Cmts Cpe Basico

BSR64000 Operations I
Jesus Barrios
Systems Engineer
H&NMS Latin America
Motorola Document Classification, File Name, Rev Number

Add additional legal text here if required by your local Legal Counsel.
MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office.
All other product or service names are the property of their respective owners. © Motorola, Inc. 2005
Introduction
Implementing the BSR for Basic Data Services

Introduction is an instructor-led course presented by Home
& Networks Mobility to employees, customers
and partners. This two day course is intended
to prepare students to install, configure and
deploy the Motorola Broadband Services
Router 64000 (BSR64000) in distributed CATV
environments.

Course Overview
Attendees will learn how to install and configure

Course BSR64000s to provide basic data services.
Overview As this is an introductory course, some time will
be spent on communication theory and the
background technologies that are integral to
this implementation.
This course is designed for CATV operator
Headend technicians and network engineers
responsible for implementing high-speed data
over cable services.

Course Objectives
Upon successful completion of this course, you
Course will be able to perform the following tasks:
Objectives • Describe the process involved in moving
data from Customer Premises Equipment to
the CMTS.
• Explain the transport mechanisms used to
deliver data services in a CATV environment.
–Differentiate addressing schemes used
in a cable data architecture.
• Configure the BSR64000 to provide basic
transparent IP services from CPE to CMTS.
–Successfully register cable modems
with the BSR providing basic data
services.
• Troubleshoot, and when possible, resolve
basic implementation-related issues.
Prerequisites
To fully benefit from this course, you should

Prerequisites already possess certain prerequisite skills
and knowledge.
This includes:
• A familiarity with CATV systems and IP data
networking

General Information
Please: Ô More:
Turn off cell phones or put ¾ Class 9:00 – 5:00
them in vibrate mode
Ask lots of questions
Share your experiences
Work with your teammates

AGENDA
• DOCSIS Overview
• BSR64000 Hardware and Features
• Basic configuration
• Modem registration
• CM5101 HW and Features
• Basic Monitoring and Troubleshooting
• Software Upgrade
• Password Recovery
• Basic IP Networking

DOCSIS Overview

DOCSIS Block Diagram
DOCSIS (Data Over Cable System Interface Specification)
Principal function of the DOCSIS cable modem system is to transmit

internet protocol (IP) packets transparently between the headend and
the subscriber location
The DOCSIS System Consists of;
Cable Modem Termination System (CMTS) located at the headend
Cable Network
Cable Modem (CM) located at the customer premise and connected to

Customer Premise Equipment (CPE)

DOCSIS Reference Architecture
DISTRIBUTION HUB OR HEADEND
DS TV signals
LOCAL
SERVER
Cable
COMBINER
FACILITY OTx
Modem
Termination CMTS Cable Modem
System Termination FIBER
Network Side CABLE DS = >54 MHz
MOD System
TERMINATION
NETWORK
Interface Downstream PLANT

(CMTS-NSI) F.O.
LAN
RF Interface
NODE
DEMOD Cable Modem
SPLITTER
Internet Backbone
to RF Interface CM CPE
ORx
OSS COAX
Interface Baseline Privacy
Network
Cable CABLE
(OSSI) Interface (BPI) PLANT
Modem
OPERATIONS SECURITY & Termination
SUPPORT ACCESS US signals System
US = <42 MHz
SERVER CONTROLLER Upstream
RF Interface
Cable Modem to
REMOTE SERVER FACILITY CPE Interface
(CMCI)

DOCSIS 1.0
• Product interoperability across available CMTS’s
• 64 and 256 QAM modulation (downstream) formats
• 6-MHz occupied spectrum coexists with all other signals on the cable
plant
• Variable Variable-depth interleaver supports both latency-sensitive and
insensitive data.
• The features in the upstream direction are as follows:
– Flexible and programmable CM under control of the CMTS
– Frequency agility
– Time division multiple access
– QPSK and 16 QAM modulation formats
– Support of both fixed fixed-frame and variable variable-length
PDU formats
– Multiple symbol rates
– Programmable Reed-Solomon block coding
– Programmable preambles

DOCSIS 1.1
• Packet Classification, based on fields in the Ethernet, IP, and
UDP/TCP headers, into a Service Flow
• Service Flow association with a DOCSIS Service Identifier
• QoS MIBs
• Concatenation
• Fragmentation
• Enhanced MAC scheduling / Unsolicited grants
• Real time polling / Non real time polling

DOCSIS 1.1
• Payload Header Suppression (for increased bandwidth efficiency,
particularly in the case of relatively small Voice-over-IP [VoIP] packets)
• Priority Queuing (e.g. Weighted Fair Queuing) at the CMTS
• BPI+ (Base Line Privacy - Plus)

– Adds digital digital-certificate based CM authentication to the
key management protocol
• IGMP (Internet Group Management Protocol) Management

DOCSIS Interoperability
• Can DOCSIS 1.0, 1.1 and 2.0 Modems Can Be Used in the Same System?
– DOCSIS 2.0 is backward compatible with DOCSIS 1.0 and 1.1
– DOCSIS 2.0 CMTS’s are required to support both DOCSIS 1.0 and 1.1
cable modems
– DOCSIS 2.0 modems must be able to register as a DOCSIS 1.0 or
DOCSIS 1.1 modem with a CMTS.
• Can DOCSIS 1.0 ,1.1 and 2.0 Modems Used on the Same Upstream Channel?
– Yes.
– Managing 1.0, 1.1 and 2.0 modems on the same upstream channel is a
more complex task for the CMTS
– DOCSIS 2.0 adds enhancements to mixed networks

DOCSIS Downstream
The DOCSIS PHY Layer Specification Uses a Modulation and Coding
Scheme Defined by ITU J.83 Annex Annex-b, for the Downstream:
– Modulation Type: 64-QAM or 256-QAM
– Maximum Data Rate: 27 Mbps at 64-QAM, 38 Mbps at 256-QAM
– Symbol Rates: 5.057 Msym/s at 64-QAM, 5.361 Msym/s at 256-
QAM
– Bandwidth: 6 MHz channel
– Frequency Range: 88 - 860 MHz (30 kHz min. step size)
– Transport Protocol: MPEG-2
– Forward Error Correction (FEC) encoding: outer Reed-
Solomon and inner Trellis code
– 10E-8 BER with a carrier to noise ratio (Es/No) of:
23.5 dB for 64 64-QAM
30 dB for 256 256-QAM

Downstream FEC Interleaver
• Forward Error Correction is fixed in the downstream
• Downstream supports a variable depth interleaver which

will enhance the performance of the downstream FEC

DOCSIS 1.1 Upstream
• Upstream Physical (PHY) Layer in the DOCSIS
Specification:
– Modulation Type: 16-QAM or QPSK
– Frequency Range: 5 - 42 MHz (edge to edge)
• Range of available data rates and bandwidth used:

Frequency and Time Division
• Frequency Division Multiplexing: upstream divided into
channels
• Time Division Multiple Access: each channel is divided into
intervals and the channels bandwidth is MAPed over time
“MAPed”

Transmission Characteristics
• Burst Profile Attributes (Upstream Channel Descriptor) for
DOCSIS 1.x
• CMs must be able to change Transmission Characteristics
on the fly – switching burst profiles with no reconfiguration
time between bursts for some parameters
– Modulation
– Differential encoding
– FEC
– Scrambler
– Preamble length
– Max burst

Burst
A burst is composed of preamble, data (plus FEC) and guard
time
A burst begins on a mini slot boundary and ends on a mini
slot boundary
Burst
Ramp Up Ramp Down
Guard Time
Preamble Last FEC
Parity Symbol
Mini-Slot Boundary
Ramp Up

Mini-Slot
• The upstream bandwidth is a stream of mini-slots
• Mini-slots are in units of 6.25 microseconds (ticks)
• The size of mini mini-slot is configurable (bytes per mini-

slot)
• A mini-slot is the “unit of granularity for upstream

transmission opportunities”

FEC Codeword Length
On the upstream, the CM operates in fixed length codeword

for codeword blocks and shortened codeword for the last
block.
Guard
Preamble Codeword 1 Codeword 2 Time
FEC
Data Parity

MAC Layer Protocol
• How the upstream and downstream bandwidth is divided into channels
• How the upstream channel is divided into transmission opportunities
• How the upstream channel is synchronized
• How a CMTS determines the timing for each CM
• How the CM determines its transmitter settings
• How the CM sends data

Up and Downstream Channels
• Frequencies for the Upstream and Downstream
channels
5-42 MHz Upstream 88-860 MHz Downstream
Channel MAC Layer

