iCWMP how to add ConnectionRequest in the cwmp config

sdhamodharan · September 3, 2024, 10:52am

When we start the cwmp. we got the following errors.

/etc/init.d/icwmpd restart
Tue Sep  3 10:53:31 2024 local1.err cwmp[18070]: Could not accept connections for Connection Request!
admin@Alphion:~# Tue Sep  3 10:53:33 2024 local1.err cwmp[5514]: Failed to get TimeSync status
Tue Sep  3 10:53:34 2024 local1.err cwmp[5514]: Invalid/forced parameter Device.ManagementServer.ConnectionRequestURL, skipped 9005
Tue Sep  3 10:53:34 2024 local1.err cwmp[5514]: Invalid/forced parameter Device.ManagementServer.ConnReqJabberID, skipped 9005
Tue Sep  3 10:53:34 2024 local1.err cwmp[5514]: Invalid/forced parameter Device.SoftwareModules.ExecutionUnit.*.Status, skipped 9005

config acs 'acs'
option passwd 'admin'
option periodic_inform_enable 'true'
option periodic_inform_interval '1800'
option dhcp_discovery 'enable'
option compression 'Disabled'
option retry_min_wait_interval '5'
option retry_interval_multiplier '2000'
option skip_dhcp_boot_options '0'
option userid 'admin'
option url 'http://192.168.12.76:7547'

config cpe 'cpe'
option enable '1'
option default_wan_interface 'hsi'
option default_lan_interface 'lan'
option log_to_console 'disable'
option log_to_file 'disable'
option log_severity 'ERROR'
option log_file_name '/var/log/icwmpd.log'
option log_max_size '102400'
option passwd 'admin'
option port '7547'
option amd_version '5'
option instance_mode 'InstanceNumber'
option session_timeout '300'
option notification '1'
option exec_download '0'
option periodic_notify_enable '1'
option periodic_notify_interval '10'
option incoming_rule 'Port_Only'
option active_notif_throttle '0'
option disable_gatewayinfo '0'
option fw_upgrade_keep_settings '1'
option clock_sync_timeout '128'
option userid 'admin'
option manufacturer 'ABC'
option manufacturer_oui 'XXX'
option product_class 'TEST_CLASS'
option serial_number '1234567890'
option software_version 'X.Y.Z'
option model_name 'MODELXXX'
option description 'This is a test device'

config lwn 'lwn'
option enable '1'
option port '0'

frollic · September 3, 2024, 10:53am

Please post the output of

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall

sdhamodharan · September 3, 2024, 10:59am

admin@Alphion:/# ubus call system board
{
        "kernel": "5.4.55",
        "hostname": "Alphion",
        "system": "ARMv7 Processor rev 4 (v7l)",
        "model": "ECONET (Device Tree)",
        "board_name": "econet,en7523",
        "release": {
                "distribution": "Alphion",
                "version": "2.6.H.P0.10.01",
                "revision": "r16325-88151b8303",
                "target": "airoha/en7523",
                "description": "Alphion 2.6.H.P0.10.01 2.6.H.P0.10.01"
        }
}
admin@Alphion:/# cat /etc/config/network

config interface 'loopback'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
        option lastchange '2005'
        option device 'lo'

config globals 'globals'
        option ula_prefix 'fdea:e111:ce6b::/48'

config route6
        option route6_instance '1'
        option static '0'
        option target 'fe80::/64'
        option metric '256'
        option renabled '1'

config route6
        option route6_instance '2'
        option static '0'
        option target 'fe80::/64'
        option metric '256'
        option interface 'wan'

config interface 'lan'
        option force_link '1'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option device 'br-lan'

config xpon_vlan 'xpon_vlan'
        option vlan_id '10'

config xpon_auth 'xpon_auth'
        option pon_mode 'GPON'
        option auth_type_g 'sn'
        option gpon_sn_auth_type 'ascii'
        option sn_ascii_password 'xxxx'
        option loid 'mtk1234'
        option loidPasswd '1111'
        option sn 'HWTC346A0009'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0.1'
        list ports 'eth0.2'
        list ports 'eth0.3'
        list ports 'eth0.4'
        option igmp_snooping '1'

config device
        option type '8021q'
        option ifname 'pon'
        option vid '77'
        option name 'pon.77'

config interface 'hsi'
        option proto 'pppoe'
        option device 'pon.77'
        option username 'alphion'
        option password 'alphion123'

admin@Alphion:/# cat /etc/config/wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option band '2.4GHz'
        option channel 'auto'
        option hwmode '16'
        option path 'pci0000:00/0000:00:00.0/0000:01:00.0'
        option htmode '20'
        option disabled '0'
        option country 'US'
        option num_antennas '2'
        option beacon_int '100'
        option short_gi_20 '1'
        option short_gi_40 '1'
        option phy 'phy0'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option ifname 'ra0'
        option mode 'ap'
        option disabled '0'
        option encryption 'psk2'
        option key '1234567890'
        option isolate '0'
        option uapsd '1'
        option hidden '0'
        option wmm '1'
        option macfilter 'disable'
        option ieee80211w '0'
        option max_inactivity '60'
        option wps_pushbutton '1'
        option macaddr '90:67:17:DF:48:3D'
        option ssid '2.5G-APHN346A0009'

config wifi-device 'radio1'
        option type 'mac80211'
        option band '5GHz'
        option channel 'auto'
        option hwmode '17'
        option path 'pci0000:00/0000:00:00.0/0000:01:00.0+1'
        option htmode '80'
        option disabled '0'
        option country 'US'
        option num_antennas '2'
        option beacon_int '100'
        option doth '1'
        option short_gi_20 '1'
        option short_gi_40 '1'
        option phy 'phy1'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option ifname 'rai0'
        option mode 'ap'
        option disabled '0'
        option encryption 'psk2'
        option key '1234567890'
        option isolate '0'
        option uapsd '1'
        option hidden '0'
        option wmm '1'
        option macfilter 'disable'
        option ieee80211w '0'
        option max_inactivity '60'
        option wps_pushbutton '1'
        option macaddr '90:67:17:DF:48:42'
        option ssid '5G-APHN346A0009'

admin@Alphion:/# cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'
        option confdir '/tmp/dnsmasq.d'

config dhcp 'lan'
        option interface 'lan'
        option start '33'
        option limit '221'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        option ra_slaac '1'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

admin@Alphion:/# cat /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'
        list network 'VOICE_INTERNET_TR069'
        list network 'INTERNET'
        list network 'VOICE_INTERNET'
        list network 'wan6'
        list network 'hsi'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config rule
        option name 'Support-UDP-Traceroute'
        option src 'wan'
        option dest_port '33434:33689'
        option proto 'udp'
        option family 'ipv4'
        option target 'REJECT'
        option enabled 'false'

config include
        option path '/etc/firewall.user'

config include 'cwmp'
        option path '/etc/firewall.cwmp'
        option reload '1'

frollic · September 3, 2024, 11:03am

It appears you are using firmware that is not from the official OpenWrt project.

When using forks/offshoots/vendor-specific builds that are "based on OpenWrt", there may be many differences compared to the official versions (hosted by OpenWrt.org). Some of these customizations may fundamentally change the way that OpenWrt works. You might need help from people with specific/specialized knowledge about the firmware you are using, so it is possible that advice you get here may not be useful.

You may find that the best options are:

Install an official version of OpenWrt, if your device is supported (see https://firmware-selector.openwrt.org).
Ask for help from the maintainer(s) or user community of the specific firmware that you are using.
Provide the source code for the firmware so that users on this forum can understand how your firmware works (OpenWrt forum users are volunteers, so somebody might look at the code if they have time and are interested in your issue).

If you believe that this specific issue is common to generic/official OpenWrt and/or the maintainers of your build have indicated as such, please feel free to clarify.

lleachii · September 3, 2024, 11:23am

That was the giveaway.

slh · September 4, 2024, 6:00am

This topic was automatically closed after 18 hours. New replies are no longer allowed.