A cikin wannan labarin, zan yi ƙoƙarin bayyana mataki-mataki tsarin shigar da uwar garken gwaji don kyakkyawan aiki zuwa cikakkiyar yanayin aiki, da kuma nuna dabaru masu amfani don aiki tare da mikrotik: daidaitawa ta hanyar sigogi, aiwatar da rubutun, sabuntawa, shigar da ƙarin kayayyaki, da sauransu.
Manufar labarin shine don ƙarfafa abokan aiki su daina sarrafa na'urorin sadarwa ta hanyar amfani da rake da crutches, a cikin nau'i na rubutun da aka rubuta, Dude, Mai yiwuwa, da dai sauransu. murabba'ai.
0. Zabi
Me yasa freeacs kuma ba genie-acs da aka ambata a ciki ba , yaya fiye da rai?
Domin bisa ga genie-acs tare da mikrotik akwai wallafe-wallafen Mutanen Espanya. Ga su nan и daga MUM bara. Hotunan autocaricatures a kan nunin faifai suna da kyau, amma ina so in rabu da manufar rubutun rubutun, don gudanar da rubutun, don gudanar da rubutun ...
1. Sanya freeacs
Za mu shigar da shi a cikin Centos7, kuma tun da na'urorin suna watsa bayanai da yawa, kuma ACS yana aiki tare da bayanan bayanai, ba za mu kasance masu haɗama da albarkatu ba. Don aikin jin daɗi, za mu ware 2 CPU cores, 4GB RAM da 16GB na sauri ssd raid10 ajiya. Zan shigar da freeacs a cikin akwati na Proxmox VE lxc, kuma kuna iya aiki a cikin kowane kayan aiki da ya dace da ku.
Tabbatar saita lokacin daidai akan injin ACS ɗin ku.
Tsarin zai zama gwaji, don haka ba za mu raba gashi ba kuma kawai amfani da rubutun shigarwa mai kyau da aka bayar kamar yadda yake.
wget https://raw.githubusercontent.com/freeacs/freeacs/master/scripts/install_centos.sh
chmod +x install_centos.sh
./ install_centos.shDa zaran an kammala rubutun, zaku iya shiga cikin keɓancewar yanar gizo ta hanyar IP na injin, tare da bayanan admin/freeacs.
Wannan shi ne irin wannan kyakkyawan karamin karamin abu, da kuma yadda sanyi da sauri komai ya juya
2. Saitin farko na freeacs
Babban sashin gudanarwa na ACS shine naúrar ko CPE (Kayan Kayayyakin Kasuwanci). Kuma mafi mahimmancin abin da muke buƙatar sarrafa raka'a shine Nau'in su na Raka, watau. samfurin kayan aiki wanda ke bayyana saitin sigogi masu daidaitawa na naúrar da software. Amma yayin da ba mu san yadda ake ƙirƙirar sabon Nau'in Nau'in da kyau ba, zai fi kyau mu tambayi sashin da kansa game da shi ta hanyar kunna Yanayin Ganewa.
Wannan yanayin ba za a iya amfani da shi ba a samarwa, amma muna buƙatar fara injin da wuri-wuri kuma mu ga iyawar tsarin. Ana adana duk saitunan asali a /opt/freeacs-*. Saboda haka, mun bude
vi /opt/freeacs-tr069/config/application-config.conf , mun samu
discovery.mode = falsekuma canza zuwa
discovery.mode = trueBugu da ƙari, muna so mu ƙara girman girman fayil ɗin da nginx da mysql za su yi aiki da su. Don mysql, ƙara layin zuwa /etc/my.cnf
max_allowed_packet=32M, kuma don nginx, ƙara zuwa /etc/nginx/nginx.conf
client_max_body_size 32m;zuwa sashen http. In ba haka ba, za mu iya yin aiki tare da firmware ba fiye da 1M ba.
Mun sake yi, kuma muna shirye don yin aiki tare da na'urorin.
Kuma a matsayin na'ura (CPE) za mu sami jariri mai aiki tukuru .
Kafin yin haɗin gwaji, yana da kyau a daidaita CPE da hannu zuwa mafi ƙarancin tsarin aiki don kada sigogin da kuke son daidaitawa a nan gaba ba su da komai. Don na'ura mai ba da hanya tsakanin hanyoyin sadarwa, mafi ƙarancin abin da za ku iya yi shine kunna abokin ciniki dhcp akan ether1, shigar da fakitin abokin ciniki tr-069 kuma saita kalmomin shiga.
3. Haɗa Mikrotik
Yana da kyau a haɗa duk raka'a ta amfani da ingantacciyar lambar serial azaman shiga. Sa'an nan duk abin da zai bayyana a gare ku a cikin rajistan ayyukan. Wani yana ba da shawara ta amfani da WAN MAC - kar ku yarda da shi. Idan wani ya yi amfani da biyun shiga/wuce wanda ya zama gama gari ga kowa, ka guje su.
Bude log tr-069 don saka idanu "tattaunawa"
tail -f /var/log/freeacs-tr069/tr069-conversation.logBude akwatin wins, abin menu na TR-069.
URL na ACS: http://10.110.0.109/tr069/prov (maye gurbinsu da IP)
Sunan mai amfani: 9249094C26CB (kwafi lambar serial daga tsarin> na'ura mai ba da hanya tsakanin hanyoyin sadarwa)
Kalmar wucewa: 123456 (ba a buƙata don ganowa, amma ana buƙata)
Ba mu canza tazarar sanarwa na lokaci-lokaci. Za mu fitar da wannan saitin ta hanyar ACS
A ƙasa akwai saitunan farawa na nesa na haɗin gwiwa, amma ba zan iya samun mikrotik yin aiki tare da wannan ba. Ko da yake m request yana aiki daga cikin akwatin tare da wayoyi. Dole ne mu gane shi.
Bayan danna maɓallin Aiwatar, za a musanya bayanai a cikin tashar, kuma a cikin gidan yanar gizon Freeacs za ku iya ganin na'ura mai ba da hanya tsakanin hanyoyin sadarwa tare da Nau'in Nau'in Nau'in "hAPaclite" ta atomatik.
An haɗa na'ura mai ba da hanya tsakanin hanyoyin sadarwa. Kuna iya duba cikin Nau'in Nau'in da aka ƙirƙira ta atomatik. Budewa Easy Provisioning > Unit Type > Unit Type Overview > hAPaclite. Me babu! Yawan adadin sigogi 928 (Na duba cikin harsashi). Ko yana da yawa ko kadan, za mu gane shi daga baya, amma a yanzu za mu duba cikin sauri. Wannan shine ma'anar Unit Type. Wannan jerin sigogi ne masu goyan baya tare da maɓalli amma babu ƙima. An saita ƙimar a cikin matakan da ke ƙasa - Bayanan martaba da Raka'a.
4. Sanya Mikrotik
Lokaci yayi da zazzagewa Wannan littafin jagora na 2011 yana kama da kwalban giya mai kyau, tsofaffi. Mu bude mu bar shi ya numfasa.
Kuma mu kanmu, a cikin mu'amalar yanar gizo, danna kan fensir kusa da naúrar mu kuma je zuwa yanayin daidaitawar naúrar. Ga alama kamar haka:
Bari mu ɗan kalli abin da ke da ban sha'awa a wannan shafi:
Toshe na'urar daidaitawa
- Bayanan martaba: Wannan shine bayanin martaba a cikin Nau'in Unit. Matsayin matsayi shine kamar haka:
UnitType > Profile > Unit. Wato, zamu iya ƙirƙirar, alal misali, bayanan martabahAPaclite > hotspotиhAPaclite > branch, amma a cikin samfurin na'urar
Toshe bayarwa tare da maɓalli
Bayanan kayan aiki suna nuna cewa duk maɓallan da ke cikin toshewar Bayarwa na iya yin amfani da tsarin nan take ta ConnectionRequestURL. Amma, kamar yadda na fada a sama, wannan baya aiki, don haka bayan danna maɓallan za ku buƙaci sake kunna abokin ciniki tr-069 akan mikrotik don fara tanadin da hannu.
- Freq / Yada: Sau nawa a mako don sadar da daidaitawa ±% don rage nauyin akan uwar garke da tashoshin sadarwa. Ta hanyar tsoho shine 7/20, i.e. kowace rana ± 20% da alamar yadda yake cikin daƙiƙa. Babu ma'ana a canza mitar isarwa tukuna, saboda... za a sami ƙarin amo a cikin rajistan ayyukan kuma ba koyaushe za a yi amfani da saitunan kamar yadda aka zata ba
Bada tarihin toshe (awa 48 da suka wuce)
- A cikin bayyanar, labarin kamar labari ne, amma ta danna kan taken ana kai ku zuwa kayan aikin bincike mai dacewa, tare da regexp da abubuwan ban sha'awa.
toshe ma'auni
Mafi girma kuma mafi mahimmancin toshe, inda, a gaskiya, an saita sigogi na ɗayan da aka ba da kuma karantawa. Yanzu muna ganin kawai mafi mahimmancin sigogi na tsarin, ba tare da wanda ACS yayi aiki tare da naúrar ba zai yiwu ba. Amma mun tuna cewa a cikin Unit Type muna da su - 928. Bari mu dubi duk ma'anar kuma mu yanke shawarar abin da kowa zai ci tare da Mikrotik.
4.1 Karatun sigogi
A cikin blocking Provisioning, danna maɓallin Karanta duk. Akwai jan rubutu a cikin toshe. Wani shafi zai bayyana a hannun dama CPE (na yanzu) darajar. A cikin sigogin tsarin, ProvisioningMode ya canza zuwa READALL.
Kuma... babu abin da zai faru sai sako a cikin System.X_FREEACS-COM.IM.Sako Kick failed at....
Sake kunna abokin ciniki na TR-069 ko sake kunna na'ura mai ba da hanya tsakanin hanyoyin sadarwa, kuma ci gaba da sabunta shafin mai bincike har sai kun sami sigogin dama a cikin fara'a mai launin toka.
Idan wani yana son shan tsohuwar giya, an kwatanta wannan yanayin a cikin jagorar azaman 10.2 Yanayin dubawa. Yana kunna kuma yana aiki ɗan bambanta, amma ainihin an kwatanta shi da kyau
Yanayin READALL zai kashe kansa bayan minti 15, kuma za mu yi ƙoƙari mu gano abin da ke da amfani a nan, da abin da za a iya gyara "a kan tashi" yayin da muke cikin wannan yanayin.
Kuna iya canza adiresoshin IP, kunna / musaki musaya, dokokin tacewar zaɓi, waɗanda ke da sharhi (in ba haka ba yana da cikakken rikici), Wi-Fi, da sauransu.
Wato, har yanzu bai yiwu a daidaita mikrotik a hankali ta hanyar amfani da TR-069 ba. Amma kuna iya saka idanu sosai. Akwai ƙididdiga akan musaya da matsayinsu, ƙwaƙwalwar ajiya kyauta, da sauransu.
4.2 Isar da sigogi
Yanzu bari mu yi ƙoƙarin isar da sigogi zuwa na'ura mai ba da hanya tsakanin hanyoyin sadarwa, ta hanyar tr-069, ta hanyar "na halitta". Wanda aka azabtar na farko zai zama Device.Na'urarInfo.X_MIKROTIK_SystemIdentity. Mun same shi a cikin sigogin Duk naúrar. Kamar yadda kuke gani, ba a ƙayyade ba. Wannan yana nufin cewa kowace naúrar ita kanta tana iya samun kowane Shafi. Ya isa yin haƙuri da wannan!
Danna akwatin akwati a cikin ginshiƙi ƙirƙira, saita sunan Mr.White kuma danna maɓallin Sabuntawa. Kun riga kun yi hasashen abin da zai faru a gaba. A lokacin zaman sadarwa na gaba tare da hedkwatar, dole ne na'ura mai ba da hanya tsakanin hanyoyin sadarwa ta canza Identity.
Amma wannan bai ishe mu ba. Ma'auni kamar Identity yana da kyau koyaushe a kasance a hannu yayin neman naúrar da ake so. Danna sunan siga kuma duba akwatunan rajistan nuni (D) da Neman (S). Maɓallin sigar yana canzawa zuwa RWSD (Ka tuna, sunaye da maɓallai an saita su a matakin Nau'in Nau'in mafi girma)
Ƙimar yanzu ba wai kawai tana nunawa a cikin jeri na bincike na gabaɗaya ba, har ma akwai don bincike a ciki Support > Search > Advanced form
Mun fara tanadi kuma mu dubi Identity. Sannu Mr. White! Yanzu ba za ku iya canza ainihin ku ba yayin da tr-069client ke gudana
4.3 Gudanar da rubutun
Tun da mun gano cewa ba za mu iya rayuwa ba tare da su ba, bari mu aiwatar da su.
Amma kafin mu fara aiki tare da fayiloli, muna buƙatar gyara umarnin public.url cikin fayil /opt/freeacs-tr069/config/application-config.conf
Har yanzu muna da saitin gwaji da aka shigar tare da rubutu ɗaya. Kun manta?
# --- Public url (used for download f. ex.) ---
public.url = "http://10.110.0.109"
public.url: ${?PUBLIC_URL}Muna sake kunna ACS kuma kai tsaye zuwa Files & Scripts.
Amma abin da ke buɗe mana yanzu yana cikin nau'in Unit, watau. a duniya zuwa ga duk masu amfani da hAP ac Lite, ya zama na'ura mai ba da hanya tsakanin hanyoyin sadarwa, hotspot ko capsman. Ba mu buƙatar irin wannan babban matakin tukuna, don haka kafin yin aiki tare da rubutun da fayiloli, ya kamata mu ƙirƙiri bayanin martaba. Kuna iya kiran wannan "wajibi" na na'urar.
Mu sanya jaririnmu ya zama uwar garken lokaci. Matsayi mai kyau tare da fakitin software daban da ƙaramin adadin sigogi. Muje zuwa Easy Provisioning > Profile > Create Profile kuma ƙirƙirar bayanin martaba a Nau'in Unit: hAPaclite sabar lokaci. Ba mu da wasu sigogi a cikin bayanan martaba na asali, don haka babu abin da za a kwafa Kwafi sigogi daga: "Kada a kwafi..."
Babu sigogi a nan tukuna, amma zai yiwu a saita waɗanda za mu so mu gani daga baya akan sabar lokacin mu, waɗanda aka haɗa su daga hAPaclite. Misali, gabaɗayan adiresoshin sabar NTP.
Mu je kan tsarin naúrar mu matsar da shi zuwa bayanin martabar sabar lokaci
A karshe za mu je Files & Scripts, Yi rubutun, kuma a nan buns masu dacewa masu ban mamaki suna jiran mu.
Domin aiwatar da rubutun akan raka'a, muna buƙatar zaɓar Nau'in: TR069_SCRIPT а sunan и Sunan Target dole ne a sami tsawo
A lokaci guda, don rubutun, ba kamar software ba, kuna iya ko dai zazzage fayil ɗin da aka ƙera ko kuma kawai ku rubuta / gyara shi a cikin filin. Content. Bari mu yi ƙoƙari mu rubuta shi a can.
Kuma domin ku iya ganin sakamakon nan da nan, bari mu ƙara vlan zuwa na'ura mai ba da hanya tsakanin hanyoyin sadarwa akan ether1
/interface vlan
add interface=ether1 name=vlan1 vlan-id=1
Shiga ciki, latsa Upload kuma kun gama. Rubutun mu vlan1.alter jira a cikin fuka-fuki.
To, mu tafi? A'a. Muna kuma buƙatar ƙara group don bayanin martabarmu. Ba a haɗa ƙungiyoyi a cikin tsarin kayan aiki ba, amma ana buƙatar su nemo raka'a a cikin UnitType ko Profile kuma ana buƙatar aiwatar da rubutun ta hanyar Samar da Babba. Yawanci, ƙungiyoyi suna da alaƙa da wurare kuma suna da tsarin gida. Mu yi rukuni na Rasha.
Kuna iya tunanin kawai mun sami damar taƙaita binciken daga "Dukkanin sabar a duniya akan hAPaclite" zuwa "Dukkanin sabar a Rasha akan hAPaclite". Har yanzu akwai manyan abubuwan ban sha'awa tare da ƙungiyoyi, amma ba mu da lokaci. Mu je zuwa rubutun.
Advanced Provisioning > Job > Create Job
Tun da muna, bayan duk, a cikin Advanced yanayin, a nan za ka iya ƙayyade gungun yanayi daban-daban don fara aiki, hali idan akwai kurakurai, maimaituwa da ƙarewar lokaci. Ina ba da shawarar karanta duk wannan a cikin litattafai ko tattauna shi daga baya lokacin aiwatar da shi a cikin samarwa. A yanzu, kawai za mu sanya n1 a cikin Dokokin Tsaya domin aikin zai tsaya da zarar an kammala shi a rukuninmu na farko.
Mun cika bayanan da ake buƙata, kuma abin da ya rage shine ƙaddamar da shi!
Danna START kuma jira. Yanzu ma'aunin na'urorin da rubutun da ba shi da kyau ya kashe zai yi aiki da sauri! Tabbas ba haka bane. Irin waɗannan ayyuka suna ɗaukar lokaci mai tsawo, kuma wannan shine bambancinsu da rubutun, Mai yiwuwa, da dai sauransu. Raka'a da kansu suna neman ayyuka a kan jadawalin ko yayin da suke bayyana akan hanyar sadarwa, ACS tana lura da waɗanne raka'a sun riga sun karɓi ayyuka, da yadda suka kammala, kuma suna rubuta wannan a cikin sigogin naúrar. Akwai guda 1 a group din mu, idan kuma 1001 ne admin zai kaddamar da wannan aiki ya tafi kamun kifi.
Ku zo. Sake yi na'ura mai ba da hanya tsakanin hanyoyin sadarwa ko sake kunna abokin ciniki na TR-069. Komai yakamata ya tafi daidai kuma Mr.White zai karɓi sabon vlan. Kuma aikin mu na Tsaida ƙa'idar zai canza zuwa matsayin DAKATA. Wato har yanzu ana iya sake farawa ko canza shi. Idan ka danna FINISH, aikin za a ajiye shi
4.4 Ana ɗaukaka software
Wannan batu ne mai mahimmanci, tunda Mikrotik firmware modular ne, amma ƙara kayayyaki baya canza fasalin firmware gaba ɗaya na na'urar. ACS ɗinmu na al'ada ne kuma bai saba da wannan ba.
Yanzu za mu yi shi cikin sauri & datti salon da tura NTP module a cikin janar firmware nan da nan, amma da zaran an sabunta sigar a kan na'urar, ba za mu iya ƙara wani module a cikin wannan hanya.
A cikin samarwa, yana da kyau kada a yi amfani da irin wannan dabarar, kuma shigar da kayayyaki waɗanda ke da zaɓi don Nau'in Unit kawai ta amfani da rubutun.
Don haka, abu na farko da ya kamata mu yi shi ne shirya fakitin software na nau'ikan da ake buƙata da tsarin gine-gine, da sanya su a kan sabar gidan yanar gizo mai isa. Don gwaji, duk wanda Mr.White zai iya kaiwa zai yi gwajin, amma don samarwa yana da kyau a haɗa madubi mai sabuntawa ta atomatik na software da ake buƙata, wanda ba shi da ban tsoro don sakawa a yanar gizo.
Muhimmanci! Kar a manta a koyaushe haɗa kunshin abokin ciniki tr-069 a cikin sabuntawar ku!
Kamar yadda ya fito, tsawon hanyar zuwa fakiti yana da mahimmanci! Lokacin da na gwada amfani da wani abu kamar http://192.168.0.237/routeros/stable/mipsbe/routeros-mipsbe-6.45.6.npk, mikrotik ya faɗi cikin haɗin keken keke tare da albarkatu, yana aika maimaitawa COMPLETE zuwa log ɗin tr-069. Kuma na kashe wasu ƙwayoyin jijiyoyi don gano abin da ba daidai ba. Don haka, a yanzu bari mu sanya shi a tushen, har sai mun gano
Don haka yakamata mu sami fayilolin npk guda uku da ake samu ta hanyar http. Ya zamana haka
http://192.168.0.241/routeros-mipsbe-6.45.6.npk
http://192.168.0.241/routeros/stable/mipsbe/ntp-6.45.6-mipsbe.npk
http://192.168.0.241/routeros/stable/mipsbe/tr069-client-6.45.6-mipsbe.npkYanzu ana buƙatar tsara wannan zuwa fayil ɗin xml tare da FileType = "1 Firmware Haɓaka Hoton", wanda za mu ciyar da shi zuwa Mikrotik. Bari sunan ya zama ros.xml
Muna yin shi bisa ga umarnin daga :
<upgrade version="1" type="links">
<config />
<links>
<link>
<url>http://192.168.0.241/routeros-mipsbe-6.45.6.npk</url>
</link>
<link>
<url>http://192.168.0.241/ntp-6.45.6-mipsbe.npk</url>
</link>
<link>
<url>http://192.168.0.241/tr069-client-6.45.6-mipsbe.npk</url>
</link>
</links>
</upgrade>Akwai rashi a bayyane Username/Password don samun dama ga uwar garken zazzagewa. Kuna iya ƙoƙarin shigar da wannan kamar yadda yake cikin sakin layi na A.3.2.8 na yarjejeniya tr-069:
<link>
<url>http://192.168.0.237/routeros/stable/mipsbe/ntp-6.45.6-mipsbe.npk</url>
<Username>user</Username>
<Password>pass</Password>
</link>Ko tambayi jami'an Mikrotik kai tsaye game da iyakar tsawon hanyar zuwa * .npk
Mu je wuraren da muka sani Files & Scripts, kuma ƙirƙirar fayil ɗin SOFTWARE a can tare da name:ros.xml, Sunan Target:ros.xml da version:6.45.6
Hankali! Dole ne a fayyace sigar nan a daidai tsarin da aka nuna ta akan na'urar kuma a wuce ta cikin siga System.X_FREEACS-COM.Device.SoftwareVersion.
Zaɓi fayil ɗin xm ɗin mu don loda kuma kun gama.
Yanzu muna da hanyoyi da yawa don sabunta na'urar. Ta hanyar Wizard a cikin babban menu, ta hanyar Advanced Provisioning da ayyuka tare da nau'in SOFTWARE, ko kuma kawai je zuwa tsarin naúrar kuma danna haɓakawa. Bari mu zaɓi hanya mafi sauƙi, in ba haka ba labarin ya riga ya kumbura.
Muna danna maɓallin, ƙaddamar da tanadi kuma kun gama. An kammala shirin gwajin. Yanzu za mu iya yin ƙarin tare da mikrotik.
5. Kammalawa
Lokacin da na fara rubutawa, na fara so in bayyana haɗin wayar IP, kuma na yi amfani da misalinta don bayyana yadda za ta yi sanyi lokacin da tr-069 ke aiki cikin sauƙi da wahala. Amma sai, yayin da na ci gaba da tona cikin kayan, na yi tunanin cewa ga waɗanda suka haɗa Mikrotik, babu wayar da za ta firgita don nazarin zaman kanta.
A ka'ida, Freeacs, wanda muka gwada, za a iya amfani da shi a cikin samarwa, amma don wannan kuna buƙatar saita tsaro, SSL, kuna buƙatar saita Mikrotik don daidaitawa ta atomatik bayan sake saiti, kuna buƙatar gyara daidai adadin Nau'in Unit, bincika aikin sabis na gidan yanar gizo da harsashi fusion, da ƙari mai yawa. Gwada, ƙirƙira, kuma rubuta mabiyi!
Kowa, na gode da kulawar ku! Zan yi farin cikin ganin gyara da sharhi!
Jerin abubuwan da aka yi amfani da su da hanyoyin haɗin kai masu amfani:
source: www.habr.com