background image

E-DOC-CTC-20071119-0003 v1.0

31

3|

 Firmware Upgrade and Configuration Update

3

Firmware Upgrade and Configuration Update

Introduction

For the use cases described in this chapter, we make following assumptions:

The CPE has IP connectivity to the ACS.

The CPE is preconfigured with:

ACS IP address:port

ACS username and password

ConnectionRequest username and password

All passwords are stored encrypted in the persistent configuration file.

Overview

This chapter includes following use cases: 

Topic

Page

“3.1 Firmware Upgrade”

32

“3.2 Configuration Update”

41

Summary of Contents for TR-069

Page 1: ...Po w er Et he rn et W LA N Pl ug in IS DN In te rn et DS L TR 069 Configuration Guide R7 4 and higher Thomson Gateway ...

Page 2: ......

Page 3: ...Thomson Gateway TR 069 Configuration Guide R7 4 and higher ...

Page 4: ...emarks of the Wi Fi Alliance Wi Fi CERTIFIED Wi Fi ZONE Wi Fi Protected Access Wi Fi Multimedia Wi Fi Protected Setup WPA WPA2 and their respective logos are trade marks of the Wi Fi Alliance UPnP is a certification mark of the UPnP Implementers Corporation Microsoft MS DOS Windows Windows NT and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United St...

Page 5: ... ACS 21 2 2 3 CWMP Daemon towards the ACS 24 2 2 4 Notification Rules 25 2 2 5 Runtime Variables 26 2 3 Configuring State Checks 28 3 Firmware Upgrade and Configuration Update 31 3 1 Firmware Upgrade 32 3 1 1 General Firmware Upgrade Mechanism 33 3 1 2 Single Memory Bank Firmware Upgrade 35 3 1 3 Dual Memory Bank Firmware Upgrade 37 3 1 4 Firmware Upgrade with Reduced Memory Mode 39 3 2 Configurat...

Page 6: ...ion Information 65 5 4 Forwarding Entries 66 6 Service Provisioning 69 6 1 VoIP 70 6 2 WLAN 73 6 3 Time 76 6 4 DHCP Conditional Serving 77 6 5 Queue Management 79 6 6 Stateful Inspection Firewall 81 6 7 Access Rights 85 6 8 NAT Application List 87 6 9 Dynamic DNS 90 6 10 Remote Access Remote Assistance 93 6 11 Parental Control 95 6 12 VLAN Provisioning Layer2Bridging 97 7 Zero Provisioning 101 ...

Page 7: ...t guide see 1 Introduction on page 7 Sample text indicates an important content related word Example To enter the network you must authenticate yourself Sample text indicates a GUI element commands on menus and buttons dialog box elements file names paths and folders Example On the File menu click Open to open a file Documentation and software updates Thomson continuously develops new solutions bu...

Page 8: ...GD data model is presented The following chapter gives detailed information on the configuration of CWMP on the Thomson Gateway using CLI commands The last chapters focus on the different use cases that are currently supported using CWMP This document is structured as follows Topic Page 1 Introduction 3 2 Configuring CWMP on the Thomson Gateway 13 3 Firmware Upgrade and Configuration Update 31 4 M...

Page 9: ... This chapter provides a short introduction to the TR 069 CWMP protocol and the TR 098 IGD data model Overview This chapter is structured as follows Topic Page 1 1 References and Related Documents 4 1 2 CWMP Transaction Sessions 6 1 3 IGD Data model on the Thomson Gateway 10 ...

Page 10: ... PC based LAN side install applications It defines LAN side CPE configuration TR 104 Provisioning parameters for VoIP CPE September 2005 this document defines a generic VoiceService data model for provisioning of VoIP CPEs for example an Integrated Access Device IAD or an Analogue Telephone Adapter ATA The model supports SIP MGCP and H323 signalling protocols TR 106 Amendment 1 Data model template...

Page 11: ...L Forum regularly organizes TR 069 plugfest test events where all participating CPE devices can test against all participating ACS servers The document is also the de facto reference for TR 069 testing by customers and ACS vendors Architecture Following illustration shows the location of the specifications in the CWMP architecture Thomson firmware is interoperability tested with and by ACS partner...

Page 12: ...t role All transaction sessions are established by the CPE The CPE maintains a TCP connection persistent HTTP connection for the duration of the session The CPE is also responsible for closing a transaction session Session establishment All transaction sessions are established by the CPE by sending an Inform RPC to the ACS We distinguish two types of transaction sessions CPE initiated sessions Asy...

Page 13: ...ng all state Event Description 0 BOOTSTRAP The first time that the CPE contacts the ACS 1 BOOT After a power up or reset of the CPE 2 PERIODIC The session is established on a periodic Inform interval 3 SCHEDULED Scheduled by a ScheduleInform RPC 4 VALUE CHANGE The value of a parameter of the Inform ParameterList argument changed This can be a parameter that is marked by the ACS for notification ei...

Page 14: ...okie if received from the ACS during the transaction session as HTTP header field Factory reset The FactoryReset RPC resets the CPE to its factory default state When a problem occurs and the cause is not found a reset to pre provisioned ISP defaults via the FactoryReset RPC triggers the zero provisioning use case Although some user configuration might be lost a reset to factory defaults guarantees...

