Document ID: 28644
Contents
Introduction
Prerequisites
Requirements
Components Used
Conventions
Security
VPN Issues
Parameter Definitions
About CMTS Configuration
Configuring the Cisco 2600 Router
Entering Configuration Mode
Configuring the NAT When You Use Private IPs on BBSM Networks
Route to the Internet
Route to the Internal BBSM Network
Configure the SNMP Engine
Configure the Access List for Security Control
Configure the Serial Interface
Configure the Ethernet Interface
Configure the Telnet Interface
Common Oversights and Mistakes
Configuring BBSM
Configuration
Common Oversights and Mistakes
Configure the 3500 XL Switch—Base Switch Configuration
Enter Configuration Mode
Global Configuration
Configure the Access List for Security Control
Configure the FastEthernet0/1 - 0/23 Interface
Configure the FastEthernet0/1 - 0/24 Interface Storm Control (Optional)
Configure the VLAN 1 Interface
Configure the Telnet Interface
Common Oversights and Mistakes
uBR7100 Cable Modem Termination System—IRB Configuration
Enter Configuration Mode
Global Configuration
Configure the Access List for Security Control
Configure the FastEthernet0/0 Interface
Configure the FastEthernet0/1 Interface
Configure the Cable1/0 Interface
Configure the Bridgegroup Virtual Interface 1 Interface
Configure the Telnet Interface
Common Oversights and Mistakes
uBR7100 Cable Modem Termination System – Bridge Configuration
Enter Configuration Mode
Global Configuration
Configure the Access List for Security Control
Configure the FastEthernet0/0 Interface
Configure the FastEthernet0/1 Interface
Configure the Cable1/0 Interface
Configure the Telnet Interface
Common Oversights and Mistakes
uBR7x00 Cable Modem Termination System – Routed Configuration
Enter Configuration Mode
Global Configuration
Configure the Access List for Security Control
Configure the FastEthernet0/0 Interface
Configure the FastEthernet0/1 Interface
Configure the Cable1/0 Interface
Configure the Telnet Interface
Common Oversights and Mistakes
Cisco Support Community - Featured Conversations
Related Information
Introduction
This document outlines best practice methods for Cisco MxU Broadband Solution Deployment. In order to provide broadband connectivity for the MxU market, the Building Broadband Solution Unit (BBSU) Total Implementation Package (TIP) uses:
-
Cisco Systems, Inc. Building Broadband Service Manager (BBSM)
-
Ethernet
-
Long Reach Ethernet (LRE)
-
Aironet
-
Cable Product offerings
This document is a supplemental tool that is intended for use by Cisco partners, resellers, and customers for the deployment of Cisco products. This tool is subject to the terms and conditions of the Cisco TIP License Agreement.
This document provides baseline configuration guidelines for a Cisco Systems BBSM Network within a coaxial cable plant. This document does not replace individual Point Product Configuration documentation.
Prerequisites
Requirements
Readers of this document should have knowledge of these topics:
-
BBSM network design
-
The BBSM Internet Protocol (IP) scheme for the property (BBSM-to-router, BBSM-to-client)
-
The external IP scheme from the Internet service provider (ISP), including a Domain Name System (DNS) forwarder and a Simple Mail Transfer Protocol (SMTP) forwarder
-
Internal network design; for example, the IP addresses of all of the switches and application processes (APs)
Components Used
The information in this document is based on BBSM 5.2.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
Conventions
For more information on document conventions, refer to the Cisco Technical Tips Conventions.
Security
The configurations that are contained in this document are provided as a sample and might require modifications for use in your network. Access lists are provided in these sections of the document:
-
2600 router—Configure the Access List for Security Control
-
3500 XL Switch—Configure the Access List for Security Control
-
uBR7100 Cable Modem Termination System—Configure the Access List for Security Control
They are examples of how to prevent unauthorized access to routers and switches. These security measures are not comprehensive and you must modify them as required for each individual network. You must test any additions or modifications to access lists and other configuration items prior to inclusion into a production network environment.
