FusionPBX ndi ACL

Nkhani yanga sikufotokoza kwathunthu za malonda, koma kukonzanso pang'ono kwa zofalitsa zabwino "FusionPBX, kapena kachiwiri-zazikulu, FreeSWITCH". Zikuwoneka kwa ine kuti mutu wa ACL mu FusionPBX sunawululidwe bwino momwemo. Ndiyesera kudzaza kusiyana kumeneku kutengera zomwe ndakumana nazo ndi FreeSWITCH/FusionPBX.

Ndipo kotero, tili ndi FusionPBX yoyika ndi nambala yamkati yolembetsedwa 1010 mu domain.local domain ndi njira yokonzedwera kuyitana kunja kwa mzinda. Timagwiritsa ntchito ACL kuti titeteze mafoni athu kuti tisamayimbe foni osaloledwa omwe angatilande ndalama. Iwo. kuchokera pamanetiweki ofotokozedwa mu ACL amalola mafoni otuluka. Ndipo apa mukufunikira kumvetsetsa bwino momwe ACL imagwirira ntchito mu FusionPBX, mawonekedwe ake, malingaliro ake ndi nangula wake.

Monga wolemba wolemekezeka wa nkhaniyi pamwambapa, ndidapondanso ma rakes onse okhudzana ndi ACL.

Ndiyamba ndi SipProfiles.
Mbiri zonse (ndidzazitcha izo), zonse zamkati ndi zakunja, zili pagulu, ndipo izi sizinangochitika mwangozi. Kulembetsa manambala kumachitika mu mbiri yamkati, ndipo tidzasamalira. Mu mbiri yamkati, madera ACL amamangidwa ngati apply-inbound-acl. Ndi mzere uwu womwe umayang'anira ntchito ya ACL pamlingo wambiri. Pakadali pano, ndizomwe zili ndi mbiri.

Mtheradi

Context imagwiritsidwa ntchito, mwa zina, pakuyimba foni. Njira zonse zomwe zikubwera ndizogwirizana ndi Public.

Njira zotuluka (zopita kumzinda, zam'manja, zamtunda wautali, zapadziko lonse lapansi, ndi zina zilizonse) zili (mwachisawawa) malinga ndi dzina lachidziwitso (tiyeni titchule domain.local).

ACL

Tsopano tiyeni tithane ndi ma ACL. Mwachikhazikitso, FusionPBX yokhazikitsidwa kumene ili ndi ma ACL awiri:

domains zochita zosasintha: kukana - pepala ili likugwirizana ndi mbiri yamkati
lan default action: kulola

M'madomeni a ACL mndandanda, timalemba maukonde (chabwino, mwachitsanzo, 192.168.0.0/24), timapanga chilolezo cha netiweki iyi, timagwiritsa ntchito reloadacl.

Kenako, timalembetsa foni kuchokera pa intaneti iyi, ndipo zonse zikuwoneka bwino komanso molingana ndi malangizo komanso zomveka.
Timayamba kuyesa, kuyimba foni ku nambala yakunja ndi ... timapeza donut, kapena kuti bowo la donut. Mwadzidzidzi!

Timayamba kusanthula chipika mu kontrakitala kapena kudzera pa Log Viewer FusioPBX.

Tikuwona zovuta zathu:

switch_channel.c:1104 New Channel sofia/internal/[email protected]

Tikuwona ACL yomwe idagwira ntchito:

sofia.c:10208 IP 192.168.0.150 Approved by acl "domains[]". Access Granted.

Komanso:

mod_dialplan_xml.c:637 Processing 1010 <1010>->98343379xxxx in context public
switch_core_state_machine.c:311 No Route, Aborting 
switch_core_state_machine.c:312 Hangup sofia/internal/[email protected] [CS_ROUTING] [NO_ROUTE_DESTINATION] 

Palibe njira! Ngakhale njira talembetsa moona mtima.

Yankho ndi losavuta kwenikweni.

Kuitana kwabwera. ACL inaphonya. Ndipo popeza ACL imamangidwa mu mbiri yamkati, ndipo mbiriyi ili pagulu, FreeSWITCH imayang'ana moona mtima pamayendedwe pagulu. Koma pagulu, njira zomwe zikubwera zokha, ndipo dongosololi limatiuza moona mtima kuti palibe njira zopita mumzinda kumeneko.

Pali njira ziwiri zochotsera vutoli.

  1. Gwirizanitsani ACL iyi osati mbiri, koma nambala yamkati yokha. Iyi ikhoza kukhala njira yolondola kwambiri yothetsera, chifukwa. Ndikwabwino kumangirira ACL pafupi kwambiri ndi Extension kuti ichunidwe bwino. Iwo. mutha kulembera adilesi inayake / netiweki ya foni yomwe imatha kuyimbira. Choyipa cha njirayi ndikuti Zowonjezera zilizonse ziyenera kuchita izi.
  2. Konzani ACL kuti igwire bwino ntchito pamlingo wambiri. Ndinasankha njira iyi, chifukwa zinkawoneka kwa ine zosavuta kuwonjezera maukonde ku ACL kamodzi kusiyana ndi kulemba izo mu Extension iliyonse. Koma izi ndi za ntchito yanga. Pazochita zina, mungafunike malingaliro osiyanasiyana opangira zisankho.

Choncho. Tiyeni tikonze madera a ACL motere:

madera osasintha zochita: kulola

M'magawo a ACL mndandanda, timalembetsa maukonde:

kukana 192.168.0.0/24

Ikani, reloadacl.
Tikuyesa: timayimbanso nambala 98343379xxxx ndipo ... malo ochezera akubwera ... HELO. Zonse zikuyenda.
Tiyeni tiwone zomwe zidachitika ku FreeSWITCH:
kuyimba kumayamba:

switch_channel.c:1104 New Channel sofia/internal/[email protected]

ACL sinaphonye:

[DEBUG] sofia.c:10263 IP 192.168.0.150 Rejected by acl "domains". Falling back to Digest auth.

ndi zina:

mod_dialplan_xml.c:637 Processing 1010 <1010>->98343379xxxx in context domain.local
sofia/internal/[email protected] Regex (PASS) [Sity] destination_number(98343379xxxx) =~ /^9(8343[23]d{6})$/ break=on-false 

Njira yadutsa, kenako pakubwera kukhazikitsidwa kwa kugwirizana, komwe sikudutsa mutuwo.

Ngati tisintha ma adilesi a netiweki mu ACL, koma tipeze chithunzi kuchokera ku mayeso oyamba, i.e. ACL ilumpha kuyimba ndipo njirayo idzanena kuti NO_ROUTE_DESTINATION.

Ndizo zonse zomwe ndimafuna kuwonjezera pa ACL FusionPBX.

Ndikukhulupirira zikhala zothandiza kwa wina.

Source: www.habr.com

Kuwonjezera ndemanga