
Both the Cisco uBR7100 series and Cisco uBR7200 series universal broadband routers allow two-way transmission of digital data and Voice over IP (VoIP) traffic over a hybrid fiber-coaxial (HFC) network. The Cisco uBR7100 series routers support IP routing with a wide variety of protocols and WAN interfaces selections.
Cisco IOS Release 12.3(23)BC5 supports the Cisco uBR7111, Cisco uBR7111E, Cisco uBR7114, and Cisco uBR7114E universal broadband routers.
Cisco uBR7100 Series Universal Broadband Routers
The Cisco uBR7100 series routers provide a fixed set of WAN and LAN interfaces with a combination of fixed and modular interfaces, allowing both flexibility and simplicity in configuration. Each Cisco uBR7100 series router includes one modular single-width port adapter, one integrated cable interface with an internal upconverter, and two integrated Fast Ethernet ports. The cable interface is based on the Cisco uBR-MC14C cable interface line card and is not field-replaceable.
The Cisco uBR7100 series routers support IP routing through the following optional WAN and LAN port adapters: Ethernet, Fast Ethernet, serial, High-Speed Serial Interface (HSSI), Packet over SONET (POS) OC-3c, and Asynchronous Transfer Mode (ATM) media. For more information, see Table 4.
Depending on the model, the Cisco uBR7100 series routers support the following two standards:
•
•
The Cisco uBR7100 series offers the following models:
•
•
Cisco uBR7111 and Cisco uBR7111E Universal Broadband Routers
The Cisco uBR7111 and Cisco uBR7111E provide the following major hardware features:
•
•
•
•
•
•
•
•
Cisco uBR7114 and Cisco uBR7114E Universal Broadband Routers
The Cisco uBR7114 and Cisco uBR7114E provide the following major hardware features:
•
•
•
•
•
•
•
•
Universal Broadband Router Overview
Table 1 provides a quick overview of the major hardware features of the two universal broadband routers.
Early Deployment Releases
These release notes describe the Cisco uBR7100 series universal broadband routers for Cisco IOS Release 12.3(23)BC5. Feature support is cumulative from release to release, unless otherwise noted.
Table 2 lists any features supported by the Cisco uBR7100 Series routers in Cisco IOS Release 12.3 BC. For complete feature information, refer to these additional resources on Cisco.com:
•
http://www.cisco.com/en/US/products/hw/cable/ps2211/prod_release_notes_list.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/ubr7100/configuration/guide/scg7100.html.
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
Table 2 Early Deployment (ED) Releases for the Cisco uBR7100 Series Routers
AvailabilityCisco IOS Release 12.3(21a)BC9
None
None
Now
Cisco IOS Release 12.3(23)BC6
None
None
Now
Cisco IOS Release 12.3(23)BC5
None
None
Now
Cisco IOS Release 12.3(23)BC4
None
None
Now
Cisco IOS Release 12.3(21a)BC8
None
None
Now
Cisco IOS Release 12.3(23)BC3
None
None
Now
Cisco IOS Release 12.3(23)BC2
None
Now
Cisco IOS Release 12.3(21a)BC7
None
None
Now
Cisco IOS Release 12.3(23)BC1
None
None
Now
Cisco IOS Release 12.3(21a)BC6
None
None
Now
Cisco IOS Release 12.3(21a)BC5
None
None
Now
Cisco IOS Release 12.3(23)BC
None
None
Now
Cisco IOS Release 12.3(21a)BC4
None
None
Now
Cisco IOS Release 12.3(21a)BC3
None
None
Now
Cisco IOS Release 12.3(21a)BC2
None
None
Now
Cisco IOS Release 12.3(21a)BC1
None
None
Now
Cisco IOS Release 12.3(21)BC
•
•
None
Now
Cisco IOS Release 12.3(17b)BC9
None
None
Now
Cisco IOS Release 12.3(17b)BC8
None
None
Now
Cisco IOS Release 12.3(17b)BC7
None
None
Now
Cisco IOS Release 12.3(17b)BC6
None
None
Now
Cisco IOS Release 12.3(17b)BC5
None
None
Now
Cisco IOS Release 12.3(17b)BC4
•
None
Now
Cisco IOS Release 12.3(17b)BC3
None
None
Now
Cisco IOS Release 12.3(17a)BC2
•
None
Now
Cisco IOS Release 12.3(17a)BC1
None
None
Now
Cisco IOS Release 12.3(17a)BC
•
•
•
•
•
•
None
Now
Cisco IOS Release 12.3(13a)BC6
None
None
Now
Cisco IOS Release 12.3(13a)BC5
None
None
Now
Cisco IOS Release 12.3(13a)BC4
None
None
Now
Cisco IOS Release 12.3(13a)BC3
None
None
Now
Cisco IOS Release 12.3(13a)BC2
None
None
Now
Cisco IOS Release 12.3(13a)BC1
None
None
Now
Cisco IOS Release 12.3(13a)BC
•
•
•
None
Now
Cisco IOS Release 12.3(9a)BC8
None
None
Now
Cisco IOS Release 12.3(9a)BC7
None
None
Now
Cisco IOS Release 12.3(9a)BC6
None
None
Now
Cisco IOS Release 12.3(9a)BC5
None
None
Now
Cisco IOS Release 12.3(9a)BC4
None
None
Now
Cisco IOS Release 12.3(9a)BC3
None
None
Now
Cisco IOS Release 12.3(9a)BC2
None
None
Now
Cisco IOS Release 12.3(9a)BC1
None
None
Now
Cisco IOS Release 12.3(9a)BC
•
•
•
•
•
Now
1 Only major features are listed.
2 MIB = Management Information Base
System Requirements
This section describes the system requirements for Cisco IOS Release 12.3(23)BC5 and includes the following sections:
•
•
Memory Recommendations
Table 3 displays the memory recommendations of the Cisco IOS feature sets for the Cisco uBR7100 series universal broadband routers for Cisco IOS Release 12.3 BC. Cisco uBR7100 series routers are available with a 16-MB or 20-MB Type II PCMCIA Flash memory card.
The image subset legend for Table 3 is as follows:
•
•
•
•
Note
Supported Hardware
This section describes the hardware supported by the Cisco uBR7100 Universal Broadband Router in Cisco IOS Release 12.3(21a)BC and 12.3(23)BC releases.
For detailed descriptions of the new hardware features, see the "New and Changed Information" section.
The following models of the Cisco uBR7100 series routers are supported in Cisco IOS 12.3BC software releases.
•
•
•
•
Port Adapter Cards
Table 4 lists and describes the port adapters supported by Cisco uBR7100 series routers in Cisco IOS Release 12.3(23)BC5.
Note
http://www.cisco.com/en/US/products/hw/cable/ps2217/prod_eol_notices_list.html
.
Table 4 Cisco uBR7200 Series Port Adapter Releases
Ethernet
PA-4E—4-port Ethernet 10BASE-T port adapter
12.2(4)XF1
No
PA-8E—8-port Ethernet 10BASE-T port adapter
12.2(4)XF1
Yes
Fast Ethernet
PA-FE-TX—1-port 100BASE-TX Fast Ethernet port adapter
12.2(4)XF1
No
PA-FE-FX—1-port 100BASE-FX Fast Ethernet port adapter
12.2(4)XF1
No
PA-2FE-TX—2-port 100BASE-TX Fast Ethernet port adapter
12.2(4)XF1
No
PA-2FE-FX—2-port 100BASE-FX Fast Ethernet port adapter
12.2(4)XF1
No
Serial
PA-E3—1-port high-speed serial E3 interface port adapter
12.2(4)XF1
No
PA-T3—1-port T3 serial interface port adapter
12.2(4)XF1
No
PA-T3+—1-port T3 serial interface port adapter enhanced
12.2(4)BC1
No
PA-2E3—2-port high-speed serial E3 interface port adapter
12.2(4)XF1
No
PA-2T3—2-port T3 serial interface port adapter
12.2(4)XF1
No
PA-2T3+—2-port T3 serial interface port adapter enhanced
12.2(4)BC1
No
PA-4T+—4-port synchronous serial port adapter
12.2(4)XF1
No
PA-4E1G-75—4-port unbalanced (75-ohm) E1-G.703/G.704 synchronous serial port adapter
12.2(4)XF1
No
PA-4E1G-120—4-port balanced (120-ohm) E1-G.703/G.704 synchronous serial port adapter
12.2(4)XF1
No
PA-8T-232—8-port EIA/TIA-232 synchronous serial port adapter
12.2(4)XF1
Yes
PA-8T-V35—8-port V.35 synchronous serial port adapter
12.2(4)XF1
No
PA-8T-X21—8-port X.21 synchronous serial port adapter
12.2(4)XF1
Yes
PA-MC-2T1—2-port multichannel DS1 Integrated Services Digital Network (ISDN) Primary Rate Interface (PRI) single-wide port adapter
12.2(4)XF1
Yes
PA-MC-4T1—4-port multichannel DS1 ISDN PRI single-wide port adapter
12.2(4)XF1
No
HSSI
PA-H—1-port HSSI port adapter
12.2(4)XF1
Yes
PA-2H—2-port HSSI port adapter
12.2(4)XF1
No
ATM
PA-A3-E3—1-port E3 ATM, PCI-based, single-width port adapter, that uses an E3 interface with a coaxial cable BNC connector
12.2(8)BC1
No
PA-A3-OC3MM—1-port OC-3c ATM, PCI-based multimode port adapter
12.2(4)XF1
No
PA-A3-OC3SMI—1-port OC-3c ATM, PCI-based single-mode intermediate reach port adapter
12.2(4)XF1
Yes
PA-A3-OC3SML—1-port OC-3c ATM, PCI-based single-mode long reach port adapter
12.2(4)XF1
No
PA-A3-8T1/IMA—ATM inverse multiplexer over ATM port adapter with 8 T1 ports
12.2(4)XF1
No
Packet over SONET
PA-POS-OC3SMI—1-port OC3 single-mode, intermediate reach port adapter
12.2(4)XF1
No
1 The number in this column indicates the Cisco IOS release in which the interface was introduced in this train.
Determining Your Software Release
To determine the version of Cisco IOS software running on the Cisco uBR7100 series universal broadband router, log in to the router and enter the show version EXEC command:
Router> show versionCisco Internetwork Operating System SoftwareIOS (tm) 12.3 BC Software (ubr7100-k8p-mz), Version 12.3(23)BC, RELEASE SOFTWAREUpgrading to a New Software Release
For general information about upgrading to a new software release, see Cisco IOS Upgrade Ordering Instructions located at the following location on Cisco.com:
http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/957_pp.htm
DOCSIS System Interoperability on the Cisco uBR7100 Series CMTS
This section describes the operation of primary interoperability features in the Cisco uBR7100 series router. For additional DOCSIS information, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_docs.html.
DOCSIS 1.0 Baseline Privacy
DOCSIS baseline privacy interface (BPI) gives subscribers data privacy across the RF network, encrypting traffic flows between the cable modem termination system (CMTS) and cable modem. BPI ensures that a cable modem, uniquely identified by its Media Access Control (MAC) address, can obtain keying material for services only it is authorized to access.
To enable BPI, choose software at both the CMTS and cable modem that support this mode of operation. Select a Cisco IOS image that supports BPI. BPI must be enabled using the DOCSIS configuration file.
The cable modem must also support BPI. Cable modems must have factory-installed RSA private/public key pairs to support internal algorithms to generate key pairs prior to first BPI establishment.
Note
Cable Modem Interoperability
•
•
Note
Configuring the CMTS Cable Interface When in Routing Mode
If you have configured a Cisco cable modem (CM) for routing mode and are also using the cable-modem dhcp-proxy nat command on the cable modem, you must configure the corresponding cable interface on the Cisco uBR7100 series router with the cable dhcp-giaddr policy command. Otherwise, the cable interface could flap and the CM could go offline unpredictably.
DOCSIS 1.0 and 1.0+ Extensions
Earlier releases of Cisco IOS software for the Cisco uBR7100 series router provide support for the original DOCSIS 1.0 standard, featuring basic best-effort data traffic and Internet access over the coaxial cable network. The DOCSIS 1.0+ extensions provides Quality of Service (QoS) enhancements for real-time traffic, such as voice calls, in anticipation of full DOCSIS 1.1 support.
Note
DOCSIS 1.1 Extensions
The DOCSIS 1.1 specification provides the following functional enhancements over DOCSIS 1.0 coaxial cable networks:
•
–
–
–
–
–
•
–
–
–
–
–
•
•
•
•
•
DOCSIS 1.1 Quality of Service
The DOCSIS 1.1 QoS framework is based on the following objects:
•
•
•
•
In DOCSIS 1.1, the basic unit of QoS is the service flow, which is a unidirectional sequence of packets transported across the RF interface between the cable modem and CMTS. A service flow is characterized by a set of QoS parameters such as latency, jitter, and throughput assurances.
Every cable modem establishes a primary service flow in both the upstream and downstream directions. The primary flows maintain connectivity between the cable modem and CMTS at all times.
In addition, a DOCSIS 1.1 cable modem can establish multiple secondary service flows. The secondary service flows can either be permanently created (they persist until the cable modem is reset or powered off) or they can be created dynamically to meet the needs of the on demand traffic being transmitted.
Each service flow has a set of QoS attributes associated with it. These QoS attributes define a particular class of service and determine characteristics such as the maximum bandwidth for the service flow and the priority of its traffic. The class of service attributes can be inherited from a preconfigured CMTS local service class (class-based flows), or they can be individually specified at the time of the creation of the service flow.
Each service flow has multiple packet classifiers associated with it, which determine the type of application traffic allowed to be sent on that service flow. Each service flow can also have a Payload Header Suppression (PHS) rule associated with it to determine which portion of the packet header will be suppressed when packets are transmitted on the flow.
Feature Support
Cisco IOS software is packaged in feature sets that consist of software images that support specific platforms. The feature sets available for a specific platform depend on which Cisco IOS software images are included in a release. Each feature set contains a specific set of Cisco IOS features.
Caution
The feature set tables have been removed from the Cisco IOS Release 12.3 release notes to improve the usability of the release notes documentation. The feature-to-image mapping that was provided by the feature set tables is available through Cisco Feature Navigator.
Cisco Feature Navigator is a web-based tool that enables you to determine which Cisco IOS software images support a specific set of features and which features are supported in a specific Cisco IOS image. You can search by feature or by feature set (software image). Under the release section, you can compare Cisco IOS software releases side by side to display both the features unique to each software release and the features that the releases have in common.
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or lost your account information, send a blank e-mail to cco-locksmith@cisco.com. An automatic check will verify that your e-mail address is registered with Cisco.com. If the check is successful, account details with a new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com by following the directions found at this URL:
http://www.cisco.com.com/web/siteassets/account/index.html
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology releases occur. For the most current information, go to the Cisco Feature Navigator home page at the following URL:
For frequently asked questions about Cisco Feature Navigator, see the FAQs at the following URL:
http://www.cisco.com/support/FeatureNav/FNFAQ.html
Determining Which Software Images (Feature Sets) Support a Specific Feature
To determine which software images (feature sets) in Cisco IOS Release 12.3 support a specific feature, go to the Cisco Feature Navigator home page, enter your Cisco.com login, and perform the following steps:
Step 1
Step 2
Step 3
Note
Repeat this step to add additional features. A maximum of 20 features can be chosen for a single search.
Step 4
Step 5
Step 6
Step 7
Determining Which Features Are Supported in a Specific Software Image (Feature Set)
To determine which features are supported in a specific software image (feature set) in Cisco IOS Release 12.3, go to the Cisco Feature Navigator home page, enter your Cisco.com login, and perform the following steps:
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
New and Changed Information
The following sections list the new hardware and software features supported by the Cisco uBR7100 series routers for Cisco IOS Release 12.3(23)BC5.
New Hardware Features in Cisco IOS Release 12.3(21a)BC9
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC9.
New Software Features in Cisco IOS Release 12.3(21a)BC9
There are no new software features supported in Cisco IOS Release 12.3(21a)BC9.
New Hardware Features in Cisco IOS Release 12.3(23)BC6
There are no new hardware features supported in Cisco IOS Release 12.3(23)BC6.
New Software Features in Cisco IOS Release 12.3(23)BC5
There are no new software features supported in Cisco IOS Release 12.3(23)BC5.
New Hardware Features in Cisco IOS Release 12.3(23)BC5
There are no new hardware features supported in Cisco IOS Release 12.3(23)BC5.
New Software Features in Cisco IOS Release 12.3(23)BC5
There are no new software features supported in Cisco IOS Release 12.3(23)BC5.
New Hardware Features in Cisco IOS Release 12.3(23)BC4
There are no new hardware features supported in Cisco IOS Release 12.3(23)BC4.
New Software Features in Cisco IOS Release 12.3(23)BC4
There are no new software features supported in Cisco IOS Release 12.3(23)BC4.
New Hardware Features in Cisco IOS Release 12.3(21a)BC8
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC8.
New Software Features in Cisco IOS Release 12.3(21a)BC8
There are no new software features supported in Cisco IOS Release 12.3(21a)BC8.
New Hardware Features in Cisco IOS Release 12.3(23)BC3
There are no new hardware features supported in Cisco IOS Release 12.3(23)BC3.
New Software Features in Cisco IOS Release 12.3(23)BC3
There are no new software features supported in Cisco IOS Release 12.3(23)BC3.
New Hardware Features in Cisco IOS Release 12.3(23)BC2
There are no new hardware features supported in Cisco IOS Release 12.3(23)BC2.
New Software Features in Cisco IOS Release 12.3(23)BC2
The following software feature is new in Cisco IOS Release 12.3(23)BC2.
Subscriber Traffic Management Version 1.2
The STM feature enables service providers to identify and control subscribers who exceed the maximum bandwidth allowed under their registered quality of service (QoS) profiles. STM works as a low CPU alternative to Network-Based Application Recognition (NBAR) and access control lists (ACLs), however, using STM does not mean that NBAR and ACLs have to be turned off; STM can be applied along with NBAR and ACLs. STM also works in conjunction with the Cisco Broadband Troubleshooter to support additional network management and troubleshooting functions in the Cisco CMTS.
The STM Version 1.2 feature is enhanced in Cisco IOS Release 12.3(23)BC2 with the following support on the Cisco uBR7246VXR and Cisco uBR10012 Universal Broadband Routers:
•
•
•
•
•
Addition of the following SNMP objects to the CISCO-CABLE-QOS-MONITOR-MIB:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
The following commands are new or modified:
•
•
•
•
•
•
For detailed information about this feature, see the Subscriber Traffic Management on the Cisco CMTS Routers document at:
http://www.cisco.com/en/US/docs/ios/cable/configuration/guide/cmts_sbsbr_tfmgt.html
New Hardware Features in Cisco IOS Release 12.3(21a)BC7
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC7.
New Software Features in Cisco IOS Release 12.3(21a)BC7
There are no new software features supported in Cisco IOS Release 12.3(21a)BC7.
New Hardware Features in Cisco IOS Release 12.3(23)BC1
There are no new hardware features supported in Cisco IOS Release 12.3(23)BC1.
New Software Features in Cisco IOS Release 12.3(23)BC1
There are no new software features supported in Cisco IOS Release 12.3(23)BC1.
New Hardware Features in Cisco IOS Release 12.3(21a)BC6
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC6.
New Software Features in Cisco IOS Release 12.3(21a)BC6
There are no new software features supported in Cisco IOS Release 12.3(21a)BC6.
New Hardware Features in Cisco IOS Release 12.3(21a)BC5
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC5.
New Software Features in Cisco IOS Release 12.3(21a)BC5
There are no new software features supported in Cisco IOS Release 12.3(21a)BC5.
New Hardware Features in Cisco IOS Release 12.3(23)BC
The following hardware feature is new in Cisco IOS Release 12.3(23)BC:
DOCSIS Timing & Control Card (DTCC)
On the Cisco uBR10012 universal broadband router, the DOCSIS Timing & Control Card (DTCC) acts as a secondary processor that performs the following functions:
•
•
•
•
•
When two DTCC cards are installed, they are configured as active (primary) and backup (redundant). If the DTCC card in the first slot is working at system power-up, it automatically becomes the active card and the DTCC card in the second slot becomes the backup card. The DTCC cards monitor each other's priority information, so that if the active card fails, the active card role is transferred to the redundant backup card without loss of data.
Each DTCC card contains two RJ-45 connectors labeled Primary and Secondary, on the front panel. See Xref_Colorparanum[FC_FigureCap,FCW_FigureCapW] on page *. These connectors are for a primary and secondary (redundant) Stratum 3 external clock reference source that is traceable to a Stratum 1 clock source. The external reference source allows the Cisco uBR10012 router's reference clock to be synchronized to the Stratum 1 clock source, providing a free-running DOCSIS-quality clock reference and time stamp to the cable interface line cards.
If present, the primary DTI link is used. If it is lost, the secondary DTI link (if present) on the active DTCC card is used. If the active DTCC card stops functioning, control is transferred to the backup DTCC card, which then uses its primary and secondary clock reference sources. If neither card has a valid clock reference source, In DTI mode, all M-CMTS elements should have common timing source. The internal clock of DTI client cannot be used to provide DOCSIS clock and timestamp. High availability strategies (active/backup card, active/backup ports) should be used to prevent loss of common timing source.
New Software Features in Cisco IOS Release 12.3(23)BC
There are no new software features supported in Cisco IOS Release 12.3(23)BC.
New Hardware Features in Cisco IOS Release 12.3(21a)BC4
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC4.
New Software Features in Cisco IOS Release 12.3(21a)BC4
There are no new software features supported in Cisco IOS Release 12.3(21a)BC4.
New Hardware Features in Cisco IOS Release 12.3(21a)BC3
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC3.
New Software Features in Cisco IOS Release 12.3(21a)BC3
There are no new software features supported in Cisco IOS Release 12.3(21a)BC3.
New Hardware Features in Cisco IOS Release 12.3(21a)BC2
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC2.
New Software Features in Cisco IOS Release 12.3(21a)BC2
There are no new software features supported in Cisco IOS Release 12.3(21a)BC2.
New Hardware Features in Cisco IOS Release 12.3(21a)BC1
There are no new hardware features supported in Cisco IOS Release 12.3(21a)BC1.
New Software Features in Cisco IOS Release 12.3(21a)BC1
There are no new software features supported in Cisco IOS Release 12.3(21a)BC1.
New Hardware Features in Cisco IOS Release 12.3(21)BC
There are no new hardware features supported in Cisco IOS Release 12.3(21)BC.
New Software Features in Cisco IOS Release 12.3(21)BC
The following software features are new in Cisco IOS Release 12.3(21)BC:
Automatic Virtual Interface Bundles
All cable bundles are now automatically converted and configured to be in a virtual bundle, and standalone cable interfaces must be manually configured to be in a virtual bundle to operate properly.
Previously, new virtual interface bundles and bundle members required reconfiguration, and there could also be standalone interfaces not part of a bundle at all.
The following guidelines describe the automatic virtual interface bundling:
•
•
•
•
•
•
•
•
•
•
For more information, see the "Cable Interface Bundling and Virtual Interface Bundling for the Cisco CMTS" chapter in the Cisco CMTS Feature Guide.
Cable DHCP Enhancements
When using an external DHCP server, the Cisco CMTS supports a number of options that can enhance operation of the cable network in certain applications.
Dynamic Cable Helper Address Selection
The cable helper-address command has been expanded to further specify where to forward DHCP packets based on origin: from a cable modem, MTA, STB, or other cable devices:
cable helper-address address [ cable-modem | host | mta | stb ]
This enables load-balancing of DHCP requests from cable modems and CPE devices by specifying different DHCP servers according to the cable interface or subinterface. You can also specify separate servers for cable modems and CPE devices.
When the mta or stb option is used, you must also use the cable dhcp-parse option-optnum command to parse the DHCP options.
If you specify only one option, the other types of devices (cable modem, host, mta, or stb) will not be able to connect with a DHCP server. You must specify each desired option in a separate command.
You may specify more than one helper address on each cable interface by repeating the command. You can specify more than 16 helper addresses, but the Cisco IOS software uses only the first 16 valid addresses.
If you do not specify an option, the helper-address will support all cable devices, and the associated DHCP server will accept DHCP packets from all cable device classes.
Cable Node Location Reporting
The DHCP Relay Agent can now be used to identify cloned modems or gather geographical information for E911 and other applications. Using the cable dhcp-insert command, users configure the CMTS to insert downstream, upstream, or hostname descriptors into DHCP packets:
cable dhcp-insert {downstream-description | hostname | upstream-description}
A DHCP server can then utilize such information to detect cloned modems or extract geographical information. Multiple types of strings can be configured as long as the maximum relay information option size is not exceeded.
Multiple types of descriptor strings can be configured as long as the maximum relay information option size is not exceeded.
show cable modem docsis device-class
The show cable modem docsis device-class command is now supported.
For more information on these enhancements and related commands, see the Cisco Broadband Cable Command Reference Guide and the "DHCP, ToD, and TFTP Services for the Cisco Cable Modem Termination System" chapter in the Cisco CMTS Feature Guide.
Per Downstream Static Multicast
The IOS IGMP Static-Group feature was first introduced back in Release 11.2, while the Source Specific Multicast (SSM) extension was added in Release 12.0(6)T. This allows network administrators to configure the router to be a statically connected member of the specified group on the interface. All multicast traffic destined to that particular group will be forwarded out on that configured interface.
Beginning in Cisco IOS Release 12.3(21)B, the Cisco uBR10012 universal broadband router supports the Per Downstream Static Multicast feature. This feature provides several multicast enhancements and makes it possible to control the replication of static IP multicast streams within a cable bundle using the cable igmp static-group command on the physical cable downstream interface.
For additional information, refer to the following documents on Cisco.com:
Advanced-mode DOCSIS Set-Top Gateway 1.1 for the Cisco CMTS
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubradsg.html.
SAMIS Source Address Management
Cisco IOS Release 12.3(21)BC introduces Subscriber Account Management Interface Specification (SAMIS) enhancements which will provide the ability to set the source of the usage based billing packets originated by the router using the cable metering command. This enables the ip address to be set as the source of the loopback interface, similar to what is done for telnet or ftp (ip ftp source-interfacelo0).
For additional information about Subscriber Account Management Interface Specification (SAMIS), refer to the following document on Cisco.com:
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubrsamis.html.
New Hardware Features in Cisco IOS Release 12.3(17b)BC9
There are no new hardware features supported in Cisco IOS Release 12.317b)BC9.
New Software Features in Cisco IOS Release 12.3(17b)BC9
There are no new software features supported in Cisco IOS Release 12.3(17b)BC9.
New Hardware Features in Cisco IOS Release 12.3(17b)BC8
There are no new hardware features supported in Cisco IOS Release 12.3(17b)BC8.
New Software Features in Cisco IOS Release 12.3(17b)BC8
There are no new software features supported in Cisco IOS Release 12.3(17b)BC8.
New Hardware Features in Cisco IOS Release 12.3(17b)BC7
There are no new hardware features supported in Cisco IOS Release 12.3(17b)BC7.
New Software Features in Cisco IOS Release 12.3(17b)BC7
There are no new software features supported in Cisco IOS Release 12.3(17b)BC7.
New Hardware Features in Cisco IOS Release 12.3(17b)BC6
There are no new hardware features supported in Cisco IOS Release 12.3(17b)BC6.
New Software Features in Cisco IOS Release 12.3(17b)BC6
There are no new software features supported in Cisco IOS Release 12.3(17b)BC6.
New Hardware Features in Cisco IOS Release 12.3(17b)BC5
There are no new hardware features supported in Cisco IOS Release 12.3(17b)BC5.
New Software Features in Cisco IOS Release 12.3(17b)BC5
There are no new software features supported in Cisco IOS Release 12.3(17b)BC5.
New Hardware Features in Cisco IOS Release 12.3(17b)BC4
There are no new hardware features supported in Cisco IOS Release 12.3(17b)BC4.
New Software Features in Cisco IOS Release 12.3(17b)BC4
Cisco IOS Release 12.3(17b)BC4 introduces the following new features or enhancements:
Downstream Load Balancing Distribution with Upstream Load Balancing
Cisco IOS Release 12.3(17b)BC4 introduces further enhancements to downstream load balancing, resulting in equalized upstream load balancing group members. This enhancement synchronizes the pending statistic between different cable interface line cards in the load balancing group.
This enhancement performs downstream load balancing that accounts for loads on upstream channels in the same upstream load balancing group, rather than on the basis of the entire downstream channel load. Prior Cisco IOS releases may not have distributed cable modems evenly over individual upstream channels, nor in a way that accounted for downstream and upstream segment loads that account for one another.
This enhancement applies when downstream load balancing occurs on a headend system with separate upstream load balancing segments; the upstream segments are spread over multiple downstreams segments. This enhancement provides an alternative downstream load balancing scheme that accounts and makes use of per-upstream loads rather than total downstream loads.
For additional information about Load Balancing on the Cisco CMTS, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/troubleshooting_batch9/cmtslbg.html.
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
New Hardware Features in Cisco IOS Release 12.3(17b)BC3
There are no new hardware features supported in Cisco IOS Release 12.3(17b)BC3.
New Software Features in Cisco IOS Release 12.3(17b)BC3
There are no new software features supported in Cisco IOS Release 12.3(17b)BC3.
New Hardware Features in Cisco IOS Release 12.3(17a)BC2
There are no new hardware features supported in Cisco IOS Release 12.3(17a)BC2.
New Software Features in Cisco IOS Release 12.3(17a)BC2
Cisco IOS Release 12.3(17a)BC2 introduces the following enhancements:
Advanced-Mode DOCSIS Set-Top Gateway Issue 1.2
Cisco IOS Release 12.3(17a)BC2 introduces support for advanced-mode DOCSIS Set-Top Gateway (DSG) Issue 1.2. DSG Issue 1.2 introduces support for the latest DOCSIS Set-Top specification from CableLabs™:
•
Advanced-mode DSG 1.2 is a powerful tool in support of latest industry innovations. Advanced-mode DSG 1.2 offers substantial support for enhanced DOCSIS implementation in the Broadband Cable environment. The set-top box dynamically learns the overall environment from the Cisco Cable Modem Termination System (CMTS), to include MAC address, traffic management rules, and classifiers.
For additional information about this feature, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubrdsg12.html.
For additional information about the DOCS-DSG-IF-MIB, feature, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/products/hw/cable/ps2209/prod_technical_reference_list.html
DOCSIS1.0 TOS Overwrite
Currently, ToS overwrite requires the creation of static cable QoS profiles, which are then assigned to the ToS fields. This implementation works well if only a few different service types are offered. However, scalability issues arise when large numbers of service types are presented; each requiring a static QoS profile in order to perform ToS overwrite.
The Default DOCSIS 1.0 ToS Overwrite feature eliminates the need to create multiple QoS profiles in order to perform type-of-service (ToS) overwrite by automatically bounding all DOCSIS 1.0 Cable Modem (CM) created profiles to a default ToS overwrite.
New Hardware Features in Cisco IOS Release 12.3(17a)BC1
There are no new hardware features supported in Cisco IOS Release 12.3(17a)BC1:
New Software Features in Cisco IOS Release 12.3(17a)BC1
There are no new software features supported in Cisco IOS Release 12.3(17a)BC1.
New Hardware Features in Cisco IOS Release 12.3(17a)BC
There are no new hardware features supported in Cisco IOS Release 12.3(17a)BC.
New Software Features in Cisco IOS Release 12.3(17a)BC
The Cisco IOS Release 12.3(17a)BC is the third major feature release in the Cisco IOS 12.3 BC release train. This release introduces the following new features or enhancements:
•
•
•
•
•
•
•
•
Cable Monitor Enhancements
Cisco IOS Release 12.3(17a)BC introduces the following enhancements to the cable monitor feature:
•
•
For additional information about this enhancements to the cable monitor feature, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_cmon.html.
Configurable Leasequery Server
Previously, lease query requests could only be sent to the DHCP server. Beginning with Cisco IOS Release 12.3(17a)BC, an alternate server may be configured to receive the requests.
There are a few restrictions:
•
•
•
•
Regardless of which server is configured (DHCP or alternate), unknown IP addresses that are found in packets for customer premises equipment (CPE) devices that use the cable modems on the cable interface are verified. The DHCP server or configured alternate server returns a DHCP ACK message with the MAC address of the CPE device that has been assigned this IP address, if any.
To configure the Cisco CMTS router to send DHCP LEASEQUERY requests to an alternate server, use the cable source-verify dhcp server ipaddress and no cable arp commands. (To configure the DHCP server instead, use the cable source-verify dhcp and no cable arp commands.)
For additional information about this feature, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/cblsrcvy.html.
Dynamic Channel Change (DCC) for Load balancing
Cisco IOS Release 12.3(17a)BC introduces Dynamic Channel Change (DCC) and DCC for Load Balancing on the Cisco CMTS.
DCC in DOCSIS 1.1 dynamically changes cable modem upstream or downstream channels without forcing a cable modem to go offline, and without re-registration after the change. DCC supports four different types of initialization, instead of one, as in earlier DOCSIS support.
DCC and DCC for load balancing is supported on the Cisco uBR7246VXR router and the Cisco uBR10012 router with distributed cable interface line cards, including the Cisco MC28U and the Cisco MC5X20S/U/H.
•
•
•
•
Dynamic Channel Change for Load Balancing entails the following new or enhanced commands in Cisco IOS Release 12.3(17a)BC, and later releases:
Global Configuration Commands
•
•
•
•
•
Testing Command
•
For configuration, command reference, testing, and examples for DCC on the Cisco CMTS, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/troubleshooting_batch9/cmtslbg.html.
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
DOCSIS 2.0 SAMIS ECR Data Set
The Usage-Based Billing feature for the Cisco Cable Modem Termination System (CMTS) provides subscriber account and billing information in the Subscriber Account Management Interface Specification (SAMIS) format. The SAMIS format is specified by the Data-over-Cable Service Interface Specifications (DOCSIS) Operations Support System Interface (OSSI) specification.
Release 12.2 SB provides enhancements to the OSSI specifications, and billing reports (billing record format), added support to the CISCO-CABLE-METERING-MIB, which contains objects that provide subscriber account and billing information in the Subscriber Account Management Interface Specification (SAMIS) format, added support for DCC and DCC for Load balancing and Downstream LLQ.
For additional information, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubrsamis.html.
DSX Messages and Synchronized PHS Information
Cisco IOS Release 12.3(17a)BC introduces support for PHS rules in a High Availability environment. In this release, and later releases, PHS rules synchronize and are supported during a switchover event of these types:
•
•
For additional information about these enhancements, and related High Availability features, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/uFGnpls1.html.
High Availability Support for Encrypted IP Multicast
Cisco IOS Release 12.3(17a)BC introduces support for IP Multicast streams during switchover events in a High Availability environment. This feature is supported for Route Processor Redundancy Plus (RPR+), N+1 Redundancy, and encrypted BPI+ streams.
For additional information about IP Multicast and High Availability, refer to these documents on Cisco.com:
•
http://www.cisco.com/en/US/products/hw/cable/ps2217/prod_technical_reference_list.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubrdmic.html.
•
http://www.cisco.com/en/US/tech/tk828/technologies_case_study0900aecd802e2ce2.shtml
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/uFGnpls1.html.
IPv6 over L2VPN
Beginning with Cisco IOS Release 12.3(17a)BC, the Cisco uBR7246VXR router now supports IPv6 using Layer 2 VPNs based on SID to 802.1q mapping. The Cisco uBR7246VXR router already supported Transparent LAN service with Layer 2 VPNs in Cisco IOS Release 12.3(13a)BC and later releases. As more Internet users switch to IPv6, the Cisco IPv6 protocol support helps enable the transition. IPv6 fixes a number of limitations in IPv4, such as limited numbers of available IPv4 addresses in addition to improved routing and network autoconfiguration. This feature allows customers to introduce IPv6 into their network with minimal operational impact.
For additional information about this feature, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/tech/tk872/tsd_technology_support_protocol_home.html
Management Information Base (MIB) Changes and Enhancements
MIB enhancements in Cisco IOS Release 12.3(17a)BC provide enhanced management features that enable the Cisco uBR 7200 Series router and the Cisco uBR10012 router to be managed through the Simple Network Management Protocol (SNMP). These enhanced management features allow you to:
•
•
•
•
•
For additional information about these MIB changes, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/products/hw/cable/ps2217/prod_technical_reference_list.html
Pre-equalization Control for Cable Modems
Cisco IOS Release 12.3(17a)BC introduces pre-equalization control for cable modems on a per-modem basis. This feature enhances support for pre-equalization control on an interface basis with the Organizational Unique Identifier (OUI), which is also supported.
When pre-equalization is enabled on an upstream interface, this feature allows you to disable pre-equalization adjustment selectively, for a specific cable modem or a group of cable modems. This feature prevents cable modems from flapping when processing pre-equalization requests sent from the Cisco CMTS.
Restrictions
This feature observes the following restrictions in Cisco IOS Release 12.3(17a)BC:
•
•
•
cable pre-equalization exclude
To exclude a cable modem from pre-equalization during registration with the Cisco CMTS, use the cable pre-equalization exclude command in global configuration mode. Exclusion is supported for a specified cable modem, or for a specified OUI value for the entire interface. To remove exclusion for the specified cable modem or interface, use the no form of this command. Removing this configuration returns the cable modem or interface to normal pre-equalization processes during cable modem registration.
cable pre-equalization exclude {oui | modem} mac-addr
no cable pre-equalization exclude {oui | modem} mac-addr
Syntax Description
Command Default
Pre-equalization is enabled by default on the Cisco router, and for cable modems that have a valid and operational DOCSIS configuration file. When enabled, pre-equalization sends ranging messages for the respective cable modems. When disabled with the new exclude command, pre-equalization is excluded for the respective cable modems.
Command Modes
Global configuration mode
Command History
12.3(17a)BC
This command was introduced to the Cisco uBR10012 router and the Cisco uBR7246VXR router.
Usage Guidelines
The pre-equalization exclusion feature should be configured for the running configuration of the Network Processing Engine (NPE), the Performance Routing Engine (PRE), and the line card console.
Examples
The following example configures pre-equalization to be excluded for the specified cable modem. Pre-equalization data is not sent for the corresponding cable modem:
Router(config)# cable pre-equalization exclude modem mac-addrThe following example configures pre-equalization to be excluded for the specified OUI value of the entire interface. Pre-equalization data is not sent for the corresponding OUI value of the entire interface:
Router(config)# cable pre-equalization exclude oui mac-addrThe following series of commands configures pre-equalization on the Cisco uBR7246VXR router with MC28U cable interface line cards. On the Network Processing Engine (NPE) console, configure and verify with the following commands.
Router# conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)# cable pre-equalization exclude oui 00.09.24Router(config)# endRouter#show run02:58:10: %SYS-5-CONFIG_I: Configured from console by consolenRouter# show running-config | inc ouicable pre-equalization exclude oui 00.09.24On the line card console for the same Cisco uBR7246VXR router, verify the configuration with the following command:
Router# show running-config | inc ouicable pre-equalization exclude oui 00.09.24After either of these exclusion methods for pre-equalization are configured, you can verify that all ranging messages do not include pre-equalization data. Use the following debug commands in global configuration mode:
•
•
Verify the ranging message for the non-excluded cable modems include pre-equalization data, and for the excluded cable modems, the ranging messages do not include such data.
The following example removes pre-equalization exclusion for the specified OUI and interface. This results in the cable modem or OUI to return to normal pre-equalization functions. Ranging messages resume sending pre-equalization data.
Router(config)# no cable pre-equalization exclude { oui | modem } mac-addrRemoval of this feature can be verified with the following debug command:
•
For additional information about this feature, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html
show cable modem Command Changes
Cisco IOS Release 12.3(17a)BC introduces changes for two versions of the show cable modem command.
•
The information displayed with this command is revised. The DOCSIS 2.0 column in the Quality of Service (QoS) Provision Mode field has been removed, as this field is not applicable to QoS provisioning in DOCSIS 2.0.
Command Output in Cisco IOS Release 12.3(17a)BC and Later Releases
Router# show cable modem mac summaryCable Modem Summary-------------------Mac Version QoS Provision ModeInterface Total DOC2.0 DOC1.1 DOC1.0 Reg/Online DOC1.1 DOC1.0Cable5/1/0/U0 10 0 2 8 10 0 10Command Output in Cisco IOS Release 12.3(13a)BC and Earlier Releases
Router# show cable modem mac summaryCable Modem Summary-------------------Mac Version QoS Provision ModeInterface Total DOC2.0 DOC1.1 DOC1.0 Reg/Online DOC2.0 DOC1.1 DOC1.0Cable8/0/0/U0 8 0 5 3 5 0 5 0•
The information displayed with this command is revised. The MicroReflec column (MicroReflections) has been removed, and the DOCSIS Prov (DOCSIS Provider) column has been added in its place. This new column contains DOCSIS version information.
Command Output in Cisco IOS Release 12.3(17a)BC and Later Releases
Router# show cable modem phyMAC Address I/F Sid USPwr USSNR Timing DSPwr DSSNR Mode DOCSIS(dBmV) (dB) Offset (dBmV) (dB) Prov0003.e350.9a3f C5/1/0/U0 1 0.00 30.23 2811 0.00 ----- tdma 1.00050.734e.c1a1 C5/1/0/U0 2 0.00 30.47 2811 0.00 ----- tdma 1.00007.0e01.1749 C5/1/0/U0 3 0.00 30.65 2808 0.00 ----- tdma 1.00007.0e00.90dd C5/1/0/U0 4 0.00 30.66 2806 0.00 ----- tdma 1.00003.e350.9ad3 C5/1/0/U0 5 0.00 30.47 2810 0.00 ----- tdma 1.00003.e38f.f4e5 C5/1/0/U0 6 0.00 30.36 2813 0.00 ----- tdma 1.00003.e350.9b97 C5/1/0/U0 7 0.00 30.44 2812 0.00 ----- tdma 1.00003.e350.9bed C5/1/0/U0 8 0.00 30.16 2814 0.00 ----- tdma 1.00003.e308.455d C5/1/0/U0 9 0.00 30.79 2811 0.00 ----- tdma 1.00003.6bd6.bfaf C5/1/0/U0 10 0.00 30.40 2813 0.00 ----- tdma 1.0Command Output in Cisco IOS Release 12.3(13a)BC and Earlier Releases
Router# show cable modem phyMAC Address I/F Sid USPwr USSNR Timing MicroReflec DSPwr DSSNR Mode(dBmV) (dB) Offset (dBc) (dBmV) (dB)0008.0e06.7b14 C8/0/0/U0 1 0.00 30.36 1938 0 0.00 ----- tdma0050.f112.5977 C8/0/0/U0 2 0.00 30.36 1695 0 0.00 ----- tdma0090.837b.b0b9 C8/0/0/U0 3 0.00 30.64 1187 0 0.00 ----- tdma0007.0e03.6e99 C8/0/0/U0 5 0.00 30.36 2747 0 0.00 ----- tdma0007.0e04.5091 C8/0/0/U0 6 0.00 30.94 2746 0 0.00 ----- tdma0006.5314.81d9 C8/0/0/U0 7 0.00 30.36 2745 0 0.00 ----- tdma0003.6b1b.ee63 C8/0/0/U0 8 0.00 31.26 2745 0 0.00 ----- tdma0030.eb15.84e7 C8/0/0/U0 12 0.00 30.36 1157 0 0.00 ----- tdmaFor additional information about either of these commands, refer to the following document on Cisco.com
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
New Hardware Features in Cisco IOS Release 12.3(13a)BC6
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC6.
New Software Features in Cisco IOS Release 12.3(13a)BC6
There are no new software features supported in Cisco IOS Release 12.3(13a)BC6.
New Hardware Features in Cisco IOS Release 12.3(13a)BC5
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC5.
New Software Features in Cisco IOS Release 12.3(13a)BC5
There are no new software features supported in Cisco IOS Release 12.3(13a)BC5.
New Hardware Features in Cisco IOS Release 12.3(13a)BC4
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC4.
New Software Features in Cisco IOS Release 12.3(13a)BC4
There are no new software features supported in Cisco IOS Release 12.3(13a)BC4.
New Hardware Features in Cisco IOS Release 12.3(13a)BC3
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC3.
New Software Features in Cisco IOS Release 12.3(13a)BC3
There are no new software features supported in Cisco IOS Release 12.3(13a)BC3.
New Hardware Features in Cisco IOS Release 12.3(13a)BC2
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC2.
New Software Features in Cisco IOS Release 12.3(13a)BC2
There are no new software features supported in Cisco IOS Release 12.3(13a)BC2.
New Hardware Features in Cisco IOS Release 12.3(13a)BC1
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC1.
New Software Features in Cisco IOS Release 12.3(13a)BC1
There are no new software features supported in Cisco IOS Release 12.3(13a)BC1.
New Hardware Features in Cisco IOS Release 12.3(13a)BC
There are no new hardware features supported in Cisco IOS Release 12.3(13a)BC for the Cisco uBR7100 series router.
New Software Features in Cisco IOS Release 12.3(13a)BC
This section describes the following new software features and CLI command changes for Cisco IOS Release 12.3(13)BC and the Cisco uBR7100 series router:
•
•
•
•
•
Access List Support for COPS Intercept
Cisco IOS Release 12.3(13a)BC introduces enhanced command-line interface for the Common Open Policy Service (COPS) feature.
To configure access control lists (ACLs) for inbound connections to all COPS listener applications on the Cisco CMTS, user the cops listeners access-list command in global configuration mode. To remove this setting from the Cisco CMTS, us the no form of this command.
cops listeners access-list {acl-num | acl-name}
no cops listeners access-list {acl-num | acl-name}
Syntax Description
Additional Information
Refer also the Service Independent Intercept (SII) feature in this document. For additional information, refer to the following documents on Cisco.com:
•
•
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_cmon.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_pkcb.html.
•
DOCSIS 1.0 Concatenation Override
Cisco IOS release 12.3(13a)BC introduces support for the DOCSIS 1.0 concatenation override feature on the Cisco uBR10012 router. This feature provides the ability to disable concatenation on DOCSIS 1.0 cable modems, even in circumstances where concatenation is otherwise supported for the upstream channel.
DOCSIS 1.0 concatenation allows the cable modem to make a single-time slice request for multiple packets, and to send all packets in a single large burst on the upstream. Concatenation was introduced in the upstream receive driver in the previous Cisco IOS releases that supported DOCSIS 1.0 +. Per-SID counters were later added in Cisco IOS Release 12.1(4)CX for debugging concatenation activity.
In some circumstances, overriding concatenation on DOCSIS 1.0 cable modems may be preferable, and Cisco IOS Release 12.3(13a)BC supports either option.
Note
To enable DOCSIS 1.0 concatenation override with Cisco IOS Release 12.3(13a)BC and later releases, use the new docsis10 keyword with the previously supported cable upstream <n> concatenation command in privileged EXEC mode:
cable upstream <n> concatenation docsis10
Syntax Description
n
Specifies the upstream port number. Valid values start with 0 for the first upstream port on the cable interface line card.
Examples
The following example illustrates DOCSIS 1.0 concatenation override on the Cisco uBR10012 router:
Router# no cable upstream 0 concatenation docsis10In this example, DOCSIS 1.0 cable modems are updated with REG-RSP so that they are not permitted to use concatenation.
For additional information about this command, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html
Enhanced Rate Bandwidth Allocation (ERBA) Support for DOCSIS 1.0 Cable Modems
Cisco IOS Release 12.3(13a)BC introduces Enhanced Rate Bandwidth Allocation (ERBA) support for DOCSIS 1.0 cable modems and the Cisco uBR7100 router. ERBA allows DOCSIS1.0 modems to burst their temporary transmission rate up to the full line rate for short durations of time. This capability provides higher bandwidth for instantaneous bandwidth requests, such as those in Internet downloads, without having to make changes to existing service levels in the QoS Profile.
This feature enables MSOs to set the DOCSIS 1.0 cable modems burst transmissions, with mapping to overriding DOCSIS 1.1 QoS profile parameters on the Cisco CMTS. DOCSIS 1.0 cable modems require DOCSIS 1.0 parameters when registering to a matching QoS profile. This feature enables maximum downstream line rates, and the ERBA setting applies to all cable modems that register to the corresponding QoS profile.
Note
DOCSIS 1.0 cable modems require DOCSIS 1.0 parameters when registering to a matching QoS profile. This feature enables the maximum downstream burst to be set in global configuration mode. The max-ds-burst setting applies to all cable modems that register to the corresponding QoS profile.
ERBA for DOCSIS 1.0 cable modems is supported with these new or enhanced commands or keywords in Cisco IOS Release 12.3(13a)BC:
•
•
To define ERBA on the downstream for DOCSIS 1.0 cable modems, use the cable qos promax-ds-burst command in global configuration mode. To remove this ERBA setting from the QoS profile, use the no form of this command.
cable qos pro max-ds-burst burst-size
no cable qos pro max-ds-burst
Syntax Description
To display ERBA settings as applied to DOCSIS 1.0 cable modems and QoS profiles on the Cisco CMTS, use the show cable qos profile command in Privileged EXEC mode.
The following example of the cable qos profile command in global configuration mode illustrates changes to the cable qos profile command. Fields relating to the ERBA feature are shown in bold for illustration:
Router(config)# cable qos pro 10 ?grant-interval Grant intervalgrant-size Grant sizeguaranteed-upstream Guaranteed Upstreammax-burst Max Upstream Tx Burstmax-ds-burst Max Downstream Tx burst (cisco specific)max-downstream Max Downstreammax-upstream Max Upstreamname QoS Profile name string (cisco specific)priority Priorityprivacy Cable Baseline Privacy Enabletos-overwrite Overwrite TOS byte by setting mask bits to valueThe following example of the show cable qos profile command illustrates that the maximum downstream burst has been defined, and is a management-created QoS profile:
Router# show cable qos proID Prio Max Guarantee Max Max TOS TOS Create B IP prec.upstream upstream downstream tx mask value by priv ratebandwidth bandwidth bandwidth burst enab enab1 0 0 0 0 0 0xFF 0x0 cmts(r) no no2 0 64000 0 1000000 0 0xFF 0x0 cmts(r) no no3 7 31200 31200 0 0 0xFF 0x0 cmts yes no4 7 87200 87200 0 0 0xFF 0x0 cmts yes no6 1 90000 0 90000 1522 0xFF 0x0 mgmt yes no10 1 90000 0 90000 1522 0x1 0xA0 mgmt no no50 0 0 0 96000 0 0xFF 0x0 mgmt no no51 0 0 0 97000 0 0xFF 0x0 mgmt no noThe following example illustrates the maximum downstream burst size in sample QoS profile 10 with the show cable qos prof verbose command in privileged EXEC mode:
Router# show cable qos pro 10 verProfile Index 10NameUpstream Traffic Priority 1Upstream Maximum Rate (bps) 90000Upstream Guaranteed Rate (bps) 0Unsolicited Grant Size (bytes) 0Unsolicited Grant Interval (usecs) 0Upstream Maximum Transmit Burst (bytes) 1522Downstreamam Maximum Transmit Burst (bytes) 100000IP Type of Service Overwrite Mask 0x1IP Type of Service Overwrite Value 0xA0Downstream Maximum Rate (bps) 90000Created By mgmtBaseline Privacy Enabled noUsage Guidelines
If a cable modem registers with a QoS profile that matches one of the existing QoS profiles on the Cisco CMTS, then the maximum downstream burst size, as defined for that profile, is used instead of the default DOCSIS QoS profile of 1522.
For example, a DOCSIS 1.0 configuration that matches QoS profile 10 in the previous examples would be as follows:
03 (Net Access Control) = 104 (Class of Service Encodings Block)S01 (Class ID) = 1S02 (Maximum DS rate) = 90000S03 (Maximum US rate) = 90000S06 (US burst) = 1522S04 (US Channel Priority) = 1S07 (Privacy Enable) = 0The maximum downstream burst size (as well as the ToS overwrite values) are not explicitly defined in the QoS configuration file because they are not defined in DOCSIS. However, because all other parameters are a perfect match to profile 10 in this example, then any cable modem that registers with these QoS parameters has a maximum downstream burst of 100000 bytes applied to it.
For further illustration, consider a scenario in which packets are set in lengths of 1000 bytes at 100 packets per second (pps). Therefore, the total rate is a multiplied total of 1000, 100, and 8, or 800kbps.
To change these settings, two or more traffic profiles are defined, with differing downstream QoS settings as desired. Table 5 provides two examples of such QoS profiles for illustration:
In this scenario, both QoS profiles are identical except for the max-ds-burst size, which is set to 5000 in QoS profile 101 and 5000 in QoS profile 102.
Optimal Settings for DOCSIS 1.0 Downstream Powerburst
DOCSIS allows the setting different token bucket parameters for each service flow, including the token bucket burst size. When burst sizes are closer to 0, QoS is enforced in a stricter manner, allowing a more predictable sharing of network resources, and as a result easier network planning.
When burst sizes are larger, individual flows can transmit information faster (lower latency), although the latency variance can be larger as well.
For individual flows, a larger burst size is likely to be better. As long as the system is not congested, a large burst size reduces the chances of two flows transmitting at the same time, because each burst is likely to take less time to transmit. However, as channel bandwidth consumption increases, it is probably that large burst traffic would exceed the thresholds of buffer depths, and latency is longer than with well shaped traffic.
For additional information about the cable qos profile command and configuring QoS profiles, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_docs.html.
MLPPP Support
The Cisco IOS Multilink Point-to-Point Protocol (MLPPP) feature is now supported for selected line cards and port adapters on the Cisco uBR7100 series, which share the same MLPPP code as the Cisco uBR7200 series. There is no new hardware or software for MLPPP in this release.
Note
MLPPP is configured not on a cable interface, but on the T1/E1 link.
Line cards and Port Adapters Supporting MLPPP on the Cisco uBR7100 Series
Table 6 lists the line cards and port adapters on the Cisco uBR7100 series, in conjunction with the applicable network processing engine (NPE), that are supported for MLPPP at the time Cisco IOS Release 12.3(13a)BC was released.
Service Independent Intercept (SII) Support on the Cisco uBR7100 CMTS
Cisco CMTS supports the Communications Assistance for Law Enforcement Act (CALEA) for voice and data. Cisco IOS Release 12.3(13a)BC introduces support for Service Independent Intercept (SII) on the Cisco uBR7100 CMTS. Cisco SII provides a more robust level of the lawful intercept (LI) options offered in the Packet Intercept feature. Cisco SII is the next level of support for judicially authorized electronic intercept, to include dial access, mobile wireless, tunneled traffic, and Resilient Transport Protocol (RTP) for voice and data traffic on the Cisco CMTS. SII on the Cisco CMTS includes these functions:
•
•
•
Note
Cisco IOS Release 12.3(13a)BC enables full Multiple Service Operator (MSO) compliance with SII and LI regulations. Service providers worldwide are legally required to allow government agencies to conduct surveillance on the service provider's traditional telephony equipment. The objective of the SII feature is to enable service providers with New World networks that legally allow government agencies to conduct electronic network surveillance.
Lawful Intercept (LI) describes the process and judicial authority by which law enforcement agencies conduct electronic surveillance of circuit and packet-mode communications. LI is authorized by judicial or administrative order and implemented for either voice or data traffic on the Cisco CMTS. Table 7 lists the differences between packet intercept and SII features.L
Additional Information
For additional information, refer to the following documents:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_cmon.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_pkcb.html.
•
Optional Upstream Scheduler Modes
With this feature, the user is able to select either Unsolicited Grant Services (UGS) or Real Time Polling Service (rtPS) scheduling types, as well as packet-based or TDM-based scheduling. Low latency queueing (LLQ) emulates a packet-mode-like operation over the Time Division Multiplex (TDM) infrastructure of DOCSIS. As such, the feature provides the typical tradeoff between packets and TDM: with LLQ, the user has more flexibility in defining service parameters for UGS or rtPS, but with no guarantee (other than statistical distribution) regarding parameters such as delay and jitter.
Restrictions
•
•
•
New and Changed Commands
cable upstream n scheduling type
Use this new command to turn the various scheduling modes on or off, where n specifies the upstream port.
Router(config-if)# [no] cable upstream n scheduling type [ugs | rtps] mode [llq | docsis]For additional information about scheduler enhancements on the Cisco CMTS, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_schd.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_docs.html.
New Hardware Features in Cisco IOS Release 12.3(9a)BC8
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC8.
New Software Features in Cisco IOS Release 12.3(9a)BC8
There are no new software features supported in Cisco IOS Release 12.3(9a)BC8.
New Hardware Features in Cisco IOS Release 12.3(9a)BC7
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC7.
New Software Features in Cisco IOS Release 12.3(9a)BC7
There are no new software features supported in Cisco IOS Release 12.3(9a)BC7.
New Hardware Features in Cisco IOS Release 12.3(9a)BC6
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC6.
New Software Features in Cisco IOS Release 12.3(9a)BC6
There are no new software features supported in Cisco IOS Release 12.3(9a)BC6.
New Hardware Features in Cisco IOS Release 12.3(9a)BC5
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC5.
New Software Features in Cisco IOS Release 12.3(9a)BC5
There are no new software features supported in Cisco IOS Release 12.3(9a)BC5.
New Hardware Features in Cisco IOS Release 12.3(9a)BC4
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC4.
New Software Features in Cisco IOS Release 12.3(9a)BC4
There are no new software features supported in Cisco IOS Release 12.3(9a)BC4.
New Hardware Features in Cisco IOS Release 12.3(9a)BC3
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC3.
New Software Features in Cisco IOS Release 12.3(9a)BC3
There are no new software features supported in Cisco IOS Release 12.3(9a)BC3.
New Hardware Features in Cisco IOS Release 12.3(9a)BC2
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC2.
New Software Features in Cisco IOS Release 12.3(9a)BC2
There are no new software features supported in Cisco IOS Release 12.3(9a)BC2.
New Hardware Features in Cisco IOS Release 12.3(9a)BC1
There are no new hardware features supported in Cisco IOS Release 12.3(9a)BC1.
New Software Features in Cisco IOS Release 12.3(9a)BC1
There are no new software features supported in Cisco IOS Release 12.3(9a)BC1.
New Hardware Features in Cisco IOS Release 12.3(9a)BC
There are no new hardware features in Cisco IOS Release 12.3(9a)BC.
New Software Features for Cisco IOS Release 12.3(9a)BC
This section describes the following new software features and CLI command changes for Cisco IOS Release 12.3(9a)BC and the Cisco uBR7100 series router:
•
•
•
•
•
Cable ARP Filter Enhancement
The cable arp filter command, introduced with Cisco IOS Release 12.2(15)BC2b, enables service providers to filter ARP request and reply packets. This prevents a large volume of such packets from interfering with the other traffic on the cable network.
Cisco IOS Release 12.3(9a)BC introduces enhanced command syntax for the cable arp filter command, where number and window-size values are optional for reply-accept and request-send settings.
To control the number of Address Resolution Protocol (ARP) packets that are allowable for each Service ID (SID) on a cable interface, use the cable arp command in cable interface configuration mode. To stop the filtering of ARP broadcasts for cable modems, use the no form of this command.
cable arp filter {reply-accept number window-size | request-send number window-size}
no cable arp filter {reply-accept | request-send}
default cable arp filter {reply-accept | request-send}
Syntax Description
Cisco IOS Release 12.3(9a)BC also removes a prior caveat with HCCP Protect interfaces. Previously, in the event of a revert-back HCCP N+1 switchover, manual removal of cable arp filter reply and cable arp filter request configurations may have been required afterward on Protect interfaces.
For more information about ARP Filtering, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/guide/ufg_docs.html.
Cisco Broadband Troubleshooter 3.2
Cisco IOS Release 12.3(9a)BC introduces support for the Cisco Broadband Troubleshooter (CBT) Version 3.2 on the Cisco uBR7100 series universal broadband router, with newly supported interoperability for the following additional software features:
•
Multiple Service Operators (MSOs) provide a variety of services such as TV, video on demand, data, and voice telephony to subscribers. Network Administrators and radio frequency (RF) technicians need specialized tools to resolve RF problems in the MSO's cable plant. Cisco Broadband Troubleshooter 3.2 (CBT 3.2) is a simple, easy-to-use tool designed to accurately recognize and resolve such issues.
The user can select up to three different cable modems (CMs) under the same CMTS or three different upstreams under the same CMTS. In addition, CBT 3.2 introduces the ability to display upstreams and cable modems combined (mixed) on the same trace window for monitoring and for playback.
Note
For additional information about CBT 3.2, spectrum management and STM 1.1, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/products/sw/netmgtsw/ps530/prod_release_notes_list.html.
•
http://www.cisco.com/univercd/cc/td/doc/product/cable/cab_rout/cmtsfg/ufg_spec.html.
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubsubmon.html.
Cisco IOS Release 12.3(9a)BC Command-Line Interface (CLI) Enhancements
Cisco IOS Release 12.3(9a)BC introduces or enhances the following CLI commands for the Cisco uBR7100 series router:
For additional information about these command changes, refer to these resources:
•
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
DOCSIS Set-Top Gateway Issue 1.0
Cisco IOS Release 12.3(9a)BC introduces support for DOCSIS Set-Top Gateway (DSG) Issue 1.0 on the Cisco uBR7100 series universal broadband router. The DOCSIS Set-Top Gateway (DSG) feature allows the Cisco CMTS to provide a class of cable services known as out-of-band (OOB) messaging to set-top boxes (STBs) over existing DOCSIS networks. This allows MSOs and other service providers to combine both DOCSIS and STB operations over one, open, vendor-independent network, without any change to the existing network or cable modems.
DSG is a CableLabs® specification that allows the Cisco CMTS to provide a class of cable services known as out-of-band (OOB) messaging to set-top boxes (STBs) over existing Data-over-Cable Service Interface Specifications (DOCSIS) cable networks. DSG 1.0 allows cable Multi-System Operators (MSOs) and other service providers to combine both DOCSIS and STB operations over a single, open and vendor-independent network without requiring any changes to the existing DOCSIS network infrastructure.
At the time of this Cisco publication, the CableLabs® DOCSIS DSG specification is in the current status of "Issued" as characterized by stability, rigorous review in industry and cross-vendor interoperability.
For additional information about configuring and using DSG 1.0 on the Cisco uBR7100 Series routers, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/products/hw/cable/ps2217/products_feature_guides_list.html
MIBs Changes and Updates in Cisco IOS Release 12.3(9a)BC
Cisco IOS Release 12.3(9a)BC adds the following new MIB support for the Cisco uBR7100 series routers.
For additional information about Cisco Broadband Cable MIBs for the Cisco CMTS, refer to the following resources on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
•
http://www.cisco.com/pcgi-bin/Support/Mibbrowser/unity.pl
CISCO-CABLE-METERING-MIB
Cisco IOS Release 12.3(9)BC introduces support for the CISCO-CABLE-METERING-MIB on the Cisco uBR7100 series universal broadband routers. The CISCO-CABLE-METERING-MIB contains objects that provide subscriber account and billing information in the Subscriber Account Management Interface Specification (SAMIS) format. This format is specified by the Data-over-Cable Service Interface Specifications (DOCSIS) Operations Support System Interface (OSSI) specification.
The MODULE-IDENTITY for the CISCO-CABLE-METERING-MIB is ciscoCableMeteringMIB, and its top-level OID is 1.3.6.1.4.1.9.9.424 (iso.org.dod.internet.private.enterprises.cisco.ciscoMgmt.ciscoCableMeteringMIB).
This MIB has the following constraints:
•
•
•
For additional SAMIS information, refer to the following resources:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubrsamis.html.
