How customers change their WiFi from the portal (TR-069)

Who does this: Customers (portal); support staff link and check routers
Permission: Customers: portal login. Staff: “Edit details and connection (PPPoE password, static IP, MAC lock), reset the MAC” for the Home router page

Screenshot coming soonNo home router is connected to the demo server, so this screen is not shown yet.

Steps

Server operator: run GenieACS (TR-069 ACS) and set its NBI address (ACS_NBI_URL) in saRa; point the customers' fibre routers at the ACS address on port 7547.
Without it the subscriber page says TR-069 is off and WiFi requests become complaints.
Staff: open a subscriber's profile → Home router (TR-069). saRa looks the router up by the PPPoE username it reports; use Link a device id → Link when it cannot find it, Unlink to undo, and Refresh from router to ask it to check in.
The card shows Router, Device id, Serial, Software, Last inform and the WiFi networks, and the list of WiFi changes.
Customer: sign in to the portal and open WiFi. Enter New WiFi password twice (8 to 63 characters), optionally New WiFi name (optional), and click Apply.
Show the passwords reveals what was typed. After the change every device on the WiFi disconnects and must reconnect.
If the router cannot be reached or found the page offers Ask us to change it, which opens a complaint.
Never write a password in a complaint: staff call to agree it.

What saRa does

saRa sends the change to GenieACS and the router applies it the next time it checks in (usually within 5 minutes). Recent changes on the page shows its status. Passwords are not kept or logged by saRa.

Good to know

Today it reads model, firmware and WiFi; the owner's ONTs are Huawei.
Port 7547 is opened in the firewall only to the router and the subscriber pools.