DOCS-IETF-BPI2-MIB

All MIBs › DOCS-IETF-BPI2-MIB

Organization: IETF IP over Cable Data Network (IPCDN) Working Group

Last Updated: 2005-07-20

Category: DOCSIS and Cable, Network Interfaces

Description: Defines managed objects for the DOCSIS Baseline Privacy Plus (BPI+) interface, extending BPI with enhanced security including digital certificates.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring DOCS-IETF-BPI2-MIB with a free 30-day trial of IPNetwork Monitor.

What Is DOCS-IETF-BPI2-MIB?

DOCS-IETF-BPI2-MIB (RFC 4131) is a vendor-neutral IETF standards MIB that defines managed objects for DOCSIS Baseline Privacy Plus (BPI+), the enhanced security layer used between cable modems (CMs) and cable modem termination systems (CMTSs) in DOCSIS cable networks. It exposes configuration and status data related to security association management, digital certificate handling, key exchange state, and encryption enforcement for the cable access link. Its monitoring value is chiefly around security/software status rather than physical hardware: administrators use it to verify that a cable modem has successfully authenticated and established an active security association with the CMTS, and to detect authorization or certificate failures that would otherwise silently degrade or block service. It builds on core DOCSIS interface MIBs and X.509 certificate concepts, since BPI+ authentication depends on modem and CMTS digital certificates validated against a shared PKI, and consulting a DOCS-IETF-BPI2-MIB OID list is a useful first step for locating the docsBpi2CmtsObjects branch used to review per-modem security state. It is deployed in cable broadband access networks wherever DOCSIS BPI+ security is enabled between CMTS head-end equipment and subscriber cable modems.

IPNetwork Monitor allows you to monitor SNMP objects defined in DOCS-IETF-BPI2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
DOCSIS cable modem
DOCSIS CMTS (cable modem termination system)

Monitoring Examples

Because only the top-level container object docsBpi2CmtsObjects was provided as a sample, specific table names cannot be cited here beyond this root; in a real deployment an administrator would walk the CMTS-side objects under docsBpi2CmtsObjects to review per-cable-modem security association state, authorization status, and certificate validity. A modem stuck in an unauthorized or certificate-rejected state would be visible as an anomalous status value under this branch, indicating either a misconfigured certificate or a provisioning/authentication failure preventing the modem from passing traffic. This module is data-rich for security state but does not cover general interface throughput, which is handled by other DOCSIS MIBs.

What Can Be Monitored

security association status
modem authorization state
digital certificate validity
key exchange/encryption state

