Kulesi sihloko, ngizozama ukuchaza isinyathelo ngesinyathelo inqubo yokufaka iseva yokuhlola yephrojekthi enkulu
Inhloso yalesi sihloko ukusunduza ozakwabo ukuthi benqabe ukuphatha amadivaysi enethiwekhi besebenzisa amareki nezinduku ezimbi, ngendlela yemibhalo ezibhala yona, Dude, Ansible, njll. Futhi, kulesi senzakalo, ukudala iziqhumane kanye nokujabula okukhulu izikwele.
0. Ukukhetha
Kungani ama-freeacs hhayi ama-genie-acs ashiwo kuwo
Ngoba kukhona ukushicilelwa kweSpanishi kuma-genie-acs ane-mikrotik. Nampa
1. Ukufakwa kwama-Freeacs
Sizofaka ku-Centos7, futhi njengoba amadivayisi edlulisela idatha eningi, futhi i-ACS isebenza ngenkuthalo nesizindalwazi, ngeke sibe nobugovu ngezinsiza. Ngomsebenzi onethezekile, sizokhetha ama-CPU cores angu-2, i-4GB RAM kanye ne-16GB yesitoreji esisheshayo se-ssd raid10. Ngizofaka ama-freeacs esitsheni se-Proxmox VE lxc, futhi ungasebenza kunoma yiliphi ithuluzi elikulungele.
Ungakhohlwa ukusetha isikhathi esifanele emshinini nge-ACS.
Uhlelo luzoba yisivivinyo, ngakho-ke masingabi abahlakaniphile, futhi sisebenzise nje iskripthi sokufaka esinikezwe ngomusa, njengoba sinjalo.
wget https://raw.githubusercontent.com/freeacs/freeacs/master/scripts/install_centos.sh
chmod +x install_centos.sh
./ install_centos.sh
Ngokushesha nje lapho umbhalo uqeda, ungakwazi ngokushesha ukungena esibonakalayo sewebhu nge-ip yomshini, kanye nemininingwane yomqondisi/ama-freeacs.
Nansi i-interface enhle ye-minimalistic, nokuthi konke kupholile futhi kushesha kangakanani
2. Ukusethwa kokuqala kwama-Freeacs
Iyunithi eyisisekelo yokulawula ye-ACS iyunithi noma i-CPE (Isisetshenziswa Sendawo Yekhasimende). Futhi okubaluleke kakhulu, esikudingayo ukuze silawule amayunithi uhlobo lwawo Lweyunithi, i.e. imodeli yehadiwe echaza isethi yemingcele elungisekayo yeyunithi nesofthiwe yayo. Kodwa kuze kube yilapho sesikwazi ukuthola uhlobo olusha lweyunithi ngendlela efanele, kungaba ngcono ukubuza iyunithi ngokwayo mayelana nalokhu ngokuvula i-Discovery Mode.
Ekukhiqizeni, le modi ayinakwenzeka neze ukusebenzisa, kodwa sidinga ukuqala injini ngokushesha futhi sibone amakhono wesistimu. Zonke izilungiselelo eziyisisekelo zigcinwa ku-/opt/freeacs-*. Ngakho-ke, sivula
vi /opt/freeacs-tr069/config/application-config.conf
, sithola
discovery.mode = false
futhi ushintshe ku
discovery.mode = true
Ngaphezu kwalokho, singathanda ukukhulisa amasayizi aphezulu wefayela i-nginx ne-mysql ezosebenza ngawo. Nge-mysql, engeza umugqa ku-/etc/my.cnf
max_allowed_packet=32M
, kanye ne-nginx, engeza ku-/etc/nginx/nginx.conf
client_max_body_size 32m;
esigabeni se-http. Uma kungenjalo, sizokwazi ukusebenza nge-firmware okungaphezu kuka-1M.
Siqalisa kabusha, futhi silungele ukusebenza ngamadivayisi.
Futhi endimeni yedivayisi (CPE) sizoba nomntwana osebenzayo
Ngaphambi koxhumano lokuhlola, kuyatuseka ukuthi ulungiselele i-CPE mathupha ekucushweni okuncane okusebenzayo ukuze amapharamitha ofuna ukuwalungisa ngokuzayo angabi nalutho. Kurutha, ungakwazi ukunika amandla kancane iklayenti le-dhcp ku-ether1, ufake iphakheji ye-tr-069client bese usetha amaphasiwedi.
3. Xhuma i-Mikrotik
Kuyafiseleka ukuxhuma wonke amayunithi usebenzisa inombolo ye-serial evumelekile njengokungena ngemvume. Khona-ke konke kuzokucacela ezingodweni. Othile weluleka ukusebenzisa i-WAN MAC - ungakukholwa. Othile usebenzisa ukubhanqa okujwayelekile kokungena / kokudlula kuwo wonke umuntu - kudlule.
Ukuvula ilogi ye-tr-069 ukuqapha "izingxoxo"
tail -f /var/log/freeacs-tr069/tr069-conversation.log
Vula i-winbox, into yemenyu ethi TR-069.
I-AC URL: http://10.110.0.109/tr069/prov
(shintshanisa ne-IP yakho)
Igama lomsebenzisi: 9249094C26CB (kopisha uchungechunge kusuka kusistimu>ibhodi lomzila)
Iphasiwedi: 123456 (ayidingeki ukuze kutholakale, kodwa kube)
Asishintshi i-Periodic information interval. Sizokhipha lesi silungiselelo nge-ACS yethu
Ngezansi kukhona izilungiselelo zokuqalisa ukude koxhumano, kodwa angikwazanga ukuthola i-mikrotik ukuze ngisebenze nayo ngokushwibeka. Nakuba isicelo esikude sisebenza ngaphandle kwebhokisi ngamafoni. Kuzofanele uyibone.
Ngemva kokucindezela inkinobho ethi Faka isicelo, idatha izoshintshaniswa kutheminali, futhi kusixhumi esibonakalayo sewebhu seFreeacs ungabona umzila wethu ngohlobo lweyunithi oludalwe ngokuzenzakalelayo "hAPaclite".
Irutha ixhunyiwe. Ungabheka ohlotsheni lweyunithi olukhiqizwa ngokuzenzakalelayo. Siyavula Easy Provisioning > Unit Type > Unit Type Overview > hAPaclite
. Yini engekho! Amapharamitha angama-928 (ngahlola igobolondo). Okuningi noma okuncane - sizokuthola kamuva, kodwa okwamanje sizobheka ngokushesha. Yilokho okushiwo uhlobo lweyunithi. Lolu uhlu lwezinketho ezisekelwayo ezinokhiye kodwa awekho amanani. Amanani asethwe kumazinga angezansi - Amaphrofayili namayunithi.
4. Lungiselela i-Mikrotik
Isikhathi sokulanda
Futhi ngokwethu, kusixhumi esibonakalayo sewebhu, chofoza ipensela eduze kweyunithi yethu bese siya kumodi yokumisa iyunithi. Kubukeka kanjena:
Ake sihlaziye kafushane ukuthi yini ethokozisayo kuleli khasi:
Ibhulokhi yokucushwa kweyunithi
- Iphrofayili: Le iphrofayili engaphakathi Kohlobo Lweyunithi. I-hierarchy inje:
UnitType > Profile > Unit
. Okusho ukuthi, singakha, isibonelo, amaphrofayilihAPaclite > hotspot
ΠΈhAPaclite > branch
, kodwa ngaphakathi kwemodeli yedivayisi
Block Provisioning ngezinkinobho
Amacebo asikisela ukuthi zonke izinkinobho kubhulokhi Yokuhlinzeka zingasebenzisa ukulungiselelwa ngokushesha nge-ConnectionRequestURL. Kodwa, njengoba ngishilo ngenhla, lokhu akusebenzi, ngakho-ke ngemva kokucindezela izinkinobho, uzodinga ukuqala kabusha iklayenti le-tr-069 ku-mikrotik ukuze uqale ukunikezwa ngesandla.
- I-Freq/Spread: Kangaki ngeviki ukuletha ukucushwa Β± % ukunciphisa umthwalo kuseva neziteshi zokuxhumana. Ngokuzenzakalelayo, kubiza i-7/20, i.e. nsuku zonke Β± 20% futhi usho ukuthi kunjani ngemizuzwana. Kuze kube manje, asikho isidingo sokushintsha imvamisa yokulethwa, ngoba. kuzoba nomsindo owengeziwe kulogi futhi okungahlali kulindelwe ukusetshenziswa kwezilungiselelo
Ibhulokhi yomlando wokuhlinzeka (amahora angu-48 adlule)
- Ngokubukeka, indaba ifana nendaba, kodwa ngokuchofoza isihloko, ufika ethuluzini lokusesha lesizindalwazi elilungile eline-regexp nezinto ezinhle.
Amapharamitha Vimba
Ibhulokhi enkulu futhi ebaluleke kakhulu, lapho, empeleni, imingcele yale yunithi isethiwe futhi ifundwe. Manje sibona kuphela imingcele yesistimu ebaluleke kakhulu, ngaphandle kwalokho i-ACS ayikwazi ukusebenza neyunithi. Kodwa siyakhumbula ukuthi sinawo ku-Unit Type - 928. Ake sibone wonke amanani, futhi sinqume ukuthi iMikrotik idla ngani.
4.1 Ukufunda amapharamitha
Ebhulokhini Yokuhlinzeka, chofoza inkinobho ethi Funda konke. Ibhulokhi inombhalo obomvu. Ikholomu izovela kwesokudla Inani le-CPE (lamanje).. Kushintshwe i-ProvisioningMode ukuze ithi READALL kuzilungiselelo zesistimu.
Futhi⦠akukho lutho oluzokwenzeka ngaphandle komlayezo ku-System.X_FREEACS-COM.IM.Message Kick failed at...
.
Qala kabusha iklayenti le-TR-069 noma uqalise kabusha umzila, futhi uqhubeke uvuselela ikhasi lesiphequluli uze uthole amapharamitha kumabhokisi ajabule ampunga kwesokudla.
Uma noma ubani efuna ukuphuza endala endala, le modi ichazwa kumanuwali ngokuthi 10.2 Imodi yokuhlola. Iyavula futhi isebenze ngokuhlukile kancane, kodwa ingqikithi ichazwa kahle
Imodi ye-READALL izozivala ngemva kwemizuzu engu-15, futhi sizozama ukuthola ukuthi yini ewusizo lapha, nokuthi yini engalungiswa empukaneni ngenkathi sikule modi.
Ungashintsha amakheli e-IP, unike amandla / ukhubaze ukuxhumana, imithetho ye-firewall, enamazwana (kungenjalo ukungcola okuphelele), i-Wi-Fi, nokunye okuncane.
Okusho ukuthi, akukenzeki okwamanje ukulungisa i-mikrotik usebenzisa amathuluzi we-TR-069 kuphela. Kodwa ungakwazi ukuqapha kahle kakhulu. Izibalo zezindawo zokusebenzelana nesimo sazo, inkumbulo yamahhala, njll. ziyatholakala.
4.2 Ukuletha amapharamitha
Manje ake sizame ukuletha amapharamitha kumzila, nge-tr-069, ngendlela "yemvelo". Isisulu sokuqala kuzoba yi-Device.DeviceInfo.X_MIKROTIK_SystemIdentity. Siyithola kumapharamitha weyunithi Yonke. Njengoba ubona, ayisethiwe. Lokhu kusho ukuthi noma iyiphi iyunithi ngokwayo ingaba nanoma yibuphi Identity. Kwanele ukubekezelela lokhu!
Sikhipha ilanga kukholamu yokudala, setha igama elithi Mr.White bese sichofoza inkinobho ethi Buyekeza imingcele. Kuzokwenzekani ngokulandelayo, usuvele uqagele. Esikhathini esilandelayo sokuxhumana nendlunkulu, irutha kufanele ishintshe Identity yayo.
Kodwa lokhu akwanele kithi. Ipharamitha efana ne-Identity inhle ukuthi uhlale ikhona lapho ufuna iyunithi elungile. Sifaka igama lepharamitha bese sifaka amabhokisi okuhlola okuthi Khombisa (D) kanye nokuthi Kuyasesheka (S) lapho. Ukhiye wepharamitha ushintshelwa ku-RWSD (Khumbula, amagama nokhiye kusethwe ezingeni eliphakeme kakhulu Lohlobo Lweyunithi)
Inani manje alisavezwa kuphela ohlwini lokusesha olujwayelekile, kodwa futhi liyatholakala ukuze kuseshwe kulo Support > Search > Advanced form
Siqala ukuhlinzeka futhi sibheke Identity. Sawubona Mr.White! Manje ngeke ukwazi ukushintsha ubuwena ngokwakho ngenkathi i-tr-069client isebenza
4.3 Ukwenza imibhalo
Njengoba sesitholile ukuthi ayikho indlela ngaphandle kwazo, masizigcwalise.
Kodwa ngaphambi kokuthi siqale ukusebenza ngamafayela, sidinga ukulungisa umyalo public.url
kufayela /opt/freeacs-tr069/config/application-config.conf
Phela, sisenokulungiselelwa kokuhlola okufakwe ngombhalo owodwa. Awukhohliwe?
# --- Public url (used for download f. ex.) ---
public.url = "http://10.110.0.109"
public.url: ${?PUBLIC_URL}
Qalisa kabusha i-ACS bese uqonda ngqo ku Files & Scripts
.
Kodwa okuvulwa ngathi manje sekungokweyunithi Yohlobo, i.e. emhlabeni wonke kuwo wonke amarutha e-hAP ac lite, kungaba irutha yegatsha, i-hotspot noma i-capsman. Asilidingi izinga eliphezulu kangaka okwamanje, ngakho-ke, ngaphambi kokusebenza ngemibhalo namafayela, kufanele udale iphrofayela. Ungayibiza ngokwakho, njenge "position" yedivayisi.
Masenze ingane yethu iseva yesikhathi. Indawo ehloniphekile enephakheji yesofthiwe ehlukile kanye nenani elincane lamapharamitha. Asambe siye Easy Provisioning > Profile > Create Profile
bese udala iphrofayili kokuthi Uhlobo Lweyunithi:hAPaclite iseva yesikhathi. Besingenawo amapharamitha kuphrofayela ezenzakalelayo, ngakho-ke akukho esingakukopisha Kopisha amapharamitha asuka kokuthi: "ungakopishi..."
Awekho amapharamitha lapha nhlobo, kodwa kuzokwazi ukusetha lawo esifuna ukuwabona kamuva kumaseva ethu esikhathi abunjwe kusuka ku-hAPaclite. Isibonelo, amakheli ajwayelekile amaseva e-NTP.
Ake siye ekucushweni kweyunithi, futhi sikuyise kuphrofayela yeseva yesikhathi
Ekugcineni siya ku Files & Scripts
, yenza imibhalo, futhi lapha silinde amabhanisi alula ngendlela emangalisayo.
Ukuze sisayinde iskripthi kuyunithi, sidinga ukukhetha Uhlobo:TR069_SCRIPT Π° Igama ΠΈ igama okuhlosiwe kufanele ibe nesandiso .alter
Ngasikhathi sinye, ngemibhalo, ngokungafani nesoftware, ungalayisha ifayela eliqediwe, noma umane ulibhale / ulihlele ensimini. Okuqukethwe. Ake sizame ukubhala khona lapho.
Futhi ukuze ukwazi ukubona umphumela ngokushesha - engeza i-vlan router ku-ether1
/interface vlan
add interface=ether1 name=vlan1 vlan-id=1
Siyashayela, siyacindezela Layisha futhi kwenziwe. Iskripthi sethu vlan1.alter
ukulinda emaphikweni.
Awu, asihambe? Cha. Sidinga futhi ukwengeza iqembu lephrofayela yethu. Amaqembu awafakiwe ohlwini lwamathuluzi, kodwa ayadingeka ukuze useshe amayunithi ku-UnitType noma Iphrofayela futhi ayadingeka ekusebenzeni kombhalo Ngokuhlinzeka Okuthuthukile. Ngokuvamile, amaqembu ahlotshaniswa nezindawo, futhi anesakhiwo esidleke. Masenze iqembu laseRussia.
Cabanga ukuthi sisanda kunciphisa ukusesha kwethu kusuka kokuthi "Zonke iziphakeli zesikhathi somhlaba ku-hAPaclite" kuya kokuthi "Wonke amaseva esikhathi sase-Russian ku-hAPaclite". Kusenongqimba olukhulu lwakho konke okuthokozisayo ngamaqembu, kodwa asinaso isikhathi. Ake singene emibhalweni.
