智慧库房物联网项目：TCP/IP温湿度传感器批量部署、批量调试与运维管理方案

总点数 = 主存储区面积(m²) ÷ 250 + 通道数 × 2 + 回风口数 + 外扰点 + 辅助间数

┌── 管理VLAN (SNMP)
                        │
[PoE交换机]─── Trunk ───┼── 数据VLAN (Modbus TCP :502)
(24口×N台)              │
                        └── 预留VLAN (未来扩展)
   │
   ├── 传感器01 (IP: 10.10.21.1)
   ├── 传感器02 (IP: 10.10.21.2)
   ├── ...
   └── 传感器N  (IP: 10.10.21.N)

总部署量200台，分6批：
  第1批：10台（试点，全量验证）
  第2–6批：每批38台（批量推广）

# batch_config.py
import netmiko
from ipaddress import IPv4Address

SWITCHES = [
    {"host": "10.10.1.10", "username": "admin", "password": "xxx", "device_type": "hp_comware"},
    # ... 多台交换机
]

# 点位映射表：MAC → IP → 物理位置
POINT_MAP = [
    {"mac": "00:11:22:33:44:01", "ip": "10.10.21.1", "location": "A区-货架01-东侧"},
    {"mac": "00:11:22:33:44:02", "ip": "10.10.21.2", "location": "A区-货架01-西侧"},
    # ... 200条
]

def configure_switch(switch, ports_config):
    conn = netmiko.ConnectHandler(**switch)
    for port, device in ports_config.items():
        cmds = [
            f"interface GigabitEthernet1/0/{port}",
            f"description {device['location']}",
            "port link-type access",
            f"port access vlan 21",
            "poe enable",
            "storm-constraint broadcast 5",
            "storm-constraint multicast 5",
            "loopback-detection enable",
        ]
        conn.send_config_set(cmds)
    conn.save_config()
    conn.disconnect()

# DHCP保留配置（dnsmasq格式）
def generate_dhcp_reservations(point_map):
    with open("dhcp-reservations.conf", "w") as f:
        for p in point_map:
            f.write(f"dhcp-host={p['mac']},{p['ip']},sensor-{p['ip'].split('.')[-1]}\n")

# batch_firmware.py
import paramiko
import hashlib

FIRMWARE = "sensor_v2.1.3_signed.bin"
FIRMWARE_MD5 = "a1b2c3d4e5f6..."

def check_firmware(device_ip, username, password):
    ssh = paramiko.SSHClient()
    ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    ssh.connect(device_ip, username=username, password=password)
    
    # 读取当前固件版本
    stdin, stdout, stderr = ssh.exec_command("cat /etc/firmware_version")
    version = stdout.read().decode().strip()
    
    # 读取固件MD5
    stdin, stdout, stderr = ssh.exec_command(f"md5sum /opt/firmware/{FIRMWARE}")
    md5 = stdout.read().decode().split()[0]
    
    ssh.close()
    return version, md5 == FIRMWARE_MD5

def batch_check(devices):
    results = {"ok": [], "mismatch": [], "unreachable": []}
    for ip in devices:
        try:
            ver, md5_ok = check_firmware(ip, "admin", "password")
            if md5_ok and ver == "v2.1.3":
                results["ok"].append(ip)
            else:
                results["mismatch"].append({"ip": ip, "version": ver, "md5_ok": md5_ok})
        except Exception as e:
            results["unreachable"].append({"ip": ip, "error": str(e)})
    return results

# nmap批量发现
nmap -sn 10.10.21.0/24

# 端口扫描确认502监听
nmap -p 502 10.10.21.1-200

# 连通性+延迟统计
fping -g 10.10.21.1 10.10.21.200 -c 10

# batch_modbus_check.py
from pymodbus.client import ModbusTcpClient
import concurrent.futures

def read_sensor(ip):
    try:
        client = ModbusTcpClient(ip, port=502, timeout=3)
        client.connect()
        rr = client.read_input_registers(0x0002, 2, slave=1)  # 温度、湿度工程值
        if rr.isError():
            return {"ip": ip, "status": "error", "msg": str(rr)}
        temp = rr.registers[0] / 10.0
        hum = rr.registers[1] / 10.0
        client.close()
        return {"ip": ip, "status": "ok", "temp": temp, "hum": hum}
    except Exception as e:
        return {"ip": ip, "status": "unreachable", "msg": str(e)}

def batch_read(ips):
    results = []
    with concurrent.futures.ThreadPoolExecutor(max_workers=20) as executor:
        futures = {executor.submit(read_sensor, ip): ip for ip in ips}
        for future in concurrent.futures.as_completed(futures):
            results.append(future.result())
    return results

┌─────────────────────────────────────────────────────┐
│  智慧库房传感器集群监控                               │
├─────────────────────────────────────────────────────┤
│  总览：200台在线 / 0台离线 / 2台告警                 │
│                                                     │
│  在线率趋势（7天）：                                │
│  ████████████████████████████████████ 99.8%         │
│                                                     │
│  温湿度分布热力图：                                  │
│  [A区] 22.3℃/48%RH  [B区] 22.1℃/49%RH  ...        │
│                                                     │
│  异常列表：                                          │
│  10.10.21.15  温度=--.-- (通信超时, 3min)           │
│  10.10.21.88  湿度=99.9% (疑似饱和/故障)            │
│                                                     │
│  网络健康：                                          │
│  PoE电压最低: 46.2V (10.10.21.33)                   │
│  TCP重传率: 0.02% (正常)                            │
│  Modbus读失败率: 0.05% (正常)                       │
└─────────────────────────────────────────────────────┘

故障发现（告警/巡检/用户反馈）
    │
    ▼
初步定位：哪个层级？
    ├── 网络层：ping不通 → 检查交换机端口/PoE/网线
    ├── 协议层：ping通但502无响应 → 检查固件/Modbus服务
    ├── 数据层：有响应但值异常 → 检查传感器/环境/补偿
    └── 应用层：数据正确但画面异常 → 检查SCADA变量/驱动
    │
    ▼
处置：
    ├── 端口down → 重插网线/更换端口/更换传感器
    ├── PoE无输出 → 检查PSE配置/功率预算/更换交换机
    ├── 通信超时 → 检查IP冲突/VLAN/ACL/Unit ID
    ├── 数据跳变 → 检查干扰源/重新校准/更换传感器
    └── 批量异常 → 检查交换机/网络风暴/广播抑制
    │
    ▼
验证：确认恢复，记录故障原因、处置措施、耗时
    │
    ▼
闭环：更新台账/知识库，必要时修改配置模板

/config
  /network
    switch-config-sw01.conf    # 交换机配置（含端口描述、VLAN、PoE）
    ip-allocation-table.csv    # IP分配表
    vlan-acl-policy.txt        # VLAN与ACL策略
  /sensor
    firmware-v2.1.3.bin        # 固件镜像（签名）
    firmware-v2.1.2.bin        # 历史版本（回滚用）
    register-map-v3.csv         # 寄存器映射表（版本化）
    modbus-config-template.json # Modbus配置模板
  /scada
    device-driver-config.xml    # SCADA驱动配置
    alarm-config.xml            # 告警配置
  /docs
    deployment-map.pdf          # 部署点位图
    asset-ledger.xlsx           # 资产台账
    runbook.md                  # 运维手册