DOCS-IETF-BPI2-MIB DEFINITIONS ::= BEGIN

IMPORTS

        MODULE-IDENTITY, OBJECT-TYPE,

        Integer32,

        Unsigned32,

        Counter32,

        mib-2

             FROM SNMPv2-SMI           -- [RFC2578]

        SnmpAdminString

             FROM SNMP-FRAMEWORK-MIB   -- [RFC3411]

        TEXTUAL-CONVENTION,

        MacAddress,

        RowStatus,

        TruthValue,

        DateAndTime,

        StorageType

             FROM SNMPv2-TC            -- [RFC2579]

        OBJECT-GROUP,

        MODULE-COMPLIANCE

             FROM SNMPv2-CONF          -- [RFC2580]

        ifIndex

             FROM IF-MIB               -- [RFC2863]

        InetAddressType,

        InetAddress

             FROM INET-ADDRESS-MIB;    -- [RFC4001]

   docsBpi2MIB    MODULE-IDENTITY

        LAST-UPDATED "200507200000Z" -- July 20, 2005

        ORGANIZATION "IETF IP over Cable Data Network (IPCDN)

                      Working Group"

        CONTACT-INFO "---------------------------------------

                   Stuart M. Green

                   E-mail: rubbersoul3@yahoo.com

                   ---------------------------------------

                   Kaz Ozawa

                   Automotive Systems Development Center

                   TOSHIBA CORPORATION

                   1-1, Shibaura 1-Chome

                   Minato-ku, Tokyo 105-8001

                   Japan

                   Phone: +81-3-3457-8569

                   Fax: +81-3-5444-9325

                   E-mail: Kazuyoshi.Ozawa@toshiba.co.jp

                   ---------------------------------------

                   Alexander Katsnelson

                   Postal:

                   Tel:    +1-303-680-3924

                   E-mail: katsnelson6@peoplepc.com

                   ---------------------------------------

                   Eduardo Cardona

                   Postal:

                   Cable Television Laboratories, Inc.

                   858 Coal Creek Circle

                   Louisville, CO 80027- 9750

                   U.S.A.

                   Tel:    +1 303 661 9100

                   Fax:    +1 303 661 9199

                   E-mail: e.cardona@cablelabs.com

                   ---------------------------------------

           IETF IPCDN Working Group

           General Discussion: ipcdn@ietf.org

           Subscribe: http://www.ietf.org/mailman/listinfo/ipcdn.

           Archive: ftp://ftp.ietf.org/ietf-mail-archive/ipcdn.

           Co-chairs: Richard Woundy, rwoundy@cisco.com

                      Jean-Francois Mule, jfm@cablelabs.com"

        DESCRIPTION

            "This is the MIB module for the DOCSIS Baseline

             Privacy Plus Interface (BPI+) at cable modems (CMs)

             and cable modem termination systems (CMTSs).

             Copyright (C) The Internet Society (2005).  This

             version of this MIB module is part of RFC 4131; see

             the RFC itself for full legal notices."

        REVISION        "200507200000Z"  -- July 20, 2005

        DESCRIPTION

            "Initial version of the IETF BPI+ MIB module.

             This version published as RFC 4131."

           ::= { mib-2 126 }

   -- Textual conventions

DocsX509ASN1DEREncodedCertificate ::= TEXTUAL-CONVENTION

        STATUS    current

        DESCRIPTION

            "An X509 digital certificate encoded as an ASN.1 DER

        object."

        SYNTAX    OCTET STRING (SIZE (0..4096))

DocsSAId ::= TEXTUAL-CONVENTION

        DISPLAY-HINT "d"

        STATUS    current

        DESCRIPTION

             "Security Association identifier (SAID)."

        REFERENCE

              "DOCSIS Baseline Privacy Plus Interface

        specification, Section 2.1.3, BPI+ Security

        Associations"

        SYNTAX    Integer32 (1..16383)

DocsSAIdOrZero ::= TEXTUAL-CONVENTION

        DISPLAY-HINT "d"

        STATUS    current

        DESCRIPTION

             "Security Association identifier (SAID).  The value

        zero indicates that the SAID is yet to be determined."

        REFERENCE

              "DOCSIS Baseline Privacy Plus Interface

        specification, Section 2.1.3, BPI+ Security

              Associations"

        SYNTAX    Unsigned32 (0 | 1..16383)

DocsBpkmSAType ::= TEXTUAL-CONVENTION

        STATUS    current

        DESCRIPTION

             "The type of security association (SA).

        The values of the named-numbers are associated

        with the BPKM SA-Type attributes:

        'primary' corresponds to code '1', 'static' to code '2',

        and 'dynamic' to code '3'.

        The 'none' value must only be used if the SA type has yet

        to be determined."

        REFERENCE

              "DOCSIS Baseline Privacy Plus Interface

        specification, Section 4.2.2.24"

        SYNTAX    INTEGER {

                       none(0),

                       primary(1),

                       static(2),

                       dynamic(3)

                  }

DocsBpkmDataEncryptAlg ::= TEXTUAL-CONVENTION

        STATUS    current

        DESCRIPTION

            "The list of data encryption algorithms defined for

        the DOCSIS interface in the BPKM cryptographic-suite

        parameter.  The value 'none' indicates that the SAID

        being referenced has no data encryption."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.2.20."

        SYNTAX    INTEGER {

                       none(0),

                       des56CbcMode(1),

                       des40CbcMode(2),

                       t3Des128CbcMode(3),

                       aes128CbcMode(4),

                       aes256CbcMode(5)

                  }

DocsBpkmDataAuthentAlg ::= TEXTUAL-CONVENTION

        STATUS    current

        DESCRIPTION

            "The list of data integrity algorithms defined for the

        DOCSIS interface in the BPKM cryptographic-suite parameter.

        The value 'none' indicates that no data integrity is used for

        the SAID being referenced."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.2.20."

        SYNTAX    INTEGER {

                       none(0),

                       hmacSha196(1)

                  }

   docsBpi2MIBObjects  OBJECT IDENTIFIER ::= { docsBpi2MIB 1 }

   -- Cable Modem Group

   docsBpi2CmObjects OBJECT IDENTIFIER ::= { docsBpi2MIBObjects 1 }

   --

   -- The BPI+ base and authorization table for CMs,

   -- indexed by ifIndex

   --

   docsBpi2CmBaseTable OBJECT-TYPE

        SYNTAX              SEQUENCE OF    DocsBpi2CmBaseEntry

        MAX-ACCESS          not-accessible

        STATUS              current

        DESCRIPTION

             "This table describes the basic and authorization-

        related Baseline Privacy Plus attributes of each CM MAC

        interface."

        ::= { docsBpi2CmObjects 1 }

   docsBpi2CmBaseEntry OBJECT-TYPE

        SYNTAX              DocsBpi2CmBaseEntry

        MAX-ACCESS          not-accessible

        STATUS              current

        DESCRIPTION

             "Each entry contains objects describing attributes of

        one CM MAC interface.  An entry in this table exists for

        each ifEntry with an ifType of docsCableMaclayer(127)."

        INDEX               { ifIndex }

        ::= { docsBpi2CmBaseTable 1 }

   DocsBpi2CmBaseEntry ::= SEQUENCE {

        docsBpi2CmPrivacyEnable             TruthValue,

        docsBpi2CmPublicKey                 OCTET STRING,

        docsBpi2CmAuthState                 INTEGER,

        docsBpi2CmAuthKeySequenceNumber     Integer32,

        docsBpi2CmAuthExpiresOld            DateAndTime,

        docsBpi2CmAuthExpiresNew            DateAndTime,

        docsBpi2CmAuthReset                 TruthValue,

        docsBpi2CmAuthGraceTime             Integer32,

        docsBpi2CmTEKGraceTime              Integer32,

        docsBpi2CmAuthWaitTimeout           Integer32,

        docsBpi2CmReauthWaitTimeout         Integer32,

        docsBpi2CmOpWaitTimeout             Integer32,

        docsBpi2CmRekeyWaitTimeout          Integer32,

        docsBpi2CmAuthRejectWaitTimeout     Integer32,

        docsBpi2CmSAMapWaitTimeout          Integer32,

        docsBpi2CmSAMapMaxRetries           Integer32,

        docsBpi2CmAuthentInfos              Counter32,

        docsBpi2CmAuthRequests              Counter32,

        docsBpi2CmAuthReplies               Counter32,

        docsBpi2CmAuthRejects               Counter32,

        docsBpi2CmAuthInvalids              Counter32,

        docsBpi2CmAuthRejectErrorCode       INTEGER,

        docsBpi2CmAuthRejectErrorString     SnmpAdminString,

        docsBpi2CmAuthInvalidErrorCode      INTEGER,

        docsBpi2CmAuthInvalidErrorString    SnmpAdminString

        }

   docsBpi2CmPrivacyEnable  OBJECT-TYPE

        SYNTAX              TruthValue

        MAX-ACCESS          read-only

        STATUS              current

        DESCRIPTION

             "This object identifies whether this CM is

        provisioned to run Baseline Privacy Plus."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1."

        ::= { docsBpi2CmBaseEntry 1 }

   docsBpi2CmPublicKey     OBJECT-TYPE

        SYNTAX             OCTET STRING (SIZE (0..524))

        MAX-ACCESS         read-only

        STATUS             current

        DESCRIPTION

             "The value of this object is a DER-encoded

        RSAPublicKey ASN.1 type string, as defined in the RSA

        Encryption Standard (PKCS #1), corresponding to the

        public key of the CM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.2.4."

        ::= { docsBpi2CmBaseEntry 2 }

   docsBpi2CmAuthState OBJECT-TYPE

        SYNTAX         INTEGER   {

                       start(1),

                       authWait(2),

                       authorized(3),

                       reauthWait(4),

                       authRejectWait(5),

                       silent(6)

                  }

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the state of the CM

        authorization FSM.  The start state indicates that FSM is

        in its initial state."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.1.2.1."

        ::= { docsBpi2CmBaseEntry 3 }

   docsBpi2CmAuthKeySequenceNumber    OBJECT-TYPE

        SYNTAX              Integer32 (0..15)

        MAX-ACCESS          read-only

        STATUS              current

        DESCRIPTION

             "The value of this object is the most recent

        authorization key sequence number for this FSM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.2 and 4.2.2.10."

        ::= { docsBpi2CmBaseEntry 4 }

   docsBpi2CmAuthExpiresOld OBJECT-TYPE

        SYNTAX              DateAndTime

        MAX-ACCESS          read-only

        STATUS              current

        DESCRIPTION

             "The value of this object is the actual clock time for

        expiration of the immediate predecessor of the most recent

        authorization key for this FSM.  If this FSM has only one

        authorization key, then the value is the time of activation

        of this FSM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.2 and 4.2.2.9."

        ::= { docsBpi2CmBaseEntry 5 }

   docsBpi2CmAuthExpiresNew OBJECT-TYPE

        SYNTAX              DateAndTime

        MAX-ACCESS          read-only

        STATUS              current

        DESCRIPTION

             "The value of this object is the actual clock time for

        expiration of the most recent authorization key for this

        FSM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.2 and 4.2.2.9."

        ::= { docsBpi2CmBaseEntry 6 }

   docsBpi2CmAuthReset OBJECT-TYPE

        SYNTAX         TruthValue

        MAX-ACCESS     read-write

        STATUS         current

        DESCRIPTION

             "Setting this object to 'true' generates a Reauthorize

        event in the authorization FSM.  Reading this object always

        returns FALSE.

        This object is for testing purposes only, and therefore it

        is not required to be associated with a last reset

        object."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.1.2.3.4."