Interval
Burst
Mini-Slot PHY Layer
Time Tick

Upstream Channels
• The upstream spectrum is divided into channels
• Channel width depends upon symbol rate
• A particular channel must maintain the same

symbol rate for the modulation mode
• Upstram channels are mapped so that virtually all

the bandwidth is accounted for

Upstream Bandwidth Allocation
MAPs are short MACmessages sent by the CMTS on the
downstream that tell all the modems on a particular
upstream channel when they can transmit
Basic mechanism for assigning upstream bandwidth
MAP 1 Downstream Data MAP 2 Downstream Data

Information Elements

Upstream Bandwidth Allocation
• MAC Layer Protocol
• MAP’s are short MAC messages sent by the CMTS on the
downstream that tell all the modems on a particular
upstream channel when they can transmit
• Basic mechanism for assigning upstream bandwidth
Downstream Channel
MAP 1 Downstream Data MAP 2 Downstream Data
Time

MAP

Map Transmission
Map must be transmitted in time to propagate across the
physical cable and be received and processed by the CMs.
– may be transmitted considerably earlier than its
effective time
– number of mini-slots may vary from map to map to
provide a balance of network utilization and latency
under varying traffic loads
– limited to 240 information elements
– even though several maps may be outstanding the
sum must not exceed 4096 minislots
– map frequency on a lightly loaded system: about
500 maps per second

System Timing
• Global reference timing: CMTS sends SYNC MAC
messages on the downstream
• CM uses this reference to align mini-slots and Intervals
– contains timestamp that exactly identifies when the
CMTS transmitted the message
– CM adjusts its local clock accordingly
– SYNC interval: e.g. sent every 200 msec.
Downstream Channel
MAP 1 Sync Downstream Data Sync Downstream Data
Time
Ranging
• Determining the CM-CMTS delay
• Must be accurate to 1/2 symbol
• Used to synchronize the upstream transmissions in the
TDMA scheme
CMTS HFC CM
Time-Slot Time-Slot
Upstream Channel
Rng- Rng-
Req Req
Time
Propagation Delay Initial Maintenance
Interval
Periodic Ranging
Ongoing ranging performed periodically by CM in Station
Maintenance Interval
– Shorter interval
– Opportunity is reservation based (unicast to a single

CM)
CMTS effectively polls the CM to range by sending a MAP

with a Station Maintenance IE addressed to the CM

Upstream Channel Descriptor
Describes the characteristics of the upstream channel
(one for each channel)
– Minislot Size, Configuration Change Count
Channel Channel-wide parameters
– Symbol rate, center frequency, preamble pattern
Burst Descriptor per Interval
– Modulation, Differential Encoding, FEC parameters,
Scrambler parameters, Maximum burst size
Downstream Channel
MAP 1 Sync Downstream Data Sync Downstream Data UCD
Time
SID’s
Service ID (DOCSIS)
– provide device identification and class class-of-
service management
– basis for mapping bandwidth and class class-of-
service within a MAC domain all SID must be unique
– one or more SID’s may be assigned to each CM
– negotiated during registration
– 14 bits
SID 1
Mac Addr SID 2
SID 3
CMTS HFC CM

More about SIDs
• DOCSIS defines four types
– Unicast
– Multicast
– Broadcast
– Null
• Initialization SID: used by the modem before it has successfully ranged (SID 0)
• Temporary SID: for admission control
• Primary SID: assigned during registration

DOCSIS 2.0
• Triples the maximum upstream capacity to 30.72 Mbps
• Advanced PHY Layer Upstream
– Advanced Time Division Multiplexing (ATDMA)
– Synchronous Time Division Multiplexing (SCDMA)
– Bandwidth:
• TDMA: 160, 320, 640, 1280, 2560, and 5120 kHz
• SCDMA: 1280, 2560, and 5120 kHz
• ATDMA Modulation: QPSK, 8QAM, 16QAM, 32QAM, 64QAM, and 128QAM
• SCDMA Trellis-Coded Modulation (TCM) -QPSK, 8-TCM, 16-TCM, 32-TCM, 64-TCM & 128-TCM
– Since Trellis-Coded Modulation use a set of redundant bits, 128-TCM = 64-QAM for
Information Rate
• Motorola unique modulation mode:
– 128 QAM & 256QAM

DOCSIS 2.0 Overview
Triples the maximum upstream
capacity over DOCSIS 1.1
–Enables transmission across a 6.4

MHz channel upstream
–Increases upstream throughput to

30.72 Mbps by using 64 or 128 QAM
and Trellis Coded Modulation (TCM)
DOCSIS 2.0 cable modems utilize

fewer timeslots to transmit a given
amount of bandwidth than DOCSIS
1.X cable modems
–Frees timeslots that can then be

shared by other modems, which
increases their throughput

DOCSIS
• DOCSIS 1.0 (High High-Speed Internet Access)
– Specification first issued on March 26, 1997
• DOCSIS 1.1 (Telephony, Gaming, Streaming Media)
– Specification first issued on March 11, 1999
– Quality of Service (QoS), service security, operations tools
– Backward compatible with DOCSIS 1.0
• DOCSIS 2.0 (Capacity for Symmetric Services)
– Specification first issued on December 31, 2001
– More upstream capacity than DOCSIS 1.0 and 1.1
– Improved robustness against interference (A A-TDMA and S S-CDMA)
– Backward compatible with DOCSIS 1.0 and 1.1
• DOCSIS 3.0 (Channel Bonding)
– Specification first issued on August 4, 2006
– Bonding together Downstream & Upstream Channels to create higher
bandwidth Logical Channels

Certified or Qualified
• Cablelabs Certified: consumer products e.g. CM
• Cablelabs Qualified: CMTS
• Packet Cable Certified: MTA, EMTA
• Packet Cable Qualified: e.g. Softswitch

BSR 64000 HW & Features

BSR 64000 Applications
Tiered Data Services (Residential Basic, Premium and Advanced)
DOCSIS 1.1 QoS, Motorola SmartFlow QoS – DOCSIS 1.0
Multiple ISP Support – Separate “Virtual” or Physical Networks
MultiProtocol Label Switching (MPLS), Policy Based Routing (PBR),
SmartFlow QoS
Commercial Services – Service Level Agreements with Tiered
Services; VPNs
DOCSIS 1.1 QoS, SmartFlow QoS, MPLS based VPNs
Voice – Residential Primary Line and Commercial
PacketCable 1.x, DOCSIS 1.1, High-Availability

BSR 64000 Advanced Features
Distributed, Hardware Based Filtering and Forwarding
Wire Rate Performance and Low-Latency even with Access Control Lists
No CPU “Bottlenecks”
SmartFlow QoS with Per-Flow Queuing
Traffic Prioritization, Fair Sharing of Bandwidth
Tiered Data Services - DOCSIS 1.0 & 1.1 Modems
Intelligent Edge Router
Scalable and Robust Routing Protocols (BGP4, OSPF, RIP, Multicast, MPLS)
Policy Based Routing – Layer 4 Packet Inspection
Advanced Spectrum Management
Frequency, Modulation and Bandwidth Agility
Maintain Service Availability in Changing RF Environment
High-Availability Architecture
All System Components are Redundant
1:N RF Redundancy with Internal RF Switch

BSR 64000 Overview
Carrier-class CMTS Router
SmartFlow hierarchical per-flow queuing
Content-aware, policy-based routing (layer 4)
16 Slot NEBS-compliant chassis with passive midplane
Up to 12 CMTS cards: 1:4, 1:8, 2:8
Redundancy:
CMTS cards - 1:N
Supervisory Routing Module - 1:1
Network Interface Module - 1:1
No single point of failure!
64 Gbps switch fabric

BSR 64000 Overview
Cisco-like CLI for ease of migration
Multiple Core Network Interfaces:
8-port 10/100 Ethernet
1-port Single/Multimode Gigabit Ethernet
Robust Routing Support:
Support for BGP-4, OSPF-2, RIP-2, DVMRP, PIM, MPLS
DOCSIS 1.0, DOCSIS 1.1, DOCSIS 2.0 qualified
Interoperable with all DOCSIS qualified modems, Voice Gateways
and MTA’s

Hardware Architecture
NIM1 NIM2 NIM3 Network Interface Modules

Wire rate forwarding per interface module
Fully redundant route calculation/

Supervisory
Supervisory Supervisory
Supervisory
Resource
Resource Resource
Resource
64 Gb/sec bi-directional non-blocking
Module
ModuleAA Module
ModuleBB switch fabric in Supervisory Resource
Module (SRM)
Separate 100 MB/sec Control Bus
DOCSIS1 DOCSIS2 DOCSIS11 DOCSIS13 High density DOCSIS modules

1xN redundant
1XN RF Switch
Automatic RF line switchover
RF
RF11 RF
RF22 RF
RF33 RF
RF44 RF
RF1313 Primary Midplane Connection
Secondary Midplane Connection

BSR64000 Core Architecture
All packet forwarding within the BSR64000 is handled in hardware (FPGAs).
FPGAs (Field-Programmable Gate Arrays) are a type of logic chip that
can be programmed
An FPGA is similar to a PLD (Programmable Logic Device)
PLD is an integrated circuit that can be programmed to perform
complex functions
A PLD consists of arrays of AND and OR gates
PLDs are generally limited to hundreds of gates
FPGAs support thousands of gates
Deterministic latency
Since forwarding is in hardware, the throughput does not change when additional
features are enabled
i.e. access-lists, policy routing, MPLS, etc.
All packets destined for (or sourced from) the BSR are processed separately from
user traffic that traverses the BSR
Telnet, SNMP, SSH, Ping, etc.

