Table of Contents
Advertisement
cable privacy
cable privacy
To enable and configure BPI/BPI+ encryption, use the cable privacy command in cable interface
configuration mode. To disable privacy or to remove a particular configuration, use the no form of this
command.
Syntax Description
40-bit-des
accept-self-signed-certificate (Optional) Allows cable modems to register using self-signed
authenticate-modem
authorize-multicast
dsx-support
mandatory
oaep-support
Defaults
BPI is disabled. When enabled, 56-bit DES encryption is enabled by default, and self-signed
manufacturer certificates are not allowed.
Command Modes
Interface configuration (cable interface only)
Command History
Release
12.1 T
12.1(4)CX,
12.2(1)XF1,
12.2(4)BC1
12.2(11)BC1
Usage Guidelines
This command is applicable only on images that support BPI or BPI+ encryption.
Cisco Broadband Cable Command Reference Guide
2-182
cable privacy [40-bit-des | accept-self-signed-certificate | authenticate-modem | authorize-
multicast | mandatory | oaep-support | dsx-support]
no cable privacy [40-bit-des | accept-self-signed-certificate | authenticate-modem | authorize-
multicast | mandatory | oaep-support | dsx-support]
Modification
This command was introduced.
Added the dsx-support and oaep-support keywords as part of support for
BPI+ encryption.
Changed the accept-self-signed-certificate option from a global
configuration option to a cable interface option.
(Optional) Uses 40-bit DES encryption.
Cisco discourages the use of 40-bit DES encryption because
Note
it is not as secure as the other available methods of
encryption.
manufacturer certificates, as opposed to a manufacturer certificate
that is chained to the DOCSIS root certificate.
(Optional) Uses AAA protocols in conjunction with BPI to
authenticate all CMs.
(Optional) Uses AAA protocols with BPI to authorize all multicast
stream (IGMP) join requests.
(Optional) Enables encryption for dynamic services SIDs.
(Optional) Requires baseline privacy for all CMs.
(Optional) Enables Optimal Asymmetric Encryption Padding
(OAEP) BPI+ encryption.
Chapter 2
Cisco CMTS Configuration Commands
OL-1581-08
Advertisement
Table of Contents
