리눅스 온프레서버의 유지보수 운용을 위해 SSH로 들어가는 방법을 갖추어두고 싶으면서 고객에게 인터넷 경유로 VPN을 붙일 수 있는 구멍을 뚫는 것도 기분이 나빠서 SORACOM Napter를 사용한 방법을 검증 해보기로 결정했습니다.

사용한 서버: Jetson Nano
사용한 동글:GREEN HOUSE／GH-UDG-MCLTEC
htps //w w. g Reen-Howse. 이. jp / p 로즈 cts / gh - dg - mcl c /

작업의 흐름으로서는 이런 느낌

Jetson Nano 설정 및 다양한 설정

Jetson Nano에 동글을 삽입하여 장치 이름을 확인합니다.

USB 동글 설정

SORACOM UserConsole에서 주문형 원격 액세스 설정

클라이언트에서 SSH 연결

라우팅 설정

Jetson Nano 설정 및 다양한 설정

평소와 같이 SD 카드에 OS를 쓰고, LAN 케이블 꽂아 SSH로 들어갑니다.

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether fa:e6:3c:14:c6:8d brd ff:ff:ff:ff:ff:ff
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:e0:4c:68:00:01 brd ff:ff:ff:ff:ff:ff
    inet 192.168.11.20/24 brd 192.168.11.255 scope global dynamic noprefixroute eth0
       valid_lft 255362sec preferred_lft 255362sec
    inet6 fe80::8406:e2a3:cb09:92e4/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: l4tbr0: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 8e:68:7e:d2:72:85 brd ff:ff:ff:ff:ff:ff
    inet 192.168.55.1/24 brd 192.168.55.255 scope global l4tbr0
       valid_lft forever preferred_lft forever
    inet6 fe80::1/128 scope link tentative 
       valid_lft forever preferred_lft forever
5: rndis0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master l4tbr0 state DOWN group default qlen 1000
    link/ether 8e:68:7e:d2:72:85 brd ff:ff:ff:ff:ff:ff
6: usb0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master l4tbr0 state DOWN group default qlen 1000
    link/ether 8e:68:7e:d2:72:87 brd ff:ff:ff:ff:ff:ff

동글을 삽입하기 전에 필요한 것들을 설치하십시오.

sudo apt-get install -y usb-modeswitch wvdial

SORACOM이 만든 설정 스크립트를 가져와 실행하십시오.

$ wget https://soracom-files.s3.amazonaws.com/setup_air.sh
$ chmod +x setup_air.sh 
$ sudo ./setup_air.sh 

Jetson Nano에 동글을 꽂아 장치 이름 확인

동글 꽂아 인식해 주면 아래와 같이 usb1이 추가되어 있을 것이다.

$ lsusb
(中略)
Bus 001 Device 009: ID 1ecb:02f1  

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether fa:e6:3c:14:c6:8d brd ff:ff:ff:ff:ff:ff
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:e0:4c:68:00:01 brd ff:ff:ff:ff:ff:ff
    inet 192.168.11.20/24 brd 192.168.11.255 scope global dynamic noprefixroute eth0
       valid_lft 255144sec preferred_lft 255144sec
    inet6 fe80::8406:e2a3:cb09:92e4/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: l4tbr0: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 8e:68:7e:d2:72:85 brd ff:ff:ff:ff:ff:ff
    inet 192.168.55.1/24 brd 192.168.55.255 scope global l4tbr0
       valid_lft forever preferred_lft forever
    inet6 fe80::1/128 scope link tentative 
       valid_lft forever preferred_lft forever
5: rndis0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master l4tbr0 state DOWN group default qlen 1000
    link/ether 8e:68:7e:d2:72:85 brd ff:ff:ff:ff:ff:ff
6: usb0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master l4tbr0 state DOWN group default qlen 1000
    link/ether 8e:68:7e:d2:72:87 brd ff:ff:ff:ff:ff:ff
7: usb1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether 32:81:61:ee:43:74 brd ff:ff:ff:ff:ff:ff

SORACOM이 만든 스크립트는 장치 이름이 "wwan0"이므로이를 "usb1"로 수정합니다. 끝난 시점에서 아래와 같이.

$ sudo vi /etc/network/interfaces 
source-directory /etc/network/interfaces.d
allow-hotplug usb1 
iface usb1 inet wvdial

$ sudo reboot

usb1에 IP 주소가 할당되었습니다.

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether a6:4b:e5:f0:f5:75 brd ff:ff:ff:ff:ff:ff
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:e0:4c:68:00:01 brd ff:ff:ff:ff:ff:ff
    inet 192.168.11.20/24 brd 192.168.11.255 scope global dynamic noprefixroute eth0
       valid_lft 241700sec preferred_lft 241700sec
    inet6 fe80::844:c77e:7587:fe2f/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
7: l4tbr0: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether a6:c9:64:c3:b4:59 brd ff:ff:ff:ff:ff:ff
    inet 192.168.55.1/24 brd 192.168.55.255 scope global l4tbr0
       valid_lft forever preferred_lft forever
    inet6 fe80::1/128 scope link tentative 
       valid_lft forever preferred_lft forever
8: rndis0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master l4tbr0 state DOWN group default qlen 1000
    link/ether a6:c9:64:c3:b4:59 brd ff:ff:ff:ff:ff:ff
9: usb0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master l4tbr0 state DOWN group default qlen 1000
    link/ether a6:c9:64:c3:b4:5b brd ff:ff:ff:ff:ff:ff
10: usb1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000
    link/ether d2:21:2a:a6:8b:a7 brd ff:ff:ff:ff:ff:ff
    inet 192.168.225.35/24 brd 192.168.225.255 scope global dynamic noprefixroute usb1
       valid_lft 43195sec preferred_lft 43195sec
    inet6 fe80::ab85:9cf3:713f:e28d/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

USB 동글 설정

USB 동글을 꽂은 PC의 브라우저에서 "http://am.webcm"에 액세스하면 웹 콘솔이 열리므로 동글에 여러 설정을 실시

연결 설정


또한 DMZ는 jetson의 usb1에 할당 된 IP 주소를 설정합니다.

클라이언트에서 SSH 연결

SORACOM의 UserConsole에 로그인하고 이번에 사용하는 SIM을 체크하고 "조작"메뉴에서 "온 디맨드 원격 액세스"를 선택하면 IP 주소와 포트가 표시되므로 클라이언트에서 연결합니다.

라우팅 설정

평소의 통신은 LAN 방향이지만, SSH로 최소한 넣도록 라우팅 설정하고 싶다(가필 예정)

덤

나다전자씨의 케이스, 본체 가격 생각하면 괴로웠지만 구입해 보면 좋은 느낌입니다

(2020-01-07 추기) 나중에 막상 사용하려고 생각하면 동글에 할당 된 IP 주소가 바뀌었다.

동글의 접속이 끊어져 IP 주소 바뀌었다···?
DMZ 설정 다시 시도 ...

3746: usb1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000
    link/ether 2a:96:45:3d:f3:a2 brd ff:ff:ff:ff:ff:ff
    inet 192.168.225.37/24 brd 192.168.225.255 scope global dynamic noprefixroute usb1
       valid_lft 42673sec preferred_lft 42673sec
    inet6 fe80::9664:8e56:6c00:8c3d/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever