MIBs Depot

DOCS-IETF-BPI2-MIB

Registered at
1.3.6.1.2.1.126
Last updated
2005-07-20 00:00
Organization
IETF IP over Cable Data Network (IPCDN) Working Group
Revisions
2005-07-20 00:00
Namespace
standard
Source file
DOCS-IETF-BPI2-MIB
Digest
sha256:fbb263e86fb13d5f4902d319b6d1ddc835a8bc93aab314e7c7363581c640c089

Description

This is the MIB module for the DOCSIS Baseline Privacy Plus Interface (BPI+) at cable modems (CMs) and cable modem termination systems (CMTSs). Copyright (C) The Internet Society (2005). This version of this MIB module is part of RFC 4131; see the RFC itself for full legal notices.

Contact

--------------------------------------- Stuart M. Green E-mail: rubbersoul3@yahoo.com --------------------------------------- Kaz Ozawa Automotive Systems Development Center TOSHIBA CORPORATION 1-1, Shibaura 1-Chome Minato-ku, Tokyo 105-8001 Japan Phone: +81-3-3457-8569 Fax: +81-3-5444-9325 E-mail: Kazuyoshi.Ozawa@toshiba.co.jp --------------------------------------- Alexander Katsnelson Postal: Tel: +1-303-680-3924 E-mail: katsnelson6@peoplepc.com --------------------------------------- Eduardo Cardona Postal: Cable Television Laboratories, Inc. 858 Coal Creek Circle Louisville, CO 80027- 9750 U.S.A. Tel: +1 303 661 9100 Fax: +1 303 661 9199 E-mail: e.cardona@cablelabs.com --------------------------------------- IETF IPCDN Working Group General Discussion: ipcdn@ietf.org Subscribe: http://www.ietf.org/mailman/listinfo/ipcdn. Archive: ftp://ftp.ietf.org/ietf-mail-archive/ipcdn. Co-chairs: Richard Woundy, rwoundy@cisco.com Jean-Francois Mule, jfm@cablelabs.com

Imports

FromSymbols
IF-MIBifIndex
INET-ADDRESS-MIBInetAddress, InetAddressType
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso, mib-2
SNMPv2-TCDateAndTime, DisplayString, MacAddress, RowStatus, StorageType, TEXTUAL-CONVENTION, TruthValue

Imported by

1 module(s) in this corpus import this one.

Load order

Every file a consumer needs in order to load this module, dependencies first.

DOCS-IETF-BPI2-MIB
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
DocsBpkmDataAuthentAlg
TEXTUAL-CONVENTION
The list of data integrity algorithms defined for the DOCSIS interface in the BPKM cryptographic-suite parameter. The value 'none' indicates that no data integrity is used for the SAID being referenced.
current
DocsBpkmDataEncryptAlg
TEXTUAL-CONVENTION
The list of data encryption algorithms defined for the DOCSIS interface in the BPKM cryptographic-suite parameter. The value 'none' indicates that the SAID being referenced has no data encryption.
current
DocsBpkmSAType
TEXTUAL-CONVENTION
The type of security association (SA). The values of the named-numbers are associated with the BPKM SA-Type attributes: 'primary' corresponds to code '1', 'static' to code '2', and 'dynamic' to code '3'. The 'none' value must only be used if the SA type has yet to be determined.
current
DocsSAId
TEXTUAL-CONVENTION
Security Association identifier (SAID).
current
DocsSAIdOrZero
TEXTUAL-CONVENTION
Security Association identifier (SAID). The value zero indicates that the SAID is yet to be determined.
current
DocsX509ASN1DEREncodedCertificate
TEXTUAL-CONVENTION
An X509 digital certificate encoded as an ASN.1 DER object.
current

Objects

NameOIDSyntaxAccessStatus
docsBpi2Notification
OBJECT-IDENTITY
1.3.6.1.2.1.126.0
docsBpi2MIBObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1
docsBpi2CmObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.1
docsBpi2CmBaseTable
OBJECT-TYPE
This table describes the basic and authorization- related Baseline Privacy Plus attributes of each CM MAC interface.
1.3.6.1.2.1.126.1.1.1not-accessiblecurrent
docsBpi2CmBaseEntry
OBJECT-TYPE
Each entry contains objects describing attributes of one CM MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
1.3.6.1.2.1.126.1.1.1.1not-accessiblecurrent
docsBpi2CmPrivacyEnable
OBJECT-TYPE
This object identifies whether this CM is provisioned to run Baseline Privacy Plus.
1.3.6.1.2.1.126.1.1.1.1.1TruthValueread-onlycurrent
docsBpi2CmPublicKey
OBJECT-TYPE
The value of this object is a DER-encoded RSAPublicKey ASN.1 type string, as defined in the RSA Encryption Standard (PKCS #1), corresponding to the public key of the CM.
1.3.6.1.2.1.126.1.1.1.1.2OCTET STRING (SIZE(0..524))read-onlycurrent
docsBpi2CmAuthState
OBJECT-TYPE
The value of this object is the state of the CM authorization FSM. The start state indicates that FSM is in its initial state.
1.3.6.1.2.1.126.1.1.1.1.3INTEGER {start(1), authWait(2), authorized(3), reauthWait(4), authRejectWait(5), silent(6)}read-onlycurrent
docsBpi2CmAuthKeySequenceNumber
OBJECT-TYPE
The value of this object is the most recent authorization key sequence number for this FSM.
1.3.6.1.2.1.126.1.1.1.1.4Integer32 (0..15)read-onlycurrent
docsBpi2CmAuthExpiresOld
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent authorization key for this FSM. If this FSM has only one authorization key, then the value is the time of activation of this FSM.
1.3.6.1.2.1.126.1.1.1.1.5DateAndTimeread-onlycurrent
docsBpi2CmAuthExpiresNew
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the most recent authorization key for this FSM.
1.3.6.1.2.1.126.1.1.1.1.6DateAndTimeread-onlycurrent
docsBpi2CmAuthReset
OBJECT-TYPE
Setting this object to 'true' generates a Reauthorize event in the authorization FSM. Reading this object always returns FALSE. This object is for testing purposes only, and therefore it is not required to be associated with a last reset object.
1.3.6.1.2.1.126.1.1.1.1.7TruthValueread-writecurrent
docsBpi2CmAuthGraceTime
OBJECT-TYPE
The value of this object is the grace time for an authorization key in seconds. A CM is expected to start trying to get a new authorization key beginning AuthGraceTime seconds before the most recent authorization key actually expires.
1.3.6.1.2.1.126.1.1.1.1.8Integer32 (1..6047999)read-onlycurrent
docsBpi2CmTEKGraceTime
OBJECT-TYPE
The value of this object is the grace time for the TEK in seconds. The CM is expected to start trying to acquire a new TEK beginning TEK GraceTime seconds before the expiration of the most recent TEK.
1.3.6.1.2.1.126.1.1.1.1.9Integer32 (1..302399)read-onlycurrent
docsBpi2CmAuthWaitTimeout
OBJECT-TYPE
The value of this object is the Authorize Wait Timeout in seconds.
1.3.6.1.2.1.126.1.1.1.1.10Integer32 (1..30)read-onlycurrent
docsBpi2CmReauthWaitTimeout
OBJECT-TYPE
The value of this object is the Reauthorize Wait Timeout in seconds.
1.3.6.1.2.1.126.1.1.1.1.11Integer32 (1..30)read-onlycurrent
docsBpi2CmOpWaitTimeout
OBJECT-TYPE
The value of this object is the Operational Wait Timeout in seconds.
1.3.6.1.2.1.126.1.1.1.1.12Integer32 (1..10)read-onlycurrent
docsBpi2CmRekeyWaitTimeout
OBJECT-TYPE
The value of this object is the Rekey Wait Timeout in seconds.
1.3.6.1.2.1.126.1.1.1.1.13Integer32 (1..10)read-onlycurrent
docsBpi2CmAuthRejectWaitTimeout
OBJECT-TYPE
The value of this object is the Authorization Reject Wait Timeout in seconds.
1.3.6.1.2.1.126.1.1.1.1.14Integer32 (1..600)read-onlycurrent
docsBpi2CmSAMapWaitTimeout
OBJECT-TYPE
The value of this object is the retransmission interval, in seconds, of SA Map Requests from the MAP Wait state.
1.3.6.1.2.1.126.1.1.1.1.15Integer32 (1..10)read-onlycurrent
docsBpi2CmSAMapMaxRetries
OBJECT-TYPE
The value of this object is the maximum number of Map Request retries allowed.
1.3.6.1.2.1.126.1.1.1.1.16Integer32 (0..10)read-onlycurrent
docsBpi2CmAuthentInfos
OBJECT-TYPE
The value of this object is the number of times the CM has transmitted an Authentication Information message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.1.1.17Counter32read-onlycurrent
docsBpi2CmAuthRequests
OBJECT-TYPE
The value of this object is the number of times the CM has transmitted an Authorization Request message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.1.1.18Counter32read-onlycurrent
docsBpi2CmAuthReplies
OBJECT-TYPE
The value of this object is the number of times the CM has received an Authorization Reply message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.1.1.19Counter32read-onlycurrent
docsBpi2CmAuthRejects
OBJECT-TYPE
The value of this object is the number of times the CM has received an Authorization Reject message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.1.1.20Counter32read-onlycurrent
docsBpi2CmAuthInvalids
OBJECT-TYPE
The value of this object is the count of times the CM has received an Authorization Invalid message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.1.1.21Counter32read-onlycurrent
docsBpi2CmAuthRejectErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent Authorization Reject message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Reject message has been received since reboot.
1.3.6.1.2.1.126.1.1.1.1.22INTEGER {none(1), unknown(2), unauthorizedCm(3), unauthorizedSaid(4), permanentAuthorizationFailure(8), timeOfDayNotAcquired(11)}read-onlycurrent
docsBpi2CmAuthRejectErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent Authorization Reject message received by the CM. This is a zero length string if no Authorization Reject message has been received since reboot.
1.3.6.1.2.1.126.1.1.1.1.23SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmAuthInvalidErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent Authorization Invalid message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Invalid message has been received since reboot.
1.3.6.1.2.1.126.1.1.1.1.24INTEGER {none(1), unknown(2), unauthorizedCm(3), unsolicited(5), invalidKeySequence(6), keyRequestAuthenticationFailure(7)}read-onlycurrent
docsBpi2CmAuthInvalidErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent Authorization Invalid message received by the CM. This is a zero length string if no Authorization Invalid message has been received since reboot.
1.3.6.1.2.1.126.1.1.1.1.25SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmTEKTable
OBJECT-TYPE
This table describes the attributes of each CM Traffic Encryption Key (TEK) association. The CM maintains (no more than) one TEK association per SAID per CM MAC interface.
1.3.6.1.2.1.126.1.1.2not-accessiblecurrent
docsBpi2CmTEKEntry
OBJECT-TYPE
