Broadcom Recommended Default Configuration for ASF Firmware v6.x
================================================================

1. It is recommended that ASF Firmware *not* be enabled in the NVRAM
by default (b57diag->secfg, option 24), since ASF cannot function until it's
Management Console IP Address has been configured properly (by the end-user).


2. The following elements of the ASF Configuration Table must be defined by
the OEM (i.e. Broadcom cannot recommend any default values):

SMBus Address
UuidGuid (copied from the SMBIOS via ASFConfig.cpl)


3. The following elements of the ASF Configuration Table are copied from the
system's ASF! Description Table via ASFConfig.cpl:

ASF_INFO
ASF_ALRT
ASF_RCTL
ASF_RMCP
ASF_ADDR

It is *highly* recommended that the ASF_RMCP.RemoteControlCapabilities[6]
(RMCP System Capabilities Bit Mask) *not* have any "set" bits in the high
4-bits (7:4) of this byte, allowing non-secure Remote Control commands.
Only the low 4-bits (3:0) should have any "set" bits, corresponding to the
Remote Control commands supported by the system (if any). This will allow
only *secure* sessions to execute Remote Control commands, which is the main
purpose of ASF 2.0 secure management. See "System Capabilities Bit Mask"
in ASF spec section 3.2.4.4 for more details.

ASF_RCTL.NumberOfControls must specify the number of Remote Control
commands supported by the system (maximum of 4) and each must have a
corresponding ASF_RCTL Control Array element.


4. The following ASF "Settings" are recommended:

Receive RMCP Packets: Enabled (Remote management not possible if disabled)
Transmit PET Packets: Enabled (No "Event" messages sent if disabled)
Transmit PET Heartbeats: Enabled
PET Heartbeat Interval: 60 seconds (ASF section 3.1.5.5 recommended default)
PET Retransmit Interval: 10 seconds (ASF section 3.1.1.1 requires < 20 sec.)
Link Speed: 10/100
SMBus Legacy Poll Interval: 4 seconds
Delay First Legacy poll: 0 seconds
WoL on ASF traffic: Disabled
Scan for ASF devices: Disabled
SNMP Community Name: "public"


5. The following ASF "Security" defaults are recommended:

Secure RMCP: Enabled
ASF 1.0 Compatibility: Enabled (disable for the most secure environment)
Session Inactivity Timeout: 300 (5 minutes)

No defaults can be recommended for security keys or operator/administrator
"rights", but the operator is expected to at least have access to whatever
Remote Control commands supported by the system (if any).


6. Any ASF configuration parameters not specifically described in this
document should default to 0.