FusionPBX thiab ACL

Kuv tsab xov xwm tsis yog tag nrho cov lus piav qhia ntawm cov khoom, tab sis tsuas yog ib qho kev qhia me me ntawm cov ntawv tshaj tawm zoo "FusionPBX, lossis zoo dua, FreeSWITCH." Nws zoo nkaus li kuv tias lub ntsiab lus ntawm ACL hauv FusionPBX tsis tau them zoo heev. Kuv mam li sim ua qhov sib txawv no raws li kuv tus kheej kev paub nrog FreeSWITCH/FusionPBX.

Thiab yog li ntawd, peb muaj FusionPBX ntsia nrog tus lej sau npe 1010 nyob rau hauv lub domain.local domain thiab ib txoj kev teeb tsa rau sab nraud hu rau lub nroog. Peb siv ACLs los tiv thaiv peb lub xov tooj los ntawm kev hu tsis raug cai uas yuav nyiag peb cov nyiaj. Cov. Tso cai hu tawm tsuas yog los ntawm cov tes hauj lwm uas tau piav qhia hauv ACL. Thiab ntawm no koj xav tau kev nkag siab meej meej txog yuav ua li cas ACL ua haujlwm hauv FusionPBX, nws cov yam ntxwv, logic thiab nws cov ntsiab lus khi.

Ib yam li tus sau kev hwm ntawm tsab xov xwm saum toj no, kuv kuj tau nqis tes rau txhua qhov yuam kev cuam tshuam nrog ACL.

Kuv mam li pib nrog SibProfiles.
Ob qho profile (Kuv yuav hu lawv tias), sab hauv thiab sab nraud, yog nyob rau hauv Public ntsiab lus, thiab qhov no tsis yog xwm txheej. Cov naj npawb tau sau npe hauv qhov profile sab hauv, yog li peb yuav ua tib zoo mloog nws. Hauv qhov profile sab hauv, ACL daim ntawv teev npe yog khi li thov-inbound-acl. Nws yog kab no uas yog lub luag haujlwm rau kev ua haujlwm ntawm ACL ntawm qib profile. Qhov ntawd yog txhua yam rau tam sim no nrog cov profiles.

cov ntsiab lus teb

Cov ntsiab lus, ntawm lwm yam, yog siv hauv kev hu xov tooj. Txhua txoj kev nkag los yog khi rau Public ntsiab lus.

Outgoing (rau lub nroog, mus rau xov tooj ntawm tes, intercity, thoob ntiaj teb, thiab lwm yam) txoj kev yog (los ntawm lub neej ntawd) nyob rau hauv lub ntsiab lus teb ntawm lub npe sau (cia hu nws domain.local).

ACL

Tam sim no cia peb nkag siab ACLs. Los ntawm lub neej ntawd, ib qho tshiab ntsia FusionPBX muaj ob ACLs:

domains default action: deny - nplooj ntawv no yog khi rau hauv qhov profile
lan default action: tso cai

Peb sau npe ib lub network hauv cov npe ACL cov npe (zoo, piv txwv li 192.168.0.0/24), muab qhov kev tso cai rau lub network no, thov reloadacl.

Tom ntej no, peb sau npe lub xov tooj los ntawm lub network no, thiab txhua yam zoo li zoo, ob qho tib si raws li cov lus qhia thiab cov laj thawj.
Peb pib sim, hu rau tus xov tooj sab nraud thiab ... peb tau txais lub khob noom cookie, los yog lub qhov donut. Tam sim no!

Peb pib txheeb xyuas cov cav hauv lub console lossis los ntawm Log Viewer FusioPBX.

Peb pom peb qhov kev sib tw:

switch_channel.c:1104 New Channel sofia/internal/[email protected]

Peb pom ACL triggered:

sofia.c:10208 IP 192.168.0.150 Approved by acl "domains[]". Access Granted.

Thiab ntxiv:

mod_dialplan_xml.c:637 Processing 1010 <1010>->98343379xxxx in context public
switch_core_state_machine.c:311 No Route, Aborting 
switch_core_state_machine.c:312 Hangup sofia/internal/[email protected] [CS_ROUTING] [NO_ROUTE_DESTINATION] 

Tsis muaj txoj kev! Txawm hais tias peb txoj kev ncaj ncees sau cia.

Cov lus teb yog qhov yooj yim.

Hu tuaj lawm. ACL nco nws. Thiab txij li thaum ACL raug khi rau qhov profile sab hauv, thiab qhov profile no yog nyob rau hauv cov ntsiab lus pej xeem, FreeSWITCH ncaj ncees saib ntawm kev coj ua hauv pej xeem cov ntsiab lus. Tab sis nyob rau hauv cov ntsiab lus pej xeem tsuas muaj kev nkag mus, thiab lub kaw lus ncaj ncees qhia peb tias tsis muaj txoj hauv kev mus rau lub nroog.

Muaj tsawg kawg yog ob txoj hauv kev tawm ntawm qhov xwm txheej no.

  1. Txuas qhov ACL no tsis yog rau qhov profile, tab sis rau tus lej sab hauv nws tus kheej. Qhov no tej zaum yuav yog qhov tseeb tshaj plaws los daws nws, vim ... Nws yog qhov zoo dua los khi ACLs ze li sai tau rau Extension rau kev kho kom zoo dua. Cov. Koj tuaj yeem tso npe rau qhov chaw nyob tshwj xeeb / qhov chaw nyob hauv xov tooj ntawm lub xov tooj uas nws tuaj yeem hu xov tooj tawm. Qhov tsis zoo ntawm qhov kev xaiv no yog tias txhua qhov Extension yuav tau ua qhov no.
  2. Kho ACL kom nws ua haujlwm kom raug ntawm qib profile. Kuv xaiv qhov kev xaiv no, vim hais tias ntxiv lub network ib zaug rau ACL zoo li yooj yim rau kuv dua li sau npe rau hauv txhua qhov Extension. Tab sis qhov no yog tshwj xeeb rau kuv txoj haujlwm. Rau lwm txoj haujlwm, yuav xav tau kev txiav txim siab sib txawv.

Yog li. Cia peb kho ACL cov npe raws li hauv qab no:

domains default action: tso cai

Peb sau npe lub network hauv cov npe ACL cov npe:

tsis lees paub 192.168.0.0/24

Peb thov, reloadacl.
Wb sim: hu rau tus xov tooj 98343379xxxx dua thiab... muaj chaw kuaj xyuas... HELLO. Txhua yam ua haujlwm.
Wb pom dab tsi tshwm sim hauv FreeSWITCH:
kev hu pib:

switch_channel.c:1104 New Channel sofia/internal/[email protected]

ACL tsis tau plam:

[DEBUG] sofia.c:10263 IP 192.168.0.150 Rejected by acl "domains". Falling back to Digest auth.

thiab ntxiv:

mod_dialplan_xml.c:637 Processing 1010 <1010>->98343379xxxx in context domain.local
sofia/internal/[email protected] Regex (PASS) [Sity] destination_number(98343379xxxx) =~ /^9(8343[23]d{6})$/ break=on-false 

Cov routing tau ua tiav, thiab tom qab ntawd qhov kev sib txuas tau tsim, uas yog dhau ntawm cov ntsiab lus.

Yog tias peb hloov lub network chaw nyob hauv ACL, tab sis tau txais daim duab los ntawm kev sim thawj zaug, i.e. ACL yuav plam kev hu thiab txoj kev yuav hais NO_ROUTE_DESTINATION.

Qhov ntawd yog txhua yam kuv xav ntxiv rau ACL FusionPBX.

Kuv vam tias nws yuav pab tau rau ib tug neeg.

Tau qhov twg los: www.hab.com

Ntxiv ib saib