CHASSIS

SRM
Management and control

functions
Serial console port and
Management Ethernet
Alarms port
Timing Port

CMTS
1x4
1x8
2x8 ATDMA
2x8 DOCSIS 2.0

HSIM/NIM
8x10/100 Ethernet
GIG-E
Monomodo
Multimodo

QoS: Class-based Queuing RED
Legacy CMTS with NO per-flow queuing penalize ALL users in a congestion situation
Output
Forwarder/ Queues
Classifier Scheduler
Queues
Incoming Delivering
Packets Packets
Entire Class is Penalized not just

Misbehaving (Green) Flow

QoS: Per Flow Queuing - Longest Queue Push Out
Queues
Forwarder/
Scheduler
Classifier
Incoming Delivering
Packets Packets
Misbehaving Flow can be

Selectively Penalized

Service Classes
Lowest priority Max
Assigned
Bandwidth
Best Effort
Flow BE4
SFs (no 50%
Reserved
Flow BE3
Rate)
Flow BE2
Flow BE1
Business Class
SFs (Reserved Flow CIR4
Rate w/ 40%
Overbooking) Flow CIR3
Flow CIR2
Flow CIR1
Voice Class
SFs Flow CBR2
Flow CBR1
10%
(Reserved,
No overbooking) Highest priority

BSR64000 High Availability
SRM: 1+1 Redundancy

Warm Standby: redundant SRM restarts
Hot Standby: redundant SRM maintains routing
state
1 1 1 1 1 1 HSIM: 1+1 Redundancy
0 1 2 3 4 5 6 7 8 9
0 1 2 3 4 5
APS of POS HSIM
Normal IP routing on redundant links
RF Switch
CMTS: 11 + 1 Redundancy
Spare module in slot 6 can backup any of 12
Primary CMTS modules in slots 0-5 or 9-14.
With 2 HSIMs, 11 slots left for CMTSs.
Backplane RF switch connects HFC TX and RX
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMTS
Primary CMS
Spare CMTS
signals from the primary transition card to the

HSIM
HSIM
SRM
SRM
Spare CMTS module card.

Hot Standby: Spare CMTS maintains modem
registration

CMTS Redundancy
N:1 redundancy for CMTS modules
One standby CMTS per chassis to protect up to 12 CMTS
modules
Automatic detection of CMTS failure
Automatic switching from failed CMTS module to spare CMTS
module
All Cable Modem connections will be preserved and all CM
registration and QoS parameters will be preserved
C C C C C
M M M M M Standby
T T T T T
S S S S S
Midplane
I/O I/O I/O I/O Passive I/O modules

CMTS Redundancy: Normal Operation
Front module Midplane Rear module

(active) (cabling)
CMTSspare no physical interfaces

spare
I/O module
CMTS1
I/O module
CMTS2
I/O module
CMTS3
I/O module

CMTS Redundancy: After Switchover
protect # 2
CMTSspare spare
I/O module
CMTS1
I/O module
CMTS2
I/O module
CMTS3
I/O module
front module midplane rear module

(active) (cabling)

CMTS Switchover Conditions
Automatic Switchover Conditions
Physical de-insertion
On CMTS card reset (via recessed switch)
On CMTS operator reset
Primary Standby Via “reset slot N” CLI command
CMTS CMTS On upstream converter failure
Software infinite loop
Software crash (e.g. address/data
exception)
Forced Switchover Condition
“redundancy force-switchover cmts N”
causes the CMTS in slot N to switchover
to a redundancy CMTS.
“redundancy force-switchover cmts 6”
causes a giveback from the spare CMTS
in slot 6 to the primary CMTS for which it
had taken over.
Auto switchover NOT done on
Mass modem deregistration
BSR 64000 Load Balancing
3 Phases:
Static Upstream Load Balancing
Dynamic Upstream Load Balancing
Dynamic Downstream Load Balancing

Static Upstream Load Balancing
Data-only; will not support Voice-call Load Balancing

Registration-time Load Balancing
Spectrum Groups created binding US interfaces
CM’s balanced across US at Registration time
Load Balancing only with in single MAC Domain (on a card)
CLI/SNMP Command to re-balance CM’s across Spectrum Group:
Uses UCC (Upstream Channel Change) DOCSIS command to force change
Based only on number of CM’s
Ex. If on US has 20 and the other has 40 then 10 are moved to balance US’s.
Not based on bandwidth, Voice & Data, ISP A or B, or special options
Semi-Dynamic
Automated script could do balancing on a regular basis

Dynamic Upstream Load Balancing
Dynamic Upstream Load Balancing based on:

Number of CM’s
Bandwidth (UGS & non-guaranteed traffic)
Voice & Data
Policy-based Solution:
Spectrum Groups created binding US interfaces
Single MAC Domain
Uses UCC-DOCSIS 1.0, DCC (Dynamic Channel Change) DOCSIS 1.1
command to force change
Rebalancing based upon US addition/deletion
No Voice call movement while in progress
CLI & SNMP Management
RF Redundancy Support

Dynamic Downstream Load Balancing
Dynamic Downstream Load Balancing based on:

Number of CM’s
Bandwidth
Voice, Data
Features:
Spectrum Groups created binding DS interfaces
Uses DCC DOCSIS 1.1 command to force change
Span multiple MAC Domains/ Cards
CLI & SNMP Management

BSR 2:8 Advanced Spectrum Mgmt
RF Impairment Analysis
Plant Characterization – Maintenance using Advanced Spectrum
Management
The MOTOROLA BSR-64000 2:8 CMTS offers a 9th Receiver
that provides the ability to transparently monitor the entire
Return Path Node (NO THROUGHPUT Loss resulting from
measurement performed)
ADVANCED SPECTRUM MANAGEMENT CAPABILITIES

MICRO-REFLECTIONS
AMPLITUDE DISTORTION
GROUP DELAY DISTORTION
COMMON PATH DISTORTION
INGRESS NOISE
IMPULSE NOISE ESTIMATION

BSR 64000 2:8 CMTS module
Power Cvrs
PowerPC
Net Proc
MAC
Chips
Receivers
9th Receiver
8U
ps
tre
a m
RF
UpConverter

BSR 64000 Product Status and
Roadmap

BSR 64000
Consumer Entertainment Roadmap
Solutions
BSR 64000
Release 4.2
• DOCSIS 2.0 – ATDMA, SCDMA, Logical
Channels, Redundancy
• Dynamic Load Balancing
• Hitless Software Upgrade Release 4.3 – Limited Functionality
• ACL HW - Port Ranges, Port > and < FCS: June 2006
• DOCSIS Settop Gateway • 2:8 Pre-DOCSIS 3.0 Channel Bonding with SB6100
• PacketCable Multimedia (PCMM) • 2:8 Data Path Acceleration
• Higher-speed SRM Release 4.4
• OSPF Graceful Restart
• OSPF Point-to-point Extension
FCS: June 2007
• OSPF Router LSA Enhancement • Release 4.3 & 4.2.2
• Routing Sub-Interface Support • Full Function – Channel Bonding
• ACL Match Counters • DOCSIS 3.0 Channel Bonding
• Hardware support for IP-in-IP Tunnel (SB6101)
• J-DOCSIS, 2:8 55 MHz US Support • Settop Box CM Support (7K/2:8)
• BGP/MPLS VPN Voice VPN Support • IPDR (DOCSIS 2.0 plus CPE
• Service/Provisioning VPN's Objects)
• Layer-2 VLAN Tagging • Multicast HW Support (non-Red)
• Remote Query • 2:8 Adv Spectrum Mgmt
Release 4.2.1 • DLB Trigger Function
FCS: November 2006 • Remote Query sysDescr Change
• Daylight Saving Time Adjust
• Routing ++ (SSM, PIMv2,
• TACACS: Encrypt Server Key
IGMPv3, IP Mcast MIBs)
• DSG - CLI for Sub Mgmt
• CableLabs DSG ECN’s
• Channel ID ECN
Release 4.2.3
• UGS MIB Support
• 911 Voice Preemption FCS: January 2007
• SNMP Trap-CM IP address • Ether-Flex NIM
• RIP MD5 - Multiple Keys • Tagged Sub Interfaces
• Comcast PowerBurst
2Q06
2Q06
Motorola Document Classification, File Name, Rev Number 3Q06
3Q06 4Q06
4Q06 1Q07
1Q07 2Q07
2Q07
BSR 64000 Roadmap
Consumer Entertainment Solutions
BSR 64000
Release 5.0 Release 6.0
FCS: October 2007 FCS: Q4, 2008
• Downstream TX-Flex HW Module M-CMTS Upstream RX-Flex
• 8 RF Ports, 4 QAM channels per port Module
• Hitless RF Redundancy • 8 Physical Port/ 4
• DOCSIS 3.0 Support Channels per Port
• Channel Bonding, Multicast, IPv6- • Hitless RF
ready Redundancy
• TX-Flex Phase 1 Software • DOCSIS 3.0 Support
• Legacy CM Support • Upstream Channel
• 4 DS DOCSIS 3.0 Channel Bonding Bonding,
• No Redundancy Multicast, IPv6,
• MTA Forced Reg on “Protected” 2:8 AES
• IPv6 on HSIM
Release 5.1
FCS: Q2, 2008
• TX-Flex Phase 2 Software
• DOC 3.0 Channel Bonding ++
• TX32 Redundancy
• M-CMTS DOCSIS Core Engine
• IPv6 for CM on SRM

2Q07
2Q07 3Q07
3Q07
4Q07
4Q07 1Q08
1Q08 2Q08
2Q08 3Q08
3Q08 4Q08
4Q08
Basic Configuration

Overview
The BSR2000 acts a DOCSIS qualified Cable Modem

Termination System (CMTS)
It acts as a connection between r/f and wide area
networks

Overview (cont.)
BSR64000 can act as an aggregator for BSR2000s providing

connectivity between hubs and the headend
Overview (cont.)
The Command Line Interface (CLI) is Cisco-compatible
Allows for ease-of-use
Interoperability with legacy infrastructure
Supports full scripting capability
ASCII-formatted command files can be
uploaded, downloaded, and executed
Connection referred to as an EXEC session

Console Connection
The BSR2000 uses Command Line Interface

(CLI) as a local user interface
Local connectivity is accomplished using a an RJ-45 to DB-9 adapter and a

terminal program on a p.c.
Remote connectivity to the BSR2000 is handled through telnet or SNMP
applications
This interface allows for configuration of the BSR2000

Command Line Interface
Two main EXEC modes
Both have different prompts
First is User Exec
Allows Limited access to BSR
No real configuration
Command prompt is hostname>
RDN> ?
cable
clear
cmts
…

Command Line Interface (cont.)
Second main EXEC mode
Privileged (also called Enabled)
Detailed look at BSR configuration
Configuration and debugging
Necessary in order to enter further configuration modes
Entered by specifying enable command in User EXEC
Command prompt is hostname#
RDN> en
RDN# ?
copy
debug
delete
…

User-Based Access
• Access based on username

Access-level dependant on user-privileges assigned
• Entered by specifying login <username> command in User EXEC
– Command prompt is hostname#
– Exited by specifying disable
RDN> login ispuser

Password:
RDN#
…

Monitoring and Managing User Access
show users
shows who is currently on the system
BSR2000# show users
Active connections
user group/privilege origin session
-----------------------------------------------------------------------------------------------------
enabled-user owner/rw console 0*
dao-ro isp/ro 198.112.190.57 1
dao-rw isp/rw 198.112.190.57 2
*unauthenticated* none/ro 198.112.190.201 3
…
logout
owner command to logout other users
BSR2000# logout session-id 2
…

Global Configuration EXEC mode
Allows for global configuration
Entered by specifying configure command in Privileged EXEC
mode
Command prompt is hostname(config)#
RDN> en
RDN# config
RDN(config)#
…

Interface Configuration EXEC mode
Allows for interface-level configuration
Takes precedence over global configurations
Entered by specifying interface <interface-type> <interface
identifier number> command in Global Config EXEC mode
Command prompt is hostname(config-if)#
Includes cable, Ethernet and loopback interfaces
RDN> en
RDN# config
RDN(config)# interface cable 0/0
RDN(config-if)#
…

EXEC Hierarchy
User EXEC
hostname> enable
Privileged EXEC
logout | exit | ^z
hostname# config
Global Config EXEC

hostname(config)# hostname(config)# interface
router [rip | ospf | bgp] [ethernet | cable | loopback]
<slot/port>
Router Config EXEC

hostname(config-rip | ospf | bgp)#
Interface Config EXEC
hostname(config-if)#

Command Line Help
Context Sensitive Help
Enter ?
Provides a list of commands
Completes a partial command
When typed after a command, provides arguments for that command
RDN> ?
cable Cable commands
clear Reset functions
RDN> en?
enable
RDN>en_
RDN>no ?
cable Cable commands
debug Turn on debug information

Advanced Editing Commands
Advanced Editing Commands
<ctrl> + key
Provides shortcuts to functions
<ctrl> + p
<ctrl> + b <ctrl> + f
<ctrl> + n

Output Modifiers
Output Modifiers act as filter to show commands
| (vertical bar) is the start of your filter
Filter type
begin – suppresses each output line until matching search string
exclude – suppresses all lines that match search string
include – display only those lines that include search string
Search string
A word or double quote string that is used by the filter
BSR2000# show running-config | begin interface

interface ethernet 7/0
no shutdown
ip directed-broadcast
…

Resetting to Factory Default Configuration
Ensuring a known state for initial configuration
delete nvram:startup-config
Deletes startup-config from non-volatile memory
Does not affect (active) running-config
Must power-cycle BSR to complete process

Running-Configuration
During operation, the BSR uses its running-config
Provides operational parameters
Device configurations
Changes to the running-config take effect immediately.
Changes to the running-config will be lost unless saved to
startup-config

Running-Configuration (cont.)
Configuration file can be located in places other than NVRAM
Initial configuration is through the console terminal
Telnet session
SNMP application
Can by downloaded to the BSR2000 from a TFTP (Trivial File
Transfer Protocol) server on the network

Running-Configuration (cont.)
Available from Privilege EXEC
show running-config
Can be shortened to sh run
show startup-config
Can be shortened to sh start
RDN# sh run
!
! Last configuration change at THU MAY 25 07:19:03 2000
!
hostname RDN
!
!
no service password-encryption
!
…

Initial Configuration
Basic configuration tasks:
Set network identity
Hostname
Interface I.P. addresses
System security
Define system login
Restrict access to Privileged EXEC
Enabling automatic password encryption
Configuring a warning banner
System management
Setting SNMP parameters
Configuring loopback I.P. address
Save running configuration
Initial Configuration (cont.)
Assign hostname
From the Global Configuration EXEC mode
hostname <new-hostname>
Should be unique
RDN> en
RDN# config
RDN(config)# hostname newhostname
newhostname(config)#

Assign interface I.P. address
From the Interface Configuration EXEC mode
ip address <ip-address> <subnet-mask>
Unique to each interface
newhostname> en
newhostname # config
newhostname(config)# int ethernet 5/0
newhostname(config-if)# ip address 192.168.100.69 255.255.255.0
newhostname(config-if)# exit

Configure security
Set Privileged EXEC password
enable password <password>
By default unencrypted
Can be read as plain text in configuration files
newhostname> en
newhostname# enable password newpassword
newhostname#

Configure security
Set remote access password
[no] password <password>
By default unencrypted
Can be read as plain text in configuration files
Must be configured in order for remote (non-
console) access
Enable password must also be set
Starts telnetd (telnet daemon)
Stopped when password removed
Adding or removing the telnet password has no effect on
existing connections
newhostname> en
newhostname# password newpassword
newhostname#

Remote Access
session-timeout configures how long a session can remain idle
console <0-30> – configures that timeout for the console (default
0)
telnet <0-30> – configures that timeout for each telnet session
(default 5)
access-class - restricts telnet access based on a standard
access-list
BSR 2000(config)# access-class 10 in

BSR2000(config)# ^z
BSR2000#show running-config | include access-list
access-list 10 permit 10.10.10.0 0.0.0.255
access-list 10 deny any
BSR2000#