CISCO-CABLE-QOS-MONITOR MIB
Cisco IOS Release 12.3(9a)BC introduces additional features for the CISCO-CABLE-QOS-MONITOR MIB, including the following:
•
•
•
•
CISCO-ENHANCED-MEMPOOL-MIB
Cisco IOS Release 12.3(9)BC introduces support for the CISCO-CABLE-SPECTRUM-MIB on the Cisco uBR7100 series universal broadband routers. The CISCO-ENHANCED-MEMPOOL-MIB enables you to monitor CPU and memory utilization for "intelligent" line cards and broadband processing engines on the Cisco uBR7100 series routers.
CISCO-PROCESS-MIB
Cisco IOS Release 12.3(9)BC introduces support for the CISCO-PROCESS-MIB on the Cisco uBR7100 series universal broadband routers. The CISCO-PROCESS-MIB enables you to monitor CPU and memory utilization for RF cards, cable interface line cards and broadband processing engines on the Cisco uBR7100 series routers.
CISCO-CABLE-SPECTRUM-MIB
Cisco IOS Release 12.3(9)BC introduces support for the CISCO-CABLE-SPECTRUM-MIB on the Cisco uBR7100 series universal broadband routers, with these additional MIB object enhancements:
•
•
downstream,upstreamandMacas indices to replace the ccsFlapTable object.•
•
•
•
•
The following objects are also now deprecated:
•
•
•
•
•
The maximum number of entries in the flap-list was changed from a maximum of 8191 for the entire router, to the following:
•
•
Two objects are now used to track the flap list size:
•
•
DOCS-IF-MIB
The DOCS-IF-MIB (released as RFC2670) has been updated to conform to version 5 of the DOCSIS 2.0 RF MIB Specification (draft-ietf-ipcdn-docs-rfmibv2-05.txt). This MIB was upgraded to version 5 in December 2002. Support for OSS-N-03068 and OSS2-N-03087 was added in August 2003.
DOCS-QOS-MIB
Cisco IOS Release 12.3(9)BC introduces additional MIB object enhancements for the DOCS-QOS-MIB on the Cisco uBR7100 series universal broadband routers:
•
•
Subscriber Traffic Management (STM) Version 1.1
Cisco IOS Release 12.3(9a)BC introduces support for Subscriber Traffic Management (STM) through Version 1.1 on the Cisco uBR7100 series universal broadband routers. STM 1.1 supports DOCSIS 1.1-compliant cable modems.
The STM feature enables service providers to identify and control subscribers who exceed the maximum bandwidth allowed under their registered quality of service (QoS) profiles. STM 1.1 works with Network-Based Application Recognition (NBAR) and Access control lists (ACLs) to ensure full network performance to other network subscribers that abide by their service agreements. STM 1.1 also works in conjunction with the Cisco Broadband Troubleshooter 3.2 to support additional network management and troubleshooting functions in the Cisco CMTS.
STM 1.1 extends earlier STM functions to monitor a subscriber's traffic on DOCSIS 1.1 primary service flows and supports these additional features:
•
•
•
•
For additional information about STM 1.1 and Cisco CBT 3.2, refer to the following documents on Cisco.com:
•
http://www.cisco.com/en/US/docs/cable/cmts/feature/ubsubmon.html
•
http://www.cisco.com/en/US/products/sw/netmgtsw/ps530/prod_release_notes_list.html
Important Notes
The following sections contain important notes about Cisco IOS Release 12.3(23)BC5 that apply to Cisco uBR7100 series universal broadband routers.
How to Upgrade to Cisco IOS Release 12.3(21)BC
In circumstances in which non-volatile memory (NVRAM) becomes corrupted on the Cisco CMTS, configurations and feature behavior may become corrupted or lost, looping behavior in NVRAM may result, and additional measures to resolve corrupted NVRAM and lost configurations would be required.
This issue can be generated by upgrading to later Cisco IOS releases from prior Cisco IOS releases that do not contain resolution to a specific and known issue. This issue is not limited to Cisco IOS releases installed on the Cisco universal broadband routers.
Symptoms of Corrupted NVRAM
This issue is displayed with the following symptoms in the case of the Cisco CMTS:
•
–
This error message is displayed either when the router boots, or when you enter one of the following commands:
•
•
•
•
Conditions of Corrupted NVRAM
This symptom is observed under the following conditions:
•
–
–
–
–
When upgrading to Cisco IOS Release 12.3(21)BC, the following upgrade procedure prevents corruption to NVRAM, retains configurations made in earlier releases, and successfully installs Cisco IOS Release 12.3(21)BC images. This procedure is subject to the feature restrictions and prerequisites of Cisco IOS Release 12.3(21)BC, described in these release notes.
Prerequisites
Cisco strongly recommends that you back up your configuration files prior to performing this upgrade, or any upgrade.
SUMMARY STEPS
Perform these steps to upgrade to Cisco IOS 12.3(21)BC, after TFTP file transfer operations are complete.
1.
2.
3.
4.
5.
6.
DETAILED STEPS
New Command Information for Cisco IOS Release 12.3(21)BC3
Cisco IOS Release 12.3(21)BC introduces support and modifications to the following commands for Cisco Cable Modem Termination System (CMTS) universal broadband routers.
Refer to the following sections for more information:
controller modular-cable
To enter controller configuration mode to configure the Cisco 1-Gbps Wideband SPA controller, use the controller modular-cable command in global configuration mode.
controller modular-cable slot/subslot/bay
Syntax Description
Defaults
No Wideband SPA controller is configured.
Command Modes
Global configuration mode.
Command History
12.3(21)BC
This command was introduced on the Cisco uBR10012 universal broadband router.
Usage Guidelines
This command indicates where the Wideband SPA that will be configured is located and enters controller configuration mode.
Examples
The following example shows how to enter controller configuration mode for the Wideband SPA in slot 1, subslot 0, and bay 0.
Router# configure terminalRouter(config)# controller modular-cable 1/0/0Router(config-controller)#Router#Related Commands
clear cable modem reset
To remove one or more CMs from the Station Maintenance List and reset them, use the clear cable modem reset command in privileged EXEC mode.
clear cable modem {mac-addr | ip-addr | [cable slot/port] {all | oui string | reject} } reset
clear cable modem {mac-addr | ip-addr | [cable slot/subslot/port] {all | oui string | reject | wideband registered-traditional-docsis} } reset
Syntax Description
Defaults
No default behavior or values
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command instructs the Cisco CMTS to stop sending DOCSIS station maintenance messages to one or more CMs, which effectively terminates the link to those CMs. A CM responds to this by resetting itself. Depending on when the CM received the last station maintenance message, it can take up to 30 seconds before the CM detects the missing station maintenance messages and resets itself.
In some circumstances, the customer premises equipment (CPE) devices behind a CM stops receiving traffic after the CM is reset. This is because the CMTS still has the CPE device listed in its address tables, but the CM does not after being reset, so the traffic passes through the CMTS but is dropped by the CM. To resolve this situation, the CPE device should simply send some type of traffic to the CM, such as a ping packet. (You can also resolve this situation by using the clear arp-cache command on the Cisco CMTS router to clear the router's address table, but this is not recommended, because it temporarily interrupts all traffic on the router.)
Note
Caution
Tip
Examples
The following example shows how to reset the CM at 172.23.45.67:
Router# clear cable modem 172.23.45.67 resetRouter#The following example shows how to reset all CMs that have a OUI that has been defined as having the vendor name of Cisco using the cable modem vendor command:
Router# clear cable modem oui Cisco resetRouter#The following example shows how to reset all CMs that are currently in one of the reject states:
Router# clear cable modem reject resetRouter#The following example shows how to reset all wideband CMs that are registered as traditional DOCSIS modems.:
Router# clear cable modem wideband registered-traditional-docsis resetMAC Address IP Address I/F MAC Prim BG DSID MD-DS-SGState Sid ID0018.6852.825c 80.18.0.9 C5/0/0/U0 online 1 0 256 N/A0018.6852.8286 80.18.0.10 C5/0/0/U0 online 2 0 264 N/A0016.92fb.55be 80.18.0.7 C5/0/0/U0 online 3 0 288 N/A0016.92f0.9104 80.18.0.5 C5/0/0/U0 online 4 0 280 N/A0016.92fb.55c0 80.18.0.6 C5/0/0/U0 online 5 0 272 N/ARouter#
Related Commands
hw-module shutdown
To shut down a particular Performance Routing Engine (PRE1) module, line card, Wideband SIP or Wideband SPA, use the hw-module shutdown command in global configuration mode. To activate a specific PRE1, line card, Wideband SIP or Wideband SPA, use the no form of this command.
hw-module {main-cpu | pre {A|B} | sec-cpu | slot slot-number | subslot slot/subslot |
bay slot/subslot/bay} shutdown [unpowered]no hw-module {main-cpu | pre {A|B} | sec-cpu | slot slot-number | subslot slot/subslot |
bay slot/subslot/bay} shutdownSyntax Description
Defaults
No default behavior or values
Command Modes
Global configuration
Command History
12.2(4)XF
This command was introduced for the Cisco uBR10012 router.
12.3(21)BC
Support was added for the Cisco Wideband SIP and Cisco 1-Gbps Wideband SPA.
Usage Guidelines
The hw-module shutdown command shuts down a particular Performance Routing Engine (PRE1) module, line card, Wideband SIP or Wideband SPA. To activate a specific PRE1, line card, Wideband SIP, or Wideband SPA, use the no form of this command.
Caution
Examples
The following example shows the standby PRE1 module being shut down:
Router(config)# hw-module sec-cpu shutdownRouter(config)#The following example shows the active PRE1 module being shut down (which will trigger a switchover to the standby PRE1 module):
Router(config)# hw-module main-cpu shutdownRouter(config)#The following example shows the PRE1 module in PRE1 slot B being shut down:
Router(config)# hw-module pre B shutdownRouter(config)#
Note
The following example shows how to deactivate and verify deactivation for the Cisco Wideband SPA located in slot 1, subslot 0, bay 0. In the output of the show hw-module bay oir command, notice the "admin down" in the Operational Status field.
Router# configure terminalRouter(config)# hw-module bay 1/0/0 shutdown unpowered%SPAWBCMTS-4-SFP_MISSING: Wideband-Cable 1/0/0, 1000BASE-SX SFP missing from port 0%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:1, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:2, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:3, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:4, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:5, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:6, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:7, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:8, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:9, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:10, changed state to down%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:11, changed state to down...Router# show hw-module bay 1/0/0 oirModule Model Operational Status-------------- ------------------ -------------------------bay 1/0/0 SPA-24XDS-SFP admin downThe following example shows how to activate and verify activation for the Cisco Wideband SPA located in slot 1, subslot 0, bay 0. In the output of the show hw-module bay oir command, notice the "ok" in the Operational Status field.
Router# configure terminalRouter(config)# no hw-module bay 1/0/0 shutdown%SPAWBCMTS-4-SFP_OK: Wideband-Cable 1/0/0, 1000BASE-SX SFP inserted in port 0%SPAWBCMTS-4-SFP_LINK_OK: Wideband-Cable 1/0/0, port 0 link changed state to up%SNMP-5-LINK_UP: LinkUp:Interface Wideband-Cable1/0/0:0 changed state to up%LINK-3-UPDOWN: Interface Cable1/0/0:0, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:1, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:2, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:3, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:4, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:5, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:6, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:7, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:8, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:9, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:10, changed state to up%LINK-3-UPDOWN: Interface Wideband-Cable1/0/0:11, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Wideband-Cable1/0/0:0, changed state to up...Router# show hw-module bay 1/0/0 oirModule Model Operational Status-------------- ------------------ -------------------------bay 1/0/0 SPA-24XDS-SFP okRelated Commands
show cable modem summary
To display a summary of CMs on one or more cable interfaces, use the show cable modem command in privileged EXEC mode.
show cable modem summary [total]
show cable modem summary interface1 [interface2] total
show cable modem summary interface1 [interface2] upstream port1 port2 total
show cable modem cable slot/port [upstream port] summary
show cable modem cable slot/subslot/port [upstream port] summary
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command displays a summary of CMs for a single cable interface or upstream, or for a range of cable interfaces or upstreams. The following possible combinations are possible for this command:
•
•
•
•
•
Examples
The following example shows typical output for the default form of the show cable modem summary command on a Cisco uBR7200 series router:
Router# show cable modem summaryInterface Total Active Registered DescriptionModems Modems ModemsCable3/0/U0 165 141 141 Line 32/1Cable3/0/U1 209 172 170 Line 32/2Cable3/0/U2 262 207 203 Line 32/3Cable3/0/U3 256 194 188 Line 32/4Cable5/0/U0 746 714 711 Line 41/1Cable6/0/U0 806 764 759 Line 42/2Router#
Note
The following example shows typical output for the show cable modem summary command with the total option on a Cisco uBR7200 series router:
Router# show cable modem summary totalInterface Total Active Registered DescriptionModems Modems ModemsCable5/0/U0 746 714 711 Node1Cable6/0/U1 806 764 759 Node3Total: 1552 1478 1470Router#The following example shows sample output for the show cable modem summary command with the total option for a Cisco uBR10012 router:
Router# show cable modem summary totalInterface Cable Modem DescriptionTotal Reg Unreg Offline Wideband initRC initD initIO initOC5/0/0/U0 84 84 0 0 84 0 0 0 0C5/0/0/U1 84 84 0 0 84 0 0 0 0C5/0/0/U2 83 83 0 0 83 0 0 0 0C5/0/0/U3 83 83 0 0 83 0 0 0 0<<output omitted>>Total: 8020 8020 0 0 8016 0 0 0 0Router#The following example shows sample output for the show cable modem summary total command for a range of interfaces on the Cisco uBR10012 router:
Router# show cable modem summary c5/1/1 c5/1/2 totalInterface Cable Modem DescriptionTotal Reg Unreg Offline Wideband initRC initD initIO initOC5/1/1/U0 84 84 0 0 84 0 0 0 0C5/1/1/U1 84 84 0 0 83 0 0 0 0C5/1/1/U2 83 83 0 0 83 0 0 0 0C5/1/1/U3 83 83 0 0 83 0 0 0 0C5/1/2/U0 84 84 0 0 84 0 0 0 0C5/1/2/U1 84 84 0 0 84 0 0 0 0C5/1/2/U2 83 83 0 0 83 0 0 0 0C5/1/2/U3 83 83 0 0 83 0 0 0 0Total: 668 668 0 0 667 0 0 0 0Router#The following example shows sample output for the show cable modem summary total command for a range of interfaces and upstreams on the Cisco uBR10012 router:
Router# show cable modem summary c5/1/1 c5/1/2 upstream 0 1 totalInterface Cable Modem DescriptionTotal Reg Unreg Offline Wideband initRC initD initIO initOC5/1/1/U0 84 84 0 0 84 0 0 0 0C5/1/1/U1 84 84 0 0 83 0 0 0 0C5/1/2/U0 84 84 0 0 84 0 0 0 0C5/1/2/U1 84 84 0 0 84 0 0 0 0Total: 336 336 0 0 335 0 0 0 0Router#
Note
Table 8 describes the fields shown in the show cable modem summary displays:
Note
Tip
Related Commands
New and Changed Command Reference for Cisco IOS Release 12.3(9a)BC
Cisco IOS Release 12.3(9a)BC introduces or enhances the following Cisco IOS commands for the Cisco uBR7100 series universal broadband routers:
cable source-verify
To enable verification of IP addresses or service IDs (SIDs) for CMs and CPE devices on the upstream, use the cable source-verify command in global configuration, cable interface configuration or subinterface configuration modes. To disable verification, use the no form of this command.
Cable Interface and Subinterface Configuration Modes
cable source-verify [dhcp | leasetimer value | leasequery-filter upstream query-num interval]
no cable source-verify
Global Configuration Mode
cable source-verify leasequery-filter downstream query-num interval
no cable source-verify
Syntax Description
Defaults
Disabled. When the dhcp option is specified, the leasetimer option is set by default to 60 minutes.
Command Modes
Global configuration, Cable interface configuration or subinterface configuration
Note
Command History
For additional information about this and other commands, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
show cable tech-support
Cisco IOS Release 12.3(9a)BC introduces changes to the output of the show cable tech-support command. This change allows users with large numbers of online cable modems to collect the necessary information without consuming the console session for a long period of time.
To display general information about the router when reporting a problem, use the show cable tech-support command in privileged EXEC mode.
show cable tech-support
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
Privileged EXEC.
Command History
Examples
The following example illustrates the cable modem and interface information for the Cisco uBR7100 series router on which Cisco IOS Release 12.3(9a)BC is installed.
Router# show cable tech-support----------------------------------- Slot 1/0 ----------------------------------------------------- show cable modem Cable1/0 ------------------MAC Address IP Address I/F MAC Prim RxPwr Timing Num BPIState Sid (dB) Offset CPE Enb------------------ show cable modem Cable1/0 connectivity ------------------Prim 1st time Times %online Online time Offline timeSid online Online min avg max min avg max------------------ show interface Cable1/0 sid ------------------Sid Prim MAC Address IP Address Type Age Admin Sched SfidState Type------------------ show interface Cable1/0 sid counter ------------------Sid Req-polls BW-reqs Grants Packets Frag Concatpktsissued received issued received complete received------------------ show interface Cable1/0 sid association ------------------Sid Prim Online IP Address MAC Address Interface VRF Name------------------ show interface Cable1/0 modem 0 ------------------SID Priv bits Type State IP address method MAC addressFor additional information about this and other commands, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
show controllers cable
To display information about the interface controllers for a cable interface on the Cisco CMTS router, use the show controllers cable command in user EXEC or privileged EXEC mode.
show controllers cable {slot/port | slot/subslot/port} [downstream | upstream [port] | [mem-stat] [memory] [proc-cpu]]
Cisco IOS Release 12.3(9a)BC adds the tech-support keyword to the show controllers cable command. This change allows users with large numbers of online cable modems to collect the necessary line card information without consuming the console session for a long period of time.
Additional and related improvements are also available for the show tech-support command.
Syntax Description
slot/port
Identifies the cable interface and downstream port on the Cisco uBR7100 series and Cisco uBR7200 series routers.
On the Cisco uBR7100 series router, the only valid value is 1/0. On the Cisco uBR7200 series router, slot can range from 3 to 6, and port can be 0 or 1, depending on the cable interface.
slot/subslot/port
Identifies the cable interface on the Cisco uBR10012 router. The following are the valid values:
•
•
•
downstream
(Optional) Displays downstream interface status.
upstream
(Optional) Displays upstream interface status.
port
(Optional) Specifies the desired upstream port. Valid values start with 0 for the first upstream port on the cable interface line card.
mem-stat
(Optional) Displays the output from the show memory statistics command to display a summary of memory statistics for a Broadband Processing Engine (BPE) cable interface line card.
memory
(Optional) Displays the output from the show memory command to display a summary of memory statistics, including the memory as it is allocated per process, for a Broadband Processing Engine (BPE) cable interface line card.
proc-cpu
(Optional) Displays the output from the show processes cpu command to display the processor status for a Broadband Processing Engine (BPE) cable interface line card.
tech-support
(Optional, privileged EXEC mode only) Displays the output from the show tech-support command for a Broadband Processing Engine (BPE) cable interface line card.
Defaults
No default behavior or values.
Command Modes
User EXEC, Privileged EXEC.
Command History
Usage Guidelines
The mem-stat, memory, and proc-cpu keywords execute the related command on the processor that runs on added to obtain the relevant information from the onboard processor on Broadband Processing Engine (BPE) cable interface line cards, such as the Cisco uBR-MC16U/X, Cisco uBR-MC28U/X, and Cisco uBR-MC5X20S/U cards. This allows you to obtain information that is specific for that particular cable interface card, as opposed to having to run these commands on the entire router.
Note
Examples
The following is sample output for the downstream connection for cable interface 1/0 on a Cisco uBR7100 series router:
Router# show controllers c1/0 downstreamCable1/0 Downstream is upFrequency not set, Channel Width 6 MHz, 64-QAM, Symbol Rate 5.056941 MspsFEC ITU-T J.83 Annex B, R/S Interleave I=32, J=4Downstream channel ID: 0Dynamic Services Stats:DSA: 0 REQs 0 RSPs 0 ACKs0 Successful DSAs 0 DSA FailuresDSC: 0 REQs 0 RSPs 0 ACKs0 Successful DSCs 0 DSC FailuresDSD: 0 REQs 0 RSPs0 Successful DSDs 0 DSD FailuresDCC: 0 REQs 0 RSPs 0 ACKs0 Successful DCCs 0 DCC FailuresTable 9 describes the fields displayed by the show controllers cable downstream command.
Examples
The following example illustrates the information from the show controllers cable command for slot 1 on port 0 on a Cisco uBR7100 series router on which Cisco IOS Release 12.3(9a)BC is installed.
