ADC CUDA 3 - Manual (Page 547)

Cuda 12000 IP Access Switch CLI-based Administration Guide
Cable Modem and MTA Command Output Descriptions 545
Table 21-14 docsBpi2CmTEKTable
CLI Output Description
docsBpi2CmTEKSAType Type of security association. The options are:
■
none
■
primary
■
static
■
dynamic
docsBpi2CmTEKData
EncryptAlg Data encryption algorithm being used. The
options are:
■
none
■
des56cbcmode
■
des40cbcmode
docsBpi2CmTEKData
AuthentAlg Data authentication algorithm being used.
docsBpi2CmTEKState State of the indicated TEK FSM. The options are:
start The FSM is in the initial state.
opwait The TEK state machine has sent its initial request
(Key Request) for its SAID’s keying material
(traffic encryption key and CBC initialization
vector), and is waiting for a reply from the
CMTS.
opreauthwait This is the wait state in which the TEK state
machine is placed if it does not have valid keying
material while the Authorization state machine is
in the middle of a reauthorization cycle.
Operational The cable modem has valid keying material for
the associated SAID.
Rekey Wait The TEK Refresh Timer has expired and the cable
modem has requested a key update for this
SAID. Note that the newer of its two TEKs has
not expired and can still be used for both
encrypting and decrypting data traffic.
Rekey Reauth Wait This is the wait state in which the TEK state
machine is placed if the TEK state machine has
valid traffic keying material, has an outstanding
request for the latest keying material, and the
Authorization State Machine initiates a
reauthorization cycle.