DOCS-BPI-MIB

All MIBs › DOCS-BPI-MIB

Organization: IETF IPCDN Working Group

Last Updated: 2001-03-13

Category: DOCSIS and Cable, Network Interfaces

Description: Defines managed objects for the DOCSIS 1.0 Baseline Privacy Interface (BPI) on cable modems and cable modem termination systems.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring DOCS-BPI-MIB with a free 30-day trial of IPNetwork Monitor.

What Is DOCS-BPI-MIB?

DOCS-BPI-MIB is the CableLabs/IETF standard MIB for DOCSIS 1.0 Baseline Privacy Interface (BPI), the encryption/authentication mechanism used between cable modems (CMs) and cable modem termination systems (CMTSs); implementing it is a mandatory prerequisite for DOCSIS 1.0 certification, making it a vendor-neutral cable-industry standard rather than a proprietary module. It exposes per-cable-modem BPI configuration and state in docsBpiCmBaseTable, including whether privacy is enabled, the modem's public key, and detailed authentication state such as docsBpiCmAuthState, key sequence number, and expiration/grace timers. For monitoring, this is fundamentally a security/software-state MIB: docsBpiCmAuthState reveals whether a modem's authorization with the CMTS has succeeded, is pending, or has failed/expired, and docsBpiCmAuthExpires/docsBpiCmTEKGraceTime let an operator track when re-authentication or key renewal is due, which surfaces as service-interruption risk if authentication lapses. It depends on the broader DOCSIS cable device framework for general modem/CMTS identity and registration context that BPI authentication builds on top of. It is deployed by cable operators (MSOs) managing HFC networks to ensure only authorized, encrypted cable modems remain in service. Engineers implementing or auditing this functionality typically reference the DOCS-BPI-MIB RFC/standard documentation for the authoritative specification.

IPNetwork Monitor allows you to monitor SNMP objects defined in DOCS-BPI-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

cable modem (CM)
cable modem termination system (CMTS)
vendor-neutral, standards-based DOCSIS MIB

Monitoring Examples

An operator polling docsBpiCmBaseTable/docsBpiCmBaseEntry can check docsBpiCmAuthState and docsBpiCmAuthKeySequenceNumber to confirm a modem is authorized and its key sequence is current, and watch docsBpiCmAuthExpires to anticipate an upcoming re-authorization cycle. If docsBpiCmAuthState shows a modem stuck in an unauthorized or reject state while docsBpiCmPrivacyEnable is set, that flags an authentication failure likely to knock the modem's data service offline. docsBpiCmAuthReset lets an admin force re-authentication to recover a modem stuck in that state, and docsBpiCmAuthWaitTimeout/docsBpiCmAuthGraceTime govern how long the CMTS waits before escalating.

What Can Be Monitored

BPI privacy enable status
cable modem authorization state
auth key sequence number and expiration
TEK grace time
auth wait timeout

Imported Objects

From DOCS-IF-MIB

docsIfCmServiceId	OBJECT-TYPE
docsIfCmtsServiceId	OBJECT-TYPE
docsIfMib	MODULE-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DateAndTime
DisplayString
MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using docsBpiCmAuthRequests OID:

Select a Cable modem/CMTS implementing DOCSIS 1.0 Baseline Privacy (vendor-neutral, CableLabs/IETF standard) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type docsBpiCmAuthRequests into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The value of this object is the count of times the CM has transmitted an Authorization Request message. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
docsBpiBasicCompliance	1.3.6.1.2.1.10.127.5.3.1.1			This is the compliance statement for devices which implement the DOCSIS Baseline Privacy Interface.
DAT docsBpiCmAuthExpires	1.3.6.1.2.1.10.127.5.1.1.1.1.5	DateAndTime	read-only	The value of this object is the actual clock time when the current authorization for this FSM expires. If the CM does not have an active authorization, then the value is of the expiration date and time of the last active authorization.
I32 docsBpiCmAuthGraceTime	1.3.6.1.2.1.10.127.5.1.1.1.1.7	Integer32	read-only	The value of this object is the grace time for an authorization key. A CM is expected to start trying to get a new authorization key beginning AuthGraceTime seconds before the authorization key actually expires.
INT docsBpiCmAuthInvalidErrorCode	1.3.6.1.2.1.10.127.5.1.1.1.1.20	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in most recent Authorization Invalid message received by the CM. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no Authorization Invalid message has been received since reboot.
STR docsBpiCmAuthInvalidErrorString	1.3.6.1.2.1.10.127.5.1.1.1.1.21	DisplayString	read-only	The value of this object is the Display-String in most recent Authorization Invalid message received by the CM. This is a zero length string if no Authorization Invalid message has been received since reboot.
C32 docsBpiCmAuthInvalids	1.3.6.1.2.1.10.127.5.1.1.1.1.17	Counter32	read-only	The value of this object is the count of times the CM has received an Authorization Invalid message.
I32 docsBpiCmAuthKeySequenceNumber	1.3.6.1.2.1.10.127.5.1.1.1.1.4	Integer32	read-only	The value of this object is the authorization key sequence number for this FSM.
INT docsBpiCmAuthRejectErrorCode	1.3.6.1.2.1.10.127.5.1.1.1.1.18	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in most recent Authorization Reject message received by the CM. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no Authorization Reject message has been received since reboot.
STR docsBpiCmAuthRejectErrorString	1.3.6.1.2.1.10.127.5.1.1.1.1.19	DisplayString	read-only	The value of this object is the Display-String in most recent Authorization Reject message received by the CM. This is a zero length string if no Authorization Reject message has been received since reboot.
C32 docsBpiCmAuthRejects	1.3.6.1.2.1.10.127.5.1.1.1.1.16	Counter32	read-only	The value of this object is the count of times the CM has received an Authorization Reject message.
I32 docsBpiCmAuthRejectWaitTimeout	1.3.6.1.2.1.10.127.5.1.1.1.1.13	Integer32	read-only	The value of this object is the Authorization Reject Wait Timeout in seconds.
C32 docsBpiCmAuthReplies	1.3.6.1.2.1.10.127.5.1.1.1.1.15	Counter32	read-only	The value of this object is the count of times the CM has received an Authorization Reply message.
C32 docsBpiCmAuthRequestsEx	1.3.6.1.2.1.10.127.5.1.1.1.1.14	Counter32	read-only	The value of this object is the count of times the CM has transmitted an Authorization Request message.
T/F docsBpiCmAuthReset	1.3.6.1.2.1.10.127.5.1.1.1.1.6	TruthValue	read-write	Setting this object to TRUE generates a Reauthorize event in the authorization FSM. Reading this object always returns FALSE.
INT docsBpiCmAuthState	1.3.6.1.2.1.10.127.5.1.1.1.1.3	INTEGER	read-only	The value of this object is the state of the CM authorization FSM. The start state indicates that FSM is in its initial state.
I32 docsBpiCmAuthWaitTimeout	1.3.6.1.2.1.10.127.5.1.1.1.1.9	Integer32	read-only	The value of this object is the Authorize Wait Timeout.