Page 15: ...stablished after loading the downloaded configuration file or firmware image The exact steps depend on the FileType argument of the Download RPC For more information see 3 1 Firmware Upgrade on page 32 and 3 2 Configuration Update on page 41 The Download RPC can also be triggered from the CLI To this end use the CLI command software download and provide the requested Download RPC parameters filety...

Page 16: ...Config Service LANDevice WAN InterfaceConfig Service WANConnectionDevice WAN LinkConfig Service LANDevice Hosts Service DSL Ethernet IP PPP DSL Ethernet Ethernet USB LANHostConfigManagement Service DeviceInfo Service Layer2Bridging Service IPPingDiagnostics Service WAN Connection Service LAN InterfaceConfig Service WLANConfiguration Service Services X_000E50_Firewall Service X_000E50_Connection Se...

Page 17: ...n Gateway proprietary parameters VENDOR has value 000E50 Path names To identify a parameter or object in the data model path names are used Both complete and partial path names are supported Complete path name a complete path name is the name of a parameter For example InternetGatewayDevice DeviceInfo SoftwareVersion Partial path name a partial path name ends with a dot and is the name of an objec...

Page 18: ...E DOC CTC 20071119 0003 v1 0 12 1 Introduction ...

Page 19: ...the Thomson Gateway using CLI commands This includes the configuration of the TLS SSL client and certificates the CWMP service manager and daemon and the state checks to detect service activity Overview This chapter is structured as follows CWMP is not configurable via the GUI Graphical User Interface Topic Page 2 1 Configuring TLS 14 2 2 Configuring CWMP 18 2 3 Configuring State Checks 28 ...

Page 20: ... used If the URL scheme starts with http TLS SSL is not used To display the transport protocol and port used by the HTTP and HTTPS services execute following commands Overview This section is structured as follows service system list name HTTP Idx Name Protocol SrcPort DstPort Group State 1 HTTP tcp 80 enabled service system list name HTTPs Idx Name Protocol SrcPort DstPort Group State 1 HTTPs tcp...

Page 21: ... parameter is enabled the TLS client Thomson Gateway requests authentication of the TLS server ACS By default this parameter is enabled Valid date if this parameter is enabled the TLS client checks the validity of the date of a received certificate Valid domain if this parameter is enabled the TLS client checks the domain of a received certificate For example configure the TLS client as follows tl...

Page 22: ...cate is used for client authentication This certificate can only be altered through file upload using FTP or TR 069 If no certificate is found when the Thomson Gateway is booting it generates its own certificate and private public key pair The Thomson Gateway signs the certificate using its own private key To display the certificate of the Thomson Gateway execute following command tls self cert li...

Page 23: ...m your PC to the Thomson Gateway 2 Go to the dl directory with the command cd dl 3 Put the certificate on the Thomson Gateway The command put filename transfers the file with name filename from the PC directory C Documents and Settings Username to the Thomson Gateway directory dl 4 Close the FTP session with the command bye Customization usually the Thomson Gateway is pre provisioned with the corr...

Page 24: ...MP connection request server to receive connection requests Enable or disable logging of the CWMP connection request server Configure the NAT portmap weight of the CWMP connection request server CWMP daemon use the daemon to configure all other aspects of the CWMP protocol including Operational mode Use of Periodic Inform RPCs Use of Connection Requests Session termination Authentication user name...

Page 25: ...l CWMP client originated data automatically has a QoS label assigned This QoS label determines the internal QoS class of the data To assign a specific QoS label to all data for example the label Interactive execute following command Routelabel the Thomson Gateway supports application based Route label assignment If the value of this attribute differs from none all CWMP client originated data autom...

Page 26: ... logging of the service execute following command Natpmweight the NAT portmap weight for the service By default this attribute has value 30 To change the value of this attribute execute following command service system list name CWMP S expand enabled Idx Name Protocol SrcPort DstPort Group 1 CWMP S tcp 51005 Description CPE Wan Management Protocol Server Properties server Attributes state port acl...

Page 27: ...CWMP client establishes a connection to the ACS periodically This means that the CWMP client sends an Inform RPC with a configurable frequency The frequency is defined by the parameter periodicInfInt By default this parameter is enabled PeriodicInfInt if the parameter periodicInform is enabled the value of this parameter specifies the time in seconds s between two connection establishments By defa...

Page 28: ...on the Thomson Gateway for example for connection requests It is used as last part of the InternetGatewayDevice ManagementServer ConnectionRequestURL which is included in the ParameterList of an Inform RPC The value of this parameter is only relevant if the parameter ConnectionRequest is enabled ConnectionReqUserName this parameter specifies a text string that must be used by the ACS as username t...

Page 29: ...n If this parameter is disabled session termination according to TR 069 is used This means that the CPE terminates a transaction session when all of the following conditions are met The ACS has no further requests to send to the CPE The CPE can conclude this from one of the following the most recent ACS HTTP response contains no SOAP envelopes or the most recent SOAP envelope received from the ACS...

