To Next Page

To Previous Page

Chapter 18: Baseline Privacy Interface (BPI)

STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide

Example:

configure interface cable-mac 1 cable privacy kek-cm-reset 1122.3344.5566 send-auth-invalid

docsBpi2CmtsTEKLifetime

(UCAM) The value of this object is the lifetime, in seconds, the C4/c CMTS assigns to keys for the respective TEK. The no

value of this command defaults to 43200.

configure interface cable-mac <mac> cable privacy tek-said-reset life-time <seconds> [no]

Example:

configure interface cable-mac 1 cable privacy tek-said 1234 life-time 43000

docsBpi2CmtsTEKReset

(UCAM) The setting of this object causes the C4/c CMTS to invalidate the TEK for this SAId:

configure interface cable-mac <mac> cable privacy tek-said-reset <SAId>

Example:

configure interface cable-mac 1 cable privacy tek-said-reset 1234

Digital Certificates (BPI+ Only)

In normal operation, configuration of certificates is not required. In cases requiring removal of certificates, change of trust

status, addition of new certificates, etc., the respective Baseline Privacy certificate MIB table entries must be added,

deleted, or modified.

For BPI+ to authenticate cable modems, the DOCSIS® (or EuroDOCSIS) Root Certificate must already be provisioned in the

in the docsBpi2CmtsCACertTable. TheC4/c CMTS loads these certificates at power-up.

If a CA certificate is not present or there is a new DOCSIS Root Certificate to add, then it must be manually added. This

certificate may be added through a MIB browser, BPI-related CLI commands, or through BPI import and export commands.

The BPI CLI commands allow certificates to be added individually from the C4/c CMTS command line. The import and

export commands allow one or many certificates to be added. Both the CM and CA certificate database can be provisioned

through the BPI CLI and through import and export commands.

Arris C4C User Manual

Questions and Answers: