CWMP commands -- cwmp

Use cwmp to enter CWMP view.

Syntax

cwmp

Views

System view

Predefined user roles

network-admin

mdc-admin

Examples

# Enter CWMP view.

<Sysname> system-view

[Sysname] cwmp

Related commands

cwmp enable

CWMP commands -- cwmp acs default password

Use cwmp acs default password to configure a password for authentication to the default ACS URL.

Use undo cwmp acs default password to restore the default.

Syntax

cwmp acs default password { cipher | simple } string

undo cwmp acs default password

Default

No password is configured for authentication to the default ACS URL.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its encrypted form is a case-sensitive string of 33 to 373 characters.

Usage guidelines

You can configure only one password for authentication to the default ACS URL. If you execute this command multiple times, the most recent configuration takes effect.

For a successful connection, make sure the CPE has the same username and password settings as the ACS.

Examples

# Configure the password used for authentication to the default ACS URL.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp acs default password simple newpsw

Related commands

cwmp acs default url

cwmp acs default username

CWMP commands -- cwmp acs default url

Use cwmp acs default url to specify a default ACS URL.

Use undo cwmp acs default url to restore the default.

Syntax

cwmp acs default url url

undo cwmp acs default url

Default

No default ACS URL is specified.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

url: Specifies the default ACS URL, a string of 8 to 255 characters. The URL must use the http://host[:port]/path or https://host[:port]/path format.

Usage guidelines

The CPE attempts to connect to the default ACS URL if no ACS URL has been assigned to it through the cwmp acs url command or DHCP.

You can configure only one default ACS URL. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the default ACS URL.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp acs default url http://www.acs.com:80/acs

Related commands

cwmp acs default password

cwmp acs default username

CWMP commands -- cwmp acs default username

Use cwmp acs default username to configure the username for authentication to the default ACS URL.

Use undo cwmp acs default username to restore the default.

Syntax

cwmp acs default username username

undo cwmp acs default username

Default

No username is configured for authentication to the default ACS URL.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

username: Specifies a username, a case-sensitive string of 1 to 255 characters.

Usage guidelines

You can configure only one username for authentication to the default ACS URL. If you execute this command multiple times, the most recent configuration takes effect.

For a successful connection, make sure the CPE has the same username and password settings as the ACS.

Examples

# Configure the username for authentication to the default ACS URL.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp acs default username newname

Related commands

cwmp acs default password

cwmp acs default url

CWMP commands -- cwmp acs password

Use cwmp acs password to configure the password for authentication to the preferred ACS URL.

Use undo cwmp acs password to restore the default.

Syntax

cwmp acs password { cipher | simple } string

undo cwmp acs password

Default

No password is configured for authentication to the preferred ACS URL.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its encrypted form is a case-sensitive string of 33 to 373 characters.

Usage guidelines

You can configure only one password for authentication to the preferred ACS URL. If you execute this command multiple times, the most recent configuration takes effect.

For a successful connection, make sure the CPE has the same username and password settings as the ACS.

Examples

# Configure the password used for authentication to the preferred ACS URL.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp acs password simple newpsw

Related commands

cwmp acs url

cwmp acs username

CWMP commands -- cwmp acs url

Use cwmp acs url to specify a preferred ACS URL.

Use undo cwmp acs url to restore the default.

Syntax

cwmp acs url url

undo cwmp acs url

Default

No preferred ACS URL is specified.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

url: Specifies the preferred ACS URL, a string of 8 to 255 characters. The URL must use the http://host[:port]/path or https://host[:port]/path format.

Usage guidelines

The device supports only one preferred ACS URL. If you execute this command multiple times, the most recent configuration takes effect.

The preferred ACS URL is configurable from the CPE's CLI, the DHCP server, and the ACS. The CLI- and ACS-assigned URLs have higher priority than the DHCP-assigned URL. The CLI- and ACS-assigned URLs overwrite each other.

The CPE uses the default ACS attributes for connection establishment only when it is not assigned a preferred ACS URL from the CLI, ACS, or DHCP server.

Examples

# Specify the ACS URL.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp acs url http://www.acs.com:80/acs

CWMP commands -- cwmp acs username

Use cwmp acs username to configure the username for authentication to the preferred ACS URL.

Use undo cwmp acs username to restore the default.

Syntax

cwmp acs username username

undo cwmp acs username

Default

No username is configured for authentication to the preferred ACS URL.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

username: Specifies a username, a case-sensitive string of 1 to 255 characters.

Usage guidelines

You can configure only one username for authentication to the preferred ACS URL. If you execute this command multiple times, the most recent configuration takes effect.

For a successful connection, make sure the CPE has the same username and password settings as the ACS.

