Configure and Activate Baseline Privacy
Configuring Cisco uBR7246 Universal Broadband Router Features VC-149
Validation Tips
To verify if the upstream ports are activated or deactivated, enter the show interface cable command
for the upstream port that you have just configured:
router# show interface cable 6/0
Cable6/0 is up, line protocol is up
Hardware is BCM3210 FPGA, address is 00e0.1e5f.7a60 (bia 00e0.1e5f.7a60)
Internet address is 1.1.1.3/24
MTU 1500 bytes, BW 27000 Kbit, DLY 1000 usec, rely 255/255, load 1/255
Encapsulation, loopback not set, keepalive not set
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:25, output 00:00:00, output hang never
Last clearing of “show interface” counters never
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sea, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
10878 packets input, 853740 bytes, 0 no buffer
Received 3679 broadcasts, 0 runts, 0 giants, 0 throttles
3 input errors, 3 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
5401 packets output, 645885 bytes, 0 underruns
0 output errors, 0 collisions, 9 interface resets
0 output buffer failures, 0 output buffers swapped out
Troubleshooting Tips
If you are having trouble:
•Make sure the cable connections are not loose or disconnected.
•Make sure the cable modem card is firmly seated in its CiscouBR7246 chassis slot.
•Make sure that you have entered the correct slot and port numbers when you typed the command.
•Make sure that you have entered the correct upstream port number. Currently this is always u0.
Configure and Activate Baseline Privacy
To encrypt upstream and downstream data, you need to configure and activate baseline privacy.
Baseline privacy on an HFC network is configured with key encryption keys (keks) and traffic
encryption keys (teks). The encryption is based on 40-bit or 56-bit data encryption standard (DES)
encryption algorithms.
A kek is assigned to a cable modem based on the cable modem’s service identifier (SID) and permits
the cable modem to connect to the Cisco uBR7246 when baseline privacy is activated. The tek is
assigned to a cable modem when its kek has been established. The tek is used to encrypt data traffic
between the cable modem and the Cisco uBR7246.
Keks and teks can be set to expire based on a grace-time or a life-time value. A grace-time key is
used to assign a temporary key to a cable modem to access the network. A life-time key is used to
assign a more permanent key to a cable modem. Each cable modem that has a life-time key assigned
will request a new life-time key from the CiscouBR7246 before the current one expires.
Note This feature is not available in all Cisco IOS software versions; in addition, this is an
export-controlled feature. Check to make sure that the Cisco IOS software you are using supports
baseline privacy.