Each entry contains objects describing the TEK association attributes of one SAID. The CM MUST create one entry per SAID, regardless of whether the SAID was obtained from a Registration Response message, from an Authorization Reply message, or from any dynamic SAID establishment mechanisms.
1.3.6.1.2.1.126.1.1.2.1not-accessiblecurrent
docsBpi2CmTEKSAId
OBJECT-TYPE
The value of this object is the DOCSIS Security Association ID (SAID).
1.3.6.1.2.1.126.1.1.2.1.1DocsSAIdnot-accessiblecurrent
docsBpi2CmTEKSAType
OBJECT-TYPE
The value of this object is the type of security association.
1.3.6.1.2.1.126.1.1.2.1.2DocsBpkmSATyperead-onlycurrent
docsBpi2CmTEKDataEncryptAlg
OBJECT-TYPE
The value of this object is the data encryption algorithm for this SAID.
1.3.6.1.2.1.126.1.1.2.1.3DocsBpkmDataEncryptAlgread-onlycurrent
docsBpi2CmTEKDataAuthentAlg
OBJECT-TYPE
The value of this object is the data authentication algorithm for this SAID.
1.3.6.1.2.1.126.1.1.2.1.4DocsBpkmDataAuthentAlgread-onlycurrent
docsBpi2CmTEKState
OBJECT-TYPE
The value of this object is the state of the indicated TEK FSM. The start(1) state indicates that the FSM is in its initial state.
1.3.6.1.2.1.126.1.1.2.1.5INTEGER {start(1), opWait(2), opReauthWait(3), operational(4), rekeyWait(5), rekeyReauthWait(6)}read-onlycurrent
docsBpi2CmTEKKeySequenceNumber
OBJECT-TYPE
The value of this object is the most recent TEK key sequence number for this TEK FSM.
1.3.6.1.2.1.126.1.1.2.1.6Integer32 (0..15)read-onlycurrent
docsBpi2CmTEKExpiresOld
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent TEK for this FSM. If this FSM has only one TEK, then the value is the time of activation of this FSM.
1.3.6.1.2.1.126.1.1.2.1.7DateAndTimeread-onlycurrent
docsBpi2CmTEKExpiresNew
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the most recent TEK for this FSM.
1.3.6.1.2.1.126.1.1.2.1.8DateAndTimeread-onlycurrent
docsBpi2CmTEKKeyRequests
OBJECT-TYPE
The value of this object is the number of times the CM has transmitted a Key Request message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.2.1.9Counter32read-onlycurrent
docsBpi2CmTEKKeyReplies
OBJECT-TYPE
The value of this object is the number of times the CM has received a Key Reply message, including a message whose authentication failed. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.2.1.10Counter32read-onlycurrent
docsBpi2CmTEKKeyRejects
OBJECT-TYPE
The value of this object is the number of times the CM has received a Key Reject message, including a message whose authentication failed. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.2.1.11Counter32read-onlycurrent
docsBpi2CmTEKInvalids
OBJECT-TYPE
The value of this object is the number of times the CM has received a TEK Invalid message, including a message whose authentication failed. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.2.1.12Counter32read-onlycurrent
docsBpi2CmTEKAuthPends
OBJECT-TYPE
The value of this object is the count of times an Authorization Pending (Auth Pend) event occurred in this FSM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.2.1.13Counter32read-onlycurrent
docsBpi2CmTEKKeyRejectErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent Key Reject message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Key Reject message has been received since registration.
1.3.6.1.2.1.126.1.1.2.1.14INTEGER {none(1), unknown(2), unauthorizedSaid(4)}read-onlycurrent
docsBpi2CmTEKKeyRejectErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent Key Reject message received by the CM. This is a zero length string if no Key Reject message has been received since registration.
1.3.6.1.2.1.126.1.1.2.1.15SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmTEKInvalidErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent TEK Invalid message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no TEK Invalid message has been received since registration.
1.3.6.1.2.1.126.1.1.2.1.16INTEGER {none(1), unknown(2), invalidKeySequence(6)}read-onlycurrent
docsBpi2CmTEKInvalidErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent TEK Invalid message received by the CM. This is a zero length string if no TEK Invalid message has been received since registration.
1.3.6.1.2.1.126.1.1.2.1.17SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmMulticastObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.1.3
docsBpi2CmIpMulticastMapTable
OBJECT-TYPE
This table maps multicast IP addresses to SAIDs per CM MAC Interface. It is intended to map multicast IP addresses associated with SA MAP Request messages.
1.3.6.1.2.1.126.1.1.3.1not-accessiblecurrent
docsBpi2CmIpMulticastMapEntry
OBJECT-TYPE
Each entry contains objects describing the mapping of one multicast IP address to one SAID, as well as associated state, message counters, and error information. An entry may be removed from this table upon the reception of an SA Map Reject.
1.3.6.1.2.1.126.1.1.3.1.1not-accessiblecurrent
docsBpi2CmIpMulticastIndex
OBJECT-TYPE
The index of this row.
1.3.6.1.2.1.126.1.1.3.1.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
docsBpi2CmIpMulticastAddressType
OBJECT-TYPE
The type of Internet address for docsBpi2CmIpMulticastAddress.
1.3.6.1.2.1.126.1.1.3.1.1.2InetAddressTyperead-onlycurrent
docsBpi2CmIpMulticastAddress
OBJECT-TYPE
This object represents the IP multicast address to be mapped. The type of this address is determined by the value of the docsBpi2CmIpMulticastAddressType object.
1.3.6.1.2.1.126.1.1.3.1.1.3InetAddressread-onlycurrent
docsBpi2CmIpMulticastSAId
OBJECT-TYPE
This object represents the SAID to which the IP multicast address has been mapped. If no SA Map Reply has been received for the IP address, this object should have the value 0.
1.3.6.1.2.1.126.1.1.3.1.1.4DocsSAIdOrZeroread-onlycurrent
docsBpi2CmIpMulticastSAMapState
OBJECT-TYPE
The value of this object is the state of the SA Mapping FSM for this IP.
1.3.6.1.2.1.126.1.1.3.1.1.5INTEGER {start(1), mapWait(2), mapped(3)}read-onlycurrent
docsBpi2CmIpMulticastSAMapRequests
OBJECT-TYPE
The value of this object is the number of times the CM has transmitted an SA Map Request message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.3.1.1.6Counter32read-onlycurrent
docsBpi2CmIpMulticastSAMapReplies
OBJECT-TYPE
The value of this object is the number of times the CM has received an SA Map Reply message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.3.1.1.7Counter32read-onlycurrent
docsBpi2CmIpMulticastSAMapRejects
OBJECT-TYPE
The value of this object is the number of times the CM has received an SA MAP Reject message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.1.3.1.1.8Counter32read-onlycurrent
docsBpi2CmIpMulticastSAMapRejectErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent SA Map Reject message sent in response to an SA Map Request for This IP. It has the value none(1) if no SA MAP Reject message has been received since entry creation.
1.3.6.1.2.1.126.1.1.3.1.1.9INTEGER {none(1), unknown(2), noAuthForRequestedDSFlow(9), dsFlowNotMappedToSA(10)}read-onlycurrent
