Downloading The Docsis Root Certificate To The Cmts - Cisco cBR 8 Configuration Manual
Cbr series converged broadband routers
Hide thumbs
Also See for cBR 8:
- Installation instructions manual (27 pages) ,
- Configuration and troubleshooting manual (254 pages) ,
- Hardware installation manual (270 pages)
Table of Contents
Advertisement
DOCSIS 1.1 for the Cisco CMTS Routers
Timer
Authorize Reject Wait Timeout
Operational Wait Timeout
Rekey Wait Timeout
Downloading the DOCSIS Root Certificate to the CMTS
DOCSIS 1.1 allows cable modems to identify themselves using a manufacturer's chained X.509 digital
certificate that is chained to the DOCSIS root certificate. The DOCSIS root certificate is already installed on
the bootflash of the CMTS router. However, if you want to install another root certificate, for example, the
Euro-DOCSIS certificate, download the certificate and save it on the bootflash as "euro-root-cert".
For more information about the DOCSIS root certificate provided by Verisign, see the information at the
Tip
following URL:
You may load the DOCSIS root certificate and a EuroDOCSIS or PacketCable root certificate. Cisco
Note
recommends that the EuroDOCSIS PacketCable root certificates be copied into bootflash.
To download the DOCSIS root certificate to the Cisco CMTS, which is required if any cable modems on the
network are using chained certificates, use the following procedure:
Procedure
Step 1
Download the DOCSIS root certificate from the DOCSIS certificate signer, Verisign. At the time of this
document's printing, the DOCSIS root certificate is available for download at the following URL:
www.verisign.com/products-services/index.html
Step 2
Verisign distributes the DOCSIS root certificate in a compressed ZIP archive file. Extract the DOCSIS root
certificate from the archive and copy the certificate to a TFTP server that the CMTS can access.
Tip
Step 3
Log in to the Cisco CMTS using either a serial port connection or a Telnet connection. Enter the enable
command and password to enter Privileged EXEC mode:
Example:
Router> enable
http://www.verisign.com/products-services/index.html
To avoid possible confusion with other certificates, keep the file's original filename of
"CableLabs_DOCSIS.509" when saving it to the TFTP server.
Cisco cBR Series Converged Broadband Routers Quality of Services Configuration Guide for Cisco IOS XE Fuji
Downloading the DOCSIS Root Certificate to the CMTS
Description
The amount of time a cable modem must wait before
attempting to negotiate a new KEK if the CMTS
rejects its first attempt to negotiate a KEK.
The amount of time a cable modem will wait for a
response from a CMTS when negotiating a TEK for
the first time.
The amount of time a cable modem will wait for a
response from a CMTS when negotiating a new TEK
because the TEK lifetime is about to expire.
http://
16.7.x
51
Hide quick links:
Advertisement
Table of Contents
