Wiki source code of Monitor & Remote Access Gateway
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
 |
1.1 | 1 | {{box cssClass="floatinginfobox" title="**Contents**"}} |
| 2 | {{toc/}} | ||
| 3 | {{/box}} | ||
| 4 | |||
 |
11.2 | 5 | = **1. Monitor Gateway** = |
| |
1.1 | 6 | |
| |
11.2 | 7 | == **1.1 Introduction** == |
| |
1.1 | 8 | |
| 9 | This introduction shows how to use a script to monitor the gateway. The video link for this instruction is: [[https:~~/~~/youtu.be/8PieIwfSF_g>>url:https://youtu.be/8PieIwfSF_g]] | ||
| 10 | |||
| |
9.2 | 11 | [[image:image-20220531144606-1.png]] |
| |
1.1 | 12 | |
| |
8.3 | 13 | |
| |
11.2 | 14 | == **1.2 Steps** == |
| |
1.1 | 15 | |
| 16 | * Create account in ThingsSpeak and creat channel. | ||
| 17 | * Download script from dragino site and move it to properly directory | ||
| 18 | |||
| 19 | (% class="box infomessage" %) | ||
| 20 | ((( | ||
| 21 | root@dragino-1baf44:~~# wget [[http:~~/~~/www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh>>url:http://www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh]] | ||
| 22 | Downloading '[[http:~~/~~/www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh'>>url:http://www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh']] | ||
| 23 | Connecting to 162.241.22.11:80 | ||
| 24 | Writing to 'monitor_gateway.sh' | ||
| 25 | monitor_gateway.sh 100% |~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~**| 1860 0:00:00 ETA | ||
| 26 | Download completed (1860 bytes) | ||
| 27 | root@dragino-1baf44:~~# chmod +x monitor_gateway.sh;mv monitor_gateway.sh /usr/bin/ | ||
| 28 | root@dragino-1baf44:~~# | ||
| 29 | root@dragino-1baf44:~~# | ||
| 30 | ))) | ||
| 31 | |||
| 32 | * change the script monitor_gateway.sh with properly users setting: | ||
| 33 | |||
| 34 | (% class="box infomessage" %) | ||
| 35 | ((( | ||
| 36 | USER='xxxxx' # user name in your thinkspeak ~-~-> Profile | ||
| 37 | PASS='xxxxx' #MQTT_API_KEY in your thinkspeak ~-~-> Profile | ||
| 38 | CHAN_ID='xxxx' #Channel ID of the channel for this gateway | ||
| 39 | CHAN_KEY='xxxxx' #Channel Write API of the channel for this gateway | ||
| 40 | ))) | ||
| 41 | |||
| 42 | * run **/usr/bin/monitor_gateway.sh** to test if upload is good. | ||
| 43 | |||
| 44 | * Add monitor_gateway.sh to cron work **/etc/crontabs/root** to make this script runs perdiocally, below is an example to update every 20 minutes | ||
| 45 | |||
| 46 | (% class="box infomessage" %) | ||
| 47 | ((( | ||
| |
7.1 | 48 | # For details see man 4 crontabs |
| |
1.1 | 49 | # Example of job definition: |
| 50 | # .~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~- minute (0 - 59) | ||
| 51 | # | .~-~-~-~-~-~-~-~-~-~-~-~-- hour (0 - 23) | ||
| 52 | # | | .~-~-~-~-~-~-~-~-~-~- day of month (1 - 31) | ||
| 53 | # | | | .~-~-~-~-~-~-- month (1 - 12) OR jan,feb,mar,apr ... | ||
| 54 | # | | | | .~-~-~-~- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat | ||
| 55 | # | | | | | | ||
| 56 | # * * * * * user-name command to be executed | ||
| 57 | #*/10 * * * * checklog | ||
| 58 | ~* 23 * * * /etc/init.d/auto_update start | ||
| |
2.1 | 59 | */20 * * * * /usr/bin/monitor_gateway.sh |
| |
1.1 | 60 | ))) |
| 61 | |||
| 62 | * Reboot device. | ||
| 63 | |||
| |
25.5 | 64 | |
| 65 | |||
| |
11.2 | 66 | == **1.3 Monitor Public IP** == |
| |
8.2 | 67 | |
| |
1.1 | 68 | The monitor_gateway.sh has been updated to upload the public ip of the device as well. |
| 69 | |||
