Table of Contents:

• 1. Introduction
• 2. Gateway Setup Instruction
  • 2.1 Step 1:  Sign up for an AWS account and select the area
  • 2.2 Step 2:  Add an IAM role
  • 2.3 Step 3: Add gateway
  • 2.4 Step 4: Get a unique Gateway ID in the gateway
  • 2.5 Step 5: Configure the gateway and Creation gateway certificates
  • 2.6 Step 6: Add the configuration to the Gateway Web UI.
  • 2.7 Step 8: Check the last upLink received
  • 2.8 Trouble Shooting
    • 1. WS connect failed: NET - Failed
    • 2.  gateway station log displays "Recv failed: SSL - The peer notified us that The connection is going to be closed".
    • 3.  gateway station log displays "Failed to retrieve TCURI from CUPS: (400) Bad Request".
    • 4.  gateway station log displays "[4] Send failed: NET - Connection was reset by peer"
    • 5. gateway station log displays "Malformed CUPS response: URI segments lengths (227) exceed available data (199)"
• 3. Add wireless device
  • 3.1 step 1 : Add device profile
    • 3.1.1 CREATE DEVICE PROFILE
    • 3.1.2 CREATE SERVICE PROFILE
  • 3.2 Step 2 : Create an IAM roles for destinations
    • 3.2.1 CREATE DESTINATION
    • 3.2.2 CREATE IOT RULE
  • 3.3 Step 3 : Create a destination for end node payloadDate
  • 3.4 Step 4 : CREATE WIRELESS DEVICE
    • 3.4.1 Open Add wireless device
    • 3.4.2 Select a destination
    • 3.4.3 Verify data ingestion
• 4. Format a notification by using an AWS Lambda function
  • 4.1 Introduction
    • 4.1.1 What you'll learn in this tutorial
    • 4.1.2 In this tutorial, you'll:
  • 4.2 Approach A: DECODING BINARY PAYLOADS
    • 4.2.1 Step 1 : Start deployment of a severless application with AWS Lambda function and AWS ioT Rule
    • 4.2.2 Step 2 : Update the Destination rule and get the device's payload
      • 1.  Find the IoT Rule MyWorkshopLoRaWANRuleWithDecoder_…
      • 2.  Create a Destination with IoT Rule
      • 3.  Update the destination to the device
      • 4.  Check the payload
  • 4.3 Approach B Create an AWS Lambda function that sends a text message
    • 4.3.1 Step 1 : To create an AWS Lambda function that sends a text message
      • 1.  Create a new AWS Lambda function.
      • 2.  Modify the blueprint code to format and send an Amazon SNS notification.
      • 3.  In a new window, look up the Amazon Resource Name (ARN) of your Amazon SNS topic from the tutorial about how to Send an Amazon SNS notification.
      • 4.  Create a test case for your Lambda function.
    • 4.3.2 Step 2 : Create Rule with Lambda function
• 5. For End Node
  • 5.1 AWS Downlink Note
  • 5.2 Node decoder
• 6. Trouble Shooting
  • 6.1 Time sync& Time drift
    • Time Sync
    • Time drift
• 7. Reference

1. Introduction

The Dragino LoRaWAN gateway can communicate with Amazon LoRaWAN Network Server:

Below list of the support products and Requirements:

1. LoRaWAN Gateway model: LIG16, LG308, DLOS8 LPS8

2. Firmware version since:lgw--build-v5.4.1614945073

What you'll learn in this tutorial

1. How to register a gateway with AWS

2. How to register an end node with AWS

3. How to accept payload date with AWS

2. Gateway Setup Instruction

2.1 Step 1:  Sign up for an AWS account and select the area

Sign up for an AWS account

Select area

Note: Currently, AWS IoT Core for LoRaWAN is available today in US East (N. Virginia) and Europe (Ireland) Regions. if you are not in either of these areas, their options will not affect your usage.

2.2 Step 2:  Add an IAM role

To add the IAM role to allow the Configuration and Update Server (CUPS) to manage gateway credentials:

1. Open the Roles hub of the IAM console and choose Create role.

2. If you think that you might have already added the IoTWirelessGatewayCertManagerRole role, in the search bar, enter IoTWirelessGatewayCertManagerRole.

If you see an IoTWirelessGatewayCertManagerRole role in the search results, you have the necessary IAM role. You can leave the procedure now.

If the search results are empty, you don't have the necessary IAM role. Continue the procedure to add it.

