Chapter 19: DOCSIS Set-top Gateway Configuration
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
626
DSG Configuration
he following sections describe the necessary steps for configuring DSG tunnels. The recommended order of configuration
is:
1.
Configuring Access List, Filters and Rate Limits
2.
Configuring IP Forwarding for Basic Mode DSG
3.
Configuring for Advanced DSG Mode
Configuring Access List, Filters and Rate Limits
ACLs, filters, and rate limits are used to protect the DSG tunnel traffic sourced by unauthorized servers as well as excessive
traffic rates. ACLs are used on the NSIs and IP filters are used on the CSIs.
The source of the DSG tunnel traffic on an NSI is restricted by configuring a permit ACL entry for each valid DSG tunnel
source IP address and destination IP address pair. A deny entry is added for each destination IP as the last entry in the list
to drop DSG tunnel traffic from all other sources.
configure access-list <aclNum> permit ip host <srcIp> host <destIp>
Repeat the previous command for each DSG tunnel source.
In the command above srcIp is the IP address of the source of the DSG tunnel traffic. Note that "host <srcIp>" may be
replaced with "<srcIp> <wildcards>" to allow multiple sources within a subnet.
configure access-list <aclNum> deny ip any host <destIp>
Where destIp is the destination IP address of DSG tunnel
Note that the permit ACL entries must be entered before the deny ACL entries are entered.
Rate limiting for the DSG tunnel can be configured using an SCN. For more information see Service Class Names.
The origination of DSG tunnel traffic from all upstream cable interfaces needs to be blocked by adding an IP filter for each
DSG tunnel destination IP address. This was explained in a previous section,
configure cable filter group <fGrp> index <index> src-addr 0.0.0.0 src-mask 0.0.0.0 dest-addr
<dsgTunnelDestIP> dest-mask 255.255.255.255 action drop
For more information on configuring IP filters, see IP Packet Filters, Subscriber Management.