Mailing List Archive

In the config file, you can set max-cpe to 1. Otherwise, if you want to
control per PC, you can make the restrictions on the DHCP server-side
(limit to "known" MAC address (manual config)). You may be able to set
individual filters up on the cable modems, but it'll depend on their
capabilities and specified in the additional filename (in the docsis
config).

Also, if you have controlled it via the max-cpe 1 and know that
everything is supposed to register with your DHCP server to get it's IP,
on the CMTS, if you use the "cable source-verify dhcp", your CMTS will
validate through the DHCP server any new IP address that comes through
the upstream to make sure someone isn't just hocking an unused IP.

Hope that helps,

Scott

-----Original Message-----
From: cisco-nsp-admin@puck.nether.net
[mailto:cisco-nsp-admin@puck.nether.net] On Behalf Of Raj P Panchal
Sent: Sunday, October 13, 2002 3:06 AM
To: cisco-nsp@puck.nether.net
Subject: [nsp] Docsic Cable modem / Cisco cmts ubr 7246


dear all,
I am using docsis 1.0 surfboard cable modem . I am using Cisco
ubr7246 cmts . The cable modem configuration file is created using
Cisco docsis cpe configurator v3.6 . I would like to restrict
access to Internet through the cable modem from only particular
cpe ( pc ) with particular ip address . can any one help me out
how to do that ???

thanks
raj
_______________________________________________
cisco-nsp mailing list real_name)s@puck.nether.net
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Hi scott
I am not using dhcp to assingn ip to the customer. I want to
assign ip on the pc itself . and i want to set restriction that
only that ip is is able to access the network through that
particular cable modem . if the customer replaces / changes the
modem or ip it should not work
thanks
raj

On Sun, 13 Oct 2002 Scott Morris wrote :
>In the config file, you can set max-cpe to 1. Otherwise, if you
>want to
>control per PC, you can make the restrictions on the DHCP
>server-side
>(limit to "known" MAC address (manual config)). You may be able
>to set
>individual filters up on the cable modems, but it'll depend on
>their
>capabilities and specified in the additional filename (in the
>docsis
>config).
>
>Also, if you have controlled it via the max-cpe 1 and know that
>everything is supposed to register with your DHCP server to get
>it's IP,
>on the CMTS, if you use the "cable source-verify dhcp", your CMTS
>will
>validate through the DHCP server any new IP address that comes
>through
>the upstream to make sure someone isn't just hocking an unused
>IP.
>
>Hope that helps,
>
>Scott
>
>-----Original Message-----
> From: cisco-nsp-admin@puck.nether.net
>[mailto:cisco-nsp-admin@puck.nether.net] On Behalf Of Raj P
>Panchal
>Sent: Sunday, October 13, 2002 3:06 AM
>To: cisco-nsp@puck.nether.net
>Subject: [nsp] Docsic Cable modem / Cisco cmts ubr 7246
>
>
>dear all,
>I am using docsis 1.0 surfboard cable modem . I am using Cisco
>ubr7246 cmts . The cable modem configuration file is created
>using
>Cisco docsis cpe configurator v3.6 . I would like to restrict
>access to Internet through the cable modem from only particular
>cpe ( pc ) with particular ip address . can any one help me out
>how to do that ???
>
>thanks
>raj
>_______________________________________________
>cisco-nsp mailing list real_name)s@puck.nether.net
>http://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>_______________________________________________
>cisco-nsp mailing list real_name)s@puck.nether.net
>http://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

If the customer is assigning the Ips themselves, then you really have
two options:

Configure your DHCP with static assignments to the customer's IP anyway
and use the cable source-verify dhcp command as before (this will be a
pain because you'll need to update any time they change the MAC address
of the box their IP is assigned to).

Or

Put an access-list or something on the cable modem (will depend on the
specifics of the CM, I know nothing about Surfboards) to limit only that
IP that you assign, and pass that as a secondary config file through the
docsis config.

That's about the only way I can think of for manually handed out Ips.
It would a LOT easier if you did everything through a DHCP server. Is
there any reason that you aren't runnning a DHCP server to handle all of
these assignments?

Scott

-----Original Message-----
From: cisco-nsp-admin@puck.nether.net
[mailto:cisco-nsp-admin@puck.nether.net] On Behalf Of Raj P Panchal
Sent: Monday, October 14, 2002 2:51 AM
To: Scott Morris
Cc: cisco-nsp@puck.nether.net
Subject: Re: RE: [nsp] Docsic Cable modem / Cisco cmts ubr 7246


Hi scott
I am not using dhcp to assingn ip to the customer. I want to
assign ip on the pc itself . and i want to set restriction that
only that ip is is able to access the network through that
particular cable modem . if the customer replaces / changes the
modem or ip it should not work
thanks
raj

On Sun, 13 Oct 2002 Scott Morris wrote :
>In the config file, you can set max-cpe to 1. Otherwise, if you
>want to
>control per PC, you can make the restrictions on the DHCP
>server-side
>(limit to "known" MAC address (manual config)). You may be able
>to set
>individual filters up on the cable modems, but it'll depend on
>their
>capabilities and specified in the additional filename (in the
>docsis
>config).
>
>Also, if you have controlled it via the max-cpe 1 and know that
>everything is supposed to register with your DHCP server to get it's
>IP, on the CMTS, if you use the "cable source-verify dhcp", your CMTS
>will
>validate through the DHCP server any new IP address that comes
>through
>the upstream to make sure someone isn't just hocking an unused
>IP.
>
>Hope that helps,
>
>Scott
>
>-----Original Message-----
> From: cisco-nsp-admin@puck.nether.net
>[mailto:cisco-nsp-admin@puck.nether.net] On Behalf Of Raj P Panchal
>Sent: Sunday, October 13, 2002 3:06 AM
>To: cisco-nsp@puck.nether.net
>Subject: [nsp] Docsic Cable modem / Cisco cmts ubr 7246
>
>
>dear all,
>I am using docsis 1.0 surfboard cable modem . I am using Cisco ubr7246
>cmts . The cable modem configuration file is created using
>Cisco docsis cpe configurator v3.6 . I would like to restrict
>access to Internet through the cable modem from only particular
>cpe ( pc ) with particular ip address . can any one help me out
>how to do that ???
>
>thanks
>raj
>_______________________________________________
>cisco-nsp mailing list real_name)s@puck.nether.net
>http://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>_______________________________________________
>cisco-nsp mailing list real_name)s@puck.nether.net
>http://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list real_name)s@puck.nether.net
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/