Reset POE Port on Unifi Switch - Connecting to a device via SSH Key

[jamesng]

Hi

I'd like to automate the power cycle of a POE port on a Unifi Switch.   The Unifi docs say this can be achieved by connecting to the device via a SSH key and then issuing some telnet commands.   I can run these commands ok from the terminal window of my desktop, however am not to sure how to initial a ssh connection from logic machine / CBUS SHAC.

Here the sequence of commands that run ok from my desktop Mac to power cycle port 15.

Code:

123456789101112

ssh -i /Users/james/.ssh/id_rsa admin@192.168.1.100# telnet localhost 23 enable configure interface 0/15 poe opmode shutdown poe opmode auto exit exit exit telnet localhost 23 exit

Here's the beginnings of my LM script to issue the telnet commands.  Can anyone advise how to modify the script to SSH to the switch with an SSH key (the key is in the id_rsa file in the above example)

Code:

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667

function resetPOESwitchPort(switchport)   local socket = require("socket").tcp() local response, err = socket:connect('192.168.1.100', 23) if response then   -- SSH connection established so issue telnet commands   socket:send('telnet localhost 23\r\n')   response = socket:receive(5)   log(response)   socket:send('telnet localhost 23\r\n')       response = socket:receive(5)   log(response)   socket:send('enable\r\n')       response = socket:receive(5)   log(response)   socket:send('configure\r\n')       response = socket:receive(5)   log(response)   socket:send('interface 0/' .. switchport .. '\r\n')       response = socket:receive(5)   log(response)   socket:send('poe opmode shutdown\r\n')       response = socket:receive(5)   log(response)   socket:send('poe opmode auto\r\n')       response = socket:receive(5)   log(response)   socket:send('exit\r\n')       response = socket:receive(5)   log(response)   socket:send('exit\r\n')       response = socket:receive(5)   log(response)   socket:send('exit\r\n')       response = socket:receive(5)   log(response)   socket:send('telnet localhost 23\r\n')       response = socket:receive(5)   log(response)   socket:send('exit\r\n')   response = socket:receive()   log(response)   socket:close()   else     -- No connnection response     log ('Unable to connect to switch')   tcp:close()   end end

Any advice would be greatly appreciated 

Kind Regards
James

[admin]

Which switch model do you have? At least some should have a web interface which you access from scripts. This is much easier than SSH.

[Seijboldt]

Have a look at this unifi API: https://ubntwiki.com/products/software/u...roller/api
Posting to the endpoint `api/s/{site}/cmd/<manager>` with the `json {"cmd": "command"}` you can invoke commands on the controller.

Power cycle poe port:
devmgr power-cycle mac = switch mac ( required ), port_idx = PoE port to cycle ( required )

[admin]

See this topic for an example that you can use: https://forum.logicmachine.net/showthread.php?tid=2450

[jamesng]

Hi

I'm attempting to control Unifi US-48-500W and US-8-60W switches (all running the latest firmware - cloud key firmware 2.0.27 which changes the access url from https://controllerip:8443 to https://controllerip/network/site) and I think breaks the reverse engineered API.

I was under the impression that the API (https://ubntwiki.com/products/software/u...roller/api) was a reverse engineered project and that the telnet control which was officially supported by Unifi.

Is there an example of how to make the SSH connection and execute the telnet commands with Logic Machine?

Kind Regards
James

[benanderson_475]

Hi 

I'm attempting to control Unifi US-48-500W and US-8-60W switches (all running the latest firmware - cloud key firmware 2.0.27 which changes the access url from https://controllerip:8443 to https://controllerip/network/site) and I think breaks the reverse engineered API.

I was under the impression that the API (https://ubntwiki.com/products/software/u...roller/api) was a reverse engineered project and that the telnet control which was officially supported by Unifi.

Is there an example of how to make the SSH connection and execute the telnet commands with Logic Machine? 

Kind Regards
James

Hi jamesng, 
from the last unifi update 2 things have changed, 1- controller access is no longer avalible on port 8443, this is now https on port 443 and 2- end points have changed for login endpoint  api/auth/login and for api endpoint prefix with /proxy/network see below code , change to suit your requirements 

Code:

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576

htps = require("ssl.https")        require('json') htps.TIMEOUT = 5 usr_credenitals = json.encode({     username = 'XXXXXXXXXXXXXX',   password = 'XXXXXXXX' }) login = 'https://192.168.1.10:443/api/auth/login' sta = 'https://192.168.1.10:443/proxy/network/api/s/d5gh60j5/stat/sta'                               get_sites = 'https://192.168.1.10:443/proxy/network/api/self/sites' Post_response = {} local res, err, response_headers, status = htps.request   {     url = login,     method = "POST",     protocol = 'tlsv12',     headers =     {     ["Accept"] = "*/*",     ["Content-Type"] = "application/json",     ["Content-Length"] = usr_credenitals:len()     },   source = ltn12.source.string(usr_credenitals),        sink = ltn12.sink.table(Post_response)   } if Post_response then   --log(res, code, response_headers) mmm_cookies = response_headers['set-cookie']   if mmm_cookies then   token = mmm_cookies:match('(TOKEN=[^;]+)'..';')   end   Get_response ={}   res, err = htps.request({      url = sta,      method = "GET",      protocol = 'tlsv12',      headers = {      cookie = token,     ['X-CSRF-Token'] = response_headers['x-csrf-token']     },     sink = ltn12.sink.table(Get_response),   })   if Get_response then     Get_response = table.concat(Get_response)     dec = json.decode(Get_response)         -- get all mac adresses currently connected to site     for i = 1, #dec.data do       log(dec.data[i].mac)       -- return boolean if mac adress is connected       is_mac = dec.data[i].mac =='42:45:05:39:0f:d9'            if is_mac then         log(is_mac)       end     end       else     log('could not get stat ' .. tostring(err))   end   else   log('login failed ' .. tostring(err)) end