MSR UI on a mobile browser

[cw-kid]

@Pabla said in Is this possible? Store data from Asus Router ajax .asp page for Temperature data.:

Do you happen to run Home Assistant? There’s an integration that monitors CPU temps and a lot of other things.

No I am using Vera / Ezlo controllers.

But I did see and read that Home Assistant had some support for monitoring Asus Routers using SNMP I believe.

[toggledbits]

@cw-kid your router seems to have a special login page that sets up a session cookie for your browser, rather than using the native HTTP authentication (which is what is used when you select Basic or Digest in the request). That page ajax_coretmp.asp is probably a dead-end here, since you're not going to be able to reproduce a valid session cookie for the request without going through that login page.

The SSH solution can probably work, but will test your technical prowess. You can use a Shell Command action to make the request to the router via SSH. You will likely need to set up public key authentication between the router and the MSR host system so that the ssh command can run without login credentials (the router trusts the MSR host system). That requires configuration on the router about which I have no information, and done incorrectly may lock you out of your router and send you to a factory reset and reconfiguration (back up your router config beforehand if that's an available feature). This trust also opens some security risks, so proceed at your own peril. The command line may look something like:

ssh -i <path-to-trusted-key> routeruser@192.168.0.1 'cat /sys/class/thermal/thermal_zone0/temp'

Rather than wrestle with shell quoting to get the awk in on the ssh command, do the parsing and math in MSR expressions on the returned response.

[cw-kid]

@toggledbits

Thank you for the reply.

OK so I ran "ssh-keygen" on the MSR Linux box, this created an id_rsa.pub public key in the /root/.ssh directory.

I then copied that key onto my Asus Router in the Administration -> System menu "Authorized Keys".

I then on the terminal on the MSR host ran this command

ssh -i ~/.ssh/id_rsa.pub admin@192.168.0.1 'cat /sys/class/thermal/thermal_zone0/temp'

I then saw this:

It then prompted me for a password, which I was not expecting for admin@192.168.0.1
After entering the password it looks to have returned the requested CPU temp value.

When I ran the ssh-keygen I didn't enter a password for the key that was to be generated. Perhaps this was my mistake, I wasn't sure if I had to leave the password blank for the two systems to connect together over SSH without it prompting for a password etc.

Thanks

[cw-kid]

I ran the ssh-keygen again and this time entered a password for the key. It generated a different key, so I copied to the routers Admin page again.

Now when I run the ssh command on the terminal on the MSR host it says the same thing:

"Permissions 0644 for '/root/.ssh/id_rsa.pub' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/root/.ssh/id_rsa.pub": bad permissions"

So not sure why that is.

These are the permissions the system set on the file

[cw-kid]

Think my command was wrong I need to remove the .pub from it. So its /id_rsa not /id_rsa.pub

ssh -i ~/.ssh/id_rsa admin@192.168.0.1 'cat /sys/class/thermal/thermal_zone0/temp'

Now its prompting me for the key password. So perhaps I do need to generate the key with no password after all.

[cw-kid]

OK its working now in the terminal at least, I generated the key again with no password and now the above command works and does not prompt me for a password and the routers CPU temp value is returned.

I will try it in an MSR rule next.

[cw-kid]

Must be doing something wrong I am getting null in the local expression

Looks like the path is wrong it should be root not my home dir

Doesn't work either if I put in root instead of ~

I then tried copying the id_rsa file into my home directory and the .ssh folder in there. But it still doesn't work. So I am stuck now.

[toggledbits]

OK. The ~ means the home directory of the login user, and where MSR is running, that appears to be /home/stuart, so that's why the first attempt doesn't work.

The second attempt doesn't work because you used root/... instead of /root/...... it's a path, not a username, so it needs to begin with a /. Just changing that is unlikely to work, either, because regular users (like stuart) do not have (and should never have) access to the .ssh directory of any other user, especially that of root.

You need to copy the public and private key files to somewhere where Reactor has access, and specify the full path to that directory in the command line's -i option.

Alternately, use the public key for user stuart as the trusted key on the router, and let that user make the connection. This is by far preferable, as copying root's private key around to other places and giving it lower access permissions presents serious security risks.

[cw-kid]

OK thanks, I changed the command in the rule to this now:

ssh -i /root/.ssh/id_rsa admin@192.168.0.1 'cat /sys/class/thermal/thermal_zone0/temp'

I am no longer getting any alert errors in MSR but the local expression is not being populated. As your edit just said that is likely why.

I then tried this command instead.

ssh -i home/stuart/.ssh/id_rsa admin@192.168.0.1 'cat /sys/class/thermal/thermal_zone0/temp'

and

ssh -i /home/stuart/.ssh/id_rsa admin@192.168.0.1 'cat /sys/class/thermal/thermal_zone0/temp'

But I get alert errors again.

"Alternately, use the public key for user stuart as the trusted key on the router, and let that user make the connection."

That might be the best option. I need to work out how to ssh-keygen for a particular user though ?

[toggledbits]

@cw-kid said in Is this possible? Store data from Asus Router ajax .asp page for Temperature data.:

I need to work out how to ssh-keygen for a particular user though ?

Why? Just use the existing key in ~stuart/.ssh. If there isn't one, you just run ssh-keygen as user stuart rather than as root (no sudo either).

[cw-kid]

Got it I just connected to the MSR host logging in as me rather than root user and ran the keygen again, it created the two key files in my own .ssh folder now. I will add that to the router and try again. Thanks

[cw-kid]

Its working now with my own public key added to the router. The local expression now has data. Not sure what the \n is on the end though? It didn't do that in the terminal command line.

[toggledbits]

@cw-kid the \n at the end is a newline character. Linux is quite literal. You can push that string through the expression int() function and it will convert it to a number and ignore the newline.

[cw-kid]

@toggledbits said in Is this possible? Store data from Asus Router ajax .asp page for Temperature data.:

You can push that string through the expression int() function

No idea what that means, but I will search. I also need to do some thing with that data like round it, as it says"66986" which should read as 66.99 degrees

[cw-kid]

OK I see what you mean my local expression is a string. But how to change it to int ?

When you create a local expression it gives you no option of the type it should be.

[cw-kid]

Round doesn't seem to work as the raw data does not have a decimal point in it in the first place.

How to add a decimal point then?

[toggledbits]

int(RouterCPUTemp) / 1000

[cw-kid]

Perfect thank you !

I might even create a virtual device (multi-string plugin) on Vera and have MSR send these values to that also, so I can also have a tile in our Home Remote dashboard app showing this data.

[toggledbits]

You can wrap that in a round() if you only want one decimal (for example)...

round( int( RouterCPUTemp ) / 1000, 1 )

[cw-kid]

@toggledbits said in Is this possible? Store data from Asus Router ajax .asp page for Temperature data.:

round( int( RouterCPUTemp ) / 1000, 1 )

Even better, you have made my day! Thank you.

I have been worrying about my router getting too hot, now I will know if it does.