docsBpi2CmIpMulticastSAMapRejectErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent SA Map Reject message sent in response to an SA Map Request for this IP. It is a zero length string if no SA Map Reject message has been received since entry creation.
1.3.6.1.2.1.126.1.1.3.1.1.10SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmCertObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.1.4
docsBpi2CmDeviceCertTable
OBJECT-TYPE
This table describes the Baseline Privacy Plus device certificates for each CM MAC interface.
1.3.6.1.2.1.126.1.1.4.1not-accessiblecurrent
docsBpi2CmDeviceCertEntry
OBJECT-TYPE
Each entry contains the device certificates of one CM MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
1.3.6.1.2.1.126.1.1.4.1.1not-accessiblecurrent
docsBpi2CmDeviceCmCert
OBJECT-TYPE
The X509 DER-encoded cable modem certificate. Note: This object can be set only when the value is the zero-length OCTET STRING; otherwise, an error of 'inconsistentValue' is returned. Once the object contains the certificate, its access MUST be read-only and persists after re-initialization of the managed system.
1.3.6.1.2.1.126.1.1.4.1.1.1DocsX509ASN1DEREncodedCertificateread-writecurrent
docsBpi2CmDeviceManufCert
OBJECT-TYPE
The X509 DER-encoded manufacturer certificate that signed the cable modem certificate.
1.3.6.1.2.1.126.1.1.4.1.1.2DocsX509ASN1DEREncodedCertificateread-onlycurrent
docsBpi2CmCryptoSuiteTable
OBJECT-TYPE
This table describes the Baseline Privacy Plus cryptographic suite capabilities for each CM MAC interface.
1.3.6.1.2.1.126.1.1.5not-accessiblecurrent
docsBpi2CmCryptoSuiteEntry
OBJECT-TYPE
Each entry contains a cryptographic suite pair that this CM MAC supports.
1.3.6.1.2.1.126.1.1.5.1not-accessiblecurrent
docsBpi2CmCryptoSuiteIndex
OBJECT-TYPE
The index for a cryptographic suite row.
1.3.6.1.2.1.126.1.1.5.1.1Unsigned32 (1..1000)not-accessiblecurrent
docsBpi2CmCryptoSuiteDataEncryptAlg
OBJECT-TYPE
The value of this object is the data encryption algorithm for this cryptographic suite capability.
1.3.6.1.2.1.126.1.1.5.1.2DocsBpkmDataEncryptAlgread-onlycurrent
docsBpi2CmCryptoSuiteDataAuthentAlg
OBJECT-TYPE
The value of this object is the data authentication algorithm for this cryptographic suite capability.
1.3.6.1.2.1.126.1.1.5.1.3DocsBpkmDataAuthentAlgread-onlycurrent
docsBpi2CmtsObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.2
docsBpi2CmtsBaseTable
OBJECT-TYPE
This table describes the basic Baseline Privacy attributes of each CMTS MAC interface.
1.3.6.1.2.1.126.1.2.1not-accessiblecurrent
docsBpi2CmtsBaseEntry
OBJECT-TYPE
Each entry contains objects describing attributes of one CMTS MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
1.3.6.1.2.1.126.1.2.1.1not-accessiblecurrent
docsBpi2CmtsDefaultAuthLifetime
OBJECT-TYPE
The value of this object is the default lifetime, in seconds, that the CMTS assigns to a new authorization key. This object value persists after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.1.1.1Integer32 (1..6048000)read-writecurrent
docsBpi2CmtsDefaultTEKLifetime
OBJECT-TYPE
The value of this object is the default lifetime, in seconds, that the CMTS assigns to a new Traffic Encryption Key (TEK). This object value persists after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.1.1.2Integer32 (1..604800)read-writecurrent
docsBpi2CmtsDefaultSelfSignedManufCertTrust
OBJECT-TYPE
This object determines the default trust of self-signed manufacturer certificate entries, contained in docsBpi2CmtsCACertTable, and created after this object is set. This object need not persist after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.1.1.3INTEGER {trusted(1), untrusted(2)}read-writecurrent
docsBpi2CmtsCheckCertValidityPeriods
OBJECT-TYPE
Setting this object to 'true' causes all chained and root certificates in the chain to have their validity periods checked against the current time of day, when the CMTS receives an Authorization Request from the CM. A 'false' setting causes all certificates in the chain not to have their validity periods checked against the current time of day. This object need not persist after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.1.1.4TruthValueread-writecurrent
docsBpi2CmtsAuthentInfos
OBJECT-TYPE
The value of this object is the number of times the CMTS has received an Authentication Information message from any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.5Counter32read-onlycurrent
docsBpi2CmtsAuthRequests
OBJECT-TYPE
The value of this object is the number of times the CMTS has received an Authorization Request message from any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.6Counter32read-onlycurrent
docsBpi2CmtsAuthReplies
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an Authorization Reply message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.7Counter32read-onlycurrent
docsBpi2CmtsAuthRejects
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an Authorization Reject message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.8Counter32read-onlycurrent
docsBpi2CmtsAuthInvalids
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an Authorization Invalid message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.9Counter32read-onlycurrent
docsBpi2CmtsSAMapRequests
OBJECT-TYPE
The value of this object is the number of times the CMTS has received an SA Map Request message from any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.10Counter32read-onlycurrent
docsBpi2CmtsSAMapReplies
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an SA Map Reply message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.11Counter32read-onlycurrent
docsBpi2CmtsSAMapRejects
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an SA Map Reject message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.1.1.12Counter32read-onlycurrent
docsBpi2CmtsAuthTable
OBJECT-TYPE
This table describes the attributes of each CM authorization association. The CMTS maintains one authorization association with each Baseline Privacy- enabled CM, registered on each CMTS MAC interface, regardless of whether the CM is authorized or rejected.
1.3.6.1.2.1.126.1.2.2not-accessiblecurrent
docsBpi2CmtsAuthEntry
OBJECT-TYPE
Each entry contains objects describing attributes of one authorization association. The CMTS MUST create one entry per CM per MAC interface, based on the receipt of an Authorization Request message, and MUST not delete the entry until the CM loses registration.
1.3.6.1.2.1.126.1.2.2.1not-accessiblecurrent
docsBpi2CmtsAuthCmMacAddress
OBJECT-TYPE
The value of this object is the physical address of the CM to which the authorization association applies.
1.3.6.1.2.1.126.1.2.2.1.1MacAddressnot-accessiblecurrent
docsBpi2CmtsAuthCmBpiVersion
OBJECT-TYPE
The value of this object is the version of Baseline Privacy for which this CM has registered. The value 'bpiplus' represents the value of BPI-Version Attribute of the Baseline Privacy Key Management BPKM attribute BPI-Version (1). The value 'bpi' is used to represent the CM registered using DOCSIS 1.0 Baseline Privacy.
1.3.6.1.2.1.126.1.2.2.1.2INTEGER {bpi(0), bpiPlus(1)}read-onlycurrent
docsBpi2CmtsAuthCmPublicKey
OBJECT-TYPE
The value of this object is a DER-encoded RSAPublicKey ASN.1 type string, as defined in the RSA Encryption Standard (PKCS #1), corresponding to the public key of the CM. This is the zero-length OCTET STRING if the CMTS does not retain the public key.
1.3.6.1.2.1.126.1.2.2.1.3OCTET STRING (SIZE(0..524))read-onlycurrent
docsBpi2CmtsAuthCmKeySequenceNumber
OBJECT-TYPE
The value of this object is the most recent authorization key sequence number for this CM.
1.3.6.1.2.1.126.1.2.2.1.4Integer32 (0..15)read-onlycurrent
docsBpi2CmtsAuthCmExpiresOld
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent authorization key for this FSM. If this FSM has only one authorization key, then the value is the time of activation of this FSM. Note: This object has no meaning for CMs running in BPI mode; therefore, this object is not instantiated for entries associated to those CMs.
1.3.6.1.2.1.126.1.2.2.1.5DateAndTimeread-onlycurrent
docsBpi2CmtsAuthCmExpiresNew
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the most recent authorization key for this FSM.
1.3.6.1.2.1.126.1.2.2.1.6DateAndTimeread-onlycurrent
docsBpi2CmtsAuthCmLifetime
OBJECT-TYPE
The value of this object is the lifetime, in seconds, that the CMTS assigns to an authorization key for this CM.
1.3.6.1.2.1.126.1.2.2.1.7Integer32 (1..6048000)read-writecurrent
docsBpi2CmtsAuthCmReset
OBJECT-TYPE
Setting this object to invalidateAuth(2) causes the CMTS to invalidate the current CM authorization key(s), but not to transmit an Authorization Invalid message nor to invalidate the primary SAID's TEKs. Setting this object to sendAuthInvalid(3) causes the CMTS to invalidate the current CM authorization key(s), and to transmit an Authorization Invalid message to the CM, but not to invalidate the primary SAID's TEKs. Setting this object to invalidateTeks(4) causes the CMTS to invalidate the current CM authorization key(s), to transmit an Authorization Invalid message to the CM, and to invalidate the TEKs associated with this CM's primary SAID. For BPI mode, substitute all of the CM's unicast TEKs for the primary SAID's TEKs in the previous paragraph. Reading this object returns the most recently set value of this object or, if the object has not been set since entry creation, returns noResetRequested(1).
1.3.6.1.2.1.126.1.2.2.1.8INTEGER {noResetRequested(1), invalidateAuth(2), sendAuthInvalid(3), invalidateTeks(4)}read-writecurrent
docsBpi2CmtsAuthCmInfos
OBJECT-TYPE
The value of this object is the number of times the CMTS has received an Authentication Information message from this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.2.1.9Counter32read-onlycurrent
docsBpi2CmtsAuthCmRequests
OBJECT-TYPE
The value of this object is the number of times the CMTS has received an Authorization Request message from this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.2.1.10Counter32read-onlycurrent
docsBpi2CmtsAuthCmReplies
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an Authorization Reply message to this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.2.1.11Counter32read-onlycurrent
docsBpi2CmtsAuthCmRejects
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an Authorization Reject message to this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.2.1.12Counter32read-onlycurrent
docsBpi2CmtsAuthCmInvalids
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an Authorization Invalid message to this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.2.1.13Counter32read-onlycurrent
docsBpi2CmtsAuthRejectErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent Authorization Reject message transmitted to the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Reject message has been transmitted to the CM since entry creation.
1.3.6.1.2.1.126.1.2.2.1.14INTEGER {none(1), unknown(2), unauthorizedCm(3), unauthorizedSaid(4), permanentAuthorizationFailure(8), timeOfDayNotAcquired(11)}read-onlycurrent
docsBpi2CmtsAuthRejectErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent Authorization Reject message transmitted to the CM. This is a zero length string if no Authorization Reject message has been transmitted to the CM since entry creation.
1.3.6.1.2.1.126.1.2.2.1.15SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmtsAuthInvalidErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent Authorization Invalid message transmitted to the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Invalid message has been transmitted to the CM since entry creation.
1.3.6.1.2.1.126.1.2.2.1.16INTEGER {none(1), unknown(2), unauthorizedCm(3), unsolicited(5), invalidKeySequence(6), keyRequestAuthenticationFailure(7)}read-onlycurrent
docsBpi2CmtsAuthInvalidErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent Authorization Invalid message transmitted to the CM. This is a zero length string if no Authorization Invalid message has been transmitted to the CM since entry creation.
1.3.6.1.2.1.126.1.2.2.1.17SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmtsAuthPrimarySAId
OBJECT-TYPE
The value of this object is the Primary Security Association identifier. For BPI mode, the value must be any unicast SID.
1.3.6.1.2.1.126.1.2.2.1.18DocsSAIdOrZeroread-onlycurrent
docsBpi2CmtsAuthBpkmCmCertValid
OBJECT-TYPE
Contains the reason why a CM's certificate is deemed valid or invalid. Return unknown(0) if the CM is running BPI mode. ValidCmChained(1) means the certificate is valid because it chains to a valid certificate. ValidCmTrusted(2) means the certificate is valid because it has been provisioned (in the docsBpi2CmtsProvisionedCmCert table) to be trusted. InvalidCmUntrusted(3) means the certificate is invalid because it has been provisioned (in the docsBpi2CmtsProvisionedCmCert table) to be untrusted. InvalidCAUntrusted(4) means the certificate is invalid because it chains to an untrusted certificate. InvalidCmOther(5) and InvalidCAOther(6) refer to errors in parsing, validity periods, etc., which are attributable to the CM certificate or its chain, respectively; additional information may be found in docsBpi2AuthRejectErrorString for these types of errors.
1.3.6.1.2.1.126.1.2.2.1.19INTEGER {unknown(0), validCmChained(1), validCmTrusted(2), invalidCmUntrusted(3), invalidCAUntrusted(4), invalidCmOther(5), invalidCAOther(6)}read-onlycurrent
docsBpi2CmtsAuthBpkmCmCert
OBJECT-TYPE
The X509 CM Certificate sent as part of a BPKM Authorization Request. Note: The zero-length OCTET STRING must be returned if the Entire certificate is not retained in the CMTS.
1.3.6.1.2.1.126.1.2.2.1.20DocsX509ASN1DEREncodedCertificateread-onlycurrent
docsBpi2CmtsAuthCACertIndexPtr
OBJECT-TYPE
A row index into docsBpi2CmtsCACertTable. Returns the index in docsBpi2CmtsCACertTable to which CA certificate this CM is chained to. A value of 0 means it could not be found or not applicable.
