2-182
Cisco Broadband Cable Command Reference Guide
OL-1581-08
Chapter 2 Cisco CMTS Configuration Commands
cable privacy
cable privacy
To enable and configure BPI/BPI+ encryption, use the
cable privacy
command in cable interface
configuration mode. To disable privacy or to remove a particular configuration, use the
no
form of this
command.
cable privacy
[
40-bit-des
|
accept-self-signed-certificate
|
authenticate-modem
|
authorize-
multicast
|
mandatory
|
oaep-support
|
dsx-support
]
no
cable privacy
[
40-bit-des
|
accept-self-signed-certificate
|
authenticate-modem
|
authorize-
multicast
|
mandatory
|
oaep-support
|
dsx-support
]
Syntax Description
Defaults
BPI is disabled. When enabled, 56-bit DES encryption is enabled by default, and self-signed
manufacturer certificates are not allowed.
Command Modes
Interface configuration (cable interface only)
Command History
Usage Guidelines
This command is applicable only on images that support BPI or BPI+ encryption.
40-bit-des
(Optional) Uses 40-bit DES encryption.
Note
Cisco discourages the use of 40-bit DES encryption because
it is not as secure as the other available methods of
encryption.
accept-self-signed-certificate
(Optional) Allows cable modems to register using self-signed
manufacturer certificates, as opposed to a manufacturer certificate
that is chained to the DOCSIS root certificate.
authenticate-modem
(Optional) Uses AAA protocols in conjunction with BPI to
authenticate all CMs.
authorize-multicast
(Optional) Uses AAA protocols with BPI to authorize all multicast
stream (IGMP) join requests.
dsx-support
(Optional) Enables encryption for dynamic services SIDs.
mandatory
(Optional) Requires baseline privacy for all CMs.
oaep-support
(Optional) Enables Optimal Asymmetric Encryption Padding
(OAEP) BPI+ encryption.
Release
Modification
12.1 T
This command was introduced.
12.1(4)CX,
12.2(1)XF1,
12.2(4)BC1
Added the
dsx-support
and
oaep-support
keywords as part of support for
BPI+ encryption.
12.2(11)BC1 Changed
the
accept-self-signed-certificate
option from a global
configuration option to a cable interface option.