🥇TR-069 in Mikrotik. Kuedza Freeacs se auto-config server ye RouterOS

Muchikamu chino, ini ndichaedza kutsanangura nhanho nhanho maitiro ekuisa test server yeprojekti huru freeacs kumamiriro ekushanda zvizere, uye kuratidza maitiro anoshanda ekushanda ne mikrotik: kugadzirisa kuburikidza nemiganhu, script execution, kuvandudza, kuisa mamwe ma modules, nezvimwewo.

Chinangwa chechinyorwa ndechekusundira vashandi kuti varambe kubata network zvishandiso vachishandisa anotyisa rakes uye madondoro, muchimiro chekuzvinyora-zvinyorwa, Dude, Ansible, etc. Uye, pachiitiko ichi, kukonzera mafirework uye kufara kwevanhu vakawanda mu squares.

0. Sarudzo

Nei ma freeacs uye kwete genie-acs akataurwa mukati mikrotik-wikimupenyu sei?
Nekuti kune zvinyorwa zveSpanish nezve genie-acs ine mikrotik. Hevanoi ivo PDF и видео kubva kuna MUM gore rapfuura. Makatuni emotokari pamasiraidhi anotonhorera, asi ndinoda kubva papfungwa yekunyora zvinyorwa, kumhanya zvinyorwa, kumhanyisa zvinyorwa…

1. Kuiswa kwemahara

Tichaisa muCentos7, uye sezvo michina ichitumira data rakawanda, uye ACS iri kushanda nesimba nedhatabhesi, hatizove nemakaro nezviwanikwa. Kuti uite basa rakasununguka, isu tichasarudza 2 CPU cores, 4GB RAM uye 16GB yekukurumidza kuchengetedza ssd raid10. Ini ndichaisa ma freeacs muProxmox VE lxc mudziyo, uye iwe unogona kushanda mune chero chishandiso chakakunakira.
Usakanganwa kuseta nguva chaiyo pamushini ne ACS.

Iyo sisitimu ichave yekuyedza, saka ngatiregei kungwara, uye ingo shandisa yakapihwa nemutsa yekuisa script, sezvazviri.

wget https://raw.githubusercontent.com/freeacs/freeacs/master/scripts/install_centos.sh
chmod +x install_centos.sh
./ install_centos.sh

Pakangopera script, unogona kubva wangopinda muwebhu interface ne ip yemuchina, uine zvitupa admin/freeacs.

Heino yakanaka minimalistic interface, uye kutonhorera uye nekukurumidza zvese zvakazoitika

2. Freeacs yekutanga setup

Chinhu chakakosha chekutonga che ACS chikamu kana CPE (Customer Premises Equipment). Uye zvakanyanya kukosha, chatinoda kubata mayunitsi iYuniti Type yavo, kureva. modhi yehardware inotsanangura seti yezvimiro zvinogadziriswa zveyuniti uye software yayo. Asi kunyangwe isu tisingazive matangiro eUnit Type nyowani nenzira kwayo, zvingave zvakanaka kubvunza iyo unit pachayo nezve izvi nekubatidza Discovery Mode.

Mukugadzira, iyi modhi haigoneke zvachose kushandisa, asi isu tinofanirwa kutanga injini nekukurumidza sezvinobvira uye kuona kugona kweiyo system. Ese magadzirirwo ekutanga anochengetwa mukati /opt/freeacs-*. Naizvozvo, tinovhura

 vi /opt/freeacs-tr069/config/application-config.conf

, tinowana

discovery.mode = false

uye kuchinja ku

discovery.mode = true

Uye zvakare, isu tinoda kuwedzera iyo yakakura faira saizi iyo nginx uye mysql ichashanda nayo. Kune mysql, wedzera mutsara ku /etc/my.cnf

max_allowed_packet=32M

, uye ye nginx, wedzera ku /etc/nginx/nginx.conf

client_max_body_size 32m;

kuchikamu che http. Zvikasadaro, isu tichakwanisa kushanda ne firmware isingapfuuri 1M.