Page 30: ... specify one or more of the following optional parameters Url this parameter specifies the HTTP URL of the ACS Username this parameter defines the username for authentication of the Thomson Gateway at the ACS The ACS default username is OUI serial number This can be achieved using CLI environment variable concatenation To retrieve this information execute the following commands Password this param...

Page 31: ... e a complete path name Notification this parameter defines the notification behaviour Off change notification off the CPE does not need to inform the ACS of a change of the parameter Passive passive change notification whenever the parameter value changes the CPE must include the new value in the ParameterList argument of the Inform message that is sent the next time a session is established to t...

Page 32: ...configured CmdKey CmdKey has the value of the CommandKey argument of a received Reboot Download or ScheduleInform RPC The CPE stores the value persistently and sends this value back to the ACS as follows Reboot the value of CmdKey is used as CommandKey for the M Reboot EventCode in the first Inform RPC sent after the reboot Download the value of CmdKey is used as CommandKey for the TransferComplet...

Page 33: ...on Gateway At each point in time InternetGatewayDevice ManagementServer ParameterKey has the value of the ParameterKey argument of the most recent applied RPC The ACS can check the ParameterKey value to identify parameter updates object creations or object removals ...

Page 34: ...check module stops performing checks and sets the Active parameter to 0 As a result this is also the maximum delay time of the upgrade process By default the timeout value is set to 3600 seconds 1 hour Optionally following parameters can be specified Groupop this parameter indicates whether the Group booleans are ANDed or ORed By default the Group booleans are ORed Dmtree this parameter indicates ...

Page 35: ... match value Differ the check sets its Check boolean to 1 if the parameter value differs from the match value Statdelta the check sets its Check boolean to 1 if the parameter value increments more than a threshold which is specified by the match value Match the match value The parameter value is compared to the match value depending on the match type For example create a new check as follows Delet...

Page 36: ...E DOC CTC 20071119 0003 v1 0 30 2 Configuring CWMP on the Thomson Gateway ...

Page 37: ...ter we make following assumptions The CPE has IP connectivity to the ACS The CPE is preconfigured with ACS IP address port ACS username and password ConnectionRequest username and password All passwords are stored encrypted in the persistent configuration file Overview This chapter includes following use cases Topic Page 3 1 Firmware Upgrade 32 3 2 Configuration Update 41 ...

Page 38: ... Update 3 1 Firmware Upgrade Overview This section is structured as follows Topic Page 3 1 1 General Firmware Upgrade Mechanism 33 3 1 2 Single Memory Bank Firmware Upgrade 35 3 1 3 Dual Memory Bank Firmware Upgrade 37 3 1 4 Firmware Upgrade with Reduced Memory Mode 39 ...

Page 39: ...in case of RTEMS rbi in case of GoLinux Description This use case mainly covers the automatic remote upgrade of a firmware image At any point in time the ACS can trigger the CPE to upgrade its firmware image The ACS sends an asynchronous connection request triggering the CPE to establish a transaction session to receive a Download method to upgrade its firmware ACS the ACS is only responsible for ...

Page 40: ...ET to ConnectionRequestURL with authentication info 7 Inform Event Connection Request 8 401 Unauthorized Challenge 9 Inform Event Connection Request with authentication info 10 InformResponse HoldRequests 1 13 DownloadResponse Status 1 21 TransferCompleteResponse 16 Inform Event Transfer Complete Boot Value Change M Download 17 401 Unauthorized Challenge 18 Inform Event Transfer Complete Boot Valu...

Page 41: ... new firmware image header is checked for integrity 2 The old firmware image in Flash persistent memory is deleted 3 Using a reasonably small buffer parts of the new firmware image are downloaded over TCP and written to Flash flashed 4 When completed a reboot is initiated to load and run the new firmware Finally the completion success or failures of the firmware upgrade is indicated to the ACS Tra...

Page 42: ... g the Flashing Failed prozone bit and reboots in Bootloader mode This mode is also indicated by the LEDs The problem can only be solved by a local LAN side firmware recovery In Bootloader mode BOOTP is a mini bootloader which can be used by the Thomson Gateway upgrade wizard executed by the end user It is a service provider decision whether or not the LAN side firmware recovery is an acceptable r...

Page 43: ...irmware image is downloaded and written to Flash 3 A switch over is performed the new firmware image is now the active image and the old firmware image becomes the passive image 4 A reboot is initiated to load and run the new firmware Finally the completion success or failures of the firmware upgrade is indicated to the ACS TransferComplete RPC Firmware upgrade flow The different steps of the firm...

Page 44: ... the file system automatically remounts the partitions to load the old firmware image In this case no fault message is sent to the ACS but the Inform RPC before the TransferComplete RPC includes the old SoftwareVersion value in the ParameterList argument An ACS should only consider a firmware upgrade to be successful if the SoftwareVersion value is the expected version This mechanism is considerab...

Page 45: ...ware image is downloaded and written to SDRAM 3 The Thomson Gateway reboots setting a flag in prozone The Bootloader detects that the new firmware image is still in SDRAM and writes the new firmware image to Flash Prior to this the Bootloader checks whether the new firmware image is valid This step relies on the fact that the contents in SDRAM are preserved after a warm reboot 4 The Bootloader loa...

Page 46: ...ng characteristics Robustness this upgrade mechanism is not robust Unplugging the CPE during the flash process makes it only recoverable with a rescue CDROM Service interruption step 1 when the Thomson Gateway reboots in reduced memory mode is the service interrupting step Up till that point all services are running and active ...

Page 47: ...v1 0 41 3 Firmware Upgrade and Configuration Update 3 2 Configuration Update Overview This section is structured as follows Topic Page 3 2 1 Configuration Update Mechanism 42 3 2 2 STS Files 44 3 2 3 Embedded STS eSTS Files 46 ...

Page 48: ...oaded file is loaded without saving the new configuration This corresponds to CLI command config load filename downloaded file 3 The CPE establishes a new transaction session with the ACS sending an Inform with at least the Transfer Complete event If the CPE can connect to the ACS and the ACS responds with an InformResponse 1 The CPE saves the new configuration to user ini This corresponds to CLI ...

Page 49: ...nd loading a configuration file or script file Although it is possible that a system reboot CLI command is present in the downloaded file However if an intentional reboot is required it is recommended to use the Reboot RPC instead 7 200 OK Empty ACS CPE 8 Close connection 2 Inform Event Periodic NoMoreRequests 1 3 401 Unauthorized Challenge 4 Inform Event Periodic NoMoreRequests 1 with authenticat...

Page 50: ...onfiguration File This file type is used for both complete configuration files and STS files An STS file is identified by its STS file name extension If the file name has no extension or a extension that differs from ini and STS the TargetFileName argument of the Download RPC should contain a file name with the correct extension Header line An STS file contains a header line with following two spa...

Page 51: ... STS file to the file system of the CPE The file must be placed in the dl directory For example you can use an FTP session as follows 1 Set up an FTP session from your PC to the CPE 2 Go to the dl directory with the command cd dl 3 Use the command bin 4 Upload the STS file with the command put test sts 5 Close the FTP session with the command bye 4 Set up a telnet session from your PC to the CPE a...

Page 52: ... The eSTS file must be embedded in the folder archive active of the software build Flag An eSTS file is loaded once and only once after the firmware upgrade To this end a flag is used After loading the upgrade sts file a flag is written to Flash to indicate that the file was loaded A factory reset does not delete the flag When the same firmware image is loaded twice the eSTS file is loaded only on...

Page 53: ... to obtain information on the home network and its network connections As CWMP is a protocol on top of IP the use cases assume IP connectivity between the Thomson Gateway and the ACS Overview This chapter includes following use cases Topic Page 4 1 View on Home Network 48 4 2 Diagnostics 50 4 3 IP Ping Diagnostics Test 54 4 4 Retrieval of the Device Log 56 4 5 Event Subscription 57 ...

Page 54: ...rameter values can be used Obtaining information on the hosts table to retrieve the hosts table the GetParameterValues RPC message 1 in preceding illustration contains following ParameterNames argument For example the GetParameterValuesResponse message 2 in preceding illustration contains following name value pairs in its ParameterList argument ACS CPE Transaction session 1 GetParameterValues 2 Ge...

Page 55: ...yDevice LANDevice 1 Hosts Host 1 MACAddress 00 0f 1f 83 d7 5b InternetGatewayDevice LANDevice 1 Hosts Host 1 HostName thomson 2cfa009 InternetGatewayDevice LANDevice 1 Hosts Host 1 InterfaceType thomson 2cfa009 InternetGatewayDevice LANDevice 1 Hosts Host 1 Active 1 Name Value ...

Page 56: ... X_000E50_NumberOfResets number of CPE resets Stats Showtime X_000E50_LossOfSignal number of times that a loss of signal occurred since the most recent DSL showtime Stats Showtime X_000E50_LossOfPower number of times that a loss of power occurred since the most recent DSL showtime Stats QuarterHour X_000E50_LossOfSignal number of times that a loss of signal occurred during the current quarter hour...

Page 57: ...ice WANDevice 1 WANDSLInterfaceConfig UpstreamCurrRate 832 InternetGatewayDevice WANDevice 1 WANDSLInterfaceConfig DownstreamCurrRate 8128 InternetGatewayDevice WANDevice 1 WANDSLInterfaceConfig UpstreamMaxRate 1024 InternetGatewayDevice WANDevice 1 WANDSLInterfaceConfig DownstreamMaxRate 8224 InternetGatewayDevice WANDevice 1 WANDSLInterfaceConfig UpstreamNoiseMargin 60 InternetGatewayDevice WAND...

Page 58: ...alue 1 InternetGatewayDevice LANDevice 1 LANHostConfigManagement Name Value InternetGatewayDevice LANDevice 1 LANHostConfigManagement DHCPServerEnable 1 InternetGatewayDevice LANDevice 1 LANHostConfigManagement DHCPRelay 0 InternetGatewayDevice LANDevice 1 LANHostConfigManagement MinAddress 192 168 1 64 InternetGatewayDevice LANDevice 1 LANHostConfigManagement MaxAddress 192 168 1 253 InternetGate...

Page 59: ...thers following name value pairs in its ParameterList argument Entry Value 1 InternetGatewayDevice X_000E50_Connection Stats Name Value InternetGatewayDevice X_000E50_Connection Stats Multicast 2 InternetGatewayDevice X_000E50_Connection Stats Protocol TCP 112 InternetGatewayDevice X_000E50_Connection Stats Protocol UDP 1 InternetGatewayDevice X_000E50_Connection Stats Protocol ICMP 0 InternetGate...

Page 60: ...the SetParameterValues RPC message 1 in preceding illustration contains following name value pairs in its ParameterList argument ACS CPE Transaction session 6 Inform Event 8 Diagnostics Complete 7 InformResponse 4 Close connection 2 Apply changes 10 GetParameterValuesResponse Start the Test 1 SetParameterValues 3 SetParameterValuesResponse 8 HTTP POST empty 5 IP ping diagnostics test 9 GetParamete...

Page 61: ...etGatewayDevice IPPingDiagnostics DSCP 0 InternetGatewayDevice IPPingDiagnostics DiagnosticsState Requested Entry Value 1 InternetGatewayDevice IPPingDiagnostics Name Value InternetGatewayDevice IPPingDiagnostics DiagnosticsState Complete InternetGatewayDevice IPPingDiagnostics SuccessCount 4 InternetGatewayDevice IPPingDiagnostics FailureCount 0 InternetGatewayDevice IPPingDiagnostics AverageResp...

Page 62: ...ceives the upper 32 Kbyte of the syslog message buffer contents Message flow Following illustration shows a possible message flow for the retrieval of the device log Example parameter values To retrieve the device log the GetParameterValues RPC message 1 in preceding illustration contains following ParameterNames argument ACS CPE Transaction session Obtain the Device Log 1 GetParameterValues 2 Get...

Page 63: ...e RPCs for event subscription Following ACS RPCs are relevant to event subscription GetParameterAttributes RPC the ACS can use this RPC to learn the event subscriptions associated with one or more CPE parameters The ParameterNames argument is a list of the names of the requested parameters Example of the ParameterNames argument SetParameterAttributes RPC the ACS can use this RPC to modify the even...

Page 64: ...ParameterAttributesResponse 4 SetParameterAttributes 5 SetParameterAttributesResponse 8 Parameter change event 6 200 OK Empty 3 Verify event subscriptions decide to reconfigure 7 Close connection 9 Inform Event 2 Periodic 4 Value Change 10 InformResponse ACS CPE Transaction session 1 GetParameterAttributes 2 GetParameterAttributesResponse 4 SetParameterAttributes 5 SetParameterAttributesResponse 8...

Page 65: ...sage flow for the creation and configuration of a WAN connection ACS CPE Transaction session 5 Apply changes Configure the WAN Connection Device 4 SetParameterValues 6 SetParameterValuesResponse 11 Apply changes Configure the WANPPPConnection or WANIPConnection 10 SetParameterValues 12 SetParameterValuesResponse Create a WAN Connection Device 1 AddObject 3 AddObjectResponse 2 Apply changes Obtain ...

Page 66: ...e and configure a WAN connection device See 5 1 WAN Connection Device on page 61 2 Create and configure a WAN PPP or IP connection See 5 2 WAN PPP or IP Connection on page 62 3 Obtain connection information See 5 3 Connection Information on page 65 4 Create and configure a forwarding entry See 5 4 Forwarding Entries on page 66 ...

Page 67: ... and configure the ATM PVC the SetParameterValues RPC message 4 in preceding illustration contains following name value pairs in its ParameterList argument Link type value Following table shows the link type of a specific WAN connection Name Value InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANDSLLinkConfig LinkType EoA PPPoA or IPoA See Link type value InternetGatewayDevice WANDevice ...

Page 68: ...ParameterList argument WAN PPPoA connection A WAN PPPoA connection can be created and configured as follows Creating a PPPoA connection the AddObject RPC message 7 in preceding illustration contains for the ObjectName argument the value InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANPPPConnection The AddObjectResponse message 9 in preceding illustration contains for the InstanceNumber ...

Page 69: ...PPPConnection 1 NATEnabled 1 InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANPPPConnection 1 Username username InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANPPPConnection 1 Password password InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANPPPConnection 1 Name Internet InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANPPPConnection 1 Enable 1 The paramete...

Page 70: ...eNumber argument for example value 1 Configuring the IPoA connection the SetParameterValues RPC message 10 in preceding illustration contains following name value pairs in its ParameterList argument Name Value InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANIPConnection 1 AddressingType DHCP InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANIPConnection 1 Name Video InternetGat...

Page 71: ... connection To obtain information on the connection status the assigned external IP address and the forwarding entries the GetParameterValues RPC message 13 in preceding illustration contains following ParameterNames arguments Entry Value 1 InternetGatewayDevice WANDevice 1 WANConnectionDevice 2 WANPPPConnection 1 2 InternetGatewayDevice Layer3Forwarding Forwarding Entry Value 1 InternetGatewayDev...

