All MIBs › CADANT-CMTS-BPI2-MIB
Organization: Cadant Inc
Last Updated: 2014-07-30
Category: Cisco Devices, DOCSIS and Cable, Vendor: ARRIS
Description: Manages Baseline Privacy Interface Plus (BPI+) encryption and key management for cable modems on ARRIS/Cadant CMTS equipment.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CADANT-CMTS-BPI2-MIB?
CADANT-CMTS-BPI2-MIB is an ARRIS (formerly Cadant) enterprise MIB, derived from the standard DOCS-BPI2-MIB, that manages Baseline Privacy Interface Plus (BPI+) encryption and certificate-based authentication on Cadant/ARRIS CMTS (Cable Modem Termination System) platforms. It exposes CMTS-wide BPI+ policy such as default authorization and Traffic Encryption Key (TEK) lifetimes, self-signed manufacturer certificate trust settings, certificate validity-period checking, and AES-128 encryption enablement, organized under a base configuration table. Its monitoring role is chiefly about security/software configuration status, confirming which encryption and certificate-trust modes are active, rather than physical hardware sensors, letting operators verify that cable modem traffic encryption policy is correctly and consistently applied across the CMTS. As its name indicates it explicitly derives from and extends the IETF/CableLabs standard DOCS-BPI2-MIB. It is deployed on ARRIS/Cadant CMTS headend equipment serving DOCSIS cable modems in an HFC network. Engineers can download the CADANT-CMTS-BPI2-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CADANT-CMTS-BPI2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- ARRIS/Cadant CMTS (cable modem termination system)
Monitoring Examples
An operator would check cadBpi2CmtsBaseTable/cadBpi2CmtsBaseEntry for cadBpi2CmtsDefaultAuthLifetime and cadBpi2CmtsDefaultTEKLifetime to confirm key rotation intervals match security policy across the CMTS. Reviewing cadBpi2CmtsAES128Enable and cadBpi2CmtsDefaultSelfSignedManufCertTrust reveals whether stronger encryption is enabled and whether self-signed modem certificates are being trusted, a potential security gap if enabled unexpectedly. Checking cadBpi2CmtsCheckCertValidityPeriods confirms whether the CMTS is enforcing certificate expiration checks for connecting modems.
What Can Be Monitored
- default auth/TEK key lifetimes
- self-signed certificate trust setting
- certificate validity-period enforcement
- AES-128 encryption enablement
Imported Objects
From CADANT-PRODUCTS-MIB
| cadSystem | OBJECT-IDENTITY |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| TruthValue |
OIDs
RFC description
Vendor-private MIB for Cadant cable modem termination system (CMTS) baseline privacy interface (BPI2) security module management.
Start monitoring ARRIS/Cadant C4/E6000 CMTS (cable modem termination system) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.