Cisco SR2016T-NA Reference Manual page 200

Reference guide
Hide thumbs Also See for SR2016T-NA:
Table of Contents

Advertisement

cable privacy kek
cable privacy kek
To set key encryption keys (KEKs) grace-time and life-time values for baseline privacy on an HFC
network, use the cable privacy kek command in cable interface configuration mode. To restore the
default values, use the no form of this command.
This command is applicable only on images that support BPI or BPI+ encryption.
Note
Syntax Description
grace-time seconds
life-time seconds
Defaults
The grace-time option is set to 600 seconds (10 minutes), and the life-time option to 604,800 seconds
(7 days).
Command Modes
Interface configuration (cable interface only)
Command History
Release
11.3 XA
12.1(4)CX,
12.2(1)XF1,
12.2(4)BC1
Usage Guidelines
Baseline privacy on an HFC network is configured with key encryption keys (KEKs) and traffic
encryption keys (TEKs). The encryption is based on 40-bit or 56-bit data encryption standard (DES)
encryption algorithms.
A KEK is assigned to a CM based on the CM service identifier (SID) and permits the CM to connect to
the Cisco CMTS when baseline privacy is activated. KEKs can be set to expire based on a grace-time or
a life-time value.
The grace-time keyword is used to assign a temporary key to a CM to access the network. The life-time
keyword is used to assign a more permanent key to a CM.
A CM that has a grace-time or life-time key assigned by the Cisco CMTS requests a new key before the
current one expires.
Cisco Broadband Cable Command Reference Guide
2-188
cable privacy kek {grace-time [seconds] | life-time [seconds]}
no cable privacy kek {grace-time | life-time}
(Optional) Length of key encryption grace-time in seconds. Valid range
is 60 to 1800 seconds. The default is 600 seconds (10 minutes).
(Optional) Length of the key encryption life-time in seconds.Valid range
is 300 to 604,8000. The default is 604,800 seconds (7 days).
Modification
This command was introduced.
The valid range for both options was changed to support DOCSIS 1.1 and
BPI+ encryption.
Chapter 2
Cisco CMTS Configuration Commands
OL-1581-08

Advertisement

Table of Contents
loading

This manual is also suitable for:

Broadband cable

Table of Contents