Kev Tswj Xyuas Kev Tswj Xyuas

Siv cov Controller Interface

Koj tuaj yeem siv tus maub los interface hauv ob txoj hauv qab no:

Siv lub Controller GUI

Ib qhov browser-based GUI yog tsim rau hauv txhua tus maub los.
Nws tso cai rau mus txog tsib tus neeg siv ib txhij mus rau hauv tus maub los HTTP lossis HTTPS (HTTP + SSL) cov nplooj ntawv tswj kev teeb tsa thiab saib xyuas cov xwm txheej ua haujlwm rau tus maub los thiab nws cov ntsiab lus nkag.
Rau cov lus piav qhia ntxaws ntxaws ntawm tus maub los GUI, saib Kev Pab Hauv Online. Txhawm rau nkag mus rau kev pab online, nyem Pab ntawm tus tswj GUI.

Nco tseg
Peb pom zoo kom koj qhib HTTPS interface thiab lov tes taw HTTP interface kom muaj kev ruaj ntseg zoo dua.

Tus maub los GUI tau txais kev txhawb nqa hauv qab no web browsers:

• Microsoft Internet Explorer 11 lossis tom qab version (Windows)
• Mozilla Firefox, Version 32 lossis tom qab version (Windows, Mac)
• Apple Safari, Version 7 lossis tom qab version (Mac)

Nco tseg
Peb pom zoo kom koj siv tus maub los GUI ntawm qhov browser loaded nrog webadmin daim ntawv pov thawj (daim ntawv pov thawj thib peb). Peb kuj pom zoo kom koj tsis txhob siv tus maub los GUI ntawm qhov browser uas muaj daim ntawv pov thawj tus kheej kos npe. Qee qhov teeb meem rendering tau pom hauv Google Chrome (73.0.3675.0 lossis tom qab version) nrog rau daim ntawv pov thawj tus kheej. Yog xav paub ntxiv, saib CSCvp80151.

Cov lus qhia thiab kev txwv ntawm kev siv Controller GUI
Ua raws li cov lus qhia no thaum siv tus maub los GUI:

• Rau view Lub Main Dashboard uas tau qhia hauv Tso Tawm 8.1.102.0, koj yuav tsum qhib JavaScript ntawm web browser.

Nco tseg
Xyuas kom meej tias lub vijtsam daws teeb meem tau teeb tsa rau 1280 × 800 lossis ntau dua. Kev daws teeb meem tsawg dua tsis txaus siab.

• Koj tuaj yeem siv ob qho kev pabcuam chaw nres nkoj lossis kev tswj hwm kev tswj hwm kom nkag mus rau GUI.
• Koj tuaj yeem siv ob qho tib si HTTP thiab HTTPS thaum siv qhov chaw nres nkoj kev pabcuam. HTTPS tau qhib los ntawm lub neej ntawd thiab HTTP tuaj yeem qhib tau.
• Nyem Pab nyob rau sab saum toj ntawm txhua nplooj ntawv hauv GUI kom nkag mus rau kev pab online. Tej zaum koj yuav tau lov tes taw koj browser's pop-up blocker rau view kev pab online.

Nkag mus rau GUI

Nco tseg
Tsis txhob teeb tsa TACACS + authentication thaum tus maub los tau teeb tsa los siv qhov kev lees paub hauv zos.

Txheej txheem
Kauj ruam 1
Nkag mus rau tus maub los IP chaw nyob hauv koj tus browser qhov chaw nyob bar. Rau kev sib txuas ruaj ntseg, nkag mus https://ip-address. Rau qhov kev sib txuas tsis ruaj ntseg, nkag mus https://ip-address.

Kauj ruam 2
Thaum qhov tshwm sim, sau tus username thiab password siv tau, thiab nyem OK.
Cov Cov ntsiab lus nplooj nthuav tawm.
Nco tseg Tus thawj tswj username thiab password uas koj tsim nyob rau hauv lub configuration wizard yog case sensitive.
Tshem tawm ntawm GUI
Txheej txheem

Kauj ruam 1
Nyem Logout nyob rau sab xis saum toj kawg ntawm nplooj.

Kauj ruam 2
Nyem Kaw kom ua tiav cov txheej txheem tawm thiab tiv thaiv cov neeg siv tsis tau tso cai los ntawm kev nkag mus rau tus tswj GUI.

Kauj ruam 3
Thaum nug kom paub meej tias koj qhov kev txiav txim siab, nyem Yog.

Siv cov Controller CLI
Cisco Wireless daws kev hais kom ua kab interface (CLI) yog tsim rau hauv txhua tus tswj. CLI tso cai rau koj siv VT-100 lub davhlau ya nyob twg emulation qhov kev pab cuam rau hauv zos los yog remotely configure, saib xyuas, thiab tswj tus kheej controllers thiab nws cuam tshuam lub teeb yuag cov ntsiab lus. CLI yog cov ntawv nyeem yooj yooj yim, cov qauv ntoo-tsim interface uas tso cai txog tsib tus neeg siv nrog Telnet-muaj peev xwm davhlau ya nyob twg emulation cov kev pab cuam nkag mus rau tus maub los.

Nco tseg
Peb pom zoo kom koj tsis txhob khiav ob txoj haujlwm CLI ib txhij vim qhov no yuav ua rau tus cwj pwm tsis raug lossis tsis raug ntawm CLI.

Nco tseg
Yog xav paub ntxiv txog cov lus txib tshwj xeeb, saib Cisco Wireless Controller Command Reference rau cov kev tshaj tawm uas cuam tshuam ntawm: https://www.cisco.com/c/en/us/support/wireless/wireless-lan-controller-software/products-command-reference-list.html

Nkag mus rau Controller CLI
Koj tuaj yeem nkag mus rau tus maub los CLI siv ob qho ntawm cov hauv qab no:

• Ib qho kev sib txuas ncaj qha mus rau tus maub los console chaw nres nkoj
• Kev sib tham nyob deb dhau ntawm lub network siv Telnet lossis SSH los ntawm qhov chaw nres nkoj kev pabcuam ua ntej lossis cov chaw xa khoom xa tawm

Yog xav paub ntxiv txog cov chaw nres nkoj thiab console kev xaiv kev sib txuas ntawm cov maub los, saib cov qauv tswj hwm cov qauv kev teeb tsa.

Siv lub Local Serial Connection
Ua ntej koj pib
Koj xav tau cov khoom no los txuas rau qhov chaw nres nkoj serial:

• Lub khoos phis tawj uas tab tom khiav lub davhlau ya nyob twg emulation program xws li Putty, SecureCRT, lossis zoo sib xws
• Tus qauv Cisco console serial cable nrog RJ45 connector

Txhawm rau nkag mus rau tus maub los CLI los ntawm qhov chaw nres nkoj serial, ua raws li cov kauj ruam no:
Txheej txheem

Kauj ruam 1
Txuas console cable; txuas ib kawg ntawm tus qauv Cisco console serial cable nrog RJ45 connector rau tus maub los lub console chaw nres nkoj thiab lwm kawg rau koj lub PC qhov chaw nres nkoj.

Kauj ruam 2
Configure davhlau ya nyob twg emulator qhov kev pab cuam nrog default settings:

• 9600 ib
• 8 ib data
• 1 nres bit
• Tsis muaj parity
• Tsis muaj hardware flow control

Nco tseg
Tus maub los serial chaw nres nkoj yog teem rau 9600 baud tus nqi thiab lub sijhawm luv luv. Yog tias koj xav hloov ib qho ntawm cov txiaj ntsig no, khiav lub config serial baudrate tus nqi thiab config serial timeout tus nqi los ua koj cov kev hloov. Yog tias koj teeb tsa tus nqi serial timeout rau 0, serial sessions yeej tsis muaj sijhawm. Yog tias koj hloov lub console ceev mus rau tus nqi uas tsis yog 9600, lub console ceev siv los ntawm cov maub los yuav yog 9600 thaum lub caij khau raj thiab tsuas yog hloov thaum ua tiav cov txheej txheem khau raj. Yog li ntawd, peb xav kom koj tsis txhob hloov lub console ceev, tsuas yog raws li ib ntus ntsuas raws li qhov xav tau.

Kauj ruam 3
Nkag mus rau CLI-Thaum raug ceeb toom, nkag mus rau tus neeg siv lub npe siv tau thiab lo lus zais nkag mus rau tus tswj hwm. Tus thawj tswj username thiab password uas koj tsim nyob rau hauv lub configuration wizard yog case sensitive. Nco ntsoov Tus neeg siv lub npe siv yog admin, thiab tus password qub yog admin. CLI qhia txog lub hauv paus theem system kom sai:
(Cisco Controller) >

Nco tseg
Lub kaw lus ceeb toom tuaj yeem yog ib txoj hlua alphanumeric txog 31 tus cim. Koj tuaj yeem hloov nws los ntawm kev nkag mus rau config prompt hais kom ua.

Siv qhov chaw deb Telnet lossis SSH txuas

Ua ntej koj pib
Koj xav tau cov khoom no los txuas rau tus tswj chaw taws teeb:

• Ib lub PC nrog kev sib txuas hauv network rau ob qho kev tswj hwm tus IP chaw nyob, chaw nres nkoj qhov chaw pabcuam, lossis yog tias kev tswj hwm tau qhib rau ntawm qhov chaw sib txuas ntawm tus maub los hauv nqe lus nug
• Tus IP chaw nyob ntawm tus maub los
• VT-100 davhlau ya nyob twg emulation program lossis DOS plhaub rau Telnet kev sib kho

Nco tseg
Los ntawm lub neej ntawd, cov tswj hwm thaiv Telnet ntu. Koj yuav tsum siv kev sib txuas hauv zos mus rau qhov chaw nres nkoj serial kom pab tau Telnet zaug.

Nco tseg
Lub aes-cbc ciphers tsis txaus siab rau ntawm tus maub los. Tus neeg siv SSH uas siv los nkag rau hauv tus maub los yuav tsum muaj qhov tsawg kawg nkaus uas tsis yog-aes-cbc cipher.

Txheej txheem
Kauj ruam 1
Xyuas kom tseeb tias koj qhov VT-100 davhlau ya nyob twg emulation program lossis DOS plhaub interface tau teeb tsa nrog cov kev txwv no:

• Ethernet chaw nyob
• Chaw nres nkoj 23

Kauj ruam 2
Siv tus tswj IP chaw nyob rau Telnet rau CLI.

Kauj ruam 3
Thaum tau txais kev tshoov siab, sau tus neeg siv lub npe siv tau thiab tus password kom nkag mus rau hauv tus maub los.

Nco tseg
Tus thawj tswj username thiab password uas koj tsim nyob rau hauv lub configuration wizard yog case sensitive. Nco ntsoov Tus neeg siv lub npe siv yog admin, thiab tus password qub yog admin.
Lub CLI qhia txog lub hauv paus theem system kom sai.

Nco tseg
Lub kaw lus ceeb toom tuaj yeem yog ib txoj hlua alphanumeric txog 31 tus cim. Koj tuaj yeem hloov nws los ntawm kev nkag mus rau config prompt hais kom ua.

Khiav tawm ntawm CLI
Thaum koj ua tiav siv CLI, mus rau theem hauv paus thiab nkag mus rau cov lus txib tawm. Koj raug ceeb toom kom txuag txhua qhov kev hloov pauv uas koj tau ua rau RAM tsis hloov pauv.

Nco tseg
CLI cia li kaw koj tawm yam tsis tau txuag kev hloov pauv tom qab 5 feeb ntawm kev tsis ua haujlwm. Koj tuaj yeem teeb tsa qhov tsis siv neeg tawm ntawm 0 (tsis txhob tawm mus) mus rau 160 feeb siv cov lus txib config serial timeout. Txhawm rau tiv thaiv SSH lossis Telnet ntu ntawm lub sijhawm, khiav lub sijhawm teem sijhawm 0 hais kom ua.

Nrhiav CLI

• Thaum koj nkag rau hauv CLI, koj nyob ntawm theem hauv paus. Los ntawm cov hauv paus ntsiab lus, koj tuaj yeem nkag mus rau ib qho kev hais kom ua tag nrho yam tsis tau ua ntej navigating rau qib hais kom raug.
• Yog tias koj nkag mus rau cov lus tseem ceeb saum toj kawg nkaus xws li config, debug, thiab lwm yam tsis muaj kev sib cav, koj raug coj mus rau lub submode ntawm lo lus tseem ceeb.
• Ctrl + Z los yog nkag mus tawm rov qab rau CLI kom mus rau lub neej ntawd lossis theem hauv paus.
• Thaum nkag mus rau CLI, nkag mus? kom pom cov kev xaiv ntxiv muaj rau ib qho kev hais kom ua ntawm qib tam sim no.
• Koj tuaj yeem nkag mus rau qhov chaw lossis tus yuam sij tab kom ua tiav cov ntsiab lus tam sim no yog tias tsis meej.
• Nkag mus rau kev pab ntawm qib hauv paus kom pom muaj cov kab lus hais kom kho cov kev xaiv.

Cov lus hauv qab no teev cov lus txib uas koj siv los taw qhia CLI thiab ua cov haujlwm sib xws.

Table 1: Cov lus txib rau CLI Kev Qhia thiab Kev Ua Haujlwm

txib	Kev ua
pab	Hauv paus theem, view system wide navigation commands
?	View cov lus txib muaj nyob rau theem tam sim no
lus txib?	View parameters rau ib qho kev hais kom ua
tawm	Txav mus rau ib theem
Ctrl + Z	Rov qab los ntawm txhua qib mus rau theem hauv paus
txuag config	Nyob rau hauv paus theem, txuag configuration hloov los ntawm active ua hauj lwm RAM mus rau nonvolatile RAM (NVRAM) ces lawv yuav khaws cia tom qab reboot.
rov pib dua qhov system	Nyob rau theem hauv paus, pib dua tus maub los yam tsis tau txiav tawm
logout	Sau koj tawm ntawm CLI

Ua kom tau Web thiab ruaj ntseg Web Hom

Tshooj lus no muab cov lus qhia txhawm rau txhawm rau txhawm rau faib qhov chaw nres nkoj raws li a web chaw nres nkoj (siv HTTP) los yog kev ruaj ntseg web chaw nres nkoj (siv HTTPS). Koj tuaj yeem tiv thaiv kev sib txuas lus nrog GUI los ntawm kev ua kom HTTPS. HTTPS tiv thaiv HTTP browser ntu los ntawm kev siv Secure Sockets Layer (SSL) raws tu qauv. Thaum koj qhib HTTPS, tus maub los tsim nws tus kheej hauv zos web tswj SSL daim ntawv pov thawj thiab cia li siv nws rau GUI. Koj kuj muaj qhov kev xaiv ntawm rub tawm daim ntawv pov thawj tsim tawm sab nraud.

Koj tuaj yeem tsim kho web thiab ruaj ntseg web hom siv tus maub los GUI lossis CLI.

Nco tseg
Vim muaj kev txwv hauv RFC-6797 rau HTTP Strict Transport Security (HSTS), thaum nkag mus rau tus maub los GUI siv tus tswj IP chaw nyob, HSTS tsis tau txais txiaj ntsig thiab ua tsis tiav los ntawm HTTP mus rau HTTPS raws tu qauv hauv qhov browser. Kev xa rov qab ua tsis tiav yog tias tus tswj hwm GUI yav dhau los tau nkag mus siv HTTPS raws tu qauv. Yog xav paub ntxiv, saib RFC-6797 daim ntawv.

Tshooj lus no muaj cov ntu nram qab no:

Ua kom tau Web thiab ruaj ntseg Web Hom (GUI)

Txheej txheem

Kauj ruam 1
Xaiv Kev tswj hwm> HTTP-HTTPS.
Cov HTTP-HTTPS Configuration nplooj nthuav tawm.

Kauj ruam 2
Kom pab web hom, uas tso cai rau cov neeg siv nkag mus rau tus maub los GUI siv "http://ip-address,”xaiv Pab tau los ntawm HTTP Access drop-down daim ntawv teev. Txwv tsis pub, xaiv Disabled. Tus nqi pib yog Neeg tsis taus. Web hom tsis yog kev sib txuas ruaj ntseg.

Kauj ruam 3
Txhawm rau kom ruaj ntseg web hom, uas tso cai rau cov neeg siv nkag mus rau tus maub los GUI siv "https://ip-address,”xaiv Pab tau los ntawm HTTPS Access drop-down daim ntawv teev. Txwv tsis pub, xaiv Neeg tsis taus. Tus nqi pib yog Enabled. ruaj ntseg web hom yog kev sib txuas ruaj ntseg.

Kauj ruam 4
Hauv Web Kev sib tham Sijhawm teb, sau tus nqi ntawm lub sij hawm, nyob rau hauv feeb, ua ntej lub web kev sib kho lub sij hawm tawm vim inactivity. Koj tuaj yeem sau tus nqi ntawm 10 thiab 160 feeb (nrog rau). Tus nqi pib yog 30 feeb.

Kauj ruam 5
Nyem Thov.

Kauj ruam 6
Yog tias koj qhib kev ruaj ntseg web hom hauv Kauj Ruam 3, tus maub los tsim ib lub zos web tswj SSL daim ntawv pov thawj thiab cia li siv nws rau GUI. Cov ntsiab lus ntawm daim ntawv pov thawj tam sim no tshwm nyob rau hauv nruab nrab ntawm lub HTTP-HTTPS Configuration nplooj.

