Table of Contents
Advertisement
show controllers cable-modem bpkm
Table 6-6
Field
tek grace time
authorization rej wait
time
sa map wait time
sa map retries
kek state
tek state
Table 6-7
Table 6-7
State
Key Encryption Key (KEK) States
STATE_A_START
STATE_B_AUTH_WAIT
STATE_C_AUTHORIZED
STATE_D_REAUTH_WAIT
STATE_E_AUTH_REJ_WAIT
STATE_F_SILENT
Cisco Broadband Cable Command Reference Guide
6-78
show controllers cable-modem bpkm Field Descriptions (BPI+) (continued)
Description
The number of seconds before the current TEK is set to expire that the TEK
grace timer begins, signaling the TEK state machine to request a replacement
key.
Number of seconds the router waits before sending another Authorization
Request message to the CMTS after it has received an Authorization Reject
message.
Number of seconds the router waits for a response after sending a Security
Association (SA) map request before timing out and resending the request.
Number of times the router attempts an SA map request before it rejects the
attempt to create a new downstream service flow.
The current state of the key encryption key that the CMTS uses to encrypt
the traffic encryption keys it sends to the router. See
possible values.
The current state of the traffic encryption key state machine for the specified
SID. See
Table 6-7
describes the valid values for the kek state and tek state fields:
State Values for KEK and TEK State Fields
for the possible values.
Description
The router is still completing the DOCSIS provisioning
process. If this state persists, it indicates that BPI/BPI+
encryption was not enabled for the router in its DOCSIS
configuration file.
DOCSIS provisioning has been completed, and the router has
sent an authorization request to the CMTS and is waiting for a
reply. If this state persists, it indicates that the CMTS has not
enabled BPI/BPI+ operations.
The router has received a valid authorized reply from the
CMTS, completing the KEK exchange, and allowing the TEK
exchange to begin.
The router sent a reauthorization request and is waiting for the
reply from the CMTS. A reauthorization request can be sent if
the initial request is rejected, or when existing keys have
expired and must be reacquired.
The router has received a nonpermanent authorization reject
response from the CMTS and is waiting for the timeout period
before sending another request.
The router has received a permanent authorization reject
response from the CMTS and has been placed in silent mode,
in which it does not pass traffic but does accept SNMP
management requests. (Valid only for BPI+ operations.)
Chapter 6
Cable CPE Commands
Table 6-7
for the
OL-1581-07
Advertisement
Table of Contents
