Kungani impendulo ye-RADIUS VLAN ingenzi lutho kumsebenzisi we-VPN

I-gateway, hhayi inqubomgomo ye-RADIUS, enquma ukuthi i-attribute ye-VLAN yenzani. Landela uchungechunge lweseshini futhi ufunde okwabuyiswa iseva ngempela ngaphambi kokuhlela.

Ufaka i-attribute ye-VLAN kunqubomgomo ye-NPS, umsebenzisi we-VPN uyaxhuma, futhi ikhompyutha ephathekayo isawela echibini elizenzakalelayo. Iseva ye-RADIUS ibuyisela lokho okukucelile, okwenza ukwehluleka kubonakale njengenkinga ye-cache. Ngokuvamile akunjalo. I-Access-Accept ithwala izeluleko zokugunyaza, futhi yiseva yokufinyelela kunethiwekhi eyayithola lezo kuphela engashintsha eyodwa ibe ukwabiwa kwenethiwekhi.

Qala kugateway, hhayi kunqubomgomo

Landela uchungechunge kusukela kuklayenti ngaphakathi ngaphambi kokushintsha noma yini. Iklayenti licela iseshini kugateway, igateway libuza i-RADIUS ukuthi umsebenzisi angayithola yini, futhi i-RADIUS iphendula ngomphumela kanye nesethi yama-attribute. Bese igateway isebenzisa lokho eyaziyo ukukusebenzisa.

Ukuhlola kwakho kuqala esinyathelweni sesine, yingakho ezintathu zokuqala zibonakala ziphilile. Akukho okokushintshana okuphoqa igateway ukuthi isebenzise i-attribute eyitholile. Impendulo iyisicelo esiya kugateway, hhayi iqiniso mayelana neklayenti.

Lokho iswishi ekwenzayo ne-VPN engenakukwenza

Iswishi yokufinyelela ye-802.1X iyisihloli esinezimbobo, futhi ukwabiwa kwe-VLAN okuguquguqukayo kuhambisa esinye salezo zimbobo kuyi-VLAN eseyithwalwa yiswishi. Ama-attribute ethaneli ye-RADIUS achaza leyo nhloso ngendlela iswishi eyiqondayo. I-VPN enamizila iphetha amathaneli, hhayi izimbobo zeswishi, futhi amaklayenti ayo ngokuvamile athola ikheli nomzila esikhundleni sokuba yilungu lesizinda sokusakaza. Asikho isikhala sokuhambisa, ngakho i-attribute efanayo ayinakho okungasebenza kukho.

Lona umehluko wemodeli, hhayi iphutha lomthengisi. Amanye amagateway engeza inqubomgomo yawo yeqembu, ukukhethwa kwechibi noma indlela yokuhlunga ebonakala ifana kusithombe-skrini. Amanye awasebenzisi lutho walokho, futhi i-attribute iyabhalwa bese inganakwa. Funda imibhalo yemodi yokufinyelela kude oyivule ngempela, hhayi leyo esesithombeni-skrini.

Funda impendulo eyathunyelwa yiseva ngempela

Qinisekisa okwabuyiswa i-RADIUS esikhundleni salokho okuboniswa umhleli wenqubomgomo. Isicelo sokuhlola esinegama lomsebenzisi elifanayo nephasiwedi eyaziwayo siphrinta ama-attribute empendulo ngendlela efundekayo, futhi lokho kuxazulula umbuzo esinyathelweni esisodwa.

radtest alice secret 10.0.0.10 0 testing123

Uma ama-attribute e-VLAN engekho kuleyo mpendulo, lungisa kuqala ukufana kwenqubomgomo. Uma ekhona, iseva yenze ingxenye yayo, futhi igebe lisezansi.

Qinisekisa kuqala inqubomgomo yeseshini, bese ukufinyeleleka

Manje bheka iseshini eyakhiwe igateway. Uhlu lwamaseshini asebenzayo lubonisa ichibi, ikheli elabiwe nanoma iyiphi inqubomgomo yeqembu eligaxwe igateway, futhi lokho kuphela ubufakazi obubalulekile ekuqinisekiseni ukusetshenziswa. Qhathanisa nalokho umsebenzisi angakufinyelela, hhayi nalokho okwakuhlosiwe inqubomgomo.

swanctl --list-sas

Bese uhlola kuklayenti isithombo esisodwa esivunyelwe nesinye esenqatshiwe, ngoba ikheli elivela echibini elifanele alifakazisi ukwahlukaniswa. Uma igateway ingenayo indlela yokwabiwa okufunayo, amakhophi engeziwe e-attribute ngeke akudale. Ikheli elivela echibini elilindelekile lingaba khona kanye nokufinyelela okugcwele kuwo wonke amanye amachibi. Khetha indlela yenqubomgomo esekelwayo noma ushintshe umklamo wenethiwekhi ngamabomu.

Izihloko ezihlobene