Authentication CPE

[Neviton]

I would like to know if I did correctly in the authentication statements, I took a look at the documentation and the forum and left it as standard like this:

Key: cwmp.auth Value: AUTH(username, passworld) OR AUTH(“username”, “passworld”)

Key: cwmp.connectionRequestAuth Value: AUTH(username, passworld) OR AUTH(“username”, “passworld”)

[akcoder]

Unless you are doing something funky, you almost never need to explicitly set cwmp.auth as that is handled out of the box by GenieACS.

cwmp.auth is for ACS → CPE authentication
cwmp.connectionRequestAuth is for CPE → ACS auth

Unable to authenticate through EXT

When cwmp.auth is not set, GenieACS defaults to AUTH(username, password). The values for username and password get pulled from InternetGatewayDevice.ManagementServer.ConnectionRequestUsername and InternetGatewayDevice.ManagementServer.ConnectionRequestPasword. So if you are not setting those values for the device, then no authentication will be able to take place. And this is confirmed by when you hard code in the username and password everything work. But for all of this to work, you have to us…

Connection Request Error After ACS Change: Incorrect Connection Request Credentials

In the ACS world, there are two different authentication pieces. One for ACS → CPE, and one for CPE → ACS. By default, GenieACS handles setting up the CPE → ACS authentication. Does your CPE require authentication for the ACS to connect to the connection request URL? If so, then you need to set the cwmp.connectionRequestAuth config value with something like this: AUTH(username, password) OR AUTH("myUsername1", "myPassword1") OR AUTH("myUsername2", "myPassword2")

[Neviton]

I understood, but I did this because I’m having many CPEs being discovered, kind of without authentication.

So, just in case, I need to put cwmp.connectionRequestAuth, but even so, it’s still discovering unknown CPEs. I haven’t seen in the forum how to deal with this yet.