Huawei AR150/200 Series Configuration Manual page 107

Huawei AR150&200 Series Enterprise Routers
Configuration Guide - Network Management
can be set up only after the CPE or ACS is authenticated. After the connection is set up, the ACS
invokes Remote Procedure Call (RPC) methods to manage and maintain the CPE.
Auto Connection Between ACS and CPE
A session can be initiated by a CPE or an ACS.
Both the CPE and the ACS are allowed to initiate connections. This avoids the need for a
persistent connection to be maintained between each CPE and an ACS to reduce use of network
resources and costs.
l
l
SSL
Security Socket Layer (SSL) is a security protocol developed by Netscape. It uses public keys
to ensure secure and reliable communication between two ends. Communication data between
clients and the server is encrypted to prevent interception.
SSL operates independently of application-layer protocols. Any types of application-layer
protocols (including HTTP, FTP, and Telnet) can set up connections based on SSL. SSL finishes
data encryption, key negotiation, and server authentication before the application-layer protocols
set up connections. Therefore, all data transmitted by the application-layer protocols is
encrypted.
CPE Management and Maintenance
After setting up a connection with the ACS, the ACS can manage and maintain the CPE by using
RPC methods defined by the CWMP protocol. The ACS provides the following functions:
l
Issue 02 (2012-03-30)
A session initiated by a CPE
A CPE can connect to an ACS automatically by sending an Inform message. After the CPE
is authenticated by the ACS, the connection can be set up. The following conditions may
trigger an auto connection:
– After startup, the CPE finds the corresponding ACS according to the obtained URL,
and automatically initiates a connection with the ACS.
– The CPE is configured to send Inform messages periodically. The CPE automatically
send an Inform message at the specified interval (1 hour for example) to set up
connections.
– The CPE is configured to send Inform messages at a specific time. The CPE
automatically send an Inform message on schedule to set up connections.
– The session setup is interrupted unexpectedly. If the number of CPE auto-connection
retries has not reached the upper limit, the CPE automatically sets up a new connection.
A session initiated by an ACS
An ACS can initiate a Connect Request to a CPE at any time. After the CPE authenticates
the request, a session can be set up.
This mode requires that the CPE have successfully set up a connection with the ACS. The
ACS then stores the IP address of the CPE in its own address list so that the ACS can initiate
connections with the CPE.
CPE auto-configuration
When a CPE has set up a connection with an ACS, the ACS automatically delivers
configurations to the CPE. Auto-configuration parameters include:
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 CWMP Configuration
96