Configure security
Enabling automatic password encryption
service-password encryption
Disabled by default
Encrypts all existing passwords
Automatically encrypts all new passwords
newhostname> en
newhostname# service-password encryption
newhostname#

Legal Protection
Warning banner for login access
Four primary goals:
Be legally sufficient for prosecution of intruders
Shield administrators from liability
Warn users about monitoring of system use
Limit useful information presented to an attacker

Banner Command
COMMAND HERE
Sample
WARNING!
This system is solely for the use of authorized personnel for
official purposes. You have no expectation of privacy in its
use and to ensure that the system is functioning properly,
individuals using this system are subject to having all of
their activities monitored and recorded. Use of this system
evidences an express consent to such monitoring and
agreement that if such monitoring reveals evidence of
possible abuse or criminal activity, system personnel may
provide the results of such monitoring to the appropriate
officials for investigation and possible prosecution.
Configure for system management
Assign loopback I.P. address
Up to 16 loopback addresses
From the Loopback Interface Configuration EXEC mode
ip address <ip-address> <subnet-mask>
newhostname> en
newhostname # config
newhostname(config)# int loopback 1
newhostname(config-if)# ip address 200.24.3.1 255.255.255.0
newhostname(config-if)# exit

Saving Running Configuration
Saving Running Configuration
CLI-based changes are to the running-configuration
Would be lost on next reboot
copy running-config startup-config
Can be shortened to copy run start
newhostname> en
newhostname# copy run start
newhostname#

Troubleshooting
Version information
show version
Can be shortened to sh ver
RDN> sh ver
…

Troubleshooting (cont.)
Interface configuration and statistics
show interfaces
Can be shortened to sh int
Can isolate specific interfaces
Specify interface as argument
sh int eth 0/0
Must specify port number (i.e., 0/0 is slot 0, port 0)
RDN> sh int eth 0/0
Ethernet 0/0 is up, line protocol is up
Hardware address is 0:29:b4:69:4:df
Internet address is 10.1.3.1/24
Half-duplex, 100 mb/s, 100BaseTX/FX
ARP Type: Arpa, ARP Timeout 01:00:00
Last input never, output 00:34:10
…
Troubleshooting (cont.)
Technical Support-Related Information
show tech
RDN# sh tech
…

CMTS Configuration
• IP Addresses
• Cable Interface
• BSR as DHCP Relay Agent
• Cable Helper
• MAC Domain

CMTS Interface Configuration
Basic configuration
tasks:
–IP Addresses and
Helpers
•Private Primary
•Public Secondary
–IP Helper Address or
–Cable Helper Address
»Cable Modem
»CPE
– Dhcp relay information
option

CMTS Interface Configuration
Basic configuration
tasks:
– Configure CMTS
Interfaces
• Downstream Parameters
– Center Frequency
– Modulation
– Unshut Interface
• Upstream Parameters
– Channel Channel-
Width
– Frequency
– Power Power-Level
– Modulation Profile
– Unshut Interface
Configuring IP Addresses
The primary IP address assigned to an interface will be used as the
Cable Modem gateway address
• From the Cable Interface Configuration EXEC mode
• This is the primary address and will be used as GIADRR for Cable
Modems

Secondary IP Address
A secondary IP address is configured for CPE subnet
• Will be used as GIADRR for CPEs
• From the Interface Configuration EXEC mode
ip address < ip address> <subnet mask> secondary

CMTS Subnet Configuration
192.168.5.254 150.110.8.1
Primary Subnet
CM
CM
CM
DHCP LAN SRM CMTS CM
Relay
Agent
Secondary Subnet
CPE
CPE
CPE
Giaddr CPE
192.168.100.1 for CMs
64.19.172.1 for CPEs
MOT:7A(config)#interface cable 0/0

MOT:7A(config-if)#ip address 192.168.100.1 255.255.255.0
MOT:7A(config-if)#ip address 64.19.172.1 255.255.255.0 secondary
MOT:7A(config-if)#cable helper-address 192.168.5.254 host
MOT:7A(config-if)#cable helper-address 192.168.5.254 cable-modem

MAC Domain
Collection of downstream and upstream ports that share a
common DOCSIS MAC protocol i.e. sync, ucd ucd, map
messages
– BSR2000 only has a fixed 1x4 single MAC Domain
downstream 0, upstream 0-3

CM Registration

DOCSIS Initialization Sequence
Cable Modem startup follows these general steps
RF link establishment
Scan downstream for 64 or 256 QAM modulated DOCSIS signal
Range upstream power level in QPSK or 16QAM modulation
IP setup
Contact DHCP Server and retrieve IP Addressing information along with TOD
and TFTP information
Establish Time of Day (TOD)
Retrieve DOCSIS/TFTP Configuration file
Baseline Privacy (if used)
Registration
Periodic Ranging
Data Transmission

DOCSIS Initialization Process
Link Establishment
Head End Interface Cable Modem

Clock Sync broadcast Scan DS for QAM
(1 per 1.63 msec) Wait for Clock Sync
Set signaling clock
Fails if no / bad downstream
UCD broadcast
US Channel Descriptor (UCD) Wait for UCD
US Channel ID & Minislot size Set US Channel Freq
(1 per 4 msec per US Channel)
Wait for MAP
MAP broadcast Look for shared request slots
Contains US time sharing info
(1 per 4 msec per US Channel) (available every 2 seconds)

Link Establishment (cont.)

Ranging Response Ranging Request
(Can be sent as needed) Only in shared request slots
US/DS frequency can be changed Use SID = 0
Contains temporary SID Wait for Ranging Response
Fails if none or bad upstream
or too many modems Adjust Clock (in 6.25 us Ticks)
Adjust Power (in 0.25dB steps)
Keep Alive
Wait for 1st Keep alive
Ranging Request
Ranging Response Now in allocated maintenance
(Can be sent as needed) slot
US/DS frequency can be changed
Link Established
Cable Modem HFC interface line protocol up, not On-line yet
Maintain Station Link using periodic Keep Alives
Link broken if missed 16 Keep Alives
Cable Modem Setup

MAP Broadcast Bandwidth Request
Contains US time sharing info Only in shared Request slots
(one per 4ms per US channel) Use Temp SID
(Needed for every use of US)
DHCP Response
Contains IP addr, Default GW,
TOD Server, TFTP Server addr,
DHCP Request
& TFTP/DOCSIS Configuration Now is allocated slots
file name
From a DHCP Server
ToD Response ToD Request

Contains Time of Day Now in allocated slots
RFC 868, not NTP
From a TOD Server

Cable Modem Setup (cont.)

TFTP Config File Transfer
Contains QoS Parameters TFTP Config File Request
Specifies Privacy, new software Send TFTP Config File name
download, etc. Now in allocated slots
From a TFTP Server
Registration Response
Contains assigned SID Registration Request
Modem registered Send QoS parameters
Fail if QoS not available Now in allocated slots
or Authentication failed
Cable Modem Online

Maintain Station Link using periodic Keep Alives
May need to hop upstream frequency due to noise (means link reset)

DOCSIS Initialization Process *
Baseline Privacy
Send Public Key
Generate Private KEK Request KEK
Key Encryption Key Decrypt KEK using Public Key
Encrypt KEK by Public Key KEK Life is 7 days
(Configurable 1 to 70 days)
Generate Private TEK Request TEK
Traffic Encryption Key Decrypt TEK using KEK
Encrypt TEK by KEK
TEK Life is 12 hours
(Configurable 30 min. to 7 days)
Encrypted Data Flow Enabled

Only Data inside IEEE 802.2 frame is encrypted using TEK
40/56 bit DES encryption is supported
Must re-establish keys within configured Grace Period before Life expiration

DOCSIS Server Types and Purpose
DHCP (Dynamic Host Configuration Protocol)
provides IP addresses for Modems and PC’s
TOD (Time of Day)

system time clock
TFTP (Trivial File Transfer Protocol)

modem configuration files

DHCP Server
Assigns IP addresses to client computers
addresses are “leased” to clients (Cable Modems or CPEs)

for a period of time
IP addresses can be reserved for specific clients or assigned

from “pools”
clients may be authenticated based on their MAC addresses
address may be assigned from different “pools” based on

extended options
TOD Server
Internet Time Protocol (ITP)

RFC 868
UDP and TCP requests honored on port 37
32-bit value defining the number of seconds since 00:00

(midnight January 1, 1900 GMT

TFTP Server
Trivial File Transfer Protocol

(RFC 1350)
UDP port 69
small and easy to implement
read and write to and from remote servers

