Alpha Technologies AlphaNet IDH4 for XM3-HP Series - Technical Manual - Manual (Page 91)

91 746-257-B5-001, Rev. A1 (11/2013)
13.0 Dual IP Mode (Addendum), continued
13.4 Dual IP SNMP Community Strings
The transponder community strings used for the CPE Transponder in Dual IP mode can be configured
by the operator. The default transponder read-only community string is AlphaGet. The default read-write
community string is AlphaSet. These settings can be configured with the DOCSIS Configuration File, the
IDH4 Setup File (aitdoc03.cfg) or remotely using SNMP by including the parameters below:
MIB Parameter Object ID Description Value
atiMgmtSnmpCommGet 1.3.6.1.4.1.926.1.3.1.4.1.0 Read Community String AlphaGet (default)
[desired value]
atiMgmtSnmpCommSet 1.3.6.1.4.1.926.1.3.1.4.2.0 Read/Write Community String AlphaSet (default)
[desired value]
13.5 Security in Dual IP Mode
In Dual IP mode, additional SNMP security to the IDH4 Series proprietary MIBs is required since the
transponder and power supply data is exposed on the CPE network, which may be more vulnerable to
packet sniffing and community string deciphering than on the secure cable modem network.
There are two methods of providing SNMP Security in Dual IP mode: the Data Access Key (default), and
the Secure Access List.
Method 1: Dual IP Security Using the Data Access Key
In Dual IP mode atiMgmtSnmpAlphaSetAccess is the only SNMP parameter within the Alpha
proprietary MIB with SNMP write access on the CPE network by default. When this parameter is
set to the value of the parameter atiMgmtSnmpAlphaSetKey, the data access key, SNMP read/write
access is granted to all parameters in the Alpha MIB tree with read/write attributes. When this access
is granted, the value of atiMgmtSnmpCPESetEnabled is automatically changed to "2" (enabled). After
the operator is finished setting the SNMP variables, SNMP write access can be disabled by setting the
atiMgmtSnmpCPESetEnabled to "1" or by setting atiMgmtSnmpAlphaSetAccess to any value other than
the data access key or by performing a reset to the IDH4 Series.
The data access key parameters can be changed from the default values through the DOCSIS
Configuration File, the IDH4 Series Setup File (idhdoc04.cfg) or remotely using SNMP by including the
following Alpha MIB parameters:
MIB Parameter Object ID Description Value
atiMgmtSnmpAlphaSetAccess 1.3.6.1.4.1.926.1.3.1.3.3.0 Set to Access Key Set to match the value of
atiMgmtSnmpAlphaSetKey
atiMgmtSnmpAlphaSetKey 1.3.6.1.4.1.926.1.3.1.3.4.0 Data Access Key (Dual IP) CIBSET (default)
atiMgmtSnmpCPESetEnabled 1.3.6.1.4.1.926.1.3.1.3.5.0 Corresponds to whether
or not the action taken on
atiMgmtSnmpAlphaSetKey
was successful. Once
enabled, writing 1 to this
variable will disable CPE
sets.
1 = Disabled (False)
2 = Enabled (True)
Table 13-5, Data Access Key Parameters
Table 13-4, Community Strings
These community strings are only applicable for CPE access in Dual IP mode. CM access in both Single
IP and Dual IP modes use standard DOCSIS community strings set through the modem configuration file's
docsDevNmAccessTable. See Section 3.2.1, Setting Modem Community Strings.
NOTE: