Authentication CPE

[akcoder]

Unless you are doing something funky, you almost never need to explicitly set cwmp.auth as that is handled out of the box by GenieACS.

cwmp.auth is for ACS → CPE authentication
cwmp.connectionRequestAuth is for CPE → ACS auth

Unable to authenticate through EXT

When cwmp.auth is not set, GenieACS defaults to AUTH(username, password). The values for username and password get pulled from InternetGatewayDevice.ManagementServer.ConnectionRequestUsername and InternetGatewayDevice.ManagementServer.ConnectionRequestPasword. So if you are not setting those values for the device, then no authentication will be able to take place. And this is confirmed by when you hard code in the username and password everything work. But for all of this to work, you have to us…

Connection Request Error After ACS Change: Incorrect Connection Request Credentials

In the ACS world, there are two different authentication pieces. One for ACS → CPE, and one for CPE → ACS. By default, GenieACS handles setting up the CPE → ACS authentication. Does your CPE require authentication for the ACS to connect to the connection request URL? If so, then you need to set the cwmp.connectionRequestAuth config value with something like this: AUTH(username, password) OR AUTH("myUsername1", "myPassword1") OR AUTH("myUsername2", "myPassword2")