The advanced all-in-one configuration is identical to the basic
configuration, except that it uses a hierarchical structure of DHCP pools to
provide unique DHCP options, such as static IP addresses, to individual cable
modems and CPE devices. The DHCP pools are given unique and relevant names to
simplify administration, and the cable modems and CPE devices that use these
pools are specified by the
client-identifier commands.
The DHCP pools for the individual cable modems and CPE devices inherit
the options from the parent pools, so you do not need to specify all of the
required options for those particular pools. Instead, the new pools need to
specify only those commands, such as
client-identifier, that should be different
from the parent pools.
Because the static IP addresses that are given to the cable modems and
CPE devices are in the range of 10.1.4.60 and 10.1.4.70, the
ip
dhcp
exclude
command is used to instruct the DHCP server that it should not
hand out addresses in this range to other cable modems or CPE devices.
!
version 12.1
no service pad
! provides nice timestamps on all log messages
service timestamps debug datetime msec localtime
service timestamps log uptime
! turn service password-encryption on to encrypt passwords
no service password-encryption
! provides additional space for longer configuration file
service compress-config
! supports a large number of modems / hosts attaching quickly
service udp-small-servers max-servers no-limit
!
hostname Router
!
boot system disk0:
!
no cable qos permission create
no cable qos permission update
cable qos permission modems
! permits cable modems to obtain Time of Day (TOD) from uBR7100
cable time-server
!
! High performance DOCSIS config file, additional options may be added
! 10 Mbit/sec download, 128 Kbit/sec upload speed, 10 Kbit/sec guaranteed upstream
! NOTE: cable upstream 0 admission-control 150 will prevent modems from
! connecting after 150% of guaranteed-bandwidth has been allocated to
! registered modems. This can be used for peek load balancing.
! max-burst 1600 prevents a modem with concatenation turned on from consuming
! too much wire time, and interfering with VoIP traffic.
! cpe max 8 limits the modem to 8 hosts connected before the CMTS refuses
! additional host MAC addresses.
! Timestamp option makes the config file only valid for a short period of time.
!
cable config-file platinum.cm
service-class 1 max-upstream 128
service-class 1 guaranteed-upstream 10
service-class 1 max-downstream 10000
service-class 1 max-burst 1600
cpe max 8
timestamp
!
! Medium performance DOCSIS config file, additional options may be added
! 5 Mbit/sec download, 128 Kbit/sec upload speed
!
cable config-file gold.cm
service-class 1 max-upstream 64
service-class 1 max-downstream 5000
service-class 1 max-burst 1600
cpe max 3
timestamp
!
! Low performance DOCSIS config file, additional options may be added
! 1 Mbit/sec download, 64 Kbit/sec upload speed
!
cable config-file silver.cm
service-class 1 max-upstream 64
service-class 1 max-downstream 1000
service-class 1 max-burst 1600
cpe max 1
timestamp
!
! No Access DOCSIS config file, used to correctly shut down an unused cable modem
! 1 kbit/sec download, 1 Kbit/sec upload speed, with USB/ethernet port shut down.
!
cable config-file disable.cm
access-denied
service-class 1 max-upstream 1
service-class 1 max-downstream 1
service-class 1 max-burst 1600
cpe max 1
timestamp
!
ip subnet-zero
! Turn on cef switching / routing, anything but process switching (no ip route-cache)
ip cef
ip cef accounting per-prefix
! Disables the finger server
no ip finger
! Prevents CMTS from looking up domain names / attempting to connect to
! machines when mistyping commands
no ip domain-lookup
! Prevents the issuance of IP addresses in this range, allows for use in
! static configurations.
ip dhcp excluded-address 10.128.1.60 10.128.1.70
! Prevents issuance of IP address that is already in use.
ip dhcp ping packets 1
!
! DHCP reply settings for DOCSIS cable modems.
! All settings here are "default response settings" for this DHCP pool.
! DOCSIS bootfile (cable modem config-file) as defined above
! next-server = IP address of server which sends bootfile
! default-router = default gateway for cable modems, necessary to get DOCSIS files
! option 4 = TOD server IP address
! option 2 = Time offset for TOD, in seconds, HEX, from GMT, -28,000 = PST = ffff.8f80
! option 7 = Optional SYSLOG server
! Lease length, in days, hours, minutes
!
ip dhcp pool CableModems-Platinum
network 10.128.1.0 255.255.255.0
bootfile platinum.cm
next-server 10.128.1.1
default-router 10.128.1.1
option 2 hex ffff.8f80
option 4 ip 10.128.1.1
option 7 ip 10.128.1.1
lease 7 0 10
!
! DHCP reply settings for IP hosts behind DOCSIS cable modems.
! All settings here are "default response settings" for this DHCP pool.
! default-router = default gateway for cable modems, necessary to get DOCSIS files
! dns-server = IP address for DNS server, place up to 8 addresses on the same
! line as a list
! NOTE: changing the DNS-server on a Windows PC, Mac, or Unix box require
! reloading the OS, but changing it in the DHCP response is quick and easy.
! domain-name = default domain name for the host
! Lease length, in days, hours, minutes
!
ip dhcp pool hosts
network 10.254.1.0 255.255.255.0
default-router 10.254.1.1
dns-server 10.254.1.1 10.128.1.1
domain-name ExamplesDomainName.com
lease 1 0 10
!
! DHCP reply settings for a static IP address for a PC and cable modems
! All settings here will override "default response settings" for this DHCP pool.
! client-identifier is the ethernet MAC address of the device, preceded by 01
! Thus, the Host with an mac address of 08.00.09.af.34.e2 will ALWAYS get the
! same IP address
! Lease length, in days, hours, minutes, set to infinite.
! Use a relevant name here, as there will be lots of these entries.
!
ip dhcp pool staticPC(0800.09af.34e2)
host 10.254.1.12 255.255.255.0
client-identifier 0108.0009.af34.e2
client-name staticPC(0800.09af.34e2)
lease infinite
ip dhcp pool cm-0050.04f9.efa0cm-
host 10.128.1.65 255.255.255.0
client-identifier 0100.107b.ed9b.45
bootfile disable.cm
!
ip dhcp pool cm-0030.d002.41f5
host 10.128.1.66 255.255.255.0
client-identifier 0100.107b.ed9b.23
bootfile silver.cm
!
! DHCP reply settings for a cable modem, to change from default provisioning
! All settings here will override "default response settings" for this DHCP pool.
! client-identifier is the ethernet MAC address of the device, preceded by 01
! Thus, the modem with a mac address of 00.10.95.81.7f.66 will ALWAYS get the
! same IP address
! This cable modem will get the gold.cm config file, and a consistent IP address
! some IP address within the DHCP pool for the cable downstream interface is
! required, or the reference correct config file will NOT be issued.
! Use a relevant name here, as there will be lots of these entries.
!
! WARNING: When changing config files for a modem, it is necessary to clear the
! address with “clear ip dhcp binding <ip-address>” and then reset the modem using
! "clear cable modem <mac-address> | <ip-address> reset"
!
ip dhcp pool goldmodem
host 10.128.1.67 255.255.255.0
client-identifier 0100.1095.817f.66
bootfile gold.cm
!
! DHCP reply settings for a disabled cable modem.
! This will prevent this cable modem user from accessing the network.
! client-identifier is the ethernet MAC address of the device, preceded by 01
! This cable modem will get the disable.cm config file, and a consistent IP address
! some IP address within the DHCP pool for the cable downstream interface is
! required, or the reference correct config file will NOT be issued.
! Use a relevant name here, as there will be lots of these entries.
!
! WARNING: When changing config files for a modem, it is necessary to clear the
! address with “clear ip dhcp binding <ip-address>” and then reset the modem using
! "clear cable modem <mac-address> | <ip-address> reset"
!
ip dhcp pool DisabledModem(0010.aaaa.0001)
host 10.128.1.68 255.255.255.0
client-identifier 0100.1095.817f.66
bootfile disable.cm
!
ip dhcp pool DisabledModem(0000.bbbb.0000)
client-identifier 0100.00bb.bb00.00
host 10.128.1.69 255.255.255.0
bootfile disable.cm
!
!
!
interface FastEthernet0/0
ip address 10.17.123.1 255.255.255.0
no ip mroute-cache
no shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
no ip mroute-cache
shutdown
duplex auto
speed auto
!
! Primary address is for cable modems, use only one, so make it large enough!
! Secondary addresses are for hosts, use as many as necessary
! These addresses must match the remainder of the configuration file,
! or modems won't work.
! cable downstream frequency sets the upconverter frequency
! cable down rf-power 55, sets the upconverter output power in dBmV
! each upstream interface can have a description, use it!
! All four upstreams have been set to the same default frequency, don't
! connect wire them together while on the same frequency!
! cable upstream 0 admission-control 150: limits the number of modems
! which can connect with guaranteed-bandwidth.
! NOTE: will prevent some modems from connecting once this limit is hit.
!
! High security option:
! no cable arp: prevents the uBR7100 from ever arping towards the cable modems
! for any IP-mac address pairing. Forces EVERY host to use DHCP at least
! once every time the uBR7100 is reloaded, or the arp table is cleared out.
! Forces users to use DHCP release/renew cycle on their computers if
! ARP entry is ever lost.
! Makes it impossible for an end user to type in a static IP address,
! or steal somebody else's IP address.
!
! cable-source verify dhcp: -- Forces the CMTS to populate the arp table from
! the DHCP server
! If the DHCP server does not have a valid DHCP lease for that IP / MAC combination,
! the host is unreachable.
! cable dhcp-giaddr policy: use primary IP address for modems, secondary for
! hosts behind modems
!
!
interface Cable1/0
description Cable Downstream Interface
ip address 10.254.1.1 255.255.255.0 secondary
ip address 10.128.1.1 255.255.255.0
no keepalive
cable downstream rate-limit token-bucket shaping
cable downstream annex B
cable downstream modulation 64qam
cable downstream interleave-depth 32
cable downstream frequency 851000000
cable down rf-power 55
cable upstream 0 description Cable upstream interface, North
cable upstream 0 frequency 37008000
cable upstream 0 power-level 0
cable upstream 0 admission-control 150
no cable upstream 0 shutdown
cable upstream 1 description Cable upstream interface, South
cable upstream 1 frequency 37008000
cable upstream 1 power-level 0
cable upstream 1 admission-control 150
no cable upstream 1 shutdown
cable upstream 2 description Cable upstream interface, East
cable upstream 2 frequency 37008000
cable upstream 2 power-level 0
cable upstream 2 admission-control 150
no cable upstream 2 shutdown
cable upstream 3 description Cable upstream interface, West
cable upstream 3 frequency 37008000
cable upstream 3 power-level 0
cable upstream 3 admission-control 150
no cable upstream 3 shutdown
no cable arp
cable source-verify dhcp
cable dhcp-giaddr policy
!
!
! default route to Fast ethernet 0/0, probably best to set
! this as an IP address so interface flaps don't create route flaps.
! IP http server: enables internal http server on uBR7100
!
ip classless
no ip forward-protocol udp netbios-ns
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip http server
!
!
! Enable TFTP downloads of the silver.cm file on the Flash device
! this DOCSIS config file is built using DOCSIS CPE Configurator.
tftp-server slot0:bronze.cm alias bronze.cm
!
! Aliases for frequently used commands
!
alias exec scm show cable modem
alias exec scf show cable flap
alias exec scp show cable qos profile
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
speed 19200
line vty 0 4
session-timeout 60
login
!
ntp clock-period 17179977
ntp server 192.168.35.51