HP 5500 Ei 5500 Si Switch Series Configuration Guide

 190 
Figure 62 Example of CWMP message interaction 
 
 
The whole process is as follows: 
1. Establish a TCP connection. 
2. SSL initialization, and establish a security connection. 
3. The CPE sends an Inform request message to in itiate a CWMP connection. The Inform message 
carries the reason for sending this message in the Ev entcode field. In this example, the reason is 6 
CONNECTION REQUEST, indicating that the ACS requires the CPE to establish a connection.  
4.  If the CPE passes the...

 191 
CWMP configuration tasks 
Configuring the DHCP server 
In a CWMP network, the DHCP server is mainly used to notify the ACS location and authentication 
information to the ACS. DHCP server configuration includes the following tasks: 
•  Configuring a DHCP address pool for allocating IP addresses to CPEs. 
•   Configuring the DNS server. 
•   Configuring the Option 43 field to notify the ACS information to CPEs. 
The following describes how to configure the option 43 field: 
You can configure ACS...

 192 
Configuring the DNS server 
On the DNS server, you need to bind the URL address to the IP address of the ACS server to make sure 
that CPEs can obtain the IP address of the ACS through the DNS function. 
Configuring the ACS server 
An ACS performs auto-configuration of a CPE through remote management. For the primary 
configurable parameters, see Configuration parameter deployment . F
 or how to configure the ACS 
server, see the user manual came with your ACS server. 
Configuring CPEs 
You can set...

 193 
Step Command Remarks 
3.  Enable CWMP.   cwmp enable  Optional. 
By default, CWMP is enabled.
 
 
Configuring the ACS attributes 
ACS attributes include ACS URL, username and password. When the CPE initiates a connection to the 
ACS, the ACS URL, username and password are carried in the connection request. After the ACS receives 
the request, if the parameter values in the request  are consistent with those configured locally, the 
authentication succeeds, and the connection is allowed to  be...

 194 
Configuring CPE attributes 
CPE attributes include CPE username and password, which are used by a CPE to authenticate an ACS. 
When an ACS initiates a connection to a CPE, the ACS sends a session request carrying the CPE URL, 
username, and password. When the switch (CPE) receives the request, it compares the CPE URL, 
username, and password with those configured locally. If they are the same, the ACS passes the 
authentication of the CPE, and the connection establishment proceeds. Otherwise, the...

 195 
Sending Inform messages 
You must configure the Inform message sending parameter on the CPE to initiate a connection to the 
ACS. 
To configure the CPE to periodically send Inform messages: 
 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enter CWMP view.  cwmp  N/A 
3.  Enable the periodical sending 
of Inform messages.  cwmp cpe inform interval enable 
By default, this function is disabled. 
4.  Configure the interval 
between sending the Inform 
messages.  cwmp cpe inform...

 196 
•  During the establishment of a connection: If the CPE sends connection requests to the ACS, but the 
CPE does not receive a response within the configur ed close-wait timeout, the CPE will consider the 
connection failed. 
•   After a connection is established: If there is no  packet interaction between the CPE and ACS within 
the configured close-wait timeout, the CPE will consider the connection invalid, and disconnect the 
connection. 
To configure the close wait timer of a CPE: 
 
Step...

 197 
Step Command Remarks 
3.  Specify an SSL client policy. 
ssl client-policy policy-name  By default, SSL client policy is 
disabled.  
 
Displaying and maintaining CWMP 
 
Task Command Remarks 
Display CWMP configuration.
 display cwmp configuration
 [ | 
{  begin |  exclude | include  } 
regular-expression  ]   Available in any view 
Display the current status of 
CWMP.
  display cwmp status
 [ | { begin  | 
exclude  | include  } 
regular-expression  ]   Available in any view
 
 
CWMP configuration...

 198 
Figure 63 Network diagram 
 
 
Table 10 Switches deployed in two equipment rooms 
Equipment room  Switch  Serial ID 
A  DeviceA 210235AOLNH12000008 DeviceB 210235AOLNH12000010 
DeviceC 210235AOLNH12000015 
B DeviceD 210235AOLNH12000017 DeviceE 210235AOLNH12000020 
DeviceF 210235AOLNH12000022 
 
The network administrator has created two configuration files 
sys.a.cfg and sys_b.cfg  for the switches in 
the two rooms. The username and password for accessing the ACS server is vicky  and 12 3 4 5 . The...

 199 
Figure 64 CPE Authentication User page 
 
 
Click Add to enter the page for adding a CPE authentication user. 
Figure 65  Add CPE Authentication User page 
 
 
Set the username, password, and description, and then click OK. 
# Add a device group and a device class. In this example, add  DeviceA to the Device_A  class of 
the  DB_1  group.  
Click the  Resource tab, and select  Group Management  > Device Group  from the navigation tree to 
enter the device group page. Click  Add to enter the page...