The short answer
TR-069 is a Broadband Forum standard (also called CWMP) that lets an ISP manage the routers and ONTs in customers’ homes from a central server called an ACS. Devices check in with the ACS regularly; the ACS can read their status and change settings such as the WiFi name and password, restart them or update firmware, without a technician visiting.
How TR-069 works
- Each customer router (the CPE) is given the address of your ACS, by hand, by DHCP option or from the factory.
- The CPE opens a session to the ACS and sends an Inform: who it is (serial number, model) and what has changed.
- The ACS replies with any waiting tasks: read these values, set those, reboot, download firmware.
- The CPE does them and reports back. It checks in again on a timer, or immediately if the ACS sends a connection request.
Messages are SOAP over HTTP or HTTPS. The CWMP port on the ACS is commonly 7547.
TR-098 and TR-181: the two data models
Every setting has a path, like a file path. Older devices use the TR-098 model (paths start with InternetGatewayDevice.) and newer ones TR-181 (paths start with Device.). Vendors also add their own paths. A good ACS integration reads both and knows the common vendor variations.
What ISPs use TR-069 for
- Change a customer’s WiFi name and password while they are on the phone.
- Restart a device that has hung.
- See connected devices and fibre (optical) signal levels.
- Push PPPoE credentials to a new router.
- Factory reset or update firmware across many devices.
Each of these used to be a site visit. With TR-069 they are a click from the customer’s page.
Keeping TR-069 safe
- Keep the ACS management API private; only the CWMP endpoint should face routers.
- Use HTTPS and ACS credentials where your devices support them.
- Limit dangerous actions (factory reset, firmware) to senior staff.
- In a shared ACS, make sure each ISP can only see its own customers’ devices.
TR-069 in Wave
Wave connects to a GenieACS server, the leading open-source ACS. Devices are matched to customers by their PPPoE username, others are claimed by serial number, and ISPs only ever see their own customers’ devices. Staff can change WiFi settings, restart devices, see connected devices and fibre signal and push PPPoE logins; owners can also factory reset and update firmware. See TR-069 device management.
Frequently asked questions
What is an ACS in TR-069?
The Auto-Configuration Server: the central server that customer routers check in with and that sends them configuration changes. GenieACS is a popular open-source ACS.
What is the difference between TR-069 and TR-369?
TR-369 (USP) is the Broadband Forum’s newer protocol for device management. TR-069 is older but far more widely supported by routers and ONTs in service today.
Which port does TR-069 use?
Routers usually reach the ACS on port 7547 (CWMP), over HTTP or HTTPS.