I-VPN ye-FortiGate iwela eqenjini elingalungile: ukufanisa kwe-RADIUS
I-Fortinet-Group-Name ifaniswa nempendulo, hhayi ngelebula yeqembu lakho lendawo. Hlola amagama amathathu ngaphambi kokunweba ukufanisa ku-Any.
Ukungena kuphumelela, ithumbu liyaphakama, futhi umsebenzisi uwela kunqubomgomo engalungile noma akekho kunqubomgomo nhlobo. Akukho lutho kulogi ye-FortiGate olumemezela ukuthi iqembu belingekho, ngoba ngasohlangothini lwayo ukuqinisekisa kwasebenza futhi ukufaniswa kweqembu akuzange kwenzeke nje. Uchungechunge okudingeka uluhlole lunezinto ezintathu ezihlukene, futhi ngokuvamile akulona ucingo olulodwa.
Amagama amathathu anemisebenzi emithathu
Bhala womathathu ngaphambi kokuthinta noma yikuphi ukulungiswa, ngoba amabili awo ahlala ezinhlelweni ezihlukene.
| Record | Illustrative value |
|---|---|
| Directory membership checked by the RADIUS policy | Engineering VPN users |
| Returned Fortinet-Group-Name string | vpn-engineering |
| FortiGate local access group | VPN-Engineering |
Iqembu lencwadi yokuhola yilona elihlolwa inqubomgomo yakho ye-RADIUS. Isici esibuyisiwe yinani elingaphakathi kwempendulo ye-Access-Accept. Iqembu lendawo le-FortiGate yisiqukathi inqubomgomo ebhekisela kuso ngegama. Ukudida noma yimaphi amabili awo kukhiqiza ukungena okusebenzayo kanye nokugunyazwa okungasebenzi.
Ukufanisa kwenzeka kuphi ngempela
Incazelo yakwaFortinet yokufaniswa kwamaqembu e-RADIUS ibeka Fortinet-Group-Name njengesici seqembu elizenzakalelayo. I-FortiGate iqhathanisa iseva ekude elungisiwe kanye nenani legama leqembu nalokho okuthwelwe yimpendulo, okusho ukuthi ukuqhathanisa kukhona nokucinga okubuyisiwe, hhayi ngelebula yokubonisa yeqembu lakho lendawo.
Yingakho iqembu lendawo elibizwa VPN-Engineering lingahlala eceleni kwenani elibuyisiwe vpn-engineering futhi lingafanisi nelutho. Kulezi ziqhathaniso ukubhalwa kwezinhlamvu ezinkulu nezincane akukona ukuhlobisa. Khetha ucingo olulodwa, lusebenzise empenduleni, futhi ubhekisele ocingweni olufanayo emthethweni wokufanisa wesango.
Ku-FortiAuthenticator iqembu kufanele lixhunywe esicini futhi lifakwe kunqubomgomo yesevisi ye-RADIUS efanele, nokulawulwa kokubuyiswa kwesici seqembu kuvuliwe lapho kusebenza khona.
Impendulo ingaphumelela ngaphandle kwesici
Kwi-NPS noma esinye iseva ye-RADIUS, phoqelela isimo seqembu lencwadi yokuhola kunqubomgomo bese ulungisa isici sempendulo esisekelwayo. Ukuhlolwa kwephasiwedi okuphumelelayo kukhiqiza i-Access-Accept ngokwako, futhi i-Access-Accept engenalo ucingo lweqembu iyimpendulo evumelekile ngokuphelele engagunyazi lutho ohlangothini lwe-FortiGate. Lona wuhlobo oluvame kakhulu lwenkinga.
Ukuchaza iqembu akufani nokulithumela. Lezi zinyathelo ezimbili zokulungiswa ezikrinini ezimbili ezihlukene, futhi ngokuvamile kwenziwa okukodwa kuphela kuzo.
Kungani ukufanisa ne-Any kuwugibe
Ukufaniswa kweqembu elikude le-Any kuwumklamo ofanelekile lapho iseva ye-RADIUS isivele yamukela khona abantu okubafunayo. Khetha lokho kudlulisela ngamabomu. Ukunweba ukufanisa ukuze isici esingekho sinyamalale kwamukela yonke i-akhawunti eseva ye-RADIUS eyamukelayo ngengozi, kuhlanganise nalezo ezingakaze zihloselwe ukufinyelela i-VPN. Uphawu luyanyamalala futhi ukulawulwa kokufinyelela kuyeka ukuba khona buthule.
Uma ungakwazi ukusho ukuthi iseva ye-RADIUS kufanele yamukele bani, awukakulungeli ukufanisa kwe-Any.
Gcina amarekhodi amane osekelwa
Uma kusengasebenzi, qoqa izinto ezine: inqubomgomo ye-RADIUS ekhethiwe, isici seqembu esibuyiswe ngempela, iseva ye-FortiGate nenani eliqhathaniswe nayo, kanye neqembu lendawo elivela khona. La marekhodi amane athola indawo yokuphuka ngaphandle kokuveza amaphasiwedi noma ukushintsha ubulungu beqembu ukuze abone ukuthi kwenzekani.
Hlola i-akhawunti eyodwa egunyaziwe kanye neyodwa engaphandle kobubanzi ngaphansi komthetho wangempela, futhi uhlole inqubomgomo kanye nokufinyelela ezinsizeni okuvelayo kanye nomphumela wokuqinisekisa. Yileli bhangqana kuphela elikutshela ukuthi ukufanisa kwenza okucabangayo yini.