Isu tinotangazve, uye takagadzirira kushanda nemidziyo.

Uye mubasa remudziyo (CPE) tichava nemwana anoshanda hAP AC lite.

Usati wasangana bvunzo, zvinokurudzirwa kugadzirisa nemaoko CPE kune kushoma kushanda kwekugadzirisa kuitira kuti maparameter aunoda kugadzirisa mune ramangwana asave asina chinhu. Kune router, unogona kugonesa zvishoma mutengi wedhcp paether1, isa iyo tr-069client package uye kuseta mapassword.

3. Batanidza Mikrotik

Izvo zvinodikanwa kubatanidza ese mayunitsi uchishandisa inoshanda serial nhamba seyakapinda. Ipapo zvinhu zvose zvichave zvakajeka kwauri mumatanda. Mumwe munhu anorayira kushandisa WAN MAC - usazvitenda. Mumwe munhu anoshandisa yakajairika login / pass pair kune wese munhu - bypass them.

Kuvhura iyo tr-069 log yekutarisa "nhaurirano"

tail -f /var/log/freeacs-tr069/tr069-conversation.log

Vhura winbox, menyu chinhu TR-069.
AC URL: http://10.110.0.109/tr069/prov (chinja neIP yako)
Username: 9249094C26CB (kopi serial kubva kuhurongwa> routerboard)
Password: 123456 (isina kudikanwa kuti iwanikwe, asi kuve)
Isu hatishandure iyo Periodic ruzivo nguva. Isu tichaburitsa iyi marongero kuburikidza neACS yedu

Pazasi pane zvigadziriso zvekutanga kwekutanga kwekubatanidza, asi ini handina kukwanisa kuwana mikrotik kushanda nayo ne swoop. Kunyangwe chikumbiro chiri kure chinoshanda kunze kwebhokisi nemafoni. Ichafanirwa kuzvigadzirisa.

Mushure mekudzvanya bhatani reApply, data ichachinjana mune terminal, uye muFreeacs web interface iwe unogona kuona router yedu ine otomatiki yakagadzirwa Unit Type "hAPaclite".

Router yakabatana. Iwe unogona kutarisa mune inogadzirwa otomatiki Unit Type. Tinovhura Easy Provisioning > Unit Type > Unit Type Overview > hAPaclite. Chii chisipo! Akawanda se 928 paramita (ini ndakasora pagoko). Zvakawanda kana zvishoma - tichazvifunga gare gare, asi ikozvino tichangotarisa nekukurumidza. Ndizvo zvinoreva Unit Type. Iyi irondedzero yesarudzo dzinotsigirwa dzine makiyi asi pasina kukosha. Hunhu hwakaiswa mumatanho ari pazasi - Profiles uye Units.

4. Gadzira Mikrotik

Yasvika nguva yekurodha web interface guide Iri gwara ra2011 rakafanana nebhodhoro rewaini yakanaka, yasakara. Ngatiivhure tifeme.

Uye isu pachedu, muwebhu interface, tinya penzura padivi peyuniti yedu uye enda kune iyo unit yekumisikidza mode. Zvinoita seizvi:

Ngationgororei muchidimbu zvinofadza papeji rino:

Unit configuration block

Mbiri: Iyi ndiyo mbiri iri mukati meiyo Unit Type. Hierarchy yakaita seizvi: UnitType > Profile > Unit. Ndiko kuti, tinogona kugadzira, semuenzaniso, profiles hAPaclite > hotspot и hAPaclite > branch, asi mukati meiyo mudziyo modhi

Block Provisioning nemabhatani
Mazano anoratidza kuti mabhatani ese ari muProvisioning block anogona kukurumidza kuisa gadziriso kuburikidza neConnectionRequestURL. Asi, sezvandambotaura pamusoro, izvi hazvishande, saka mushure mekudzvanya mabhatani, iwe unozofanirwa kudzoreredza tr-069 mutengi pamikrotik kuti utange kugovera.