DHCP Process
The following parameters can only be provided to the
Cable Modem (CM) from the DHCP server
IP address of the CM
IP address of the TFTP Server (for DOCSIS Configuration file)
IP address of the DHCP Relay Agent (if the DCHP server
resides on a different network than the CM)
TFTP/DOCSIS Configuration file name
Subnet Mask to be used by the CM
Time offset of the CM from Universal Coordinated Time (UTC)
Default IP Gateway
Time Server IP address
SYSLOG Server IP address
DHCP Process (cont.)
Cable Modem DHCP Server
DISCOVER:
IP Broadcast for DHCP service.
CMTS forwards packet to OFFER:
DHCP server Check CM MAC and
originating network, respond
with pre-configured lease
options
REQUEST:
IP broadcast for use of options
in OFFER from server ACKNOWLEDGE
(ACK):
Server commits to options
DHCP sequence complete. CM
now establishes TOD and
requests download of TFTP
configuration file defined in
the DHCP lease
DOCSIS/TFTP Configuration File
Configuration File Settings
The following settings MUST be included in the configuration file
Network Access Configuration Setting
End Configuration
The following settings are optional
Downstream Frequency
Upstream Channel ID
Class of Service o Service Flows
Baseline Privacy
Software Upgrade filename
SNMP Write-Access Control
SNMP MIB Object
Software Server IP Address
Maximum Number of CPE’s
SNMP IP Address (if applicable)
Vendor-Specific Configuration (if applicable)
DOCSIS/TFTP Configuration File
FileVersion = Version 5.0
03 (Net Access Control) =1 REQUIRED Parameter
18 (Maximum Number of CPE) =2
24 (Upstream Service Flow Encodings)

S01 Service Flow Reference= 3
S06 QoS Parameter Set Type =7
S07 Traffic Priority =0
S08 Max Sustained Traffic Rate = 1024000
S14 Max Concatenated Burst = 1522
S15 Service Flow Scheduling Type =2
S16 Request/Transmission Policy = 00 00 01 20
25 (Downstream Service Flow Encodings)

S01 Service Flow Reference= 1
S06 QoS Parameter Set Type =7
S07 Traffic Priority =0
S08 Max Sustained Traffic Rate = 1024000
29 (Privacy Enable) =1
43 (Vendor Specific Block)

S08 (Vendor ID)= 00 20 40
S125 (login:password) = 66 72 65 64 3a 63 53 52 53 63 64 64 51 64 52 ## fred:cSRScddQdR

CM5101 HW & Features

SB5101 Cable Modems
• Current generation DOCSIS 2.0 Certified Cable Modems
• Common Features
– Interoperable with DOCSIS 1.0, 1.1, 2.0
– USB and 10/100 Ethernet ports; External power supply
– Top-mounted standby button
– HTML Diagnostic Page
– Industry leading RF performance
• Key Differences
– SB5100 incorporates the BCM 3348, 4 SID DOCSIS chip
– SB5101, Broadcom based solution
– BCM3349 16 SID DOCSIS® chip
– Silicon tuner for quicker factory calibration
– Integrated upstream amp on all models
– eCOS vs VxWorks operating System
– Availability:
– SB5101 Now
– Transitioning from SB5120 to SB5101 in retail channel in Q2

SB5102 Cable Modem
• Competitive solution for 2H06
• Key changes from previous SB5xxx modems
• BCM3349KFBG
• Change to Internal PS with AC power cord, eliminate external
PS, reduced package size
• Eliminate the USB Port and USB Cable
• Eliminate the Standby button and associated LED
• Eliminate the CD-ROM (posting UG on line, use Quick
Reference Guide only for install directions)
• Common Features
– Interoperable with DOCSIS 1.0, 1.1, 2.0
– 10/100 Ethernet ports;
– HTML Diagnostic Page
– Industry leading RF performance
– Targeting CW45(6/8/06)/46 for DOCSIS 2.0 and ECW25/26
for EuroDOCSIS
– Availability:
– Q3/06
– Will run in parallel with the SB5101 through year end

Cablemodems SB5101
LED Function
Flashes during power-on self-test and changes to
POWER solid green
Flashes during channel scan and changes to solid
RECEIVE green
Flashes during upstream ranging and changes to
SEND solid green
Flashes during initial configuration and changes to
ONLINE solid green
On when Ethernet or USB ports active. Flashes to
LINK show activity
On when in Standby mode. All other LEDS except
STANDBY TEL 1 & 2 will be off.

Rear Panel SB5101
Número Función
Ethernet Port RJ45. For data transfer.
1 Connection to a Hub, Switch or Router
1
Windows only, For data transfer. This port can
2 2 not be used for a Unix, Linux or Mac computer.
3 HFC Port. For conection of the coaxial cable.
3 4 Power connector 12VDC.

Debugging CMTS and CM
Registration Process

Overview of the Process
• Find the Downstream
• Obtain Upstream Channel Parameters
• Perform Initial Ranging
• Establish IP Connectivity
• Establish TOD
• Get Configuration Parameters
• Register
• Establish Baseline Privacy
• Periodic Ranging
• Data Transmission
Find the Downstream
• Scan downstream channels
• Or use the last stored downstream channel
• Find SYNC messages and adjust system timing

Obtaining Upstream Parameters
UCD (Upstream Channel Descriptor) defines upstream and
downstream channel ID, modulation, channel width,
minislot size, and burst descriptor, in other words, how a
cable modem may transmit
MAPs identify who, what, and when a cable modem may

transmit (transmission opportunities)

Initial Ranging
• CM looks for an Initial Maintenance interval in the MAP
(contention interval)
• Uses IM as a request to join
• CMTS responds with IM reply with adjustments to system
timing, transmit power, temporary SID,and upstream
channel ID of receiver that the IM was heard
• CMTS send a Station Maintenance and addes the new CM
to its Scheduler

IP Connectivity
• CM sends a DHCP broadcast
• CMTS, as DHCP relay agent, forwards broadcast to DHCP server
• After a four four-way handshake, the CM receives:
– IP address and Mask
– Gateway IP address
– TOD server address
– Time offset
– TFTP server address
– Name of CM configuration file

Time of Day
• CM sends a request to TOD server
• Server responds with GMT
• CM sets its clock to GMT +/ offset +/-

Modem Configuration
• CM sends a request to the TFTP server for configuration
parameters:
– bandwidth specifications
– class of service parameters for each SID
– network access authorization
– upstream and downstream channels (overrides)
• Binary file stored on TFTP server
• File can be edited by text editor
• CM obtains configuration parameters after exchanging
security information

CM Registration
• CM send requests for Service Flows for all configured SIDs
and configuration parameters
• CMTS verifies authenticity using MIC
• CMST checks resources for each requested class of
service and nails up bandwidth for each flow and reserves
bandwidth for dynamic flows
• CMTS responds to CM with authorization to transmit

Establish Baseline Privacy
• Security is established for each flow
• CM sends request for encryption
• CMTS responds with public key
• CM request KEK
• CMTS send KEK encrypted with public key
• CM request TEK
• CMTS sends TEK encrypted with KEK
• CM send data encrypted with TEK
• 56-bit Data Encryption Standard (DES) encryption algorithms

Periodic Ranging
• CMTS sends unicast Station Maintenance opportunities to
CM
• Keep alive (after 16 misses CM deregistered)
• Fine tune power and timing

Data Transmission
• CM makes requests for bandwidth (transmission opportunities) using a
Request IUC or by piggybacking a request to previous data grant
• CMTS schedules a long or short data grant(s) to accommodate request
after assessing rate limit or bandwidth restrictions along with current
load
• CMTS sends acknowledgements of data grants received
• Contention intervals for data are rarely used
• Dynamic flows may receive unsolicited grants on a periodic basis
e.g. voice flow

Show Cable Modem
• Show cable modem
• Show cable modem…
– Cpe
– Detail
– Host
– Mac
– Maintenance
– Offline
– Phy
– Registered
– Stats
– Summary
– Summary Total

CM Connection States
State Description
Init(r1) Cable modem sent initial ranging
Init(r2) Cable modem is ranging
Init(rc) Ranging is complete
dhcp(d) DHCP Discover was sent by CM
dhcp(o) DHCP Offer was received
dhcp(req) DHCP Request was sent by CM
dhcp(ack) DHCP Ack was received; IP Address was assigned by DHCP Server
init(t) Time of Day (TOD) exchange was started
init(o) Option file transfer was started

