Cisco Broadband Cable Command Reference Guide

Chapter 2 Cisco Cable Modem Termination System Commands
cable privacy tek
Syntax Description
OL-1581-05
Cisco Broadband Cable Command Reference Guide
cable privacy tek
To set traffic encryption keys (TEKs) grace-time and life-time values for baseline privacy on an HFC
network, use the cable privacy tek command in cable interface configuration mode. To restore the
default value, use the no form of this command.
cable privacy tek {grace-time [seconds] | life-time [seconds]}
no cable privacy tek {grace-time | life-time}
Note This command is applicable only on images that support BPI or BPI+ encryption.
Defaults The grace-time option is set to 600 seconds (10 minutes), and the life-time option to 43200 seconds
(12 hours).
Command Modes Interface configuration (cable interface only)
Command History
grace-time seconds (Optional) Length of traffic encryption grace-time in seconds. Valid range
is 60 to 1800 seconds. Default is 600 seconds (10 minutes).
life-time seconds (Optional) Length of the traffic encryption life-time in seconds. Valid
range is 180 to 604,8000. Default is 43,200 seconds (12 hours).
Release Modification
11.3 XA This command was introduced.
12.1(4)CX,
The valid range for both options was changed to support DOCSIS 1.1 and
12.2(1)XF1,
12.2(4)BC1
BPI+ encryption.
Usage Guidelines Baseline privacy on an HFC network is configured with key encryption keys (KEKs) and traffic
encryption keys (TEKs). The encryption is based on 40-bit or 56-bit data encryption standard (DES)
encryption algorithms.
The TEK is assigned to a CM when its KEK has been established. The TEK is used to encrypt data traffic
between the CM and the Cisco CMTS. TEKs can be set to expire based on a grace-time or a life-time
value.
The grace-time keyword is used to assign a temporary key to a CM to access the network. The life-time
keyword is used to assign a more permanent key to a CM.
A CM that has a grace-time or life-time key assigned by the Cisco CMTS requests a new key before the
current one expires.
2-123