It is the responsibility of the network administrator to analyze all security risks and respond to security issues for the BBSM network. Cisco assumes no responsibility for damage done by unauthorized personnel that access network equipment.
VPN Issues
BBSM supports all Virtual Private Network (VPN) solutions, once a customer is connected to the BBSM service. You may experience problems depending on the IP scheme of the BBSM internal network. Some VPNs do not support Network Address Translation (NAT) or Port Address Translation (PAT). NAT or PAT must occur when you are using a private or non-routable IP scheme (for example, 10.10.0.0). Translation of a private address to a public, routable address occurs on the router and is what actually causes some VPN solutions not to work. The Cisco VPN 3000 Concentrator, for example, is a system that can support VPN over NAT.
To ensure that all VPNs work all of the time, the entire BBSM solution must use a routable (public) IP scheme.
Note: Even though you use routable IP addresses, customers that rely on Plug and Play to connect to BBSM with statically configured IP addresses might not be able to activate a VPN session. The reason for this is because BBSM uses a form of NAT to translate between their static IP address and an IP address from the Foreign Range.
If the customer requires a VPN connection and can not initiate one with a static IP address, then the customer must configure their computer for DHCP.
Parameter Definitions
This section defines the parameters, or variables, that you use throughout this document.
-
BBSM_External_IP_Network—The network ID of the BBSM external network
-
BBSM_Internal_IP_Network—The network ID of the BBSM internal network
-
BBSM_External_NIC—The IP address of the BBSM external network interface controller (NIC)
-
BBSM_I/E_NIC—The IP address of the internal and external NIC. Commands with this parameter should be repeated for both the internal and the external NICs
-
BBSM_Internal_NIC—The IP address of the BBSM internal NIC
-
BBSM_Network_SNM—The subnet mask of the BBSM internal network.
-
CD_Drive—The drive letter of the CD drive of the computer
-
Client_IP_Address—The IP address for the cable modem termination system (CMTS) client networks
-
Client_SNM—The subnet mask for the CMTS client networks
-
CM_Net_ID—The cable modem (CM) network ID
-
CM_Network_IP_Address—The IP address for the CMTS as a router for the cable modem network
-
CM_Network_SNM—The subnet mask for the CMTS for the cable modem network
-
DOCSIS_Config_File_Name—The file name of the Data-over-Cable Service Interface Specifications (DOCSIS) cable modem configuration file loaded on and accessible from the TFTP server
-
DS_Freq—The downstream (DS) frequency
-
DS_Mod—The downstream signal modulation
-
Gateway_to_Router—The IP address for the F0/0 interface on the CMTS (on the BBSM internal subnet)
-
IP_Addr—The destination IP address or IP network for router access list 100
-
IP_Address_1—The IP address of the router Serial0/0 interface
-
IP_Address_2—The IP address of the router Ethernet0/0 interface
-
ISP_Gateway—The gateway IP address for the router, which is received from the ISP
-
Int_Depth—The interleave depth
-
Man_Network—The integrator or corporate network that is used to monitor and to administer the network
-
Netmask—The subnet mask
-
password_1—The password that is required to enter Privileged mode
-
password_2—The password that is required to log on to the switch with Telnet
-
Private_IP_(X)—The private IP address that receives a 1:1 NAT map to a Real_IP_(X)
-
Real_IP_(X)—The real IP addresses that is obtained from the ISP
-
RO_String—The read-only SNMP community string
-
RW_String—The read-write SNMP community string
-
Switch_IP—The IP address of the switch
-
USx_Freq—The upstream (US) frequency for USx (US0, US1, US2, US3)
-
USx_Power—The upstream power level from the cable modem for USx
-
USx_Ch_Width—The upstream channel width for USx
-
Wildcard—Used with IP_Addr to determine the size of the destination network for router access list 100
About CMTS Configuration
There are three different possible configuration modes for the uBR7x00 CMTS on a network: transparent bridging, routing, or integrated routing and bridging (IRB). BBSM can support all three of these configuration modes.
The questions that arise are when to use a particular configuration mode and why to use it. Follow these guidelines when you configure a CMTS on a BBSM network:
-
Bridging—You may place the CMTS in transparent bridging mode, which provides the necessary connectivity to support statically configured clients. All modems receive an IP address from one of the client subnets that are configured on the BBSM internal network. For this configuration, you must configure the primary subnet on BBSM with all of the required cable modem DHCP scope options. Therefore, these options are also sent to all of the clients that connect to the network.
-
Routing—You may place the CMTS in routing mode, as long as you do not desire support for statically configured clients. Support for statically configured clients requires a bridged network: either transparent bridging or IRB. Cable modems are placed on their own subnet, which are separate from any client subnets. In a routed cable modem network, you may use BBSM or a separate system to provision cable modems.
-
IRB—You may place the CMTS in IRB mode, which provides support for statically configured clients and places the modems on a subnet that is separate from the client subnets. This configuration mode is most desirable, because it provides full Plug and Play support for clients and it allows the CMTS to act as a router for the cable modems.
Note: The uBR7200 series CMTS do not support bridging or IRB configuration mode. If you place a uBR7200 series CMTS in a BBSM network, you must configure it in routing mode.
Configuring the Cisco 2600 Router
Entering Configuration Mode
Issue these commands to enter configuration mode:
Router> enable
!--- Enter password, if prompted.
Router# config terminal
Router(config)# enable secret password_1
Router(config)# hostname SJ1
!--- Use a unique hostname for each router, for easy identification.
Configuring the NAT When You Use Private IPs on BBSM Networks
Issue these commands to configure the NAT pool for BBSM end users:
SJ1(config)# ip nat pool all_clients Real_IP_2 Real_IP_3 netmask Netmask SJ1(config)# ip nat inside source list 1 pool all_clients overload SJ1(config)# ip nat inside source static Private_IP_X Real_IP_X SJ1(config)# access-list 1 permit BBSM_Internal_IP_Network Wildcard SJ1(config)# access-list 1 permit BBSM_External_IP_Network Wildcard
Route to the Internet
Issue this command to route to the Internet:
SJ1(config)# ip route 0.0.0.0 0.0.0.0 ISP_Gateway
Route to the Internal BBSM Network
Issue this command to route to the BBSM internal network:
SJ1(config)# ip route BBSM_Internal_IP_Network Netmask BBSM_External_NIC !--- Note: Include routes for all of the networks that are internal to BBSM, !--- including networks that are internal to routers.
Configure the SNMP Engine
Issue these commands to configure the SNMP engine:
SJ1(config)# snmp community RW_String RW SJ1(config)# snmp community RO_String RO
Configure the Access List for Security Control
Issue these commands to configure the access list for security control:
!--- Issue these commands on one line each.
SJ1(config)# access-list 100 permit
icmp Man_Network Wildcard any echo
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard host BBSM_I/E_NIC eq 9488
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard host BBSM_I/E_NIC eq ftp
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard host BBSM_I/E_NIC eq snmp
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard host BBSM_I/E_NIC eq telnet
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard host BBSM_I/E_NIC eq www
SJ1(config)# access-list 100 permit
udp Man_Network Wildcard host BBSM_I/E_NIC eq tftp
SJ1(config)# access-list 100 permit
icmp Man_Network Wildcard IP_Addr Wildcard echo
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard IP_Addr Wildcard eq telnet
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard IP_Addr Wildcard eq www
SJ1(config)# access-list 100 permit
tcp Man_Network Wildcard IP_Addr Wildcard eq snmp
SJ1(config)# access-list 100 permit
udp Man_Network Wildcard IP_Addr Wildcard eq tftp
SJ1(config)# access-list 100 deny ip any IP_Addr Wildcard
SJ1(config)# access-list 100 deny icmp any any echo
SJ1(config)# access-list 100 permit ip any any
Note: The previous access-list statements may be repeated for multiple source and destination IP addresses, for source and destination port numbers, and for protocols.
Configure the Serial Interface
Issue these commands to configure the serial interface:
SJ1(config)# interface serial0/0 SJ1(config-if)# ip address IP_Address_1 Netmask SJ1(config-if)# ip nat outside SJ1(config-if)# ip access-group 100 in
Configure the Ethernet Interface
Issue these commands to configure the Ethernet interface:
SJ1(config-if)# interface Ethernet0/0 SJ1(config-if)# ip address IP_Address_2 Netmask SJ1(config-if)# ip nat inside
Configure the Telnet Interface
Issue these commands to configure the Telnet interface:
SJ1(config-if)# line vty 0 4
SJ1(config-line)# password password_2
SJ1(config-line)# login
SJ1(config-line# line vty 5 15
SJ1(config-line)# login
SJ1(config-line)# ^Z
!--- Ctrl-Z ends the configuration session.
Common Oversights and Mistakes
These common oversights and mistakes are associated with the configuration of the Cisco 2600 router:
-
NAT configurations are missing or are configured incorrectly
-
The route for the BBSM internal network(s) is missing or is incorrect
Configuring BBSM
Configuration
The BBSM Installation CD includes detailed instructions to configure the BBSM software at CD_Drive:\Documentation\config.pdf.
Note: You must install Adobe Acrobat Reader to view this file.
Common Oversights and Mistakes
These oversights and mistakes are common with the configuration of BBSM:
-
The filter on the external NIC is missing or is configured incorrectly.
-
If an error is committed during the installation of the BBSM software, then stop the installation, reformat the hard drive, and begin the installation again with a clean copy of Windows 2000 Server.
Configure the 3500 XL Switch—Base Switch Configuration
Enter Configuration Mode
Issue these commands to enter configuration mode:
Switch> enable !--- Enter password, if prompted. Switch# config terminal
Global Configuration
Issue these commands for global configuration:
Switch(config)# enable secret password_1 Switch(config)# hostname BaseSwitch1 !--- Use a unique hostname for each switch, for easy identification. BaseSwitch1(config)# ip default-gateway BBSM_Internal_NIC BaseSwitch1(config)# snmp community RW_String RW BaseSwitch1(config)# snmp community RO_String RO
Configure the Access List for Security Control
Issue these commands to configure the access list for security control:
!--- Issue these commands on one line each.
BaseSwitch1(config)# access-list 100 permit
icmp host BBSM_Internal_NIC host Switch_IP echo
BaseSwitch1(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Switch_IP eq telnet
BaseSwitch1(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Switch_IP eq www
BaseSwitch1(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Switch_IP eq tftp
BaseSwitch1(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Switch_IP eq snmp
Configure the FastEthernet0/1 - 0/23 Interface
Issue these commands to configure the FastEthernet0/1 - 0/23 interface:
BaseSwitch1(config)# interface fastethernet0/x
!--- Where x equals the interface number; for example, 0/1 or 0/23.
BaseSwitch1(config-if)# port protected
BaseSwitch1(config-if)# spanning-tree rootguard
BaseSwitch1(config-if)# spanning-tree portfast
Configure the FastEthernet0/1 - 0/24 Interface Storm Control (Optional)
Issue these commands to configure the FastEthernet0/1 - 0/24 interface storm control:
BaseSwitch1(config-if)# port block unicast BaseSwitch1(config-if)# port block multicast
Configure the VLAN 1 Interface
Issue these commands to configure the VLAN 1 interface:
BaseSwitch1(config-if)# interface vlan 1 BaseSwitch1(config-if)# ip address Switch_IP Netmask BaseSwitch1(config-if)# ip access-group 100 in BaseSwitch1(config-if)# no ip directed-broadcast BaseSwitch1(config-if)# no ip route-cache
Configure the Telnet Interface
Issue these commands to configure the Telnet interface:
BaseSwitch1(config-if)# line vty 0 4
BaseSwitch1(config-line)# password password_2
BaseSwitch1(config-line)# login
BaseSwitch1(config-line)# line vty 5 15
BaseSwitch1(config-line)# login
BaseSwitch1(config-line)# ^Z
!--- Ctrl-Z ends the configuration session.
Common Oversights and Mistakes
These oversights and mistakes are common with the configuration of the 3500 XL switch for a base switch configuration:
-
Do not include base switches in WEBConfig > Switches.
