Ingabe i-Meraki MX yakho isekela i-Cisco Secure Client?

Imicu emibili yosekelo ayivumelani mayelana nokuthi i-Meraki ingakwenza yini ukusebenza kwe-AnyConnect, futhi yomibili inamaphutha ngokuzethemba ngendlela efanayo. Umbuzo awuwona wokuthi i-MX ikhuluma i-IKEv2, ngoba i-AnyConnect kuthuluzi iwusizo lwe-TLS, hhayi i-IPsec. Ukuhlolwa okubili okuhlukene kunquma impendulo, futhi akukho nokukodwa okuwukuqhathanisa komkhiqizo. Kwenze ngokulandelana futhi uthola irekhodi lokuhambisana esikhundleni sombono.

Kuqala imodeli kanye nenguqulo

Qala ngethuluzi eliqondile kanye nesofthiwe eliyisebenzisayo, ngoba isici silinganiselwe kukho kokubili. I-Meraki ishicilela imatrixi ebalula amamodeli asekelwayo kanye ne-firmware encane, futhi leyo matrixi iyisikhulu esisodwa okufanele sicashunwe. Imodeli esohlwini ayikho ngokuzenzakalela enguqulweni esekela isici, futhi inguqulo eyisekelayo kungenzeka akuyona leyo oyisebenzisayo. Bhala imodeli kanye ne-firmware efakiwe njengamaqiniso amabili ahlukene. Bese ufunda imatrixi yalolo hlamvu.

Ungacabangi ngemodeli efanayo emndenini ofanayo. Uhlu lungolwemodeli ngayinye, futhi umehluko wangempela.

I-AnyConnect iwusizo lwe-SSL, hhayi i-IPsec

I-Meraki ichaza i-AnyConnect ku-MX njenge-VPN esekelwe kuzinhlelo ngokusebenzisa i-TLS ne-DTLS, futhi iyibhala eceleni kosizo olwahlukile lwe-VPN yeklayenti ngokusebenzisa i-L2TP/IPsec. Lezi zinto ezimbili ezabelana ngedashibhodi eyodwa ngengozi. Ukuqhathanisa i-IKEv1 ne-IKEv2 kukutshela ngosizo lwe-IPsec futhi akukutsheli lutho mayelana nokuthi usizo lwe-TLS lukhona yini kuthuluzi lakho. Uma ubufakazi bakho kuyithebula lezinguqulo ze-IKE, ubuphendula umbuzo ohlukile.

Khomba ukuthi yiluphi usizo olwenziwa yithuluzi ngaphambi kokuqhathanisa amaklayenti. Iphrofayela ye-L2TP/IPsec esebenzayo ayiphenduki iphrofayela ye-AnyConnect ngoba ifinyelela inhlangano efanayo, futhi zombili zidinga ukumiswa kweklayenti okuhlukile.

Yiziphi izici i-MX ezinikezayo ngempela

Uhlu lwezici lwe-ASA yakwa-Cisco aluwona uhlu lwezici lwe-MX, futhi iklayenti elisekela izinto eziyishumi nambili alenze isango lizisekele. Qhathanisa imisebenzi oyidingayo ngempela: indlela yokuqinisekisa, ukuziphatha kwethunjana elihlukanisiwe, ukuphathwa kwe-DNS kanye nelungelo elidingwa yithuluzi. Thatha ngayinye kusuka kumadokhumenti e-Meraki enguqulweni esetshenzisiwe.

Ukuqinisekisa yindawo lapho lokhu kuvame ukuluma khona. Indlela enikezwa yiklayenti kodwa ingakwazi ukuyimisa ithuluzi iyicala losekelo elilindele ukwenzeka.

Inguqulo yeklayenti nelungelo

I-Cisco Secure Client iyigama lamanje lomndeni ofanayo wamaklayenti, ngakho idokhumenti ekhuluma nge-AnyConnect ayidingeki ukuthi iphelelwe yisikhathi. Okubalulekile yinguqulo eyethulwa yinhlangano yakho kanye nokuthi inguqulo yethuluzi iqinisekisiwe yini ngokumelene nayo.

Hlola imfuneko yelayisensi kumhlahlandlela ofanayo esikhundleni sokuyicabangela kusuka kwenye ipulatifomu. Bese ugcina igama lendlela yokugcina, ukuqinisekiswa kwesitifiketi kanye nokugeleza kokuqinisekisa okugunyaziwe ndawonye kurekhodi elilodwa losizo, ngoba lezi zintathu zehluleka ngokuzimela. Isixwayiso sesitifiketi esigqitshwa abasebenzisi ngokuchofoza akusona umphumela wokuhambisana, kuwukumiswa okungaqinisekisiwe. Ukufinyelela kude kuyingxenye eyodwa yomsebenzi, ngoba umsebenzisi usadinga imizila nezimvume ukuze afinyelele lapho eya khona.

Bhala irekhodi ngezinkambu ezinhlanu

Imodeli, i-firmware, imodi yokufinyelela kude, inguqulo yeklayenti kanye nemisebenzi edingwa ukuthunyelwa. Izinkambu ezinhlanu, futhi impendulo yokuthi singayisebenzisa yini i-AnyConnect isekuhlanganisweni hhayi kunoma yikuphi kwayo okuyedwa. Lelo rekhodi litshela nonjiniyela olandelayo ukuthi yini okufanele iphinde ihlolwe ngemuva kokuthuthukiswa kwe-firmware.

Bese uhlola indlela kusukela ekuqaleni kuze kube sekupheleni: qinisekisa, xazulula igama langaphakathi, finyelela insiza evunyelwe futhi uqinisekise ukuthi insiza okungafanele ufinyelele kuyo iyenqatshwa. Ukungena okuphumelelayo kepha insiza ingalayishi neze kuwumphumela wengxenye, futhi ingxenye engekho ngokuvamile iwumzila noma igunya, hhayi iklayenti. Gcina inhlanganisela ehloliwe kanye noshintsho, ukuze umuntu olandelayo azuze ubufakazi hhayi isiqubulo.