        ::= { docsBpi2CmBaseEntry 7 }

   docsBpi2CmAuthGraceTime  OBJECT-TYPE

        SYNTAX         Integer32 (1..6047999)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the grace time for an

        authorization key in seconds.  A CM is expected to start

        trying to get a new authorization key beginning

        AuthGraceTime seconds before the most recent authorization

        key actually expires."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.3."

        ::= { docsBpi2CmBaseEntry 8 }

   docsBpi2CmTEKGraceTime   OBJECT-TYPE

        SYNTAX         Integer32 (1..302399)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the grace time for

        the TEK in seconds.  The CM is expected to start trying to

        acquire a new TEK beginning TEK GraceTime seconds before

        the expiration of the most recent TEK."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.6."

        ::= { docsBpi2CmBaseEntry 9 }

   docsBpi2CmAuthWaitTimeout     OBJECT-TYPE

        SYNTAX         Integer32 (1..30)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the Authorize Wait

        Timeout in seconds."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.1."

        ::= { docsBpi2CmBaseEntry 10 }

   docsBpi2CmReauthWaitTimeout   OBJECT-TYPE

        SYNTAX         Integer32 (1..30)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the Reauthorize Wait

        Timeout in seconds."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.2."

        ::= { docsBpi2CmBaseEntry 11 }

   docsBpi2CmOpWaitTimeout  OBJECT-TYPE

        SYNTAX         Integer32 (1..10)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the Operational Wait

        Timeout in seconds."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.4."

        ::= { docsBpi2CmBaseEntry 12 }

   docsBpi2CmRekeyWaitTimeout    OBJECT-TYPE

        SYNTAX         Integer32 (1..10)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the Rekey Wait Timeout

        in seconds."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.5."

        ::= { docsBpi2CmBaseEntry 13 }

   docsBpi2CmAuthRejectWaitTimeout    OBJECT-TYPE

        SYNTAX         Integer32 (1..600)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the Authorization Reject

        Wait Timeout in seconds."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.7."

        ::= { docsBpi2CmBaseEntry 14 }

   docsBpi2CmSAMapWaitTimeout    OBJECT-TYPE

        SYNTAX         Integer32 (1..10)

        UNITS          "seconds"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the retransmission

        interval, in seconds, of SA Map Requests from the MAP Wait

        state."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.8."

        ::= { docsBpi2CmBaseEntry 15 }

   docsBpi2CmSAMapMaxRetries     OBJECT-TYPE

        SYNTAX         Integer32 (0..10)

        UNITS          "count"

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the maximum number of

        Map Request retries allowed."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Appendix A.1.1.1.9."

        ::= { docsBpi2CmBaseEntry 16 }

   docsBpi2CmAuthentInfos   OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times

        the CM has transmitted an Authentication Information

        message.  Discontinuities in the value of this counter can

        occur at re-initialization of the management system, and at

        other times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.9."

        ::= { docsBpi2CmBaseEntry 17 }

   docsBpi2CmAuthRequests   OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has transmitted an Authorization Request message.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.1."

        ::= { docsBpi2CmBaseEntry 18 }

   docsBpi2CmAuthReplies    OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has received an Authorization Reply message.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.2."

        ::= { docsBpi2CmBaseEntry 19 }

   docsBpi2CmAuthRejects    OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has received an Authorization Reject message.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.3."

        ::= { docsBpi2CmBaseEntry 20 }

   docsBpi2CmAuthInvalids   OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the count of times the CM

        has received an Authorization Invalid message.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.7."

        ::= { docsBpi2CmBaseEntry 21 }

   docsBpi2CmAuthRejectErrorCode OBJECT-TYPE

        SYNTAX         INTEGER {

                              none(1),

                              unknown(2),

                              unauthorizedCm(3),

                              unauthorizedSaid(4),

                              permanentAuthorizationFailure(8),

                              timeOfDayNotAcquired(11)

                              }

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the enumerated

        description of the Error-Code in the most recent

        Authorization Reject message received by the CM.  This has

        the value unknown(2) if the last Error-Code value was 0 and

        none(1) if no Authorization Reject message has been received

        since reboot."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.3 and 4.2.2.15."

        ::= { docsBpi2CmBaseEntry 22 }

   docsBpi2CmAuthRejectErrorString    OBJECT-TYPE

        SYNTAX         SnmpAdminString (SIZE (0..128))

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the text string in the

        most recent Authorization Reject message received by the

        CM.  This is a zero length string if no Authorization

        Reject message has been received since reboot."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.3 and 4.2.2.6."

        ::= { docsBpi2CmBaseEntry 23 }

   docsBpi2CmAuthInvalidErrorCode     OBJECT-TYPE

        SYNTAX         INTEGER {

                              none(1),

                              unknown(2),

                              unauthorizedCm(3),

                              unsolicited(5),

                              invalidKeySequence(6),

                              keyRequestAuthenticationFailure(7)

                              }

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the enumerated

        description of the Error-Code in the most recent

        Authorization Invalid message received by the CM.  This has

        the value unknown(2) if the last Error-Code value was 0 and

        none(1) if no Authorization Invalid message has been received

        since reboot."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.7 and 4.2.2.15."

        ::= { docsBpi2CmBaseEntry 24 }

   docsBpi2CmAuthInvalidErrorString   OBJECT-TYPE

        SYNTAX         SnmpAdminString (SIZE (0..128))

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the text string in the

        most recent Authorization Invalid message received by the

        CM.  This is a zero length string if no Authorization

        Invalid message has been received since reboot."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.7 and 4.2.2.6."

        ::= { docsBpi2CmBaseEntry 25 }

   --

   -- The CM TEK Table, indexed by ifIndex and SAID

   --

   docsBpi2CmTEKTable  OBJECT-TYPE

        SYNTAX         SEQUENCE OF    DocsBpi2CmTEKEntry

        MAX-ACCESS     not-accessible

        STATUS         current

        DESCRIPTION

             "This table describes the attributes of each CM

        Traffic Encryption Key (TEK) association.  The CM maintains

        (no more than) one TEK association per SAID per CM MAC

        interface."

        ::= { docsBpi2CmObjects 2 }

   docsBpi2CmTEKEntry  OBJECT-TYPE

        SYNTAX         DocsBpi2CmTEKEntry

        MAX-ACCESS     not-accessible

        STATUS         current

        DESCRIPTION

             "Each entry contains objects describing the TEK

        association attributes of one SAID.  The CM MUST create one

        entry per SAID, regardless of whether the SAID was obtained

        from a Registration Response message, from an Authorization

        Reply message, or from any dynamic SAID establishment

        mechanisms."

        INDEX     { ifIndex, docsBpi2CmTEKSAId }

        ::= { docsBpi2CmTEKTable 1 }

   DocsBpi2CmTEKEntry ::= SEQUENCE {

        docsBpi2CmTEKSAId                  DocsSAId,

        docsBpi2CmTEKSAType                DocsBpkmSAType,

        docsBpi2CmTEKDataEncryptAlg        DocsBpkmDataEncryptAlg,

        docsBpi2CmTEKDataAuthentAlg        DocsBpkmDataAuthentAlg,

        docsBpi2CmTEKState                 INTEGER,

        docsBpi2CmTEKKeySequenceNumber     Integer32,

        docsBpi2CmTEKExpiresOld            DateAndTime,

        docsBpi2CmTEKExpiresNew            DateAndTime,

        docsBpi2CmTEKKeyRequests           Counter32,

        docsBpi2CmTEKKeyReplies            Counter32,

        docsBpi2CmTEKKeyRejects            Counter32,

        docsBpi2CmTEKInvalids              Counter32,

        docsBpi2CmTEKAuthPends             Counter32,

        docsBpi2CmTEKKeyRejectErrorCode    INTEGER,

        docsBpi2CmTEKKeyRejectErrorString  SnmpAdminString,

        docsBpi2CmTEKInvalidErrorCode      INTEGER,

        docsBpi2CmTEKInvalidErrorString    SnmpAdminString

        }

   docsBpi2CmTEKSAId   OBJECT-TYPE

        SYNTAX         DocsSAId

        MAX-ACCESS     not-accessible

        STATUS         current

        DESCRIPTION

             "The value of this object is the DOCSIS Security

        Association ID (SAID)."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.2.12."

        ::= { docsBpi2CmTEKEntry 1 }

   docsBpi2CmTEKSAType OBJECT-TYPE

        SYNTAX         DocsBpkmSAType

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the type of security

        association."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 2.1.3."

        ::= { docsBpi2CmTEKEntry 2 }

   docsBpi2CmTEKDataEncryptAlg   OBJECT-TYPE

        SYNTAX    DocsBpkmDataEncryptAlg

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the data encryption

        algorithm for this SAID."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.2.20."

        ::= { docsBpi2CmTEKEntry 3 }

   docsBpi2CmTEKDataAuthentAlg   OBJECT-TYPE

        SYNTAX    DocsBpkmDataAuthentAlg

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the data authentication

        algorithm for this SAID."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.2.20."

        ::= { docsBpi2CmTEKEntry 4 }

   docsBpi2CmTEKState  OBJECT-TYPE

        SYNTAX         INTEGER {

                               start(1),

                               opWait(2),

                               opReauthWait(3),

                               operational(4),

                               rekeyWait(5),

                               rekeyReauthWait(6)

                               }

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the state of the

        indicated TEK FSM.  The start(1) state indicates that the

        FSM is in its initial state."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.1.3.1."

        ::= { docsBpi2CmTEKEntry 5 }

   docsBpi2CmTEKKeySequenceNumber     OBJECT-TYPE

        SYNTAX              Integer32 (0..15)

        MAX-ACCESS          read-only

        STATUS              current

        DESCRIPTION

             "The value of this object is the most recent TEK

        key sequence number for this TEK FSM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.2.10 and 4.2.2.13."

        ::= { docsBpi2CmTEKEntry 6 }

   docsBpi2CmTEKExpiresOld  OBJECT-TYPE

        SYNTAX         DateAndTime

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the actual clock time for

        expiration of the immediate predecessor of the most recent

        TEK for this FSM.  If this FSM has only one TEK, then the

        value is the time of activation of this FSM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.5 and 4.2.2.9."

        ::= { docsBpi2CmTEKEntry 7 }

   docsBpi2CmTEKExpiresNew  OBJECT-TYPE

        SYNTAX         DateAndTime

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the actual clock time for

        expiration of the most recent TEK for this FSM."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Sections 4.2.1.5 and 4.2.2.9."

        ::= { docsBpi2CmTEKEntry 8 }

   docsBpi2CmTEKKeyRequests OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has transmitted a Key Request message.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.4."

        ::= { docsBpi2CmTEKEntry 9 }

   docsBpi2CmTEKKeyReplies  OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has received a Key Reply message, including a message whose

        authentication failed.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.5."

        ::= { docsBpi2CmTEKEntry 10 }

   docsBpi2CmTEKKeyRejects  OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has received a Key Reject message, including a message

        whose authentication failed.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.6."

        ::= { docsBpi2CmTEKEntry 11 }

   docsBpi2CmTEKInvalids    OBJECT-TYPE

        SYNTAX         Counter32

        MAX-ACCESS     read-only

        STATUS         current

        DESCRIPTION

             "The value of this object is the number of times the CM

        has received a TEK Invalid message, including a message

        whose authentication failed.

        Discontinuities in the value of this counter can occur at

        re-initialization of the management system, and at other

        times as indicated by the value of

        ifCounterDiscontinuityTime."

        REFERENCE

             "DOCSIS Baseline Privacy Plus Interface Specification,

        Section 4.2.1.8."

        ::= { docsBpi2CmTEKEntry 12 }