Cisco Broadband Cable Command Reference Guide

cable privacy
2-116
Cisco Broadband Cable Command Reference Guide
Chapter 2 Cisco Cable Modem Termination System Commands
Examples The following example shows how to force baseline privacy to be used for all CMs on a particular cable
interface:
Router(config)# interface cable 3/1
Router(config-if)# cable privacy mandatory
The following example shows how to turn on the baseline privacy interface (BPI) modem authentication
for an interface:
Router(config)# interface cable 5/1/1
Router(config-if)# cable privacy authenticate-modem
The following example shows how to turn on BPI multicast authorization on a particular cable interface:
Router(config)# interface cable 1/0
Router(config-if) cable privacy authorize-multicast
The following example shows how to allow CMs to register with self-signed certificates on a particular
cable interface:
Router(config)# interface cable 7/1/0
Router(config-if) cable privacy accept-self-signed-certificate
Note The cable privacy accept-self-signed-certificate command affects only those CMs that register after
you give the command. For example, if you give the no cable privacy accept-self-signed-certificate
command so that CMs cannot register using self-signed certificates, you must then issue the clear cable
modem all reset command to force all CMs reregister using certificates that are chained to the DOCSIS
root certificate.
Related Commands Command Description
cable privacy
add-certificate
Adds CM certificates for BPI+ encryption.
cable privacy hotlist Adds a CM certificate to the DOCSIS hotlist so that it is no longer accepted.
cable privacy kek Sets key encryption keys and timeout periods.
cable privacy tek Sets traffic encryption keys and timeout periods.
option Determines whether a specific CM is online.
show cable privacy Displays information about BPI status and operation.
debug cable privacy Displays debug messages for BPI operation.
OL-1581-05