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32
mib-2

From SNMPv2-TC

DateAndTime
MacAddress
RowStatus
StorageType
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
C32 docsBpi2CmAuthentInfos	1.3.6.1.2.1.126.1.1.1.1.17	Counter32	read-only	The value of this object is the number of times the CM has transmitted an Authentication Information message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
DAT docsBpi2CmAuthExpiresNew	1.3.6.1.2.1.126.1.1.1.1.6	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the most recent authorization key for this FSM.
DAT docsBpi2CmAuthExpiresOld	1.3.6.1.2.1.126.1.1.1.1.5	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent authorization key for this FSM. If this FSM has only one authorization key, then the value is the time of activation of this FSM.
I32 docsBpi2CmAuthGraceTime	1.3.6.1.2.1.126.1.1.1.1.8	Integer32	read-only	The value of this object is the grace time for an authorization key in seconds. A CM is expected to start trying to get a new authorization key beginning AuthGraceTime seconds before the most recent authorization key actually expires.
INT docsBpi2CmAuthInvalidErrorCode	1.3.6.1.2.1.126.1.1.1.1.24	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Authorization Invalid message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Invalid message has been received since reboot.
STR docsBpi2CmAuthInvalidErrorString	1.3.6.1.2.1.126.1.1.1.1.25	SnmpAdminString	read-only	The value of this object is the text string in the most recent Authorization Invalid message received by the CM. This is a zero length string if no Authorization Invalid message has been received since reboot.
C32 docsBpi2CmAuthInvalids	1.3.6.1.2.1.126.1.1.1.1.21	Counter32	read-only	The value of this object is the count of times the CM has received an Authorization Invalid message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
I32 docsBpi2CmAuthKeySequenceNumber	1.3.6.1.2.1.126.1.1.1.1.4	Integer32	read-only	The value of this object is the most recent authorization key sequence number for this FSM.
INT docsBpi2CmAuthRejectErrorCode	1.3.6.1.2.1.126.1.1.1.1.22	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Authorization Reject message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Reject message has been received since reboot.
STR docsBpi2CmAuthRejectErrorString	1.3.6.1.2.1.126.1.1.1.1.23	SnmpAdminString	read-only	The value of this object is the text string in the most recent Authorization Reject message received by the CM. This is a zero length string if no Authorization Reject message has been received since reboot.
C32 docsBpi2CmAuthRejects	1.3.6.1.2.1.126.1.1.1.1.20	Counter32	read-only	The value of this object is the number of times the CM has received an Authorization Reject message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
I32 docsBpi2CmAuthRejectWaitTimeout	1.3.6.1.2.1.126.1.1.1.1.14	Integer32	read-only	The value of this object is the Authorization Reject Wait Timeout in seconds.
C32 docsBpi2CmAuthReplies	1.3.6.1.2.1.126.1.1.1.1.19	Counter32	read-only	The value of this object is the number of times the CM has received an Authorization Reply message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmAuthRequests	1.3.6.1.2.1.126.1.1.1.1.18	Counter32	read-only	The value of this object is the number of times the CM has transmitted an Authorization Request message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
T/F docsBpi2CmAuthReset	1.3.6.1.2.1.126.1.1.1.1.7	TruthValue	read-write	Setting this object to 'true' generates a Reauthorize event in the authorization FSM. Reading this object always returns FALSE. This object is for testing purposes only, and therefore it is not required to be associated with a last reset object.
INT docsBpi2CmAuthState	1.3.6.1.2.1.126.1.1.1.1.3	INTEGER	read-only	The value of this object is the state of the CM authorization FSM. The start state indicates that FSM is in its initial state.
I32 docsBpi2CmAuthWaitTimeout	1.3.6.1.2.1.126.1.1.1.1.10	Integer32	read-only	The value of this object is the Authorize Wait Timeout in seconds.
docsBpi2CmBaseEntry	1.3.6.1.2.1.126.1.1.1.1		not-accessible	Each entry contains objects describing attributes of one CM MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
docsBpi2CmBaseTable	1.3.6.1.2.1.126.1.1.1		not-accessible	This table describes the basic and authorization- related Baseline Privacy Plus attributes of each CM MAC interface.
docsBpi2CmCertObjects	1.3.6.1.2.1.126.1.1.4
docsBpi2CmCompliance	1.3.6.1.2.1.126.2.1.1			This is the compliance statement for CMs that implement the DOCSIS Baseline Privacy Interface Plus.
DOC docsBpi2CmCryptoSuiteDataAuthentAlg	1.3.6.1.2.1.126.1.1.5.1.3	DocsBpkmDataAuthentAlg	read-only	The value of this object is the data authentication algorithm for this cryptographic suite capability.
DOC docsBpi2CmCryptoSuiteDataEncryptAlg	1.3.6.1.2.1.126.1.1.5.1.2	DocsBpkmDataEncryptAlg	read-only	The value of this object is the data encryption algorithm for this cryptographic suite capability.
docsBpi2CmCryptoSuiteEntry	1.3.6.1.2.1.126.1.1.5.1		not-accessible	Each entry contains a cryptographic suite pair that this CM MAC supports.
U32 docsBpi2CmCryptoSuiteIndex	1.3.6.1.2.1.126.1.1.5.1.1	Unsigned32	not-accessible	The index for a cryptographic suite row.
docsBpi2CmCryptoSuiteTable	1.3.6.1.2.1.126.1.1.5		not-accessible	This table describes the Baseline Privacy Plus cryptographic suite capabilities for each CM MAC interface.
docsBpi2CmDeviceCertEntry	1.3.6.1.2.1.126.1.1.4.1.1		not-accessible	Each entry contains the device certificates of one CM MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
docsBpi2CmDeviceCertTable	1.3.6.1.2.1.126.1.1.4.1		not-accessible	This table describes the Baseline Privacy Plus device certificates for each CM MAC interface.
DOC docsBpi2CmDeviceCmCert	1.3.6.1.2.1.126.1.1.4.1.1.1	DocsX509ASN1DEREncodedCertificate	read-write	The X509 DER-encoded cable modem certificate. Note: This object can be set only when the value is the zero-length OCTET STRING; otherwise, an error of 'inconsistentValue' is returned. Once the object contains the certificate, its access MUST be read-only and persists after re-initialization of the managed system.
DOC docsBpi2CmDeviceManufCert	1.3.6.1.2.1.126.1.1.4.1.1.2	DocsX509ASN1DEREncodedCertificate	read-only	The X509 DER-encoded manufacturer certificate that signed the cable modem certificate.
docsBpi2CmGroup	1.3.6.1.2.1.126.2.2.1			This collection of objects provides CM BPI+ status and control.