1.3.6.1.2.1.126.1.2.2.1.21Unsigned32 (0..4294967295)read-onlycurrent
docsBpi2CmtsTEKTable
OBJECT-TYPE
This table describes the attributes of each Traffic Encryption Key (TEK) association. The CMTS Maintains one TEK association per SAID on each CMTS MAC interface.
1.3.6.1.2.1.126.1.2.3not-accessiblecurrent
docsBpi2CmtsTEKEntry
OBJECT-TYPE
Each entry contains objects describing attributes of one TEK association on a particular CMTS MAC interface. The CMTS MUST create one entry per SAID per MAC interface, based on the receipt of a Key Request message, and MUST not delete the entry before the CM authorization for the SAID permanently expires.
1.3.6.1.2.1.126.1.2.3.1not-accessiblecurrent
docsBpi2CmtsTEKSAId
OBJECT-TYPE
The value of this object is the DOCSIS Security Association ID (SAID).
1.3.6.1.2.1.126.1.2.3.1.1DocsSAIdnot-accessiblecurrent
docsBpi2CmtsTEKSAType
OBJECT-TYPE
The value of this object is the type of security association. 'dynamic' does not apply to CMs running in BPI mode. Unicast BPI TEKs must utilize the 'primary' encoding, and multicast BPI TEKs must utilize the 'static' encoding.
1.3.6.1.2.1.126.1.2.3.1.2DocsBpkmSATyperead-onlycurrent
docsBpi2CmtsTEKDataEncryptAlg
OBJECT-TYPE
The value of this object is the data encryption algorithm for this SAID.
1.3.6.1.2.1.126.1.2.3.1.3DocsBpkmDataEncryptAlgread-onlycurrent
docsBpi2CmtsTEKDataAuthentAlg
OBJECT-TYPE
The value of this object is the data authentication algorithm for this SAID.
1.3.6.1.2.1.126.1.2.3.1.4DocsBpkmDataAuthentAlgread-onlycurrent
docsBpi2CmtsTEKLifetime
OBJECT-TYPE
The value of this object is the lifetime, in seconds, that the CMTS assigns to keys for this TEK association.
1.3.6.1.2.1.126.1.2.3.1.5Integer32 (1..604800)read-writecurrent
docsBpi2CmtsTEKKeySequenceNumber
OBJECT-TYPE
The value of this object is the most recent TEK key sequence number for this SAID.
1.3.6.1.2.1.126.1.2.3.1.6Integer32 (0..15)read-onlycurrent
docsBpi2CmtsTEKExpiresOld
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent TEK for this FSM. If this FSM has only one TEK, then the value is the time of activation of this FSM.
1.3.6.1.2.1.126.1.2.3.1.7DateAndTimeread-onlycurrent
docsBpi2CmtsTEKExpiresNew
OBJECT-TYPE
The value of this object is the actual clock time for expiration of the most recent TEK for this FSM.
1.3.6.1.2.1.126.1.2.3.1.8DateAndTimeread-onlycurrent
docsBpi2CmtsTEKReset
OBJECT-TYPE
Setting this object to 'true' causes the CMTS to invalidate all currently active TEKs and to generate new TEKs for the associated SAID; the CMTS MAY also generate unsolicited TEK Invalid messages, to optimize the TEK synchronization between the CMTS and the CM(s). Reading this object always returns FALSE.
1.3.6.1.2.1.126.1.2.3.1.9TruthValueread-writecurrent
docsBpi2CmtsKeyRequests
OBJECT-TYPE
The value of this object is the number of times the CMTS has received a Key Request message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.3.1.10Counter32read-onlycurrent
docsBpi2CmtsKeyReplies
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted a Key Reply message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.3.1.11Counter32read-onlycurrent
docsBpi2CmtsKeyRejects
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted a Key Reject message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.3.1.12Counter32read-onlycurrent
docsBpi2CmtsTEKInvalids
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted a TEK Invalid message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.3.1.13Counter32read-onlycurrent
docsBpi2CmtsKeyRejectErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent Key Reject message sent in response to a Key Request for this SAID. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Key Reject message has been received since registration.
1.3.6.1.2.1.126.1.2.3.1.14INTEGER {none(1), unknown(2), unauthorizedSaid(4)}read-onlycurrent
docsBpi2CmtsKeyRejectErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent Key Reject message sent in response to a Key Request for this SAID. This is a zero length string if no Key Reject message has been received since registration.
1.3.6.1.2.1.126.1.2.3.1.15SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmtsTEKInvalidErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent TEK Invalid message sent in association with this SAID. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no TEK Invalid message has been received since registration.
1.3.6.1.2.1.126.1.2.3.1.16INTEGER {none(1), unknown(2), invalidKeySequence(6)}read-onlycurrent
docsBpi2CmtsTEKInvalidErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent TEK Invalid message sent in association with this SAID. This is a zero length string if no TEK Invalid message has been received since registration.
1.3.6.1.2.1.126.1.2.3.1.17SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmtsMulticastObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.2.4
docsBpi2CmtsIpMulticastMapTable
OBJECT-TYPE
This table maps multicast IP addresses to SAIDs. If a multicast IP address is mapped by multiple rows in the table, the row with the lowest docsBpi2CmtsIpMulticastIndex must be utilized for the mapping.
1.3.6.1.2.1.126.1.2.4.1not-accessiblecurrent
docsBpi2CmtsIpMulticastMapEntry
OBJECT-TYPE
Each entry contains objects describing the mapping of a set of multicast IP address and the mask to one SAID associated to a CMTS MAC Interface, as well as associated message counters and error information.
1.3.6.1.2.1.126.1.2.4.1.1not-accessiblecurrent
docsBpi2CmtsIpMulticastIndex
OBJECT-TYPE
The index of this row. Conceptual rows having the value 'permanent' need not allow write-access to any columnar objects in the row.
1.3.6.1.2.1.126.1.2.4.1.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
docsBpi2CmtsIpMulticastAddressType
OBJECT-TYPE
The type of Internet address for docsBpi2CmtsIpMulticastAddress and docsBpi2CmtsIpMulticastMask.
1.3.6.1.2.1.126.1.2.4.1.1.2InetAddressTyperead-createcurrent
docsBpi2CmtsIpMulticastAddress
OBJECT-TYPE
This object represents the IP multicast address to be mapped, in conjunction with docsBpi2CmtsIpMulticastMask. The type of this address is determined by the value of the object docsBpi2CmtsIpMulticastAddressType.
1.3.6.1.2.1.126.1.2.4.1.1.3InetAddressread-createcurrent
docsBpi2CmtsIpMulticastMask
OBJECT-TYPE
This object represents the IP multicast address mask for this row. An IP multicast address matches this row if the logical AND of the address with docsBpi2CmtsIpMulticastMask is identical to the logical AND of docsBpi2CmtsIpMulticastAddr with docsBpi2CmtsIpMulticastMask. The type of this address is determined by the value of the object docsBpi2CmtsIpMulticastAddressType. Note: For IPv6, this object need not represent a contiguous netmask; e.g., to associate a SAID to a multicast group matching 'any' multicast scope. The TC InetAddressPrefixLength is not used, as it only represents contiguous netmask.
1.3.6.1.2.1.126.1.2.4.1.1.4InetAddressread-createcurrent
docsBpi2CmtsIpMulticastSAId
OBJECT-TYPE
This object represents the multicast SAID to be used in this IP multicast address mapping entry.
1.3.6.1.2.1.126.1.2.4.1.1.5DocsSAIdOrZeroread-createcurrent
docsBpi2CmtsIpMulticastSAType
OBJECT-TYPE
The value of this object is the type of security association. 'dynamic' does not apply to CMs running in BPI mode. Unicast BPI TEKs must utilize the 'primary' encoding, and multicast BPI TEKs must utilize the 'static' encoding. By default, SNMP created entries set this object to 'static' if not set at row creation.
1.3.6.1.2.1.126.1.2.4.1.1.6DocsBpkmSATyperead-createcurrent
docsBpi2CmtsIpMulticastDataEncryptAlg
OBJECT-TYPE
The value of this object is the data encryption algorithm for this IP.
1.3.6.1.2.1.126.1.2.4.1.1.7DocsBpkmDataEncryptAlgread-createcurrent
docsBpi2CmtsIpMulticastDataAuthentAlg
OBJECT-TYPE
The value of this object is the data authentication algorithm for this IP.
1.3.6.1.2.1.126.1.2.4.1.1.8DocsBpkmDataAuthentAlgread-createcurrent
docsBpi2CmtsIpMulticastSAMapRequests
OBJECT-TYPE
The value of this object is the number of times the CMTS has received an SA Map Request message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.4.1.1.9Counter32read-onlycurrent
docsBpi2CmtsIpMulticastSAMapReplies
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an SA Map Reply message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.4.1.1.10Counter32read-onlycurrent
docsBpi2CmtsIpMulticastSAMapRejects
OBJECT-TYPE
The value of this object is the number of times the CMTS has transmitted an SA Map Reject message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
1.3.6.1.2.1.126.1.2.4.1.1.11Counter32read-onlycurrent
docsBpi2CmtsIpMulticastSAMapRejectErrorCode
OBJECT-TYPE
The value of this object is the enumerated description of the Error-Code in the most recent SA Map Reject message sent in response to an SA Map Request for this IP. It has the value unknown(2) if the last Error-Code Value was 0 and none(1) if no SA MAP Reject message has been received since entry creation.
1.3.6.1.2.1.126.1.2.4.1.1.12INTEGER {none(1), unknown(2), noAuthForRequestedDSFlow(9), dsFlowNotMappedToSA(10)}read-onlycurrent
docsBpi2CmtsIpMulticastSAMapRejectErrorString
OBJECT-TYPE
The value of this object is the text string in the most recent SA Map Reject message sent in response to an SA Map Request for this IP. It is a zero length string if no SA Map Reject message has been received since entry creation.
1.3.6.1.2.1.126.1.2.4.1.1.13SnmpAdminString (SIZE(0..128))read-onlycurrent
docsBpi2CmtsIpMulticastMapControl
OBJECT-TYPE
This object controls and reflects the IP multicast address mapping entry. There is no restriction on the ability to change values in this row while the row is active. A created row can be set to active only after the Corresponding instances of docsBpi2CmtsIpMulticastAddress, docsBpi2CmtsIpMulticastMask, docsBpi2CmtsIpMulticastSAId, and docsBpi2CmtsIpMulticastSAType have all been set.
1.3.6.1.2.1.126.1.2.4.1.1.14RowStatusread-createcurrent
docsBpi2CmtsIpMulticastMapStorageType
OBJECT-TYPE
The storage type for this conceptual row. Conceptual rows having the value 'permanent' need not allow write-access to any columnar objects in the row.
1.3.6.1.2.1.126.1.2.4.1.1.15StorageTyperead-onlycurrent
docsBpi2CmtsMulticastAuthTable
OBJECT-TYPE
This table describes the multicast SAID authorization for each CM on each CMTS MAC interface.
1.3.6.1.2.1.126.1.2.4.2not-accessiblecurrent
docsBpi2CmtsMulticastAuthEntry
OBJECT-TYPE
Each entry contains objects describing the key authorization of one cable modem for one multicast SAID for one CMTS MAC interface. Row entries persist after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.4.2.1not-accessiblecurrent
docsBpi2CmtsMulticastAuthSAId
OBJECT-TYPE
This object represents the multicast SAID for authorization.
1.3.6.1.2.1.126.1.2.4.2.1.1DocsSAIdnot-accessiblecurrent
docsBpi2CmtsMulticastAuthCmMacAddress
OBJECT-TYPE
This object represents the MAC address of the CM to which the multicast SAID authorization applies.
1.3.6.1.2.1.126.1.2.4.2.1.2MacAddressnot-accessiblecurrent
docsBpi2CmtsMulticastAuthControl
OBJECT-TYPE
The status of this conceptual row for the authorization of multicast SAIDs to CMs.
1.3.6.1.2.1.126.1.2.4.2.1.3RowStatusread-createcurrent
docsBpi2CmtsCertObjects
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.2.5
docsBpi2CmtsProvisionedCmCertTable
OBJECT-TYPE
A table of CM certificate trust entries provisioned to the CMTS. The trust object for a certificate in this table has an overriding effect on the validity object of a certificate in the authorization table, as long as the entire contents of the two certificates are identical.
1.3.6.1.2.1.126.1.2.5.1not-accessiblecurrent
docsBpi2CmtsProvisionedCmCertEntry
OBJECT-TYPE
An entry in the CMTS's provisioned CM certificate table. Row entries persist after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.5.1.1not-accessiblecurrent
docsBpi2CmtsProvisionedCmCertMacAddress
OBJECT-TYPE
The index of this row.
1.3.6.1.2.1.126.1.2.5.1.1.1MacAddressnot-accessiblecurrent
docsBpi2CmtsProvisionedCmCertTrust
OBJECT-TYPE
Trust state for the provisioned CM certificate entry. Note: Setting this object need only override the validity of CM certificates sent in future authorization requests; instantaneous effect need not occur.
1.3.6.1.2.1.126.1.2.5.1.1.2INTEGER {trusted(1), untrusted(2)}read-createcurrent
docsBpi2CmtsProvisionedCmCertSource
OBJECT-TYPE
This object indicates how the certificate reached the CMTS. Other(4) means that it originated from a source not identified above.
1.3.6.1.2.1.126.1.2.5.1.1.3INTEGER {snmp(1), configurationFile(2), externalDatabase(3), other(4)}read-onlycurrent
docsBpi2CmtsProvisionedCmCertStatus
OBJECT-TYPE
The status of this conceptual row. Values in this row cannot be changed while the row is 'active'.
1.3.6.1.2.1.126.1.2.5.1.1.4RowStatusread-createcurrent
docsBpi2CmtsProvisionedCmCert
OBJECT-TYPE
An X509 DER-encoded Certificate Authority certificate. Note: The zero-length OCTET STRING must be returned, on reads, if the entire certificate is not retained in the CMTS.
1.3.6.1.2.1.126.1.2.5.1.1.5DocsX509ASN1DEREncodedCertificateread-createcurrent
docsBpi2CmtsCACertTable
OBJECT-TYPE
The table of known Certificate Authority certificates acquired by this device.
1.3.6.1.2.1.126.1.2.5.2not-accessiblecurrent
docsBpi2CmtsCACertEntry
OBJECT-TYPE
A row in the Certificate Authority certificate table. Row entries with the trust status 'trusted', 'untrusted', or 'root' persist after re-initialization of the managed system.
1.3.6.1.2.1.126.1.2.5.2.1not-accessiblecurrent
docsBpi2CmtsCACertIndex
OBJECT-TYPE
The index for this row.
1.3.6.1.2.1.126.1.2.5.2.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
docsBpi2CmtsCACertSubject
OBJECT-TYPE
The subject name exactly as it is encoded in the X509 certificate. The organizationName portion of the certificate's subject name must be present. All other fields are optional. Any optional field present must be prepended with <CR> (carriage return, U+000D) <LF> (line feed, U+000A). Ordering of fields present must conform to the following: organizationName <CR> <LF> countryName <CR> <LF> stateOrProvinceName <CR> <LF> localityName <CR> <LF> organizationalUnitName <CR> <LF> organizationalUnitName=<Manufacturing Location> <CR> <LF> commonName
1.3.6.1.2.1.126.1.2.5.2.1.2SnmpAdminStringread-onlycurrent
docsBpi2CmtsCACertIssuer
OBJECT-TYPE
The issuer name exactly as it is encoded in the X509 certificate. The commonName portion of the certificate's issuer name must be present. All other fields are optional. Any optional field present must be prepended with <CR> (carriage return, U+000D) <LF> (line feed, U+000A). Ordering of fields present must conform to the following: CommonName <CR><LF> countryName <CR><LF> stateOrProvinceName <CR><LF> localityName <CR><LF> organizationName <CR><LF> organizationalUnitName <CR><LF> organizationalUnitName=<Manufacturing Location>
1.3.6.1.2.1.126.1.2.5.2.1.3SnmpAdminStringread-onlycurrent
docsBpi2CmtsCACertSerialNumber
OBJECT-TYPE
This CA certificate's serial number, represented as an octet string.
1.3.6.1.2.1.126.1.2.5.2.1.4OCTET STRING (SIZE(1..32))read-onlycurrent
docsBpi2CmtsCACertTrust
OBJECT-TYPE
This object controls the trust status of this certificate. Root certificates must be given root(4) trust; manufacturer certificates must not be given root(4) trust. Trust on root certificates must not change. Note: Setting this object need only affect the validity of CM certificates sent in future authorization requests; instantaneous effect need not occur.
1.3.6.1.2.1.126.1.2.5.2.1.5INTEGER {trusted(1), untrusted(2), chained(3), root(4)}read-createcurrent
docsBpi2CmtsCACertSource
OBJECT-TYPE
This object indicates how the certificate reached the CMTS. Other(4) means that it originated from a source not identified above.
1.3.6.1.2.1.126.1.2.5.2.1.6INTEGER {snmp(1), configurationFile(2), externalDatabase(3), other(4), authentInfo(5), compiledIntoCode(6)}read-onlycurrent
docsBpi2CmtsCACertStatus
OBJECT-TYPE
The status of this conceptual row. An attempt to set writable columnar values while this row is active behaves as follows: - Sets to the object docsBpi2CmtsCACertTrust are allowed. - Sets to the object docsBpi2CmtsCACert will return an error of 'inconsistentValue'. A newly created entry cannot be set to active until the value of docsBpi2CmtsCACert is being set.
1.3.6.1.2.1.126.1.2.5.2.1.7RowStatusread-createcurrent
docsBpi2CmtsCACert
OBJECT-TYPE
An X509 DER-encoded Certificate Authority certificate. To help identify certificates, either this object or docsBpi2CmtsCACertThumbprint must be returned by a CMTS for self-signed CA certificates. Note: The zero-length OCTET STRING must be returned, on reads, if the entire certificate is not retained in the CMTS.
1.3.6.1.2.1.126.1.2.5.2.1.8DocsX509ASN1DEREncodedCertificateread-createcurrent
docsBpi2CmtsCACertThumbprint
OBJECT-TYPE
The SHA-1 hash of a CA certificate. To help identify certificates, either this object or docsBpi2CmtsCACert must be returned by a CMTS for self-signed CA certificates. Note: The zero-length OCTET STRING must be returned, on reads, if the CA certificate thumb print is not retained in the CMTS.
1.3.6.1.2.1.126.1.2.5.2.1.9OCTET STRING (SIZE(20))read-onlycurrent
docsBpi2CodeDownloadControl
OBJECT-IDENTITY
1.3.6.1.2.1.126.1.4
docsBpi2CodeDownloadStatusCode
OBJECT-TYPE
The value indicates the result of the latest config file CVC verification, SNMP CVC verification, or code file verification.
1.3.6.1.2.1.126.1.4.1INTEGER {configFileCvcVerified(1), configFileCvcRejected(2), snmpCvcVerified(3), snmpCvcRejected(4), codeFileVerified(5), codeFileRejected(6), other(7)}read-onlycurrent
docsBpi2CodeDownloadStatusString
OBJECT-TYPE
The value of this object indicates the additional information to the status code. The value will include the error code and error description, which will be defined separately.
1.3.6.1.2.1.126.1.4.2SnmpAdminStringread-onlycurrent
docsBpi2CodeMfgOrgName
OBJECT-TYPE
The value of this object is the device manufacturer's organizationName.
1.3.6.1.2.1.126.1.4.3SnmpAdminStringread-onlycurrent
docsBpi2CodeMfgCodeAccessStart
OBJECT-TYPE
The value of this object is the device manufacturer's current codeAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10).
1.3.6.1.2.1.126.1.4.4DateAndTime (SIZE(11))read-onlycurrent
docsBpi2CodeMfgCvcAccessStart
OBJECT-TYPE
The value of this object is the device manufacturer's current cvcAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10).
1.3.6.1.2.1.126.1.4.5DateAndTime (SIZE(11))read-onlycurrent
docsBpi2CodeCoSignerOrgName
OBJECT-TYPE
The value of this object is the co-signer's organizationName. The value is a zero length string if the co-signer is not specified.
1.3.6.1.2.1.126.1.4.6SnmpAdminStringread-onlycurrent
docsBpi2CodeCoSignerCodeAccessStart
OBJECT-TYPE
The value of this object is the co-signer's current codeAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10). If docsBpi2CodeCoSignerOrgName is a zero length string, the value of this object is meaningless.
1.3.6.1.2.1.126.1.4.7DateAndTime (SIZE(11))read-onlycurrent
docsBpi2CodeCoSignerCvcAccessStart
OBJECT-TYPE
The value of this object is the co-signer's current cvcAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10). If docsBpi2CodeCoSignerOrgName is a zero length string, the value of this object is meaningless.
1.3.6.1.2.1.126.1.4.8DateAndTime (SIZE(11))read-onlycurrent
docsBpi2CodeCvcUpdate
OBJECT-TYPE
Setting a CVC to this object triggers the device to verify the CVC and update the cvcAccessStart values. The content of this object is then discarded. If the device is not enabled to upgrade codefiles, or if the CVC verification fails, the CVC will be rejected. Reading this object always returns the zero-length OCTET STRING.
1.3.6.1.2.1.126.1.4.9DocsX509ASN1DEREncodedCertificateread-writecurrent
docsBpi2Conformance
OBJECT-IDENTITY
1.3.6.1.2.1.126.2
docsBpi2Compliances
OBJECT-IDENTITY
1.3.6.1.2.1.126.2.1
docsBpi2Groups
OBJECT-IDENTITY
1.3.6.1.2.1.126.2.2

Conformance

NameOIDStatus
docsBpi2CmCompliance
MODULE-COMPLIANCE
This is the compliance statement for CMs that implement the DOCSIS Baseline Privacy Interface Plus.
1.3.6.1.2.1.126.2.1.1current
docsBpi2CmtsCompliance
MODULE-COMPLIANCE
This is the compliance statement for CMTSs that implement the DOCSIS Baseline Privacy Interface Plus.
1.3.6.1.2.1.126.2.1.2current
docsBpi2CmGroup
OBJECT-GROUP
This collection of objects provides CM BPI+ status and control.
1.3.6.1.2.1.126.2.2.1current
docsBpi2CmtsGroup
OBJECT-GROUP
This collection of objects provides CMTS BPI+ status and control.
1.3.6.1.2.1.126.2.2.2current
docsBpi2CodeDownloadGroup
OBJECT-GROUP
This collection of objects provides authenticated software download support.
1.3.6.1.2.1.126.2.2.3current