vpncli -s ngokumelene ne-GUI: ukungena ku-Cisco Secure Client

I-Cisco Secure Client ikunikeza izindlela ezimbili zokuphendula imibuzo yokungena efanayo: umuntu othayipha ku-vpnui.exe, noma iskripthi esithumela izimpendulo ku-vpncli.exe ngokufaka okujwayelekile nge--s. Eyesibili yenza kube nokwenzeka ukuxhumana okuhleliwe ngaphandle kokufunda isikrini se-GUI, futhi iguqula ukungena kube yifayela okufanele livikelwe njengobufakazi. Ukuthi yikuphi okufunayo kuncike ekutheni kukhona yini umuntu emshinini nokuthi iphasiwedi ishintsha kangaki. Akukho kukhetha okushintsha lokho okukufunayo isango, kushintsha kuphela ukuthi ubani ophendulayo.

Zombili izindlela ziphelela emhubeni ofanayo, ngakho ukuqhathanisa kumayelana nokusebenza, hhayi iphrothokholi.

Izindlela ezimbili zokuphendula imibuzo efanayo

Indlela ye-GUI iyasebenzisana ngokwakhiwa kwayo: iklayenti liyabuza, othile uyaphendula, futhi iseshini ihlala ikhona inqobo nje uma lowo muntu eyeka. Lesi yisinqumo esifanele kukhompyutha ephathwayo esetshenziswa umuntu, ngoba imibuzo ijwayelana nendlela yokuqinisekisa yesango futhi akekho okufanele agcine iphasiwedi embhalweni ocacile kudiski.

Indlela yeskripthi ifanele i-kiosk, umshini welabhorethri noma umsebenzi ohleliwe lapho kungekho muntu ozothayipha. Ukushintshana kucacile: wamukela ifayela lobufakazi kudiski ukuze uthole ukuxhumana okungagadiwe. Uma isango linikeza ukuqinisekisa ngesitifiketi noma nge-SAML, lokho kushintshana ngokuvamile akuzuzisi, ngoba ifayela likhona kuphela ukuze liphendule imibuzo indlela eqinile engayigwema.

Ungahlanganisi kokubili emshinini owodwa ngesikhathi esisodwa. Umugqa womyalo neklayenti lesithombe bancintisana ngesimo seseshini esifanayo, futhi leyo yinkinga yesigaba esilandelayo.

Ifayela lezimpendulo kufanele libe nani

Iklayenti libuza ngokulandelana — isango, kwesinye isikhathi ukukhetha iqembu, igama lomsebenzisi, iphasiwedi nanoma yikuphi ukuqinisekisa kwebhana. Ifayela eliphendula konke lokho libukeka kanje, kufakwe amanani angempela:

connect vpn.example.com
MyGroup
alice
correct-horse-battery
y

Indlela ethembekile yokwakha lelo fayela iwukuxhumanisa kanye ngesandla, ubhale phansi wonke umugqa oyithayiphayo nakho konke ukucindezela kwe-Enter, bese uphinda leyo ndlela ngqo. Ukusetshenziswa okugcina iqembu negama lomsebenzisi kuphrofayela kungase kudinga imigqa engenalutho lapho leyo mibuzo ingasabonakali khona, futhi umugqa wokugcina usadinga umugqa wawo omusha. Ifayela eliswele umugqa owodwa ngokuvamile liyakhangwa embuzweni wokugcina esikhundleni sokwehluleka ngephutha elicacile, futhi yingakho inethiwekhi isolwa. Qhathanisa ifayela nombhalo wakho kabili, kanye ngokulandelana futhi kanye ngemigqa engenalutho.

Gcina ifayela ngaphandle kwanoma yisiphi isiqephu esivumelanisiwe futhi lifundwe kuphela yi-akhawunti esebenzisa umsebenzi. Leyo phasiwedi ingumbhalo ocacile, ngakho ifayela lingubufakazi: akukho isitoreji, akukho idiski eyabiwe, akukho okunamathiselwe kuthikithi. Iklayenti ngeke likuxwayise ngakukodwa kwalokhu.

