cwmp

acs-password

Defines the login password that the <device> uses for authenticated access to the ACS.

acs-url

Defines the URL address of the ACS to which the <device> connects. For example, http://10.4.2.1:10301/acs/.

acs-url-provisioning-mode {automatic|manual}

Defines the method for configuring the URL of the TR-069 ACS.

acs-user-name

Defines the login username that the <device> uses for authenticated access to the ACS.

conf-change-notification {off|on}

Enables the device to notify the TR-069 ACS of device configuration changes.

connection-request-password

Defines the connection request password used by the ACS to connect to the <device>.

connection-request-user-name

Defines the connection request username used by the ACS to connect to the <device>.

cwmp-acl <ACL Name>

Applies an ACL rule to TR-069 management.

data-model {device|internetgatewaydevice}

Defines the TR-069 Data Model:

■

device: Device (TR-181)

■

internetgatewaydevice: TR-098

default-inform-interval

Defines the inform interval (in seconds) at which the <device> periodically communicates with the ACS.

delete-device-log

Deletes the device's CWMP log records.

disable-provisioning-code-limitation

Disables reject ACS set request when configuration mode is Manual.

display-allowed-acs-ips

Displays the allowed IP addresses of the ACS. These are IP addresses that have been automatically added to the device's firewall (see the port-restriction command, below), which blocks all other IP addresses from accessing the TR-069 listening port.

Note: This command is applicable only to MP-5xx, Mediant 500Li, and Mediant 800Ci.

display-device-log

Displays the device log records received by the ACS.

idle-period > day-of-week

Defines the day of the week on which the CPE allows file download from ACS.

idle-period > end

Defines the end time (in HH:MM format) of the idle period range during which the CPE allows file download from ACS.

idle-period > start

Defines the start time (in HH:MM format) of the idle range during which the CPE allows file download from ACS.

ipv6

Enables the use of an IPv6 or IPv4 address for the ACS.

To allow only an IPv4 address: no ipv6 enable

For a full description, refer to the User's Manual.

period-inform-enable {off|on}

Enables the device to send periodic inform messages to the ACS.

network-source

Defines the alias name representing a VRF or an IP address of the IPv4 source network interface that is used to bind to the TR-069.

ntp-dependency {off|on}

When the device is configured to connect securely to the TR-069 Auto Configuration Server (ACS) over TLS and to verify the certificate, you can enable this command to connect only when the device is synchronized with the NTP server.

port

Defines the local HTTP/S port used for TR-069. The default is 827547.

port-restriction {off|on}

Enables the device to restrict access to its embedded TR-069 server. When enabled, the device automatically configures the firewall with the ACS IP addresses (manually configured or DNS resolved if FQDN) to allow access to the TR-069 listening port (configured by [TR069HTTPPort]), blocking all other traffic to the port.

Note:

■

The device can add up to six IP addresses o f the ACS to the firewall.

■

To view allowed IP addresses, use the command display-allowed-acs-ips (see above).

■

For this feature to be functional, you must also enable the firewall on the TR-069 interface.

■

This command is applicable only to MP-5xx, Mediant 500Li, and Mediant 800Ci.

send-connection-request

The device sends a connection request event toward the ACS.

service {off|on}

Enables <device> management through TR-069.

socket-receive-timeout

TR-069 socket receive timeout.

source data {source-address|vrf}

Defines the source interface through which the device connects (binds) to the TR-069 ACS. This can be the main VRF (default), a non-default VRF , or the Loopback interface:

■

Loopback interface:

(cwmp-tr069)# source data source-address interface loopback <Index>

■

Main VRF:

(cwmp-tr069)# source data

■

Non-default VRF:

(cwmp-tr069)# source data vrf <VRF name>

Note:

■

Configuring the source data doesn’t require a device reset.

■

After you configure the source data, the device's TR-069 service disconnects from the ACS and closes all sockets (server and client). It then tries to connect to the ACS through the new source interface.

■

If you have configured a VRF or Loopback interface that doesn't exist, the 'ACS Connection Status' read-only field in the Web interface displays "Waiting for external IP address".

■

Connection URL and external IP address (with path) are changed according to source data.

tcp-fragment {off|on}

Enables the device to send outgoing TR-069 packets with the DF (Don’t Fragment) flag in the IP header.

tls-context <TLS Context ID>

Assigns a TLS Context for TR-069 management.

tr069-cwmp-wait-interval

Defines the minimum interval (in seconds) that the <device> waits before attempting again to communicate with the ACS after the previous communication attempt failed.

verify-certificate {off|on}

Enables verification of the certificate during the TR-069 connection.

verify-common-name {off|on}

Enables verification of the common name during the TR-069 connection.