| 70 | User can find the public ip in field7, the chart is not able to show the complete public ip, user can check that in the export. | ||
| 71 | |||
| |
10.2 | 72 | [[image:image-20220531145559-2.png]] |
| |
1.1 | 73 | |
| 74 | Find Public IP | ||
| 75 | |||
| 76 | |||
| 77 | |||
| |
11.2 | 78 | = **2. Remote Access** = |
| |
1.1 | 79 | |
| |
11.2 | 80 | == **2.1 Remote Access via Remote.it.** == |
| |
1.1 | 81 | |
| 82 | Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand. | ||
| 83 | |||
| 84 | Important Notice: | ||
| 85 | |||
| 86 | * Remote.it access will give full control of your device to remote support. | ||
| 87 | * The Remote.it allow Dragino Support to remote access to the device, If user want to access himself, it need to sign up for an remote.it account. | ||
| 88 | |||
| 89 | For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]]. | ||
| 90 | |||
| 91 | |||
| |
11.2 | 92 | == **2.2 RSSH Introduction** == |
| |
1.1 | 93 | |
| |
2.1 | 94 | Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand. |
| |
1.1 | 95 | |
| |
2.1 | 96 | Important Notice: |
| |
1.1 | 97 | |
| |
2.2 | 98 | (% class="box warningmessage" %) |
| |
2.1 | 99 | ((( |
| 100 | RSSH access will give full control of your device to remote support. Please remove sensitivity info before perform this | ||
| 101 | This RSSH allow Dragino Support to remote access to the device, If user want to access himself, he need to set up the RSSH server himself. | ||
| 102 | ))) | ||
| 103 | |||
| 104 | Below gateway support reverse SSH access: | ||
| 105 | |||
| |
4.1 | 106 | * Firmware Version > lgw~-~-build-v5.4.1618196981-20210412-1111 [[Firmware Download>>url:http://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/LPS8/Firmware/Release/]] |
| |
2.1 | 107 | * LG01N, OLG01N (Note: LG01-P LG01-S doesn't support) |
| 108 | * LG02, OLG02 | ||
| 109 | * LG308, DLOS8 | ||
| 110 | * LPS8 | ||
| 111 | * LIG16 | ||
| 112 | * MS14 series if installed with the same firmware. | ||
| 113 | |||
| |
25.4 | 114 | |
| 115 | |||
| |
11.2 | 116 | === **2.2.1 End User Guide to use SSH access** === |
| |
9.5 | 117 | |
| |
4.1 | 118 | Go to this the Reverse SSH page as below: |
| |
1.1 | 119 | |
| |
11.2 | 120 | [[image:image-20220531150151-3.png]] |
| |
1.1 | 121 | |
| |
4.1 | 122 | Get the RSSH configure page |
| |
1.1 | 123 | |
| |
11.3 | 124 | |
| 125 | |||
| |
12.2 | 126 | [[image:image-20220531150338-4.png]] |
| |
1.1 | 127 | |
| |
4.1 | 128 | Connection OK. |
| 129 | |||
| |
12.2 | 130 | |
| |
12.3 | 131 | * (% style="color:#037691" %)**Login ID**(%%): Input sshuser |
| 132 | * (% style="color:#037691" %)**Host Address**(%%): Input support.dragino.com | ||
| 133 | * (% style="color:#037691" %)**Host Port** (%%): Please email to support @ dragino.com to get a valid host port. | ||
| 134 | * (% style="color:#037691" %)**Connect at Startup**(%%) : Choose to enable connect once the device is powered. | ||
| 135 | * (% style="color:#037691" %)**Network Keys**(%%): Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to | ||
| |
4.1 | 136 | |
| 137 | After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway. | ||
| 138 | |||
| |
5.1 | 139 | |
| |
9.8 | 140 | === **2.2.2 Set Up RSSH Server** === |
| |
5.1 | 141 | |
| |
5.2 | 142 | Advance administrator can config a SSH server to provide support their end user themselves., Steps as below |
| |
5.1 | 143 | |
| 144 | |||
| |
9.8 | 145 | ==== **2.2.2.1 Step 1:Download the SSH service code** ==== |
| |
9.7 | 146 | |
