边缘节点配置漂移：如何保证上百台以太网温湿度变送器参数的一致性？

# 全局配置模板：V1.2 (2026-09-17)
metadata:
  version: "1.2"
  description: "标准机房以太网温湿度变送器配置"
  applicable_models: ["TH-ETH-200", "TH-ETH-300-Split"]

# 网络配置（固化，禁止DHCP）
network:
  mode: "static"
  ip_range: "10.100.10.0/24" # 仅用于校验，实际IP按CMDB
  gateway: "10.100.10.1"
  dns: "10.100.10.2"
  vlan: 100
  duplex: "auto"
  negotiation: "on"

# 协议与服务
services:
  modbus_tcp:
    enabled: true
    port: 502
    unit_id: 1
    register_map_version: "MAP-V2.1" # 关键！锁定寄存器映射
  snmp:
    enabled: true
    version: "v2c"
    community_ro: "lab_ro_2026"
    community_rw: "lab_rw_2026"
    traps:
      enabled: true
      target_ip: "10.200.0.20"
      port: 162
      community: "trap_secure"
  http:
    enabled: true
    port: 80
    session_timeout: 30

# 采集与存储
sampling:
  interval: 5 # 单位：秒，全网统一
  average_window: 3 # 滑动平均点数
storage:
  mode: "ring_buffer"
  capacity: 100000
  auto_upload: true # 断网续传开关

# 告警阈值（根据区域细分，此处为机房标准）
thresholds:
  temperature:
    warning: 28.0
    critical: 30.0
    hysteresis: 1.0 # 回滞，防止抖动
  humidity:
    warning: 60.0
    critical: 70.0
    hysteresis: 2.0

# 安全与维护
security:
  web_password: "StrongPassword123!" # 加密存储或外部注入
  ssh_enabled: false
  firmware_lock: true # 禁止非授权升级
maintenance:
  heartbeat_interval: 60 # 单位：秒
  ntp_server: "10.100.10.5"
  timezone: "GMT+8"

# 校准（偏移量由CMDB单独管理，此处为0）
calibration:
  temp_offset: 0.0
  humi_offset: 0.0

from pysnmp.hlapi import *

def set_snmp_param(ip, oid, value, type='i'):
    iterator = setCmd(
        SnmpEngine(),
        CommunityData('lab_rw_2026', mpModel=1),
        UdpTransportTarget((ip, 161)),
        ContextData(),
        ObjectType(ObjectIdentity(oid), 
                   Integer(value) if type=='i' else OctetString(value))
    )
    errorIndication, errorStatus, errorIndex, varBinds = next(iterator)
    if errorIndication:
        print(f"{ip} Error: {errorIndication}")
    elif errorStatus:
        print(f"{ip} Error: {errorStatus.prettyPrint()}")
    else:
        print(f"{ip} Success: {varBinds}")

# 批量修改采样间隔（假设OID为1.3.6.1.4.1.12345.1.3.1.0）
devices = ["10.100.10.21", "10.100.10.22", ...]
for ip in devices:
    set_snmp_param(ip, '1.3.6.1.4.1.12345.1.3.1.0', 5) # 5秒

# 登录获取Token
TOKEN=$(curl -X POST http://$IP/api/login -d '{"user":"admin","pwd":"xxx"}' | jq -r .token)

# 下发配置（部分更新，仅修改采样间隔）
curl -X PUT http://$IP/api/v1/config/sampling \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"interval": 5}'

import subprocess
import yaml

# 加载黄金模板
with open('golden_config_v1.2.yaml') as f:
    golden = yaml.safe_load(f)

# 待校验设备列表
devices = ["10.100.10.21", "10.100.10.22"]

for ip in devices:
    print(f"Checking {ip}...")
    # 获取设备当前采样间隔（OID示例）
    result = subprocess.run(
        ['snmpget', '-v2c', '-c', 'lab_ro_2026', f'{ip}:161', '1.3.6.1.4.1.12345.1.3.1.0'],
        capture_output=True, text=True
    )
    if "INTEGER" in result.stdout:
        current_interval = int(result.stdout.split()[-1])
        expected_interval = golden['sampling']['interval']
        if current_interval != expected_interval:
            print(f"  [MISMATCH] Sampling interval: expected {expected_interval}, got {current_interval}")
        else:
            print(f"  [OK] Sampling interval matches.")
    else:
        print(f"  [ERROR] Failed to fetch data from {ip}")