Calix and GenieACS basic operations

1

Hey folks, I have a GenieACS instance I set up last week and yesterday I migrated about 1000 Calix devices to it as we no longer want to pay for Calix cloud.

I’m wondering if others that have Calix devices connected up to GenieACS would be willing to share advice/tips/parameters that allow the following:

Changing of Wifi password(s)
Enabling Remote GUI via GenieACS so that our support can get in to look at settings. Would be great if this was the way cloud does it, where it only turns on temporarily. The devices currently have remote GUI disabled.

Advice on how to have Online status not show CPEs offline when you can get in and easily summon them. I’m sure it’s a timer thing, but I’ve not yet figured out where that is.

Thanks for your help, and yes, I did use the search function here on the community. :smile:

2

Hi,

I have some 844Es and 844Gs on my lab server.
Which devices are you using?

Regards,

3

844E, 844G, and a handful of Gigaspires.

We haven’t dumped Cloud quite yet, so I ran some commands and captured the communication log. I’m making some headway, but I didn’t want to re-invent the wheel if someone had already done all of this.

Thanks.

4

This is what I use for our 844Es, to enable the remote HTTP login:

// Calix 844e
declare("InternetGatewayDevice.UserInterface.RemoteAccess.Enable", {value: now}, {value: true});
declare("InternetGatewayDevice.User.2.RemoteAccessCapable", {value: now}, {value: true});

I created tags for them to enable and disable the remote GUI.
Once the Support person logs in, they can change any required setting. Once they’re done, they disable the remote GUI.

Regarding the Online status issue, I do not have that issue on our devices. If you have a screenshot to better explain it, please upload one.

Regards,

5

Thank you for responding. In which area do I put those declare statements (sorry I’m new)?

I figured out what was going on with my Overview page. Periodic inform interval was set to 24 hours, which means GenieACS wasn’t hearing from devices often enough.

6
11

I found an inelegant solution for this, but it works for now, and I’m about to head out for a week long vacation. See image. This is on the devices page, and the field don’t always show up without refreshing InternetGatewayDevice.User parameter. Our techs can just set the two field to true and commit and then can access the device. Better than having them root through all of the parameters.

devicepage
devicepage461×100 2.49 KB

12

This is the process I chose to go with:

  1. Select the device
  2. Add a tag - “enableRemoteLogin”
  3. Click the summon button
  4. I created a Preset that looks for that specific tag, enables the two parameters and replaces the tag in step 2 with “Remote Login enabled”
  5. Once the support person has completed their remote support, they disable remote login
13

Interesting! So I have Calix 854G and I can enable remote access, but I dont know how to set the username and password. The 854G has it written on the side of the modem, and you have to write it: pwd + !5upporT this is a HUGE time sink for the customer service reps, so we want to be able to change this password, so we have the same one everywhere…

14

Ah yes. I have seen this with newer firmware versions.
Let me poke around in our devices and I’ll see if I can help.

15

Our model has:
InternetGatewayDevice.User.2.Username
InternetGatewayDevice.User.2.Password

Can you check your model for the same and try changing the password?

I couldn’t test it because I am working from home today.

16

Hi, Yes we do have those fields and they are editable on one ONT, that is great so thank you.

On another ONT (on the same E7, also has the same ONT firmware) these fields are not present when I look for them. There must be a way to force the ONT to report these fields? However I dont know where that option is or how to set it.

I have support access on both and there is no ACL turned on. The ACS URL is correct and both show up in GenieACS.

This is the same for the 854s and 844s.

Regards,

Jon

17

Glad to hear it worked for one model.

Regarding the other models, are you drilling down into the correct tree?

In the model that worked, I searched for “support” and once I found the branch, I was then able to refresh all objects in that branch and I found what you were looking for.

Worse case is that it doesn’t exist in the current firmware and you would have to reach out to Calix to see if they can give you new firmware with that capability.

18

Hi Dustin,

thats the thing its the same firmware on the same model of ONT, when i search user it just doesnt have user1 and user2 in it, or the support passwords displayed.

its like there is a security setting to stop it from showing these passwords.

I downloaded all the parameters using the download button (after summoning) both of the ONTs and i have the 1300 lines from both of them in a diff-checker to compare. one of them is missing firewall settings etc, and the other has all those settings viewable and the passwords too.

I dont think you can drill into the trees any further than with displaying all the parameters?

I feel like there should be one setting i can push and then ONT will report everything, lol. I dont know.

19

By default, GenieACS would not download every parameter and its value for a device.
You would have to try navigating the tree to see if it is there; bearing in mind that it may be under a different branch.

Try searching for “username” and then see if there are any results that may be what you’re looking for.

20

Can you post screenshots of your search results, including the values?

You can blur anything you deem as private.

21

image
image3817×1450 309 KB

The above is the one that does show the support password. with 22 parameters

image
image3802×1897 435 KB

notice how this one has 9 parameters and does not show them.

I have repeatedly summoned both. the firmware is the same. The firewall and ACL settings are the same.

22

Eureka! I found this post that shows that Calix parameters may not display unless they are written first. Here: GenieACS not querying "non-reported" parameters

So with that knowledge I copied the parameters from the one that was working and put it into the one that was not working by writing it to the ONT directly from the command line of the ACS, using this script.

curl -X POST http://localhost:7557/devices/487746-ONT-CXNK00731CBE/tasks
-H ‘Content-Type: application/json’
-d ‘{
“name”: “setParameterValues”,
“parameterValues”: [
[“InternetGatewayDevice.User.2.Enable”, “true”, “xsd:boolean”],
[“InternetGatewayDevice.User.2.Password”, “admin”, “xsd:string”],
[“InternetGatewayDevice.User.2.RemoteAccessCapable”, “true”, “xsd:boolean”],
[“InternetGatewayDevice.User.2.Username”, “support”, “xsd:string”],
[“InternetGatewayDevice.User.2.X_000631_RemoteAccessCapableTimeout”, “0”, “xsd:string”],
[“InternetGatewayDevice.User.2.X_000631_SetDefaultPassword”, “0”, “xsd:string”]
]
}’

I still had to go into the E7 and enable remote access, so I have one more parameter to sleuth out, then it will be working.

I hope this helps someone else!

23

I was just about to ask you to refresh the parameter “InternetGatewayDevice.User” parameter and you should see the branches below it:
InternetGatewayDevice.User.2.x and others should now be visible.