Before we begin, understand that everything in this repository is a work in progress... 🙂
I tend to use several different discipters for each piece thats involved with this project, so I've tried to define them below to helpkeep the reader from being confused.. 🙂
- For the purpose of this project, the terms slave refers to a router or switch. However, anything with a console port can be used such as a server, appliance, Firewall, Wireless LAN Conroller, etc will work as well.
- The terms master refers to the PC, laptop, phone, or tablet.
- The terms pi, bridge, ser2bt all refer to the raspberry pi zero w, and is being used as a bridge to connect master with slave.
- The terms user, you, network engineer, network administrator, administrator, or engineer all refer to the person using this bridge to connect the link between it, and the master, and it and the slave.
This project is a set of scripts, services and libraries, that allow one to connect to a raspberry pi zero w from their phone/tablet/laptop using a serial/bluetooth connection, then be "bridged" over a usb to console connection to a switch/router/etc. This allows the network/system engineer to manage devices via a console port, while enjoying the benefit of not having to be tethered right up to it.
These scripts and services basicaly utilize screen and rfcomm to bridge each connection between the master, and the slave you are attempting to connect to.
- By design, this prject does not have security in mind, preferring instead to focus on easy discovery, pairing, and connectivity to allow the network administrator to focus on getting their work done.
- The Bridge will always be discoverable, and will not require a pin to complete the pairing process.
- This has been tested with the following Operating Systems: Linux, Android, Windows 10, and ChromeOS (with caveats).
- When connecting to the bridge over bluetooth, the administrator will be auto logged-in as pi.
- The Administrator will not be challanged for sign-in credentials - however, the admin will still be required enter credentials to gain access to the slave device.
- Connection between the master and the bridge will be 9600 Baud - this is to maximize the possible range.
- Once the master is connected to the bridge, it will attempt to look for any available usb or acm ports. At this point one of three things are expected to occur:
- If the bridge was connected to a single slave, then it will open a screen session to that serial port outomagically.
- If the bridge was connected (via OTG usb hub), then it will create one screen session for each serial port it found, list them on your display, and exit to shell.
- If the bridge does not detect any new usb/acm ports, then it will state that fact and then drop to the bridges bash shell.
- The connection between the bidge and the slave is set to 9600 Baud. I'm looking to set this as a configurable element in the future.
- While connected to a slave, the bridge will begin logging all session traffic between the master and slave. (This is why it is important to make sure the bridge somehow receives time from and external source, or and onboard rtc.)
- If you become disconnected from the bridge, and want to reconnect, do not try to use the terminal program's reconnect feature. Close the window, and then re-open the connection profile.
- If your setup has one of the two UPS's listed below, then services that will monitor battery level, and will automatically shutdown if the battery level reaches 2%.
- If you are using the PiSugar2 UPS option, then you get several added benefits:
- An on board RTC.
- A button to safely turn off the bridge when you are done using it. (This makes it so much easier then having to login just to power it off!)
- If your setup has a waveshare e-ink screen, then there are services that will monitor and display uptades as to the systems health/status.
- Telnet is installed and is used for bridging to serial connections via ser2net
- If you are relying on that end device's USB port to ppower your bridge, and decide to reboot it, your pi will most likely be un-gracefully powercycled along with it. This is not good as there is a risk that your pi's SD card will become corrupted, and stop working all-to-gether. There are two possible ways around this:
- Add a battery backup, to allow the pi to weather those pesky, but necessary. This will allow the pi to be moved around between closets, or devices without powering it down, and back up. See below for more details.
- Turn on Overlay FS. This basically, turns your pi's sd card into a read only drive, so the risk of corrupting your SD card goes way, way down. The down side is that you need to turn Overlay FS Off to update it or to make configuration adjustments, then turn it back on. I'm till testing this feature to see how well it works over the long run.
There are two different setup options, basic, and full.
- Basic should be used if you are only using a pi, and do not wish (at this point) to add a screen, or an external battery.
- Full should be used if you are using the pi, along with the e-ink display, and an external UPS.
The following steps will guide you through the process getting this system to work from just after everything is unboxed, to the point where you are connecting to a switch, router, or whatever - that is the raspberry pi zero, by itself acting as a bluetooth to serial bridge. We will be using headless installation method, so you will not need a keyboard, mouse, or monitor.
You will need:
- A raspberry pi zero w - at a minimum, but if you don't like soldering, and have at least a desire to expand, get the raspberry pi zero wh instead.
- An SD card with a minimum size of 8G. Don't skimp hear, you'll need to get a quality card to weather any accidental power-cuts. an good example is: Example
- A USB type A to RJ45 serial cable: Example
- A USB micro to USB type A for power: Example
- A USB micro to USB type A Female to connect to a USB type A to RJ45 serial cable to connect to a Cisco RJ45 console port: Example.