CM Connection States (Cont..)
online Cable modem registered; enabled for data
online(d) Cable modem registered but network access for CM is disabled
online(un) Cable modem is registered, but no enabled data. Failure to verify modem's identity by BPI module
reject(m) Cable modem did attempt to register; registration was refused due to bad mic
reject(c) Cable modem did attempt to register; registration was refused due to bad COS
reject(r) Cable modem did attempt to register; registration was refused due to unavailable resource
online(pk) Cable modem registered; baseline privacy interface (BPI) enabled, and key encription key (KEK) is assigned
reject(pk) KEK modem key assignment is rejected
online(pt) Cable modem registered; BPI enabled, and traffic encryption key (TEK) is assigned
reject(pt) TEK modem key assignment is rejected
offline Cable modem is considered to be offline

CMTS and CM Power Levels
Cable Modem Combiner/
Termination System Splitter
45-63dBmV
TX
Video Fiber
Signals
RX Coax
0-14dBmV
Trunk
Amp
Cable Tap
Line
Modem
Extender
Splitter
PC or MAC
CM Rx Level: -15dB to +15dB
Home
Subscriber CM Tx Level: Dictated by CMTS
Television

Power Levels
• BSR transmit and receiver power
• BSR Cable modem transmit and receive power
• On site: use the built in web browser for Motorola modem
192.168.100.1
• Otherwise use SNMP Mib to get power levels
MOT#config
MOT(config)#interface cable 3/0
MOT(config-if)#show cable downstream 0
MOT(config-if)#show cable upstream 0

Upstream SNR
To check the upstream SNR

Password Recovery
(LAB)

Password Recovery
Password recovery is a serious issue
– Requires a system reboot to accomplish.
– Reset the system
reload
– Interrupt the boot process process by depressing the enter key several times until
you see the bootrom prompt and enter c
[ RDN BSR Bootrom ]: c
takes you into config mode
– Depress the enter key until you get to flags field and enter 0X10
flags (f): 0x2000 0X10
Then depress <cr cr> until you get back to the bootrom prompt
– At the bootrom prompt
[ RDN BSR Bootrom ]: @
This will cause the BSR64000 to continue it it’’s boot
– Will boot without loading the startup startup-config
– Copy startup startup-config to running running-config
copy start run
– You will have to be in Privileged EXEC to do this
– Add new passwords
– Reload system again
– Use interrupt procedure to change flag back to 0x00
Software Upgrade
(LAB)

Basic IP Networking

What is Internet Protocol?
•What is internet Protocol

•De facto standard
•Most widely used protocol in the world
•HISTORY
•Started 1969
•Adopted 1980 official internet Std.
•Why use IP?

•Most popular Layer 3 Standard
•Gain access to the internet

How does it stack up?
Application Telnet FTP HTTP TFTP DHCP SNMP
Presentation
Session
Transport Transmission Control Protocol User Datagram Protocol
Network ICMP IP ARP/RARP
Datalink
Any Physical and Datalaink Layer Protocols such as
Physical Ethernet, PPP, SONET, RF Broadband
OSI Model TCP/IP Stack

IP Header Format
0 4 8 16 31
Version IHL Type of Service Total Length (in bytes)
Identification Flags Fragmentation Offset
Time to Live Protocol Header Checksum
Source IP Address
Destination IP Address
Options (if any) Padding
DATA................

TCP Header Format
0 4 8 16 31
Source TCP Port Number Destination TCP Port Number
Sequence Number
Acknowledgment Number
Offset Reserved Flags Window Size
TCP Checksum Urgent Pointer
Options (if any) Padding
DATA................

UDP Header Format
0 16 31
Source UDP Port Destination UDP Port
Length Checksum
Data............

IP Datagram Format
# Bytes 8 6 6 2 Variable 4
Type
Preamble Dest add Source add Data FCS
0800
MAC Address
# Bits 0 4 8 16 31
Version Header Type of
Length Service Total Length
Identification 0|1|2 Fragment

IP Flags Offset
Header Time to Live Protocol Header Checksum
Source IP Address
Destination IP Address
IP Options (if any) Padding
DATA
Understanding Binary
Base2
27 26 25 24 23 22 21 20
128 64 32 16 8 4 2 1
1 1 1 1 1 1 1 1 = 255
0 1 1 0 0 1 0 0 = 100

IP Address Format
32 bits
172 16 141 129

10101100 00010000 10001101 10000001
8 bits 8 bits 8 bits 8 bits
32 = 4.2 billion addresses for IPv4

0-255 (256 bit positions)
4 Octets (bytes)
Dotted decimal notation/Binary notation
Class B (How do we know?)
Default Masks
Class A N H H H /8
255 0 0 0
Class B N N H H /16
255 255 0 0
Class C N N N H /24
255 255 255 0
N = Network
H = Host
Default Mask Example
Address:
172 16 141 129 /16
Mask:
11111111.11111111 00000000.00000000
255 255 0 0
Network:
172 16 0 0

Class Origin (Let’s Calculate!)
27 26 25 24 23 22 21 20 IP Address Class is determined

By the value of the first 3 bits in
128 64 32 16 8 4 2 1 The first byte of the IP Address
CLASS A 00000001 1
01111111 127 (loop back)
CLASS B 10000000 128

10111111 191
CLASS C 11000000 192

11011111 223
Networks and Hosts
• Class A 0nnnnnnn.h.h.h 255.0.0.0
27-2=126 networks 224-2=16,777,214 hosts
• Class B 10nnnnnn.8n.h.h 255.255.0.0
214 = 16,384 networks 216-2=65,534 hosts
• Class C 110nnnnn.8n.8n.h 255.255.255.0
221 = 2,097,152 networks 28-2= 254 hosts

The Need for Address Resolution
192.168.10.1 192.168.10.2 192.168.10.3
00-00-0e-11-11-11 00-00-0e-22-22-22 00-00-0e-33-33-33
B C
A
192.168.10.0 Network
•Each Network Interface Card (NIC) has a unique MAC address.
•The Ethernet segment shares the same Network Address
•Each Host Interface (Computer running the IP Protocol) has a Unique
IP address.
•The MAC address of the receiving station is needed to move the frame
across the Ethernet segment. Mapping must occur between the IP and
MAC addresses.
Address Resolution Protocol (ARP)
PURPOSE
•Obtain the MAC address for the Destination IP host
•MAC Frame Type code (806)
MECHANISM
•ARP Request – Source sends to broadcast address
•ARP Reply – Destination returns it’s MAC address

ARP Request
192.168.10.1 192.168.10.2 192.168.10.3

00-00-0e-11-11-11 00-00-0e-22-22-22 00-00-0e-33-33-33
B C
A
My IP address
I’ll ignore that, I’ll send an ARP
Broadcast
Not my IP address response
192.168.10.0 Network
What is the
MAC address
of
192.168.10.3?

ARP Reply
192.168.10.1 192.168.10.2 192.168.10.3

00-00-0e-11-11-11 00-00-0e-22-22-22 00-00-0e-33-33-33
B C
A
Unicast to 192.168.10.1
192.168.10.0 Network
My MAC address is
Thanks! 00-00-0e-33-33-33
Now I can send I learned your address
the frame from your broadcast.
Thanks!

Host Addresses
172.16.2.2 10.1.1.1
10.6.24.2
E1
172.16.3.10 E0 10.250.8.11
172.16.2.1
172.16.12.12 10.180.30.118
Routing Table
172.16 . 12 . 12 Network Interface
Network Host 172.16.0.0 E0
10.0.0.0 E1
Determining Available Host Addresses
Network Host
172 16 0 0
N
16
15
14
13
12
11
10
8
7
6
5
4
3
2
1
9
10101100 00010000 00000000 00000000 1
00000000 00000001 2
00000000 00000011 3
...
...
...
11111111 11111101 65534
11111111 11111110 65535
11111111 11111111 65536
– 2
2N – 2 = 216 – 2 = 65534 65534
IP Address Classes Exercise
Address Class Network Host
10.2.1.1
128.63.2.100
201.222.5.64
192.6.141.2
130.113.64.16
256.241.201.10

IP Address Classes Exercise Answers
Address Class Network Host
10.2.1.1 A 10.0.0.0 0.2.1.1
128.63.2.100 B 128.63.0.0 0.0.2.100
201.222.5.64 C 201.222.5.0 0.0.0.64
192.6.141.2 C 192.6.141.0 0.0.0.2
130.113.64.16 B 130.113.0.0 0.0.64.16
256.241.201.10 Nonexistent

Addressing Without Subnets
172.16.0.1 172.16.0.2 172.16.0.3 172.16.255.253 172.16.255.254
…...
172.16.0.0
ÔNetwork 172.16.0.0
Addressing with Subnets
172.16.3.0
172.16.4.0
172.16.1.0 172.16.2.0
ÔNetwork 172.16.0.0
Subnet Addressing
172.16.2.200 172.16.3.5
172.16.3.1
E1
172.16.2.2 E0 172.16.3.100
172.16.2.1
172.16.2.160 172.16.3.150
New Routing Table

