Specifications

DOCSIS 1.1 for Cisco uBR905 and Cisco uBR925 Cable Access Routers and Cisco CVA122 Cable Voice Adapters

Restrictions for DOCSIS 1.1 Support

Cisco IOS Release 12.2(15)CZ

Optionally, ensure that servers are available to download Cisco IOS Release 12.2(15)CZ software

images to Cisco uBR905 and Cisco uBR925 cable access routers and Cisco CVA122 cable voice

adapters to enable DOCSIS 1.1 operation.

• Ensure that customer premises equipment (CPE)—cable modems or set-top boxes, PCs, telephones,

or facsimile machines—meet the requirements for your network and service offerings.

• Familiarize yourself with your channel plan to ensure assigning of appropriate frequencies. Outline

your strategies for setting up bundling or VPN solution sets, if applicable, to your headend or

distribution hub. Know your dial plan if using H.323 for VoIP services and setting up VoIP-enabled

cable modem configuration files. Obtain passwords, IP addresses, subnet masks, and device names,

as appropriate.

• To use SNMPv3, the SNMP manager must support the MD5 encryption protocol and the

noauthnoPriv, authNoPriv, or authPriv authentication modes. Also, the manager must be able to

generate random numbers, public numbers, and secret keys as specified by RFC 2786,

Diffie-Hellman USM Key.

Restrictions for DOCSIS 1.1 Support

Cisco IOS Release

The Cisco uBR905 and Cisco uBR925 cable access routers and Cisco CVA122 cable voice adapters

must be running Cisco IOS Release 12.2(15)CZ (or later release) to support DOCSIS 1.1. The CMTS

must also support the DOCSIS 1.1 feature set.

Baseline Privacy Interface Plus

BPI+ encryption and authentication must be supported and enabled by both the cable modem and the

CMTS. In addition, the CMTS and cable modem must contain a digital certificate that conforms to the

DOCSIS 1.1 and BPI+ specifications.

Also, the DOCSIS specifications require that when the DOCSIS configuration file enables BPI or BPI+

encryption, the configuration file must also include a value for the Baseline Privacy Configuration

Settings Option field (TLV 17). If this field is not included when BPI is enabled, the router rejects the

BPI configuration. If MAC debugging is enabled (using the debug cable-modem mac command), the

router also displays the displays the CMAC_LOG_BPKM_REQUIRED_TLV17_ABSENT debugging

message on the console.

Note All production models of the Cisco uBR905 and Cisco uBR925 cable access routers and Cisco CVA122

cable voice adapters include digital certificate support. However, some models might require an upgrade

of those certificates before being able to perform BPI+ operation. See the document, Upgrading the

DOCSIS Certificates in Cisco uBR905/uBR925 Cable Access Routers and CVA122 Cable Voice

Adapters, which is at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122limit/122cz/upgdcert.

htm

Tip Ensure that the system clocks on the CMTS and on the time-of-day (ToD) servers are synchronized. If

this does not occur, the clocks on the CMs will not match the clocks on the CMTS, which could interfere

with BPI+ operations. In particular, this could prevent the proper verification of the digital certificates

on the CM.