Motorola BSR 2000, Руководство по настройке и управлению

Страница: 279 / 650

Release 1.0 Configuring the CMTS
526360-001-00 Rev. B MGBI 6-93
Configuring Baseline Privacy
This section contains the tasks to configure Baseline Privacy (BPI). You must
configure BPI to encrypt upstream and downstream data on an HFC network. BPI is
activated by default and, in most cases, the BPI parameter default values are
satisfactory. The optional tasks described in this section involve some parameters you
may choose to change. If a parameter default is satisfactory, you can ignore its
associated task.
You can set the Traffic Encryption Key (TEK) and Authorization Key (AK) for BPI.
The encryption is based on 40-bit or 56-bit Data Encryption Standard (DES)
algorithms.
You can set the TEK to expire based on a grace-time value or a lifetime value. A
grace-time key assigns a temporary key to a CM to access the network. A lifetime key
assigns a more permanent key to a CM. Each CM that has an assigned lifetime key
requests a new lifetime key from the cable interface before the current key expires.
Configuring BPI involves the following tasks:
■
Setting TEK Privacy
■
Setting Authorization Key Values
■
Displaying BPI Configuration Settings
Table 6-12 describes the BPI parameters.
Note: The configuration and activation of BPI depend on the cable operator
physical plant.
Table 6-12 BPI Parameters
Parameter Identification Default Value
AK grace-time Temporary AK assigned to the CM 600 seconds 300 to 1,800
seconds
AK lifetime More permanent AK assigned to
the CM after grace-time AK
expires 604,800
seconds 1 to 6,048,000
seconds