220 lines
6.0 KiB
Markdown
220 lines
6.0 KiB
Markdown
# Portal+radius认证、计费模拟环境-彭程
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OSS-81 | 2020-04-29T17:32:36.000+0800 | 彭程 | 完成 |
|
||
|
||
|
||
---
|
||
|
||
配合杨嵘搭建Portal+radius认证、计费模拟环境
|
||
|
||
参考文档：
|
||
|
||
[https://blog.csdn.net/weixin_46038668/article/details/103577801]
|
||
|
||
[https://service.tp-link.com.cn/detail_article_2912.html]
|
||
|
||
[https://blog.csdn.net/qq_35117024/article/details/97098585]
|
||
|
||
http://blog.chinaunix.net/uid-31443990-id-5775812.html**niuxiang** commented on *2020-05-28T12:57:12.859+0800*:
|
||
|
||
# 192.168.43.185上安装sapp，做发包测试
|
||
# 192.168.43.186上安装docker，并开启3个zookeeper+kafka容器
|
||
|
||
|
||
|
||
---
|
||
|
||
**niuxiang** commented on *2020-05-28T18:51:16.250+0800*:
|
||
|
||
kafka创建topic、sapp调试联系曹辉
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-05-29T17:39:48.586+0800*:
|
||
|
||
通过调试sapp，以及自己抓的http包测试，加载kafka成功，topic收到了200多条
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-06-01T14:26:00.827+0800*:
|
||
|
||
192.168.43.186根据需求完成搭建数据库以及创建库表
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-06-04T17:57:03.418+0800*:
|
||
|
||
192.168.43.186:搭建数据库并建表，docker搭建kafka+zookpeer,
|
||
台式机装centos系统为192.168.41.34:部署sapp pacp模式，搭建dhcp服务器，用iptables转换做网关，usb'转网口连接wifi，配合联调captive，实现基本跳转放行功能，模拟环境搭建成功
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-06-04T17:58:44.885+0800*:
|
||
|
||
搭建环境，测试802.1x不认证是否可以联网，结论：不认证不可以联网
|
||
|
||
|
||
|
||
---
|
||
|
||
**niuxiang** commented on *2020-06-10T10:33:21.084+0800*:
|
||
|
||
1. 配合杨嵘测试
|
||
2. 研究：
|
||
1- Agile Controller-Campus
|
||
2- 测试多vlan，交换机间通过trunk相连的模式下的802.1x认证
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-06-16T10:27:26.194+0800*:
|
||
|
||
配合captive 界面联调，更改网络接入方式，sapp添加https插件
|
||
|
||
|
||
|
||
---
|
||
|
||
**niuxiang** commented on *2020-07-13T09:50:19.331+0800*:
|
||
|
||
[~pengcheng]在https://docs.geedge.net/pages/viewpage.action?pageId=14817484添加整个测试环境拓扑、说明文档
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-07-27T11:28:36.694+0800*:
|
||
|
||
1.在华严翻墙网关开通eth3口 使用单独ip做为vpn测试网络
|
||
2.华严搭建xl2tpd vpn，并指定为翻墙网关，使用户接入可以翻墙，xl2tpd用户接入体现方式无法用sapp补到流量
|
||
3.更换openvpn指定翻墙网关，因vpn用户接入没有mac地址，找到openvpn日志 用户名对应ip关系
|
||
4.为了华严内网用户访问翻墙外网 有认证界面，搭建网关，并测试openvpn互联网卡流量有单独用户ip，测试华严内网用户使用翻墙网络，可以在一块网卡上补到 vpn用户的和内网流量
|
||
5.根据外包要求，部署数据库在公网服务器，部署kafka，sapp，和后端程序，外包前端跳转功能正常，但无法通过用户名密码登录，配合调试后端程序，分发openvpn测试账号，帮助解决openvpn无法连接问题，查找openvpn手机版连接方式
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-08-10T10:49:09.451+0800*:
|
||
|
||
工作进度:
|
||
组装树莓派，安装好后树莓派自带系统为raspbian-buster，在raspbian-buster系统上搭建raspbian-buster系统的yum源，raspbian-buster系统类似ubuntu，导入open.ovpn文件和ca证书，测试client端是否可以运行
|
||
|
||
遇到问题:
|
||
树莓派组装
|
||
16g内存卡插卡槽
|
||
显示器接口为微型接口
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-08-10T10:49:19.806+0800*:
|
||
|
||
工作进度:
|
||
测试在raspbian-buster下openvpn client端起不来，查找原因raspbian-buster无法使用tap/tun虚拟网卡，重装ubuntu,连接openvpn
|
||
|
||
遇到问题:
|
||
树莓派安装ubuntu，官网ubuntu版本较多需要选择树莓派的稳定版
|
||
读卡器格式化，装系统需要特定写入读卡器软件
|
||
树莓派ubuntu需要安装单独桌面的软件
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-08-10T10:49:29.230+0800*:
|
||
|
||
工作进度:
|
||
测试ubuntu连接openvpn较稳定，安装采购的树莓派usb网卡，测试双无线网卡是否可以开热点，测试单网卡是否可以开热点，测试在同一网段是否可以热点
|
||
|
||
遇到问题：
|
||
openvpn连接后打开热点，openvpn client端自动推出，热点信号为wifi
|
||
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-08-10T10:49:37.233+0800*:
|
||
|
||
工作进度:
|
||
测试手机热点/信息港网络连接华严vpn的ms，华严网关公网到外网的ping包，并形成execl测试报告给杨嵘，测试openvpn tap模式与tun模式 ping包链接速度报告
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-08-10T10:49:45.177+0800*:
|
||
|
||
|
||
工作进度:
|
||
新增/删除openvpn字段测试速度改善情况（mode-server/duplicate-cn/cipher none/proto udp/comp-lzo/;user nobody/;group nobody）,测试树莓派测试网口连接并开用无线热点连接vpn不可以共享vpn网络，解决openvpn访问速度延迟高的问题
|
||
|
||
|
||
|
||
---
|
||
|
||
**pengcheng** commented on *2020-08-10T20:57:35.654+0800*:
|
||
|
||
信息港同步华严迁移方案二：
|
||
把华严整个目录移动到信息港；
|
||
1、/home/easychannel目录打包移动
|
||
2、修改/etc/nginx/nginx.conf配置文件中的重定向地址为192.168.16.1
|
||
if ($mobile_rewrite = perform) {
|
||
rewrite ^ http://192.168.16.1:9090/h5/#/login redirect;
|
||
break;
|
||
}
|
||
if ($mobile_rewrite != perform) {
|
||
rewrite ^ http://192.168.16.1:9090/pc/#/login redirect;
|
||
break;
|
||
}
|
||
3、修改/home/easychannel/passport/config.py
|
||
db_url = "192.168.43.186:3306"
|
||
control_ip_addr = "192.168.16.1"
|
||
4、修改/home/easychannel/passport/secret.py
|
||
database_password = "111111"
|
||
5、修改/home/easychannel/CaptivePortal/setup.json
|
||
"mysql_ip": "192.168.43.186", "kafka_server": "192.168.43.186:9093", "database": "passport", "account": "root", "password": "111111"
|
||
5、顺序重启
|
||
passport
|
||
sh /home/easychannel/CaptivePortal/stop.sh
|
||
sh /home/easychannel/CaptivePortal/main.sh
|
||
|
||
node
|
||
cd /home/easychannel/passport_frontend/h5/apis/bin
|
||
pm2 delete all
|
||
pm2 start www
|
||
|
||
nginx
|
||
systemctl restart nginx
|
||
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
## Attachments
|
||
|
||
**12487/华严实验环境部署信息v4.xlsx**
|
||
|
||
---
|
||
|
||
**11564/数据库表-v0.3(1).xlsx**
|
||
|
||
---
|
||
|