IP docsBpi2CmIpMulticastAddress	1.3.6.1.2.1.126.1.1.3.1.1.3	InetAddress	read-only	This object represents the IP multicast address to be mapped. The type of this address is determined by the value of the docsBpi2CmIpMulticastAddressType object.
IPt docsBpi2CmIpMulticastAddressType	1.3.6.1.2.1.126.1.1.3.1.1.2	InetAddressType	read-only	The type of Internet address for docsBpi2CmIpMulticastAddress.
U32 docsBpi2CmIpMulticastIndex	1.3.6.1.2.1.126.1.1.3.1.1.1	Unsigned32	not-accessible	The index of this row.
docsBpi2CmIpMulticastMapEntry	1.3.6.1.2.1.126.1.1.3.1.1		not-accessible	Each entry contains objects describing the mapping of one multicast IP address to one SAID, as well as associated state, message counters, and error information. An entry may be removed from this table upon the reception of an SA Map Reject.
docsBpi2CmIpMulticastMapTable	1.3.6.1.2.1.126.1.1.3.1		not-accessible	This table maps multicast IP addresses to SAIDs per CM MAC Interface. It is intended to map multicast IP addresses associated with SA MAP Request messages.
DOC docsBpi2CmIpMulticastSAId	1.3.6.1.2.1.126.1.1.3.1.1.4	DocsSAIdOrZero	read-only	This object represents the SAID to which the IP multicast address has been mapped. If no SA Map Reply has been received for the IP address, this object should have the value 0.
INT docsBpi2CmIpMulticastSAMapRejectErrorCode	1.3.6.1.2.1.126.1.1.3.1.1.9	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent SA Map Reject message sent in response to an SA Map Request for This IP. It has the value none(1) if no SA MAP Reject message has been received since entry creation.
STR docsBpi2CmIpMulticastSAMapRejectErrorString	1.3.6.1.2.1.126.1.1.3.1.1.10	SnmpAdminString	read-only	The value of this object is the text string in the most recent SA Map Reject message sent in response to an SA Map Request for this IP. It is a zero length string if no SA Map Reject message has been received since entry creation.
C32 docsBpi2CmIpMulticastSAMapRejects	1.3.6.1.2.1.126.1.1.3.1.1.8	Counter32	read-only	The value of this object is the number of times the CM has received an SA MAP Reject message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmIpMulticastSAMapReplies	1.3.6.1.2.1.126.1.1.3.1.1.7	Counter32	read-only	The value of this object is the number of times the CM has received an SA Map Reply message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmIpMulticastSAMapRequests	1.3.6.1.2.1.126.1.1.3.1.1.6	Counter32	read-only	The value of this object is the number of times the CM has transmitted an SA Map Request message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
INT docsBpi2CmIpMulticastSAMapState	1.3.6.1.2.1.126.1.1.3.1.1.5	INTEGER	read-only	The value of this object is the state of the SA Mapping FSM for this IP.
docsBpi2CmMulticastObjects	1.3.6.1.2.1.126.1.1.3
docsBpi2CmObjects	1.3.6.1.2.1.126.1.1
I32 docsBpi2CmOpWaitTimeout	1.3.6.1.2.1.126.1.1.1.1.12	Integer32	read-only	The value of this object is the Operational Wait Timeout in seconds.
T/F docsBpi2CmPrivacyEnable	1.3.6.1.2.1.126.1.1.1.1.1	TruthValue	read-only	This object identifies whether this CM is provisioned to run Baseline Privacy Plus.
OCT docsBpi2CmPublicKey	1.3.6.1.2.1.126.1.1.1.1.2	OCTET STRING	read-only	The value of this object is a DER-encoded RSAPublicKey ASN.1 type string, as defined in the RSA Encryption Standard (PKCS #1), corresponding to the public key of the CM.
I32 docsBpi2CmReauthWaitTimeout	1.3.6.1.2.1.126.1.1.1.1.11	Integer32	read-only	The value of this object is the Reauthorize Wait Timeout in seconds.
I32 docsBpi2CmRekeyWaitTimeout	1.3.6.1.2.1.126.1.1.1.1.13	Integer32	read-only	The value of this object is the Rekey Wait Timeout in seconds.
I32 docsBpi2CmSAMapMaxRetries	1.3.6.1.2.1.126.1.1.1.1.16	Integer32	read-only	The value of this object is the maximum number of Map Request retries allowed.
I32 docsBpi2CmSAMapWaitTimeout	1.3.6.1.2.1.126.1.1.1.1.15	Integer32	read-only	The value of this object is the retransmission interval, in seconds, of SA Map Requests from the MAP Wait state.
C32 docsBpi2CmTEKAuthPends	1.3.6.1.2.1.126.1.1.2.1.13	Counter32	read-only	The value of this object is the count of times an Authorization Pending (Auth Pend) event occurred in this FSM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
DOC docsBpi2CmTEKDataAuthentAlg	1.3.6.1.2.1.126.1.1.2.1.4	DocsBpkmDataAuthentAlg	read-only	The value of this object is the data authentication algorithm for this SAID.
DOC docsBpi2CmTEKDataEncryptAlg	1.3.6.1.2.1.126.1.1.2.1.3	DocsBpkmDataEncryptAlg	read-only	The value of this object is the data encryption algorithm for this SAID.
docsBpi2CmTEKEntry	1.3.6.1.2.1.126.1.1.2.1		not-accessible	Each entry contains objects describing the TEK association attributes of one SAID. The CM MUST create one entry per SAID, regardless of whether the SAID was obtained from a Registration Response message, from an Authorization Reply message, or from any dynamic SAID establishment mechanisms.
DAT docsBpi2CmTEKExpiresNew	1.3.6.1.2.1.126.1.1.2.1.8	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the most recent TEK for this FSM.
DAT docsBpi2CmTEKExpiresOld	1.3.6.1.2.1.126.1.1.2.1.7	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent TEK for this FSM. If this FSM has only one TEK, then the value is the time of activation of this FSM.
I32 docsBpi2CmTEKGraceTime	1.3.6.1.2.1.126.1.1.1.1.9	Integer32	read-only	The value of this object is the grace time for the TEK in seconds. The CM is expected to start trying to acquire a new TEK beginning TEK GraceTime seconds before the expiration of the most recent TEK.
INT docsBpi2CmTEKInvalidErrorCode	1.3.6.1.2.1.126.1.1.2.1.16	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent TEK Invalid message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no TEK Invalid message has been received since registration.
STR docsBpi2CmTEKInvalidErrorString	1.3.6.1.2.1.126.1.1.2.1.17	SnmpAdminString	read-only	The value of this object is the text string in the most recent TEK Invalid message received by the CM. This is a zero length string if no TEK Invalid message has been received since registration.
C32 docsBpi2CmTEKInvalids	1.3.6.1.2.1.126.1.1.2.1.12	Counter32	read-only	The value of this object is the number of times the CM has received a TEK Invalid message, including a message whose authentication failed. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
