PurposeCommand or Action
(Optional) Configures the life-time values for the key
encryption keys (KEKs) for BPI+ operations on all cable
interfaces.
cable privacy kek {life-time seconds
}
Example:
Router(config-if)# cable privacy
Step 9
kek life-time 302400
Router(config-if)#
(Optional) Configures the life-time values for the traffic
encryption keys (TEKs) for BPI+ operations on all cable
interfaces.
cable privacy tek {life-time seconds}
Example:
Router(config-if)# cable privacy
Step 10
tek life-time 86400
Router(config-if)#
Exits interface configuration mode.exit
Step 11
Example:
Router(config-if)# exit
Repeat steps Step 3, on page 48 through Step 11,
on page 50 for each cable interface.
Note
Router(config)#
Exits global configuration mode.exit
Example:
Router(config)# exit
Router#
Step 12
What to Do Next
You can also configure the following additional timers for BPI+ operations in the DOCSIS configuration file
for each cable modem. As a general rule, you do not need to specify these timers in the DOCSIS configuration
file unless you have a specific reason for changing them from their default values.
Table 11: Individual Cable Modem BPI+ Timer Values
DescriptionTimer
The amount of time a cable modem will wait for a
response from a CMTS when negotiating a KEK for
the first time.
Authorize Wait Timeout
The amount of time a cable modem will wait for a
response from a CMTS when negotiating a new KEK
because the Authorization Key (KEK) lifetime is
about to expire.
Reauthorize Wait Timeout
Cisco cBR Series Converged Broadband Routers Quality of Services Configuration Guide for Cisco IOS XE
Fuji 16.7.x
50
DOCSIS 1.1 for the Cisco CMTS Routers
Configuring Baseline Privacy Interface