# Huawei ONU + DHCP Option 43

**URL:** <https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298>\
**Category:** Uncategorized\
**Created:** [December 12, 2022, 3:49am UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298 "2022-12-12T03:49:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![hellracer](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/hellracer/32/1047_2.png) [@hellracer](https://forum.genieacs.com/u/hellracer)\
**Post date:** [December 12, 2022, 3:49am UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298/1 "2022-12-12T03:49:22Z")

</div>

Good day,

Has anyone from you guys know the the HEX values to be encoded in DHCP to provide the ACS URL to ONU + the ACS credential, we were able to figure out to send the ACS url but not the username and password, thanks in advance

The full URL needs to be converted to hex so  
[http://10.10.25.6:7457](http://10.10.25.6:7457/) becomes  
68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 32 35 2e 36 3a 37 35 34 37

That’s 22 bytes and for Option 43 it’s Code 1, so I needed to add the hex for “1” (01) and “22” (16) in front of the string and add 0x to say it’s in HEX and now we’re working fine.  
Full code is

0x0116687474703a2f2f31302e31302e32352e363a37353437

what’s missing is how to provide ACS credential ☹

---

<div class="post-metadata">

**Author:** ![akcoder](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/akcoder/32/11_2.png) [@akcoder](https://forum.genieacs.com/u/akcoder)\
**Post date:** [December 12, 2022, 6:16pm UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298/2 "2022-12-12T18:16:07Z")

</div>

Credentials should be stored in the CPE config. In case thats not possible for you, you would put the credentials in the URL in the form of [https://username:password@ipaddress:7457/](https://username:password@ipaddress:7457/)

Be aware that there are a few security issues here. First, you the traffic to the ACS isn’t being encrypted, you should switch to https. Second, putting the credentials in the url is a huge security risk. Remember that security is like an onion, with many, many layers.

---

<div class="post-metadata">

**Author:** ![hellracer](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/hellracer/32/1047_2.png) [@hellracer](https://forum.genieacs.com/u/hellracer)\
**Post date:** [December 12, 2022, 10:44pm UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298/3 "2022-12-12T22:44:45Z")

</div>

Thanks Dan I never thought how straightforward it is, yes it’s impossible for us to store the credential in the device in case of hard reset, how about the cpe credential do i need that to pass along as well? Or this is enough to achieved my goal?

---

<div class="post-metadata">

**Author:** ![akcoder](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/akcoder/32/11_2.png) [@akcoder](https://forum.genieacs.com/u/akcoder)\
**Post date:** [December 12, 2022, 10:59pm UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298/4 "2022-12-12T22:59:31Z")

</div>

What do you mean by CPE credential? The credentials for the CPE to authenticate to the ACS, or the ACS to authenticate to the CPE? For the latter, the `default` GenieACS provision script sets the username/password to a deterministic per-device value.

---

<div class="post-metadata">

**Author:** ![hellracer](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/hellracer/32/1047_2.png) [@hellracer](https://forum.genieacs.com/u/hellracer)\
**Post date:** [December 13, 2022, 4:54am UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298/5 "2022-12-13T04:54:21Z")

</div>

Hi Dan

Yes from ACS to CPE ok i got it know thanks a ton, I’m very excited to lab this up now 🙂

---

<div class="post-metadata">

**Author:** ![razametal](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.genieacs.com/razametal/32/2229_2.png) [@razametal](https://forum.genieacs.com/u/razametal)\
**Post date:** [January 10, 2025, 8:02pm UTC](https://forum.genieacs.com/t/huawei-onu-dhcp-option-43/3298/6 "2025-01-10T20:02:23Z")

</div>

Try generating the hex code from this site:

[https://dhcp43.made4it.com.br/](https://dhcp43.made4it.com.br/)