Router# show controllers c1/0The following example illustrates memory statistics for the specified slot/port on the Cisco uBR7100 router:
Router# show controllers c1/0 mem-statHead Total(b) Used(b) Free(b) Lowest(b) Largest(b)Processor 60F3FB40 185337024 8644376 176692648 176557288 176638828I/O C000000 67108864 6679384 60429480 60429480 60405696The following example illustrates upstream information for the specified slot/port on the Cisco uBR7100 series router:
Router# show controllers c1/0 upstreamCable1/0 Upstream 0 is upFrequency 25.008 MHz, Channel Width 1.600 MHz, QPSK Symbol Rate 1.280 MspsSpectrum Group is overriddenSNR - Unknown - no modems online.Nominal Input Power Level 0 dBmV, Tx Timing Offset 0Ranging Backoff automatic (Start 0, End 3)Ranging Insertion Interval automatic (60 ms)Tx Backoff Start 3, Tx Backoff End 5Modulation Profile Group 1Concatenation is enabledFragmentation is enabledpart_id=0x3137, rev_id=0x03, rev2_id=0xFFnb_agc_thr=0x0000, nb_agc_nom=0x0000Range Load Reg Size=0x58Request Load Reg Size=0x0EMinislot Size in number of Timebase Ticks is = 4Minislot Size in Symbols = 32Bandwidth Requests = 0x0Piggyback Requests = 0x0Invalid BW Requests= 0x0Minislots Requested= 0x0Minislots Granted = 0x0Minislot Size in Bytes = 8Map Advance (Dynamic) : 2180 usecsUCD Count = 320676DES Ctrl Reg#0 = C000C043, Reg#1 = 0The following example illustrates CPU processes for the specified slot/port on the Cisco uBR7100 series router:
Router# show controllers c1/0 proc-cpuCPU utilization for five seconds: 1%/1%; one minute: 1%; five minutes: 1%PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process1 4 1 4000 0.00% 0.00% 0.00% 0 Chunk Manager2 0 128036 0 0.00% 0.00% 0.00% 0 Load Meter3 248 395 627 0.00% 0.00% 0.00% 0 CR10K IPC MSG Pr4 428012 384113 1114 0.07% 0.07% 0.07% 0 CR10K NonBlk Xmt5 43392 65009 667 0.00% 0.00% 0.00% 0 Check heaps6 8 561 14 0.00% 0.00% 0.00% 0 Pool Manager7 0 1 0 0.00% 0.00% 0.00% 0 AAA_SERVER_DEADT8 0 2 0 0.00% 0.00% 0.00% 0 Timers9 0 2 0 0.00% 0.00% 0.00% 0 AAA high-capacit10 0 10680 0 0.00% 0.00% 0.00% 0 ARP Input11 0 1 0 0.00% 0.00% 0.00% 0 Entity MIB API12 0 2 0 0.00% 0.00% 0.00% 0 Serial BackgrounThe following example illustrates memory processor information for the specified slot/subslot/port on the Cisco uBR7100 series router:
Router# show controllers c1/0 memoryHead Total(b) Used(b) Free(b) Lowest(b) Largest(b)Processor 60F3FB40 185337024 8644376 176692648 176557288 176638828I/O C000000 67108864 6679384 60429480 60429480 60405696Processor memoryAddress Bytes Prev Next Ref PrevF NextF Alloc PC what60F3FB40 0000020004 00000000 60F4498C 001 -------- -------- 60113308 Managed Chunk Queue Elements60F4498C 0000001504 60F3FB40 60F44F94 001 -------- -------- 60126F88 List Elements60F44F94 0000005004 60F4498C 60F46348 001 -------- -------- 60126FCC List Headers60F46348 0000000048 60F44F94 60F463A0 001 -------- -------- 6055D4E4 *Init*60F463A0 0000000028 60F46348 60F463E4 001 -------- -------- 604C12B4 *Init*60F463E4 0000000048 60F463A0 60F4643C 001 -------- -------- 6055D4E4 *Init*60F4643C 0000000200 60F463E4 60F4652C 001 -------- -------- 6014BE28 *Init*60F4652C 0000004260 60F4643C 60F475F8 001 -------- -------- 60065A2C TTY data60F475F8 0000002004 60F4652C 60F47DF4 001 -------- -------- 60069164 TTY Input BufFor additional information about this and other commands, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
show tech-support
Cisco IOS Release 12.3(9a)BC shortens the output of the show tech-support command. This change allows users with large numbers of online cable modems to collect information without consuming the console session for a long period of time.
To display general information about the Cisco CMTS router when reporting a problem to Cisco technical support, use the show tech-support command in privileged EXEC mode.
show tech-support [page] [password] [cef | ipc | ipmulticast | isis | mpls | ospf | rsvp]
Note
Note
Syntax Description
For additional information about this and other commands, refer to the following document on Cisco.com:
•
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cbl_book.html.
Caveats
Caveats describe unexpected behavior in Cisco IOS software releases. Severity 1 caveats are the most serious caveats; severity 2 caveats are less serious. Severity 3 caveats are moderate caveats, and only selected severity 3 caveats are included in the caveats document.
Caveat numbers and brief descriptions for each Cisco IOS Release 12.3(17b)BCx-, 12.3(21a)BCx-, and 12.3(23)BCx-based releases are listed in this section.
Cisco IOS Release 12.3M is the parent release train for Cisco IOS Release 12.3(23)BC5. Unless otherwise noted, Cisco IOS Release 12.3(23)BC5 maintains support for the changes and caveat resolutions introduced in earlier releases of Cisco IOS Release 12.3M.
If you have an account on Cisco.com, you can use the Bug Toolkit to find select caveats of any severity. To reach the Bug Toolkit, log in to Cisco.com and click Technical Support: Tools & Utilities: Software BUG TOOLKIT (under Configuration Tools). Another option is to enter the following URL in your web browser or go to http://www.cisco.com/pcgi-bin/Support/Bugtool/launch_bugtool.pl
Open Caveats for Release 12.3(21a)BC9.
There are no open caveats for Cisco IOS Release 12.3(21a)BC9.
Resolved Caveats for Release 12.3(21a)BC9
Table 10 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(21a)BC9 release.
Table 10 Resolved Caveats for Cisco IOS Release 12.3(21a)BC9
CSCsh97579
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding.
Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-tunnels.shtml.
CSCsq31776
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding. Cisco has released free software updates that address this vulnerability. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-tunnels.shtml.
CSCsv04836
Multiple Cisco products are affected by denial of service (DoS) vulnerabilities that manipulate the state of Transmission Control Protocol (TCP) connections. By manipulating the state of a TCP connection, an attacker could force the TCP connection to remain in a long-lived state, possibly indefinitely. If enough TCP connections are forced into a long-lived or indefinite state, resources on a system under attack may be consumed, preventing new TCP connections from being accepted. In some cases, a system reboot may be necessary to recover normal system operation. To exploit these vulnerabilities, an attacker must be able to complete a TCP three-way handshake with a vulnerable system.
In addition to these vulnerabilities, Cisco Nexus 5000 devices contain a TCP DoS vulnerability that may result in a system crash. This additional vulnerability was found as a result of testing the TCP state manipulation vulnerabilities.
Cisco has released free software updates for download from the Cisco website that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090908-tcp24.shtml.
CSCsx70889
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding.
Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-tunnels.shtml.
CSCsy15227
Cisco IOS Software configured with Authentication Proxy for HTTP(S), Web Authentication or the consent feature, contains a vulnerability that may allow an unauthenticated session to bypass the authentication proxy server or bypass the consent webpage.
There are no workarounds that mitigate this vulnerability.
This advisory is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sa-20090923-auth-proxy.shtml
Open Caveats for Release 12.3(23)BC8
There are no open caveats for Cisco IOS Release 12.3(23)BC8.
Resolved Caveats for Release 12.3(23)BC8
Table 12 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC8 release.
Table 11 Resolved Caveats for Cisco IOS Release 12.3(23)BC8
CSCsh97579
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding.
Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-tunnels.shtml.
CSCsq31776
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding. Cisco has released free software updates that address this vulnerability. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-tunnels.shtml.
CSCsy15227
Cisco IOS Software configured with Authentication Proxy for HTTP(S), Web Authentication or the consent feature, contains a vulnerability that may allow an unauthenticated session to bypass the authentication proxy server or bypass the consent webpage.
There are no workarounds that mitigate this vulnerability.
This advisory is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sa-20090923-auth-proxy.shtml
Open Caveats for Release 12.3(23)BC6
There are no open caveats for Cisco IOS Release 12.3(23)BC6.
Resolved Caveats for Release 12.3(23)BC6
Table 12 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC6 release.
Table 12 Resolved Caveats for Cisco IOS Release 12.3(23)BC6
CSCsv04836
Multiple Cisco products are affected by denial of service (DoS) vulnerabilities that manipulate the state of Transmission Control Protocol (TCP) connections. By manipulating the state of a TCP connection, an attacker could force the TCP connection to remain in a long-lived state, possibly indefinitely. If enough TCP connections are forced into a long-lived or indefinite state, resources on a system under attack may be consumed, preventing new TCP connections from being accepted. In some cases, a system reboot may be necessary to recover normal system operation. To exploit these vulnerabilities, an attacker must be able to complete a TCP three-way handshake with a vulnerable system.
In addition to these vulnerabilities, Cisco Nexus 5000 devices contain a TCP DoS vulnerability that may result in a system crash. This additional vulnerability was found as a result of testing the TCP state manipulation vulnerabilities.
Cisco has released free software updates for download from the Cisco website that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090908-tcp24.shtml.
Open Caveats for Release 12.3(23)BC5
Table 13 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC5 release.
Resolved Caveats for Release 12.3(23)BC5
Table 14 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC5 release.
Open Caveats for Release 12.3(23)BC4
Table 15 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC4 release.
Resolved Caveats for Release 12.3(23)BC4
There are no resolved caveats for Cisco IOS Release 12.3(23)BC4.
Open Caveats for Release 12.3(21a)BC8
Table 16 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(21a)BC8 release.
Resolved Caveats for Release 12.3(21a)BC8
Table 17 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(21a)BC8 release.
Table 17 Resolved Caveats for Cisco IOS Release 12.3(21a)BC8
CSCso63914
Symptom: The Cisco uBR-MC28U cards are not sending SNMP cable modem on/off traps messages.
Condition: This issue only happens on Cisco uBR-MC28U cable cards and routers configured with bundle subinterface.
Workaround: Use bundle interface rather than subinterface.
CSCsk00618
Symptom: The cable interfaces are in shutdown state.
Condition: This occurs during booting. This issue was first detected in routers running Cisco IOS release 12.3(21a)BC7 and later found in routers running later Cisco IOS releases.
Workaround: There is no workaround.
CSCsl87023
Symptom: Different values of upstream center frequency are seen in the output for show running-config and show controllers commands. The 16 KHz resolution configured on the new line card is not correct.
Condition: This occurs when fixed upstream center frequency is configured.
Workaround: This error is cosmetic and has no effect on the behavior of the line card.
CSCsg91306
Symptom: The access server may reload due to software forced crash, causing memory corruption in the processor memory pool of the router.
Condition: This occurs when SIP and VoIP protocols are configured on the router and the erroneous header field exists in the SIP message.
Workaround: There is no workaround.
CSCso48916
Symptom: The Cisco uBR-MC28U cable interface line card reloads after every software upgrade.
Condition: This occurs during an upgrade.
Workaround: There is no workaround.
CSCsi05373
Symptom: A Cisco uBR7246VXR router may unexpectedly reload due to bus error (Signal = 10, Code = 0x10) and spurious accesses may be observed.
Condition: This issue may occur under the following conditions:
•
•
Workaround: Do not ping or telnet to the modem while a phone call is crossing it.
CSCek52673
Symptom: A router reloads after receiving a malformed UDP packet.
Condition: Dynamic Host Configuration Protocol (DHCP) is enabled on the router.
Workaround: There is no workaround.
CSCsq05487
Symptom: DHCPDISCOVER message received from the client to the cable modem termination systems (CMTS) relay agent fails to reach the CMTS, and the Dynamic Host Configuration Protocol (DHCP) server. As a result, the cable modem fail to complete DHCP, and fails to get online.
Condition: Another router exists between the CMTS relay agent and server.
Workaround: Configure ip proxy-arp on the network interface of the router that faces the CMTS.
CSCso35102
Symptom: Cable modems may not go online on certain upstream interfaces on routers running Cisco IOS Release 12.3(21a)BC6. The modems do not reach the init(rc) state as well.
Condition: The issue is was first detected in routers running Cisco IOS Release 12.3(21a)BC6 and later found in routers running later Cisco IOS releases.
Workaround: Use the shut/no shut command to fix the issue.
CSCsg81770
Symptom: A subinterface with ifIndex=62 does not show up in ifMIB output.
Condition: This occurs during router configuration. If the ifIndex value=62 is assigned to a subinterface (non hardware interface descriptor block (HWIDB)), then the subinterface may not show up in the ifMIB output.
Workaround: Enabling snmp ifindex persist on the router such that ifIndex=62 is assigned to a HWIDB, or configuring the router's interfaces in an order such that ifIndex=62 is assigned to a HWIDB. The router remains in this state until a reload.
CSCsm77199
Symptom: If the HTTP secure server is configured on the switch, the error message "%DATACORRUPTION-1-DATAINCONSISTENCY: copy error" is displayed with tracebacks. This happens after the initialization of the supervisor.
Condition: This occurs when ip http server command is configured.
Workaround: Execute the no ip http server command. The switch functionality is not affected by this error message. The problem is cosmetic.
CSCsj46707
Symptom: Normal operation of the router is suspended during bootup.
Condition: This occurs as a result of a race condition caused by the order of operations in console_init(). The router hangs and gives traceback.
Workaround: There is no workaround.
CSCsq37824
Symptom: Memory overflow risk may occur with string overflow.
Condition: This occurs during source code analysis.
Workaround: There is no workaround.
CSCsh69471
Symptom: AAA accounting requests are being sent with empty user name. The user name is not displayed in the output of show command or the show accounting commands for the affected accounting traffic.
Condition: This occurs when commands are executed from a remote host using remote shell.
Workaround: There is no workaround.
CSCsk42759
Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the Cisco IOS device.
Cisco has released free software updates that address these vulnerabilities. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities addressed in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-sip.shtml.
CSCsg91306
Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the Cisco IOS device.
Cisco has released free software updates that address these vulnerabilities. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities addressed in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-sip.shtml.
Open Caveats for Release 12.3(23)BC3
Table 18 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC3 release.
Resolved Caveats for Release 12.3(23)BC3
Table 19 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco 12.3(23)BC3 release.
Open Caveats for Release 12.3(23)BC2
There are no open caveats for the Cisco IOS 12.3(23)BC2 release.
Resolved Caveats for Release 12.3(23)BC2
Table 20 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(23)BC2 release.
Table 20 Resolved Caveats for Cisco IOS Release 12.3(23)BC2
CSCso81854
Multiple Cisco products are vulnerable to DNS cache poisoning attacks due to their use of insufficiently randomized DNS transaction IDs and UDP source ports in the DNS queries that they produce, which may allow an attacker to more easily forge DNS answers that can poison DNS caches.
To exploit this vulnerability an attacker must be able to cause a vulnerable DNS server to perform recursive DNS queries. Therefore, DNS servers that are only authoritative, or servers where recursion is not allowed, are not affected.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080708-dns.shtml.
This security advisory is being published simultaneously with announcements from other affected organizations.
CSCsm50944
A high CPU value is observed when many host IP addresses of modems are registered with static IP addresses. This is observed when some subinterfaces are configured using cable source-verify command and other subinterfaces in the same bundle are configured using cable source-verify dhcp command.
Workaround: Use cable source-verify dhcp command on both the subinterfaces. As for the static IP addresses, reserve these addresses in the DHCP server.
CSCsg35077
A device that is running Cisco IOS software may crash during processing of an Internet Key Exchange (IKE) message.
Workaround: Customers that do not require IPsec functionality on their devices can use the no crypto isakmp enable command in global configuration mode to disable the processing of IKE messages and eliminate device exposure.
If IPsec is configured, this bug may be mitigated by applying access control lists that limit the hosts or IP networks that are allowed to establish IPsec sessions with affected devices. This assumes that IPsec peers are known. This workaround may not be feasible for remote access VPN gateways where the source IP addresses of VPN clients are not known in advance. ISAKMP uses port UDP/500 and can also use UDP/848 (the GDOI port) when GDOI is in use.
CSCsi95211
The Tunnel maximum transmission unit (MTU) value is reset to 1514 bytes.
This occurs when the ip mtu value that is configured on a tunnel interface is greater than 1514 bytes and an IP address is subsequently assigned to the Tunnel interface.
Workaround: Re-configuring the ip mtu value after the IP address has been configured restores the ip mtu value.
CSCsj85065
A Cisco IOS device may crash while processing an SSL packet. This can happen during the termination of an SSL-based session. The offending packet is not malformed and is normally received as part of the packet exchange.
Cisco has released free software updates that address this vulnerability.
Aside from disabling affected services, there are no available workarounds to mitigate an exploit of this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-ssl.shtml.
Open Caveats for Release 12.3(21a)BC7
There are no open caveats for the Cisco IOS 12.3(21a)BC7 release.
Resolved Caveats for Release 12.3(21a)BC7
Table 21 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC7 release.
Table 21 Resolved Caveats for Cisco IOS Release 12.3(21a)BC7
CSCsm50944
A high CPU value is observed when many host IP addresses of modems are registered with static IP addresses. This is observed when some subinterfaces are configured using cable source-verify command and other subinterfaces in the same bundle are configured using cable source-verify dhcp command.
Workaround: Use cable source-verify dhcp command on both the subinterfaces. As for the static IP addresses, reserve these addresses in the DHCP server.
CSCsl82266
Loop occurs between uBR and CNR during leasequery. At the loop condition, you can see several leasequeries per second and after a while, the loop ends automatically.
This issue occurs on following conditions:
•
•
•
There are no known workarounds.
CSCsk74962
Router is experiencing spurious memory access while running the show buffer assigned dump command.
This issue does not cause any operational problems.
There are no known workarounds.
CSCsl73391
CMTS sysUpTime parameter remains unchanged in IPDR document for all records thus making it unreliable for stop records. Similarly, IPDRcreationTime parameters are the same for interim records and are set to the data collection start time for the IPDR document. These may cause certain accounting issues.
This issue occurs when Subscriber Account Management Interface Specification (SAMIS) feature is used.
Workaround: Poll the DOCS-QOS-MIB object directly.
CSCsl61201
CMTS generates duplicate IPDR records for same service identifier (SID). This creates accounting issues for usage-based billing of cable modems.
This issue occurs on uBR10k and uBR7k platforms running Cisco IOS Release 12.3(17b)BC4 when Subscriber Account Management Interface Specification (SAMIS) feature is used.
CSCsj85065
A Cisco IOS device may crash while processing an SSL packet. This can happen during the termination of an SSL-based session. The offending packet is not malformed and is normally received as part of the packet exchange.
Cisco has released free software updates that address this vulnerability.
Aside from disabling affected services, there are no available workarounds to mitigate an exploit of this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-ssl.shtml.
Open Caveats for Release 12.3(23)BC1
Table 22 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(23)BC1 release.
Resolved Caveats for Release 12.3(23)BC1
Table 23 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(23)BC1 release.
Table 23 Resolved Caveats for Cisco IOS Release 12.3(23)BC1
CSCsl73391
CMTS sysUpTime parameter remains unchanged in IPDR document for all records thus making it unreliable for stop records. Similarly, IPDRcreationTime parameters are the same for interim records and are set to the data collection start time for the IPDR document. These may cause certain accounting issues.
This issue occurs when Subscriber Account Management Interface Specification (SAMIS) feature is used.
Workaround: Poll the DOCS-QOS-MIB object directly.
CSCsl61201
CMTS generates duplicate IPDR records for same service identifier (SID). This creates accounting issues for usage-based billing of cable modems.
This issue occurs on uBR10k and uBR7k platforms running Cisco IOS Release 12.3(17b)BC4 when Subscriber Account Management Interface Specification (SAMIS) feature is used.
CSCsd71318
Cisco 2800 series router crashes when the connection to the URL filter server is reset, either due to network congestion or during a warm/cold reload.
This issue occurs with external Websense or N2H2 server.
Workaround: There are no known workarounds for cold/warm reload. For crash due to network congestion or WAN reset, remove the condition that causes the connection to the URL filter to flap.
CSCsk74962
Router is experiencing spurious memory access while running the show buffer assigned dump command.
This issue does not cause any operational problems.
There are no known workarounds.
CSCsh69471
AAA accounting requests are being sent with empty user name. This issue occurs while using the show command to see the executor of the show accounting commands for the affected accounting traffic.
Workaround: No workaround is required as it is only a display issue.
CSCsl32567
When executing show aaa attribute protocol radius command, the router running Cisco IOS may crash or display junk characters.
There are no known workarounds.
CSCsl82266
Loop occurs between uBR and CNR during leasequery. At the loop condition, you can see several leasequeries per second and after a while, the loop ends automatically.
This issue occurs on following conditions:
•
•
•
There are no known workarounds.
CSCsk70446
Traceback observed while using long URLs to configure a device using the Cisco IOS HTTP web parser.
This issue occurs while trying to configure commands that have a single keyword or parameter greater than N characters in length, where N is:
•
•
•
Workaround: Avoid using the Cisco IOS HTTP web parser for commands with long keywords or arguments.
CSCsh29217
Cisco 10000, uBR10012 and uBR7200 series devices use a User Datagram Protocol (UDP) based Inter-Process Communication (IPC) channel that is externally reachable. An attacker could exploit this vulnerability to cause a denial of service (DoS) condition on affected devices. No other platforms are affected.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-ipc.shtml.
Open Caveats for Release 12.3(21a)BC6
Table 24 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC6 release.