Freq/Spread: Kangani pasvondo kuendesa iyo kumisikidzwa ±% kuderedza mutoro pane sevha uye nzira dzekutaurirana. Nokusingaperi, inodhura 7/20, i.e. zuva rega rega ± 20% uye ratidza kuti zviri sei mumasekonzi. Kusvika ikozvino, hapana chikonzero chekuchinja kuwanda kwekutumira, nokuti. pachave neruzha rwekuwedzera mumatanda uye kwete nguva dzose inotarisirwa kushandiswa kwezvirongwa

Provisioning history block (maawa 48 apfuura)

Muchitarisiko, nyaya yacho yakaita senyaya, asi nekudzvanya pane zita, unosvika kune yakanakira dhatabhesi yekutsvaga chishandiso ine regexp uye zvinonaka.

Parameters Block

Iyo yakakura uye yakakosha bhuroka, uko, chokwadi, iyo parameter yeiyi unit yakaiswa uye inoverengwa. Iye zvino tinoona chete inonyanya kukosha hurongwa, pasina iyo ACS haigone kushanda neyuniti. Asi isu tinorangarira kuti tinavo muUnit Type - 928. Ngationei zvese zvakakosha, uye sarudza izvo Mikrotik inodya nazvo.

4.1 Kuverenga parameters

MuProvisioning block, tinya bhatani reVerenga zvese. Chibhuroko chine chinyorwa chitsvuku. Koramu ichaonekwa kurudyi CPE (ikozvino) kukosha. Yakachinja ProvisioningMode kuita READALL mumasetimu ehurongwa.

Uye… hapana chichaitika kunze kwemeseji muSystem.X_FREEACS-COM.IM.Message Kick failed at....

Tangazve TR-069 mutengi kana kuti tangazve router, uye ramba uchizorodza peji rebrowser kusvika wawana maparamita mumabhokisi egrey anofara kurudyi.
Kana chero munhu achida kutora svutugadzike yekare yakarungwa, iyi modhi inotsanangurwa mubhuku se10.2 Inspection mode. Inobatidza uye inoshanda zvishoma zvakasiyana, asi iyo essence inotsanangurwa chaizvo

Iyo READALL modhi ichadzima mushure memaminitsi gumi nemashanu, uye isu tichaedza kufunga kuti chii chinobatsira pano, uye chii chinogona kugadziriswa panhunzi isu tiri mune iyi modhi.

Iwe unogona kushandura IP kero, kugonesa / kudzima nzvimbo dzekupindirana, mitemo yefirewall, ine makomendi (zvikasadaro mess yakakwana), Wi-Fi, nezvimwe zvinhu zvidiki.

Ndiko kuti, haisati yave kugona kugadzirisa mikrotik uchishandisa chete TR-069 zvishandiso. Asi iwe unogona kutarisa zvakanyanya. Nhamba dzemainterfaces uye chimiro chadzo, ndangariro yemahara, nezvimwe zviripo.

4.2 Kuendesa parameters

Ngatiedzei kuendesa iyo paramita kune router, kuburikidza ne tr-069, nenzira "yakasikwa". Munhu wekutanga achabatwa neDevice.DeviceInfo.X_MIKROTIK_SystemIdentity. Tinozviwana mumaparameter eAll unit. Sezvauri kuona, haina kuiswa. Izvi zvinoreva kuti chero chikwata chinogona pachacho kuva neIdentity. Zvakakwana kushivirira izvi!
Isu tinobaya daw mukoramu yekugadzira, isa zita rekuti Mr.White uye rova bhatani reKuvandudza paramita. Chii chichaitika mberi, iwe watofungidzira. Pamusangano unotevera wekutaurirana nedzimbahwe, router inofanira kuchinja Identity yayo.