3. In Select type of trusted entity, choose Another AWS account.

4. In Account ID, enter your AWS account ID and then choose Next: Permissions.

5. In the search box, enter AWSIoTWirelessGatewayCertManager.

6. In the list of search results, select the policy named AWSIoTWirelessGatewayCertManager.

7. Choose Next: Tags, and then choose Next: Review.

8. In Role name, enter IoTWirelessGatewayCertManagerRole, and then choose to Create role.

9. To edit the new role, in the confirmation message, choose IoTWirelessGatewayCertManagerRole.

10. In Summary, choose the Trust relationships tab and then choose Edit trust relationship.

11. In the Policy Document, change the Principal property to look like this example.

12. To save your changes and exit, choose Update Trust Policy. Note: You've now created the IoTWirelessGatewayCertManagerRole. You won't need to do this again.

start create role

Choose this account

start Create policy

Modifying the policy editor

Change policy Document

In role name,enter AWSIoTWirelessGatewayCertManagerRole,and then choose Create role.

To edit the_new role

Choose Edit trust policy.

Change role Document

2.3 Step 3: Add gateway

Locate IoT Core in the AWS Service Control Panel, and locate the Wireless Connection in the IoT Core Control Panel to start adding the Gateway

Locate IoT Core in the AWS Service Control Panel

locate the Wireless Connection in the IoT Core Control Panel

2.4 Step 4: Get a unique Gateway ID in the gateway

Every gateway has a Gateway ID, which can be found on LoRaWAN -- Basic Station page.

Gateway ID

Note: User must use the Gateway ID of the LoRaWAN -- Basic Station page as the EUI

Notice: In the latest firmware. the AWS-IoT configured page is under the LoRaWAN Basic Station page.

LoRaWAN Basic Station

2.5 Step 5: Configure the gateway and Creation gateway certificates

Configure the gateway and Creation gateway certificates

Configure the gateway

Creation gateway certificates

Note: User Make sure the name of the downloaded file remains the same.

2.6 Step 6: Add the configuration to the Gateway Web UI.

user returns to your gateway, and start adding the three file they got to the gateway.

Configure the gateway

if the user Upload successfully you will see:

Uploaded successfully

Notice: User must select the correct Upload on the suffix name, otherwise the upload fails.

Notice: After the user hits "Save&Apply", the gateway will start Station mode on its own.

2.7 Step 8: Check the last upLink received

After the above settings, the gateway should be able to connect, the figure below shows the data of the Last upLink received

On the gateway Web UI

On the AWS console

UpLink received

2.8 Trouble Shooting

In normal cases, the logs of the gateway station are as follows:

1. WS connect failed: NET - Failed

The log output indicates that the gateway was unable to resolve to an IP address from the domain name and then connect to the AWS lns server.

Here is the advice:

1). Whether the gateway is registered cycle to AWS multiple times?

2). Check if the  gateway's EUI is the same as the AWS's

3). Change the gateway EUI and use the new EUI to register and connect the AWS.

2.  gateway station log displays "Recv failed: SSL - The peer notified us that The connection is going to be closed".

In this case, the user needs to check whether the Gateway ID matches the GatewayEUI on AWS IoT Core.

If the configuration is incorrect, user can first click "Restore_Configuration" and then reconfigure it.

3.  gateway station log displays "Failed to retrieve TCURI from CUPS: (400) Bad Request".

In this case, the user needs to check whether the CUPS URI matches the CUPS URI on AWS IoT Core.

It is recommended to re-check the configuration by following Step 5 in the wiki.

4.  gateway station log displays "[4] Send failed: NET - Connection was reset by peer"

If the following information is displayed in the gateway station log, it indicates that the station version is too early and the configuration file is missing,

Users need to upgrade the firmware of the gateway. users can download the latest firmware from this link : lgw--build-v5.4.1661158991-20220822-1704

5. gateway station log displays "Malformed CUPS response: URI segments lengths (227) exceed available data (199)"

In this case, the user needs to check whether the Gateway ID matches the GatewayEUI on AWS IoT Core.

3. Add wireless device

3.1 step 1 : Add device profile

3.1.1 CREATE DEVICE PROFILE

select profile in the Control Panel and add configuration adn service files.the device's configuration paranmeters depend on the LoRaWAN specification it uses.The configuration parameters are found in the device's documentation or on the device itself.

Add device profile

Provide device data

device profile

Notice : See the documentation for more information: https://docs.aws.amazon.com/iot/latest/developerguide/connect-iot-lorawan-define-profiles.html

3.1.2 CREATE SERVICE PROFILE

Select “Profiles” view and click on “Add service profile”.

Add a service profile

Add service profile2

3.2 Step 2 : Create an IAM roles for destinations

AWS IoT Core for LoRaWAN destinations require IAM roles that give AWS IoT Core for LoRaWAN the permissions necessary to send data to the AWS IoT rule. If such a role is not already defined, you'll need to define it so that it will appear in the list of roles.

