Indlela yokubhala iskripthi sokungena ku-AnyConnect ku-Linux naku-macOS

Iskripthi siphetha ngoziro, umhubhe uyavela, futhi ukusebenza okulandelayo kuyaliwa ngaphambi kokuba kube lula ukucela iphasiwedi. Noma umyalo ofanayo uyasebenza kutheminali futhi wehluleke emsebenzini ohleliwe ngephutha elithi «umcimbi awutholakalanga» ongasho lutho olusizayo. Kokubili ukuxoxa kwesikhathi sokufaka okujwayelekile kwiklayenti le-AnyConnect okuhamba kabi, hhayi ukwehluleka kwenethiwekhi. Thatha ukungena njengombuzo nempendulo ebhaliwe futhi ukwehluleka kuba okulindelekile futhi kuncane.

Kungani umyalo ofanayo wehluleka ngaphakathi kweskripthi

Iklayenti lifunda izimpendulo zalo kokokufaka okujwayelekile, umugqa owodwa ngombuzo ngamunye, ngokulandelana okufunwa yisango. Noma yini eshintsha inombolo yemibuzo, njengebhana elisha, isikhethi seqemba noma inselelo yesici sesibili, isusa impendulo ngayinye elandelayo ngomugqa owodwa. Iklayenti libe selifunda igama lomsebenzisi lapho lalilindele khona iphasiwedi futhi libika ukwehluleka okungakhombisi kukho kokubili.

Iphasiwedi equkethe uphawu lokumangaza yengeza ukwehluleka kwesibili okuthule kakhulu. Ngaphakathi kwezimpawu zokucaphuna ezimbili iqokobhe liyandisa kudala ngaphambi kokuba iklayenti libone lutho.

Faka umthwalo ngaphakathi kwezimpawu zokucaphuna ezingababili futhi uhlamvu luhamba lungaphazamisekile. Yilokho kuphela ukulungisa, futhi kuchaza lonke ikilasi lemibiko lapho ubufakazi obufanayo busebenza khona uma buthayiphiwe futhi buhluleka uma bugciniwe. Hlola ukuthi iqokobhe lenzeni ngaphambi kokuhlola isango: phrinta umthwalo ngokusebenzisa isigaxa esibonisa amabhithi aqondile futhi ubale imigqa. Iningi lalezi zophenyo liphelela lapho.

Bhala izimpendulo ngokulandelana okufunwa yiklayenti

Sebenzisa iklayenti ngendlela yokuxhumana kanye futhi ubhale phansi umbuzo ngamunye ngokulandelana. Isikhethi seqemba sivela kuphela uma isango lishicilela amaphrofayili amaningi, futhi umbuzo webhana uvella kuphela uma kucushwe owodwa. Ifayela lezimpendulo kufanele lihambisane nesango oqondise kulo ngempela, hhayi lelo elisemibhalweni.

Bese wakha ifayela ngalokho kulandelana okuqondile, impendulo eyodwa ngomugqa. Inkomba yeqemba iyinombolo ebalulwa yiklayenti, hhayi indawo yephrofayili embhalweni. Yamukela ibhana kuphela uma isango lakho liyithumela, futhi wengeze umugqa wumbuzo ngamunye owengeziwe okwaziwayo ukuthi isango liyawubuza. Qala iklayenti ngefulegi elingeyona eyokuxhumana ukuze lisebenzise ifayela esikhundleni sokulinda itheminali.

connect vpn.lab.example
0
username
password
y
exit

/opt/cisco/anyconnect/bin/vpn -s < anyconnect.txt

Ukulandelana okufanayo kungafika ngokusebenzisa ipayipi uma ukhetha ukungagcini ifayela kudiski. Imithetho yokucaphuna isanquma ukuthi kuzosinda yini.

Gcina ubufakazi ngaphandle kohlu lwezinqubo

I-agumenti kumugqa womyalo iyafundeka kunoma yimuphi umsebenzisi wendawo kukho konke ukuphila kwenqubo, ngakho iphasiwedi ingeyefayela noma ipayipi futhi ayikaze ibe ingeyohlu lwezimpikiswano. Yenza leyo fayela ifundeke kuphela ku-akhawunti esebenzisa iskripthi, futhi uyisuse lapho umsebenzi uphela. Ku-macOS ibhinari ivamise ukuba sendleleni efanayo neye-Linux, kodwa qinisekisa indawo efakiwe esikhundleni sokucabanga. Isigaxa esihlola zombili izindlela sifushane kunombiko wesigameko.

printf 'username\npassword\ny\n' | /opt/cisco/anyconnect/bin/vpn -s connect vpn.lab.example

Ungavumeli iskripthi siphinde sizame ingunaphakade. Ibhana elishintshile noma iphasiwedi ephelelwe yisikhathi ebusuku kushintsha ifayela lezimpendulo eliqinile libe umjikelezo wokuphinda uzame, futhi lowo mjikelezo yiwo ovalele i-akhawunti.