docsBpiCmBaseEntry	1.3.6.1.2.1.10.127.5.1.1.1.1		not-accessible	Each entry contains objects describing attributes of one CM MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
docsBpiCmBaseTable	1.3.6.1.2.1.10.127.5.1.1.1		not-accessible	This table describes the basic and authorization-related Baseline Privacy attributes of each CM MAC interface.
docsBpiCmGroup	1.3.6.1.2.1.10.127.5.3.2.1			This collection of objects provides CM BPI status and control.
docsBpiCmObjects	1.3.6.1.2.1.10.127.5.1.1
I32 docsBpiCmOpWaitTimeout	1.3.6.1.2.1.10.127.5.1.1.1.1.11	Integer32	read-only	The value of this object is the Operational Wait Timeout in seconds.
T/F docsBpiCmPrivacyEnable	1.3.6.1.2.1.10.127.5.1.1.1.1.1	TruthValue	read-only	This object identifies whether this CM is provisioned to run Baseline Privacy. This is analogous to the presence (or absence) of the Baseline Privacy Configuration Setting option. The status of each individual SID with respect to Baseline Privacy is captured in the docsBpiCmTEKPrivacyEnable object.
OCT docsBpiCmPublicKey	1.3.6.1.2.1.10.127.5.1.1.1.1.2	OCTET STRING	read-only	The value of this object is a DER-encoded RSAPublicKey ASN.1 type string, as defined in the RSA Encryption Standard (PKCS #1) [22], corresponding to the public key of the CM. The 74, 106, 140, and 270 byte key encoding lengths correspond to 512 bit, 768 bit, 1024 bit, and 2048 public moduli respectively.
I32 docsBpiCmReauthWaitTimeout	1.3.6.1.2.1.10.127.5.1.1.1.1.10	Integer32	read-only	The value of this object is the Reauthorize Wait Timeout in seconds.
I32 docsBpiCmRekeyWaitTimeout	1.3.6.1.2.1.10.127.5.1.1.1.1.12	Integer32	read-only	The value of this object is the Rekey Wait Timeout in seconds.
C32 docsBpiCmTEKAuthPends	1.3.6.1.2.1.10.127.5.1.1.2.1.9	Counter32	read-only	The value of this object is the count of times an Authorization Pending (Auth Pend) event occurred in this FSM.
docsBpiCmTEKEntry	1.3.6.1.2.1.10.127.5.1.1.2.1		not-accessible	Each entry contains objects describing the TEK association attributes of one SID. The CM MUST create one entry per unicast SID, regardless of whether the SID was obtained from a Registration Response message, or from an Authorization Reply message.
DAT docsBpiCmTEKExpiresNew	1.3.6.1.2.1.10.127.5.1.1.2.1.4	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the most recent TEK for this FSM.
DAT docsBpiCmTEKExpiresOld	1.3.6.1.2.1.10.127.5.1.1.2.1.3	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent TEK for this FSM. If this FSM has only one TEK, then the value is the time of activation of this FSM.
I32 docsBpiCmTEKGraceTime	1.3.6.1.2.1.10.127.5.1.1.1.1.8	Integer32	read-only	The value of this object is the grace time for a TEK. A CM is expected to start trying to get a new TEK beginning TEKGraceTime seconds before the TEK actually expires.
INT docsBpiCmTEKInvalidErrorCode	1.3.6.1.2.1.10.127.5.1.1.2.1.12	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in most recent TEK Invalid message received by the CM. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no TEK Invalid message has been received since reboot.
STR docsBpiCmTEKInvalidErrorString	1.3.6.1.2.1.10.127.5.1.1.2.1.13	DisplayString	read-only	The value of this object is the Display-String in most recent TEK Invalid message received by the CM. This is a zero length string if no TEK Invalid message has been received since reboot.
C32 docsBpiCmTEKInvalids	1.3.6.1.2.1.10.127.5.1.1.2.1.8	Counter32	read-only	The value of this object is the count of times the CM has received a TEK Invalid message, including a message whose authentication failed.
INT docsBpiCmTEKKeyRejectErrorCode	1.3.6.1.2.1.10.127.5.1.1.2.1.10	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in most recent Key Reject message received by the CM. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no Key Reject message has been received since reboot.
STR docsBpiCmTEKKeyRejectErrorString	1.3.6.1.2.1.10.127.5.1.1.2.1.11	DisplayString	read-only	The value of this object is the Display-String in most recent Key Reject message received by the CM. This is a zero length string if no Key Reject message has been received since reboot.
C32 docsBpiCmTEKKeyRejects	1.3.6.1.2.1.10.127.5.1.1.2.1.7	Counter32	read-only	The value of this object is the count of times the CM has received a Key Reject message, including a message whose authentication failed.
C32 docsBpiCmTEKKeyReplies	1.3.6.1.2.1.10.127.5.1.1.2.1.6	Counter32	read-only	The value of this object is the count of times the CM has received a Key Reply message, including a message whose authentication failed.
C32 docsBpiCmTEKKeyRequests	1.3.6.1.2.1.10.127.5.1.1.2.1.5	Counter32	read-only	The value of this object is the count of times the CM has transmitted a Key Request message.
T/F docsBpiCmTEKPrivacyEnable	1.3.6.1.2.1.10.127.5.1.1.2.1.1	TruthValue	read-only	This object identifies whether this SID is provisioned to run Baseline Privacy. This is analogous to enabling Baseline Privacy on a provisioned SID using the Class-of-Service Privacy Enable option. Baseline Privacy is not effectively enabled for any SID unless Baseline Privacy is enabled for the CM, which is managed via the docsBpiCmPrivacyEnable object.
INT docsBpiCmTEKState	1.3.6.1.2.1.10.127.5.1.1.2.1.2	INTEGER	read-only	The value of this object is the state of the indicated TEK FSM. The start(1) state indicates that FSM is in its initial state.
docsBpiCmTEKTable	1.3.6.1.2.1.10.127.5.1.1.2		not-accessible	This table describes the attributes of each CM Traffic Encryption Key (TEK) association. The CM maintains (no more than) one TEK association per SID per CM MAC interface.
DAT docsBpiCmtsAuthCmExpires	1.3.6.1.2.1.10.127.5.1.2.2.1.4	DateAndTime	read-only	The value of this object is the actual clock time when the current authorization for this CM expires. If this CM does not have an active authorization, then the value is of the expiration date and time of the last active authorization.
I32 docsBpiCmtsAuthCmGraceTime	1.3.6.1.2.1.10.127.5.1.2.2.1.6	Integer32	read-only	The value of this object is the grace time for the authorization key in seconds. The CM is expected to start trying to get a new authorization key beginning AuthGraceTime seconds before the authorization key actually expires.
C32 docsBpiCmtsAuthCmInvalids	1.3.6.1.2.1.10.127.5.1.2.2.1.11	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted an Authorization Invalid message to this CM.
I32 docsBpiCmtsAuthCmKeySequenceNumber	1.3.6.1.2.1.10.127.5.1.2.2.1.3	Integer32	read-only	The value of this object is the authorization key sequence number for this CM.
I32 docsBpiCmtsAuthCmLifetime	1.3.6.1.2.1.10.127.5.1.2.2.1.5	Integer32	read-write	The value of this object is the lifetime, in seconds, the CMTS assigns to an authorization key for this CM.
MAC docsBpiCmtsAuthCmMacAddress	1.3.6.1.2.1.10.127.5.1.2.2.1.1	MacAddress	not-accessible	The value of this object is the physical address of the CM to which the authorization association applies.
OCT docsBpiCmtsAuthCmPublicKey	1.3.6.1.2.1.10.127.5.1.2.2.1.2	OCTET STRING	read-only	The value of this object is a DER-encoded RSAPublicKey ASN.1 type string, as defined in the RSA Encryption Standard (PKCS #1) [22], corresponding to the public key of the CM. The 74, 106, 140, and 270 byte key encoding lengths correspond to 512 bit, 768 bit, 1024 bit, and 2048 public moduli respectively. This is a zero-length string if the CMTS does not retain the public key.
C32 docsBpiCmtsAuthCmRejects	1.3.6.1.2.1.10.127.5.1.2.2.1.10	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted an Authorization Reject message to this CM.
C32 docsBpiCmtsAuthCmReplies	1.3.6.1.2.1.10.127.5.1.2.2.1.9	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted an Authorization Reply message to this CM.
C32 docsBpiCmtsAuthCmRequests	1.3.6.1.2.1.10.127.5.1.2.2.1.8	Counter32	read-only	The value of this object is the count of times the CMTS has received an Authorization Request message from this CM.
INT docsBpiCmtsAuthCmReset	1.3.6.1.2.1.10.127.5.1.2.2.1.7	INTEGER	read-write	Setting this object to invalidateAuth(2) causes the CMTS to invalidate the current CM authorization key, but not to transmit an Authorization Invalid message nor to invalidate unicast TEKs. Setting this object to sendAuthInvalid(3) causes the CMTS to invalidate the current CM authorization key, and to transmit an Authorization Invalid message to the CM, but not to invalidate unicast TEKs. Setting this object to invalidateTeks(4) causes the CMTS to invalidate the current CM authorization key, to transmit an Authorization Invalid message to the CM, and to invalidate all unicast TEKs associated with this CM authorization. Reading this object returns the most-recently-set value of this object, or returns noResetRequested(1) if the object has not been set since the last CMTS reboot.
docsBpiCmtsAuthEntry	1.3.6.1.2.1.10.127.5.1.2.2.1		not-accessible	Each entry contains objects describing attributes of one authorization association. The CMTS MUST create one entry per CM per MAC interface, based on the receipt of an Authorization Request message, and MUST not delete the entry before the CM authorization permanently expires.
INT docsBpiCmtsAuthInvalidErrorCode	1.3.6.1.2.1.10.127.5.1.2.2.1.14	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in most recent Authorization Invalid message transmitted to the CM. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no Authorization Invalid message has been transmitted to the CM.
STR docsBpiCmtsAuthInvalidErrorString	1.3.6.1.2.1.10.127.5.1.2.2.1.15	DisplayString	read-only	The value of this object is the Display-String in most recent Authorization Invalid message transmitted to the CM. This is a zero length string if no Authorization Invalid message has been transmitted to the CM.
C32 docsBpiCmtsAuthInvalids	1.3.6.1.2.1.10.127.5.1.2.1.1.8	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted an Authorization Invalid message to any CM.
INT docsBpiCmtsAuthRejectErrorCode	1.3.6.1.2.1.10.127.5.1.2.2.1.12	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in most recent Authorization Reject message transmitted to the CM. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no Authorization Reject message has been transmitted to the CM.
STR docsBpiCmtsAuthRejectErrorString	1.3.6.1.2.1.10.127.5.1.2.2.1.13	DisplayString	read-only	The value of this object is the Display-String in most recent Authorization Reject message transmitted to the CM. This is a zero length string if no Authorization Reject message has been transmitted to the CM.
C32 docsBpiCmtsAuthRejects	1.3.6.1.2.1.10.127.5.1.2.1.1.7	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted an Authorization Reject message to any CM.
C32 docsBpiCmtsAuthReplies	1.3.6.1.2.1.10.127.5.1.2.1.1.6	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted an Authorization Reply message to any CM.
C32 docsBpiCmtsAuthRequests	1.3.6.1.2.1.10.127.5.1.2.1.1.5	Counter32	read-only	The value of this object is the count of times the CMTS has received an Authorization Request message from any CM.
docsBpiCmtsAuthTable	1.3.6.1.2.1.10.127.5.1.2.2		not-accessible	This table describes the attributes of each CM authorization association. The CMTS maintains one authorization association with each Baseline Privacy-enabled CM on each CMTS MAC interface.
docsBpiCmtsBaseEntry	1.3.6.1.2.1.10.127.5.1.2.1.1		not-accessible	Each entry contains objects describing attributes of one CMTS MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
docsBpiCmtsBaseTable	1.3.6.1.2.1.10.127.5.1.2.1		not-accessible	This table describes the basic Baseline Privacy attributes of each CMTS MAC interface.
I32 docsBpiCmtsDefaultAuthGraceTime	1.3.6.1.2.1.10.127.5.1.2.1.1.3	Integer32	read-write	This object was obsoleted because the provisioning system, not the CMTS, manages the authorization key grace time for DOCSIS CMs.
I32 docsBpiCmtsDefaultAuthLifetime	1.3.6.1.2.1.10.127.5.1.2.1.1.1	Integer32	read-write	The value of this object is the default lifetime, in seconds, the CMTS assigns to a new authorization key.
I32 docsBpiCmtsDefaultTEKGraceTime	1.3.6.1.2.1.10.127.5.1.2.1.1.4	Integer32	read-write	This object was obsoleted because the provisioning system, not the CMTS, manages the Traffic Encryption Key (TEK) grace time for DOCSIS CMs.
I32 docsBpiCmtsDefaultTEKLifetime	1.3.6.1.2.1.10.127.5.1.2.1.1.2	Integer32	read-write	The value of this object is the default lifetime, in seconds, the CMTS assigns to a new Traffic Encryption Key (TEK).
docsBpiCmtsGroup	1.3.6.1.2.1.10.127.5.3.2.2			This collection of objects provides CMTS BPI status and control.
INT docsBpiCmtsKeyRejectErrorCode	1.3.6.1.2.1.10.127.5.1.2.3.1.10	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Key Reject message sent in response to a Key Request for this BPI SID. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no Key Reject message has been received since reboot.
STR docsBpiCmtsKeyRejectErrorString	1.3.6.1.2.1.10.127.5.1.2.3.1.11	DisplayString	read-only	The value of this object is the Display-String in the most recent Key Reject message sent in response to a Key Request for this BPI SID. This is a zero length string if no Key Reject message has been received since reboot.
C32 docsBpiCmtsKeyRejects	1.3.6.1.2.1.10.127.5.1.2.3.1.8	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted a Key Reject message.
C32 docsBpiCmtsKeyReplies	1.3.6.1.2.1.10.127.5.1.2.3.1.7	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted a Key Reply message.
C32 docsBpiCmtsKeyRequests	1.3.6.1.2.1.10.127.5.1.2.3.1.6	Counter32	read-only	The value of this object is the count of times the CMTS has received a Key Request message.
docsBpiCmtsObjects	1.3.6.1.2.1.10.127.5.1.2
docsBpiCmtsTEKEntry	1.3.6.1.2.1.10.127.5.1.2.3.1		not-accessible	Each entry contains objects describing attributes of one TEK association on a particular CMTS MAC interface. The CMTS MUST create one entry per SID per MAC interface, based on the receipt of an Key Request message, and MUST not delete the entry before the CM authorization for the SID permanently expires.
DAT docsBpiCmtsTEKExpiresNew	1.3.6.1.2.1.10.127.5.1.2.3.1.4	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the most recent TEK for this FSM.
DAT docsBpiCmtsTEKExpiresOld	1.3.6.1.2.1.10.127.5.1.2.3.1.3	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent TEK for this FSM. If this FSM has only one TEK, then the value is the time of activation of this FSM.
I32 docsBpiCmtsTEKGraceTime	1.3.6.1.2.1.10.127.5.1.2.3.1.2	Integer32	read-only	The value of this object is the grace time for the TEK in seconds. The CM is expected to start trying to get a new TEK beginning TEKGraceTime seconds before the TEK actually expires.
INT docsBpiCmtsTEKInvalidErrorCode	1.3.6.1.2.1.10.127.5.1.2.3.1.12	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent TEK Invalid message sent in association with this BPI SID. This has value unknown(2) if the last Error-Code value was 0, and none(1) if no TEK Invalid message has been received since reboot.
STR docsBpiCmtsTEKInvalidErrorString	1.3.6.1.2.1.10.127.5.1.2.3.1.13	DisplayString	read-only	The value of this object is the Display-String in the most recent TEK Invalid message sent in association with this BPI SID. This is a zero length string if no TEK Invalid message has been received since reboot.
C32 docsBpiCmtsTEKInvalids	1.3.6.1.2.1.10.127.5.1.2.3.1.9	Counter32	read-only	The value of this object is the count of times the CMTS has transmitted a TEK Invalid message.
I32 docsBpiCmtsTEKLifetime	1.3.6.1.2.1.10.127.5.1.2.3.1.1	Integer32	read-write	The value of this object is the lifetime, in seconds, the CMTS assigns to keys for this TEK association.
T/F docsBpiCmtsTEKReset	1.3.6.1.2.1.10.127.5.1.2.3.1.5	TruthValue	read-write	Setting this object to TRUE causes the CMTS to invalidate the current active TEK(s) (plural due to key transition periods), and to generate a new TEK for the associated SID; the CMTS MAY also generate an unsolicited TEK Invalid message, to optimize the TEK synchronization between the CMTS and the CM. Reading this object always returns FALSE.
docsBpiCmtsTEKTable	1.3.6.1.2.1.10.127.5.1.2.3		not-accessible	This table describes the attributes of each CM Traffic Encryption Key (TEK) association. The CMTS maintains one TEK association per BPI SID on each CMTS MAC interface.
docsBpiCompliances	1.3.6.1.2.1.10.127.5.3.1
docsBpiConformance	1.3.6.1.2.1.10.127.5.3
docsBpiGroups	1.3.6.1.2.1.10.127.5.3.2
IP docsBpiIpMulticastAddress	1.3.6.1.2.1.10.127.5.1.2.4.1.1.1	IpAddress	not-accessible	This object represents the IP multicast address (prefix) to be mapped by this row, in conjunction with docsBpiIpMulticastPrefixLength.
ROW docsBpiIpMulticastMapControl	1.3.6.1.2.1.10.127.5.1.2.4.1.1.4	RowStatus	read-create	This object controls and reflects the IP multicast address prefix mapping entry. There is no restriction on the ability to change values in this row while the row is active.
docsBpiIpMulticastMapEntry	1.3.6.1.2.1.10.127.5.1.2.4.1.1		not-accessible	Each entry contains objects describing the mapping of one IP multicast address prefix to one multicast SID on one CMTS MAC interface. The CMTS uses the mapping when forwarding downstream IP multicast traffic.
docsBpiIpMulticastMapTable	1.3.6.1.2.1.10.127.5.1.2.4.1		not-accessible	This table describes the mapping of IP multicast address prefixes to multicast SIDs on each CMTS MAC interface.
I32 docsBpiIpMulticastPrefixLength	1.3.6.1.2.1.10.127.5.1.2.4.1.1.2	Integer32	not-accessible	This object represents the IP multicast address prefix length for this row. The value of this object represents the length in bits of docsBpiIpMulticastAddress for multicast address comparisons, using big-endian ordering. An IP multicast address matches this row if the (docsBpiIpMulticastPrefixLength) most significant bits of the IP multicast address and of the (docsBpiIpMulticastAddress) are identical. This object is similar in usage to an IP address mask. The value 0 corresponds to IP address mask 0.0.0.0, the value 1 corresponds to IP address mask 128.0.0.0, the value 8 corresponds to IP address mask 255.0.0.0, and the value 32 corresponds to IP address mask 255.255.255.255.
I32 docsBpiIpMulticastServiceId	1.3.6.1.2.1.10.127.5.1.2.4.1.1.3	Integer32	read-create	This object represents the multicast SID to be used in this IP multicast address prefix mapping entry.
docsBpiMIB	1.3.6.1.2.1.10.127.5			This is the MIB Module for the DOCSIS Baseline Privacy Interface (BPI) at cable modems (CMs) and cable modem termination systems (CMTSs). CableLabs requires the implementation of this MIB in DOCSIS 1.0 cable modems that implement the Baseline Privacy Interface, as a prerequisite for DOCSIS 1.0 certification.
docsBpiMIBObjects	1.3.6.1.2.1.10.127.5.1
ROW docsBpiMulticastAuthControl	1.3.6.1.2.1.10.127.5.1.2.4.2.1.3	RowStatus	read-create	This object controls and reflects the CM authorization for each multicast SID. There is no restriction on the ability to change values in this row while the row is active.
docsBpiMulticastAuthEntry	1.3.6.1.2.1.10.127.5.1.2.4.2.1		not-accessible	Each entry contains objects describing the key authorization of one cable modem for one multicast SID for one CMTS MAC interface.
docsBpiMulticastAuthTable	1.3.6.1.2.1.10.127.5.1.2.4.2		not-accessible	This table describes the multicast SID authorization for each CM on each CMTS MAC interface.
MAC docsBpiMulticastCmMacAddress	1.3.6.1.2.1.10.127.5.1.2.4.2.1.2	MacAddress	not-accessible	This object represents the MAC address of the CM to which the multicast SID authorization applies.
docsBpiMulticastControl	1.3.6.1.2.1.10.127.5.1.2.4
I32 docsBpiMulticastServiceId	1.3.6.1.2.1.10.127.5.1.2.4.2.1.1	Integer32	not-accessible	This object represents the multicast SID for authorization.
docsBpiNotification	1.3.6.1.2.1.10.127.5.2
docsBpiObsoleteObjectsGroup	1.3.6.1.2.1.10.127.5.3.2.3			This is a collection of obsolete BPI objects.

RFC description

DOCSIS Baseline Privacy Interface MIB for cable modems and CMTSs managing encryption and security.

Start monitoring Cable modem/CMTS implementing DOCSIS 1.0 Baseline Privacy (vendor-neutral, CableLabs/IETF standard) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DOCS-BPI-MIB