INT docsBpi2CmTEKKeyRejectErrorCode	1.3.6.1.2.1.126.1.1.2.1.14	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Key Reject message received by the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Key Reject message has been received since registration.
STR docsBpi2CmTEKKeyRejectErrorString	1.3.6.1.2.1.126.1.1.2.1.15	SnmpAdminString	read-only	The value of this object is the text string in the most recent Key Reject message received by the CM. This is a zero length string if no Key Reject message has been received since registration.
C32 docsBpi2CmTEKKeyRejects	1.3.6.1.2.1.126.1.1.2.1.11	Counter32	read-only	The value of this object is the number of times the CM has received a Key Reject message, including a message whose authentication failed. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmTEKKeyReplies	1.3.6.1.2.1.126.1.1.2.1.10	Counter32	read-only	The value of this object is the number of times the CM has received a Key Reply message, including a message whose authentication failed. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmTEKKeyRequests	1.3.6.1.2.1.126.1.1.2.1.9	Counter32	read-only	The value of this object is the number of times the CM has transmitted a Key Request message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
I32 docsBpi2CmTEKKeySequenceNumber	1.3.6.1.2.1.126.1.1.2.1.6	Integer32	read-only	The value of this object is the most recent TEK key sequence number for this TEK FSM.
DOC docsBpi2CmTEKSAId	1.3.6.1.2.1.126.1.1.2.1.1	DocsSAId	not-accessible	The value of this object is the DOCSIS Security Association ID (SAID).
DOC docsBpi2CmTEKSAType	1.3.6.1.2.1.126.1.1.2.1.2	DocsBpkmSAType	read-only	The value of this object is the type of security association.
INT docsBpi2CmTEKState	1.3.6.1.2.1.126.1.1.2.1.5	INTEGER	read-only	The value of this object is the state of the indicated TEK FSM. The start(1) state indicates that the FSM is in its initial state.
docsBpi2CmTEKTable	1.3.6.1.2.1.126.1.1.2		not-accessible	This table describes the attributes of each CM Traffic Encryption Key (TEK) association. The CM maintains (no more than) one TEK association per SAID per CM MAC interface.
DOC docsBpi2CmtsAuthBpkmCmCert	1.3.6.1.2.1.126.1.2.2.1.20	DocsX509ASN1DEREncodedCertificate	read-only	The X509 CM Certificate sent as part of a BPKM Authorization Request. Note: The zero-length OCTET STRING must be returned if the Entire certificate is not retained in the CMTS.
INT docsBpi2CmtsAuthBpkmCmCertValid	1.3.6.1.2.1.126.1.2.2.1.19	INTEGER	read-only	Contains the reason why a CM's certificate is deemed valid or invalid. Return unknown(0) if the CM is running BPI mode. ValidCmChained(1) means the certificate is valid because it chains to a valid certificate. ValidCmTrusted(2) means the certificate is valid because it has been provisioned (in the docsBpi2CmtsProvisionedCmCert table) to be trusted. InvalidCmUntrusted(3) means the certificate is invalid because it has been provisioned (in the docsBpi2CmtsProvisionedCmCert table) to be untrusted. InvalidCAUntrusted(4) means the certificate is invalid because it chains to an untrusted certificate. InvalidCmOther(5) and InvalidCAOther(6) refer to errors in parsing, validity periods, etc., which are attributable to the CM certificate or its chain, respectively; additional information may be found in docsBpi2AuthRejectErrorString for these types of errors.
U32 docsBpi2CmtsAuthCACertIndexPtr	1.3.6.1.2.1.126.1.2.2.1.21	Unsigned32	read-only	A row index into docsBpi2CmtsCACertTable. Returns the index in docsBpi2CmtsCACertTable to which CA certificate this CM is chained to. A value of 0 means it could not be found or not applicable.
INT docsBpi2CmtsAuthCmBpiVersion	1.3.6.1.2.1.126.1.2.2.1.2	INTEGER	read-only	The value of this object is the version of Baseline Privacy for which this CM has registered. The value 'bpiplus' represents the value of BPI-Version Attribute of the Baseline Privacy Key Management BPKM attribute BPI-Version (1). The value 'bpi' is used to represent the CM registered using DOCSIS 1.0 Baseline Privacy.
DAT docsBpi2CmtsAuthCmExpiresNew	1.3.6.1.2.1.126.1.2.2.1.6	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the most recent authorization key for this FSM.
DAT docsBpi2CmtsAuthCmExpiresOld	1.3.6.1.2.1.126.1.2.2.1.5	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent authorization key for this FSM. If this FSM has only one authorization key, then the value is the time of activation of this FSM. Note: This object has no meaning for CMs running in BPI mode; therefore, this object is not instantiated for entries associated to those CMs.
C32 docsBpi2CmtsAuthCmInfos	1.3.6.1.2.1.126.1.2.2.1.9	Counter32	read-only	The value of this object is the number of times the CMTS has received an Authentication Information message from this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsAuthCmInvalids	1.3.6.1.2.1.126.1.2.2.1.13	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an Authorization Invalid message to this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
I32 docsBpi2CmtsAuthCmKeySequenceNumber	1.3.6.1.2.1.126.1.2.2.1.4	Integer32	read-only	The value of this object is the most recent authorization key sequence number for this CM.
I32 docsBpi2CmtsAuthCmLifetime	1.3.6.1.2.1.126.1.2.2.1.7	Integer32	read-write	The value of this object is the lifetime, in seconds, that the CMTS assigns to an authorization key for this CM.
MAC docsBpi2CmtsAuthCmMacAddress	1.3.6.1.2.1.126.1.2.2.1.1	MacAddress	not-accessible	The value of this object is the physical address of the CM to which the authorization association applies.
OCT docsBpi2CmtsAuthCmPublicKey	1.3.6.1.2.1.126.1.2.2.1.3	OCTET STRING	read-only	The value of this object is a DER-encoded RSAPublicKey ASN.1 type string, as defined in the RSA Encryption Standard (PKCS #1), corresponding to the public key of the CM. This is the zero-length OCTET STRING if the CMTS does not retain the public key.
C32 docsBpi2CmtsAuthCmRejects	1.3.6.1.2.1.126.1.2.2.1.12	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an Authorization Reject message to this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsAuthCmReplies	1.3.6.1.2.1.126.1.2.2.1.11	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an Authorization Reply message to this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsAuthCmRequests	1.3.6.1.2.1.126.1.2.2.1.10	Counter32	read-only	The value of this object is the number of times the CMTS has received an Authorization Request message from this CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
