Step 1 | enable
Example:
Router> enable
|
Enables
privileged EXEC mode. Enter your password if prompted.
|
Step 2 | configure
terminal
Example:
Router# configure terminal
|
Enters global
configuration mode.
|
Step 3 | cable
filter
groupgroup-id
indexindex-numdest-portport-num
Example:
Router(config)# cable filter group 1 index 1 dest-port 69
|
(Optional)
Specifies the TCP/UDP destination port number that should be matched. The valid
range is from 0 to 65535. The default value matches all TCP/UDP port numbers
(IPv4 and IPv6 filters).
|
Step 4 | cable
filter
group
group-id
index
index-num
ip-proto
proto-type
Example:
Router(config)# cable filter group 1 index 1 ip-proto 17
|
(Optional)
Specifies the IP protocol type number that should be matched. The valid range
is from 0 to 256, with a default value of 256 that matches all protocols (IPv4
and IPv6 filters).
Some
commonly used values are:
|
Step 5 | cable
filter
group
group-id
index
index-num
ip-tos
tos-mask
tos-value
Example:
Router(config)# cable filter group 1 index 1 ip-tos 0xff 0x80
|
(Optional)
Specifies a ToS mask and value to be matched (IPv4 and IPv6 filters):
The
tos-mask is
logically ANDed with the
tos-value and compared to the result of ANDing the
tos-mask
with the actual ToS value of the packet. The filter considers it a match if the
two values are the same.
The default
values for both parameters matches all ToS values.
|
Step 6 | cable
filter
group
group-id
index
index-num
ip-version
ipv6
Example:
Router(config)# cable filter group 1 index 1 ip-version ipv6
|
Specifies
that this filter group is an IPv6 filter group.
|
Step 7 | cable
filter
group
group-id
index
index-num
match-action {accept
|
drop}
Example:
Router(config)# cable filter group 1 index 1 match-action drop
|
(Optional)
Specifies the action that should be taken for packets that match this filter
(IPv4 and IPv6 filters):
|
Step 8 | cable
filter
group
group-id
index
index-num
src-port
port-num
Example:
Router(config)# cable filter group 1 index 1 src-port 50
|
(Optional)
Specifies the TCP/UDP source port number that should be matched. The valid
range is from 0 to 65535. The default value matches all TCP/UDP port numbers
(IPv4 and IPv6 filters).
|
Step 9 | cable
filter
group
group-id
index
index-num
status
{active
|
inactive}
Example:
Router(config)# cable filter group 1 index 1 status inactive
|
(Optional)
Enables or disables the filter (IPv4 and IPv6 filters):
Note
| You must
create a filter group using at least one of the other options before you can
use this command to enable or disable the filter.
|
|
Step 10 | cable
filter
group
group-id
index
index-num
tcp-flags
flags-mask
flags-value
Example:
Router(config)# cable filter group 1 index 1 tcp-flags 0 0
|
(Optional)
Specifies the TCP flag mask and value to be matched (IPv4 and IPv6 filters):
|
Step 11 | cable
filter
group
group-id
index
index-num
v6-dest-address
ipv6-address
Example:
Router(config)# cable filter group 1 index 1 v6-dest-address 2001:DB8::/32
|
(Optional)
Specifies the IPv6 destination address that should be matched using the format
X:X:X:X::X (IPv6 filters only).
|
Step 12 | cable
filter
group
group-id
index
index-num
v6-dest-pfxlen
prefix-length
Example:
Router(config)# cable filter group 1 index 1 v6-dest-pfxlen 64
|
(Optional)
Specifies the length of the network portion of the IPv6 destination address.
The valid range is from 0 to 128.
|
Step 13 | cable
filter
group
group-id
index
index-num
v6-src-address
ipv6-address
Example:
Router(config)# cable filter group 1 index 1 v6-src-address 2001:DB8::/32
|
(Optional)
Specifies the IPv6 source address that should be matched using the format
X:X:X:X::X (IPv6 filters only).
|
Step 14 | cable
filter
group
group-id
index
index-num
v6-src-pfxlen
prefix-length
Example:
Router(config)# cable filter group 1 index 1 v6-src-pfxlen 48
|
(Optional)
Specifies the length of the network portion of the IPv6 source address. The
valid range is from 0 to 128 (IPv6 filters only).
|
Step 15 | cable
submgmt
default
filter-group {cm
|
cpe}
{downstream
|
upstream}
group-id
Example:
Router(config)# cable submgmt default filter-group cm upstream 1
|
Applies a
defined filter group (by specifying its
group-id)
to either a CM or its CPE devices, for downstream or
upstream traffic.
|
Step 16 | cable
submgmt
default
active
Example:
Router(config)# cable submgmt default active
|
(Required
if you do not provision TLVs 35, 36, and 37 in the DOCSIS 1.1 CM configuration
file)
Enables
filters and allows the CMTS to manage the CPE devices for a particular CM (sets
the docsSubMgtCpeActiveDefault attribute to TRUE).
|