Everything you need to know

A self-hosted TR-069 / GenieACS portal for ISPs and GPON operators. It runs on your own server under your own brand and gives your NOC one place to see, fix and provision every subscriber ONT.

Basic & Pro: Ubuntu 24.04 LTS (64-bit), 16 CPU cores, 16 GB RAM, 200 GB disk (SSD recommended), Bare-metal or VM.

Big Bash: sized with you — suggested 24+ cores, 32+ GB RAM, 500 GB+ SSD.

• Inbound TCP 80 and 443 — portal and Let's Encrypt certificate
• Inbound TCP 7547 — TR-069 / CWMP, the ACS port ONTs connect to
• DNS A record for your portal domain pointing at the server
• Outbound 443 for package installation and certificate issuance

1. Your licence is issued and a domain-locked install link is emailed to you.
2. Run the one-line command from the email on the fresh server as root.
3. It installs MongoDB, GenieACS, the branded portal, nginx and a Let's Encrypt certificate.
4. Sign in at https://your-domain/ with the admin account created during installation.

Set each ONT's ACS URL to http://your-domain:7547/ (on the OLT profile or the ONT itself). ONTs appear on their first contact — in Provisioning as waiting, and in Subscribed ONTs.

Basic: Subscribed ONTs, ONT 360 view, NOC, Live traffic and user management.
Pro: everything in Basic plus ONT 360 tools (health check, Wi-Fi settings, ping / traceroute, notes) and Wi-Fi Insight.
Big Bash: everything, including zero-touch provisioning with the WAN editor, WhatsApp alerts, bulk actions, audit log and full white-label branding.

See the full comparison.

Every licence is valid for 12 months. Reminder emails are sent 30, 7 and 1 day before expiry and on the day it expires. A lapsed licence locks the portal; data and settings are kept and it unlocks as soon as it is renewed.

Yes. Moving from Basic to Pro or Big Bash switches the extra modules on remotely — no reinstall and no data migration.

Your portal keeps a connection to the publisher. When a release is published for you it is downloaded, verified with SHA-256 and installed within seconds. If ever needed, your site can also be moved back to an earlier release.

Device ID, PPPoE users and model; last contact and uptime; WAN IP, status and DNS; Rx / Tx optical power, temperature and voltage; live and lifetime traffic; Wi-Fi radios and connected devices. Buttons run a full scan, refresh WAN or Wi-Fi, or reboot (with confirmation).

Each device also shows link speed, data used and advice.

Reachability, fibre signal (Rx), laser (Tx), temperature, internet session, stability, device load and Wi-Fi — then gives a one-line verdict such as "line is healthy — complaints are most likely Wi-Fi coverage".

Admin can do everything including users and settings. Support can act on its assigned ONTs — scans, reboots, tools, Wi-Fi, provisioning. View only sees its assigned ONTs without any action buttons. Any user can be limited to a chosen set of ONTs.

Every sign-in and every change — scans, refreshes, reboots, Wi-Fi changes, tests, notes, provisioning, WAN changes, user changes and settings — with time, user, role and detail.

New ONTs wait on the Provisioning page. An operator opens one, reviews the proposed WAN, Wi-Fi and management settings, edits them and presses Provision now. Each step is sent to the ONT and confirmed; nothing is pushed without that confirmation.

PPPoE or IPoE; Route or Bridge; service types INTERNET, VOIP, IPTV, OTHER, TR069 and their combinations; IPv4, IPv6 or both; VLAN ID with 802.1p; MRU / MTU; DHCP or static IP for IPoE; NAT; and binding to LAN1–4 and SSID1–8.

No. The TR-069 management WAN is always locked — it cannot be edited or removed, and a second TR-069 WAN cannot be created. A VLAN already in use by another WAN is refused.

Every change is read back from the ONT. If any value differs, the step fails and names it; a new WAN that failed is removed again so no half-made connections are left. Steps already marked ✓ stay applied.

1. Create a WhatsApp Business app in Meta Business Manager and note the phone number ID.
2. Create a permanent access token for a system user.
3. Create a Utility template whose body is only {{1}} and wait for approval.
4. In Settings enter the ID, token, template and recipients, then press Save & send test.

ONT offline and back online; low or suddenly dropping fibre signal and its recovery; and new ONT provisioned. Checks run every 2 minutes; bursts of more than 5 alerts are grouped into one message.

Check the ACS URL is exactly http://your-domain:7547/, that port 7547 is open end-to-end and that the ONT can resolve your domain.

Actions need the ACS to reach the ONT (connection request). If the ONT is behind NAT, the action runs on its next check-in.

The licence has expired, was suspended, or the server could not reach the publisher for 72 hours. Renew or contact us.

The template must be approved, of type Utility, with body {{1}}; the token must be permanent; recipients must be in international format (e.g. 923001234567).