Training

How to secure the connected home - a special live session with F-Secure and QA Cafe

1 min read

In this special session with experts from F-Secure and QA Cafe, you’ll learn about best practices for secure home gateway design and deployment throughout the product life cycle, and how security applications developed by experts and deployed on the CPE can help keep users safe in a hyper-connected world. Keep reading
security Wi-Fi Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

APNIC blog - Testing transition mechanisms in IPv6-only networks

1 min read

Timothy Winters, QA Cafe’s Chief Technology Officer, is featured on APNIC, the Asia Pacific source of IP address distribution, with a blog post about Testing Transition Mechanisms in IPv6-Only Networks. What are the major roadblocks when testing IPv6 transition mechanisms? An excerpt: Moving to an IPv6-only network makes the most economical sense for the future, but legacy IPv4 hosts and services will continue to exist for some time. This means that operators need mechanisms that allow IPv4 packets to route through their IPv6-only network. Keep reading
IPv6 Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

How to get security traffic analysis insights during testing and why they're important

4 min read

Securing home/soho routers and WiFi network devices has become the most important topic for vendors and service providers. Here's how performing security traffic analysis during testing - before deployment - can avoid unnecessary costs, avoid brand damage, and guarantee a quality end-user experience. Keep reading
security Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Webinar - Build and deploy safer products with new methods of security testing

1 min read

Security testing can be easy with the right tools! With an increase in cybercriminals targeting home/SOHO gateways and Wi-Fi APs, testing has never been more important. In this webinar, you’ll learn how monitoring the behavior of a device under test, by analyzing its live network traffic can help uncover issues that may not come to light with regular penetration testing. This revolutionary testing method validates that your device is following best practices or deployment policies prior to being deployed. Keep reading
security Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

3 testing tips for building robust managed devices using TR-181

6 min read

Powerful protocols like USP/TR-369, and its predecessor, TR-069, help the broadband and consumer electronics industries produce devices that can be configured, monitored, and controlled in a standardized way. That standardization means that the implementation of these protocols must be tested to ensure that they conform and will interoperate in the larger ecosystem. In addition to the management protocol and its interface, however, is the underlying implementation and its API into the device’s drivers, applications, and other interfaces. Keep reading
TR-069 USP TR-369 Home Gateways and WiFi" Service Providers Cable and MSOs

Training

What's new in the TR-181 Device 2.13 data model for TR-069 and USP

5 min read

More about USP and Device:2 in the industry With the release of Device:2.13 and USP 1.1, QA Cafe gave a webinar alongside industry experts from Axiros, Domos, Arris/CommScope, Incognito, and Greenwave Systems covering these updates and more. Request the video More about USP and Device:2 in the industry With the release of Device:2.13 and USP 1.1, QA Cafe gave a webinar alongside industry experts from Axiros, Domos, Arris/CommScope, Incognito, and Greenwave Systems covering these updates and more. Keep reading
usp tr-369 tr-069 Wi-Fi Home Gateways and WiFi Service Providers Cable and MSOs IoT

Training

Features of the Device 2.12 data model for TR-069 and USP

6 min read

In alignment with the release of TR-069 Amendment 6 and the User Services Platform/TR-369, the Broadband Forum updated its comprehensive data model that describes CWMP endpoints or USP agents. There’s a number of new features, some of which are tied to updates to CWMP, as well as new interfaces and applications that are managed by CWMP or USP. Here’s a short overview of the changes in Device:2.12. How do data models work? Keep reading
usp tr-369 tr-069 Home Gateways and WiFi Service Providers Cable and MSOs

Training

Managed IoT, security, and the User Services Platform

2 min read

The team here at QA Cafe is deeply involved in networking standards, especially the Broadband Forum and the TR-069 protocol. The Broadband Forum is expanding the reach of TR-069 with its User Services Platform, representing an evolution of TR-069 to managed a more varied and greater number of connected devices. As consumer electronics vendors enter the world of network connected devices, and networking vendors begin to enter the world of smart devices, there’s a lot of new challenges that management systems can solve. Keep reading
TR-069 USP IoT Home Gateways and WiFi Service Providers Cable and MSOs

Training

Are your devices user interfaces vulnerable to common attack vectors?

7 min read

Security in home networking devices, particular home Wi-Fi routers, has come to the forefront in the last few years. While many of the discovered vulnerabilities are zero-day (meaning they are new vulnerabilities that can be exploited before they are known), some of the more recent attacks including VPNFilter, are exploiting common weaknesses in consumer router design that have been well known for some time. Security requirements vs. best practices Keep reading
ARP security TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Training

What is IR-181 and how does it apply to TR-069 testing?

