Cisco Cisco Broadband Access Center Telco Wireless 3.10
1-8
Cisco Broadband Access Center for Cable Administrator’s Guide
OL-2445-02
Chapter 1 Broadband Access Center for Cable Overview
SNMP Agents
KDC Certificates
The certificates used to authenticate the KDC, are not shipped with BAC. You must obtain the required
certificates from Cable Television Laboratories Inc. (CableLabs) and the content of these certificates
must match those that are installed in the MTA.
certificates from Cable Television Laboratories Inc. (CableLabs) and the content of these certificates
must match those that are installed in the MTA.
You may need to run these certificates through the PKCert tool to convert them to a format that is usable
by the KDC. The certificate files are then copied into the required directory. See the
by the KDC. The certificate files are then copied into the required directory. See the
for additional information.
Note
To install a KDC licence file, you copy it into the <BPR_HOME>/kdc directory and name it kdc.license.
After doing so, you run the bprAgent restart kdc command, from the /etc/init.d directory, to restart the
KDC server and make the changes take effect.
After doing so, you run the bprAgent restart kdc command, from the /etc/init.d directory, to restart the
KDC server and make the changes take effect.
Once the certificates are installed, the MTA sends a pair of chained certificates to the KDC including the
MTA device certificate and the MTA manufacturer certificate.
MTA device certificate and the MTA manufacturer certificate.
Warning
Without the certificates installed, the KDC will not function.
The KDC ensures that both of these certificates correctly chained to the MTA root certificate.
Consequently, it is extraordinarily important that the MTA manufacturer certificate corresponds to the
public key found within the MTA root certificate that is provisioned on the KDC.
Consequently, it is extraordinarily important that the MTA manufacturer certificate corresponds to the
public key found within the MTA root certificate that is provisioned on the KDC.
KDC Licenses
You obtain a KDC license from your Cisco representative and then have to install it in the correct
directory. To do this:
directory. To do this:
Step 1
Obtain your license file.
Step 2
Copy that file to the <BPR_HOME>/kdc directory.
Step 3
Rename the file to kdc.license.
Step 4
Run the bprAgent restart kdc command, from the /etc/init.d directory, to restart the KDC server and
make the changes take effect.
make the changes take effect.
SNMP Agents
BAC supports basic SNMP based monitoring of both the DPE and RDU servers.
All SNMP agents described in this section support the SNMP version v2c. The SNMP agents do not
perform any logging. You can enable these agents using either the DPE CLI or RDU SNMP
configuration CLI commands. See the
perform any logging. You can enable these agents using either the DPE CLI or RDU SNMP
configuration CLI commands. See the
for additional information on the DPE CLI and the