Examples

# Configure the username used for authentication to the preferred ACS URL.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp acs username newname

Related commands

cwmp acs password

CWMP commands -- cwmp cpe connect interface

Use cwmp cpe connect interface to specify the CWMP connection interface.

Use undo cwmp cpe connect interface to restore the default.

Syntax

cwmp cpe connect interface interface-type interface-number

undo cwmp cpe connect interface

Default

The default CWMP connection interface depends on the device model.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-type interface-number: Specifies the type and number of the CWMP connection interface.

Usage guidelines

A CWMP connection interface is the interface that the CPE uses to communicate with the ACS. To establish a CWMP connection, the CPE sends the IP address of this interface in the Inform message, and the ACS replies to this IP address.

Typically, the CPE selects the CWMP connection interface automatically. If the CWMP connection interface is not the interface that connects the CPE to the ACS, the CPE fails to establish a CWMP connection with the ACS. For example, an incorrect CWMP connection interface selection occurs when the following conditions exist:

· The CPE has multiple Layer 3 interfaces.

· The IP addresses of the CWMP connection interface and the ACS are not in the same subnet.

In this case, you need to use this command to manually specify the CWMP connection interface.

Examples

Specify GigabitEthernet 1/0/1 as the CWMP connection interface.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe connect interface gigabitethernet 1/0/1

CWMP commands -- cwmp cpe connect retry

Use cwmp cpe connect retry to set the maximum number of attempts the CPE can make to retry a failed CWMP connection.

Use undo cwmp cpe connect retry to restore the default.

Syntax

cwmp cpe connect retry retries

undo cwmp cpe connect retry

Default

The CPE retries a failed connection until the connection is established with the ACS.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

retries: Specifies the maximum number of CWMP connection retries. The value range is 0 to 100. To disable the CPE to retry a CWMP connection, set this argument to 0.

Usage guidelines

The CPE retries connecting to the ACS when its initial connection attempt fails or the CWMP session is ended before the CPE receives a session closed message from the ACS. The CPE does not stop its connection retry attempts until the connection is established or the number of connection retries reaches the upper limit.

Examples

# Set the maximum number of CWMP connection retries to 5.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe connect retry 5

CWMP commands -- cwmp cpe inform interval

Use cwmp cpe inform interval to set the periodic Inform interval.

Use undo cwmp cpe inform interval to restore the default.

Syntax

cwmp cpe inform interval interval

undo cwmp cpe inform interval

Default

The periodic Inform interval is 600 seconds.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Sets the periodic Inform interval in the range of 10 to 86400 seconds.

Usage guidelines

This command sets the interval for the CPE to send Inform messages automatically to the ACS. For the command to take effect, you must configure the cwmp cpe inform interval enable command.

Examples

# Set the periodic Inform interval to 3600 seconds.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe inform interval enable

[Sysname-cwmp] cwmp cpe inform interval 3600

Related commands

cwmp cpe inform interval enable

CWMP commands -- cwmp cpe inform interval enable

Use cwmp cpe inform interval enable to enable the periodic Inform feature.

Use undo cwmp cpe inform interval enable to disable the periodic Inform feature.

Syntax

cwmp cpe inform interval enable

undo cwmp cpe inform interval enable

Default

The CPE does not send Inform messages periodically.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If this command is configured, the CPE sends Inform messages regularly to establish a CWMP session with the ACS. To set the periodic Inform interval, use the cwmp cpe inform interval command.

Examples

# Enable the periodic Inform feature.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe inform interval enable

Related commands

cwmp cpe inform interval

CWMP commands -- cwmp cpe inform time

Use cwmp cpe inform time to schedule a connection initiation for the CPE to connect to the ACS.

Use undo cwmp cpe inform time to restore the default.

Syntax

cwmp cpe inform time time

undo cwmp cpe inform time

Default

No connection initiation has been scheduled.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

time: Specifies the time at which the CPE sends an Inform message. The time format is yyyy-mm-ddThh:mm:ss, and the value range is 1970-01-01T00:00:00 to 2035-12-31T23:59:59. The specified time must be greater than the current system time.

Examples

# Configure the CPE to send an Inform message at 2007-12-01T20:00:00.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe inform time 2012-12-01T20:00:00

CWMP commands -- cwmp cpe password

Use cwmp cpe password to configure the password for the CPE to authenticate the ACS.

Use undo cwmp cpe password to restore the default.

Syntax

cwmp cpe password { cipher | simple } string

undo cwmp cpe password

Default

No password is configured for authenticating the ACS.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its encrypted form is a case-sensitive string of 33 to 373 characters.

Usage guidelines

You can configure only one password for the ACS to authenticate to the CPE when it initiates a connection. If you execute this command multiple times, the most recent configuration takes effect.

For a successful connection, make sure the ACS has the same username and password settings as the CPE.

If a password is configured, the ACS must provide the correct password when it initiates a connection to the CPE. If the password is incorrect, the CPE denies the connection request from the ACS.

You do not need to configure this command if you want to authenticate the ACS only based on its username.

Examples

# Configure the password used for authenticating the ACS.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe password simple newpsw

Related commands

cwmp cpe username

CWMP commands -- cwmp cpe provision-code

Use cwmp cpe provision-code to configure the provision code of the CPE.

Use undo cwmp cpe provision-code to restore the default.

Syntax

cwmp cpe provision-code provision-code

undo cwmp cpe provision-code

Default

The provision code is PROVISIONINGCODE.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

provision-code: Specifies a provision code, a string of 1 to 64 characters. The string can contain uppercase letters, digits, and the full stop (.).

Usage guidelines

The ACS can use the provision code to identify services assigned to each CPE. For correct configuration deployment, make sure the same provision code is configured on the CPE and the ACS. For information about the support of your ACS for provision codes, see the ACS documentation.

The CPE can have only one provision code. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the provision code to ABC20150714.

<Sysname> system

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe provision-code ABC20150714

CWMP commands -- cwmp cpe stun enable

Use cwmp cpe stun enable to enable NAT traversal for the connection requests from the ACS to reach the CPE through a NAT gateway.

Use undo cwmp cpe stun enable to disable NAT traversal for the connection requests from the ACS to reach the CPE through a NAT gateway.

Syntax

cwmp cpe stun enable

undo cwmp cpe stun enable

Default

NAT traversal is disabled for CWMP.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Connection requests initiated from the CPE can reach the ACS through a NAT gateway without NAT traversal. However, for the connection request initiated from the ACS to reach the CPE, you must enable NAT traversal on the CPE when a NAT gateway resides between the CPE and the ACS.

The NAT traversal feature complies with Simple Traversal of UDP Through NATs (STUN), RFC 3489. The feature enables the CPE to do the following:

· Discovers the NAT gateway.

· Obtains an open NAT binding (a public IP address and port binding) through which the ACS can send unsolicited packets.

The CPE sends the binding to the ACS when it initiates a connection to the ACS. For the connection requests sent by the ACS at any time to reach the CPE, the CPE maintains the open NAT binding.

For more information about NAT, see Layer 3—IP Services Configuration Guide.

Examples

# Enable NAT traversal for the CPE.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe stun enable

CWMP commands -- cwmp cpe username

Use cwmp cpe username to configure the username for the CPE to authenticate the ACS.

Use undo cwmp cpe username to restore the default.

Syntax

cwmp cpe username username

undo cwmp cpe username

Default

No username is configured for authenticating the ACS.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

username: Specifies a username, a case-sensitive string of 1 to 255 characters.

Usage guidelines

You can configure only one username for the ACS to authenticate to the CPE when it initiates a connection. If you execute this command multiple times, the most recent configuration takes effect.

For a successful connection, make sure the ACS has the same username setting as the CPE. If a password is required, you must also make sure the ACS has the same password setting as the CPE.

The ACS must provide the correct username when it initiates a connection to the CPE. If the username is incorrect, the CPE denies the connection request from the ACS.

Examples

# Configure the username used for authenticating the ACS.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe username newname

Related commands

cwmp cpe password

CWMP commands -- cwmp cpe wait timeout

Use cwmp cpe wait timeout to set the close-wait timer for the CPE to close an idle connection.

Use undo cwmp cpe wait timeout to restore the default.

Syntax

cwmp cpe wait timeout seconds

undo cwmp cpe wait timeout

Default

The close-wait timer is 30 seconds.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Sets the close-wait timer, in the range of 30 to 1800 seconds.

Usage guidelines

The close-wait timer has the following functions:

· It specifies the amount of time the connection to the ACS can be idle before it is terminated. The CPE terminates the connection to the ACS if no traffic is transmitted before the timer expires.

· It also specifies the amount of time the CPE waits for the response to a session request. The CPE determines that its session attempt has failed when the timer expires. By default, the CPE retries a failed session until the session is established with the ACS. To limit the number of retries, use the cwmp cpe connect retry command.

Examples

# Set the close-wait time to 60 seconds.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp cpe wait timeout 60

Related commands

cwmp cpe connect retry

CWMP commands -- cwmp enable

Use cwmp enable to enable CWMP.

Use undo cwmp enable to disable CWMP.

Syntax

cwmp enable

undo cwmp enable

Default

CWMP is disabled.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

CWMP configuration takes effect only after CWMP is enabled.

Examples

# Enable CWMP.

<Sysname> system-view

[Sysname] cwmp

[Sysname-cwmp] cwmp enable

Related commands

cwmp

CWMP commands -- display cwmp configuration

Use display cwmp configuration to display the CWMP configuration.

Syntax

display cwmp configuration

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display the CWMP configuration after CWMP is enabled.

<Sysname> display cwmp configuration

CWMP state : Enabled

ACS URL : http://www.acs.com:80/acs

ACS username : newname

ACS default URL : Null

ACS default username : defname

Periodic inform : Disabled

Inform interval : 600s

Inform time : None

Wait timeout : 30s

Connection retries : Unlimited

Source IP interface : None

STUN state : Disabled

SSL policy name : Null

Table 1 Command output

Field | Description
CWMP state | Status of CWMP: Enabled or Disabled.
ACS URL | Preferred ACS URL. This field displays Null if no preferred ACS URL has been specified.
ACS username | Username for the CPE to authenticate to the ACS. This field displays Null if no username has been configured for authentication to the preferred ACS URL.
ACS default URL | Default ACS URL. This field displays Null if no default ACS URL has been configured.
ACS default username | Username for the CPE to authenticate to the default ACS URL. This field displays Null if no username has been configured for authentication to the default ACS URL.
Periodic inform | Status of the periodic Inform feature: Enabled or Disabled.
Inform interval | Periodic Inform interval. The default interval is 600 seconds.
Inform time | Date and time at which an Inform message is scheduled to be sent. If you do not schedule an Inform sending, this field displays None.
Wait timeout | Close-wait timer. This timer is configurable with the cwmp cpe wait timeout command.
Connection retries | Number of attempts the CPE can make to retry a failed CWMP connection. This field displays Unlimited if the default setting is used. The CPE retries a failed session until the session is established with the ACS.
Source IP interface | IP address of the specified CWMP connection interface. This field displays None if you have not specified a CWMP connection interface.
STUN state | Status of NAT traversal for CWMP: Enabled or Disabled.
SSL policy name | SSL client policy specified for the CPE to authenticate the ACS for establishing an HTTPS connection. You must specify an SSL client policy when HTTPS is used. This field displays Null if you have not specified an SSL client policy.

Related commands

display cwmp status

CWMP commands -- display cwmp status

Use display cwmp status to display CWMP state information.

Syntax

display cwmp status

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display CWMP state information.

<Sysname> display cwmp status

CWMP state : Enabled

ACS URL of most recent connection : http://www.acs.com:80/acs

ACS information source : User

ACS username of most recent connection : newname

Connection status : Disconnected

Data transfer status : None

Most recent successful connection attempt : None

Length of time before next connection attempt : 1096832s

Table 2 Command output

Field | Description
CWMP state | Status of CWMP: Enabled or Disabled.
ACS URL of most recent connection | ACS URL used for the most recent connection attempt. This field displays Null if no ACS URL was available.
ACS information source | Source from which the CPE obtained the ACS URL: · User—ACS URL assigned by using the cwmp acs url command or by ACS. · DHCP—ACS URL assigned by the DHCP server. · Default—ACS URL assigned by using the cwmp acs default url command. This field displays None if no ACS URL was available.
ACS username of most recent connection | Username used for the most recent connection to the ACS. This field displays Null if no ACS username was available.
Connection status | Current CWMP session status: · Connected—A CWMP session has been established to the ACS. · Disconnected—No CWMP session has been established to the ACS. · Waiting response—The CPE is waiting for the connection response from the ACS.
Data transfer status | Data transfer status of the CPE: · Uploading—The CPE is uploading data. · Downloading—The CPE is downloading data. · None—No data is transferred.
Most recent successful connection attempt | Time of the most recent successful CWMP connection. This field displays None if no CWMP session was established.
Length of time before next connection attempt | Amount of time (in seconds) that the CPE must wait before it initiates the next connection. This field displays None if the CPE does not detect an event that will trigger a connection attempt.

Related commands

display cwmp configuration

CWMP commands -- ssl client-policy

Use ssl client-policy to specify an SSL client policy for CWMP.

Use undo ssl client-policy to restore the default.

Syntax

ssl client-policy policy-name

undo ssl client-policy

Default

No SSL client policy is specified for CWMP.

Views

CWMP view

Predefined user roles

network-admin

mdc-admin

Parameters

policy-name: Specifies the name of an SSL client policy, a string of 1 to 31 characters.

Usage guidelines

CWMP uses HTTP or HTTPS for data transmission. If the ACS uses HTTPS for secure access, its URL begins with https://. You must configure an SSL client policy for the CPE to authenticate the ACS for establishing an HTTPS connection. For more information about configuring SSL client policies, see Security Configuration Guide.

Examples

# Specify the SSL client policy test for CWMP.

<Sysname> system

[Sysname] cwmp

[Sysname-cwmp] ssl client-policy test