Kungani i-GUI kufanele ihambe kuqala

Qala iskripthi ngokuqeda inqubo ye-GUI, bese usebenzisa i-CLI kusukela kusiqephu sayo sokufaka, ngoba kokubili isiqephu sokusebenza nomklamo weklayenti kubalulekile. Isembozo esiyisibonelo:

@echo off
taskkill /IM vpnui.exe /F >nul 2>&1
cd /d "%PROGRAMFILES(x86)%\Cisco\Cisco Secure Client"
vpncli.exe -s < C:\secure\login.txt

Amakhodi okuphuma akuwona uphawu oluthembekile lwempumelelo lapha. Iklayenti liprinta inqubekela phambili yalo futhi ligcina umhubhe kunqubo ehlukile, ngakho funda okukhiphayo ukuthola umugqa wesimo sokuxhumana bese uqala umsebenzi oncike kwi-VPN.

Uma weqa ukubulala i-GUI, iskripthi singase sibonakale sisebenza kuyilapho iseshini ekhona ihlala esimweni umsebenzisi eyishiya kuso. Lokho kwehluleka kubonakala kuyisikhathi ngesikhathi, futhi yilolo hlobo lwephutha eliphila isonto lokucabanga.

Qinisekisa iseshini, ungayicabangi

Ngemva kokuba iskripthi sibuya, hlola into ekhona kuphela ngaphakathi komhubhe — umsingathi wangaphakathi, noma isijobelelo se-DNS esiphendulwa kuphela isixazululi senhlangano. Funda nomugqa wesimo sokuxhumana kokukhiphayo kweklayenti, futhi uthatha noma yini enye njengokwehluleka hhayi impumelelo ehamba kancane. Ukuphinda usebenzise ifayela lapho iseshini isivele ivuliwe kungase kushiye iklayenti lihleliwe ngohhafu, ngakho noma qala uxhume phansi noma weqe ukungena lapho iseshini ikhona.

Bese unquma ukuthi ubani onomthwalo wokuxhuma kabusha. Umjikelezo opinga ikheli langaphakathi bese uphinda usebenzise ukungena ungagcina i-kiosk iku-inthanethi izinyanga, futhi ungakwazi ukuvala i-akhawunti lapho iphasiwedi ishintsha okokuqala. Khawulela inani lemizamo, xwayisa lapho kweqiwe, futhi vumela ithimba lobuwena lishintshe ifayela esikhundleni sokushiya iphasiwedi endala izama kuze kuvalwe.

I-vpnclient.exe endala ayilona ithuluzi elifanayo

Ukwenziwa kwangokuzenzakalela kufanayo kuvela ngaphansi kwegama elidala, futhi kokubili akushintshisani. Iklayenti le-Cisco IPsec eliyekisiwe lalisebenzisa i-vpnclient.exe nemibhalo engaphakathi komugqa njengesenzo se-connect, igama lephrofayela, umsebenzisi nephasiwedi emugqeni owodwa womyalo; kuyilapho i-vpncli.exe ilindele ukulandelana kwemibuzo kokufakwayo okujwayelekile ne--s. Ngakho ukukopisha iskripthi sendlu yokuxoxa endala emshinini wanamuhla kwenza umyalo osebenzayo, ongenzi lutho olubonakalayo, futhi isango lisolwa.

Ngaphambi kokuhlela noma yimuphi umbhalo, hlola ukuthi yiliphi iklayenti elifakiwe nokuthi iskripthi sibiza liphi ngempela. Umehluko wegama mncane ngokwanele ukuthi weqiwe emsebenzini ohleliwe, futhi yinto yokuqala okufanele iqinisekiswe lapho iskripthi esizuzwe njengefa siyeka ukusebenza ngemva kokuthuthukiswa.