Page 72: ...g Forwarding The AddObjectResponse message 17 in preceding illustration contains for the InstanceNumber argument for example value 3 Configuring the entry the SetParameterValues RPC message 18 in preceding illustration contains following name value pairs in its ParameterList argument for example to add a default route Name Value InternetGatewayDevice Layer3Forwarding Forwarding 3 DestIPAddres s 0 ...

Page 73: ...PConnection 1 InternetGatewayDevice Layer3Forwarding Forwarding 3 Forwarding Metric 1 InternetGatewayDevice Layer3Forwarding Forwarding 3 GatewayIPAd dress ipaddress_Interface The parameters DestIPAddress Interface and GatewayIPAddress are mandatory This means that these parameters must be set before the Forwarding object is internally created Name Value ...

Page 74: ...E DOC CTC 20071119 0003 v1 0 68 5 WAN Connections ...

Page 75: ...f time decides to subscribe to the VoIP service Overview This chapter includes following use cases For more information on the non vendor specific parameters in the data model see TR 098 Topic Page 6 1 VoIP 70 6 2 WLAN 73 6 3 Time 76 6 4 DHCP Conditional Serving 77 6 5 Queue Management 79 6 6 Stateful Inspection Firewall 81 6 7 Access Rights 85 6 8 NAT Application List 87 6 9 Dynamic DNS 90 6 10 R...

Page 76: ...rvice i X_000E50_MaxSessions the maximum number of simultaneous sessions VoiceService i X_000E50_UAMappingNumberOfEntries the number of entries in the UA mapping table In case of a Back to Back User Agent this is a global to local UA mapping table In case of a local Back to Back User Agent this is a local to global UA mapping table Each entry is defined by an X_000E50_UAMapping object VoiceService...

Page 77: ...meters and finally enable the VoiceProfile 1 object instance The SetParameterValues RPC message 3 in preceding illustration contains following name value pair in its ParameterList argument ACS CPE Transaction session 4 Apply changes Configure the VoiceProfile 3 SetParameterValues 5 SetParameterValuesResponse 7 Apply changes Configure the SIP signalling protocol 6 SetParameterValues 8 SetParameterV...

Page 78: ... port is not set The SetParameterValues RPC message 12 in preceding illustration contains following name value pairs in its ParameterList argument Name Value InternetGatewayDevice Services VoiceService 1 VoiceProfile 1 SIP ProxyServer ip_address InternetGatewayDevice Services VoiceService 1 VoiceProfile 1 SIP ProxyServerPort port InternetGatewayDevice Services VoiceService 1 VoiceProfile 1 SIP Reg...

Page 79: ...w the user to associate and configure again WLANConfiguration data model The IGD data model on the Thomson Gateway contains the object InternetGatewayDevice LANDevice 1 WLANConfiguration 1 This object contains the objects and parameters needed for the configuration of the wireless service Enable or disable the wireless service Configure the wireless settings Troubleshoot the wireless service Vendo...

Page 80: ... SSID SSID InternetGatewayDevice LANDevice 1 WLANConfiguration 1 Enable 1 Name Value InternetGatewayDevice LANDevice 1 WLANConfiguration 1 WEPKey 1 WEPKe y 1234567890 InternetGatewayDevice LANDevice 1 WLANConfiguration 1 Channel channel_id InternetGatewayDevice LANDevice 1 WLANConfiguration 1 BeaconType Basic InternetGatewayDevice LANDevice 1 WLANConfiguration 1 SSID SSID InternetGatewayDevice LAN...

Page 81: ...ParameterList argument Name Value InternetGatewayDevice LANDevice 1 WLANConfiguration 1 PreSharedKey 1 KeyPassphrase abcdefgh InternetGatewayDevice LANDevice 1 WLANConfiguration 1 Channel channel_id InternetGatewayDevice LANDevice 1 WLANConfiguration 1 BeaconType WPAand11i InternetGatewayDevice LANDevice 1 WLANConfiguration 1 SSID SSID InternetGatewayDevice LANDevice 1 WLANConfiguration 1 Enable 1...

Page 82: ... Monday Tuesday X_000E50_Enable used to enable or disable the NTP service Message flow Following illustration shows a possible message flow for NTP service provisioning Example parameter values For example following parameter values can be used the SetParameterValues RPC message 1 in preceding illustration contains following name value pairs in its ParameterList argument ACS CPE Transaction sessio...

Page 83: ... Creating a serving pool the AddObject RPC message 1 in preceding illustration contains for the ObjectName argument the value InternetGatewayDevice LANDevice 1 LANHostConfigManagement DHCPConditionalServingPool The AddObjectResponse message 3 in preceding illustration contains for the InstanceNumber argument for example value 1 For more information on the DHCPConditionalServingPool data model see ...

Page 84: ...t DHCPConditionalServingPool 1 Chaddr 00 0f 1f 83 d7 5b InternetGatewayDevice LANDevice 1 LANHostConfigManagement DHCPConditionalServingPool 1 MinAddress 192 168 1 70 InternetGatewayDevice LANDevice 1 LANHostConfigManagement DHCPConditionalServingPool 1 MaxAddress 192 168 1 80 InternetGatewayDevice LANDevice 1 LANHostConfigManagement DHCPConditionalServingPool 1 SubnetMask 255 255 255 0 InternetGa...

