ADC CUDA 3 Administration Manual page 547

Cuda 12000 IP Access Switch CLI-based Administration Guide
Cable Modem and MTA Command Output Descriptions
Table 21-14 docsBpi2CmTEKTable
CLI Output
docsBpi2CmTEKSAType
docsBpi2CmTEKData
EncryptAlg
docsBpi2CmTEKData
AuthentAlg
docsBpi2CmTEKState
start
opwait
opreauthwait
Operational
Rekey Wait
Rekey Reauth Wait
Description
Type of security association. The options are:
none
primary
static
dynamic
Data encryption algorithm being used. The
options are:
none
des56cbcmode
des40cbcmode
Data authentication algorithm being used.
State of the indicated TEK FSM. The options are:
The FSM is in the initial state.
The TEK state machine has sent its initial request
(Key Request) for its SAID's keying material
(traffic encryption key and CBC initialization
vector), and is waiting for a reply from the
CMTS.
This is the wait state in which the TEK state
machine is placed if it does not have valid keying
material while the Authorization state machine is
in the middle of a reauthorization cycle.
The cable modem has valid keying material for
the associated SAID.
The TEK Refresh Timer has expired and the cable
modem has requested a key update for this
SAID. Note that the newer of its two TEKs has
not expired and can still be used for both
encrypting and decrypting data traffic.
This is the wait state in which the TEK state
machine is placed if the TEK state machine has
valid traffic keying material, has an outstanding
request for the latest keying material, and the
Authorization State Machine initiates a
reauthorization cycle.
545