Hluleka kanye, phrinta umbhalo wephutha weklayenti uqobo, bese uphuma. Umsebenzi ohleliwe udinga ukubuyekezwa kobunikazi nokutholakala kobufakazi okufanayo nanoma yimuphi omunye umsebenzi ongagadiwe, ngoba ubufakazi obuphela ngokuthula abukwazi ukuhlukaniswa nokuphazamiseka ngehora lesithathu ekuseni.

Qinisekisa isikhathi somhlangano ngaphambi kokuthemba ikhodi yokuphuma

Isimo esixhunyiwe sifakazela ukuthi umhubhe ukhona futhi akukho okunye. Hlola insiza eyodwa okufanele ifinyeleleke ngayo ngaphambi kokuba iskripthi siqale umsebenzi wangempela, futhi thatha ukwehluleka lapho njengokwehluleka okuhlukile ekungeneni okwehlulekile. Uma kungenjalo uzophinda uzame uxhumano oluhle ngokuphelele olungakwazi ukufinyelela lapho luya khona.

Buza iklayenti ngesimo salo ngaphambi nangemva kokunqamuka, ngoba isikhathi somhlangano esidala singala uxhumano olulandelayo kuyilapho iskripthi sakho sibika impumelelo.

/opt/cisco/anyconnect/bin/vpn state
/opt/cisco/anyconnect/bin/vpn disconnect

Rekhoda okukhiphayo kwesimo eduze kwekhodi yokuphuma, ngoba ikhodi iyodwa ayikwazi ukuhlukanisa ukungena okwaliwe nesikhathi somhlangano esingakaze sivalwe. Uma isango lifuna isici sesibili noma imvume yokuxhumana, yeka ukubhala leso sinyathelo njengeskripthi futhi usebenzise indlela esekelwa yiklayenti esikhundleni salokho. Ifayela lezimpendulo eliqinile liwukukhululeka kobufakazi obulawulayo, hhayi indlela yokweqa isinyathelo sokuqinisekisa ongabusilawuli. Gcina ubukhulu bungaka futhi lokhu kuhlala kuyiskripthi esifushane.

Nini ifayela lezimpendulo eliqinile liyithuluzi elingalungile

Isici sesibili noma umbuzo wemvume unqoba le phethini ngokuphelele, futhi lokho kuwumngcele wokuklama, hhayi indida yeskripthi. Sebenzisa noma iyiphi indlela esekelwa yiklayenti yaleso sinyathelo esikhundleni sokuqagela impendulo kusengaphambili. Ifayela eliqinile lisebenza kuphela kubufakazi obuhlala bufana phakathi kokusebenza.

Izitayela ezimbili ezindala zobufakazi nazo zididaniswa ne-AnyConnect. Iphrofayili ye-vpnc ikhuluma enye iphrothokholi, futhi ifuna igama leqembu njengesihlonzi se-IPSec, bese kuba yimfihlo yeqembu eyabiwe, bese kuba yimininingwane ye-akhawunti yakho.

Njengoba amaphrothokholi ehlukile, i-vpnc ayikwazi ukufinyelela isango elishicilela kuphela amaphrofayili e-AnyConnect, futhi enye indlela evulekile ejwayelekile yalolo hlelo yi-openconnect enephrothokholi ye-anyconnect ekhethiwe. Ifayela le-pcf lingelaklayenti elidala le-Cisco futhi nakuba umsingathi walo, igama leqembu nephasiwedi yeqembu kungafakwa kabusha kuklayenti esakhuluma i-Cisco IPsec, ifayela alidluli phakathi kwamaklayenti. Iport engajwayelekile noma imodi yomhubhe engajwayelekile ivamise ukulahleka kulokho kudlulisa. Nquma ukuthi iyiphi iphrothokholi enikezwa yisango ngaphambi kokukhetha ithuluzi.