4 min read

Critical to testing TR-069 implementations is the ability to demonstrate that the underlying code that configures settings on the device interacts correctly with the commands sent via CWMP. We discussed this in another training article on setting up Wi-Fi using TR-069, but there are many more valuable tests of this kind to consider. Consequently, TR-069 testing should include some manner of “real-world” testing that can be used to demonstrate the interoperability of the deployment of an ACS and TR-069 enabled CPE. Keep reading
TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Training

Cloudflare's 1.1.1.1 DNS service and the effect on broadband gateways

4 min read

In the world of the Internet, it’s vitally important that technologies keep evolving. Change is a rule of all technology, even if it comes slowly to fundamental systems like DNS (Domain Name Service). The company Cloudflare is an infrastructure provider for web applications and networks that has solutions for performance, security, and reliability - including DNS. In April of 2018, Cloudflare launched a new publicly facing DNS resolver at 1. Keep reading
DNS Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Does your device correctly configure Wi-Fi using TR-069?

4 min read

Testing a TR-069 Wi-Fi setup One of the most important use cases of TR-069 (and its evolution protocol, USP) is in the autoconfiguration, management, and troubleshooting of Wi-Fi networks. Often the source of the most customer service problems, being able to set up an end user’s Wi-Fi and make sure it’s working is critical for a satisfactory “carrier grade” home network. TR-069 testing often revolves around ensuring the conformance of a device’s CWMP stack to the protocol specification, including the tests that provide certification metrics as part of the Broadband Forum’s official TR-069 certification program. Keep reading
TR-069 Wifi Home Gateways and WiFi Service Providers Cable and MSOs

Training

How do you test TR-069 enabled devices?

3 min read

If you’re developing a device or deployment that uses the CPE WAN Management Protocol (TR-069), like managed Wifi or other services, what should you test for? What are the benefits of automating it with a dedicated test platform? What are the benefits of getting certified or asking your vendors to certify? Basic components of TR-069 If you’ve been through our TR-069 training series, you’ve seen an in-depth look at all of the pieces that make CWMP work. Keep reading
security TR-069 WiFi Home Gateways and WiFi Service Providers Cable and MSOs

Testing tips

Automating your test environment with the CDRouter web API

3 min read

Though CDRouter contains thousands of test cases, much of its power comes from being a fully capable automation platform for your entire test process. In addition to automating CDRouter test cases, you can use the CDRouter API to connect with your continuous integration, external test tools, or other applications to make your testing even easier. How to interact with CDRouter CDRouter contains three methods for interacting with its automation engine, configuration, and test packages. Keep reading
API Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Automated home gateway security testing

1 min read

Test your devices before attackers do. It’s no question now - malicious attackers are targeting the home network, and the gateway in particular. Testing for security vulnerabilities can be tedious and ineffective if you don’t have a controlled, repeatable, and fully automated test environment. Join the CDRouter team as we show you: How to test the functional performance of your security tools like parental controls, firewalls, and the security of your user interfaces. Keep reading
security TR-069 Wifi Home Gateways and WiFi Service Providers Cable and MSOs

Training

Verifying TR-069 real-world scenarios with a native ACS

3 min read

When it comes to testing TR-069, there are three main stages: Testing that your device handles CWMP and the underlying protocols Testing that your data model objects and parameters are valid Testing that your CPE will behave as expected in production CDRouter’s automation platform can make it very easy to do all of these, and do them repeatedly from firmware to firmware. However, this third point involves two things: verifying that your device makes the internal changes that were configured via CWMP, and testing in your actual production network. Keep reading
TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Testing tips

Test Setup for LTE Gateway or Mobile Hotspot

1 min read

Now that mobile data connections have reached speeds acceptable for broadband access, more and more devices are using LTE as either their primary or backup WAN connection. As more devices get pushed into the home, this number will likely increase by quite a bit. How do you test routers and gateways with LTE WAN connections, that have all of the same testing needs as other home and enterprise broadband gateways? Keep reading
lte mobile WAN Service Providers Home Gateways and WiFi

Training

Best Practices for Securing TR-069

4 min read

For our article on the alleged TR-069 vulnerability during the Mirai bot scare, go here. As one of the most largely deployed broadband management protocols in the world, TR-069 has quite a footprint, and a compromised system could potentially affect many broadband subscribers adversely. Luckily, TR-069 is built to operate on secure transport protocols. While there is nothing inherently insecure to the protocol itself, improper implementation of TR-069 clients and servers may expose problems that can be exploited by malicious attackers, as is the case with any web service. Keep reading
security TR-069 ssl tls Home Gateways and WiFi Service Providers Cable and MSOs

