2025-09-14 21:52:36 +00:00
|
|
|
|
# Portal+radius认证、计费模拟环境-彭程
|
|
|
|
|
|
|
|
|
|
|
|
| ID | Creation Date | Assignee | Status |
|
|
|
|
|
|
|----|----------------|----------|--------|
|
|
|
|
|
|
| OSS-81 | 2020-04-29T17:32:36.000+0800 | 彭程 | 完成 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
配合杨嵘搭建Portal+radius认证、计费模拟环境
|
|
|
|
|
|
|
|
|
|
|
|
参考文档：
|
|
|
|
|
|
|
|
|
|
|
|
[https://blog.csdn.net/weixin_46038668/article/details/103577801]
|
|
|
|
|
|
|
|
|
|
|
|
[https://service.tp-link.com.cn/detail_article_2912.html]
|
|
|
|
|
|
|
|
|
|
|
|
[https://blog.csdn.net/qq_35117024/article/details/97098585]
|
|
|
|
|
|
|
|
|
|
|
|
http://blog.chinaunix.net/uid-31443990-id-5775812.html**niuxiang** commented on *2020-05-28T12:57:12.859+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
# 192.168.43.185上安装sapp，做发包测试
|
|
|
|
|
|
# 192.168.43.186上安装docker，并开启3个zookeeper+kafka容器
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**niuxiang** commented on *2020-05-28T18:51:16.250+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
kafka创建topic、sapp调试联系曹辉
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-05-29T17:39:48.586+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
通过调试sapp，以及自己抓的http包测试，加载kafka成功，topic收到了200多条
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-06-01T14:26:00.827+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
192.168.43.186根据需求完成搭建数据库以及创建库表
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-06-04T17:57:03.418+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
192.168.43.186:搭建数据库并建表，docker搭建kafka+zookpeer,
|
|
|
|
|
|
台式机装centos系统为192.168.41.34:部署sapp pacp模式，搭建dhcp服务器，用iptables转换做网关，usb'转网口连接wifi，配合联调captive，实现基本跳转放行功能，模拟环境搭建成功
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-06-04T17:58:44.885+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
搭建环境，测试802.1x不认证是否可以联网，结论：不认证不可以联网
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**niuxiang** commented on *2020-06-10T10:33:21.084+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
1. 配合杨嵘测试
|
|
|
|
|
|
2. 研究：
|
|
|
|
|
|
1- Agile Controller-Campus
|
|
|
|
|
|
2- 测试多vlan，交换机间通过trunk相连的模式下的802.1x认证
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-06-16T10:27:26.194+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
配合captive 界面联调，更改网络接入方式，sapp添加https插件
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**niuxiang** commented on *2020-07-13T09:50:19.331+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
[~pengcheng]在https://docs.geedge.net/pages/viewpage.action?pageId=14817484添加整个测试环境拓扑、说明文档
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-07-27T11:28:36.694+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
1.在华严翻墙网关开通eth3口 使用单独ip做为vpn测试网络
|
|
|
|
|
|
2.华严搭建xl2tpd vpn，并指定为翻墙网关，使用户接入可以翻墙，xl2tpd用户接入体现方式无法用sapp补到流量
|
|
|
|
|
|
3.更换openvpn指定翻墙网关，因vpn用户接入没有mac地址，找到openvpn日志 用户名对应ip关系
|
|
|
|
|
|
4.为了华严内网用户访问翻墙外网 有认证界面，搭建网关，并测试openvpn互联网卡流量有单独用户ip，测试华严内网用户使用翻墙网络，可以在一块网卡上补到 vpn用户的和内网流量
|
|
|
|
|
|
5.根据外包要求，部署数据库在公网服务器，部署kafka，sapp，和后端程序，外包前端跳转功能正常，但无法通过用户名密码登录，配合调试后端程序，分发openvpn测试账号，帮助解决openvpn无法连接问题，查找openvpn手机版连接方式
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-08-10T10:49:09.451+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
工作进度:
|
|
|
|
|
|
组装树莓派，安装好后树莓派自带系统为raspbian-buster，在raspbian-buster系统上搭建raspbian-buster系统的yum源，raspbian-buster系统类似ubuntu，导入open.ovpn文件和ca证书，测试client端是否可以运行
|
|
|
|
|
|
|
|
|
|
|
|
遇到问题:
|
|