Asi izvi hazvina kutikwanira. A parameter seIdentity yakanaka kugara uinayo paunenge uchitsvaga iyo unit chaiyo. Isu tinopinza muzita reparameter uye tinoisa mabhokisi echeki Ratidza (D) uye Inotsvakwa (S) ipapo. Iyo parameter kiyi inochinjirwa kuRWSD (Yeuka, mazita nemakiyi akaiswa padanho repamusoro Unit Type)

Iko kukosha ikozvino haisi kungoratidzwa mune yakajairika yekutsvaga rondedzero, asi inowanikwa yekutsvaga mukati Support > Search > Advanced form

Isu tinotanga kupa uye tinotarisa Identity. Mhoro Mr.White! Iye zvino hauchakwanisa kushandura chitupa chako iwe tr-069client iri kushanda

4.3 Kuita zvinyorwa

Sezvo takaona kuti hapana nzira pasina ivo, ngativazadzise.

Asi tisati tatanga kushanda nemafaira, tinoda kugadzirisa kuraira public.url mufaira /opt/freeacs-tr069/config/application-config.conf
Mushure mezvose, tichine bvunzo yekumisikidza yakaiswa ne script imwe. Hauna kukanganwa?

# --- Public url (used for download f. ex.) ---
public.url = "http://10.110.0.109"
public.url: ${?PUBLIC_URL}

Reboot iyo ACS uye tungamira wakananga ku Files & Scripts.

Asi zviri kuvhurwa nesu zvino ndezveUnit Type, kureva. pasi rose kune vese hAP ac lite routers, ingave bazi router, hotspot kana capsman. Isu hatidi danho rakadaro zvakadaro, saka, usati washanda nemagwaro uye mafaera, iwe unofanirwa kugadzira chimiro. Iwe unogona kuzvidaidza iwe pachako, se "nzvimbo" yemudziyo.

Ngatiite mwana wedu sevha yenguva. Nzvimbo yakanaka ine yakaparadzana software package uye nenhamba diki yemaparamita. Handei ku Easy Provisioning > Profile > Create Profile uye gadzira chimiro muChikamu Type:hAPaclite timeserver. Isu takanga tisina chero ma parameter muiyo default profile, saka hapana chekutevedzera Kopa parameter kubva ku: "usakope..."

Iko hakuna maparamendi pano zvachose, asi zvinogoneka kuseta ayo atinozoda kuona pamaseva edu enguva akaumbwa kubva kuhAPaclite. Semuenzaniso, kero dzese dzeNTP maseva.
Handei kune iyo unit kumisikidzwa, uye toifambisa kune iyo timeserver profile

Pakupedzisira tinoenda Files & Scripts, ita zvinyorwa, uye pano isu takamirira mabhanzi anoshamisa.

Kuti tiite script pane imwe unit, tinoda kusarudza mhando:TR069_SCRIPT а zita и zita rechinangwa must have .alter extension
Panguva imwecheteyo, kune zvinyorwa, kusiyana nesoftware, unogona kurodha faira rakapera, kana kungonyora / kurigadzirisa mumunda. Zviripo. Ngatiedzei kunyora ipapo.

Uye kuti iwe ugone kuona nekukurumidza mhedzisiro - wedzera iyo vlan router kune ether1

/interface vlan
add interface=ether1 name=vlan1 vlan-id=1

Tinotyaira, tinodzvanya Upload uye zvaita. Script yedu vlan1.alter kumirira mumapapiro.

Zvakanaka, handei? Aihwa. Isu tinodawo kuwedzera boka reprofile yedu. Mapoka haabatanidzwe muchikamu chemidziyo, asi anodiwa kutsvaga mayunitsi muUnitType kana Profile uye anodiwa pakuita script kuburikidza neAdvanced Provisioning. Kazhinji, mapoka anosanganisirwa nenzvimbo, uye ane dendere rakavakwa. Ngatiitei boka reRussia.

Fungidzira isu tangodzikisira kutsvaga kwedu kubva ku "All world time servers pahAPaclite" kuenda ku "All Russian time servers on hAPaclite". Pachiri nehombe yezvese zvinonakidza nemapoka, asi isu hatina nguva. Ngatipindei mune zvinyorwa.

Advanced Provisioning > Job > Create Job

Sezvo isu tiri muAdvanced mode, shure kwezvose, pano iwe unogona kutsanangura boka remamiriro akasiyana-siyana ekutanga kwebasa, kukanganisa maitiro, kudzokorora uye nguva. Ini ndinokurudzira kuverenga zvese izvi mumabhuku kana kukurukura gare gare kana uchizviita mukugadzira. Parizvino, ngatingoseta n1 kuMisa mitemo kuti basa rimire kana rangopera pa1st unit yedu.

Isu tinozadza izvo zvinodikanwa, uye zvinongosara chete kuvhura!

Dzvanya START uye mirira. Ikozvino iyo counter yemidziyo yakaurayiwa neiyo underdebugged script ichamhanya nekukurumidza! Chokwadi kwete. Mabasa akadaro anopiwa kwenguva yakareba, uye ichi ndicho kusiyana kwavo kubva kune zvinyorwa, Ansible, nezvimwe zvakadaro. Mauniti pachawo anonyorera mabasa pahurongwa kana sezvaanoonekwa panetiweki, ACS inocherekedza kuti ndeapi mayuniti akatowana mabasa, uye kuti akapedza sei, uye anonyora izvi kune iyo unit paramita. Pane 1 unit mugroup redu, uye dai vaive 1001 vavo, admin vaizotanga basa iri voenda kunoraura.

Handeyi nazvo. Dzorerazve router kana kutangazve TR-069 mutengi. Zvese zvinofanirwa kufamba zvakanaka uye Mr.White vachawana vlan itsva. Uye yedu Stop mutemo basa richapinda mune PAUSED chimiro. Ndiko kuti, inogona kutangwazve kana kuchinjwa. Kana ukadzvanya FINISH, basa racho rinonyorerwa kudura

4.4 Kugadziridza software

Iyi ipfungwa yakakosha, sezvo Mikrotik firmware iri modular, asi kuwedzera ma modules hakuchinje iyo yakazara firmware version yemudziyo. Yedu ACS yakajairika uye haina kushandiswa kune izvi.
Iye zvino tichazviita nenzira yekukurumidza & yakasviba, uye tosundira iyo NTP module muiyo general firmware ipapo, asi kana shanduro ichinge yagadziridzwa pachigadzirwa, isu hatizokwanisi kuwedzera imwe module nenzira imwecheteyo. .
Mukugadzira, zviri nani kusashandisa hunyengeri hwakadaro, uye kuisa ma modules ari sarudzo yeUnit Type chete ane zvinyorwa.

Saka, chinhu chekutanga chatinofanira kuita kugadzirira mapakeji esoftware anodiwa mavhezheni uye zvivakwa, uye woaisa pane imwe iripo yewebhu server. Pakuyedzwa, chero munhu anogona kusvika kuna Mr.White wedu achaenda, uye pakugadzirwa, zviri nani kuvaka girazi rinogadziridza auto-inodiwa software, iyo isingatyi kuisa pawebhu.
Zvakakosha! Usakanganwa kugara uchisanganisira iyo tr-069client package mune zvigadziriso!

Sezvazvakazoitika, kureba kwenzira kuenda kumapakiti kwakakosha zvikuru! Pandinoedza kushandisa chimwe chinhu chakadai http://192.168.0.237/routeros/stable/mipsbe/routeros-mipsbe-6.45.6.npk, mikrotik yakawira mu cyclic yekubatanidza neiyo sosi, kutumira yakadzokororwa TRANSFERCOMPLETE matanda ku tr-069. Uye ndakatambisa mamwe masero etsinga ndichiedza kufunga kuti chii chainetsa. Naizvozvo, isu tichiriisa mumudzi, kusvikira kujekeswa

Saka, isu tinofanirwa kuve nematatu npk mafaera anowanikwa kuburikidza ne http. Ndakazviwana sezvizvi

http://192.168.0.241/routeros-mipsbe-6.45.6.npk
http://192.168.0.241/routeros/stable/mipsbe/ntp-6.45.6-mipsbe.npk
http://192.168.0.241/routeros/stable/mipsbe/tr069-client-6.45.6-mipsbe.npk