- A Micro USB (Pi side) to Mini USB (switch side) to connect between the raspberry pi's usb port to the switches USB-console port: Example
- Optional: A Micro USB (pi side) to USB A female OTG Hub. This will permit you to connect the bridge to multiple slave devices, so you won't have to keep walking back to switch the cable back and forth. A good example is if you have VSS/Stack, or a FHRP pair: Example
- A case to house the pi. Check this option out for a good example, slightly pricey, but in my opinion, worth the cost. Down side is that it will not work well with the raspberry pi wh's.
- insert the SD card into a different computer to perform the first few steps:
- Eject and re-insert the SD card, and use your PC's file explorer to open the SD card - should be called boot.
- Add the following to the end of the first line in the
/boot/cmdline.txt
file:- modules-load=dwc2,g_serial
- Save and close cmdline.txt
- Add the following to the end of the first line in the
- Create an empty file and call it ssh - no extensions, just ssh.
- Create another file called wpa_supplicant.conf, and open it:
- Insert the following:
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1
country=US
network={
ssid="<SSID>"
psk="<passphrase/password>"
key_mgmt=WPA-PSK
}
- Be sure to replace <SSID> with the SSID you want your pi to connect to, and replace <passphrase/password> You are now done with this section, safely eject the SD card, and insert it into you raspberry pi zero.
- Power on the bridge, and give it about a minute to boot.
- Using your favorite SSH client, login into your pi:
pi@<[hostname|IP Address]>
, where hostname, or IP Address are = to your Pi's.
Note
Finding the IP address can be painful unless you have a utility on your PC or phone that can scan the network for active devices. Recommend trying the default hostname raspberrypi.local first.**
sudo apt update && sudo apt full-upgrade -y
Reboot your Pi when the upgrade is complete.
- Enter
sudo raspi-config
: - From the main menu, under Advanced Options.
- select Expand Filesystem to expand.
- From the main menu, under System Options.
- Select Hostname, then change to a name with 6 characters.
- Setup using raspi-config
sudo raspi-config
:- From the main menu, under System Options.
- Select Boot / Autologin, then select Console Autologin.
- Select Password and change.
- Select Network at boot, then select No to Disable Waiting for network on boot.
- From the main menu, under System Options.
- Setup locals.
- Set timezone on the pi.
- Keyboard.
- wifi location.
- Select Performance Options:
- Select GPU Memory and set GPU memory to 32MB.
Under the Main Menu, select Finish, and if you are asked to reboot, do so.
sudo apt install screen git minicom tio rfkill xterm ser2net -y
- Reboot your Pi when the dependacies have been installed
mkdir -p /home/pi/Projects/
- In the Projects folder, initialize git, and clone the following repository:
cd $HOME/Projects/
git init
git clone https://github.com/lgbrownjr/ser2bt-bridge.git
- Run the upgrade tool:
cd ser2bt-bridge/
sudo ./upgrade basic
- Open
/etc/bluetooth/main.conf
sudo nano /etc/bluetooth/main.conf
- Uncomment and/or change the following settings:
DiscoverableTimeout = 0
PairableTimeout = 0
- Save and close
/etc/bluetooth/main.conf
- Restart the bluetooth service:
sudo systemctl restart bluetooth.service
- type in
sudo bluetoothctl
, and press enter.- You should see Agent Registered, then a prompt.
- Type in
show
- You are looking for three items in the output:
- Powered: yes
- Discoverable: Yes
- Pairable: Yes
- If all three items match with what is on your screen, then type
exit
and skip over the rest of the bluetooth section. - Otherwise, type in the following:
power on
discoverable on
pairable on
- Type in
show
to verify, thenexit
to leave bluetooth control and return to bash.
In order for your pi to keep the correct time, perform updates, or allow an alternate way to access the pi, it is advisable you add more networks into your wpa_supplicant.conf. Examples include: allowable work networks, your home network, your hotspot, and even hotspots of your peer's phones (as allowed).
- Open
/etc/wpa_supplicant/wpa_supplicant.conf
, and add the following:
network={
ssid="<SSID>"
psk="<passphrase/password>"
key_mgmt=WPA-PSK
}
- One block for each network you want to add.
- Make sure to set the ssid and psk as needed.
- Be sure to test each network.
If everything went as planned, your raspberry pi zero w should be acting like a bluetooth to serial bridge, allowing you to connect to a switches console port via bluetooth from your computer.
- Now, reboot your raspberry pi zero w.
- After the raspberry pi has rebooted, use your PC/laptop to pair with it.
- Look for a device advertising your pi's hostname
- The Pi should advertise that it supports serial communications, so you'll be able to associate it with your PC's com/ttyUSBx/ttyACMx ports.
- Keep in mind, that no pin will be requested. Your PC should just pair with the pi
- Under Widows 10, after pairing, select More Bluetooth Settings, under Related settings, on the right side of the settings window.
- Once that's done, go ahead and open your favorite terminal program, and point it to the com/ttyUSBx/tty/ACMx port, and set it up to connect at 115200 bps, n/8/1, xterm.
The addition of am e-paper screen and ups backup will allow you to continue providing power to the Pi while not being plugged into a power source, and to easily tell the status of the bridge (Pi) without having to login to check.
- For Battery UPS, we have two supported options:
- The first option is a ups-lite.
- The second UPS option is a PiSugar2 which also has a built-in real time clock, and a button that can be controlled via software, but at double the cost as the &ups_lite*.
- For status and system health updates, attach a waveshare.2.13 e-paper display.
Coming soon!
- Different ways, depending on your setup:
- For the basic bridge option, Plug the power into the bridges power port. See
- If your version of the bridge has a UPS, then slide the switch to the on position.
- To charge the UPS, insert the power cord into the UPS's power input plug, do not power the pi using the pi's power port.
- It will take up to 30 seconds to boot to a point where a master can connect to it via bluetooth.
NOTE
If you are interested in accurate time, I advise you let it connect to an available hotspot, or wlan within range. See: Additional Network Setup
- The Bridge is set to allways be available top pair with it, so this set should go by fairly easily, and painlessly:
- Open bluetooth settings and pair with the bridge - the name of the bridge should be the hostname you assigned it during the setup. See Additional OS Setup:.
- Assign com/tty ports to the bridge device. Pairing should now be complete!
- In your favourite terminal program (screen/minicom/putty/securecrt/etc).
- Ccreate a connection profile to connect to your bridge using serial, and assign the profile the com/tty port that was assigned during pairing.
- Use N81, and 9600 baud as the speed.
- use xterm as your terminal type.
- Now save and test.
- Repeat steps for all devices that you might think that will need to connect. You should now all of your device terminal programs setup to easily connect to the bridge as needed.
- open your terminal program.
- Click on and launch/open the connection profile you just built.
- A terminal should open up, and you should see the banner appear, along with the results of your bridges attemtps to connect to the slave(s), and then either the login prompt of the slave, or a list of possible slaves you can conncect with.
- If you were dropped off in the bridg's bash shell, you have access to perform updates, play games, set the time, whatever, here are some ideas:
- Set the timezone (for those travelers)
- follow from here: Setup Using raspi-config
- Set the date and time (if you don't have an onboard rtc, or access to a network:
- `sudo date --set="4 MAR 2021 18:00:00"
- Update the ser2bt software:
screen
cd /home/pi/Projects/ser2bt/
git pull
sudo ./upgrade [full|basic|screen|ups]
exit
to exit out of acreen.
- Update the OS:
screen
Need to use screen to be able to access network resources, this is a workaround to an issue that prevents reliable network communications while an admin is logged in.sudo apt update -y
- If the result of the above command included
no updates available
, then skip to step 4. sudo apt full-upgrade -y
exit
to exit out of screen.
- Set the timezone (for those travelers)
- For situations were your bridge is connected to a single slave:
- If you are in the slave (read switch), and you want to get out to do something, and come back, then:
ctrl
+a
, thend
to suspend you screen session.
- To return to configuraing, or administering the switch, then type
screen -r
- If you are in the slave (read switch), and you want to get out to do something, and come back, then:
- For situations were your bridge is connected to multiple slaves:
- If you are in the slave (read switch), and you want to get out to do something or enter another switch, and come back, then:
ctrl
+a
, thend
to suspend you screen session allowing you to return later.ctrl
+a
, then\
to terminate your screen session. (you can always re-enter.- To re-nter a switch that has been suspended, type
screen -r Switch_x
. - To enter a switch that has never been entered, or had its screen session terminated, type
screen Switch_x
where x = the connection number. - To list the available switches that you can enter, type
screen -l
- If you are in the slave (read switch), and you want to get out to do something or enter another switch, and come back, then:
- To Reboot your bridge, type
sudo reboot
- If you're lost, and you need to reconnect to the slave were connected to, type
ser2bt_bridge
to relaunch the discovery script. if that gives you an error, then reboot. - To shutdown your bridge, type
sudo poweroff
- To resize your terminal, suspend/exit and screen sessions, and type
resize
- When you are within a screen session, configuring, or administering a slave:
- Use the PageUp key to enter scrolback mode, then continue to use PageUp/PageDown or Up/Down arrows to move up and down your buffer. Use the Escape key to exit, and go back to the normal mode.
Features I want to add to this project:
- Add a session logging feature for sessions that are connected to a switch, or router.
- Build an installation script to automate most of the installation steps.
- add support for RTC (Real Time Clocks) so as not to have to rely on ntp so much, especially in envornments where there is no wifi available to the pi.
- Add support for USB micro to OTG HUB's to allow connectivity to more than one slave at a time.
- I'm not sure if this even doable, but attempt to allow multiple concurrent bluetooth connections, especially if the item listed above is completed.
- Continue testing Overlay FS as a means to protect the SD cards from corruption.
- Make the ser2bt_status script run more effeciently - if possible.
- For some reason, while connected via bluetooth, one cannot update the OS, or githib repositories. A workaround, is to open a
screen
session, tehn perform any update taskes. Another workaround would be to ssh into it as well...