Page 85: ...wing parameter values can be used Configuring a queue table entry the SetParameterValues RPC message 1 in preceding illustration contains following name value pairs in its ParameterList argument ACS CPE Transaction session 8 Apply changes Configure the Classification table entry 7 SetParameterValues 9 SetParameterValuesResponse Create a Classification table entry 4 AddObject 6 AddObjectResponse 5 ...

Page 86: ...ng illustration contains for the InstanceNumber argument for example value 1 Configuring the policer table entry the SetParameterValues RPC message 13 in preceding illustration contains following name value pairs in its ParameterList argument InternetGatewayDevice QueueManagement Queue 6 DropAlgorithm BLUE InternetGatewayDevice QueueManagement Queue 6 SchedulerAlgorith m WFQ InternetGatewayDevice ...

Page 87: ...roprietary Firewall data model Name Type Actions InternetGatewayDevice X_000E50_Firewall Object Enable Parameter Read Write SelectedLevel Parameter Read Write LevelNumberOfEntries Parameter Read ChainNumberOfEntries Parameter Read Level Object Add Delete Name Parameter Read Write Order Parameter Read Write Description Parameter Read Write ReadOnly Parameter Read Write DefaultPolicy Parameter Read ...

Page 88: ...rfaceExclude Parameter Read Write Protocol Parameter Read Write ProtocolExclude Parameter Read Write SourcePort Parameter Read Write SourcePortRange End Parameter Read Write SourcePort Exclude Parameter Read Write DestinationPort Parameter Read Write DestinationPort RangeEnd Parameter Read Write DestinationPort Exclude Parameter Read Write TOS Parameter Read Write TOSExclude Parameter Read Write D...

Page 89: ...lue pairs in its ParameterList argument ACS CPE Transaction session 5 Apply changes Configure the Security Level 4 SetParameterValues 6 SetParameterValuesResponse Create a Security Level 1 AddObject 3 AddObjectResponse 2 Apply changes Create a Rule 9 AddObject 11 AddObjectResponse 10 Apply changes 13 Apply changes Configure the Rule 12 SetParameterValues 14 SetParameterValuesResponse 16 Apply chan...

Page 90: ...ent Activating the security level the SetParameterValues RPC message 15 in preceding illustration contains following name value pair in its ParameterList argument Entry Value 1 InternetGatewayDevice X_000E50_Firewall Level 7 Chain Name Value InternetGatewayDevice X_000E50_Firewall Chain 20 Rule 1 Description This is a test rule InternetGatewayDevice X_000E50_Firewall Chain 20 Rule 1 SourceInterfac...

Page 91: ... Name Type Actions InternetGatewayDevice X_000E50_AccessRights Object Group Object Add Delete Name Parameter Read Write GID Parameter Read MaskPos Parameter Read Write Parent Parameter Read Write User Object Add Delete User Parameter Read Write User Object Add Delete Name Parameter Read Write Password Parameter Read Write Hash2 Parameter Read Write AdminGroup Parameter Read Write Description Param...

Page 92: ...he user the SetParameterValues RPC message 4 in preceding illustration contains following name value pair in its ParameterList argument Name Value InternetGatewayDevice X_000E50_AccessRights User 3 Name TestUser InternetGatewayDevice X_000E50_AccessRights User 3 AdminGroup 9 or InternetGatewayDevice X_000E50_AccessRights Group 9 InternetGatewayDevice X_000E50_AccessRights User 3 Description This p...

Page 93: ...e WAN side to the port used on the LAN side Assign a particular local network device to a NAT application The Thomson Gateway supports following proprietary NAT application list data model Name Type Actions InternetGatewayDevice Services X_000E50_NATApplicationList Object ApplicationNumberOfEntries Parameter Read Application Object Add Delete Name Parameter Read Write HostIPAddress Parameter Read ...

Page 94: ... 7 in preceding illustration contains for the ObjectName argument the value InternetGatewayDevice Services X_000E50_NATApplicationList Application 130 Rule The AddObjectResponse message 9 in preceding illustration contains for the InstanceNumber argument for example value 1 ACS CPE Transaction session 5 Apply changes Configure the Application 4 SetParameterValues 6 SetParameterValuesResponse Creat...

Page 95: ...ternetGatewayDevice Services X_000E50_NATApplicationList Application 130 Rule 1 ExternalPortRangeEnd ExternalPortRangeEnd InternetGatewayDevice Services X_000E50_NATApplicationList Application 130 Rule 1 InternalPort InternalPort InternetGatewayDevice Services X_000E50_NATApplicationList Application 130 Rule 1 Protocol TCP or UDP The parameters ExternalPort and ExternalPortRangeEnd are mandatory T...

Page 96: ...Read ClientNumberOfEntries Parameter Read Service Object Name Parameter Read Server Parameter Read Write Request Parameter Read Write ServerPort Parameter Read Write UpdateInterval Parameter Read Write RetryInterval Parameter Read Write MaxRetries Parameter Read Write Hidden Parameter Read Write Client Object Add Delete Enable Parameter Read Write Status Parameter Read LastError Parameter Read Hid...

Page 97: ...on 2 Apply changes Configure the Service 1 SetParameterValues 3 SetParameterValuesResponse 8 Apply changes Configure the Client 7 SetParameterValues 9 SetParameterValuesResponse Create a Client 4 AddObject 6 AddObjectResponse 5 Apply changes Create a Host 10 AddObject 12 AddObjectResponse 11 Apply changes 14 Apply changes Configure the Host 13 SetParameterValues 15 SetParameterValuesResponse 17 Ap...

Page 98: ... client the SetParameterValues RPC message 16 in preceding illustration contains following name value pairs in its ParameterList argument Name Value InternetGatewayDevice Services X_000E50_DynamicDNS Client 1 Username username InternetGatewayDevice Services X_000E50_DynamicDNS Client 1 Password password InternetGatewayDevice Services X_000E50_DynamicDNS Client 1 Interface InternetGatewayDevice WAN...

Page 99: ...flow for the configuration of remote access Name Type Actions InternetGatewayDevice Services X_000E50_RemoteAccess Object URL Parameter Read Status Parameter Read Secure Parameter Read Write Port Parameter Read Write Timeout Parameter Read Write ElapsedTime Parameter Read Mode Parameter Read Write IPIntf Parameter Read Write RandomPassword Parameter Read Write RandomPort Parameter Read Write User ...

Page 100: ...ion 1 InternetGatewayDevice Services X_000E50_RemoteAccess Group 3 or InternetGatewayDevice X_000E50_AccessRights Grou p 3 InternetGatewayDevice Services X_000E50_RemoteAccess User 2 or InternetGatewayDevice X_000E50_AccessRights User 2 InternetGatewayDevice Services X_000E50_RemoteAccess RandomPassword 1 InternetGatewayDevice Services X_000E50_RemoteAccess Start 1 Name Value InternetGatewayDevice...

Page 101: ...tering Name Type Actions InternetGatewayDevice Services X_000E50_ParentalControl Object Status Parameter Read Write ConnectErrorURL Parameter Read Write CategoryErrorURL Parameter Read Write MonitorInterceptURL Parameter Read Write UnauthorizedReqURL Parameter Read Write URLFilter Object Enable Parameter Read Write RuleNumberOfEntries Parameter Read Rule Object Add Delete URL Parameter Read Write ...

Page 102: ...ber argument for example value 1 Configuring the rule the SetParameterValues RPC message 4 in preceding illustration contains following name value pairs in its ParameterList argument Name Value InternetGatewayDevice Services X_000E50_ParentalControl URLFilter Rule 1 URL www standaard be InternetGatewayDevice Services X_000E50_ParentalControl URLFilter Rule 1 Action Redirect InternetGatewayDevice S...

Page 103: ...ssible message flow for VLAN provisioning ACS CPE Transaction session Obtain Bridge and Interface Information 7 GetParameterValues 8 GetParameterValuesResponse 5 Apply changes Configure the VLAN 4 SetParameterValues 6 SetParameterValuesResponse Create a VLAN 1 AddObject 3 AddObjectResponse 2 Apply changes Create a Filter 9 AddObject 11 AddObjectResponse 10 Apply changes 13 Apply changes Configure ...

Page 104: ...g name value pairs in its ParameterList argument Configuring default port VID the SetParameterValues RPC message 15 in preceding illustration contains following name value pair in its ParameterList argument Create a marking the AddObject RPC message 18 in preceding illustration contains for the ObjectName argument the value InternetGatewayDevice Layer2Bridging Marking The AddObjectResponse message...

Page 105: ...ent Name Value InternetGatewayDevice Layer2Bridging Marking 1 MarkingBridge Reference 2 BridgeKey InternetGatewayDevice Layer2Bridging Marking 1 MarkingInterfac e 10001 AvailableInterfaceKey InternetGatewayDevice Layer2Bridging Marking 1 VLANIDUntag 0 The parameters MarkingBridgeReference and MarkingInterface are mandatory This means that the parameters must be set before the Marking object is int...

Page 106: ...E DOC CTC 20071119 0003 v1 0 100 6 Service Provisioning ...

Page 107: ... g CPE serial number as user name password TLS certificates ACS to CPE authentication a CA certificate e g a server provider certificate must be pre provisioned on the CPE CPE to ACS authentication each CPE certificate is signed by e g a service provider CA or the ACS trusts the CPE CA Subscriber CPE relation identification Learning the subscriber CPE relation is mainly the task of the ACS Two cas...

Page 108: ...teway Message flow minimal walled garden provisioning This use case makes use of two types of ACS The walled garden ACS associates the CPE with the subscriber and configures the CPE with the proper user specific connectivity parameters So the difference with the zero provisioning use case is that the walled garden ACS is dedicated to configuring the CPE out of the walled garden The provider ACS do...

Page 109: ......

Page 110: ...THOMSON Telecom Belgium Prins Boudewijnlaan 47 2650 Edegem www thomson broadband com Thomson 2008 All rights reserved E DOC CTC 20071119 0003 v1 0 ...

Reviews: