Cuda 12000 IP Access Switch CLI-based Administration Guide
Cable Modem and Subscriber Administration Commands 579
privacy base cert-trust
{trusted | untrusted}
interface:cable:csi Sets the trust for all new
self-assigned manufacturer
certificates.
privacy base
enable-cert-validity-periods
{true | false}
interface:cable:csi Sets the certificates to have or not
to have the validity period checked
against the current time of day.
privacy base tek-lifetime
<0..6048000>
interface:cable:csi Sets the lifetime in seconds that
the CMTS assigns to a new TEK.
privacy ca-cert <number> [{trusted |
untrusted | chained | root}] certificate
<filename>
■ root
■ interface:cable:csi
Specifies manufacturer
certification authority (CA) X.509
certificates.
privacy cm-cert <mac> [{trusted |
untrusted}] certificate <filename>
■ root
■ interface:cable:csi
Assigns an X.509 CM certificate to
a cable modem.
privacy encryption {40-bit-des |
56-bit-des}
interface:cable:csi Specifies the type of encryption
used for baseline privacy.
privacy multicast ip <index>
<multicast-ip-address> <mask> said
<number> sa-type {dynamic | none |
primary | static} encrypt-alg
{des40cbcMode | des56cbcMode |
none} authent-alg none
interface:cable:csi Sets the IP multicast address
mapping entry and its prefix for
the associated SAID.
privacy multicast mac
<mac-address> said <number>
interface:cable:csi Sets the MAC address of the cable
modem that is authorized to
access the defined multicast
stream via the SAID.
privacy tek <said> {tek-lifetime
<number> | reset}
interface:cable:csi Sets the lifetime, in seconds, that
the CMTS assigns to a Traffic
Encryption Key (TEK) for an
associated SAID.
Command Mode Description