INT docsBpi2CmtsAuthCmReset	1.3.6.1.2.1.126.1.2.2.1.8	INTEGER	read-write	Setting this object to invalidateAuth(2) causes the CMTS to invalidate the current CM authorization key(s), but not to transmit an Authorization Invalid message nor to invalidate the primary SAID's TEKs. Setting this object to sendAuthInvalid(3) causes the CMTS to invalidate the current CM authorization key(s), and to transmit an Authorization Invalid message to the CM, but not to invalidate the primary SAID's TEKs. Setting this object to invalidateTeks(4) causes the CMTS to invalidate the current CM authorization key(s), to transmit an Authorization Invalid message to the CM, and to invalidate the TEKs associated with this CM's primary SAID. For BPI mode, substitute all of the CM's unicast TEKs for the primary SAID's TEKs in the previous paragraph. Reading this object returns the most recently set value of this object or, if the object has not been set since entry creation, returns noResetRequested(1).
C32 docsBpi2CmtsAuthentInfos	1.3.6.1.2.1.126.1.2.1.1.5	Counter32	read-only	The value of this object is the number of times the CMTS has received an Authentication Information message from any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
docsBpi2CmtsAuthEntry	1.3.6.1.2.1.126.1.2.2.1		not-accessible	Each entry contains objects describing attributes of one authorization association. The CMTS MUST create one entry per CM per MAC interface, based on the receipt of an Authorization Request message, and MUST not delete the entry until the CM loses registration.
INT docsBpi2CmtsAuthInvalidErrorCode	1.3.6.1.2.1.126.1.2.2.1.16	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Authorization Invalid message transmitted to the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Invalid message has been transmitted to the CM since entry creation.
STR docsBpi2CmtsAuthInvalidErrorString	1.3.6.1.2.1.126.1.2.2.1.17	SnmpAdminString	read-only	The value of this object is the text string in the most recent Authorization Invalid message transmitted to the CM. This is a zero length string if no Authorization Invalid message has been transmitted to the CM since entry creation.
C32 docsBpi2CmtsAuthInvalids	1.3.6.1.2.1.126.1.2.1.1.9	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an Authorization Invalid message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
DOC docsBpi2CmtsAuthPrimarySAId	1.3.6.1.2.1.126.1.2.2.1.18	DocsSAIdOrZero	read-only	The value of this object is the Primary Security Association identifier. For BPI mode, the value must be any unicast SID.
INT docsBpi2CmtsAuthRejectErrorCode	1.3.6.1.2.1.126.1.2.2.1.14	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Authorization Reject message transmitted to the CM. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Authorization Reject message has been transmitted to the CM since entry creation.
STR docsBpi2CmtsAuthRejectErrorString	1.3.6.1.2.1.126.1.2.2.1.15	SnmpAdminString	read-only	The value of this object is the text string in the most recent Authorization Reject message transmitted to the CM. This is a zero length string if no Authorization Reject message has been transmitted to the CM since entry creation.
C32 docsBpi2CmtsAuthRejects	1.3.6.1.2.1.126.1.2.1.1.8	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an Authorization Reject message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsAuthReplies	1.3.6.1.2.1.126.1.2.1.1.7	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an Authorization Reply message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsAuthRequests	1.3.6.1.2.1.126.1.2.1.1.6	Counter32	read-only	The value of this object is the number of times the CMTS has received an Authorization Request message from any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
docsBpi2CmtsAuthTable	1.3.6.1.2.1.126.1.2.2		not-accessible	This table describes the attributes of each CM authorization association. The CMTS maintains one authorization association with each Baseline Privacy- enabled CM, registered on each CMTS MAC interface, regardless of whether the CM is authorized or rejected.
docsBpi2CmtsBaseEntry	1.3.6.1.2.1.126.1.2.1.1		not-accessible	Each entry contains objects describing attributes of one CMTS MAC interface. An entry in this table exists for each ifEntry with an ifType of docsCableMaclayer(127).
docsBpi2CmtsBaseTable	1.3.6.1.2.1.126.1.2.1		not-accessible	This table describes the basic Baseline Privacy attributes of each CMTS MAC interface.
DOC docsBpi2CmtsCACert	1.3.6.1.2.1.126.1.2.5.2.1.8	DocsX509ASN1DEREncodedCertificate	read-create	An X509 DER-encoded Certificate Authority certificate. To help identify certificates, either this object or docsBpi2CmtsCACertThumbprint must be returned by a CMTS for self-signed CA certificates. Note: The zero-length OCTET STRING must be returned, on reads, if the entire certificate is not retained in the CMTS.
docsBpi2CmtsCACertEntry	1.3.6.1.2.1.126.1.2.5.2.1		not-accessible	A row in the Certificate Authority certificate table. Row entries with the trust status 'trusted', 'untrusted', or 'root' persist after re-initialization of the managed system.
U32 docsBpi2CmtsCACertIndex	1.3.6.1.2.1.126.1.2.5.2.1.1	Unsigned32	not-accessible	The index for this row.
STR docsBpi2CmtsCACertIssuer	1.3.6.1.2.1.126.1.2.5.2.1.3	SnmpAdminString	read-only	The issuer name exactly as it is encoded in the X509 certificate. The commonName portion of the certificate's issuer name must be present. All other fields are optional. Any optional field present must be prepended with (carriage return, U+000D) (line feed, U+000A). Ordering of fields present must conform to the following: CommonName countryName stateOrProvinceName localityName organizationName organizationalUnitName organizationalUnitName=
OCT docsBpi2CmtsCACertSerialNumber	1.3.6.1.2.1.126.1.2.5.2.1.4	OCTET STRING	read-only	This CA certificate's serial number, represented as an octet string.
INT docsBpi2CmtsCACertSource	1.3.6.1.2.1.126.1.2.5.2.1.6	INTEGER	read-only	This object indicates how the certificate reached the CMTS. Other(4) means that it originated from a source not identified above.
ROW docsBpi2CmtsCACertStatus	1.3.6.1.2.1.126.1.2.5.2.1.7	RowStatus	read-create	The status of this conceptual row. An attempt to set writable columnar values while this row is active behaves as follows: - Sets to the object docsBpi2CmtsCACertTrust are allowed. - Sets to the object docsBpi2CmtsCACert will return an error of 'inconsistentValue'. A newly created entry cannot be set to active until the value of docsBpi2CmtsCACert is being set.
STR docsBpi2CmtsCACertSubject	1.3.6.1.2.1.126.1.2.5.2.1.2	SnmpAdminString	read-only	The subject name exactly as it is encoded in the X509 certificate. The organizationName portion of the certificate's subject name must be present. All other fields are optional. Any optional field present must be prepended with (carriage return, U+000D) (line feed, U+000A). Ordering of fields present must conform to the following: organizationName countryName stateOrProvinceName localityName organizationalUnitName organizationalUnitName= commonName
docsBpi2CmtsCACertTable	1.3.6.1.2.1.126.1.2.5.2		not-accessible	The table of known Certificate Authority certificates acquired by this device.
OCT docsBpi2CmtsCACertThumbprint	1.3.6.1.2.1.126.1.2.5.2.1.9	OCTET STRING	read-only	The SHA-1 hash of a CA certificate. To help identify certificates, either this object or docsBpi2CmtsCACert must be returned by a CMTS for self-signed CA certificates. Note: The zero-length OCTET STRING must be returned, on reads, if the CA certificate thumb print is not retained in the CMTS.
INT docsBpi2CmtsCACertTrust	1.3.6.1.2.1.126.1.2.5.2.1.5	INTEGER	read-create	This object controls the trust status of this certificate. Root certificates must be given root(4) trust; manufacturer certificates must not be given root(4) trust. Trust on root certificates must not change. Note: Setting this object need only affect the validity of CM certificates sent in future authorization requests; instantaneous effect need not occur.
docsBpi2CmtsCertObjects	1.3.6.1.2.1.126.1.2.5
T/F docsBpi2CmtsCheckCertValidityPeriods	1.3.6.1.2.1.126.1.2.1.1.4	TruthValue	read-write	Setting this object to 'true' causes all chained and root certificates in the chain to have their validity periods checked against the current time of day, when the CMTS receives an Authorization Request from the CM. A 'false' setting causes all certificates in the chain not to have their validity periods checked against the current time of day. This object need not persist after re-initialization of the managed system.
docsBpi2CmtsCompliance	1.3.6.1.2.1.126.2.1.2			This is the compliance statement for CMTSs that implement the DOCSIS Baseline Privacy Interface Plus.
I32 docsBpi2CmtsDefaultAuthLifetime	1.3.6.1.2.1.126.1.2.1.1.1	Integer32	read-write	The value of this object is the default lifetime, in seconds, that the CMTS assigns to a new authorization key. This object value persists after re-initialization of the managed system.
INT docsBpi2CmtsDefaultSelfSignedManufCertTrust	1.3.6.1.2.1.126.1.2.1.1.3	INTEGER	read-write	This object determines the default trust of self-signed manufacturer certificate entries, contained in docsBpi2CmtsCACertTable, and created after this object is set. This object need not persist after re-initialization of the managed system.
I32 docsBpi2CmtsDefaultTEKLifetime	1.3.6.1.2.1.126.1.2.1.1.2	Integer32	read-write	The value of this object is the default lifetime, in seconds, that the CMTS assigns to a new Traffic Encryption Key (TEK). This object value persists after re-initialization of the managed system.
docsBpi2CmtsGroup	1.3.6.1.2.1.126.2.2.2			This collection of objects provides CMTS BPI+ status and control.
IP docsBpi2CmtsIpMulticastAddress	1.3.6.1.2.1.126.1.2.4.1.1.3	InetAddress	read-create	This object represents the IP multicast address to be mapped, in conjunction with docsBpi2CmtsIpMulticastMask. The type of this address is determined by the value of the object docsBpi2CmtsIpMulticastAddressType.
IPt docsBpi2CmtsIpMulticastAddressType	1.3.6.1.2.1.126.1.2.4.1.1.2	InetAddressType	read-create	The type of Internet address for docsBpi2CmtsIpMulticastAddress and docsBpi2CmtsIpMulticastMask.
DOC docsBpi2CmtsIpMulticastDataAuthentAlg	1.3.6.1.2.1.126.1.2.4.1.1.8	DocsBpkmDataAuthentAlg	read-create	The value of this object is the data authentication algorithm for this IP.
DOC docsBpi2CmtsIpMulticastDataEncryptAlg	1.3.6.1.2.1.126.1.2.4.1.1.7	DocsBpkmDataEncryptAlg	read-create	The value of this object is the data encryption algorithm for this IP.
U32 docsBpi2CmtsIpMulticastIndex	1.3.6.1.2.1.126.1.2.4.1.1.1	Unsigned32	not-accessible	The index of this row. Conceptual rows having the value 'permanent' need not allow write-access to any columnar objects in the row.
ROW docsBpi2CmtsIpMulticastMapControl	1.3.6.1.2.1.126.1.2.4.1.1.14	RowStatus	read-create	This object controls and reflects the IP multicast address mapping entry. There is no restriction on the ability to change values in this row while the row is active. A created row can be set to active only after the Corresponding instances of docsBpi2CmtsIpMulticastAddress, docsBpi2CmtsIpMulticastMask, docsBpi2CmtsIpMulticastSAId, and docsBpi2CmtsIpMulticastSAType have all been set.
docsBpi2CmtsIpMulticastMapEntry	1.3.6.1.2.1.126.1.2.4.1.1		not-accessible	Each entry contains objects describing the mapping of a set of multicast IP address and the mask to one SAID associated to a CMTS MAC Interface, as well as associated message counters and error information.
STO docsBpi2CmtsIpMulticastMapStorageType	1.3.6.1.2.1.126.1.2.4.1.1.15	StorageType	read-only	The storage type for this conceptual row. Conceptual rows having the value 'permanent' need not allow write-access to any columnar objects in the row.
docsBpi2CmtsIpMulticastMapTable	1.3.6.1.2.1.126.1.2.4.1		not-accessible	This table maps multicast IP addresses to SAIDs. If a multicast IP address is mapped by multiple rows in the table, the row with the lowest docsBpi2CmtsIpMulticastIndex must be utilized for the mapping.
IP docsBpi2CmtsIpMulticastMask	1.3.6.1.2.1.126.1.2.4.1.1.4	InetAddress	read-create	This object represents the IP multicast address mask for this row. An IP multicast address matches this row if the logical AND of the address with docsBpi2CmtsIpMulticastMask is identical to the logical AND of docsBpi2CmtsIpMulticastAddr with docsBpi2CmtsIpMulticastMask. The type of this address is determined by the value of the object docsBpi2CmtsIpMulticastAddressType. Note: For IPv6, this object need not represent a contiguous netmask; e.g., to associate a SAID to a multicast group matching 'any' multicast scope. The TC InetAddressPrefixLength is not used, as it only represents contiguous netmask.
DOC docsBpi2CmtsIpMulticastSAId	1.3.6.1.2.1.126.1.2.4.1.1.5	DocsSAIdOrZero	read-create	This object represents the multicast SAID to be used in this IP multicast address mapping entry.