Testing tips

Testing TR-069 Devices in CDRouter 10

1 min read

As the official test platform for TR-069 certification, CDRouter’s TR-069 add-on turns CDRouter into a scriptable ACS simulator with test cases for protocol functionality, data model validation, and security. Join the QA Cafe team as we show you: Building a configuration to run TR-069 testing The different TR-069 test cases CDRouter TR-069 vs. BBF.069 tests Testing the different TR-069 data models Setting up SSL certificates for testing
TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

White papers

Testing Residential IPv6 with CDRouter

3 min read

While IPv6 has been in development for more than a decade, the availability of residential IPv6 is still in its infancy. Traditional CPE devices running IPv4 with NAT are now adding IPv6 capabilities and 6to4 transition techniques even before native IPv6 connections are commonly available. CDRouter is IPv6 capable and provides vendors, ISPs, and test labs with a set of functional test cases to verify the IPv6 readiness of CPE devices. Keep reading
IPv6 Home Gateways and WiFi Service Providers Cable and MSOs

Training

TR-069 Connection Request Timing

2 min read

In CWMP, the CPE is always the initiator of sessions. It begins each session with a call to the Inform RPC, which contains EVENT codes that specify to the ACS the reason for the session. One way the that ACS can entice a CPE to begin a session is with the Connection Request mechanism. In TR-069 Amendment 4 and earlier, this was done exclusively with HTTP, though an option for XMPP Connection Requests was added in Amendment 5. Keep reading
TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Training

Is your TR-069 implementation vulnerable to code injection attacks?

3 min read

Updates in CDRouter 10.3 The scenarios below are serious, and so we’ve added a series of tests to our tr69_conn_req.tcl module to cover your DUT’s TR-069 security and tests for code injection in TR-069 parameters. More on the Mirai worm attack in 2016 In 2016, a distributed denial of service (DDoS) attack dubbed the “Mirai worm” expanded its reach by exploiting a vulnerability in an exposed Broadband Forum TR-064 service (a deprecated service which we’ve written about here). Keep reading
security TR-064 TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Training

Experimenting with SIP and call timing on a gateway

4 min read

One of the fundamental functions of many home and business gateways is to act as a SIP ALG (Application Layer Gateway) for setting up, routing, and terminating VoIP telephone calls. This presents some difficulty with Network Address Translation (NAT) functionality that we’ve covered before. However, there’s other functional behavior when it comes to SIP call setup and the resulting RTP streams that can be missed without some rigorous experimentation. Keep reading
sip VoIP ALG Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Mirai attack on home routers and alleged TR-069 vulnerability

5 min read

Update: Learn more about how this attack could be used against TR-069 devices here. The week of November 28 2016 saw a massive attack on certain home routers deployed by several European service providers. The attack was based on the Mirai Malware attack several weeks previous that affected the dynamic DNS services provided by Dyn, Inc.. The attack focused on sending certain SOAP commands based on the Broadband Forum’s older TR-064 protocol, through port 7547. Keep reading
security TR-064 TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Training

Testing devices with wireless WAN connections

3 min read

At QA Cafe we continuously see new consumer broadband and home network devices come into the market and into our lab. One of the newest class of devices are “travel routers” - routers that are popular with people who frequently connect to public Wifi networks or those offered by hotels, restaurants, or hospitals. These devices let you preserve network settings that your devices need, let you set up default connections to VPNs or other secure networks, and act as an additional level of firewall security when connecting to public networks. Keep reading
Wifi WAN Mesh 802.11 Home Gateways and WiFi

Training

9 Most Common Router Bugs

5 min read

QA Cafe has been testing CPE routers since 2002 trying to test as many routers as we can find. During this time we have learned that the quality level of home and business routers/gateways on the market varies considerably. The following are some of the common problems that are exposed by testing with the CDRouter test suite. Packet Loss During the DHCP Renewal Process The CDRouter test suite can force a router to renew its DHCP lease at short intervals. Keep reading
DHCP UPnP Home Gateways and WiFi Enterprise Gateways and WiFi