Advanced Provisioning > Job > Create Job
Njengoba sikwimodi Ethuthukisiwe, ngemuva kwakho konke, lapha ungacacisa inqwaba yezimo ezihlukene zokuqala umsebenzi, ukuziphatha kwephutha, ukuphindaphinda kanye nokuphelelwa yisikhathi. Ngincoma ukuthi ufunde konke lokhu kumanyuwali noma sikuxoxe kamuva lapho ngikusebenzisa ekukhiqizeni. Okwamanje, ake sibeke imithetho ethi n1 kokuthi Misa ukuze umsebenzi ume ngokushesha lapho usuqediwe kuyunithi yethu yokuqala.
Sigcwalisa okudingekayo, futhi kusasele ukwethula kuphela!
Cindezela okuthi START bese ulinda. Manje isibali samadivayisi abulawe iskripthi esingalungiswanga kahle sizosebenza ngokushesha! Vele akunjalo. Imisebenzi enjalo inikezwa isikhathi eside, futhi lokhu kungumehluko wabo kusuka kumaskripthi, Ansible, njalonjalo. Amayunithi ngokwawo afaka imisebenzi kushejuli noma njengoba evela kunethiwekhi, i-ACS ilandelela ukuthi imaphi amayunithi aseyitholile kakade imisebenzi, nokuthi aphela kanjani, futhi ibhala lokhu kumapharamitha weyunithi. Kuneyunithi eyodwa eqenjini lethu, futhi ukube bekukhona abayi-1, umphathi ubezoqala lo msebenzi ayodoba.
Woza. Qalisa kabusha irutha noma uqale kabusha iklayenti le-TR-069. Konke kufanele kuhambe kahle futhi uMr.White uzothola i-vlan entsha. Futhi umsebenzi wethu we-Stop rule uzongena kusimo esithi SIMUSIWE. Okusho ukuthi, isengaqalwa kabusha noma ishintshwe. Uma ucindezela okuthi FINISH, umsebenzi uzosulwa kungobo yomlando
4.4 Ukubuyekeza isofthiwe
Leli phuzu elibaluleke kakhulu, njengoba i-firmware ye-Mikrotik i-modular, kodwa ukwengeza amamojula akushintshi inguqulo ye-firmware yedivayisi. I-ACS yethu ijwayelekile futhi ayijwayele lokhu.
Manje sizokwenza ngesitayela esisheshayo nesingcolile, bese sicindezela imojula ye-NTP ku-firmware evamile ngaso leso sikhathi, kodwa ngokushesha nje lapho inguqulo ibuyekezwa kudivayisi, ngeke sikwazi ukwengeza enye imojula ngendlela efanayo. .
Ekukhiqizeni, kungcono ukungasebenzisi iqhinga elinjalo, futhi ufake amamojula ongawakhetha Ohlotsheni Lweyunithi kuphela anemibhalo.
Ngakho-ke, into yokuqala okudingeka siyenze ukulungisa amaphakheji esofthiwe ezinguqulo ezidingekayo kanye nezakhiwo, futhi sizibeke kwenye iseva yewebhu etholakalayo. Ukuze kuhlolwe, noma ubani ongafinyelela kuMnu.White wethu uzohamba, futhi ngokukhiqiza, kungcono ukwakha isibuko sokubuyekeza ngokuzenzakalela sesofthiwe edingekayo, engesabi ukuyibeka kuwebhu.
Okubalulekile! Ungakhohlwa njalo ukufaka iphakheji ye-tr-069client kuzibuyekezo!