Zvino izvi zvinoda kurongedzerwa kuita xml faira ine FileType = "1 Firmware Upgrade Image", yatichadyisa kuMikrotik. Zita ngarive ros.xml

Isu tinoita maererano nemirairo kubva mikrotik-wiki:

<upgrade version="1" type="links">
    <config />
    <links>
        <link>
            <url>http://192.168.0.241/routeros-mipsbe-6.45.6.npk</url>
        </link>
        <link>
            <url>http://192.168.0.241/ntp-6.45.6-mipsbe.npk</url>
        </link>
        <link>
            <url>http://192.168.0.241/tr069-client-6.45.6-mipsbe.npk</url>
        </link>
    </links>
</upgrade>

Kushaikwa kuri pachena Username/Password kuti uwane iyo yekurodha server. Unogona kuedza kuiisa sepandima A.3.2.8 ye tr-069 protocol:

<link>
<url>http://192.168.0.237/routeros/stable/mipsbe/ntp-6.45.6-mipsbe.npk</url>
<Username>user</Username>
<Password>pass</Password>
</link>

Kana kuti bvunza vatungamiri veMikrotik zvakananga, uyewo pamusoro pehupamhi hwenzira yakareba kusvika * .npk

Tinoenda kune vanozivikanwa Files & Scripts, uye gadzira SOFTWARE faira ipapo ne Name:ros.xml, Zita rechinangwa:ros.xml uye Version:6.45.6
Attention! Iyo vhezheni inofanirwa kutsanangurwa pano chaizvo mune iyo fomati iyo inoratidzwa pane mudziyo uye inopfuudzwa muparameter System.X_FREEACS-COM.Device.SoftwareVersion.

Isu tinosarudza yedu xm-faira yekurodha uye wapedza.

Iye zvino tine nzira dzakawanda dzekugadzirisa chigadzirwa. Kuburikidza neWizard mumenu huru, kuburikidza neAdvanced Provisioning uye mabasa neiyo SOFTWARE mhando, kana ingoenda kune iyo unit kumisikidzwa uye tinya Upgrade. Ngatisarudzei nzira iri nyore, kana zvisina kudaro chinyorwa chakazvimba.

Isu tinodzvanya bhatani, tanga kupa uye wapedza. Chirongwa chekuyedza chapedzwa. Iye zvino tinogona kuita zvakawanda nemikrotik.

5. Mhedziso

Pandakatanga kunyora, ndaida kutanga ndatsanangura kubatana kwe-ip-foni, uye kushandisa muenzaniso wayo kutsanangura kutonhorera kwaungaite kana tr-069 ichishanda zviri nyore uye zvisingaite. Asi zvino, sezvandaifambira mberi uye ndakachera muzvinyorwa, ndakafunga kuti kune avo vakabatanidza Mikrotik, hapana foni yaizotyisa kuzvidzidza.

Muchidimbu, maFreeacs, ayo atakaedza, anogona kutoshandiswa mukugadzira, asi nekuda kweizvi iwe unofanirwa kugadzirisa chengetedzo, SSL, iwe unofanirwa kugadzirisa mamicrotics ekugadzirisa otomatiki mushure mekugadzirisazve, iwe unofanirwa kugadzirisa iyo chaiyo yekuwedzera yeUnit Type, disassemble the basa rewebhusaiti uye fusion shell, nezvimwe zvakawanda. Edza, gadzira, uye nyora inoteedzana!

Munhu wese, ndinokutendai nekuteerera kwenyu! Ndichafara kugadziridzwa uye makomendi!

Rondedzero yezvishandiso zvakashandiswa uye zvinongedzo zvinobatsira:

A forum thread yandakasangana nayo pandakatanga kutsvaga pane nyaya
TR-069 CPE WAN Management Protocol Amendment-6
freeacs wiki
Parameters tr-069 muMikrotik, uye kunyorerana kwavo kune terminal mirairo

Source: www.habr.com

TR-069 paMikrotik. Kuedza Freeacs seautoconfig server yeRouterOS