INT docsBpi2CmtsIpMulticastSAMapRejectErrorCode	1.3.6.1.2.1.126.1.2.4.1.1.12	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent SA Map Reject message sent in response to an SA Map Request for this IP. It has the value unknown(2) if the last Error-Code Value was 0 and none(1) if no SA MAP Reject message has been received since entry creation.
STR docsBpi2CmtsIpMulticastSAMapRejectErrorString	1.3.6.1.2.1.126.1.2.4.1.1.13	SnmpAdminString	read-only	The value of this object is the text string in the most recent SA Map Reject message sent in response to an SA Map Request for this IP. It is a zero length string if no SA Map Reject message has been received since entry creation.
C32 docsBpi2CmtsIpMulticastSAMapRejects	1.3.6.1.2.1.126.1.2.4.1.1.11	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an SA Map Reject message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsIpMulticastSAMapReplies	1.3.6.1.2.1.126.1.2.4.1.1.10	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an SA Map Reply message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsIpMulticastSAMapRequests	1.3.6.1.2.1.126.1.2.4.1.1.9	Counter32	read-only	The value of this object is the number of times the CMTS has received an SA Map Request message for this IP. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
DOC docsBpi2CmtsIpMulticastSAType	1.3.6.1.2.1.126.1.2.4.1.1.6	DocsBpkmSAType	read-create	The value of this object is the type of security association. 'dynamic' does not apply to CMs running in BPI mode. Unicast BPI TEKs must utilize the 'primary' encoding, and multicast BPI TEKs must utilize the 'static' encoding. By default, SNMP created entries set this object to 'static' if not set at row creation.
INT docsBpi2CmtsKeyRejectErrorCode	1.3.6.1.2.1.126.1.2.3.1.14	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent Key Reject message sent in response to a Key Request for this SAID. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no Key Reject message has been received since registration.
STR docsBpi2CmtsKeyRejectErrorString	1.3.6.1.2.1.126.1.2.3.1.15	SnmpAdminString	read-only	The value of this object is the text string in the most recent Key Reject message sent in response to a Key Request for this SAID. This is a zero length string if no Key Reject message has been received since registration.
C32 docsBpi2CmtsKeyRejects	1.3.6.1.2.1.126.1.2.3.1.12	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted a Key Reject message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsKeyReplies	1.3.6.1.2.1.126.1.2.3.1.11	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted a Key Reply message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsKeyRequests	1.3.6.1.2.1.126.1.2.3.1.10	Counter32	read-only	The value of this object is the number of times the CMTS has received a Key Request message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
MAC docsBpi2CmtsMulticastAuthCmMacAddress	1.3.6.1.2.1.126.1.2.4.2.1.2	MacAddress	not-accessible	This object represents the MAC address of the CM to which the multicast SAID authorization applies.
ROW docsBpi2CmtsMulticastAuthControl	1.3.6.1.2.1.126.1.2.4.2.1.3	RowStatus	read-create	The status of this conceptual row for the authorization of multicast SAIDs to CMs.
docsBpi2CmtsMulticastAuthEntry	1.3.6.1.2.1.126.1.2.4.2.1		not-accessible	Each entry contains objects describing the key authorization of one cable modem for one multicast SAID for one CMTS MAC interface. Row entries persist after re-initialization of the managed system.
DOC docsBpi2CmtsMulticastAuthSAId	1.3.6.1.2.1.126.1.2.4.2.1.1	DocsSAId	not-accessible	This object represents the multicast SAID for authorization.
docsBpi2CmtsMulticastAuthTable	1.3.6.1.2.1.126.1.2.4.2		not-accessible	This table describes the multicast SAID authorization for each CM on each CMTS MAC interface.
docsBpi2CmtsMulticastObjects	1.3.6.1.2.1.126.1.2.4
docsBpi2CmtsObjects	1.3.6.1.2.1.126.1.2
DOC docsBpi2CmtsProvisionedCmCert	1.3.6.1.2.1.126.1.2.5.1.1.5	DocsX509ASN1DEREncodedCertificate	read-create	An X509 DER-encoded Certificate Authority certificate. Note: The zero-length OCTET STRING must be returned, on reads, if the entire certificate is not retained in the CMTS.
docsBpi2CmtsProvisionedCmCertEntry	1.3.6.1.2.1.126.1.2.5.1.1		not-accessible	An entry in the CMTS's provisioned CM certificate table. Row entries persist after re-initialization of the managed system.
MAC docsBpi2CmtsProvisionedCmCertMacAddress	1.3.6.1.2.1.126.1.2.5.1.1.1	MacAddress	not-accessible	The index of this row.
INT docsBpi2CmtsProvisionedCmCertSource	1.3.6.1.2.1.126.1.2.5.1.1.3	INTEGER	read-only	This object indicates how the certificate reached the CMTS. Other(4) means that it originated from a source not identified above.
ROW docsBpi2CmtsProvisionedCmCertStatus	1.3.6.1.2.1.126.1.2.5.1.1.4	RowStatus	read-create	The status of this conceptual row. Values in this row cannot be changed while the row is 'active'.
docsBpi2CmtsProvisionedCmCertTable	1.3.6.1.2.1.126.1.2.5.1		not-accessible	A table of CM certificate trust entries provisioned to the CMTS. The trust object for a certificate in this table has an overriding effect on the validity object of a certificate in the authorization table, as long as the entire contents of the two certificates are identical.
INT docsBpi2CmtsProvisionedCmCertTrust	1.3.6.1.2.1.126.1.2.5.1.1.2	INTEGER	read-create	Trust state for the provisioned CM certificate entry. Note: Setting this object need only override the validity of CM certificates sent in future authorization requests; instantaneous effect need not occur.
C32 docsBpi2CmtsSAMapRejects	1.3.6.1.2.1.126.1.2.1.1.12	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an SA Map Reject message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsSAMapReplies	1.3.6.1.2.1.126.1.2.1.1.11	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted an SA Map Reply message to any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
C32 docsBpi2CmtsSAMapRequests	1.3.6.1.2.1.126.1.2.1.1.10	Counter32	read-only	The value of this object is the number of times the CMTS has received an SA Map Request message from any CM. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
DOC docsBpi2CmtsTEKDataAuthentAlg	1.3.6.1.2.1.126.1.2.3.1.4	DocsBpkmDataAuthentAlg	read-only	The value of this object is the data authentication algorithm for this SAID.
DOC docsBpi2CmtsTEKDataEncryptAlg	1.3.6.1.2.1.126.1.2.3.1.3	DocsBpkmDataEncryptAlg	read-only	The value of this object is the data encryption algorithm for this SAID.
docsBpi2CmtsTEKEntry	1.3.6.1.2.1.126.1.2.3.1		not-accessible	Each entry contains objects describing attributes of one TEK association on a particular CMTS MAC interface. The CMTS MUST create one entry per SAID per MAC interface, based on the receipt of a Key Request message, and MUST not delete the entry before the CM authorization for the SAID permanently expires.
DAT docsBpi2CmtsTEKExpiresNew	1.3.6.1.2.1.126.1.2.3.1.8	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the most recent TEK for this FSM.
DAT docsBpi2CmtsTEKExpiresOld	1.3.6.1.2.1.126.1.2.3.1.7	DateAndTime	read-only	The value of this object is the actual clock time for expiration of the immediate predecessor of the most recent TEK for this FSM. If this FSM has only one TEK, then the value is the time of activation of this FSM.
INT docsBpi2CmtsTEKInvalidErrorCode	1.3.6.1.2.1.126.1.2.3.1.16	INTEGER	read-only	The value of this object is the enumerated description of the Error-Code in the most recent TEK Invalid message sent in association with this SAID. This has the value unknown(2) if the last Error-Code value was 0 and none(1) if no TEK Invalid message has been received since registration.
STR docsBpi2CmtsTEKInvalidErrorString	1.3.6.1.2.1.126.1.2.3.1.17	SnmpAdminString	read-only	The value of this object is the text string in the most recent TEK Invalid message sent in association with this SAID. This is a zero length string if no TEK Invalid message has been received since registration.
C32 docsBpi2CmtsTEKInvalids	1.3.6.1.2.1.126.1.2.3.1.13	Counter32	read-only	The value of this object is the number of times the CMTS has transmitted a TEK Invalid message. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
I32 docsBpi2CmtsTEKKeySequenceNumber	1.3.6.1.2.1.126.1.2.3.1.6	Integer32	read-only	The value of this object is the most recent TEK key sequence number for this SAID.
I32 docsBpi2CmtsTEKLifetime	1.3.6.1.2.1.126.1.2.3.1.5	Integer32	read-write	The value of this object is the lifetime, in seconds, that the CMTS assigns to keys for this TEK association.
T/F docsBpi2CmtsTEKReset	1.3.6.1.2.1.126.1.2.3.1.9	TruthValue	read-write	Setting this object to 'true' causes the CMTS to invalidate all currently active TEKs and to generate new TEKs for the associated SAID; the CMTS MAY also generate unsolicited TEK Invalid messages, to optimize the TEK synchronization between the CMTS and the CM(s). Reading this object always returns FALSE.
DOC docsBpi2CmtsTEKSAId	1.3.6.1.2.1.126.1.2.3.1.1	DocsSAId	not-accessible	The value of this object is the DOCSIS Security Association ID (SAID).
DOC docsBpi2CmtsTEKSAType	1.3.6.1.2.1.126.1.2.3.1.2	DocsBpkmSAType	read-only	The value of this object is the type of security association. 'dynamic' does not apply to CMs running in BPI mode. Unicast BPI TEKs must utilize the 'primary' encoding, and multicast BPI TEKs must utilize the 'static' encoding.
docsBpi2CmtsTEKTable	1.3.6.1.2.1.126.1.2.3		not-accessible	This table describes the attributes of each Traffic Encryption Key (TEK) association. The CMTS Maintains one TEK association per SAID on each CMTS MAC interface.
DAT docsBpi2CodeCoSignerCodeAccessStart	1.3.6.1.2.1.126.1.4.7	DateAndTime	read-only	The value of this object is the co-signer's current codeAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10). If docsBpi2CodeCoSignerOrgName is a zero length string, the value of this object is meaningless.
DAT docsBpi2CodeCoSignerCvcAccessStart	1.3.6.1.2.1.126.1.4.8	DateAndTime	read-only	The value of this object is the co-signer's current cvcAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10). If docsBpi2CodeCoSignerOrgName is a zero length string, the value of this object is meaningless.
STR docsBpi2CodeCoSignerOrgName	1.3.6.1.2.1.126.1.4.6	SnmpAdminString	read-only	The value of this object is the co-signer's organizationName. The value is a zero length string if the co-signer is not specified.
DOC docsBpi2CodeCvcUpdate	1.3.6.1.2.1.126.1.4.9	DocsX509ASN1DEREncodedCertificate	read-write	Setting a CVC to this object triggers the device to verify the CVC and update the cvcAccessStart values. The content of this object is then discarded. If the device is not enabled to upgrade codefiles, or if the CVC verification fails, the CVC will be rejected. Reading this object always returns the zero-length OCTET STRING.
docsBpi2CodeDownloadControl	1.3.6.1.2.1.126.1.4
docsBpi2CodeDownloadGroup	1.3.6.1.2.1.126.2.2.3			This collection of objects provides authenticated software download support.
INT docsBpi2CodeDownloadStatusCode	1.3.6.1.2.1.126.1.4.1	INTEGER	read-only	The value indicates the result of the latest config file CVC verification, SNMP CVC verification, or code file verification.
STR docsBpi2CodeDownloadStatusString	1.3.6.1.2.1.126.1.4.2	SnmpAdminString	read-only	The value of this object indicates the additional information to the status code. The value will include the error code and error description, which will be defined separately.
DAT docsBpi2CodeMfgCodeAccessStart	1.3.6.1.2.1.126.1.4.4	DateAndTime	read-only	The value of this object is the device manufacturer's current codeAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10).
DAT docsBpi2CodeMfgCvcAccessStart	1.3.6.1.2.1.126.1.4.5	DateAndTime	read-only	The value of this object is the device manufacturer's current cvcAccessStart value. This value will always refer to Greenwich Mean Time (GMT), and the value format must contain TimeZone information (fields 8-10).
STR docsBpi2CodeMfgOrgName	1.3.6.1.2.1.126.1.4.3	SnmpAdminString	read-only	The value of this object is the device manufacturer's organizationName.
docsBpi2Compliances	1.3.6.1.2.1.126.2.1
docsBpi2Conformance	1.3.6.1.2.1.126.2
docsBpi2Groups	1.3.6.1.2.1.126.2.2
docsBpi2MIB	1.3.6.1.2.1.126			This is the MIB module for the DOCSIS Baseline Privacy Plus Interface (BPI+) at cable modems (CMs) and cable modem termination systems (CMTSs). Copyright (C) The Internet Society (2005). This version of this MIB module is part of RFC 4131; see the RFC itself for full legal notices.
docsBpi2MIBObjects	1.3.6.1.2.1.126.1
docsBpi2Notification	1.3.6.1.2.1.126.0

RFC description

DOCSIS Baseline Privacy Interface Plus (BPI+) MIB for cable modem security.

Start monitoring DOCSIS cable modem/CMTS (Baseline Privacy Plus, vendor-neutral IETF standard RFC 4131) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DOCS-IETF-BPI2-MIB

What Is DOCS-IETF-BPI2-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description