-
Interface FastEthernet0/24—the port that points towards the BBSM server—can not be configured with the port protected, spanning-tree rootguard, or spanning-tree portfast commands.
uBR7100 Cable Modem Termination System—IRB Configuration
Enter Configuration Mode
Issue these commands to enter configuration mode:
Router> enable !--- Enter password, if prompted. Router# config terminal
Global Configuration
Issue these commands for global configuration:
Router(config)# enable secret password_1 Router(config)# hostname uBR7100 !--- Use a unique hostname for each CMTS, for easy identification. uBR7100(config)# cable time-server uBR7100(config)# ip routing uBR7100(config)# ip subnet-zero uBR7100(config)# no ip domain-lookup uBR7100(config)# ip name-server BBSM_Internal_NIC uBR7100(config)# bridge irb uBR7100(config)# ip classless uBR7100(config)# no ip http server uBR7100(config)# ip route 0.0.0.0 0.0.0.0 BBSM_Internal_NIC uBR7100(config)# snmp community RW_String RW uBR7100(config)# snmp community RO_String RO uBR7100(config)# bridge 1 protocol ieee uBR7100(config)# bridge 1 route ip
Configure the Access List for Security Control
Issue these commands to configure the access list for security control:
!--- Issue these commands on one line each.
uBR7100(config)# access-list 100 permit
icmp host BBSM_Internal_NIC host Switch_IP echo
uBR7100(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Switch_IP eq telnet
uBR7100(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Switch_IP eq www
uBR7100(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Switch_IP eq tftp
uBR7100(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Switch_IP eq SNMP
uBR7100(config)# access-list 100 permit
ip host BBSM_Internal_NIC CM_Net_ID Wildcard_Mask_2
uBR7100(config)# access-list 100 permit
ip CM_Net_ID Wildcard_Mask_2 host BBSM_Internal_NIC
Configure the FastEthernet0/0 Interface
Issue these commands to configure the FastEthernet0/0 interface:
uBR7100(config)# interface fastethernet0/0 uBR7100(config-if)# no ip address uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# duplex auto uBR7100(config-if)# speed auto uBR7100(config-if)# bridge-group 1 uBR7100(config-if)# no bridge-group 1 subscriber-loop-control
Configure the FastEthernet0/1 Interface
Issue these commands to configure the FastEthernet0/1 interface:
uBR7100(config-if)# interface fastethernet0/1 uBR7100(config-if)# no ip address uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# shutdown uBR7100(config-if)# duplex auto uBR7100(config-if)# speed auto uBR7100(config-if)# bridge-group 1 uBR7100(config-if)# no bridge-group 1 subscriber-loop-control
Configure the Cable1/0 Interface
Issue these commands to configure the Cable1/0 interface:
uBR7100(config-if)# interface cable1/0 uBR7100(config-if)# no ip address uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# cable downstream annex B uBR7100(config-if)# cable downstream modulation DS_Mod uBR7100(config-if)# cable downstream interleave-depth Int_Depth uBR7100(config-if)# cable downstream frequency DS_Freq uBR7100(config-if)# no cable downstream rf-shutdown uBR7100(config-if)# cable upstream 0 frequency US0_Freq uBR7100(config-if)# cable upstream 0 power-level US0_Power uBR7100(config-if)# cable upstream 0 channel-width US0_Ch_Width uBR7100(config-if)# no cable upstream 0 shutdown uBR7100(config-if)# cable upstream 1 frequency US1_Freq uBR7100(config-if)# cable upstream 1 power-level US1_Power uBR7100(config-if)# cable upstream 1 channel-width US1_Ch_Width uBR7100(config-if)# no cable upstream 1 shutdown uBR7100(config-if)# cable upstream 2 frequency US2_Freq uBR7100(config-if)# cable upstream 2 power-level US2_Power uBR7100(config-if)# cable upstream 2 channel-width US2_Ch_Width uBR7100(config-if)# no cable upstream 2 shutdown uBR7100(config-if)# cable upstream 3 frequency US3_Freq uBR7100(config-if)# cable upstream 3 power-level US3_Power uBR7100(config-if)# cable upstream 3 channel-width US3_Ch_Width uBR7100(config-if)# no cable upstream 3 shutdown uBR7100(config-if)# bridge-group 1 uBR7100(config-if)# no bridge-group 1 subscriber-loop-control
Configure the Bridgegroup Virtual Interface 1 Interface
Issue these commands to configure the Bridge Group Virtual Interface (BVI) 1 interface:
uBR7100(config-if)# interface bvi 1 uBR7100(config-if)# ip address Switch_IP BBSM_Network_SNM secondary uBR7100(config-if)# ip address CM_Network_IP_Address CM_Network_SNM uBR7100(config-if)# ip access-group 100 in uBR7100(config-if)# ip helper-address BBSM_Internal_NIC uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# no keepalive
Configure the Telnet Interface
Issue these commands to configure the Telnet interface:
uBR7100 (config-if)# line vty 0 4
uBR7100 (config-line)# password password_2
uBR7100 (config-line)# login
uBR7100 (config-line)# line vty 5 15
uBR7100 (config-line)# login
uBR7100 (config-line)# ^Z
!--- Ctrl-Z ends the configuration session.
Common Oversights and Mistakes
These oversights and mistakes are common with the configuration of the uBR7100 CMTS:
-
The uBR7114 has four upstream ports. The uBR7111 has only one US port; therefore, you can only configure US0. See Configure the Cable 1/0 Interface for more information.
-
When you are using an uBR7114, make sure that all of the upstream frequencies are different and do not overlap.
-
Be sure to turn off the subscriber-loop-control on all interfaces (with the no bridge 1 subscriber-loop-control command) and copy a specific startup-config for Cable 1/0. It is turned on by default for Cable 1/0, and reappears after a reboot, if not specifically disabled.
-
When in Integrated Routing and Bridging (IRB) mode, the physical interfaces do not receive IP addresses.
uBR7100 Cable Modem Termination System – Bridge Configuration
Enter Configuration Mode
Issue these commands to enter configuration mode:
Router> enable !--- Enter password, if prompted. Router# config terminal
Global Configuration
Issue these commands for global configuration:
Router(config)# enable secret password_1 Router(config)# hostname uBR7100 !--- Use a unique hostname for each CMTS, for easy identification. uBR7100(config)# cable time-server uBR7100(config)# ip subnet-zero uBR7100(config)# no ip domain-lookup uBR7100(config)# ip name-server BBSM_Internal_NIC uBR7100(config)# ip classless uBR7100(config)# no ip http server uBR7100(config)# ip default-gateway BBSM_Internal_NIC uBR7100(config)# snmp community RW_String RW uBR7100(config)# snmp community RO_String RO uBR7100(config)# bridge 1 protocol ieee
Configure the Access List for Security Control
Issue these commands to configure the access list for security control:
!--- Issue these commands on one line each.
uBR7100(config)# access-list 100 permit
icmp host BBSM_Internal_NIC host Switch_IP echo
uBR7100(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Switch_IP eq telnet
uBR7100(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Switch_IP eq www
uBR7100(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Switch_IP eq tftp
uBR7100(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Switch_IP eq SNMP
uBR7100(config)# access-list 100 permit
ip host BBSM_Internal_NIC CM_Net_ID Wildcard_Mask_2
uBR7100(config)# access-list 100 permit
ip CM_Net_ID Wildcard host BBSM_Internal_NIC
Configure the FastEthernet0/0 Interface
Issue these commands to configure the FastEthernet0/0 interface:
uBR7100(config)# interface fastethernet0/0 uBR7100(config-if)# ip address Switch_IP BBSM_Network_SNM uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# duplex auto uBR7100(config-if)# speed auto uBR7100(config-if)# bridge-group 1
Configure the FastEthernet0/1 Interface
Issue these commands to configure the FastEthernet0/1 interface:
uBR7100(config-if)# interface fastethernet0/1 uBR7100(config-if)# no ip address uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# shutdown uBR7100(config-if)# duplex auto uBR7100(config-if)# speed auto uBR7100(config-if)# bridge-group 1
Configure the Cable1/0 Interface
Issue these commands to configure the Cable1/0 interface:
uBR7100(config-if)# interface cable1/0 uBR7100(config-if)# ip address Switch_IP BBSM_Network_SNM uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# cable downstream annex B uBR7100(config-if)# cable downstream modulation DS_Mod uBR7100(config-if)# cable downstream interleave-depth Int_Depth uBR7100(config-if)# cable downstream frequency DS_Freq uBR7100(config-if)# no cable downstream rf-shutdown uBR7100(config-if)# cable upstream 0 frequency US0_Freq uBR7100(config-if)# cable upstream 0 power-level US0_Power uBR7100(config-if)# cable upstream 0 channel-width US0_Ch_Width uBR7100(config-if)# no cable upstream 0 shutdown uBR7100(config-if)# cable upstream 1 frequency US1_Freq uBR7100(config-if)# cable upstream 1 power-level US1_Power uBR7100(config-if)# cable upstream 1 channel-width US1_Ch_Width uBR7100(config-if)# no cable upstream 1 shutdown uBR7100(config-if)# cable upstream 2 frequency US2_Freq uBR7100(config-if)# cable upstream 2 power-level US2_Power uBR7100(config-if)# cable upstream 2 channel-width US2_Ch_Width uBR7100(config-if)# no cable upstream 2 shutdown uBR7100(config-if)# cable upstream 3 frequency US3_Freq uBR7100(config-if)# cable upstream 3 power-level US3_Power uBR7100(config-if)# cable upstream 3 channel-width US3_Ch_Width uBR7100(config-if)# no cable upstream 3 shutdown uBR7100(config-if)# bridge-group 1 uBR7100(config-if)# no bridge-group 1 subscriber-loop-control
Configure the Telnet Interface
Issue these commands to configure the Telnet interface:
uBR7100 (config-if)# line vty 0 4
uBR7100 (config-line)# password password_2
uBR7100 (config-line)# login
uBR7100 (config-line)# line vty 5 15
uBR7100 (config-line)# login
uBR7100 (config-line)# ^Z
!--- Ctrl-Z ends the configuration session.
Common Oversights and Mistakes
These oversights and mistakes are common with the configuration of the uBR7100 CMTS for Bridge configuration:
-
The uBR7114 has four upstream ports. The uBR7111 has only one US port; therefore, you can only configure US0.
-
When you are using a uBR7114, make sure that all of the upstream frequencies are different and do not overlap.
-
Be sure to turn off the subscriber-loop-control on all interfaces (with the no bridge 1 subscriber-loop-control command) and copy a specific startup-config for Cable 1/0. It is turned on by default for Cable 1/0, and will reappear after a reboot, if not disabled.
uBR7x00 Cable Modem Termination System – Routed Configuration
Enter Configuration Mode
Issue these commands to enter configuration mode:
Router> enable !--- Enter password, if prompted. Router# config terminal
Global Configuration
Issue these commands for global configuration:
Router(config)# enable secret password_1 Router(config)# hostname uBR7100 !--- Use a unique hostname for each CMTS, for easy identification. uBR7100(config)# cable time-server uBR7100(config)# ip routing uBR7100(config)# ip subnet-zero uBR7100(config)# no ip domain-lookup uBR7100(config)# ip name-server BBSM_Internal_NIC uBR7100(config)# ip classless uBR7100(config)# no ip http server uBR7100(config)# ip route 0.0.0.0 0.0.0.0 BBSM_Internal_NIC uBR7100(config)# snmp community RW_String RW uBR7100(config)# snmp community RO_String RO
Configure the Access List for Security Control
Issue these commands to configure the access list for security control:
!--- Issue these commands on one line each.
uBR7100(config)# access-list 100 permit
icmp host BBSM_Internal_NIC host Client_IP_Address echo
uBR7100(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Client_IP_Address eq telnet
uBR7100(config)# access-list 100 permit
tcp host BBSM_Internal_NIC host Client_IP_Address eq www
uBR7100(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Client_IP_Address eq tftp
uBR7100(config)# access-list 100 permit
udp host BBSM_Internal_NIC host Client_IP_Address eq SNMP
uBR7100(config)# access-list 100 permit
ip host BBSM_Internal_NIC CM_Net_ID Wildcard_Mask_2
uBR7100(config)# access-list 100 permit
ip CM_Net_ID Wildcard host BBSM_Internal_NIC
Configure the FastEthernet0/0 Interface
Issue these commands to configure the FastEthernet0/0 interface:
uBR7100(config)# interface fastethernet0/0 uBR7100(config-if)# ip address Gateway_to_Router BBSM_Network_SNM uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# duplex auto uBR7100(config-if)# speed auto
Configure the FastEthernet0/1 Interface
Issue these commands to configure the FastEthernet0/1 interface:
uBR7100(config-if)# interface fastethernet0/1 uBR7100(config-if)# no ip address uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# shutdown uBR7100(config-if)# duplex auto uBR7100(config-if)# speed auto
Configure the Cable1/0 Interface
Issue these commands to configure the Cable1/0 interface:
uBR7100(config-if)# interface cable1/0 uBR7100(config-if)# ip address Client_IP_Address Client_SNM secondary uBR7100(config-if)# ip address Client_IP_Address Client_SNM secondary uBR7100(config-if)# ip address CM_IP_Address CM_SNM uBR7100(config-if)# ip access-group 100 in uBR7100(config-if)# no ip route-cache uBR7100(config-if)# no ip mroute-cache uBR7100(config-if)# cable downstream annex B uBR7100(config-if)# cable downstream modulation DS_Mod uBR7100(config-if)# cable downstream interleave-depth Int_Depth uBR7100(config-if)# cable downstream frequency DS_Freq uBR7100(config-if)# no cable downstream rf-shutdown uBR7100(config-if)# cable upstream 0 frequency US0_Freq uBR7100(config-if)# cable upstream 0 power-level US0_Power uBR7100(config-if)# cable upstream 0 channel-width US0_Ch_Width uBR7100(config-if)# no cable upstream 0 shutdown uBR7100(config-if)# cable upstream 1 frequency US1_Freq uBR7100(config-if)# cable upstream 1 power-level US1_Power uBR7100(config-if)# cable upstream 1 channel-width US1_Ch_Width uBR7100(config-if)# no cable upstream 1 shutdown uBR7100(config-if)# cable upstream 2 frequency US2_Freq uBR7100(config-if)# cable upstream 2 power-level US2_Power uBR7100(config-if)# cable upstream 2 channel-width US2_Ch_Width uBR7100(config-if)# no cable upstream 2 shutdown uBR7100(config-if)# cable upstream 3 frequency US3_Freq uBR7100(config-if)# cable upstream 3 power-level US3_Power uBR7100(config-if)# cable upstream 3 channel-width US3_Ch_Width uBR7100(config-if)# no cable upstream 3 shutdown uBR7100(config-if)# cable helper-address BBSM_Internal_NIC uBR7100(config-if)# cable dhcp-giaddr policy
Configure the Telnet Interface
Issue these commands to configure the Telnet interface:
uBR7100 (config-if)# line vty 0 4
uBR7100 (config-line)# password password_2
uBR7100 (config-line)# login
uBR7100 (config-line)# line vty 5 15
uBR7100 (config-line)# login
uBR7100 (config-line)# ^Z
!--- Ctrl-Z ends the configuration session.
Common Oversights and Mistakes
These oversights and mistakes are common with the configuration of the uBR7x00 CMTS for Routed configuration:
-
The uBR7111 has only one upstream port; therefore, you can only configure US0.
-
When you are using multiple upstream ports, make sure all of the upstream frequencies are different and do not overlap.
Cisco Support Community - Featured Conversations
Related Information
- BBSM Glossary
- Technical Support - Cisco Building Broadband Service Manager
- Technical Support - Cisco Systems
| Updated: Oct 26, 2005 | Document ID: 28644 |
