Cisco Systems uBR7200 Network Router User Manual


 
C-6
Cisco uBR7200 Series Universal Broadband Router Software Configuration Guide
OL-2239-03
AppendixC Viewing Sample Configuration Files
cable upstream 5 description Santa Theresa 12-17
cable upstream 5 power-level 0
no cable upstream 5 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 209.187.212.1
ip route 0.0.0.0 0.0.0.0 Null0 255
!
> no cdp run
> snmp-server engineID local 0000000902000030190E0900
snmp-server community <removed> RO
snmp-server location San Jose, CA
snmp-server contact Jim Smith
snmp-server chassis-id 01
!
banner login ^C Warning! Unauthorized use of this system is prohibited. =
You will be prosecuted to the fullest extent of =
the law.^C
alias exec qos show cable qos profile
alias exec scm show cable modem
alias exec noise show cable modem detail
!
line con 0
transport input none
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 <removed>
login
!
ntp clock-period 17179915
ntp update-calendar
ntp max-associations 2000
ntp server 129.7.1.66 source FastEthernet0/0 prefer
end
Baseline Privacy Interface Example
The Cisco uBR7200 series supports 56-bit and 40-bit encryption/decryption; 56 bit is the default. After
you choose a CMTS image that supports BPI, BPI is enabled by default for the CiscouBR7200 series.
Key commands that appear in the Cisco uBR7200 series configuration file that denote
encryption/decryption is supported include:
int cable 2/0
cable privacy kek grace-time 800
cable privacy kek life-time 750000
cable privacy tek grace-time 800
cable privacy tek life-time 56000
cable privacy enable
cable privacy mandatory
Note The cablemodem must also support encryption/decryption.
When baseline privacy is enabled, the Cisco uBR7200 series routes encrypted/decrypted packets from a
host or peer to another host or peer. BPI is configured with key encryption keys (keks) and traffic
encryption keys (teks). A kek is assigned to a CM based on the CMs service identifier (SID) and permits
the CM to connect to the CiscouBR7200series router when baseline privacy is activated. The tek is
assigned to a CM when its kek has been established. The tek is used to encrypt data traffic between the
CM and the Cisco uBR7200 series router.