Resolved Caveats for Release 12.3(21a)BC6
There are no resolved caveats for the Cisco IOS 12.3(21a)BC6 release.
Open Caveats for Release 12.3(21a)BC5
Table 25 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC5 release.
Resolved Caveats for Release 12.3(21a)BC5
Table 26 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC5 release.
Open Caveats for Release 12.3(23)BC
Table 27 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(23)BC release.
Resolved Caveats for Release 12.3(23)BC
Table 28 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(23)BC release.
Table 28 Resolved Caveats for Cisco IOS Release 12.3(23)BC
CSCek76143
DOCSIS dynamic state queue can be corrupted and cause a CMTS RP or LC unexpected reload in cmts_get_dyn_transc_state. This is a suspected cause of unexpected reloads in CSCek70406.
This issue occurs with dynamic service flows created in packetcable or non-packetcable environment.
There are no known workarounds.
CSCsd26691
When tdma-atdma docsis mode is configured on the interface, the current reserved value shown on admission control CLI is incorrect.
This issue is observed whenever tdma-atdma is configured.
There are no known workarounds.
CSCsd65958
Packets per second is far greater than bytes per second on some of the line card interfaces, which should not be possible.
This issue occurs when the layer 2 traffic contains broadcast traffic.
There are no known workarounds.
CSCsg46637
When an invalid DSX (DSA, DSD, or DSC) message is received, only a vague message is printed out.
There are no known workarounds.
CSCsh04686
With X25 over TCP (XOT) enabled on a router or catalyst switch, malformed traffic sent to TCP port 1998 will cause the device to reload. This was first observed in IOS 12.2(31)SB2.
Workarounds: Use IPSEC or other tunneling mechanisms to protect XOT traffic. Also, apply ACLs on affected devices so that traffic is only accepted from trusted tunnel endpoints.
CSCsh41532
PCMM volume-based-usage exceeded should send up a gate-report-state but this is not working as expected.
The volume-based-usage counter is supposed to be reset when a modification is made to it on an existing gate. This should send gate-report-state after the new value has been reached. The counter seems to be retaining the original value in a test case.
There are no known workarounds.
CSCsh68970
Samis tries to use bpe address as source address, which result in connection failure.
Neither cable metering source-interface configured, nor loopback interface available; moreover, the bpe address is the highest ip address among the interfaces.
Workaround: Set up the source interface via CLI cable metering source-interface.
CSCsi44396
The maximum number of virtual bundle interfaces that can be created on a CMTS is 40. While trying to create the 41st virtual bundle interface via the CLI command, the following error message is displayed:
Vegas-VXR(config)#int bundle 41Exceeding maximum number of virtual bundle interfaces allowed: 40 ^% Invalid input detected at '^' marker.Vegas-VXR(config)#However, by using the following procedure, the CMTS allowed 41 Virtual Bundle Interfaces. The expected result is the CMTS should not allow the 41st virtual bundle interface to be created.
1.
2.
3.
4.
5.
6.
There are no known workarounds.
CSCsi68543
TLS is working OK right after is configured originally. If TLS is deconfigured and then reactivated again, the corresponding Ethernet interface is not set to promiscuous mode
Before the configuration changes:
show runcable l2-vpn-service dot1qcable dot1q-vc-map <#>.<#>.<#> Ethernet<#> <#>show controllersEthernet<#><..>mac_adfilter_cfg = 0x0000000000000E29Promiscuous mode ONAfter the TLS configuration was reapplied:
show runcable l2-vpn-service dot1qcable dot1q-vc-map <#>.<#>.<#> Ethernet<#> <#>show controllersEthernet<#><..>mac_adfilter_cfg = 0x0000000000000E28Promiscuous mode OFFThis issue occurs with TLS configuration.
Workaround: Do not disable TLS once it is enabled.
CSCsl34893
ARP table entries are incorrect for a CPE. This can result in CPE traffic being sent to the wrong modem.
The ARP table issue occurs for CPEs that move from one modem to another or when one CPE goes away and the IP address is allocated to another CPE by the DHCP server.
There are no known workarounds.
CSCsh29217
Cisco 10000, uBR10012 and uBR7200 series devices use a User Datagram Protocol (UDP) based Inter-Process Communication (IPC) channel that is externally reachable. An attacker could exploit this vulnerability to cause a denial of service (DoS) condition on affected devices. No other platforms are affected.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-ipc.shtml.
Open Caveats for Release 12.3(21a)BC4
Table 29 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC4 release.
Resolved Caveats for Release 12.3(21a)BC4
Table 30 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC4 release.
Open Caveats for Release 12.3(21a)BC3
Table 31 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC3 release.
Resolved Caveats for Release 12.3(21a)BC3
Table 32 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC3 release.
Open Caveats for Release 12.3(21a)BC2
Table 33 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC2 release.
Resolved Caveats for Release 12.3(21a)BC2
Table 34 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC2 release.
Table 34 Resolved Caveats for Cisco IOS Release 12.3(21a)BC2
CSCeg62070
Tracebacks or unexpected reloads are seen during a HTTP transactions with long URLs.
The unexpected reload is seen when the length of any token in the URL of the request is excessively long.
Workaround: Disable HTTP server using the no ip http server command.
CSCsd81407
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
•
•
•
•
•
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCse56501
A device running Cisco IOS software that has Internet Protocol version 6 (IPv6) enabled may be subject to a denial of service (DoS) attack. For the device to be affected by this vulnerability the device also has to have certain Internet Protocol version 4 (IPv4) User Datagram Protocol (UDP) services enabled. To exploit this vulnerability an offending IPv6 packet must be targeted to the device. Packets that are routed throughout the router can not trigger this vulnerability. Successful exploitation will prevent the interface from receiving any additional traffic. The only exception is Resource Reservation Protocol (RSVP) service, which if exploited, will cause the device to crash. Only the interface on which the vulnerability was exploited will be affected.
Cisco is providing fixed software to address this issue. There are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml.
CSCsf08998
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
•
•
•
•
•
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsg40567
Malformed SSL packets may cause a router to leak multiple memory blocks.
This issue is observed on a Cisco router that has the ip http secure server command enabled.
Workaround: Disable the ip http secure server command.
CSCsh14796
Under the DOCSIS1.1 or DOCSISI 2.0 model, the CMTS cannot trigger the CM to re-send SA-MAP/TEK request unless the CM is reset or the CPE re-starts the multicast session by IGMP-leave and IGMP-join again.
There are no known workarounds.
CSCsh59672
Cable filter groups are not correctly updated in the MC28U cable line card if changes are made in the command line interface (CLI).
Specific test cases concerned the IP TOS filtering capabilities:
•
•
•
•
•
There are no known workarounds.
CSCsi01470
A vulnerability in the Cisco implementation of Multicast Virtual Private Network (MVPN) is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching (MPLS) based Virtual Private Networks (VPN) by sending specially crafted messages.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml.
CSCsi01961
A slow leak may occur on a router in the CMTS MAC Parser process.
There are no known workarounds.
CSCsi17390
Certain Cable commands are unavailable underneath the cable interface:
no cable arp
no cable proxy
cable arp filters
cable dhcp-giaddr policy/primary
The IOS will not print out that the commands have been removed or a unsupported after bootup. The commands will just be missing.
This issue occurs on a uBR7100 running 12.3(21)BC.
Workaround: Configuring sub-interfaces will allow you to configure:
no cable arp
no cable proxy
cable dhcp-giaddr policy/primary
Cable bundle interface- virtual interfaces are not supported.
CSCsi32107
During normal operations, a bus error forced reload occurs due to SNMP activity on the router.
There are no known workarounds.
CSCsi33899
The CMTS unexpected reloads when snmp set the cdxCmtsCmQosProfile.
This issue occurs when setting the cdxCmtsCmQosProfile with boundary value 16383.
Workaround: Do not set the cdxCmtsCmQosProfile with value bigger than 255.
CSCsi41855
The router unexpected reloads when 28U card OIR/test reloads while polling ccsFlapEntry.
This issue occurs when the OIR/LC unexpected reloads.
There are no known workarounds.
CSCsi74305
GigE promiscuous mode reset.
This issue is seen when removing and re-adding a TLS configuration.
There are no known workarounds.
Open Caveats for Release 12.3(21a)BC1
Table 35 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC1 release.
Resolved Caveats for Release 12.3(21a)BC1
Table 36 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21a)BC1 release.
Table 36 Resolved Caveats for Cisco IOS Release 12.3(21a)BC1
CSCek70834
CMTS Cable Line Card (CLC) can unexpectedly reload due to a dangling pointer reference in SID database of the CMTS on CLC. In particular, it has been seen on a 520 CLC in a ubr10000 CMTS chassis.
No HA or multicast needs to be configured on the CMTS to see this issue.
There are no known workarounds.
CSCsd30267
The Authentication, Authorization, and Accounting (AAA) per user process is holding memory, and the router is running out of memory.
This issue occurs on a Cisco uBR7114E router running Cisco IOS Release 12.3(13a)BC2 with PPP over Ethernet (PPPOE) dialing and dynamic access control lists (ACLs).
There are no known workarounds
CSCsd85587
A vulnerability has been discovered in a third party cryptographic library which is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One (ASN.1) object is parsed. Due to the nature of the vulnerability it may be possible, in some cases, to trigger this vulnerability without a valid certificate or valid application-layer credentials (such as a valid user name or password).
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
The vulnerable cryptographic library is used in the following Cisco products:
Cisco IOS, documented as Cisco bug ID CSCsd85587
Cisco IOS XR, documented as Cisco bug ID CSCsg41084
Cisco PIX and ASA Security Appliances, documented as Cisco bug ID CSCse91999
Cisco Unified CallManager, documented as Cisco bug ID CSCsg44348
Cisco Firewall Service Module (FWSM)
This vulnerability is also being tracked by CERT/CC as VU#754281.
Cisco has made free software available to address this vulnerability for affected customers. There are no workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml.
Note
CSCse05736
A router running RCP can be reloaded by a specific packet.
This issue is seen under the following conditions:
•
•
•
Workaround: Put access lists on the edge of your network blocking RCP packets to prevent spoofed RSH packets. Use another protocol such as SCP. Use VTY ACLs.
CSCsg48884
When Subscriber Account Management Interface Specification (SAMIS) cable metering is configured for streaming every 15 minutes, the Cisco uBR router streams twice within a 15 minutes period.
This issue occurs in Cisco OS Release 12.3(17a)BC2.
There are no known workarounds.
CSCsh11476
The Cisco uBR7100 series router crashes with the following the watchdog timeout message:
%SYS-2-WATCHDOG: Process aborted on watchdog timeout, process = CMTS METERING EXPORT Process.The issue occurs after a Subscriber Account Management Interface Specification (SAMIS) outage. When the SAMIS server is down, the Cisco uBR router is supposed to hold a file in flash and then send one update when the server is back online. However, when the server came back online, the router crashed when reading/writing a file to flash.
There are no known workarounds.
CSCsh30009
A Cisco Router running an IOS version that has contains the bug fix for CSCsg21394 may fail to resolve Canonical Names (CNAME) DNS queries.
Router#ping http://www.google.comTranslating "http://www.google.com"...domain server (x.x.x.x)Translating "http://www.google.com"...domain server (x.x.x.x)Domain: Using source interface FastEthernet4Domain: query for http://www.google.com type 1 to x.x.x.xDOM: dom2cache: hostname is http://www.google.com, RR type=5, class=1, ttl=0, n=8DOM: Answer hostname doesn't match query hostnameReply received emptyDomain: query for http://www.google.com.domain.com type 1 to x.x.x.xReply received no such nameDomain: Using source interface FastEthernet4Domain: query for hThere are no known workarounds.
CSCsh73925
A Cisco CMTS may lose ip connectivity to CM/CPE devices after removing a secondary IP address on a cable or bundle interface.
Removing a secondary ip address causes all ARP entries (associated with primary ip address and remaining secondary ip addresses) on that bundle interface to be deleted. Until the ARP table is rebuilt there could be loss of ip connectivity.
Workaround: Ensure that secondary IP addresses are removed during a maintenance window.
Another potential workaround would be to segment the CMTS into smaller cable interface bundle groups or to use separate subinterfaces so that a lower number of modems and CPE ARP entries are linked to each subinterface.
CSCsh86171
Source verification does not work for packets received on MC28U line cards on routers running 12.3(21)BC image.
If source verification is enabled on the bundle interface including the MC28C line card, using cable source-verify ..., the packets are not source verified.
There are no known workarounds.
CSCsj85065
A Cisco IOS device may crash while processing an SSL packet. This can happen during the termination of an SSL-based session. The offending packet is not malformed and is normally received as part of the packet exchange.
Cisco has released free software updates that address this vulnerability.
Aside from disabling affected services, there are no available workarounds to mitigate an exploit of this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-ssl.shtml.
Open Caveats for Release 12.3(21)BC
Table 37 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21)BC release.
Resolved Caveats for Release 12.3(21)BC
Table 38 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(21)BC release.
Table 38 Resolved Caveats for Cisco IOS Release 12.3(21)BC
CSCed62867
After a CMTS reload, a BAD/WRONG BCM3138 FFT error message is logged.
This issue occurs with Spectrum management configuration on MC28U card.
Workaround: FFT data collection is working after the error is logged, so no manual workaround is required.
CSCej87157
If only DS BW is saturated while there is s still US BW available, e911 calls will be rejected.
Workaround: Stop running applications manually to free up DS BW. and turn off automatic DS BW for preemption to occur.
CSCek43268
A QoS profile being used by a CM is able to be deleted.
There are no known workarounds.
CSCek43887
When src-ip of a cfr is edited, the tunnel stats does reset and retain the stats of the previous flow.
There are no known workarounds.
CSCsb27648
Multiple Qos_reserve Qos_commit are seen on radius packet while intercepting packet in packetcable.
The CMTS needs to be configure for packetcable and an Gate_set needs to be receive.
There are no known workarounds.
CSCsc27292
Integrated Customer Premise Equipment (CPE) inside of certain brands of Cable Modem and Set Top Box units are unable to acquire an IP address via a Cisco uBR CMTS.
The issue tends to occur when cable interface bundling is configured. The issue occurs in 12.3(13a)BC IOS but not in earlier IOS releases.
Workaround: Revert to an earlier release of IOS for the Cisco uBR CMTS or un-configure cable interface bundling.
CSCsc63687
When service flows are generated for multicast traffic through the use of the cable and bundle interface command cable match address n a Cisco uBR series CMTS, the docsQosMIBObjects SNMP objects do not report details of the multicast service flows.
Workaround: Revert to the use of the IOS Command Line Interface to gather statistics on multicast service flows.
CSCsc86355
When CPEs are joining and leaving multicast groups on a bundle interface at a very fast rate, and the show interface bundle x multicast command is issued, it is possible that an alignment error or a bus error reload may occur.
There are no known workarounds.
CSCsd30319
Modems get stuck in the init(o) state following an OIR operation if the replacement card type is not identical to the original card.
This issue is related to virtual interface bundling and only occurs on interfaces that are members of a cable bundle.
Workaround: Reboot the router.
CSCsd39821
The VID data in entPhysicalHardwareRev MIB displays the wrong value if the data field in EEPROM is missing.
This issue will affect the Entity MIB in all software releases if the VID data field is not programmed.
There are no known workarounds.
CSCsd39843
The MIBs entPhysicalSoftwareRev and entPhysicalMfgName for the UBR7200-I/O-2FE/E controller card displays the wrong data.
This issue will affect the Entity MIB for the uBR7200 software releases.
There are no known workarounds.
CSCsd40636
The show ip vrf ? command does not display the WORD option. The show inventory raw ? command does not display options.
There are no known workarounds.
CSCsd59963
The IP ToS/DSCP byte is always set to 0x00 for PacketCable CALEA replicated packets, even when the original packets have a higher value.
There are no known workarounds.
CSCsd80421
The cdxBWQueueTable and cdxBWQueueEntry MIB variables should be able to return information about all upstream bandwidth request queues on a cisco uBR series CMTS. however, only information about the Committed Information Rate (CIR) and the non-existe are shown.
There are no known workarounds.
CSCse06619
When changing a bundle member from one bundle to another, the service class information is not there in show cable dsg tunnel <no> statistics CLI.
There are no known workarounds.
CSCse56676
Some of the traps may be sent to SNMP management stations, even when those traps are not configured to be sent to those stations.
This issue can occur to any trap sent out, even when it is not associated with snmp host.
There are no known workarounds.
CSCse77050
On a cisco uBR series CMTS, the defaults for the cable upstream <us-channel> admission-control <percentage> command have changed from enforcing over subscription, to 100% of the available upstream bandwidth, to not enforcing any over subscription level.
In addition, if the command cable upstream <us-channel> admission-control 100 is configured, the command will not be properly saved and will not be maintained after a CMTS reload.
Workaround: If upstream channel over subscription enforcement for minimum reserved rate services is desired at 100% of upstream bandwidth, then the workaround is to manually configure a slightly different value.
For example:
cable upstream <us-channel> admission-control 99CSCse95886
A duplicate of the following error message is seen:
This service class has not been configured yet.This issue occurs when the "no cable admission-control us-bandwidth service-class <name>" CLE is used when is no service class existing by name <name>.
There are no known workarounds.
CSCsf04754
Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices. The SNMP server is an optional service that is disabled by default. Only SNMPv3 is impacted by these vulnerabilities. Workarounds are available for mitigating the impact of the vulnerabilities described in this document.
The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044 to these vulnerabilities.
Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0960 has been assigned to these vulnerabilities.
This advisory will be posted at http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml
CSCek57932
Cisco uBR10012 series devices automatically enable Simple Network Management Protocol (SNMP) read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. Only Cisco uBR10012 series devices that are configured for linecard redundancy are affected.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20080924-ubr.shtml.
Open Caveats for Release 12.3(17b)BC9
Table 39 lists only severity 1 and 2 caveats and select severity 3 caveats for Cisco IOS Release 12.3(17b)BC9.
Resolved Caveats for Release 12.3(17b)BC9
Table 40 lists only severity 1 and 2 caveats and select severity 3 caveats for Cisco IOS Release 12.3(17b)BC9.
Open Caveats for Release 12.3(17b)BC8
Table 41 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC8 release.
Resolved Caveats for Release 12.3(17b)BC8
Table 42 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC8 release.
Table 42 Resolved Caveats for Cisco OS Release 12.3(17b)BC8
CSCeg62070
Tracebacks or unexpected reloads are seen during a HTTP transactions with long URLs.
The unexpected reload is seen when the length of any token in the URL of the request is excessively long.
Workaround: Disable HTTP server using the no ip http server command.
CSCek76143
DOCSIS dynamic state queue can be corrupted and cause a CMTS RP or LC unexpected reload in cmts_get_dyn_transc_state. This is a suspected cause of unexpected reloads in CSCek70406.
This issue occurs with dynamic service flows created in packetcable or non-packetcable environment.
There are no known workarounds.
CSCsb79076
%SYS-3-TIMERNEG errors and tracebacks are observed while making MGCP RSVP calls on a analog (RGW) setups.
This is observed in 12.4(3.9)T1 IOS version.
There are no known workarounds.
CSCsd59963
The IP ToS/DSCP byte is always set to 0x00 for PacketCable CALEA replicated packets, even when original packets have a higher value.
There are no known workarounds.
CSCse56501
A device running Cisco IOS software that has Internet Protocol version 6 (IPv6) enabled may be subject to a denial of service (DoS) attack. For the device to be affected by this vulnerability the device also has to have certain Internet Protocol version 4 (IPv4) User Datagram Protocol (UDP) services enabled. To exploit this vulnerability an offending IPv6 packet must be targeted to the device. Packets that are routed throughout the router can not trigger this vulnerability. Successful exploitation will prevent the interface from receiving any additional traffic. The only exception is Resource Reservation Protocol (RSVP) service, which if exploited, will cause the device to crash. Only the interface on which the vulnerability was exploited will be affected.
Cisco is providing fixed software to address this issue. There are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml.
CSCsg40567
Malformed SSL packets may cause a router to leak multiple memory blocks.
This issue is observed on a Cisco router that has the ip http secure server command enabled.
Workaround: Disable the ip http secure server command.
CSCsi01470
A vulnerability in the Cisco implementation of Multicast Virtual Private Network (MVPN) is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching (MPLS) based Virtual Private Networks (VPN) by sending specially crafted messages.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml.
CSCsi01961
A slow leak may occur on a router in the CMTS MAC Parser process.
There are no known workarounds.
CSCsi32107
During normal operations, a bus error forced reload occurs due to SNMP activity on the router.
There are no known workarounds.
CSCsi33899
The CMTS unexpected reloads when snmp set the cdxCmtsCmQosProfile.
This issue occurs when setting the cdxCmtsCmQosProfile with boundary value 16383.
Workaround: Do not set the cdxCmtsCmQosProfile with value bigger than 255.
CSCsi41855
The router unexpected reloads when 28U card OIR/test reloads while polling ccsFlapEntry.
This issue occurs when the OIR/LC unexpected reloads.
There are no known workarounds.
CSCek57932
Cisco uBR10012 series devices automatically enable Simple Network Management Protocol (SNMP) read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. Only Cisco uBR10012 series devices that are configured for linecard redundancy are affected.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20080924-ubr.shtml.
Open Caveats for Release 12.3(17b)BC7
Table 43 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC7 release.
