# TR-069 (CWMP)

*Technical Report 069 – CPE WAN Management Protocol* · Network & ISP

> TR-069 is a remote management protocol that lets ISPs configure, update and monitor subscriber modems, ONTs and routers from a central server.

TR-069 is a technical report published by the Broadband Forum, also known as CWMP (CPE WAN Management Protocol). The architecture has two parties: the customer premises equipment (CPE) and the operator's Auto Configuration Server (ACS). Communication uses SOAP/XML messages over HTTP or HTTPS, and the CPE always opens the session. It sends an Inform message to the ACS at first boot, at configured intervals (periodic inform) or when an event occurs.

Within that session the ACS issues remote procedure calls such as GetParameterValues, SetParameterValues, Download (firmware upgrade), Reboot and FactoryReset. Device parameters are addressed through standard data models: TR-098 (InternetGatewayDevice) for older home gateways and TR-181 (Device:2) for current devices. When the ACS needs a session without waiting for the next Inform, it uses the Connection Request mechanism. TR-111 (STUN) and XMPP-based methods cover devices behind NAT.

With TR-069, ISPs configure a new subscriber device the moment it is unboxed (zero-touch provisioning). PPPoE credentials, Wi-Fi name and password, VoIP account and firmware version are all pushed remotely. Support teams can see the subscriber's optical signal level, connected devices and line status, and many faults get solved without a truck roll.

ACS communication must be protected with HTTPS and strong per-device credentials. The management interface commonly listens on TCP port 7547, and leaving it exposed to the internet is a serious risk, as attacks that hit hundreds of thousands of home routers in 2016 demonstrated. The Broadband Forum's successor is TR-369 USP (User Services Platform), yet most devices in the field are still managed with TR-069.

---
Canonical: https://internetten.com.tr/en/glossary/tr-069