Summary of the content on the page No. 1
Cisco uBR924 Cable Access Router
Software Configuration Guide
12.2(8)
August 2002
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Text Part Number: OL-0337-05
Summary of the content on the page No. 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE
Summary of the content on the page No. 3
CONTENTS Preface vii Audience vii Purpose viii Organization viii Document Conventions viii Acronyms and Terms xi Related Documentation xii Cisco uBR924 Cable Access Router xii CMTS Hardware Installation Publications xiii Cisco IOS Publications xiii Configuration Editor and Network Management Publications xiii Subscriber Publications xiii Obtaining Documentation xiv World Wide Web xiv Documentation CD-ROM xiv Ordering Documentation xiv Obtaining Technical Assistance xiv Cisco Connection Online
Summary of the content on the page No. 4
Contents DOCSIS Baseline Privacy Interface 1-6 Dynamic Host Configuration Protocol Server 1-6 Dynamic Host Configuration Protocol Proxy Support 1-7 Enhanced IP Bridging 1-7 Ecosystem Gatekeeper Interoperability Enhancements 1-7 Fax over IP 1-8 H.323v2 (Gateway/Gatekeeper) 1-8 IP Address Negotiation 1-9 IPsec Network Security 1-9 Layer 2 Tunneling Protocol 1-9 Media Gateway Control Protocol V12.1.3T 1-10 NetRanger Support—Cisco IOS Intrusion Detection 1-10 Network Address Translation and Port A
Summary of the content on the page No. 5
Contents Reconfiguring DOCSIS-Compliant Bridging 2-9 CHAPTER 3 Advanced Data-Only Configurations 3-1 Data-Only Routing 3-2 Routing with DHCP Server 3-4 NAT/PAT Configuration 3-6 NAT/PAT Configuration with DHCP Proxy 3-8 Using NAT and DHCP Proxy and Copying Configuration Files 3-10 IPSec (56-bit) Example 3-11 Sample Configuration 3-13 Additional Documentation 3-15 IPSec (3DES) Example 3-16 L2TP Example 3-17 CHAPTER 4 Voice over IP Configurations 4-1 Overview 4-1 Introduction 4-2 Voice Handling
Summary of the content on the page No. 6
Contents Command History Features A-7 Displaying the Command History A-7 Editing Previous Commands A-7 Command History Buffer Size A-8 Using Output Modifiers A-8 Understanding Cisco IOS Configuration Files A-9 Downloading the Configuration File A-9 Startup and Run-Time Configuration Files A-10 Displaying the Configuration Files A-10 File Format A-11 Useful Commands A-11 APPENDIX B Using the Cable Monitor Tool B-1 Enabling the Cable Monitor B-2 Configuration Modes B-2 Security Considerations B-
Summary of the content on the page No. 7
Preface This document is the Cisco uBR924 Cable Access Router Software Configuration Guide and describes the configuration of the Cisco uBR924 cable access router. This section describes the following topics: • Audience Purpose Organization Document Conventions Acronyms and Terms Related Documentation Obtaining Documentation Obtaining Technical Assistance Audience This configuration guide is designed for system administrators who have some experience downloading softwar
Summary of the content on the page No. 8
Preface Purpose Purpose This configuration guide explains the initial and basic software configuration procedures for the Cisco uBR924 cable access router. This guide contains procedures for configuring the Cisco uBR924 router for both data only operation, as well as for voice and data operation. This guide also describes how to set up basic security, the headend interface (CMTS-to-CM), and how to use ROM monitor. Organization This guide is organized into the chapters and appendixes shown
Summary of the content on the page No. 9
Preface Document Conventions Convention Meaning Comments Boldface Commands and keywords you enter offset-list literally as shown Italics Variables for which you supply command type interface values You replace the variable with the type of interface. In contexts that do not allow italics, such as online help, arguments are enclosed in angle brackets (< >). Square brackets ([ ]) Optional elements command [abc] abc is optional (not required), but you can choose it. Vertical bars ( | ) Separ
Summary of the content on the page No. 10
Preface Document Conventions Caution Means reader be careful. You are capable of doing something that might result in equipment damage or loss of data. Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in this guide. Timesaver Means the described action saves time. You can save time by performing the action described in the paragraph. Warning This warning symbol means danger. You are in a situation that could cause bodily injury. Befor
Summary of the content on the page No. 11
Preface Acronyms and Terms Avvertenza Questo simbolo di avvertenza indica un pericolo. Si è in una situazione che può causare infortuni. Prima di lavorare su qualsiasi apparecchiatura, occorre conoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratiche standard per la prevenzione di incidenti. La traduzione delle avvertenze riportate in questa pubblicazione si trova nell’appendice, “Translated Safety Warnings” (Traduzione delle avvertenze di sicurezza), del man
Summary of the content on the page No. 12
Preface Related Documentation DES—Data Encryption Standard. DOCSIS 1.0—Data Over Cable Service Interface Specification. DOCSIS 1.0+—Extension of the DOCSIS 1.0 standard with features that support quality of service (QoS) options to offer better than best effort, low latency, and low jitter services. Downstream—Transmission of traffic from the CMTS (headend) to the CM (cable modem). IPSec—IP network security. Kbps—Kilobits per second. MAC—Media Access Control. Mbps—Megabits per
Summary of the content on the page No. 13
Preface Related Documentation Note The Cisco uBR924 Cable Access Router Installation and Configuration Guide is still available on CCO but has been superseded by the hardware and software guides listed above. CMTS Hardware Installation Publications Cisco uBR7200 Series Universal Broadband Router Hardware Installation Guide Cisco uBR7200 Series Universal Broadband Router Software Configuration Guide Cisco uBR7200 Series Universal Broadband Router Cable Modem Card Installation and Conf
Summary of the content on the page No. 14
Preface Obtaining Documentation Note Service provider and subscriber publications for other models of Cisco uBR900 Series cable access routers are also available on CCO. Obtaining Documentation World Wide Web You can access the most current Cisco documentation on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com. Documentation CD-ROM Cisco documentation and additional literature are available in a CD-ROM package, which ships with your pro
Summary of the content on the page No. 15
Preface Obtaining Technical Assistance CCO’s broad range of features and services helps customers and partners to streamline business processes and improve productivity. Through CCO, you will find information about Cisco and our networking solutions, services, and programs. In addition, you can resolve technical issues with online support services, download and test software packages, and order Cisco learning materials and merchandise. Valuable online skill assessment, training, and certif
Summary of the content on the page No. 16
Preface Obtaining Technical Assistance You can e-mail your comments to bug-doc@cisco.com. To submit your comments by mail, for your convenience many documents contain a response card behind the front cover. Otherwise, you can mail your comments to the following address: Cisco Systems, Inc. Document Resource Connection 170 West Tasman Drive San Jose, CA 95134-9883 We appreciate and value your comments. Cisco uBR924 Software Configuration Guide xvi OL-0337-05 (8/2002)
Summary of the content on the page No. 17
CH A P TER 1 Overview This chapter provides a basic understanding of the Cisco uBR924 cable access router’s software feature sets, as well as the processes used for provisioning the router within a cable network and configuring it for different services. This chapter contains the following sections: Cisco IOS Software Release Feature Sets Initial Provisioning Supporting Multiple Classes of Service Note This manual describes the Cisco uBR924 cable access router and feature sets as they
Summary of the content on the page No. 18
Chapter 1 Overview Cisco IOS Software Release Feature Sets Base IP DOCSIS-Compliant Bridging—Provides full DOCSIS 1.0-compliant cable modem support for customers who want a basic high-speed connection to the Internet. This is the default software image for the Cisco uBR924 cable access router in Cisco IOS Release 12.0; in Cisco IOS Release 12.1 and later, this image is superseded by the Home Office (Easy IP) image. Home Office (Easy IP)—Provides a high-speed DOCSIS connection to the In
Summary of the content on the page No. 19
Chapter 1 Overview Cisco IOS Software Release Feature Sets DOCSIS-compliant bridging (also referred to as “plug-and-play” bridging) is the default configuration for the Cisco uBR924 router. In this mode, the router automatically does the following at power-on and system reset: Acquires temporary downstream and upstream channels Finds the appropriate Time of Day (ToD), Trivial File Transfer Protocol (TFTP), and Dynamic Host Configuration Protocol Server (DHCP) servers Gets the curren
Summary of the content on the page No. 20
Chapter 1 Overview Cisco IOS Software Release Feature Sets Value Telecommuter In addition to full DOCSIS 1.0 support and the Home Office (Easy IP) feature set, the Value Telecommuter feature set supports 56-bit IPsec encryption and the Layer 2 Tunneling Protocol (L2TP). These additional features allow employees to establish secure high-speed Internet connections between the employees’ homes and the business’ local area network (LAN). IPsec encryption provides robust authentication and encr
