Chapter 29: Security
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
870
5/0/6-8/1/0 1 #Denied 2.0 0/0 0 0015.96dd.ed9e 44.68.1.9
(Dynamic Secret Failure)
show cable modem
Interface
(DS-US) DOC
S/C/P-S/CG/P Mac Bonded State SIS Qos CPE MAC address IP Address
----------------- ----- ------ ----------- --- ------------- --- --------------- ------------------
5/0/6-8/0/3 1 !Denied 2.0 0 0015.9654.1ae3 44.68.1.10
The following is an example of the system output of the
show cable modem rogue
command.
show cable modem rogue
Interface DOC
(DS-US) Mac Bonded State SIS Qos CPE MAC address IP Address
--------------- ----- ------ ----------- --- ------------- --- --------------- ------------------
14/7-1/4 1 #Operational 2.0 0/0 0 0015.96dd.ed9e 44.68.1.9
Log Messages
Log messages are generated when a CM fails TFTP Enforce or Dynamic Secret checks. Below are examples of such
messages:
(TFTP Enforcement Failure)
07:25:41 08 notc: TFTP Enforce Failure: cable macIfIndex 0x20000002: CM 00:15:96:dd:ed:9e: IP
44.68.1.9: Cable Modem did not attempt TFTP
(Dynamic Secret Failure)
07:54:52 08 notc: Dynamic Secret Failure: cable macIfIndex 0x20000002: CM 00:15:96:54:1a:e3: IP
44.68.1.10: Verification of dynamic CER MIC failed
TFTP Relay Agent and the Upgrade Server TLV
If a TFTP server sends a cable modem configuration file that contains an upgrade server TLV that is null, then the TFTP
relay agent populates the TLV with the IP address of the TFTP server. If the TFTP server sends a cable modem configuration