Hello.
I'm trying to update firmware image on DOCSIS 1.1 modem (Motorola SB5100). According to docs I've made modem profile with following params:
03 (Net Access Control) = Yes
09 (Software Upgrade Filename) = SB5100-2.3.1.6-SCM01-NOSH-NNDMN.p7.bin
17 (Baseline Privacy Block)
S01 (Authorize Wait Timeout) = 10
S02 (Reauthorize Wait Timeout) = 10
S03 (Authorize Grace Timeout) = 600
S04 (Operational Wait Timeout) = 10
S05 (Rekey Wait Timeout) = 10
S06 (TEK Grace Time) = 600
S07 (Authorize Reject Wait Timeout) = 60
18 (Maximum Number of CPE) = 1
21 (TFTP Server IP) = 10.6.7.1
24 (Upstream Service Flow Block)
S01 (Flow Reference) = 2
S06 (QoS Parameter Set Type) = 7
S08 (Max Substained Traffic Rate) = 64000
S15 (Service Flow Scheduling Type) = 2
25 (Downstream Service Flow Block)
S01 (Flow Reference) = 1
S06 (QoS Parameter Set Type) = 7
S08 (Max Substained Traffic Rate) = 128000
29 (Privacy Enable) = Yes
33 (Co-signer CVC) = 30-27- [hex stuff skipped]
I've modem connected and online:
MAC Address : 000e.5cXX.XXXX
IP Address : 10.X.X.X
Prim Sid : 1
Interface : C3/0/U0
sysDescr : <<HW_REV: 3; VENDOR: Motorola Corporation; BOOTR: 2150; SW_REV: SB5100-2.3.1.3-SCM00-NOSH; MODEL: SB5100>>
Upstream Power : 53.00 dBmV (SNR = 31.42 dBmV)
Downstream Power : -4.-3 dBmV (SNR = 34.00 dBmV)
Timing Offset : 2569
Initial Timing Offset : 2569
Received Power : 0.00
MAC Version : DOC1.1
Provisioned Mode : DOC1.1
Enable DOCSIS2.0 Mode : Y
Capabilities : {Frag=Y, Concat=Y, PHS=Y, Priv=BPI+}
Sid/Said Limit : {Max Us Sids=4, Max Ds Saids=15}
Optional Filtering Support : {802.1P=N, 802.1Q=N}
Transmit Equalizer Support : {Taps/Symbol= 1, Num of Taps= 24}
...
I've DOCSIS-ROOT-CERT configured on CMTS. and Motorola CERT on bootflash:/
ubr# sh crypto ca trustpoints
Trustpoint DOCSIS-ROOT-CERT:
Subject Name:
CN = DOCSIS Cable Modem Root Certificate Authority
OU = Cable Modems
O = Data Over Cable Service Interface Specifications
C = US
Serial Number: 5853648728A44DC0335F0CDB33849C19
Certificate configured.
Trustpoint CN = Motorola Corporation Cable Modem Root Certificate Authority, OU = ASG, OU = DOCSIS, L = San Diego, ST = California, O = Motorola Corporation, C = US:
Subject Name:
CN = Motorola Corporation Cable Modem Root Certificate Authority
OU = ASG
OU = DOCSIS
L = San Diego
ST = California
O = Motorola Corporation
C = US
Serial Number: 437498F09A7DCBC1FA7AA101FE976E40
Warning: can not find root certificate with the subject name.
After all that modem shows that it can't upload new firmware because CVC validation failed:
4-Error 0x041D2C1C Configuration File CVC Validation Failure
I've tried to add Motorola certificate on CMTS in hex form (cable privacy add-certificate manufacturer) but it's too long (933 bytes binary) and I cant add it..
please help.
