HELP CMTS BSR-64000HD - Modems don't get CFG/BIN file.

I still need a little help to know what happennig here.
My 3 CABLE MODEMS (FOR TEST) still not getting the CFG/BIN file.
Bellow do you can see a little from my settings.

CMTS: MOTOROLA BSR-64000HD
DHCPd/ToD/TFTPd: Centos 6.7 is working fine.

I'm testing 2 Cables With docsis 3.0 and one with 2.0

No one grab the file from TFTP.

I can ping all ip address from inside the CMTS.

What i forgot? routing problem?

Can you help me?

=============================
VIPRIO01:7A(config-if) #show running-config interface loopback 10
interface loopback 10
description Clientes VIPRIO
cable bundle 10 master
ip address 10.11.12.13 255.255.255.252
ip helper-address 172.15.0.1 global
cable helper-address 172.15.0.1 cable-modem global
cable helper-address 172.15.0.1 host global
cable helper-address 172.15.0.1 mta global
cable dhcp-giaddr primary
no shutdown
cable ip-broadcast-echo

=============================

VIPRIO01:7A(config-if)#show running-config interface gigaether 15/0
interface gigaether 15/0
ip address 172.16.8.106 255.255.255.0 <<<------- THIS IP MUST BE IN THE SAME NETWORK 172.15.X.X?
no shutdown
==============================

VIPRIO01:7A(config)#show ip route
Codes: C - connected, S - static, R - RIP, B - BGP, O - OSPF
IA - OSPF inter area, N1 - OSPF NSSA external type 1
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1
E2 - OSPF external type 2, i - IS-IS derived
L1 - IS-IS level-1 route, L2- IS-IS level 2 route
ia - IS-IS inter area, su - IS-IS summary, * - candidate default
U - per-user static route, T - traffic engineered route
P - periodic downloaded static route
Gateway of last resort is 172.16.8.1 to network 0.0.0.0

*S 0.0.0.0/0 [1/0] via 172.16.8.1, gigaether 15/0
C 10.11.12.12/30 is directly connected, loopback 10
C 172.16.8.0/24 is directly connected, gigaether 15/0

===============================

VIPRIO01:7A(config-if)#show cable modem
Intf Prim Prim Prim Connect Timing RxPwr Ip Address Mac Address
Cable DS US Sid State Offset dBmV
1/0 1D0C0 U0C0L0 0 offline 0 0.0.0.0 0023.4d0a.9594
1/0 1D0C0 U0C0L0 0 offline 0 0.0.0.0 c417.fee4.5541
1/0 1D0C0 U0C0L0 1 dhcp(d) 1169 1.3 0.0.0.0 0024.d1f4.62e6

================================

I did a TCPDUMP SNIFF with on my eth0 and get this... but why they don't download the file?

cmd: tcpdump -i eth0 -v -vv port bootps or port bootpc

19:25:36.861834 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 366)
dhcp.bootps > 10.11.12.13.bootps: [udp sum ok] BOOTP/DHCP, Reply, length 338, hops 1, xid 0x421c4a56, secs 12, Flags [none] (0x0000)
Your-IP 172-15-0-30.viprio.localdomain
Server-IP 172-15-0-1.viprio.localdomain
Gateway-IP 10.11.12.13
Client-Ethernet-Address 00:24:d1:f4:62:e6 (oui Unknown)
file "CM-BASIC-mib.cfg"
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Offer
Server-ID Option 54, length 4: dhcp
Lease-Time Option 51, length 4: 3600
Subnet-Mask Option 1, length 4: 255.255.255.0
Time-Zone Option 2, length 4: -10800
Default-Gateway Option 3, length 4: 172-15-0-1.viprio.localdomain
Time-Server Option 4, length 4: 172-15-0-1.viprio.localdomain
Domain-Name-Server Option 6, length 8: google-public-dns-a.google.com,google-public-dns-b.google.com
TFTP Option 66, length 10: "172.15.0.1"
BF Option 67, length 16: "CM-BASIC-mib.cfg"
Agent-Information Option 82, length 16:
Circuit-ID SubOption 1, length 6: ^A^AM-^@^@^@^@
Remote-ID SubOption 2, length 6: ^@$M-QM-tbM-f
END Option 255, length 0

======================================================

tail -f /var/log/messages

Nov 6 19:25:36 dhcp dhcpd: 0:24:d1:f4:62:e6
Nov 6 19:25:36 dhcp dhcpd: DHCPDISCOVER from 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:36 dhcp dhcpd: DHCPOFFER on 172.15.0.30 to 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:36 dhcp dhcpd: docsis2.0:054401010102010203010104010105010106010107010f0801100901000a01010b01180c01010d0201000e0201000f01011004000000041e0120200110210101220101270101
Nov 6 19:25:36 dhcp dhcpd: 0:24:d1:f4:62:e6
Nov 6 19:25:36 dhcp dhcpd: DHCPDISCOVER from 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:36 dhcp dhcpd: DHCPOFFER on 172.15.0.30 to 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:53 dhcp dhcpd: docsis2.0:054401010102010203010104010105010106010107010f0801100901000a01010b01180c01010d0201000e0201000f01011004000000041e0120200110210101220101270101
Nov 6 19:25:53 dhcp dhcpd: 0:24:d1:f4:62:e6
Nov 6 19:25:53 dhcp dhcpd: DHCPDISCOVER from 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:53 dhcp dhcpd: DHCPOFFER on 172.15.0.30 to 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:53 dhcp dhcpd: docsis2.0:054401010102010203010104010105010106010107010f0801100901000a01010b01180c01010d0201000e0201000f01011004000000041e0120200110210101220101270101
Nov 6 19:25:53 dhcp dhcpd: 0:24:d1:f4:62:e6
Nov 6 19:25:53 dhcp dhcpd: DHCPDISCOVER from 00:24:d1:f4:62:e6 via 10.11.12.13
Nov 6 19:25:53 dhcp dhcpd: DHCPOFFER on 172.15.0.30 to 00:24:d1:f4:62:e6 via 10.11.12.13

=====================================================

LINUX:

[root@dhcp ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:23:8B:8A:8C:54
inet addr:172.16.8.1 Bcast:172.16.8.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:240808851 errors:0 dropped:0 overruns:0 frame:0
TX packets:283386231 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:38785607122 (36.1 GiB) TX bytes:273672801879 (254.8 GiB)

eth0:1 Link encap:Ethernet HWaddr 00:23:8B:8A:8C:54
inet addr:192.168.2.99 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

eth0:2 Link encap:Ethernet HWaddr 00:23:8B:8A:8C:54
inet addr:172.15.0.1 Bcast:172.15.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

eth1 Link encap:Ethernet HWaddr 08:62:66:99:99:EC
inet addr:177.23.200.92 Bcast:177.23.200.95 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:283440910 errors:0 dropped:0 overruns:0 frame:0
TX packets:239282812 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:273684413604 (254.8 GiB) TX bytes:37870982513 (35.2 GiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:83010 errors:0 dropped:0 overruns:0 frame:0
TX packets:83010 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4385314 (4.1 MiB) TX bytes:4385314 (4.1 MiB)

[root@dhcp ~]# ip route
10.11.12.12/30 via 172.16.8.106 dev eth0
177.23.200.88/29 dev eth1 proto kernel scope link src 177.23.200.92
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.99
172.15.0.0/24 dev eth0 proto kernel scope link src 172.15.0.1
172.16.8.0/24 dev eth0 proto kernel scope link src 172.16.8.1
10.15.0.0/24 via 172.16.8.106 dev eth0
169.254.0.0/16 dev eth1 scope link metric 1003
default via 177.23.200.89 dev eth1

==========================================
dhcpd.conf

##
authoritative;
allow booting;
allow bootp;
option routers 172.15.0.1;
next-server 172.15.0.1;
option tftp-server-name "172.15.0.1";
option time-offset -10800;
option bootfile-name "CM-BASIC-mib.cfg";
filename "CM-BASIC-mib.cfg";
option domain-name "vipriotelecom.com.br";
option domain-name-servers 8.8.8.8, 8.8.4.4;
option time-servers 172.15.0.1;
default-lease-time 12900;
max-lease-time 3600;
log-facility local7;

class "cm" {

match if substring(option vendor-class-identifier,0,6) = "docsis";

log(info, option vendor-class-identifier );
log(info, binary-to-ascii(16, 8, ":", substring(hardware, 1, 6)) );
}

shared-network cm-cpe {
subnet 172.16.8.0 netmask 255.255.255.0 {
}

subnet 10.11.12.12 netmask 255.255.255.252 {
}

subnet 10.15.0.0 netmask 255.255.255.0 {
}

subnet 172.15.0.0 netmask 255.255.255.0 {
option routers 172.15.0.1;
range dynamic-bootp 172.15.0.10 172.15.0.254;
}

host cm-TEST-20MEGA {
hardware ethernet 00:24:d1:f4:62:e6;
filename "CM-BASIC-mib.cfg";

================================================

CM-BASIC-mib.cfg

[root@dhcp ~]# docsis -d CM-BASIC-mib.cfg
Main
{
NetworkAccess 1;
MaxCPE 16;
GlobalPrivacyEnable 0;
UsServiceFlow
{
UsServiceFlowRef 1;
QosParamSetType 7;
SchedulingType 2;
}
DsServiceFlow
{
DsServiceFlowRef 5;
QosParamSetType 7;
}
SNMPv1v2cCoexistenceConfig
{
SNMPv1v2cCommunityName "public";
SNMPv1v2cTransportAddressAccess
{
SNMPv1v2cTransportAddress 0.0.0.0/0;
SNMPv1v2cTransportAddressMask 0.0.0.0/0;
}
SNMPv1v2cAccessViewType 2;
SNMPv1v2cAccessViewName "docsisManagerView";
}
SNMPv1v2cCoexistenceConfig
{
SNMPv1v2cCommunityName "private";
SNMPv1v2cTransportAddressAccess
{
SNMPv1v2cTransportAddress 0.0.0.0/0;
SNMPv1v2cTransportAddressMask 0.0.0.0/0;
}
SNMPv1v2cAccessViewName "docsisManagerView";
SNMPv1v2cAccessViewType 2;
}
SNMPCPEAccessControl 1;
/* CmMic 4624d9999bfebdba1ea2a1fa042ff34d; */
/* CmtsMic 57e59f0176d3b33a661078dbf6ae5e7d; */
/*EndOfDataMkr*/
}