 Direct here Okay, hi everybody, I am Federico Capuano. I'm core developer of the open WSP project. I work for a consortium here Cineca consortium, which is an Italian no-profit consortium that offers Services to Italian institutions and my job is public Wi-Fi I'm also contributor of NINUX an Italian wireless community network and I'm here to present you the new open WSP controller It's an application with which you can manage open WRT or Leedy devices you can use it to implement a mesh network or public Wi-Fi or any network You can implement with open WRT Because I have a very short time Less than 15 minutes. I prepared a screencast because I wanted to do a demonstration so I will play the video and explain you the main features because I think this is the best way to give you an idea of What you can do with this software? Okay, you see here. This is the Django admin interface you have three main objects Which are configurations? Which represents configurations of devices templates are bits of configurations that are shared among devices VPN servers configurations of VPNs That you can use is optional to automate VPN connections from clients and See certification authorities and certificates are used for a specific use case of this automation of VPN certificates so Let's go ahead Here I'm creating a template and I give it a name and The for just to Start with something easy. I'm creating I'm defining a time zone Because I know that all my devices will use the same time zone. So I define it just once And I give it the most appropriate time zone for me, which is Rome And then I remove the other fields because I don't need them because those fields are usually used locally on each Device and this is a template. It will be Shared and used by all the devices. I Here I show the advanced mode Which you can edit the configuration in a jesem format. It's called net jesem. Look it up It's an attempt to standardize some configuration Stuff related to the networking So I give it a description a descriptive name and I save it and this is it I'm assuming you're using open WRT. I also flag it as enabled by default which will make it Activated on by default on each device that will register to the system. I save and I go ahead. I add a new template sometime this time Slightly more advanced. I want to add my SSH key into all devices So I can log in and manage them without Supplying a password So here I show how to do that you add a file you have to it's a little bit of an advanced system You have to know what you're doing if you know what you're doing It's really powerful, but it's not yet ready for users that Have no knowledge of networking. So I added the SSH key and now I do something Slightly more complicated. I Let's say I know many devices will have two gigahertz Wi-Fi access points Wi-Fi access point interface and I I do that I create a template for this use case Here I'm probably talking in the video. I went too fast Here it is I give it the name two gigahertz Wi-Fi Access point in I enabled by default. I start by creating the radio So in the open WRT you have to define the radio the configuration of the radio like what power what channel and then you define the Wi-Fi interface The SSID and this kind of stuff. So here I'm adding the radio You can see that I mostly use the defaults. I can leave some some fields empty And I the select the channel I leave it auto so Linux will automatically select the the channel It finds best. I put a low Power for the radio. I select my country and then I'm ready and I proceed with adding the interface and You can see that there are quite many options Here I select the wireless interface There's also bridge and normal network Interface I leave all these fields empty. I Have to manually Unfortunately still type radio zero in that red field Here I'm showing the options you have but now we use access points. You also have mesh. You have a dock station I give it an SSID here. I type in fuzz them test Open WSP to These fields are more slightly more advanced and we don't care about them now And I leave the network with no encryption and the radio is there done already Just to check that the result is good if you have experience with open WRT you can check the preview and It will show you the generated configuration So if you have experience with this school UCI you can check that everything is correct That's actually what will be installed on the system. We have package network and package wireless And we are ready to go And we save it so now I show you how to create a configuration you usually won't need to do this manually because The vices if you are managing many devices you compile a firmware that will automatically register to the application And so you won't need to do this. It will be mostly automatic if you if you work well with the templates But here I'm doing it manually inserting a dummy mech address just for example purposes You see that now scrolling down. Those are the templates that are automatically selected. We just created in the video and Now you if you You see that the configuration is empty, but the templates are there and if you hit preview you will see the final resulting configuration in text plain format You see the time zone is what we set there which in open WRT is a bit strange and Then you see what we created before and SSH key we save it and Once you save it, you can also download the generated configuration with which is At our GZ Which contains what you usually put on open WRT on open WRT? This will be added to the existing configuration in a smart way so you can remove it updated, but Not mess with the existing configuration so now I went on a different system and And I'm showing you how a Device will automatically register to the system. So this is open WRT the web interface on the new device I just have to set up The LAN interface so it can connect to the internet because the controller now is hosted on the internet But you can also host it locally on a local area network is up to you the setup really So here I selected the DHCP and I The network recon figures and I have to log in again This is open WRT. It's a Linux distribution for Routers and wireless networks anything. It's also used for IOT and now I show that There is a demon that tries to contact the open WSP to controller Here I'm logging in again After having reconfigured the Access point and here you see Maybe you cannot read but it says new device register successfully as The MAC address and the ID and then it says configuration controller has changed testing configuration So the demon also test that the configuration works if it doesn't work. It's it rolls back Ten minutes left I thought less actually that's good So Here I show you that the demon now will have a configure itself The you the ID and its key This is the stuff it uses to download the configuration from the controller And you see the host name here changed It Automatically said its MAC address So now you can take this MAC address go in the List of the devices you update and you find it there and you give it a better name of course Here I call it fuzz them test and you see the the default templates are automatically selected So it has already downloaded them, but I also add the two gigahertz Wi-Fi and You can see you can also override or add more stuff in the single Device configuration here. Just you know, this is something you could do for maintain as proposed add the descriptions of You know here. I put maintainer as myself and I add a note test device I usually before saving I always check the configuration You can see this quite a lot of stuff from the default templates But this is automatic. I didn't have to do anything once you define the templates Adding new devices is really easy. So now it's saved and Here I open the log grid Interactive mode again to show what is performing behind the scenes and you see it was testing the configuration It's reloading everything. You see quite a lot of Logs from all the components of open wt and the configuration tests succeeded and now it's configured You see the WLAN zero interface is brought up and the SSID of the free Wi-Fi service which is bridged The Wi-Fi is bridged with a layer 2 VPN here and The layer 2 VPN is correctly running here. I show it with a command So I got all this stuff down for me automatically in no time. It's pretty it's pretty powerful It's still not for Users that don't know much about networking but I really want to make it easier, but now we're getting more users We're getting a lot of interest from emerging economies Especially India and South America. It's quite interesting, but we use this software also a lot in Italy Italian institutions use it for offering public Wi-Fi the old version But some people some institutions are starting to picking this up for example the University of Urbino is Using it to manage his own Wi-Fi. They also use it to provide a drone to the students and Okay, how much time do I have left? Seven minutes No two minutes. Okay, so time for questions. There's no time By only syntax or are you trying to test it? You you use a term validation validation is the validation of the schema before you save then there is a The demon test the configuration. There is a default test and the default test is that the device is able to contact the controller again after the new configuration, but you can define your own test Mm-hmm No, no, no, the default test is very simple the default test is I can contact the controller again It's not necessary on the internet the important thing is that you can Reach the device if something is wrong you can fix it manually or you can define your own test It depends on you on your use case I cannot foresee all the uses cases of the people that we use it So you will have to define your own test in the firmware It's a hard problem HTTPS Why not RPCD that's already it was easier to implement is just me working in this and also I do it in my free time