Wiki source code of Monitor & Remote Access Gateway

Version 25.7 by Xiaoling on 2022/05/31 15:35

version	line-number	content
25.6	1	Contents:
	2
1.1	3	{{toc/}}
	4
25.6	5
	6
25.7	7
11.2	8	= 1. Monitor Gateway =
1.1	9
11.2	10	== 1.1 Introduction ==
1.1	11
	12	This introduction shows how to use a script to monitor the gateway. The video link for this instruction is: [[https:~~/~~/youtu.be/8PieIwfSF_g>>url:https://youtu.be/8PieIwfSF_g]]
	13
9.2	14	[[image:image-20220531144606-1.png]]
1.1	15
8.3	16
11.2	17	== 1.2 Steps ==
1.1	18
	19	* Create account in ThingsSpeak and creat channel.
	20	* Download script from dragino site and move it to properly directory
	21
	22	(% class="box infomessage" %)
	23	(((
	24	root@dragino-1baf44:~~# wget [[http:~~/~~/www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh>>url:http://www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh]]
	25	Downloading '[[http:~~/~~/www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh'>>url:http://www.dragino.com/downloads/downloads/LoRa_Gateway/LPS8/Firmware/customized_script/monitor_gateway.sh']]
	26	Connecting to 162.241.22.11:80
	27	Writing to 'monitor_gateway.sh'
	28	monitor_gateway.sh 100% \|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*\| 1860 0:00:00 ETA
	29	Download completed (1860 bytes)
	30	root@dragino-1baf44:~~# chmod +x monitor_gateway.sh;mv monitor_gateway.sh /usr/bin/
	31	root@dragino-1baf44:~~#
	32	root@dragino-1baf44:~~#
	33	)))
	34
	35	* change the script monitor_gateway.sh with properly users setting:
	36
	37	(% class="box infomessage" %)
	38	(((
	39	USER='xxxxx' # user name in your thinkspeak ~-~-> Profile
	40	PASS='xxxxx' #MQTT_API_KEY in your thinkspeak ~-~-> Profile
	41	CHAN_ID='xxxx' #Channel ID of the channel for this gateway
	42	CHAN_KEY='xxxxx' #Channel Write API of the channel for this gateway
	43	)))
	44
	45	* run /usr/bin/monitor_gateway.sh to test if upload is good.
	46
	47	* Add monitor_gateway.sh to cron work /etc/crontabs/root to make this script runs perdiocally, below is an example to update every 20 minutes
	48
	49	(% class="box infomessage" %)
	50	(((
7.1	51	# For details see man 4 crontabs
1.1	52	# Example of job definition:
	53	# .~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~- minute (0 - 59)
	54	# \| .~-~-~-~-~-~-~-~-~-~-~-~-- hour (0 - 23)
	55	# \| \| .~-~-~-~-~-~-~-~-~-~- day of month (1 - 31)
	56	# \| \| \| .~-~-~-~-~-~-- month (1 - 12) OR jan,feb,mar,apr ...
	57	# \| \| \| \| .~-~-~-~- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
	58	# \| \| \| \| \|
	59	# * * * * * user-name command to be executed
	60	#/10 * * * checklog
	61	~* 23 * * * /etc/init.d/auto_update start
2.1	62	/20 * * * /usr/bin/monitor_gateway.sh
1.1	63	)))
	64
	65	* Reboot device.
	66
25.5	67
	68
11.2	69	== 1.3 Monitor Public IP ==
8.2	70
1.1	71	The monitor_gateway.sh has been updated to upload the public ip of the device as well.
	72
	73	User can find the public ip in field7, the chart is not able to show the complete public ip, user can check that in the export.
	74
10.2	75	[[image:image-20220531145559-2.png]]
1.1	76
	77	Find Public IP
	78
	79
	80
11.2	81	= 2. Remote Access =
1.1	82
11.2	83	== 2.1 Remote Access via Remote.it. ==
1.1	84
	85	Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand.
	86
	87	Important Notice:
	88
	89	* Remote.it access will give full control of your device to remote support.
	90	* The Remote.it allow Dragino Support to remote access to the device, If user want to access himself, it need to sign up for an remote.it account.
	91
	92	For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]].
	93
	94
11.2	95	== 2.2 RSSH Introduction ==
1.1	96
2.1	97	Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand.
