Cisco SPA1112 Provisioning Manual page 10

Deployment and Provisioning
Provisioning Overview
Provisioning Guide for Cisco SPA100 and SPA200 Series Analog Telephone Adapters
Communication with the NPS does not require the use of a secure protocol
because the updated profile can be encrypted by a shared secret key. Secure
first-time provisioning is provided through a mechanism that uses SSL
functionality. An unprovisioned ATA can receive a 256-bit symmetric key
encrypted profile specifically targeted for that device.
TR-069
The digital subscriber line (DSL) Forum TR-069, CPE WAN Management Protocol
(CWMP), is used for communications between a customer premise equipment
(CPE) device and an auto-configuration server (ACS). The TR-069 Agent manages
a collection of CPE devices, with the primary capability for auto-configuration and
dynamic service provisioning, software image management, status and
performance monitoring and diagnostics.
It supports multiple scenarios, including:
• Device administration: Authenticates administrators, authorizes commands,
and provides an audit trail
• Remote Access: Works with VPN and other remote network access
devices to enforce access policies
• Network admission control: Communicates with posture and audit servers
to enforce admission control policies
The TR-069 Agent CPE devices must be set up and enabled for TR-069. An ACS
used to communicate with the CPE must be TR-069 compliant in order to enable
the TR-069 Agent.
1
10