6-76
Cisco Broadband Cable Command Reference Guide
OL-1581-07
Chapter 6 Cable CPE Commands
show controllers cable-modem bpkm
tek grace time: 600
authorization rej wait time: 60
kek state: STATE_B_AUTH_WAIT
sid 4:
tek state: No resources assigned
Table 6-5
describes the fields shown in the display.
The following shows typical output for the
show controllers cable-modem bpkm
command for
DOCSIS 1.1 BPI+ operation when baseline privacy is enabled:
Router#
show controllers cable-modem 0 bpkm
CM Baseline Privacy Key Management
Privacy Version: BPI+ (PLUS)
public key:
30819F30 0D06092A 864886F7 0D010101 05000381 8D003081 89028181 00E560B2
4F6777A1 731AF856 CE936615 BF513F15 44CE2D02 95167EAD 139FE25C C1E7D4E5
99B34020 D96608B2 A87C0AA1 C171B265 3E87FF7F F70FD3B1 AE96F0EE B2E75172
6B06F661 EA631817 0D317D6F 22FC733B F150E65F 44AE535A 5FB0532F 14519F3B
80A9D442 05D7B7EF 58A5993C 49BB5028 9A3A980A 36AEDC53 E762FA4D 63020301 01
keks: even 4184D17A0C0AEDA3 odd C07A8454DBAA7F1B
hmac upstream key even:
4E0A5108 A8451B24 BAC3A8CA D8DF459F 6D37448D
Table 6-5
show controllers cable-modem bpkm Field Descriptions
Field
Description
authorization wait time
The number of seconds the router waits for a reply after sending the
Authorization Request message to the CMTS.
reauthorization wait
time
The number of seconds the router waits for a reply after it has sent an
Authorization Request message to the CMTS in response to a
reauthorization request or an Authorization Invalid message from the CMTS.
authorization grace time The number of seconds before the current authorization is set to expire that
the grace timer begins, signaling the router to begin the reauthorization
process.
operational wait time
The number of seconds the Traffic Exchange Key (TEK) state machine waits
for a reply from the CMTS after sending its initial Key Request for its SID’s
keying material.
rekey wait time
The number of seconds the TEK state machine waits for a replacement key
for this Service ID (SID) after the TEK grace timer has expired and the
request for a replacement key has been made.
tek grace time
The number of seconds before the current TEK is set to expire that the TEK
grace timer begins, signaling the TEK state machine to request a replacement
key.
authorization rej wait
time
Number of seconds the router waits before sending another Authorization
Request message to the CMTS after it has received an Authorization Reject
message.
kek state
The current state of the key encryption key that the CMTS uses to encrypt
the traffic encryption keys it sends to the router. See
Table 6-7 on page 6-78
for the possible values.
tek state
The current state of the traffic encryption key state machine for the specified
SID. See
Table 6-7 on page 6-78
for the possible values.