Resolved Caveats for Release 12.3(17b)BC7
Table 44 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC7 release.
Table 44 Resolved Caveats for Cisco OS Release 12.3(17b)BC7
CSCsd81407
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
•
•
•
•
•
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
Open Caveats for Release 12.3(17b)BC6
Table 45 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC6 release.
Resolved Caveats for Release 12.3(17b)BC6
Table 46 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC6 release.
Table 46 Resolved Caveats for Cisco OS Release 12.3(17b)BC6
CSCek70834
CMTS Cable Line Card (CLC) can unexpectedly reload due to a dangling pointer reference in SID database of the CMTS on CLC. In particular, it has been seen on a 520 CLC in a ubr10000 CMTS chassis.
No HA or multicast needs to be configured on the CMTS to see this issue.
There are no known workarounds.
CSCsd30267
The Authentication, Authorization, and Accounting (AAA) per user process is holding memory, and the router is running out of memory.
This issue occurs on a Cisco uBR7114E router running Cisco IOS Release 12.3(13a)BC2 with PPP over Ethernet (PPPOE) dialing and dynamic access control lists (ACLs).
There are no known workarounds.
CSCsd85587
A vulnerability has been discovered in a third party cryptographic library which is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One (ASN.1) object is parsed. Due to the nature of the vulnerability it may be possible, in some cases, to trigger this vulnerability without a valid certificate or valid application-layer credentials (such as a valid user name or password).
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
The vulnerable cryptographic library is used in the following Cisco products:
Cisco IOS, documented as Cisco bug ID CSCsd85587
Cisco IOS XR, documented as Cisco bug ID CSCsg41084
Cisco PIX and ASA Security Appliances, documented as Cisco bug ID CSCse91999
Cisco Unified CallManager, documented as Cisco bug ID CSCsg44348
Cisco Firewall Service Module (FWSM)
This vulnerability is also being tracked by CERT/CC as VU#754281.
Cisco has made free software available to address this vulnerability for affected customers. There are no workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml.
Note
CSCse04560
A tftp client trying to transfer a file from a Cisco IOS device configured as a tftp server and which is denied by an ACL receives a different result depending if the file is being offered for download or not. This may allow a third party to enumerate which files are available for download.
The tftp-server command is configured on the device and an ACL restricting access to the file in question has been applied as in this example:
tftp-server flash: filename1 access-list-numberaccess-list access-list-numberpermit 192.168.1.0 0.0.0.255access-list access-list-numberdeny anyWorkaround: The following workarounds can be applied:
1. Interface ACL
Configure and attach an access list to every router interface active and configured for IP packet processing. Once the tftp server in Cisco IOS is enabled and listening by default on all interfaces enabled for IP processing, the access list would need to deny traffic to each and every IP address assigned to any active router interface.
2. Control Plane Policing
Configure and apply a CoPP policy.
Note: CoPP is only available on certain platforms and Cisco IOS releases. Additional information on the configuration and use of the CoPP feature can be found at the following URL:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_white_paper09186a0080211f39.shtml
3. Infrastructure ACLs (iACL)
Although often difficult to block traffic transiting your network, identifying traffic which should never be allowed to target your infrastructure devices and block that traffic at the border of your network is possible. Infrastructure ACLs are considered a network security best practice and should be considered as a long-term addition to good network security as well as a workaround for this specific vulnerability. The white paper entitled "Protecting Your Core: Infrastructure Protection Access Control Lists" presents guidelines and recommended deployment techniques for iACLs:
http://www.cisco.com/warp/public/707/iacl.html
4. Configuring Receive Access Lists (rACLs)
For distributed platforms, rACLs may be an option starting in Cisco IOS Release 12.0(21)S2 for the Cisco 12000 series GSR and Cisco IOS Release 12.0(24)S for the Cisco 7500 series. The receive access lists protect the device from harmful traffic before the traffic can impact the route processor. Receive path ACLs are considered a network security best practice, and should be considered as a long-term addition to good network security, as well as a workaround for this specific vulnerability. The CPU load is distributed to the line card processors and helps mitigate load on the main route processor. The white paper entitled "GSR: Receive Access Control Lists" will help identify and allow legitimate traffic to your device and deny all unwanted packets:
http://www.cisco.com/warp/public/707/racl.html
CSCse05736
A router running RCP can be reloaded by a specific packet.
This issue is seen under the following conditions:
•
•
•
Workaround: Put access lists on the edge of your network blocking RCP packets to prevent spoofed RSH packets. Use another protocol such as SCP. Use VTY ACLs.
CSCse56676
Some traps are sent to Simple Network Management Protocol (SNMP) management stations even when those traps are not configured to be sent to those stations.
There are no known workarounds.
CSCsg48884
When Subscriber Account Management Interface Specification (SAMIS) cable metering is configured for streaming every 15 minutes, the Cisco uBR router streams twice within a 15 minutes period.
This issue occurs in Cisco OS Release 12.3(17a)BC2.
There are no known workarounds.
CSCsh11476
The Cisco uBR7100 series router crashes with the following the watchdog timeout message:
%SYS-2-WATCHDOG: Process aborted on watchdog timeout, process = CMTS METERING EXPORT Process.The issue occurs after a Subscriber Account Management Interface Specification (SAMIS) outage. When the SAMIS server is down, the Cisco uBR router is supposed to hold a file in flash and then send one update when the server is back online. However, when the server came back online, the router crashed when reading/writing a file to flash.
There are no known workarounds.
CSCsh73925
A Cisco CMTS may lose ip connectivity to CM/CPE devices after removing a secondary IP address on a cable or bundle interface.
Removing a secondary ip address causes all ARP entries (associated with primary ip address and remaining secondary ip addresses) on that bundle interface to be deleted. Until the ARP table is rebuilt there could be loss of ip connectivity.
Workaround: Ensure that secondary IP addresses are removed during a maintenance window.
Another potential workaround would be to segment the CMTS into smaller cable interface bundle groups or to use separate subinterfaces so that a lower number of modems and CPE ARP entries are linked to each subinterface.
CSCsd95616
Two crafted Protocol Independent Multicast (PIM) packet vulnerabilities exist in Cisco IOS software that may lead to a denial of service (DoS) condition. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-multicast.shtml.
CSCsh29217
Cisco 10000, uBR10012 and uBR7200 series devices use a User Datagram Protocol (UDP) based Inter-Process Communication (IPC) channel that is externally reachable. An attacker could exploit this vulnerability to cause a denial of service (DoS) condition on affected devices. No other platforms are affected.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-ipc.shtml.
Open Caveats for Release 12.3(17b)BC5
Table 47 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC5 release.
Resolved Caveats for Release 12.3(17b)BC5
Table 48 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC5 release.
Table 48 Resolved Caveats for Cisco OS Release 12.3(17b)BC5
CSCeh09964
A Performance Routing Engine (PRE) crashes after the following error message:
OVERLAPIP_CMThere are no known workarounds.
CSCsb12598
Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
Processing ClientHello messages, documented as Cisco bug ID CSCsb12598
Processing ChangeCipherSpec messages, documented as Cisco bug ID CSCsb40304
Processing Finished messages, documented as Cisco bug ID CSCsd92405
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml.
CSCsb40304
Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
Processing ClientHello messages, documented as Cisco bug ID CSCsb12598
Processing ChangeCipherSpec messages, documented as Cisco bug ID CSCsb40304
Processing Finished messages, documented as Cisco bug ID CSCsd92405
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml.
CSCsd92405
Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
Processing ClientHello messages, documented as Cisco bug ID CSCsb12598
Processing ChangeCipherSpec messages, documented as Cisco bug ID CSCsb40304
Processing Finished messages, documented as Cisco bug ID CSCsd92405
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml.
CSCek66392
A Performance Routing Engine (PRE) crashes after the following error message:
OVERLAPIP_CMThere are no known workarounds.
CSCsc53225
If the connection between a PacketCable Call Management Server (CMS) and the cable modem termination system (CMTS) is not completely established, and the CMS does not correctly terminate the session by sending a Transmission Control Protocol FIN packet, the connection will still show up as a COPS server in the show cops server command output. This server entry is not removed unless the clear tcp tcb command is entered to remove the TCP connection.
There are no known workarounds.
CSCsc72722
Transmission Control Protocol (TCP) connections that are opened through a Cisco IOS Firewall (Context-Based Access Control (CBAC)) do not timeout.
This issue occurs when the Cisco IOS Firewall (CBAC) is enabled because the TCP idle timer for a session can be reset even by TCP packets that fail TCP inspection and are subsequently dropped. This situation can lead to the TCP session not timing out.
There are no known workarounds.
CSCsc95014
A Cisco router makes alignment corrections as depicted in the show align EXEC command output.
This issue occurs on a Cisco uBR7100 router running Cisco IOS Release 12.2(15)BC2i.
There are no known workarounds
CSCsd92405
A router crashes when receiving multiple malformed Transparent LAN Service (TLS) and/or Secure Socket Layer (SSL) 3 finished messages. A valid username and password are not required for the crash to occur.
This issue occurs when a router has an Hypertext Transport Protocol (HTTP) secure server enabled and has an open, unprotected HTTP port.
Workaround: There are no known workarounds. You can minimize the chances of the condition occurring by permitting only legitimate hosts to access HTTP on the router.
CSCse78507
Packets are delayed at the cable interface if rate-limiting is used.
Workaround: Remove the cable downstream rate-limit token-bucket shaping max-delay command.
CSCsf07847
Specifically crafted Cisco Discovery Protocol (CDP) packets can cause a router to allocate and keep extra memory. Exploitation of this behavior by sending multiple specifically crafted CDP packets could cause memory allocation problems on the router. Since CDP is a layer-2 protocol, this issue can only be triggered by systems that are residing on the same network segment.
This issue can occur when the CDP packet header length is lesser than predefined header length(4 bytes).
Workaround: Disable CDP on interfaces where it is not necessary.
CSCsg16908
Multiple vulnerabilities exist in the Cisco IOS File Transfer Protocol (FTP) Server feature. These vulnerabilities include Denial of Service, improper verification of user credentials and the ability to read or write any file in the device's file system, including the device's saved configuration, which may include passwords or other sensitive information.
The Cisco IOS FTP Server is an optional service that is disabled by default. Devices that are not specifically configured to enable the Cisco IOS FTP Server service are unaffected by these vulnerabilities.
This vulnerability does not apply to the Cisco IOS FTP Client feature.
This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20070509-iosftp.shtml.
CSCsg17896
On a Cisco uBR7100 series cable modem termination system (CMTS), when downstream load balancing between the MC28U and legacy MC16C/MC28C line cards occurs, load balancing can take a very long time to successfully move modems between the two types of interfaces.
There are no known workarounds.
CSCsg21480
A Cisco uBR7100 series router running Cisco IOS Release 12.3(9a)BC6 crashes due to a divide-by-zero exception. In addition, some spurious access is recorded.
This issue occurs on a router configured for the Simple Network Management Protocol (SNMP).
Workaround: Turn off the SNMP server.
CSCsg58428
If Baseline Privacy Interface (BPI) is enabled and the test cable dcc command is issued with init technique 1-4, the cable modem (CM) cannot be moved in the same upstream. The CM still shows online(pt) on the cable modem termination system (CMTS), but the CM is not pingable at all.
Note that if BPI is disabled, or if init technique 0 is used, the CM remains pingable. The problem also does not occur if the CM is moved to another upstream (US) other than the current one.
Workaround: Disable BPI, use init tech 0, or move the CM to another US than the current one.
CSCsg67542
The new lb_us_across_ds policy uses the DS LB group method to compare the upstream (US) load across the downstream (DS) and pick the target DS. The criteria to select the target DS and US are different. The US LB group method should be used to search for a target interface.
CSCsg70355
Starting in calendar year 2007, daylight savings summer-time rules may cause Cisco IOS to generate timestamps (such as in syslog messages) that are off by one hour.
The issue occurs because the Cisco IOS clock summer-time zone recurring configuration command uses the United States standards for daylight savings time rules by default. The Energy Policy Act of 2005 (H.R.6.ENR), Section 110 changes the start date from the first Sunday of April to the second Sunday of March. It changes the end date from the last Sunday of October to the first Sunday of November.
Workaround: Use the clock summer- time configuration command to manually configure the proper start date and end date for daylight savings time.
Note that using Network Time Protocol (NTP) is not a workaround to this problem. NTP does not carry any information about time zones or summertime.
CSCsg70555
When frequency stacking and pre-equalization are enabled on the stack upstreams, certain mod profile settings can cause modems to get stuck in the init() state.
This issue occurs because the stack upstreams have different settings, especially different mod profiles, and leads to incorrect programming of the PHY chip device.
Workaround: Use the same modulation profile on the frequency stacked upstreams.
CSCsg80513
Traceback occurs on the changing bundle associated with the cable interface.
There are no known workarounds.
CSCsg83603
The downstream frequency on internal upconverter based line cards cannot be set to a fine enough granularity for Harmonically Related Carrier (HRC)/ Incrementally Related Carrier (IRC) channel plans.
All cable modem termination system (CMTS) line cards with internal upconverters (MC520, MC28u, MC16u) must support HRC channel plans. These plans require the ability to set offset frequencies to a resolution of at least 25 kHz or better. We need to restore the 12.5 kHz resolution on our internal line cards to allow customers who have HRC channel plans to bring cable modems online.
Workaround: Select a frequency as close to the HRC channel as possible and most modems should lock. If the modem does not lock, then use an IF based line card to an external upconverter that supports HRC/IRC channel frequencies.
CSCsg91843
The cable modem is not load balanced on the last upstream.
This issue occurs because the downstream (DS) load balancing is following a different card (policy us-groups-across-ds).
Workaround: Enter the test cable DCC command to move the modem
Open Caveats for Release 12.3(17b)BC4
Table 49 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC4 release.
Resolved Caveats for Release 12.3(17b)BC4
Table 50 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC4 release.
Open Caveats for Release 12.3(17b)BC3
Table 51 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC3 release.
Resolved Caveats for Release 12.3(17b)BC3
Table 52 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17b)BC3 release.
Table 52 Resolved Caveats for Cisco IOS Release 12.3(17b)BC3
CSCeb54486
A router running Cisco IOS Release 12.2(11)BC3, PRE A crashes due to a bus error, but the active Performance Routing Engine (PRE) doesn't switchover to PRE B.
This issue occurs when the show snmp sessions command is executed.
Workaround: Do not execute the show snmp sessions command.
CSCee27341
The router experiences a software-forced crash (memory corruption in snmp) after executing the following command:
no snmp-server host xx.xx.xx.xx publicThere are no known workarounds other than not using the no snmp-server host command.
CSCei93982
The router crashes unexpectedly because of Network Address Translation (NAT) source and destination port handling.
This issue occurs when NAT is enabled and an application uses two well-known ports: one for the source, and the other for destination. The outgoing translation is created, but on the return trip, because NAT is using the previous source port as the destination, NAT may use the incorrect algorithm. For example, if a Point-to-Point Tunneling Protocol (PPTP) session is initiated to the well-known port 1723 from source port 21 for the File Transfer Protocol (FTP), then the outgoing packet will create an FTP translation (because source information is examined in the outgoing direction). When the packet is returned, the source information is examined again to determine its packet type. In this case, because the source port is 1723, NAT assumes this is a PPTP packet and attempts to perform PPTP NAT operations on the data structure that NAT built for an FTP packet. This condition can lead to a router crash.
There are no known workarounds.
CSCek26492
Symptoms: A router may crash if it receives a packet with a specific crafted IP option as detailed in Cisco Security Advisory: Crafted IP Option Vulnerability:
http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml
Conditions: This DDTS resolves a symptom of CSCec71950. Cisco IOS with this specific DDTS are not at risk of crash if CSCec71950 has been resolved in the software.
Workaround: Cisco IOS versions with the fix for CSCec71950 are not at risk for this issue and no workaround is required. If CSCec71950 is not resolved, see the following Cisco Security Advisory: Crafted IP Option Vulnerability for workaround information:
http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml
CSCek41538
Traceback occurs at the cable modem termination system (CMTS) when Network Address Translation (NAT) is configured and DOCSIS Set-Top Gateway (DSG) traffic is sent in upstream (US) and downstream (DS) directions.
There are no known workarounds.
CSCsb24406
With Cisco IOS Release 12.3(13)BC, a MAC address-based cable monitor does not show packets from service identifiers (SIDs) other than the primary.
This functionality no longer works on legacy line cards.
There are no known workarounds.
CSCsc19010
A Gate-Set is sent to the cable modem termination system (CMTS), but no response is received.
This issue occurs when modifying a Gate.
There are no known workarounds.
CSCsc36824
A Cisco router reloads unexpectedly due to a bus error exception. The crashinfo shows a translational bridging (TLB) (load or instruction fetch) exception.
This issue occurs with Network Address Translation (NAT) H.323 slow start calls.
Workaround: The unexpected reload does not occur when using H.323 FastStart.
CSCsc60249
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
•
•
•
•
•
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsc69945
Cable modems that are connected to an MC28U style line card on a Cisco uBR7100 cable modem termination system (CMTS) become stuck in the init(d) state after a line card recovers from an unexpected reset.
The state appears in the show cable modem command. In addition, an error message similar to the following appears as the line card comes back online:
%PARSER-4-BADCFG: Unexpected end of configuration file.The issue occurs only when multicast quality of service (QoS) service flows, as configured by the cable interface cable match address command, have been activated.
Workaround: Manually shut/no shut any affected cable interfaces.
CSCsc78813
While using Network Address Translation (NAT) in an overlapping network configuration, the IP address inside a Domain Name System (DNS) reply payload from the name server is not translated at the NAT router.
This issue occurs on a Cisco router that runs Cisco IOS Release 12.3(18) and that has the nat outside source command enabled. The condition can also occur in Cisco IOS Release 12.4 or Cisco IOS Release 12.4T.
There are no known workarounds.
CSCsd10009
When the debug cable privacy command is enabled, the Cisco uBR series cable modem termination system (CMTS) generates an error message similar to the following, followed by a traceback:
SLOT 5/0: Jan 18 22:12:33.320: %SCHED-2-EDISMSCRIT: Critical/high priority process CMTS MAC Parser may not dismiss. -Process= "CMTS MAC Parser", ipl= 0, pid= 43This issue stops Baseline Privacy Interface Plus (BPI+) enabled cable modems from negotiating BPI+ encryption with the CMTS.
This issue occurs when debug is enabled and a cable modem running BPI+ tries to come online.
Workaround: Disable the debug with the no debug cable privacy command. Use an alternative debug command that produces similar, but more verbose output, the debug cable bpiatp command.
CSCsd23426
Cable modems using non-real time polling service flows with a 300ms polling interval are not allowed to register with the cable modem termination system (CMTS).
Workaround: Use a polling interval that is not 300ms; for example, 250ms has been tested and works.
CSCsd29733
Some downstream service flows experience rate limit delayed packets. These flows should not be delaying packets.
This issue usually occurs with voice calls using codex that send a higher traffic rate of around 100pps. Downstream calls for these flows may see rate limit delayed packets and rate limit dropped packets. In some cases, this degrades voice quality.
There are no known workarounds.
CSCsd58381
Processing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing header which is used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS.
Cisco has made free software available to address this vulnerability for affected customers.
There are workarounds available to mitigate the effects of the vulnerability. The workaround depends on if Mobile IPv6 is used and what version on Cisco IOS is being currently used.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml
CSCsd67935
When a Dynamic Host Configuration Protocol (DHCP) BOOTREQUEST is received from customer premises equipment (CPE) that has a PPP over Ethernet (PPPoE) session open with the Cisco uBR router, the PPPoE session will be terminated once the reply is GLEANed.
Workaround: Perform the following steps:
1. Configure a static IP address on the CPE.
2. Prevent the DHCP BOOTREQUEST at the CPE.
3. If DHCP scripting is possible, prevent the reply to the CPE from the server.
CSCsd85177
Randomly, the signal-to-noise ratio (SNR) cosmetically decreases -10 dB with MC-28u and 16u/x cards.
Workaround: Turn off ingress-noise cancellation, and then immediately turn it back on again. SNR returns to normal levels.
CSCsd92344
A Cisco uBR series cable modem termination system (CMTS) generates error messages similar to the following:
%SYS-3-CPUHOG: Task is running for (2008)msecs, more than (2000)msecs (699/198),process = DHCPD Receive.This message is followed by another error message similar to the following and a software-forced reload:
%UBR7100-4-FAILED_DS_SID_LOOKUP: Failed to find host in DS on int with SID # 4271, IP = 10.99.82.19, MAC = 0004.1af1.c34aThis issue occurs when the cable or virtual bundle interface configuration cable source-verify dhcp command is configured, and is triggered by end hosts that have duplicate or spoofed Ethernet MAC addresses.
Workaround: Remove the dhcp portion of the cable source-verify dhcp command, and use the cable source-verify command only.
CSCse05642
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
•
•
•
•
•
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCse05680
Cable modem termination system (CMTS) read-only quality of service (QoS) profiles are deleted.
This issue occurs in platforms without distributed line cards.
There are no known workarounds.
CSCse30830
After a Simple Network Management Protocol (SNMP) request on the cable modem termination system (CMTS), there is steady packet loss on the upstream path (form the modem to the voice gateway.) Even though the SNMP requests are stopped and SNMP lines are removed (using config mode) from the running configuration, the packet loss status remains until a reload of CMTS occurs.
