Thanks Dan. Following are my observations & queries:
1. Genieacs-cwmp services is running on port 7547. ubuntu@ip-172-31-30-69:/opt/genieacs$ netstat -an | grep 7547 tcp 0 0 0.0.0.0:7547 0.0.0.0:* LISTEN 2. Changed ACS url ==> http://54.210.130.183:7547/ (public ip) 3. Started easycwmpd . Still the same connection timed out. 4. Tried curl from client machine. CURL cmd failed with both public and private ip of ACS. ubuntu@ip-172-31-13-243:/opt/dev/easycwmp $ curl -vv --connect-timeout 50 http://54.210.130.183:7547/ * Trying 54.210.130.183... * Connection timed out after 50001 milliseconds * Closing connection 0 curl: (28) Connection timed out after 50001 milliseconds 5. Tried curl from ACS machine with PUBLIC IP a. ubuntu@ip-172-31-30-69: /opt/genieacs $ curl -vv --connect-timeout 50 http://54.210.130.183:7547/ * Trying 54.210.130.183... * Connection timed out after 50001 milliseconds * Closing connection 0 curl: (28) Connection timed out after 50001 milliseconds 6. Tried curl from ACS machine with PRIVATE IP ubuntu@ip-172-31-30-69:/opt/genieacs$ curl -vv --connect-timeout 30 http://172.31.30.69:7547/ * Trying 172.31.30.69... * Connected to 172.31.30.69 (172.31.30.69) port 7547 (#0) > GET / HTTP/1.1 > Host: 172.31.30.69:7547 > User-Agent: curl/7.47.0 > Accept: */* > < HTTP/1.1 405 Method Not Allowed < Allow: POST < Date: Thu, 25 May 2017 16:25:06 GMT < Connection: keep-alive < Transfer-Encoding: chunked < * Connection #0 to host 172.31.30.69 left intact 405 Method Not Allowed 7. why curl URL is failing from Client machine and curl URL from ACS machine returning 405 status code. 8. Where to set debug mode for logs in genieACS? And log file path? ubuntu@ip-172-31-13-243:/opt/dev/easycwmp$ sudo easycwmpd -f 2017-05-25 15:14:35 [easycwmp] NOTICE - add event '0 BOOTSTRAP' 2017-05-25 15:14:35 [easycwmp] NOTICE - add event '2 PERIODIC' 2017-05-25 15:14:35 [easycwmp] NOTICE - add event '1 BOOT' 2017-05-25 15:14:35 [easycwmp] NOTICE - external script init config_init_local(55):: easycwmp.@local[0].interface=eth0 config_init_local(65):: easycwmp.@local[0].port=7547 config_init_local(83):: easycwmp.@local[0].ubus_socket=/var/run/ubus.sock config_init_local(71):: easycwmp.@local[0].username=easycwmp config_init_local(77):: easycwmp.@local[0].password=easycwmp config_init_local(94):: easycwmp.@local[0].logging_level=0 config_init_acs(159):: easycwmp.@acs[0].url=http://54.210.130.183:7547/ config_init_acs(177):: easycwmp.@acs[0].periodic_enable=1<mailto:easycwmp.@acs[0].periodic_enable=1> --- SEND HTTP REQUEST --- * Trying 54.210.130.183... * Connection timed out after 60001 milliseconds * Closing connection 0 2017-05-25 16:21:18 [easycwmp] NOTICE - LibCurl Error: Connection timed out after 60001 milliseconds 2017-05-25 16:21:18 [easycwmp] NOTICE - sending http message failed rpc_inform(218): sending Inform http message failed 2017-05-25 16:21:18 [easycwmp] NOTICE - sending Inform failed. Thanks, Magesh From: Users [mailto:[email protected]] On Behalf Of Dan Morphis Sent: Thursday, May 25, 2017 7:37 PM To: Community support for GenieACS users <[email protected]> Subject: Re: How to determine acs url from installed genieacs? 