| |
5.1 | 147 | 1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server |
| 148 | |||
| |
13.2 | 149 | [[image:image-20220531150750-5.png]] |
| |
5.1 | 150 | |
| 151 | 2).cd rssh-server; sudo make ~-~--> to Generate the execute file：rssh_serv | ||
| 152 | |||
| |
14.2 | 153 | [[image:image-20220531150811-6.png]] |
| |
5.1 | 154 | |
| 155 | |||
| 156 | **Debug** : | ||
| 157 | |||
| |
14.3 | 158 | ((( |
| 159 | (% class="box" %) | ||
| 160 | ((( | ||
| 161 | if you git fail. ~-~-> (% style="color:#037691" %)**sudo: git: command not found**(%%). | ||
| 162 | please install git. ~-~-> (% style="color:#037691" %)**yum install git -y or apt-get install git -y**(%%). | ||
| 163 | if you make error 127,it** (% style="color:#037691" %)lack of gcc(%%)**. | ||
| 164 | please install gcc. ~-~-> (% style="color:#037691" %)**yum install gcc**(%%). | ||
| 165 | ))) | ||
| 166 | ))) | ||
| |
5.1 | 167 | |
| |
15.2 | 168 | [[image:image-20220531151516-7.png]] |
| |
5.1 | 169 | |
| 170 | |||
| |
15.2 | 171 | ((( |
| 172 | (% class="box" %) | ||
| 173 | ((( | ||
| 174 | if you make a fatal error : sqlite3.h,it (% style="color:#037691" %)**lack of sqlite3**(%%). | ||
| 175 | please insatell sqlite3. | ||
| 176 | ))) | ||
| 177 | ))) | ||
| |
5.1 | 178 | |
| |
16.2 | 179 | [[image:image-20220531151628-8.png]] |
| |
5.1 | 180 | |
| 181 | |||
| |
5.2 | 182 | **How to install Sqlit3** |
| |
5.1 | 183 | |
| |
5.2 | 184 | (% class="box infomessage" %) |
| 185 | ((( | ||
| 186 | Step1:Download the SQLit3 installation package | ||
| |
16.4 | 187 | sudo wget **[[https:~~/~~/www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz>>url:https://www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz]]** |
| 188 | |||
| |
5.2 | 189 | Step2:tar the SQLit3 installation package |
| |
5.1 | 190 | sudo tar -zxvf sqlite-autoconf-3350300.tar.gz |
| |
5.2 | 191 | Step3:Generate the makefile |
| |
5.1 | 192 | cd sqlite-autoconf-3350300/;./configure |
| |
5.2 | 193 | Step4:Compile makefile |
| |
5.1 | 194 | sudo make |
| |
5.2 | 195 | Step5:Install makefile |
| |
5.1 | 196 | sudo make install |
| |
5.2 | 197 | Check: |
| 198 | cd /usr/local/bin;ls -al ~-~-> Check to see if there is a file for sqlite3 | ||
| 199 | cd sqlite-autoconf-3350300/;./sqlite3 test.db ~-~-> Test whether the sqlite3 was installed successfully | ||
| 200 | debug: | ||
| |
5.1 | 201 | If you get the imformation that is SQLite header and source version mismatch, when you execute./sqlite3 test.db. |
| 202 | Please execute the command /sbin/ldconfig. | ||
| 203 | After that execute the command ./sqlite3 test.db again. | ||
| |
5.2 | 204 | ))) |
| 205 | |||
| 206 | ===== ===== | ||
| 207 | |||
| |
9.9 | 208 | ==== **2.2.2.2 Step 2 :Install and run the RSS service** ==== |
| |
5.2 | 209 | |
| 210 | 1):install database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) | ||
| 211 | |||
| 212 | user must enter the root account and run the following commands | ||
| 213 | |||
| 214 | (% class="box infomessage" %) | ||
| 215 | ((( | ||
| |
16.3 | 216 | $ ./create_sqlite3_db.sh |
| |
5.2 | 217 | $ ./rssh_serv -p 3721 2>&1 & |
| 218 | $ ps -ef | grep rssh_serv check 3721 port | ||
| 219 | ))) | ||
| 220 | |||
| |
18.2 | 221 | [[image:image-20220531151958-10.png]] |
| |
5.2 | 222 | |
| 223 | |||
| 224 | **Debug:** | ||
| 225 | |||
| 226 | {{{ Check /var/rsshdb.sqlite3 --> ls /var/rsshdb.sqlite3 | ||
| 227 | Check ls /var/rsshdb.sqlite3 --> sudo chmod 777 rssh_serv | ||
| |
