[Modem Request] Netgear C7000v2 (supersedes #61)

[Anthranilic]

Modem Model

Netgear C7000v2

Manufacturer

Netgear

Firmware Version

V1.03.08 (Hardware Version: 2.01)

Internet Service Provider (ISP)

Comcast/Xfinity

Does your modem require login?

Yes - requires username/password

HAR Capture File

c7000v2.sanitized.har.gz

Additional Information

Supersedes #61 (older issue from same operator, previous integration
architecture). Per maintainer comment on #61 (2026-04-29), refiling fresh
against the v3.14 schema with current firmware and current capture
tooling.

Bridge mode (router functions disabled). Modem-side UI at 192.168.100.1.

Authentication: HTTP Basic Auth (native browser popup, not form-based).
Default username: admin. The capture shows Authorization: Basic headers
on 32 of 33 entries — Basic Auth is re-sent on every request, no session
cookies, no login POST, no HNAP.

Status pages observed:

• /DocsisStatus.htm — 200, 44979 bytes, contains downstream/upstream
  channel tables with frequency, SNR, power, lock state, BPI+ encryption,
  modem uptime
• /DocsisOffline.htm — 200, 4157 bytes, also present (alternate status
  page; both exist on this firmware)
• /DashBoard.htm, /RouterStatus.htm, /RouterMode.htm, /eventLog.htm
  also captured

HA integration: not currently installed because config flow fails at
login. With custom_components.cable_modem_monitor at DEBUG, the
collector returns:

WARN collector: 401 on /DocsisStatus.htm [C3700] — credentials rejected
ERROR config_flow: Validation failed: signal=CollectorSignal.LOAD_AUTH

Suggests the C7000v2 fingerprint matches the C3700 profile (likely
because both expose /DocsisStatus.htm) but the auth implementation
differs enough to 401. Browser login with the same credentials succeeds,
so credentials and reachability are not the issue.

PII note: I used a custom har-capture --patterns file to redact the
Netgear modem serial format ([0-9][A-Z]{2}[0-9]{4}[A-Z0-9]{6}, 13 chars)
which the built-in patterns missed. Final capture has 1700 auto-redactions

• 16 user-confirmed redactions, including 3 serials.

Three related upstream bugs filed against solentlabs/har-capture during this submission:

• Auto-redaction misses Netgear modem serial format ([0-9][A-Z]{2}[0-9]{4}[A-Z0-9]{6}) har-capture#49 — auto-redaction misses Netgear modem serial format (root cause of the manual workaround above)
• --patterns JSON loader silently no-ops on \b regex escapes (JSON parses to backspace, not regex word-boundary) har-capture#51 — --patterns JSON loader silently no-ops on \b regex escapes (bit me while building the workaround)
• har-capture get re-prompts to install Chromium on every invocation despite Playwright Chromium being present har-capture#50 — har-capture get re-prompts to install Chromium on every invocation despite Playwright Chromium being present (lower-severity, friction during the four-attempt capture cycle this submission required)

If a draft modem.yaml against the v3.14.0-beta schema would help, happy
to follow up via the AI-Assisted Catalog Contribution path.

Checklist

• I captured using incognito/private browsing (or cleared cookies first)
• I have searched my capture file for my WiFi SSID and password to verify they're not present
• I'm willing to install the beta and confirm whether the parser works on my hardware

[kwschulz]

Thank you for these clearly logged issues. I took a stab at the har-capture fixes as part of refining the underlying architecture, which runs two passes. The first is deterministic, applying domain rules, in this case modem and network device patterns. The second is heuristic, picking up nested passwords. Those are genuinely hard to catch and I'm not aware of another tool that does it. Remote debugging is still my biggest challenge, so hopefully this helps future contributors onboard their modem faster.

I also updated the feature branch. Please give it a try, or wait for beta.4. Once it's working, please download diagnostics from the integration's three dot menu so I have a verification artifact. I use these in the catalog to prove the integration is working on your modem.

[kwschulz]

@Anthranilic beta.5 is out. The auth fix is in this release: the C7000v2 firmware requires every authenticated request to carry both the Authorization header and the XSRF_TOKEN cookie set on the initial GET /. Your HAR showed 32 of 33 authenticated requests doing exactly that, so the catalog entry was updated to match. That should address the 401 you were hitting.

To install: HACS → Cable Modem Monitor → Redownload → select v3.14.0-beta.5.

If the config flow completes, please grab diagnostics from the integration's three-dot menu (Download diagnostics) and attach them here. I use those to mark the entry as verified.

[Anthranilic]

Installed, config flow completed. See diagnostic attached.

config_entry-cable_modem_monitor-01KS471DJVR8ENQ4Q5RWYNTTZ3.json

[kwschulz]

Thanks! Almost there — the uptime value wasn't getting captured, but everything else checks out. I've marked this modem as confirmed. Once beta.6 or later is released, would you mind adding updated diagnostics to this issue? I'll update the verified artifact once that's in.

One thing worth noting in your channel data: downstream channel 9 (597 MHz) is showing SNR of 35.4 dB at QAM256, which is below the 38 dB DOCSIS spec minimum, with a very large uncorrected error count. Likely a connector or splitter issue on that cable run. Channels 17 through 24 also show zero errors, which suggests your ISP recently expanded bonding from 16 to 24 channels without a reboot. Not an integration issue, just something to be aware of.