# Cisco 887 unable to autorize **URL:** \ **Category:** Uncategorized\ **Created:** [August 19, 2021, 11:39am UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959 "2021-08-19T11:39:28Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![jorgedacosta](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@jorgedacosta](https://forum.genieacs.com/u/jorgedacosta)\ **Post date:** [August 19, 2021, 11:39am UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/1 "2021-08-19T11:39:28Z")
Using a cisco 887 with this config : cwmp agent enable download management server username username management server password 0 password management server url [http://myurl.com:7547/](http://myurl.com:7547/) On the cisco I see : \*Aug 19 11:30:24.583: CWMP: cwmp\_session\_response\_data → HTTP ACS Response code 401 \*Aug 19 11:30:24.583: CWMP: cwmp\_session\_response\_data → HTTP ACS Response string Unauthorized \*Aug 19 11:30:24.583: CWMP ERROR: cwmp\_session\_response\_data → HTTPC Response failed with httpc error 5 What am i missing ? what needs to be done on genieacs ? Thanks ---
**Author:** ![akcoder](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/akcoder/32/11_2.png) [@akcoder](https://forum.genieacs.com/u/akcoder)\ **Post date:** [August 19, 2021, 5:00pm UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/2 "2021-08-19T17:00:36Z")
Have you enabled authentication in GenieACS? ---
**Author:** ![jorgedacosta](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@jorgedacosta](https://forum.genieacs.com/u/jorgedacosta)\ **Post date:** [August 19, 2021, 5:13pm UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/3 "2021-08-19T17:13:13Z")
Thank you so much for your reply akcoder. I have 2 Draytech devices and they authenticate just fine . This seems to be a Cisco “specific” issue. So yes … I have auth set . Could I have missed something ? Is there something extra I need to do for cisco boxes ? ---
**Author:** ![akcoder](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/akcoder/32/11_2.png) [@akcoder](https://forum.genieacs.com/u/akcoder)\ **Post date:** [August 19, 2021, 8:47pm UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/4 "2021-08-19T20:47:01Z")
No clue on Cisco stuff. I’d start with a packet capture and verify everything looks like it should. If it doesn’t, then you will have to kick it up to Cisco. One thing I just thought of is the Cisco cwmp client could be so old and busted it doesn’t support the auth mechanism genie is using. ---
**Author:** ![jorgedacosta](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@jorgedacosta](https://forum.genieacs.com/u/jorgedacosta)\ **Post date:** [August 20, 2021, 8:24am UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/5 "2021-08-20T08:24:39Z")
I have updated to the last IOS image for the device but … same thing . Still not authorised . Its got to be a cisco only thing and being a large vendor I would have figured SOMEONE would have sorted this out ? I mean it wouldnt make much sense to have a ACS system that doesnt support cisco … ---
**Author:** ![akcoder](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/akcoder/32/11_2.png) [@akcoder](https://forum.genieacs.com/u/akcoder)\ **Post date:** [August 20, 2021, 4:46pm UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/6 "2021-08-20T16:46:12Z")
Here is what you need to get comfortable in in this space. Every single vendor is terrible at complying with the standards. Some are more terrible than others. At this point, you need to fire up wireshark and dig into the packets. The packets don’t lie. ---
**Author:** ![jorgedacosta](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@jorgedacosta](https://forum.genieacs.com/u/jorgedacosta)\ **Post date:** [August 24, 2021, 9:15am UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/7 "2021-08-24T09:15:35Z")
Sorted. There’s a difference between the http headers of cisco and everyone else it seems. Auth with Http had to go through NGinx after which it worked. Https was another matter. The root ca of the 887 were out of date. cisco released an update. The update wont load completely on the 887 . Forced a Root ca to trusted and it worked . The root cert of the the cert I was trying to reach was downloaded from the web page itself (pem file) and forced onto the cisco … this allowed https with auth. Not easy , the documentation on genieacs is a mess , its NOT user friendly and this will completely kill it. This would be the best app in the world and used all over if you could do something simple , like change an interface description of a device within 2 days of installing Genieacs. Too much BS , to little USEFUL paperwork , ZERO examples will kill your user base. ---
**Author:** ![akcoder](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/akcoder/32/11_2.png) [@akcoder](https://forum.genieacs.com/u/akcoder)\ **Post date:** [August 24, 2021, 6:34pm UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/8 "2021-08-24T18:34:59Z")
GenieACS is free software. There is an option for paid support, and if you need that, I would highly encourage you visit the [Commercial Support - GenieACS](https://genieacs.com/support/) page. One of the big downsides to free software is the documentation is usually not the best. And it comes down to developers want to work on whats fun. And solving a deeply technical problem is fun. Writing documentation is not. ---
**Author:** ![zaidka](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/zaidka/32/9_2.png) [@zaidka](https://forum.genieacs.com/u/zaidka)\ **Post date:** [September 15, 2021, 1:55am UTC](https://forum.genieacs.com/t/cisco-887-unable-to-autorize/1959/9 "2021-09-15T01:55:02Z")
> [@jorgedacosta](#): > > Not easy , the documentation on genieacs is a mess , its NOT user friendly and this will completely kill it. > This would be the best app in the world and used all over if you could do something simple , like change an interface description of a device within 2 days of installing Genieacs. > Too much BS , to little USEFUL paperwork , ZERO examples will kill your user base. Wanna step up and help improve the documentation? Email me at [zaid@genieacs.com](mailto:zaid@genieacs.com) and name your price.