5.1 | 228 | }}} |
| 229 | |||
| |
5.2 | 230 | {{{ if fail to open dpvlry or to bind to it |
| 231 | please kill rssh_serv,and run ./rssh_serv -p 3721 2>&1 & again | ||
| 232 | }}} | ||
| |
5.1 | 233 | |
| |
5.2 | 234 | ===== ===== |
| 235 | |||
| 236 | ===== ===== | ||
| 237 | |||
| |
9.9 | 238 | ==== **2.2.2.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway)** ==== |
| |
5.2 | 239 | |
| 240 | (% class="box infomessage" %) | ||
| 241 | ((( | ||
| 242 | 1):sudo useradd XXXXX (custom user name) | ||
| 243 | 2):sudo passwd xxxxxx | ||
| 244 | 3):cp /bin/bash /bin/rbash | ||
| 245 | 4):sudo nano /etc/passwd ~-~-> Change /bin/bash to /bin/rbash | ||
| 246 | 5):sudo nano /home/xxxxx/.bashrc **empty it,and input export PATH=$HOME/bin** | ||
| 247 | 6):sudo nano /home/xxxxx/.bash_profile **empty it,and input export PATH=$HOME/bin** | ||
| 248 | ))) | ||
| 249 | |||
| 250 | **Now user "XXXXX" is the user with limited permissions of the current system** | ||
| 251 | |||
| |
7.1 | 252 | |
| |
18.3 | 253 | |
| |
9.9 | 254 | ==== **2.2.2.4 Step4:Create an authorization key file** ==== |
| |
7.1 | 255 | |
| 256 | 1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey | ||
| 257 | |||
| 258 | **Debug:** | ||
| 259 | |||
| 260 | {{{ check: sudo ls /home/xxxxx/.ssh/authorizedkey}}} | ||
| 261 | |||
| 262 | |||
| 263 | |||
| |
9.9 | 264 | === **2.3 How does user get the gateway to connect to a user's private server** === |
| |
5.2 | 265 | |
| 266 | |||
| |
9.9 | 267 | ==== **2.3.1 Step1: Come back the gateway web UI to get the gateway Public key** ==== |
| 268 | |||
| |
19.3 | 269 | 1)in the system ~-~-> (% style="color:#037691" %)**Remote Mgmt/span** |
| |
5.2 | 270 | |
| |
19.2 | 271 | [[image:image-20220531152419-11.png]] |
| |
5.2 | 272 | |
| 273 | |||
| |
9.9 | 274 | ==== **2.3.2 Step2: Authorization server** ==== |
| |
5.2 | 275 | |
| |
7.1 | 276 | Input the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file. |
| |
5.2 | 277 | |
| |
20.2 | 278 | [[image:image-20220531152549-12.png]] |
| |
5.2 | 279 | |
| 280 | |||
| |
9.9 | 281 | ===== **2.3.3 Step3: Connect private server** ===== |
| |
5.2 | 282 | |
| |
7.1 | 283 | This is same as connect Dragino Support Server but just change the server address to customize server address. |
| |
5.2 | 284 | |
| |
21.2 | 285 | [[image:image-20220531152633-13.png]] |
| |
5.2 | 286 | |
| 287 | |||
| 288 | |||
| |
9.9 | 289 | ===== **2.3.4 Step 4 :Check Connection** ===== |
| |
5.2 | 290 | |
| 291 | Rssh Host connection Ok | ||
| 292 | |||
| |
22.2 | 293 | [[image:image-20220531152815-14.png]] |
| |
5.2 | 294 | |
| 295 | |||
| |
7.1 | 296 | User can use common ps | grep ssh to check it in the gateway. |
| |
5.2 | 297 | |
| |
23.2 | 298 | [[image:image-20220531152840-15.png]] |
| |
5.2 | 299 | |
| 300 | |||
| |
9.9 | 301 | ==== **2.3.5 Step5:Access the gateway from customized server** ==== |
| |
5.2 | 302 | |
| |
7.1 | 303 | Check what gateways link to server. |
| |
5.2 | 304 | |
| |
24.2 | 305 | (% class="box infomessage" %) |
| 306 | ((( | ||
| |
7.1 | 307 | $ ./connect-gw.sh -l |
| |
24.2 | 308 | ))) |
| |
5.2 | 309 | |
| |
24.2 | 310 | [[image:image-20220531153016-16.png]] |
| |
5.2 | 311 | |
| 312 | |||
| 313 | |||
| |
7.1 | 314 | Access the gateway |
| |
5.2 | 315 | |
| |
25.2 | 316 | (% class="box infomessage" %) |
| 317 | ((( | ||
| |
7.1 | 318 | $ ./connect-gw.sh <GWID> |
| |
25.2 | 319 | ))) |
| |
5.2 | 320 | |
| |
25.2 | 321 | [[image:image-20220531153219-17.png]] |