All MIBs › DOCS-SEC-MIB › docsSecCmtsCertificateCertRevocationMethod
docsSecCmtsCertificateCertRevocationMethod
Module: DOCS-SEC-MIB
OID (symbolic): DOCS-SEC-MIB::docsSecCmtsCertificateCertRevocationMethod
OID (numeric): 1.3.6.1.4.1.4491.2.1.11.1.9.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: This attribute identifies which certificate revocation method is to be used by the CMTS to verify the cable modem certificate validity. The certificate revocation methods include Certification Revocation List (CRL) and Online Certificate Status Protocol (OCSP). The following options are available: The option 'none' indicates that the CMTS does not attempt to determine the revocation status of a certificate.
The option 'crl' indicates the CMTS uses a Certificate Revocation List (CRL) as defined by the Url attribute of the CmtsCertRevocationList object. When the value of this attribute is changed to 'crl', it triggers the CMTS to retrieve the CRL from the URL specified by the Url attribute. If the value of this attribute is 'crl' when the CMTS starts up, it triggers the CMTS to retrieve the CRL from the URL specified by the Url attribute.
The option 'ocsp' indicates the CMTS uses the Online Certificate Status Protocol (OCSP) as defined by the Url attribute of the CmtsOnlineCertStatusProtocol object.
The option 'crlAndOcsp' indicates the CMTS uses both the CRL as defined by the Url attribute in the CmtsCertRevocationList object and OCSP as defined by the Url attribute in the CmtsOnlineCertStatusProtocol object. The CMTS persists the values of the CertRevocationMethod attribute across reinitializations.
What is docsSecCmtsCertificateCertRevocationMethod?
Selects how the CMTS checks whether a cable modem's BPI+ certificate has been revoked -- none, CRL only, OCSP only, or both -- and setting it to crl or crlAndOcsp immediately triggers the CMTS to fetch the CRL from the configured URL. Operators typically set this to ocsp or crlAndOcsp to reject modems whose certificates were revoked after manufacture.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.4491.2.1.11.1.9.1 snmpwalk -v2c -c public <target> DOCS-SEC-MIB::docsSecCmtsCertificateCertRevocationMethod
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.4491.2.1.11.1.9.1.1 snmpget -v2c -c public <target> DOCS-SEC-MIB::docsSecCmtsCertificateCertRevocationMethod.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.4491.2.1.11.1.9.1.1 i <value>
Start monitoring DOCSIS CMTS/cable modem (security: certificates/TFTP/EAE, vendor-neutral CableLabs standard) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the DOCS-SEC-MIB::docsSecCmtsCertificateCertRevocationMethod OID value, configure state conditions and alerts, and monitor any DOCSIS CMTS/cable modem (security: certificates/TFTP/EAE, vendor-neutral CableLabs standard) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.4491 | cableLabs | CLAB-DEF-MIB |
| 1.3.6.1.4.1.4491.2 | clabProject | CLAB-DEF-MIB |
| 1.3.6.1.4.1.4491.2.1 | clabProjDocsis | CLAB-DEF-MIB |
| 1.3.6.1.4.1.4491.2.1.11 | docsSecMib | CLAB-DEF-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.4491.2.1.11.1 | docsSecMibObjects | DOCS-SEC-MIB |
| 1.3.6.1.4.1.4491.2.1.11.1.9 | docsSecCmtsCertificate | DOCS-SEC-MIB |
| 1.3.6.1.4.1.4491.2.1.11.1.9.1 | docsSecCmtsCertificateCertRevocationMethod | DOCS-SEC-MIB |