To create an IAM policy for your AWS IoT Core for LoRaWAN destination role:

1. Open the Policies hub of the IAM console.

2. Choose Create policy, and choose the JSON tab.

3. In the editor, delete any content from the editor and paste this policy document.

4. Choose Review policy, and in Name, enter a name for this policy. You'll need this name to use in the next procedure. You can also describe this policy in Description, if you want.

5. Choose Create policy.

To create an IAM role for an AWS IoT Core for LoRaWAN destination:

1. Open the Roles hub of the IAM console and choose Create role.

2. In Select type of trusted entity, choose Another AWS account.

3. In Account ID, enter your AWS account ID, and then choose Next: Permissions.

4. In the search box, enter the name of the IAM policy that you created in the previous procedure.

5. In the search results, check the IAM policy that you created in the previous procedure.

6. Choose Next: Tags, and then choose Next: Review.

7. In Role name, enter the name of this role, and then choose Create role.

8. In the confirmation message, choose the name of the role you created to edit the new role.

9. In Summary, choose the Trust relationships tab, and then choose Edit trust relationship.

10. In Policy Document, change the Principal property to look like this example.

After you change the Principal property, the complete policy document should look like this example.

11. To save your changes and exit, choose Update Trust Policy.

With this role defined, you can find it in the list of roles when you configure your AWS IoT Core for LoRaWAN destinations.

3.2.1 CREATE DESTINATION

Select Destinations view

Please click on “Destinations” menu and afterwards please click on “Add destination”.

Select destinations

Provide input

Please provide the following input:

click on “Add destination”

provide input

3.2.2 CREATE IOT RULE

Create Rule

user navigating to AWS IoT , Act, Rules and clicking on “Create” button.

Rule create

Provide a rule name'

Enter Rule name

Provide IoT SQL query statement

Please put the following text into the rule query statement: SELECT *, timestamp() as timestamp

Enter SQL query statement

Select action “Republish to an AWS IoT Topic”

3.3 Step 3 : Create a destination for end node payloadDate

The PayloadDate of the node will be sent to this destination

a. In the destinatons,choose add destination.

b. In IMA Role, select the Role you created in the last step

c. In Destination name, give this destination a destination name.

d. In Rule name, give this rule a new name and remember it.

e. choose Add Destination.

Add destination

Note: The destination rule configuration sent by the end node payloadDate will be in the next step.

3.4 Step 4 : CREATE WIRELESS DEVICE

Users can register end nodes with AWS.

3.4.1 Open Add wireless device

Add device

Enter device keys

Select device and service profile

Seleck profile

3.4.2 Select a destination

Plese select a destination you have created in one of the previous steps and choose add device

Add device_choose destition

REVIEW THE CREATED DEVICER

Uplink Received

VERIFY DEVICE CONNECTIVITY

Verify device connectivity

3.4.3 Verify data ingestion

Open MQTT Test Client

Open MQTT Client

Subscribe to topic

Subscription Topic

Trigger your device to send telemetry

User can start the registered device

Review the incoming message from uesr's device

Please find below an explanation for some of the attributes:

Review message

How to decode Base64 data into hexadecimal representation

You can run the following command in your shell to decode Base64 payload data into their hexadecimal representation.

MacOS

Linux

Example

4. Format a notification by using an AWS Lambda function

4.1 Introduction

This tutorial demonstrates how to send MQTT message data to an AWS Lambda action for formatting and sending to another AWS service. In this tutorial, the AWS Lambda action uses the AWS SDK to send the formatted message to the Amazon SNS topic

4.1.1 What you'll learn in this tutorial

How to create and test an AWS Lambda function

How to use the AWS SDK in an AWS Lambda function to publish an Amazon SNS notification

How to use simple SQL queries and functions in a rule query statement

How to use the MQTT client to test an AWS IoT rule

4.1.2 In this tutorial, you'll:

4.2 Approach A: DECODING BINARY PAYLOADS

4.2.1 Step 1 : Start deployment of a severless application with AWS Lambda function and AWS ioT Rule

1. Open AWS Lambda console by clicking on link

Users need to select the corresponding link according to the region they have selected ,For example: us-east-1 , eu-west-1

2. Select a decoder

Device Decoder name

LHT65 dragino_lht65

LBT1 dragino_lbt1

LSE01 dragino_lse01

LGT92 dragino_lgt92

LDS01 dragino_lds01

After that please check the box “I acknowledge that AWS CloudFormation might create IAM resources". 

"I acknowledge that AWS CloudFormation might create IAM resources with custom names."

"I acknowledge that AWS CloudFormation might require the following capability: CAPABILITY_AUTO_EXPAND"

and click on "Create stack"

Seleck a decoder name

3. Review deployment

Review deployment

4. Create the test event

Please click on “Configure the test event”

Create the test event

Create a new event

5. Provide PayloadData sample

[[File:replace <Sample PayloadDate>.png|600px|none|thumb|replace <Sample PayloadDate>]]

6. Edit project Files

The project file needs to be modified when the user needs to test or add a new decoder, feel invited to switch to the “Code” section of the AWS Lambda function and inspect the Python source code. You will find the decoders for the individual devices in the directory decoders. The AWS Lambda function handler is in file app.py

Users can find the required decoder in this link, then added to the project.

How to modify see the figure below:

After the user finishes editing, Click on the "Deploy"

7. Run a test

Please click on “Test”.

8. Check whether the decoding succeeds 

The following example is the successful decoding of LHT52,

9. Note the AWS Lamdbda function ARN

4.2.2 Step 2 : Update the Destination rule and get the device's payload

In this step, you update the IoT rule that forwards the device payload to your application. This rule is associated with the destination created earlier in Set up a Destination for device traffic.

1.  Find the IoT Rule MyWorkshopLoRaWANRuleWithDecoder_…

Please put the IoT Rule name prefix MyWorkshopLoRaWANRuleWithDecoder_ into the search field and click on the search symbol. The rule named MyWorkshopLoRaWANRuleWithDecoder_<Decoder name> should appear:

Find the IoT rule

2.  Create a Destination with IoT Rule

(MyWorkshopLoRaWANRuleWithDecoder_dragino_lht65)

Create a Destnation

3.  Update the destination to the device

Update the destination to the device

4.  Check the payload

Approach A with MQTT

click the rule

click the rule

Copy the Topic name

copy the rule name

Open MQTT client and subscrlibe Topic

Open MQTT client and subscrlibe Topic

Get the payload

Get the payload

Approach B with Lamdbda

open lamdbda console and click the application

open lamdbda console and click the application

open lamdbda console and click the application

View logs in CloudWatch

View logs in CloudWatch

View logs in CloudWatch

4.3 Approach B Create an AWS Lambda function that sends a text message

The AWS Lambda function in this tutorial receives the result of the rule query statement, inserts the elements into a text string, and sends the resulting string to Amazon SNS as the message in a notification.

4.3.1 Step 1 : To create an AWS Lambda function that sends a text message

1.  Create a new AWS Lambda function.

a. In the AWS Lambda console, choose Create function.

Create function

blueprint

c. In Basic information:

blueprint

2.  Modify the blueprint code to format and send an Amazon SNS notification.

e. Choose Deploy.

Note: Replace the value of TopicArn with the ARN of the Amazon SNS topic that you created SNS topic in which SNS

Note: If you don't have SNS topic it does't affect the use of Lambda.About how to Create SNS topic will be show next chapter

3.  In a new window, look up the Amazon Resource Name (ARN) of your Amazon SNS topic from the tutorial about how to Send an Amazon SNS notification.

4.  Create a test case for your Lambda function.

a. In the Lambda Functionspage of the console,from Select a test eventto select Configure test events

Configure test events

c. choose Create

event create

event test

e. Under your Lambda function code, on the Execution result tab, you see the output from the Lambda function.

event output

Now The Lambda function table is created

4.3.2 Step 2 : Create Rule with Lambda function

1. Browse to the AWS IoT console, and in the navigation pane, select Act

File: Console Act.png

2. Choose Create to create an AWS IoT rule.

create Rule

3. On the Create a rule page, enter a name for your rule.

enter a Rule name

4. In Rule query statement, enter the following query:

enter the following query

5. In Set one or more actions, select Add action.

Add action

6. Under the select operation, select Send a Message to a Lambda Function and then select the configuration operation.

select operation

5. For End Node

5.1 AWS Downlink Note

Prerequisites: The node must be online in real-time before downlink.

Convert the data to Base64

When the serial port logs of downlink are received, the Receive date is displayed

In addition to the above methods, there is also a downlink,This method requires a certain amount of manipulation,

Users can view this Downlink method 2

5.2 Node decoder

Decode LHT65

6. Trouble Shooting

6.1 Time sync& Time drift

Time Sync

This is the normal log output of the station because the log level is Debug so the time sync info will be output as the debug.

For example, the station keeps statistics on the time sync quality and discards measurements whose quality is considered an outlier:

 Time sync rejected: quality=413 threshold=354 and  Time sync qualities: min=293 q90=354 max=407 (previous q90=2147483647)

Time drift

Time drift is for the Class B device. so if your device is not class B and can transfer the data to AWS normally, you can ignore it

7. Reference

• Video Introduction for how to use LoRaWAN AWS-IoT Core
• AWS LoRaWAN Workshop
• AWS IoT Core for LoRaWAN - Smart Building Solution Workshop with Dragino Devices