Njengoba kwenzeka, ubude bendlela eya emaphaketheni bubaluleke kakhulu! Lapho ngizama ukusebenzisa into efana http://192.168.0.237/routeros/stable/mipsbe/routeros-mipsbe-6.45.6.npk
, i-mikrotik iwele ekuxhumekeni komjikelezo nesisetshenziswa, ithumela amalogi aphindaphindiwe we-TRANSFERCOMPLETE ku-tr-069. Futhi ngamosha amangqamuzana emizwa ngizama ukuthola ukuthi yini engalungile. Ngakho-ke, ngenkathi siyibeka empandeni, kuze kube yilapho kucaciswa
Ngakho-ke, kufanele sibe namafayela amathathu we-npk atholakala nge-http. Ngithole kanje
http://192.168.0.241/routeros-mipsbe-6.45.6.npk
http://192.168.0.241/routeros/stable/mipsbe/ntp-6.45.6-mipsbe.npk
http://192.168.0.241/routeros/stable/mipsbe/tr069-client-6.45.6-mipsbe.npk
Manje lokhu kudinga ukufomethwa kube ifayela le-xml nge-FileType = "1 Isithombe Sokuthuthukisa I-Firmware", esizosiphakela ku-Mikrotik. Igama malithi ros.xml
Senza ngokwemiyalelo evela
<upgrade version="1" type="links">
<config />
<links>
<link>
<url>http://192.168.0.241/routeros-mipsbe-6.45.6.npk</url>
</link>
<link>
<url>http://192.168.0.241/ntp-6.45.6-mipsbe.npk</url>
</link>
<link>
<url>http://192.168.0.241/tr069-client-6.45.6-mipsbe.npk</url>
</link>
</links>
</upgrade>
Ukuntula kuyabonakala Username/Password
ukufinyelela iseva yokulanda. Ungazama ukukufaka njengokusesigabeni A.3.2.8 sephrothokholi ye-tr-069:
<link>
<url>http://192.168.0.237/routeros/stable/mipsbe/ntp-6.45.6-mipsbe.npk</url>
<Username>user</Username>
<Password>pass</Password>
</link>
Noma buza izikhulu ze-Mikrotik ngokuqondile, kanye nobude bendlela obukhulu ukuya * .npk
Siya kokwaziwayo Files & Scripts
, futhi udale ifayela le-SOFTWARE lapho nge Igama:ros.xml, Igama Lethagethi:ros.xml kanye version:6.45.6
Qaphela! Inguqulo kufanele icaciswe lapha ngendlela evezwe ngayo kudivayisi futhi idluliswe kupharamitha System.X_FREEACS-COM.Device.SoftwareVersion
.
Sikhetha ifayela lethu le-xm ukuze lilayishwe futhi usuqedile.
Manje sinezindlela eziningi zokubuyekeza idivayisi. NgeWizadi kumenyu enkulu, Ngokuhlinzeka Okuthuthukile kanye nemisebenzi ngohlobo lweSOFTWARE, noma vele uye ekucushweni kweyunithi bese uchofoza okuthi Thuthukisa. Ake sikhethe indlela elula, ngaphandle kwalokho isihloko sivuvukele.
Sicindezela inkinobho, siqalise ukunikezwa futhi usuqedile. Uhlelo lokuhlola seluqediwe. Manje singenza okwengeziwe nge-mikrotik.
5. Isiphetho
Lapho ngiqala ukubhala, ngangifuna ukuchaza kuqala ukuxhunywa kwe-ip-phone, futhi ngisebenzise isibonelo sayo ukuchaza ukuthi kungaba kuhle kanjani uma i-tr-069 isebenza kalula nangokuzikhandla. Kodwa-ke, njengoba ngithuthuka futhi ngimba ezintweni, ngacabanga ukuthi kulabo abaxhuma i-Mikrotik, akukho foni engeke isaba ukuzifundela.
Eqinisweni, ama-Freeacs, esiwahlolile, angakwazi kakade ukusetshenziswa ekukhiqizeni, kodwa kulokhu udinga ukumisa ukuphepha, i-SSL, udinga ukumisa ama-microtics ukuze ulungise ngokuzenzakalela ngemva kokusetha kabusha, udinga ukulungisa iphutha lokwengezwa okulungile kohlobo lweyunithi, ukuqaqa umsebenzi wama-webservices kanye negobolondo le-fusion, nokunye okuningi. Zama, sungula, futhi ubhale inkondlo elama!
Wonke umuntu, siyabonga ngokunaka kwakho! Ngizokujabulela ukulungiswa kanye nokuphawula!
Uhlu lwezinto ezisetshenzisiwe nezixhumanisi eziwusizo:
Source: www.habr.com