1. http://54.210.130.183:7547/<http://54.210.130.183:7547/openacs/acs> You will want to put nginx or apache in front of the cwmp process in transparent proxy mode and require http auth. There is documentation for this on the wiki. You will also want to do https as this data is flowing over the public internet. Please don't expose your NBI (port 7557) to the world. You need to firewall this off. If you will only ever use the genie GUI then configure the NBI to listen on loopback. -dan On May 25, 2017, at 3:28 AM, Magesh Balaji <[email protected]<mailto:[email protected]>> wrote: Hi, We have freshly installed genieacs and made all the services up. GUI is also up and running fine. Now i want to communicate to this ACS server from easycwmp client. both GenieACS and Easycwmp are running on aws. GenieACS is up and running fine. able to access gui using http://54.210.130.183:3000 In both the EC2 instances we made it to allow all traffic. 1. How to identify the ACS URL from genieACS. So that i can provide in the easycwmp uci configuration. config acs option url http://54.210.130.183:7547/openacs/acs ==> Not sure about the path (/openacs/acs) in the URL. 2. Connection is timed out when easycwmp trys to send INFORM request. I tried testing by increasing the timeout as well but still the same error. But we see the packets on 7547 port eth0 interface on genieacs ec2 instance. configured the logging level to 0 in the option logging_level '0' where can we see the log file for easycwmp to check why connection is getting timed out? ================================== ACS client tr069 =================================== ubuntu@ip-172-31-13-243<mailto:ubuntu@ip-172-31-13-243>:~$ sudo easycwmpd -f 2017-05-24 09:49:43 [easycwmp] NOTICE - add event '0 BOOTSTRAP' 2017-05-24 09:49:43 [easycwmp] NOTICE - add event '2 PERIODIC' 2017-05-24 09:49:43 [easycwmp] NOTICE - external script init config_init_local(55):: easycwmp.@local[0].interface=eth0<mailto:easycwmp.@local[0].interface=eth0> config_init_local(65):: easycwmp.@local[0].port=7547<mailto:easycwmp.@local[0].port=7547> config_init_local(83):: easycwmp.@local[0].ubus_socket=/var/run/ubus.sock<mailto:easycwmp.@local[0].ubus_socket=/var/run/ubus.sock> config_init_local(71):: easycwmp.@local[0].username=easycwmp<mailto:easycwmp.@local[0].username=easycwmp> config_init_local(77):: easycwmp.@local[0].password=easycwmp<mailto:easycwmp.@local[0].password=easycwmp> config_init_local(94):: easycwmp.@local[0].logging_level=0<mailto:easycwmp.@local[0].logging_level=0> config_init_acs(159):: easycwmp.@acs[0].url=http://54.210.130.183:7547/openacs/acs [^<http://54.210.130.183:7547/openacs/acs>] config_init_acs(165):: easycwmp.@acs[0].username=easycwmp<mailto:easycwmp.@acs[0].username=easycwmp> config_init_acs(171):: easycwmp.@acs[0].password=easycwmp<mailto:easycwmp.@acs[0].password=easycwmp> config_init_acs(177):: easycwmp.@acs[0].periodic_enable=1<mailto:easycwmp.@acs[0].periodic_enable=1> config_init_acs(183):: easycwmp.@acs[0].periodic_interval=100<mailto:easycwmp.@acs[0].periodic_interval=100> config_init_acs(190):: easycwmp.@acs[0].periodic_time=0001-01-01T00:00:00Z<mailto:easycwmp.@acs[0].periodic_time=0001-01-01T00:00:00Z> main(320): ubus initialization failed +++ HTTP SERVER CONFIGURATION +++ ip: '172.31.13.243' port: '7547' --- HTTP SERVER CONFIGURATION --- +++ HTTP CLIENT CONFIGURATION +++ http_client_init(50):: url: http://54.210.130.183:7547/openacs/acs [^<http://54.210.130.183:7547/openacs/acs>] http_client_init(56):: ssl_verify: SSL certificate validation disabled. --- HTTP CLIENT CONFIGURATION --- +++ SEND HTTP REQUEST +++ <?xml version="1.0" encoding="UTF-8" standalone="no"?> <soap_env:Envelope xmlns:soap_env="http://schemas.xmlsoap.org/soap/envelope/"<http://schemas.xmlsoap.org/soap/envelope/%22> [^<http://schemas.xmlsoap.org/soap/envelope/%22>] xmlns:soap_enc="http://schemas.xmlsoap.org/soap/encoding/"<http://schemas.xmlsoap.org/soap/encoding/%22> [^<http://schemas.xmlsoap.org/soap/encoding/%22>] xmlns:xsd="http://www.w3.org/2001/XMLSchema"<http://www.w3.org/2001/XMLSchema%22> [^<http://www.w3.org/2001/XMLSchema%22>] xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"<http://www.w3.org/2001/XMLSchema-instance%22> [^<http://www.w3.org/2001/XMLSchema-instance%22>] xmlns:cwmp="urn:dslforum-org:cwmp-1-2"> <soap_env:Header> <cwmp:ID soap_env:mustUnderstand="1">1</cwmp:ID> </soap_env:Header> <soap_env:Body> <cwmp:Inform> <DeviceId> <Manufacturer>easycwmp</Manufacturer> <OUI>FFFFFF</OUI> <ProductClass>easycwmp</ProductClass> <SerialNumber>FFFFFF123456</SerialNumber> </DeviceId> <Event soap_enc:arrayType="cwmp:EventStruct[2]"> <EventStruct> <EventCode>0 BOOTSTRAP</EventCode> <CommandKey /> </EventStruct> <EventStruct> <EventCode>2 PERIODIC</EventCode> <CommandKey /> </EventStruct> </Event> <MaxEnvelopes>1</MaxEnvelopes> <CurrentTime>2017-05-24T09:49:43+00:00</CurrentTime> <RetryCount>0</RetryCount> <ParameterList soap_enc:arrayType="cwmp:ParameterValueStruct[10]"> <ParameterValueStruct> <Name>Device.DeviceInfo.HardwareVersion</Name> <Value xsi:type="xsd:string">example_hw_version</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.Manufacturer</Name> <Value xsi:type="xsd:string">easycwmp</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.ManufacturerOUI</Name> <Value xsi:type="xsd:string">FFFFFF</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.ProductClass</Name> <Value xsi:type="xsd:string">easycwmp</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.ProvisioningCode</Name> <Value xsi:type="xsd:string"></Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.SerialNumber</Name> <Value xsi:type="xsd:string">FFFFFF123456</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.SoftwareVersion</Name> <Value xsi:type="xsd:string">example_sw_version</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.DeviceInfo.SpecVersion</Name> <Value xsi:type="xsd:string">1.0</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>Device.ManagementServer.ConnectionRequestURL</Name> <Value xsi:type="xsd:string">http://172.31.13.243:7547/</Value><http://172.31.13.243:7547/%3C/Value%3E> [^<http://172.31.13.243:7547/%3C/Value%3E>] </ParameterValueStruct> <ParameterValueStruct> <Name>Device.ManagementServer.ParameterKey</Name> <Value xsi:type="xsd:string"></Value> </ParameterValueStruct> </ParameterList> </cwmp:Inform> </soap_env:Body> </soap_env:Envelope> --- SEND HTTP REQUEST --- * Trying 54.210.130.183... * Connection timed out after 30001 milliseconds * Closing connection 0 rpc_inform(218): sending Inform http message failed Thanks, Magesh This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify so to the sender by e-mail and delete the original message. In such cases, please notify us immediately at [email protected]<mailto:[email protected]> . Further, you are not to copy, disclose, or distribute this e-mail or its contents to any unauthorized person(s) .Any such actions are considered unlawful. This e-mail may contain viruses. Infinite has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachments. Infinite reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the Infinite e-mail system. ***INFINITE******** End of Disclaimer********INFINITE******** _______________________________________________ Users mailing list [email protected]<mailto:[email protected]> http://lists.genieacs.com/mailman/listinfo/users
_______________________________________________ Users mailing list [email protected] http://lists.genieacs.com/mailman/listinfo/users