Workaround: Perform a CMTS reload.
CSCse37931
The cable source verify leasequery-filter does not work with virtual bundling.
There are no known workarounds.
CSCse68138
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
•
•
•
•
•
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCse70718
On a Cisco uBR series cable modem termination system (CMTS), cable modems on an MC28U series cable line card are unable to progress past the init(d) state on certain upstream ports.
The issue occurs after an MC28U cable line card has undergone online insertion and removal (OIR), or after the MC28U line card is unexpectedly reset. The issue occurs only when upstream connector sharing is configured. Cable modems on the numerically lowest upstream channel to share a connector can be stuck in the init(d) state.
Workaround: Reconfigure the connector sharing configuration command on affected upstreams after the line card OIR.
CSCsf04754
Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices. The SNMP server is an optional service that is disabled by default. Only SNMPv3 is impacted by these vulnerabilities. Workarounds are available for mitigating the impact of the vulnerabilities described in this document.
The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044 to these vulnerabilities.
Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0960 has been assigned to these vulnerabilities.
This advisory will be posted at http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml
CSCsf18236
With frequency stacking configured (upstreams sharing the same connector), modems fail to register on the adjacent frequency-stacking upstream. If the load-balance feature is also configured, modems have symptoms of being stuck in the init(rc) state.
Workaround:
1. Unconfigure frequency stacking, and set the connector to its default setting of:
no cable upstream 0 connector 0 shared no cable upstream 1 connector 0 shared cable upstream 0 connector 0 cable upstream 1 connector 12. Restore the frequency configuration to:
cable upstream 0 connector 0 shared cable upstream 1 connector 0 sharedCSCsf28321
On a Cisco uBR series cable modem termination system (CMTS), when both upstream and downstream cable modem load balancing is configured, modems can be prevented from being load balanced from one downstream to another.
The issue occurs when downstreams within a common downstream load balancing group contain many upstream load balancing groups.
Workaround: The current downstream load balancing implementation operates as follows:
A modem will only be load balanced from a source downstream and upstream to a target downstream if the following conditions are met:
•
•
•
CSCsg00622
Even though the fan tray is pulled out from the chassis, the output displays:
Fan x is believed to be workingThis message displays regardless of the fan tray condition.
There are no known workarounds.
Open Caveats for Release 12.3(17a)BC2
Table 53 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17a)BC2 release.
Resolved Caveats for Release 12.3(17a)BC2
Table 54 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17a)BC2 release.
Table 54 Resolved Caveats for Cisco IOS Release 12.3(17a)BC2
CSCek37177
The Cisco IOS Transmission Control Protocol (TCP) listener in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable memory leak that may lead to a denial of service condition.
This vulnerability only applies to traffic destined to the Cisco IOS device. Traffic transiting the Cisco IOS device will not trigger this vulnerability.
Cisco has made free software available to address this vulnerability for affected customers.
This issue is documented as Cisco bug ID CSCek37177.
There are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-tcp.shtml
CSCek48821
Modems do not come online with the MC28U card.
There are no known workarounds.
CSCsc27292
Integrated customer premises equipment (CPE) inside of certain brands of cable modems and set-top box units are unable to acquire an IP address using the Cisco uBR cable modem termination system (CMTS).
The issue occurs when cable interface bundling is configured on Cisco IOS Release 12.3(13a)BC, but not in earlier Cisco IOS releases.
Workaround: Revert to an earlier release of Cisco IOS for the Cisco uBR CMTS, or un-configure cable interface bundling.
CSCsd30319
Modems get stuck in the init(o) state following an online insertion and removal (OIR) operation if the replacement card type is not identical to the original card.
This issue is related to virtual interface bundling, and only occurs on interfaces that are members of a cable bundle.
Workaround: Reboot the router.
CSCsd41688
The MC28U and MC16U line cards experience an Inter-Process Communication online insertion and removal (IPCOIR) timeout and reload without writing a crashinfo file in bootflash. An %IPCOIR-3-TIMEOUT message is displayed on the Network Processing Engine (NPE) console and the line card is reloaded approximately 5 minutes later.
To check for the presence of a crashinfo file connect to the line card, enter the if-con command, and then enter the show bootflash all command. If the line card is experiencing this problem, the command does not list a crashinfo file with a timestamp corresponding to the reload.
This problem does not normally reoccur on the same card.
There are no known workarounds.
CSCse22002
The billing record format has been changed despite the IP Detail Record (IPDR) specification not supporting that new format as of May 2006.
The image tries to complies with the latest 2.0 spec based on OSSIv2.0-N-04.0173-7 ECR, http://www.cablelabs.com/cablemodem/downloads/specs/CM-SP-OSSIv2.0-I09-050812.pdf, which states: " This Element is defined as compliant with [IPDR/BSR] specification but [IPDR/SP] still does not define those types, therefore CPE Info MUST NOT be supported until [IPDR/SP] defines Array and Structs types."
Workaround: Customers must support the new schema, DOCSIS-3.5.1-A.0.xsd.
Open Caveats for Release 12.3(17a)BC1
Table 55 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17a)BC1 release.
Resolved Caveats for Release 12.3(17a)BC1
Table 56 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17a)BC1 release.
Open Caveats for Release 12.3(17a)BC
Table 57 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17a)BC release.
Resolved Caveats for Release 12.3(17a)BC
Table 58 lists only severity 1 and 2 caveats and select severity 3 caveats for the Cisco IOS 12.3(17a)BC release.
Table 58 Resolved Caveats for Cisco IOS Release 12.3(17a)BC
CSCef60396
When a file is copied via the Trivial File Transfer Protocol (TFTP) on a secondary Route Processor (RP) while a switchover occurs that causes the secondary RP to become the primary RP, the new primary RP (that is, the RP that was the secondary RP before the switchover) unexpectedly reloads when it resumes copying the file.
This issue occurs on a Cisco uBR7100 series router that has two RPs that function in a redundant configuration.
Workaround: Do not perform any TFTP copies from the console of the secondary RP.
CSCef60659
A document that describes how the Internet Control Message Protocol (ICMP) could be used to perform a number of Denial of Service (DoS) attacks against the Transmission Control Protocol (TCP) has been made publicly available. This document has been published through the Internet Engineering Task Force (IETF) Internet Draft process, and is entitled "ICMP Attacks Against TCP" (draft-gont-tcpm-icmp-attacks-03.txt).
These attacks, which only affect sessions terminating or originating on a device itself, can be of three types:
1.
2.
3.
Successful attacks may cause connection resets or reduction of throughput in existing connections, depending on the attack type.
Multiple Cisco products are affected by the attacks described in this Internet draft.
Cisco has made free software available to address these vulnerabilities. In some cases there are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.shtml
The disclosure of these vulnerabilities is being coordinated by the National Infrastructure Security Coordination Centre (NISCC), based in the United Kingdom. NISCC is working with multiple vendors whose products are potentially affected. Its posting can be found at
http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.pdf
CSCef90168
When using Transparent LAN Service (TLS) in a non-Baseline Privacy Interface (BPI) environment, traffic flows between different VPNs.
Workaround One: Use the feature on BPI-enabled modems only.
Workaround Two: Isolate the remote networks with a gateway/firewall router.
CSCef96146
Frequent log messages, reporting a problem with one of the fans, are generated:
%ENVM-3-BLOWER: Fan 1 may have failedThe fan appears to be working correctly with no cooling problem.
This issue occurs on Cisco uBR7100 routers running Cisco IOS Release 12.2(15)BC2, such as 2a or 2b.
There are no known workarounds.
CSCeg74394
The primary and backup Fast Ethernet (FE) or Gigabit Ethernet (GE) interfaces go into admin shutdown after a reload.
While the router is coming backup after a reload, the console displays Ethernets coming up and then going down, followed by a "shutdown" notice under the configuration for both interfaces. In addition, one of the Ethernet interfaces loses its configured IP address and "no ip address" appears in the interface configuration.
This issue occurs only if a higher number FE or GE interface, such as FE0/3 or GE0/3, is configured as primary while a lower number interface, such as FE 0/2 or GE0/2, is configured as backup.
This issue does not occur when the situation is reversed: when a lower number Ethernet interface is configured as primary, and a higher number Ethernet interface is configured as backup.
There are no known workarounds.
CSCeh03165
A Cisco uBR router experiences an unexpected reload when the cable arp debug command, followed by a clear arp command, is executed, or when only the clear arp command is executed.
There are no known workarounds.
CSCeh04755
When you enter the reload command for a router, the router unexpectedly enters ROMmon mode and generates the following error message:
%SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command. monitor: command "boot" aborted due to user interrupt rommon 1 >Workaround: Enter the confreg 0x2002 command.
CSCeh13489
A router resets its Border Gateway Protocol (BGP) session.
This issue occurs when a Cisco router that peers with other routers receives an Autonomous System (AS) path with a length that is equal to or greater than 255.
Workaround: Configure the bgp maxas limit command so that the maximum length of the AS path is a value below 255. When the router receives an update with an excessive AS path value, the prefix is rejected and an event is recorded in the log.
CSCeh89244
The cable modem termination system (CMTS) does not remove the quality of service (QoS) profiles created by cable modems (CMs), even if they are not used by any CM on the system.
There are no known workarounds.
CSCei25308
The broadcast address 01e0.2f00.0001 no longer captures Upstream Channel Descriptors (UCDs) or MAP messages when using the cable monitor on the MC16C card.
There are no known workarounds.
CSCei25374
Cable modems being load balanced between cable line cards take a long time to come online. Modems are stuck in the "pending" state. This state appears in the output of the show cable load-balance pending command.
Affected modems have duplicate entries in the pending table and are being moved back and forth between different line cards.
This issue occurs when load balancing is configured between Cisco uBR-MC28U line cards and a cable modem is directed by a line card to move to a second line card. However, by the time the modem is moved to the second line card, the second line card has enough modems online and directs the modem to move back, or to yet another line card.
Workaround: Configure a large minimum-threshold for load balancing with the cable load-balance group group-number threshold load minimum minimum-threshold command.
To make the cable modems stuck in the pending state come online, execute the clear cable load-balance state command.
CSCei25867
If a cable monitor command is configured on a legacy cable line card in a Cisco uBR7100 chassis and the command involves ACL, the command disappears after a cable modem termination system (CMTS) reload.
This issue does not occur with an MC28U or MC16U card in the same CMTS chassis.
There are no known workarounds.
CSCei29698
Modems mapped to a dot1q Transparent LAN Service (TLS) tunnel do not come online after a reset
This issue occurs if the cable modem (CM) is mapped to a dot1q TLS tunnel and is then reset.
Workaround: Enter the clear cable modem mac d command from the cable modem termination system (CMTS).
CSCei30261
The cable modem termination system (CMTS) wrongly sends the payload header suppression (PHS) error set in its response when there are no PHS rule errors.
There are no known workarounds.
CSCei32125
The cable monitor command is not configured on the MC28U CLC.
This issue occurs when a cable monitor command that contains no space between the output interface name and the slot/sublsot is sent from the NPE to the MC28U; the MC28U CLC rejects the command. If there is space between the interface name and its slot/subslot, the command is accepted by the CLC.
For example:
"cable monitor interface gi0/2 ..." fails, and "cable monitor interface gi 0/2 ..." passes.
Workaround: When entering a cable monitor command, enter a space between the output interface name and the slot/subslot of the command.
CSCei32146
The cable clock card does not show up in entityMIB.
There are no known workarounds.
CSCei36689
The boot images for the Cisco uBR7100 routers do not build for pre-CCO of Cisco IOS Release 12.3(13)BC after the commit of CSCei25867 to the branch.
There are no known workarounds.
CSCei37717
The service class index 255 cannot be used with the cable match command; other indices do work.
There are no known workarounds.
CSCei45607
The service-policy command is configurable on cable interfaces, which suggests to customers that Modular QoS (MQC) is supported, but MQC is currently not supported on Cable interfaces
There are no known workarounds.
CSCei49132
Traceback occurs on the Network Processing Engine (NPE) in a Cisco uBR7100 series router when the cable modem termination system (CMTS) reloads, and the MC28U card is up and running.
This issue occurs when the CMON:ACL is configured on the CMTS.
There are no known workarounds.
CSCei51209
The cable modem termination system (CMTS) unexpectedly reloads.
This issue occurs when unconfiguring Transparent LAN Service (TLS) after an online insertion and removal (OIR) of the WAN interface.
Workaround: Ensure that the WAN interface comes up after OIR, then remove the TLS configuration.
CSCei51407
Multicast traffic fails to flow from the aggregator router to the cable modem termination system (CMTS) through the Transparent LAN Service (TLS) tunnel.
There are no known workarounds.
CSCei51424
While polling certain objects in the docsIfMIB, IOS locks out interrupts for an unusually long period of time.
This issue occurs because of the polled reading of the device across a slow data bus.
Workaround: Configure the cable modem termination system (CMTS) to prohibit Simple Network Management Protocol (SNMP) reads of this particular object.
Example:
snmp-server view noarp 1.3.6.1.2.1.10.127.1.1.1.1 excluded snmp-server view noarp iso include snmp-server community "public" view noarp roCSCei61732
Cisco IOS may permit arbitrary code execution after exploitation of a heap-based buffer overflow vulnerability. Cisco has included additional integrity checks in its software, as further described below, that are intended to reduce the likelihood of arbitrary code execution.
Cisco has made free software available that includes the additional integrity checks for affected customers.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml.
CSCei68746
Motorola cable modems (CMs) have two Organizational Unique Identifiers (OUIs). One OUI is properly mapped to the vendor "Motorola" in the show cable modem vendor display. For the other OUI, the "vendor" field shows the OUI, which means the software does not know the identity of the vendor.
This issue occurs on newer Motorola CMs, which have the new OUI in use.
Workaround: Use the cable modem vendor oui vendor configuration command.
For example:
Router# show run | inc vendor cable modem vendor 00.08.0E SB4220 cable modem vendor 00.06.28 CVA122 cable modem vendor 00.30.10 uBR900CSCei69932
PS does not get a gate-delete-ack from the cable modem termination system (CMTS) for a PacketCable Multimedia (PCMM) call.
This issue occurs when a different PS, other than the one used at gate creation, is used. CMTS sends out gate-delete-ack message to the original PS.
Workaround: Use the same PS.
CSCei72695
When the cable modem termination system (CMTS) is configured in mixed mode using QAM16, and upstream is heavily utilized, a 0.5% pkt loss occurs on a BCM3137 Physical Interface Chip (PHY) based line card.
Workaround: Increase the ranging-burst preamble power, which results in a side-effect of low-signal-to-noise ratio (SNR), at around 17 dB, at the CMTS.
Alternative workaround: Do not use the QAM-16 rate on the CMTS.
CSCei85762
The cable modem termination system (CMTS) reports the following error when the cable downstream subs-traffic-mgmt command is entered:
%IP PIM must be enabled on virtual interface Bundle1 for tunnel traffic to get forwarded %Error: DSG client list 0 is not defined yet.There are no known workarounds.
CSCei85808
When the show cable subscriber-usage command is entered, the system does not pause between screens with the "--More--" prompt.
There are no known workarounds.
CSCei86312
The cable modem termination system (CMTS) fails to send the classifier information for the upstream to the termination side of the SMDS Interface Protocol (SIP) Video phone call.
There are no known workarounds.
CSCei88999
If a Policy Server sends the cable modem termination system (CMTS) a gate-set that results in the gate being in the ACTIVE state, and billing information is added to the gate-set, the CMTS unexpectedly reloads when the cable modem (CM) sends an -rsp to the Dynamic Service Addition (DSA) request sent by the CMTS.
In normal instances, the CM should not send an -rsp to the DSA request. Several checks have been put in place to verify the parameters and ensure that the number of service flows has not been exceeded. However, some CMs may still send an -rsp to a DSA. If an -rsp is sent, the event management code generates an event message after the gate has been deleted.
Workaround: Because it cannot be determined when the CM will send an -rsp, the best workaround is to not use EM at this time.
CSCej61240
The following "% Ambiguous command:" messages occur when IP-related commands are input:
% Ambiguous command: "ip dhcp pool " % Ambiguous command: "ip dhcp binding " % Ambiguous command: "ip dhcp smart-relay " % Ambiguous command: "ip domain " % Ambiguous command: "ip domain-lookup " % Ambiguous command: "ip address-pool " % Ambiguous command: "ip telnet comport "This issue occurs in the Cisco IOS Release 12.3 BC train.
There are no known workarounds.
CSCei90582
A service policy cannot be configured on a virtual bundle interface. An error message is returned when the command is entered.
This issue occurs when configuring a virtual bundle interface using the Cisco IOS Release 12.3(13a)BC or later.
There are no known workarounds.
CSCej23936
Tracebacks occur when executing an OSS-03 snmpv3 test.
There are no known workarounds.
CSCej34349
PacketCable Multimedia (PCMM) gates are left without the timer running and can use up gate resources when used with a legacy card.
Workaround: Enter the clear packet gate all command. However, be aware that this command clears all gates and can impact service.
CSCek07537
The cable modem termination system (CMTS) does not allow the UCC-RSP MAC message to be transmitted over a secondary service identifier (SID). This behavior is not DOCSIS2.0 compliant.
There are no known workarounds.
CSCek23937
The uptime-field in a Subscriber Account Management Interface Specification (SAMIS) exported records goes negative after 248 days:
(CMTSsysUpTime)-2147425017/(CMTSsysUpTime)CMTSsysUpTime is an official DOCSIS / SAMIS MIB variable name.
This condition causes the billing application to drop records because of invalid values. Thus, an unpatched billing application cannot charge some customers for used traffic.
This issue occurs on all cable modem termination systems (CMTSs) that are not rebooted after more than 2147483647/100 seconds or 248 days.
Workaround: Prior to 248 days of uptime, schedule a CMTS reload during a maintenance window.
CSCsa54516
Baseline Privacy Interface (BPI)-enabled modems shift from online(pt) to online(pk), and traffic is not encrypted.
During this state, the traffic encryption key (TEK) request message is blocked and is not received by the cable modem termination system (CMTS).
Workaround: Reboot the CMTS.
CSCsa59600
A document that describes how the Internet Control Message Protocol (ICMP) could be used to perform a number of Denial of Service (DoS) attacks against the Transmission Control Protocol (TCP) has been made publicly available. This document has been published through the Internet Engineering Task Force (IETF) Internet Draft process, and is entitled "ICMP Attacks Against TCP" (draft-gont-tcpm-icmp-attacks-03.txt).
These attacks, which only affect sessions terminating or originating on a device itself, can be of three types:
1.
2.
3.
Successful attacks may cause connection resets or reduction of throughput in existing connections, depending on the attack type.
Multiple Cisco products are affected by the attacks described in this Internet draft.
Cisco has made free software available to address these vulnerabilities. In some cases there are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.shtml
The disclosure of these vulnerabilities is being coordinated by the National Infrastructure Security Coordination Centre (NISCC), based in the United Kingdom. NISCC is working with multiple vendors whose products are potentially affected. Its posting can be found at
http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.pdf
CSCsa93574
On a Cisco uBR7100 series router, the following message appears while running Cisco IOS Release 12.2(15)BC2f:
%SYS-3-INVMEMINT: Invalid memory action (free) at interrupt level -Traceback= 60886E40 60581654 605816C0 6058277C 604FE8B0 604BC46C 6058EE1C 6058F360 605972E0 6059AE38 60590870 605A0468 There are no known workarounds.CSCsb02366
The quality of service (QoS) Prov for DOCSIS 2.0 cable modems correctly shows DOCSIS 1.0 or DOCSIS 1.1 because the major difference between a modem running in DOCSIS 2.0 mode as opposed to DOCSIS 1.0/1.1 mode is the physical layer and not the QoS provisioning.
However, to be consistent, the "DOC2.0" column under "QoS Provision" should be removed from the show cable modem mac summary command display.
In addition, a show cable modem phy summary command should be added to provide a quick summary of the cable modems in each phy mode on each interface.
CSCsb03623
The snmpwalk of cdxIfCmtsServiceOutOctets counter reports a value of 0 for interfaces connected to cable modems, even though there is traffic on the interface.
There are no known workarounds.
CSCsb10448
When dynamic upstream load-balancing is configured in a Multiprotocol Label Switching (MPLS)/Virtual Private Network (VPN) environment, any cable modems with secondary upstream service-flows associated with the management VPN that are moved by the load-balancing process have no IP connectivity.
The show cable modem h.h.h qos command followed by the show interface cable x/y/z sid cm primary sid association command shows the cable modem (CM) primary service identifier (SID) associated with the management VPN.
The show interface cable x/y/z sid cm secondary sid association command shows the secondary SID is "Not in use".
This issue occurs when the cable modem termination system (CMTS) is configured for MPLS/VPN, and a CM that is associated with a VPN is being moved to a new upstream using dynamic load-balancing, and has more than 1 upstream service flow (DOCSIS 1.1 or PacketCable). Static load-balancing does not induce this problem. (For example, under the above conditions, a load-balancing configuration such as cable load-balance group 1 threshold load 5 enforce can induce this issue.)
Workaround: As a temporary workaround, reset any modems in this state using the clear cable modem h.h.h reset command:
No permanent workaround exists. In this environment, dynamic load-balancing should be disabled.
CSCsb24464
When the show interfaces x/y command is issued on the Cisco uBR7100 series router, the output values are not displayed. The output values are displayed at the bundle interface.