Testing tips

Testing a Wifi Range Extender or Wifi Mesh System

2 min read

Devices that enhance consumer Wifi are becoming more and more prevalent, both off the shelf and deployed by service providers. A Wifi booster or Wifi range extender is sometimes a simple repeater, but more often they act as layer 2 bridges, and can still be tested for performance and management via TR-069 or SNMP. Isolating a node in a Wifi mesh When there are multiple repeaters forming a mesh, as is the case with a lot of consumer Wifi systems, it’s best to isolate the DUT that you want by telling CDRouter which BSSID in the mesh to connect to. Keep reading
Repeater Scalability Wifi Mesh 802.11 Home Gateways and WiFi

Training

Known Gateway Bugs - Ignoring Credentials

3 min read

Holes in home gateway security allow for a malicious hacker to take over a gateway in the way they would any other computer system. While the holes in most cases have been complex and deep seated bugs that would be hard to find without a lot of work, there are some easy to find bugs that seem obvious but would be missed without negative testing. The Problem Most application protocols use some method of authentication to ensure security and control identity management of users of the service. Keep reading
security ssl Home Gateways and WiFi

Training

DHCPv6 Prefix Delegation in Edge Routers

4 min read

In the course of developing the test suite for DHCPv6 prefix delegation, QA Cafe encountered a number of implementation issues that impact the functionality of IPv6 connectivity. Some of these potential implementation issues are discussed below. Implementation Issues with IPv6 Prefix Delegation in DHCP Now that IPv6 is moving out of the core and into residential networks, DHCPv6 prefix delegation has emerged as the leading technique to provision IPv6 CPE devices. Keep reading
DHCP DHCPv6 DOCSIS IPv6 Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Webinar - Testing Wifi Guest Mode

5 min read

One of the most common use cases for Wifi is the ability to set up a guest network alongside another network that is used by the home user, business, or other organization. It’s also a source of a lot of problems: guaranteeing that the Wifi router or AP can handle the number of clients connecting; making sure that the security in place for the guest network and other networks works correctly; and ensuring the policies you’ve put in place for guest access vs. Keep reading
Wifi 802.11 Home Gateways and WiFi Service Providers Cable and MSOs

Training

Exploring scaling tests - Is your home gateway IoT ready?

4 min read

By now we’ve all heard of the coming flood of network aware devices collectively referred to as the “Internet of Things”. While the term encompasses a wide variety of use cases that are not all clearly defined, we can come up with some rudimentary expectations on how this influx of connections will affect networks. For the home gateway, the most significant impact is how to handle an order of magnitude more connections than most are traditionally designed for - how well does it scale? Keep reading
DHCP DHCPv6 IPv6 Wifi IoT Home Gateways and WiFi Service Providers Cable and MSOs

Training

Multi-service gateway testing with CDRouter

6 min read

Multi-service gateways are typically configured with two or more independent, logical WAN connections, or channels, for different services, such as voice, video, and data. These service channels are then aggregated onto a single physical WAN connection through the use of VLANs. This allows operators to easily manage, route, and prioritize traffic from a large number of subscribers. CDRouter can easily test gateways that are configured for multiple services, ensuring that your products can deliver them effectively to subscribers and businesses. Keep reading
VLAN multi-service Home Gateways and WiFi Service Providers Enterprise Gateways and WiFi

Training

IP Multicast Testing with CDRouter

8 min read

This guide describes the IP multicast testing features in CDRouter and the role of IGMP (Internet Group Management Protocol) in CPE networks. CDRouter supports multicast testing using IGMP version 3. Although many CPE devices have support for IP multicast and IGMP, new functional requirements for set-top boxes and other IPTV multicast applications are pushing the adoption of IGMPv3 into the CPE networking space. IGMPv3 in CPE Networks Several different industry technology bodies including the Broadband Forum and CableLabs (DOCSIS) have defined the use of IGMPv3 for CPE devices. Keep reading
IGMP IGMP Snooping Multicast STB Home Gateways and WiFi Service Providers Cable and MSOs

Training

Testing Wifi Scalability with Wireless Station Virtualization

3 min read

Nearly every home device has Wifi capability, and with the emergence of the Internet of Things, that number is likely to increase exponentially. It will be more important than ever to ensure that Wifi routers and access points can handle the load and the applications that are likely to be accessed by all of these Wifi enabled devices. CDRouter 9.2 introduced the ability to simulate many wireless stations from a single wlan interface. Keep reading
Wifi 802.11 Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Using XMPP for TR-069 Connection Requests

3 min read

Watch our training on connection request basics and XMPP connection requests in our TR-069 training series. Though one of the fundamental principles of CWMP (TR-069) is that the CPE endpoint is always the one to initiate a connection, Autoconfiguration Servers (ACS) can use the TR-069 Connection Request feature to stimulate a CPE to begin a session. This is often used when the ACS must contact the CPE immediately, such as when configuring the device for a new service after it has already been bootstrapped by the system. Keep reading
TR-069 XMPP Home Gateways and WiFi Service Providers Cable and MSOs

Training

Is your device using valid TR-069 data models?

3 min read

The CPE WAN Management Protocol described by Broadband Forum TR-069 is a remote procedure call (RPC) based protocol. That is, it consists of two applications that interact directly with each other through a set of defined methods - in the case of TR-069, this includes device functions like Reboot, Download, etc., as well as operations that affect the device’s data model - a set of objects and parameters and the metadata surrounding them. Keep reading
TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Testing tips

Test Setup for Dual-Stack Router Providing IPv6 Connectivity via 6to4 Tunnels Over the IPv4 WAN

3 min read

What is dual-stack? Dual-stack CPE devices typically enable IPv6 connectivity via native IPv6 connections on the WAN or via tunneling protocols that transmit encapsulated IPv6 packets over the IPv4 WAN. Protocols such as DHCPv6 (with and without prefix delegation), PPPoE (running DHCPv6 or autoconf for address resolution), autoconf, or static IPv6 addressing can be used to provide native IPv6 connectivity on the WAN, whereas the most common tunneling protocols are 6to4 and 6rd. Keep reading
6to4 Dual-Stack IPv6 Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Testing tips

Testing TR-069 LAN side CPE with CDRouter

2 min read

The CDRouter TR-069 add-on module for CDRouter has the ability to test LAN-side devices, as defined in TR-181i1. TR-069 LAN-side devices are typically set-top boxes or VoIP endpoints that reside on the LAN side of the customer’s Internet Gateway Device (IGD) which may or may not support TR-069. The CDRouter TR-069 add-on supports automated testing for LAN-side devices. You can use this test setup to: Easily test TR-069 enabled LAN-side devices such as set-top boxes (STB) or voice-over-IP (VoIP) endpoints Can be used to test devices that are operating in both load-balancing mode or failover mode Automated PD-128 and data model profile testing for LAN-side devices CDRouter can test LAN devices that support Broadband Forum TR-104 (VoIPService data model), TR-135 (STBService data model), TR-196 (FAPService data model), TR-140 (StoargeService data model), and TR-181i1/i2 (Device root data models). Keep reading
LAN TR-069 Home Gateways and WiFi Service Providers Cable and MSOs

Testing tips

Testing Setup for a Gateway with a MoCA Bridge WAN

1 min read

CDRouter can be used with routers that have a Multimedia over Coax Alliance (MoCA) interface through the use of an external MoCA bridge. the MoCA bridge is essentially a media converter with Ethernet on one side and MoCA on the other. It bridges packets from a MoCA network to Ethernet and vice-versa. ] In this setup CDRouter connects directly to DUT’s LAN interface and the MoCA bridge via Ethernet. The MoCA bridge is then connected to the DUT’s MoCA WAN interface. Keep reading
MoCA WAN Home Gateways and WiFi Service Providers Cable and MSOs

Testing tips

Testing 6to4 and 6rd IPv6 Islands with CDRouter

7 min read

The world has spent a long time on the road to native IPv6. Fortunately, protocol advancements have mitigated the arduous task of deploying the next generation Internet. Essentially the software counterpart to the last-mile problem, deploying IPv6 to the CPE is “the last 90%” of the work. The core Service Provider networks have always been easier, and thus earlier, to receive both hardware and software upgrades. One idea that has gained momentum is to use the IPv4 Internet as a point-to-point network connecting IPv6 “islands” through stateless, automatic tunnels. Keep reading
6rd 6to4 IPv6 Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Testing tips

Testing IPv6 over PPPoE with CDRouter

9 min read

The IPv6 Over PPPoE Model There are two distinct phases required to establish a successful IPv6 connection over a PPPoE tunnel. The first phase involves establishment of the point-to-point link. The second phase deals with IPv6 addressing. In the IPv4 world, IP addresses are typically negotiated between the client and server using various IP Control Protocol (IPCP) options. IPCP is a PPP Network Control Protocol (NCP) formally defined in RFC 1332. Keep reading
IPv6 PPP PPPoE Home Gateways and WiFi Service Providers

Testing tips

Static NAT Testing with CDRouter

5 min read

The CDRouter Multiport add-on includes support for static NAT configurations. CPE devices that support this functionality will have two or more public IPv4 addresses. One public address is typically assigned to the primary WAN connection and one or more additional public IPv4 addresses are also assigned. These additional IPv4 addresses are used to allow a host on the LAN side of CPE to have its own public IPv4 address on the WAN. Keep reading
Firewall NAT Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Testing tips

DSL CPE Testing with CDRouter

5 min read

CDRouter is the ideal tool for testing the higher layer functionality of DSL based CPE. With a few additions to the basic test setup, CDRouter can be used to test CPE utilizing any type of DSL or G.fast devices. Overview The test setup for DSL CPE devices is similar to the test setup for typical Ethernet-to-Ethernet routers, with one exception. Since CDRouter does not have the ability to terminate the CPE device’s DSL connection directly, a dedicated DSLAM must be included in the test setup. Keep reading
DSL Home Gateways and WiFi Service Providers

Testing tips

Bridge mode testing with CDRouter

7 min read

CDRouter includes support for testing basic Layer 2 bridging devices including wireless access points, broadband access devices, and Ethernet switches. CDRouter can be used to verify the following functionality of a DUT operating in bridge mode: IPv4 and IPv6 forwarding TR-069 client 802.1x port based authentication VLAN functionality Basic Configuration To enable bridge mode within CDRouter, set the testvar forwardingMode to bridge. This testvar supports two values, route for routing devices or bridge for Layer 2 bridging devices. Keep reading
Bridge WAN Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Common testing issues with TR-069 and SSL

2 min read

Here are solutions to a few common TR-069 SSL-related issues. The CPE does not have a time source Some CPE devices will not validate a SSL/TLS certificate from the ACS until a time source is established. TR-069 states that devices should skip date validation of certificates if a time source is not established. However, in practice some CPE devices simple end the SSL connection. A common symptom of this problem are DNS requests to an NTP server which is not configured. Keep reading
ssl TR-069 tls Home Gateways and WiFi Service Providers Cable and MSOs

Training

DHCP Server Testing with CDRouter

8 min read

CDRouter’s pre-defined test modules make it easy to quickly test and evaluate a CPE implementation’s integrated DHCP server. In addition, CDRouter’s flexible configuration options allow a wide variety of DHCP server scenarios to be simulated and tested in a consistent and repeatable fashion. The base version of CDRouter includes two test modules designed specifically for verifying a CPE’s DHCP server functionality. The first module, dhcp-s.tcl, includes targeted functional test cases while the second module, scaling. Keep reading
DHCP Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Port Scanning Test Configuration for IPv4 and IPv6

6 min read

CDRouter includes port scanning test cases in the firewall.tcl module which will probe the WAN interface of the DUT for open TCP and UDP ports over IPv4. These open ports provide services either by the DUT or forwarded to internal LAN clients. Users of the CDRouter IPv6 add-on will find they can also perform similar tests over IPv6. Although there are certainly legitimate uses of port scanning, the vast majority of it occurs on the public Internet and is directed toward the WAN ports of random CPEs. Keep reading
nmap security Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Training

Testing dual-stack lite (DS-Lite) B4 CPE devices

8 min read

CDRouter makes it easy to test dual-stack lite B4 CPE implementations on a functional level, and when combined with the many LAN modes of operation available, can help identify issues that are not visible by iterative conformance testing. Dealing with IPv6 transitioning Many IPv6 transition strategies have been provided. Some, such as 6to4, have been available to end users for years now, since ISPs have no prerequisite of IPv6 routing to support the 6to4 protocol. Keep reading
6rd 6to4 DS-Lite IPv6 Home Gateways and WiFi Service Providers Cable and MSOs Enterprise Gateways and WiFi

Categories

Tags

6rd 6to4 802.11 802.1x alg api apple-homekit arp bbf.069 bridge cable-and-msos cloudshark dhcp dhcpv6 dns docsis ds-lite dsl dual-stack enterprise-gateways-and-wifi firewall ftp fttdp g.fast gpon h.323 home-gateways-and-wifi http icmp ics igmp igmp-snooping ike iot ipsec ipv4 ipv6 lan lte lw4o6 md5 mesh mobile moca multi-service multicast nas nat netbios nmap performance ppp pppoe pptp radius repeater rtsp scalability security service-providers sip smtp snmp ssl stb storage tftp tls tod tr-064 tr-069 tr-369 upnp usp vlan voip vpn wan wi-fi wifi xmpp