数据机房动环采集实战：以太网温湿度变送器 TCP/IP 协议解析、抓包调试与落地方案

# regsmoke.py - 单节点冒烟，输出原始十六进制+解析值
from pymodbus.client import ModbusTcpClient
import struct

def smoke(ip, unit=1):
    c = ModbusTcpClient(ip, timeout=2); c.connect()
    # 一次读 40001~40004（0x0000 起，4寄存器，含FLOAT露点）
    rr = c.read_holding_registers(0x0000, 4, slave=unit)
    raw = rr.registers
    print(f"[{ip}] raw hex: {[hex(r) for r in raw]}")
    temp = int.from_bytes(struct.pack('>H', raw[0]), 'big', signed=True) * 0.1
    hum  = raw[1] * 0.1
    stat = raw[2]
    # CDAB 重组露点：raw[2]低字 raw[3]高字 → 实际项目按厂家确认
    dew_bytes = struct.pack('>HH', raw[3], raw[2])
    dew = struct.unpack('>f', dew_bytes)[0]
    print(f"  T={temp:.1f}  H={hum:.1f}  stat=0x{stat:04X}  Dew={dew:.1f}")
    # 回读阈值校验
    rb = c.read_holding_registers(0x0064, 1, slave=unit)
    print(f"  TH_hi={rb.registers[0]*0.1:.1f}℃")
    c.close()

# smoke("192.168.110.11")

# 创建VLAN
vlan 110
 description DYNAMIC_ENV_SENSORS

# 传感器接入端口（例G0/0/11~G0/0/22）
interface range GigabitEthernet0/0/11 to G0/0/22
 port link-type access
 port default vlan 110
 poe enable
 poe priority high
 storm-control broadcast min 5                    # 防UDP广播风暴
 mac-address binding ip 192.168.110.11 vlan 110 mac xxxx-xxxx-110b
 mac-address binding ip 192.168.110.12 vlan 110 mac xxxx-xxxx-110c
 ...                                              # 逐台绑定
 port-security enable
 port-security max-mac-num 1

# 边缘网关上联口（Trunk，只放110）
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 110 only

# 未用端口全部 shutdown
interface range GigabitEthernet0/0/23 to G0/0/24
 shutdown

# 五元组白名单，顺序即优先级
permit tcp 192.168.110.254/32 192.168.110.0/24 eq 502   # 网关→传感器
permit tcp 192.168.20.50/32 192.168.110.254/32 eq 8883 # 运维跳板→网关MQTT
deny   ip  any 192.168.110.0/24                         # 其余全拦
deny   icmp any any                                     # 动环域不回ping

Day1 上午  交换机上架 → VLAN+PoE+端口绑定 → 未用口shutdown
Day1 下午  逐台传感器上电，笔记本直连网关口跑 regsmoke.py，原始值贴台账
Day2 上午  全量12台在线，Wireshark抓30min基线pcap存档
Day2 下午  拔线/断电/重启三项注入测试 + 补传记录截图
Day3       网关CSV点表导入平台，Grafana面板按quality位分色，验收会