| Description | The Dynamic Shared Secret feature can operate in three
different modes, depending on what action should be taken
for cable modems that fail the CMTS MIC verification check:
notConfigured(1): It indicates that the DMIC is not
configured for this cable interface.
mark(2): By default, the Dynamic Shared Secret feature
is enabled on all cable interfaces using the
mark option. In this mode, the CMTS allows
cable modems to come online even if they fail
the CMTS MIC validity check. However, for
this modem cdxCmtsCmStatusDMICMode will
be labeled as marked.
lock(3): When the lock option is used, the CMTS assigns
a restrictive QoS configuration to CMs that
fail the MIC validity check twice in a row. A
particular QoS profile to be used for locked
cable modems can be specified by setting
cdxCmtsCmDMICLockQos.
If a customer resets their CM, the CM will
reregister but still uses the restricted QoS
profile. A locked CM continues with the
restricted QoS profile until it goes offline
and remains offline for at least 24 hours, at
which point it is allowed to reregister with a
valid DOCSIS configuration file. A system
operator can manually clear the lock on a CM by
setting cdxCmtsCmStatusDMICUnLock object.
reject(4): In the reject mode, the CMTS refuses to allow
CMs to come online if they fail the CMTS MIC
validity check. |