not sure why you think you need sub-interface.
You want to use the cable modem for internet traffic and the FR serial interface for private traffic.
Then just configure routes such that private traffic is sent of the FR interface and a default that points to the modem back on the ethernet interface.
No need for sub-interface.