1.1	98
2.1	99	Important Notice:
1.1	100
2.2	101	(% class="box warningmessage" %)
2.1	102	(((
	103	RSSH access will give full control of your device to remote support. Please remove sensitivity info before perform this
	104	This RSSH allow Dragino Support to remote access to the device, If user want to access himself, he need to set up the RSSH server himself.
	105	)))
	106
	107	Below gateway support reverse SSH access:
	108
4.1	109	* Firmware Version > lgw~-~-build-v5.4.1618196981-20210412-1111 [[Firmware Download>>url:http://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/LPS8/Firmware/Release/]]
2.1	110	* LG01N, OLG01N (Note: LG01-P LG01-S doesn't support)
	111	* LG02, OLG02
	112	* LG308, DLOS8
	113	* LPS8
	114	* LIG16
	115	* MS14 series if installed with the same firmware.
	116
25.4	117
	118
11.2	119	=== 2.2.1 End User Guide to use SSH access ===
9.5	120
4.1	121	Go to this the Reverse SSH page as below:
1.1	122
11.2	123	[[image:image-20220531150151-3.png]]
1.1	124
4.1	125	Get the RSSH configure page
1.1	126
11.3	127
	128
12.2	129	[[image:image-20220531150338-4.png]]
1.1	130
4.1	131	Connection OK.
	132
12.2	133
12.3	134	* (% style="color:#037691" %)Login ID(%%): Input sshuser
	135	* (% style="color:#037691" %)Host Address(%%): Input support.dragino.com
	136	* (% style="color:#037691" %)Host Port (%%): Please email to support @ dragino.com to get a valid host port.
	137	* (% style="color:#037691" %)Connect at Startup(%%) : Choose to enable connect once the device is powered.
	138	* (% style="color:#037691" %)Network Keys(%%): Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to
4.1	139
	140	After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway.
	141
5.1	142
9.8	143	=== 2.2.2 Set Up RSSH Server ===
5.1	144
5.2	145	Advance administrator can config a SSH server to provide support their end user themselves., Steps as below
5.1	146
	147
9.8	148	==== 2.2.2.1 Step 1:Download the SSH service code ====
9.7	149
5.1	150	1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server
	151
13.2	152	[[image:image-20220531150750-5.png]]
5.1	153
	154	2).cd rssh-server; sudo make ~-~--> to Generate the execute file：rssh_serv
	155
14.2	156	[[image:image-20220531150811-6.png]]
5.1	157
	158
	159	Debug :
	160
14.3	161	(((
	162	(% class="box" %)
	163	(((
	164	if you git fail. ~-~-> (% style="color:#037691" %)sudo: git: command not found(%%).
	165	please install git. ~-~-> (% style="color:#037691" %)yum install git -y or apt-get install git -y(%%).
	166	if you make error 127,it (% style="color:#037691" %)lack of gcc(%%).
	167	please install gcc. ~-~-> (% style="color:#037691" %)yum install gcc(%%).
	168	)))
	169	)))
5.1	170
15.2	171	[[image:image-20220531151516-7.png]]
5.1	172
	173
15.2	174	(((
	175	(% class="box" %)
	176	(((
	177	if you make a fatal error : sqlite3.h,it (% style="color:#037691" %)lack of sqlite3(%%).
	178	please insatell sqlite3.
	179	)))
	180	)))
5.1	181
16.2	182	[[image:image-20220531151628-8.png]]
5.1	183
	184
5.2	185	How to install Sqlit3
5.1	186
5.2	187	(% class="box infomessage" %)
	188	(((
	189	Step1:Download the SQLit3 installation package
16.4	190	sudo wget [[https:~~/~~/www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz>>url:https://www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz]]
	191
5.2	192	Step2:tar the SQLit3 installation package
5.1	193	sudo tar -zxvf sqlite-autoconf-3350300.tar.gz
5.2	194	Step3:Generate the makefile
5.1	195	cd sqlite-autoconf-3350300/;./configure
5.2	196	Step4:Compile makefile
5.1	197	sudo make
5.2	198	Step5:Install makefile
5.1	199	sudo make install
5.2	200	Check:
	201	cd /usr/local/bin;ls -al ~-~-> Check to see if there is a file for sqlite3
	202	cd sqlite-autoconf-3350300/;./sqlite3 test.db ~-~-> Test whether the sqlite3 was installed successfully
	203	debug:
5.1	204	If you get the imformation that is SQLite header and source version mismatch, when you execute./sqlite3 test.db.
	205	Please execute the command /sbin/ldconfig.
	206	After that execute the command ./sqlite3 test.db again.
5.2	207	)))
	208
	209	===== =====
	210
9.9	211	==== 2.2.2.2 Step 2 :Install and run the RSS service ====
5.2	212
	213	1):install database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
	214
	215	user must enter the root account and run the following commands
	216
	217	(% class="box infomessage" %)
	218	(((
16.3	219	$ ./create_sqlite3_db.sh
5.2	220	$ ./rssh_serv -p 3721 2>&1 &
	221	$ ps -ef \| grep rssh_serv check 3721 port
	222	)))
	223
18.2	224	[[image:image-20220531151958-10.png]]
5.2	225
	226
	227	Debug:
	228
	229	{{{ Check /var/rsshdb.sqlite3 --> ls /var/rsshdb.sqlite3
	230	Check ls /var/rsshdb.sqlite3 --> sudo chmod 777 rssh_serv
5.1	231	}}}
	232
5.2	233	{{{ if fail to open dpvlry or to bind to it
	234	please kill rssh_serv,and run ./rssh_serv -p 3721 2>&1 & again
	235	}}}
5.1	236
5.2	237	===== =====
	238
	239	===== =====
	240
9.9	241	==== 2.2.2.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) ====
5.2	242
	243	(% class="box infomessage" %)
	244	(((
	245	1):sudo useradd XXXXX (custom user name)
	246	2):sudo passwd xxxxxx
	247	3):cp /bin/bash /bin/rbash
	248	4):sudo nano /etc/passwd ~-~-> Change /bin/bash to /bin/rbash
	249	5):sudo nano /home/xxxxx/.bashrc empty it,and input export PATH=$HOME/bin
	250	6):sudo nano /home/xxxxx/.bash_profile empty it,and input export PATH=$HOME/bin
	251	)))
	252
	253	Now user "XXXXX" is the user with limited permissions of the current system
	254
7.1	255
18.3	256
9.9	257	==== 2.2.2.4 Step4:Create an authorization key file ====
7.1	258
	259	1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey
	260
	261	Debug:
	262
	263	{{{ check: sudo ls /home/xxxxx/.ssh/authorizedkey}}}
	264
	265
	266
9.9	267	=== 2.3 How does user get the gateway to connect to a user's private server ===
5.2	268
	269
9.9	270	==== 2.3.1 Step1: Come back the gateway web UI to get the gateway Public key ====
	271
19.3	272	1)in the system ~-~-> (% style="color:#037691" %)Remote Mgmt/span
5.2	273
19.2	274	[[image:image-20220531152419-11.png]]
5.2	275
	276
9.9	277	==== 2.3.2 Step2: Authorization server ====
5.2	278
7.1	279	Input the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file.
5.2	280
20.2	281	[[image:image-20220531152549-12.png]]
5.2	282
	283
9.9	284	===== 2.3.3 Step3: Connect private server =====
5.2	285
7.1	286	This is same as connect Dragino Support Server but just change the server address to customize server address.
5.2	287
21.2	288	[[image:image-20220531152633-13.png]]
5.2	289
	290
	291
9.9	292	===== 2.3.4 Step 4 :Check Connection =====
5.2	293
	294	Rssh Host connection Ok
	295
22.2	296	[[image:image-20220531152815-14.png]]
5.2	297
	298
7.1	299	User can use common ps \| grep ssh to check it in the gateway.
5.2	300
23.2	301	[[image:image-20220531152840-15.png]]
5.2	302
	303
9.9	304	==== 2.3.5 Step5:Access the gateway from customized server ====
5.2	305
7.1	306	Check what gateways link to server.
5.2	307
24.2	308	(% class="box infomessage" %)
	309	(((
7.1	310	$ ./connect-gw.sh -l
24.2	311	)))
5.2	312
24.2	313	[[image:image-20220531153016-16.png]]
5.2	314
	315
	316
7.1	317	Access the gateway
5.2	318
25.2	319	(% class="box infomessage" %)
	320	(((
7.1	321	$ ./connect-gw.sh <GWID>
25.2	322	)))
5.2	323
25.2	324	[[image:image-20220531153219-17.png]]

Wiki source code of Monitor & Remote Access Gateway

Applications

Navigation