Subject: [ipcdn] RE: TEK Reset

From: "Kaz Ozawa" <[email-masked]>
Date: Fri, 10 Aug 2001 01:13:27 -0600

Dan,

You are right. We have to cover both BPI+ mode and BPI mode.
By the way, in BPI mode, I think the BPI spec does not prohibit the CMTS from
generating two key at the same time. If this is correct, probably we don't
need to specify the number of keys. How about the followings.

  Setting this object to TRUE causes the CMTS to invalidate all current
  active TEK(s) and to generate new TEK(s) for the associated SAID. The
  CMTS MAY also generate an unsolicited TEK Invalid message, to optimize
  the TEK synchronization between the CMTS and the CM. Reading this
  object always returns FALSE."

This time, I am forwarding this email to docsis-oss and IETF ipcdn mailing list
because the BPI+ MIB should be updated by issuing the new Internet Draft in
the ipcdn working group.

Thanks,
kaz

> -----Original Message-----
> From: [email-masked]
> [mailto:[email-masked]]On Behalf Of Daniel Hegglin
> Sent: Thursday, August 02, 2001 10:37 AM
> To: Kaz Ozawa; Docsis-Sec
> Subject: RE: TEK Reset
>
>
> I believe this description isn't quite correct either since we manage BPI
> modems as well using the BPI+ MIBs on the CMTS.  How about this:
>
> Setting this object to TRUE causes the CMTS to invalidate the current active
> TEK(s).  For modems running in BPI+ mode, the CMTS MUST generate 2 new TEKs
> for the associated SAID.  For modems running in BPI mode, the CMTS MUST
> generate only 1 new TEK for the associated SAID.  The CMTS MAY also generate
> an unsolicited TEK Invalid message to optimize the TEK synchronization
> between the CMTS and the CM. Reading this object always returns FALSE.
>
> thanks,
> dan
>
>
> Daniel Hegglin
> Riverstone Networks
> 5200 Great America Parkway
> Santa Clara, CA  95054
> (408) 878-6526 - work
> (925) 216-8137 - cell
> (925) 736-4474 - home office
> http://www.riverstonenet.com/
>
> > -----Original Message-----
> > From: Kaz Ozawa [mailto:[email-masked]]
> > Sent: Wednesday, August 01, 2001 8:23 PM
> > To: Daniel Hegglin; Docsis-Sec
> > Subject: RE: TEK Reset
> >
> >
> > Hi Dan,
> >
> > Sorry for a very late reply.
> > Yes, you are right and we should update the description.
> > How about the followings?
> >
> > Setting this object to TRUE causes the CMTS to invalidate the current
> > active TEKs and to generate two new TEK for the associated SAID; the
> > CMTS MAY also generate an unsolicited TEK Invalid message, to optimize
> > the TEK synchronization between the CMTS and the CM. Reading this
> > object always returns FALSE."
> >
> > Thanks,
> > kaz
> >
> > > -----Original Message-----
> > > From: [email-masked]
> > > [mailto:[email-masked]]On Behalf Of Daniel Hegglin
> > > Sent: Thursday, June 28, 2001 4:51 PM
> > > To: Docsis-Sec
> > > Subject: TEK Reset
> > >
> > >
> > >
> > > The mib object docsBpi2CmtsTEKReset has the following description:
> > >
> > > Setting this object to TRUE causes the CMTS to
> > > invalidate the current active TEK(s) (plural due to key
> > > transition periods), and to generate a new TEK for the
> > > associated SAID; the CMTS MAY also generate an unsolicited
> > > TEK Invalid message, to optimize the TEK synchronization
> > > between the CMTS and the CM. Reading this object always
> > > returns   FALSE.
> > >
> > > However, the BPI+ spec sais that we must always hold 2 active
> > TEKs, which
> > > means after resetting the TEKs, we will need to create 2 new
> > TEKs for the
> > > SAID.  Should the mib be changed to reflect the new
> > requirements for BPI+?
> > >
> > > dan
> > >
> > >
> > >
> >
>
>

_______________________________________________
IPCDN mailing list
[email-masked]
http://www1.ietf.org/mailman/listinfo/ipcdn