|
|
|
|
树莓派组装
|
|
|
|
|
|
16g内存卡插卡槽
|
|
|
|
|
|
显示器接口为微型接口
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-08-10T10:49:19.806+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
工作进度:
|
|
|
|
|
|
测试在raspbian-buster下openvpn client端起不来，查找原因raspbian-buster无法使用tap/tun虚拟网卡，重装ubuntu,连接openvpn
|
|
|
|
|
|
|
|
|
|
|
|
遇到问题:
|
|
|
|
|
|
树莓派安装ubuntu，官网ubuntu版本较多需要选择树莓派的稳定版
|
|
|
|
|
|
读卡器格式化，装系统需要特定写入读卡器软件
|
|
|
|
|
|
树莓派ubuntu需要安装单独桌面的软件
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-08-10T10:49:29.230+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
工作进度:
|
|
|
|
|
|
测试ubuntu连接openvpn较稳定，安装采购的树莓派usb网卡，测试双无线网卡是否可以开热点，测试单网卡是否可以开热点，测试在同一网段是否可以热点
|
|
|
|
|
|
|
|
|
|
|
|
遇到问题：
|
|
|
|
|
|
openvpn连接后打开热点，openvpn client端自动推出，热点信号为wifi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-08-10T10:49:37.233+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
工作进度:
|
|
|
|
|
|
测试手机热点/信息港网络连接华严vpn的ms，华严网关公网到外网的ping包，并形成execl测试报告给杨嵘，测试openvpn tap模式与tun模式 ping包链接速度报告
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-08-10T10:49:45.177+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
工作进度:
|
|
|
|
|
|
新增/删除openvpn字段测试速度改善情况（mode-server/duplicate-cn/cipher none/proto udp/comp-lzo/;user nobody/;group nobody）,测试树莓派测试网口连接并开用无线热点连接vpn不可以共享vpn网络，解决openvpn访问速度延迟高的问题
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
**pengcheng** commented on *2020-08-10T20:57:35.654+0800*:
|
|
|
|
|
|
|
|
|
|
|
|
信息港同步华严迁移方案二：
|
|
|
|
|
|
把华严整个目录移动到信息港；
|
|
|
|
|
|
1、/home/easychannel目录打包移动
|
|
|
|
|
|
2、修改/etc/nginx/nginx.conf配置文件中的重定向地址为192.168.16.1
|
|
|
|
|
|
if ($mobile_rewrite = perform) {
|
|
|
|
|
|
rewrite ^ http://192.168.16.1:9090/h5/#/login redirect;
|
|
|
|
|
|
break;
|
|
|
|
|
|
}
|
|
|
|
|
|
if ($mobile_rewrite != perform) {
|
|
|
|
|
|
rewrite ^ http://192.168.16.1:9090/pc/#/login redirect;
|
|
|
|
|
|
break;
|
|
|
|
|
|
}
|
|
|
|
|
|
3、修改/home/easychannel/passport/config.py
|
|
|
|
|
|
db_url = "192.168.43.186:3306"
|
|
|
|
|
|
control_ip_addr = "192.168.16.1"
|
|
|
|
|
|
4、修改/home/easychannel/passport/secret.py
|
|
|
|
|
|
database_password = "111111"
|
|
|
|
|
|
5、修改/home/easychannel/CaptivePortal/setup.json
|
|
|
|
|
|
"mysql_ip": "192.168.43.186", "kafka_server": "192.168.43.186:9093", "database": "passport", "account": "root", "password": "111111"
|
|
|
|
|
|
5、顺序重启
|
|
|
|
|
|
passport
|
|
|
|
|
|
sh /home/easychannel/CaptivePortal/stop.sh
|
|
|
|
|
|
sh /home/easychannel/CaptivePortal/main.sh
|
|
|
|
|
|
|
|
|
|
|
|
node
|
|
|
|
|
|
cd /home/easychannel/passport_frontend/h5/apis/bin
|
|
|
|
|
|
pm2 delete all
|
|
|
|
|
|
pm2 start www
|
|
|
|
|
|
|
|
|
|
|
|
nginx
|
|
|
|
|
|
systemctl restart nginx
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2025-09-14 22:26:17 +00:00
|
|
|
|
# Attachments
|
2025-09-14 21:52:36 +00:00
|
|
|
|
|
2025-09-14 22:26:17 +00:00
|
|
|
|
Attachment: 华严实验环境部署信息v4.xlsx
|
2025-09-14 22:27:11 +00:00
|
|
|
|
|
2025-09-14 22:26:17 +00:00
|
|
|
|
[华严实验环境部署信息v4.xlsx](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/12487/华严实验环境部署信息v4.xlsx)
|
2025-09-14 21:52:36 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2025-09-14 22:26:17 +00:00
|
|
|
|
Attachment: 数据库表-v0.3(1).xlsx
|
2025-09-14 22:27:11 +00:00
|
|
|
|
|
2025-09-14 22:26:17 +00:00
|
|
|
|
[数据库表-v0.3(1).xlsx](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/11564/数据库表-v0.3(1).xlsx)
|
|
|
|
|
|
|
|
|
|
|
|
|
2025-09-14 21:52:36 +00:00
|
|
|
|
|