Network Host 172.16.0.0 E0
172.16.0.0 E1

Subnet Addressing
172.16.2.200 172.16.3.5
172.16.3.1
E1
172.16.2.2 E0 172.16.3.100
172.16.2.1
172.16.2.160 172.16.3.150
New Routing Table

Network Subnet Host 172.16.2.0 E0
172.16.3.0 E1
Subnet Mask
Network Host
IP
Address
172 16 0 0
Network Host
Default
Subnet
Mask
255 255 0 0
11111111 11111111 00000000 00000000
• Also written as “/16,” where 16 represents the number of 1s
in the mask
Network Subnet Host
8-Bit
Subnet 255 255 255 0
Mask
• Also written as “/24,” where 24 represents the number of
1s in the mask

Decimal Equivalents of Bit Patterns
128 64 32 16 8 4 2 1
0 0 0 0 0 0 0 0 = 0
1 0 0 0 0 0 0 0 = 128
1 1 0 0 0 0 0 0 = 192
1 1 1 0 0 0 0 0 = 224
1 1 1 1 0 0 0 0 = 240
1 1 1 1 1 0 0 0 = 248
1 1 1 1 1 1 0 0 = 252
1 1 1 1 1 1 1 0 = 254
1 1 1 1 1 1 1 1 = 255

Subnet Mask Without Subnets
Network Host
172.16.2.160 10101100 00010000 00000010 10100000
255.255.0.0 11111111 11111111 00000000 00000000
10101100 00010000 00000000 00000000
Network
172 16 0 0
Number
ÔSubnets not in use—the default

Subnet Mask with Subnets
Network Subnet Host
172.16.2.160 10101100 00010000 00000010 10100000
255.255.255.0 11111111 11111111 11111111 00000000
10101100 00010000 00000010 00000000
128
192
224
240
248
252
254
255
Network
Number 172 16 2 0
• Network number extended by eight bits

Subnet Mask with Subnets (cont.)
Network Subnet Host
172.16.2.160 10101100 00010000 00000010 10100000
255.255.255.192 11111111 11111111 11111111 11000000
10101100 00010000 00000010 10000000
128
192
224
240
248
252
254
255
128
192
224
240
248
252
254
255
Network
Number 172 16 2 128
• Network number extended by ten bits

Subnet Mask Exercise
Address Subnet Mask Class Subnet
172.16.2.10 255.255.255.0
10.6.24.20 255.255.240.0
10.30.36.12 255.255.255.0

Subnet Mask Exercise Answers
Address Subnet Mask Class Subnet
172.16.2.10 255.255.255.0 B 172.16.2.0
10.6.24.20 255.255.240.0 A 10.6.16.0
10.30.36.12 255.255.255.0 A 10.30.36.0

Broadcast Addresses
172.16.3.0
172.16.4.0
172.16.1.0
172.16.3.255 172.16.2.0
(Directed Broadcast)
255.255.255.255
(Local Network Broadcast)
X
172.16.255.255
(All Subnets Broadcast)

Addressing Summary Example
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 Mask
Subnet 4
Broadcast
First
Last
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2
Subnet
Broadcast
First
Last
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2
Subnet
Broadcast
First
Last 7
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2
10000000 Subnet 4
Broadcast
First
Last
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2
10000000 Subnet 4
10111111 Broadcast
5
First 6
Last
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2
10000000 Subnet 4
10111111 Broadcast
5
10000001 First 6
Last
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2
10000000 Subnet 4
10111111 Broadcast
5
10000001 First 6
10111110 Last 7
172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2

8
10101100 00010000 00000010 10000000 Subnet 4
10101100 00010000 00000010 10111111 Broadcast

5
10101100 00010000 00000010 10000001 First 6
10101100 00010000 00000010 10111110 Last 7

172 16 2 160
172.16.2.160 10101100 00010000 00000010 10100000 Host 1
255.255.255.192 11111111 11111111 11111111 11000000 Mask 2

9 8
172.16.2.128 10101100 00010000 00000010 10000000 Subnet 4
172.16.2.191 10101100 00010000 00000010 10111111 Broadcast

5
172.16.2.129 10101100 00010000 00000010 10000001 First 6
172.16.2.190 10101100 00010000 00000010 10111110 Last 7

Class B Subnet Example
IP Host Address: 172.16.2.121
Subnet Mask: 255.255.255.0
Network Network Subnet Host
172.16.2.121: 10101100 00010000 00000010 01111001

255.255.255.0: 11111111 11111111 11111111 00000000
Subnet: 10101100 00010000 00000010 00000000

Broadcast: 10101100 00010000 00000010 11111111
ÔSubnet Address = 172.16.2.0

ÔHost Addresses = 172.16.2.1–172.16.2.254
ÔBroadcast Address = 172.16.2.255
ÔEight Bits of Subnetting
Subnet Planning
20
20 Subnets
Subnets
55 Hosts
Hosts per
per Subnet
Subnet
Class
Class C
C Address:
Address:
192.168.5.0
192.168.5.0
192.168.5.16
Other
Subnets
192.168.5.32 192.168.5.48

Class C Subnet Planning Example
IP Host Address: 192.168.5.121

Subnet Mask: 255.255.255.248
Network Network Network Subnet Host
192.168.5.121: 11000000 10101000 00000101 01111001

255.255.255.248: 11111111 11111111 11111111 11111000
Subnet: 11000000 10101000 00000101 01111000

Broadcast: 11000000 10101000 00000101 01111111
ÔHost Addresses = 192.168.5.121–192.168.5.126

ÔBroadcast Address = 192.168.5.127
ÔFive Bits of Subnetting
ÔSubnet Address = 192.168.5.120
Broadcast Addresses Exercise
Address Subnet Mask Class Subnet Broadcast
201.222.10.60 255.255.255.248
15.16.193.6 255.255.248.0
128.16.32.13 255.255.255.252
153.50.6.27 255.255.255.128

Broadcast Addresses Exercise Answers
Address Subnet Mask Class Subnet Broadcast
201.222.10.60 255.255.255.248 C 201.222.10.56 201.222.10.63

15.16.193.6 255.255.248.0 A 15.16.192.0 15.16.199.255
128.16.32.13 255.255.255.252 B 128.16.32.12 128.16.32.15
153.50.6.27 255.255.255.128 B 153.50.6.0 153.50.6.127


Cmts Cpe Basico

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Cmts Cpe Basico

Uploaded by

Copyright:

Available Formats

BSR64000 Operations I

Motorola Document Classification, File Name, Rev Number

Implementing the BSR for Basic Data Services

Motorola Document Classification, File Name, Rev Number

Attendees will learn how to install and configure

Motorola Document Classification, File Name, Rev Number

To fully benefit from this course, you should

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Principal function of the DOCSIS cable modem system is to transmit

The DOCSIS System Consists of;

Cable Modem Termination System (CMTS) located at the headend

Cable Modem (CM) located at the customer premise and connected to

Motorola Document Classification, File Name, Rev Number

Interface Downstream PLANT

DEMOD Cable Modem

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

• Service Flow association with a DOCSIS Service Identifier

• Enhanced MAC scheduling / Unsolicited grants

• Real time polling / Non real time polling

Motorola Document Classification, File Name, Rev Number

• Priority Queuing (e.g. Weighted Fair Queuing) at the CMTS

• BPI+ (Base Line Privacy - Plus)

• IGMP (Internet Group Management Protocol) Management

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

• Downstream supports a variable depth interleaver which

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Ramp Up Ramp Down

Motorola Document Classification, File Name, Rev Number

• Mini-slots are in units of 6.25 microseconds (ticks)

• The size of mini mini-slot is configurable (bytes per mini-

• A mini-slot is the “unit of granularity for upstream

Motorola Document Classification, File Name, Rev Number

On the upstream, the CM operates in fixed length codeword

Motorola Document Classification, File Name, Rev Number

• How the upstream channel is divided into transmission opportunities

• How the upstream channel is synchronized

• How a CMTS determines the timing for each CM

• How the CM determines its transmitter settings

• How the CM sends data

Motorola Document Classification, File Name, Rev Number

5-42 MHz Upstream 88-860 MHz Downstream

Channel MAC Layer

Motorola Document Classification, File Name, Rev Number

• Channel width depends upon symbol rate

• A particular channel must maintain the same

• Upstram channels are mapped so that virtually all

Motorola Document Classification, File Name, Rev Number

Basic mechanism for assigning upstream bandwidth

MAP 1 Downstream Data MAP 2 Downstream Data

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

MAP 1 Downstream Data MAP 2 Downstream Data

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number

Motorola Document Classification, File Name, Rev Number