Nco tseg
Yog tias xav tau, koj tuaj yeem rho tawm daim ntawv pov thawj tam sim no los ntawm txhaj Delete Certificate thiab kom tus maub los tsim ib daim ntawv pov thawj tshiab los ntawm txhaj Regenerate Certificate. Koj muaj kev xaiv siv server sab SSL daim ntawv pov thawj uas koj tuaj yeem rub tawm rau tus tswj hwm. Yog tias koj siv HTTPS, koj tuaj yeem siv SSC lossis MIC daim ntawv pov thawj.

Kauj ruam 7
Xaiv Controller > General qhib nplooj ntawv General.
Xaiv ib qho ntawm cov kev xaiv hauv qab no los ntawm cov Web Xim Lub Ntsiab Lus drop-down:

• Default-Configures lub neej ntawd web xim ntsiab lus rau tus maub los GUI.
• Liab – Configures tus web xim cov ntsiab lus raws li liab rau tus maub los GUI.

Kauj ruam 8
Nyem Thov.

Kauj ruam 9
Nyem Txuag Configuration.

Ua kom tau Web thiab ruaj ntseg Web Hom (CLI)
Txheej txheem

Kauj ruam 1
Qhib lossis kaw web hom los ntawm kev nkag mus rau cov lus txib no: config network webhom {pab | disable}
Cov lus txib no tso cai rau cov neeg siv nkag mus rau tus maub los GUI siv "http://ip-address” Tus nqi pib yog neeg xiam. Web hom tsis yog kev sib txuas ruaj ntseg.

Kauj ruam 2
Configure lub web xim ntsiab lus rau tus maub los GUI los ntawm kev nkag mus rau cov lus txib no: config network webxim {default | liab}
Lub ntsiab xim xim rau tus maub los GUI tau qhib. Koj tuaj yeem hloov cov qauv xim raws li xim liab siv qhov kev xaiv liab. Yog tias koj tab tom hloov cov ntsiab lus xim los ntawm tus maub los CLI, koj yuav tsum rov qab qhib lub maub los GUI screen siv koj cov kev hloov pauv.

Kauj ruam 3
Qhib los yog lov tes taw ruaj ntseg web hom los ntawm kev nkag mus rau cov lus txib no: config network ruaj ntsegweb {pab | disable}
Cov lus txib no tso cai rau cov neeg siv nkag mus rau tus maub los GUI siv "https://ip-address” Lub neej ntawd tus nqi yog enabled. ruaj ntseg web hom yog kev sib txuas ruaj ntseg.

Kauj ruam 4
Qhib los yog lov tes taw ruaj ntseg web hom nrog nce kev ruaj ntseg los ntawm kev nkag mus rau cov lus txib no: config network ruaj ntsegweb cipher-xaiv siab {pab | disable}
Cov lus txib no tso cai rau cov neeg siv nkag mus rau tus maub los GUI siv "https://ip-address”tab sis tsuas yog los ntawm browsers uas txhawb nqa 128-ntsis (lossis loj dua) ciphers. Nrog Tso Tawm 8.10, cov lus txib no yog, los ntawm lub neej ntawd, hauv lub xeev enabled. Thaum lub siab ciphers qhib, SHA1, SHA256, SHA384 cov yawm sij txuas ntxiv mus rau npe thiab TLSv1.0 yog neeg xiam. Qhov no siv tau rau webauth thiab webadmin tab sis tsis yog rau NMSP.

Kauj ruam 5
Pab lossis lov tes taw SSLv3 rau web kev tswj hwm los ntawm kev nkag mus rau cov lus txib no: config network ruaj ntsegweb sslv3 {pab | disable}

Kauj ruam 6
Pab kom 256 ntsis ciphers rau qhov kev sib tham SSH los ntawm kev nkag mus rau cov lus txib no: config network ssh cipher-xaiv siab {pab | disable}

Kauj ruam 7
[Optional] Disable telnet los ntawm kev nkag mus rau cov lus txib no: config network telnet{enable | disable}

Kauj ruam 8
Pab lossis lov tes taw nyiam rau RC4-SHA (Rivest Cipher 4-Secure Hash Algorithm) cipher suites (tshaj CBC cipher suites) rau web authentication thiab web kev tswj hwm los ntawm kev nkag mus rau cov lus txib no: config network ruaj ntsegweb cipher-xaiv rc4-nyiam {pab | disable}

Kauj ruam 9
Xyuas kom tseeb tias tus maub los tau tsim ib daim ntawv pov thawj los ntawm kev nkag mus rau cov lus txib no: qhia cov ntsiab lus ntawm daim ntawv pov thawj
Cov ntaub ntawv zoo ib yam li cov hauv qab no tshwm:
Web Administration Certificate…………….. Locally Generated
Web Authentication Certificate…………….. Locally Generated
Daim ntawv pov thawj compatibility hom: ……………. tawm

Kauj ruam 10
(Yeem) Tsim daim ntawv pov thawj tshiab los ntawm kev nkag mus rau cov lus txib no: config daim ntawv pov thawj tsim webadmin
Tom qab ob peb feeb, tus maub los xyuas tias daim ntawv pov thawj tau tsim tawm.

Kauj ruam 11
Txuag SSL daim ntawv pov thawj, qhov tseem ceeb, thiab ruaj ntseg web lo lus zais rau nonvolatile RAM (NVRAM) kom koj cov kev hloov pauv tau khaws cia thoob plaws reboots los ntawm kev nkag mus rau cov lus txib no: txuag config

Kauj ruam 12
Reboot tus maub los los ntawm kev nkag mus rau cov lus txib no: rov pib dua qhov system

Telnet thiab Secure Plhaub Sessions

Telnet yog tus txheej txheem network siv los muab kev nkag mus rau tus tswj hwm CLI. Secure Plhaub (SSH) yog ib tug ruaj ntseg version ntawm Telnet uas siv cov ntaub ntawv encryption thiab ib tug ruaj ntseg channel rau cov ntaub ntawv hloov lwm lub tsev. Koj tuaj yeem siv tus maub los GUI lossis CLI los teeb tsa Telnet thiab SSH ntu. Hauv Tso Tawm 8.10.130.0, Cisco Wave 2 APs txhawb nqa cov cipher suites hauv qab no:

• HMAC: hmac-sha2-256, hmac-sha2-512
• KEX: diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521
• Lub tswv yim tseem ceeb: ecdsa-sha2-nistp256, ssh-rsa
• Ciphers: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

Tshooj lus no muaj cov ntu nram qab no:

Cov lus qhia thiab kev txwv ntawm Telnet thiab Secure Plhaub Sessions

• Thaum tus maub los lub config paging yog neeg xiam oob qhab thiab cov neeg siv uas khiav OpenSSH_8.1p1 OpenSSL 1.1.1 tsev qiv ntawv txuas nrog tus maub los, koj tuaj yeem ntsib cov khoom tso tawm kom khov. Koj tuaj yeem nias txhua tus yuam sij kom unfreeze cov zaub. Peb pom zoo kom koj siv ib qho ntawm cov hauv qab no kom tsis txhob muaj qhov xwm txheej no: · Txuas siv ntau qhov sib txawv ntawm OpenSSH thiab Qhib SSL lub tsev qiv ntawv
• Siv Putty
• Siv Telnet
• Thaum lub cuab yeej Putty siv los ua tus neeg siv SSH los txuas rau tus maub los khiav versions 8.6 thiab saum toj no, koj tuaj yeem pom kev cuam tshuam los ntawm Putty thaum thov cov zis loj nrog cov neeg xiam oob qhab. Qhov no tau pom thaum tus maub los muaj ntau qhov kev teeb tsa thiab muaj kev suav ntau ntawm APs thiab cov neeg siv khoom, lossis hauv ob qho xwm txheej. Peb pom zoo kom koj siv lwm tus neeg siv SSH hauv cov xwm txheej zoo li no.
• Hauv Tso Tawm 8.6, cov tswj tau tsiv los ntawm OpenSSH mus rau libssh, thiab libssh tsis txhawb cov kev pauv pauv tseem ceeb (KEX) algorithms: ecdh-sha2-nistp384 thiab ecdh-sha2-nistp521. Tsuas yog ecdh-sha2-nistp256 txaus siab.
• Hauv Kev Tshaj Tawm 8.10.130.0 thiab tom qab tso tawm, cov tswj hwm tsis txhawb cov cuab yeej cuab yeej cuab tam, ciphers tsis muaj zog, MACs thiab KEXs.

Configuring Telnet thiab SSH Sessions (GUI)
Txheej txheem

Kauj ruam 1 Xaiv Tswj> Telnet-SSH qhib lub Telnet-SSH Configuration nplooj.
Kauj ruam 2 Hauv Idle Timeout (feeb) teb, nkag mus rau tus naj npawb ntawm feeb uas Telnet kev sib kho tau tso cai nyob twj ywm tsis ua haujlwm ua ntej raug txiav tawm. Lub sijhawm siv tau yog los ntawm 0 txog 160 feeb. Tus nqi ntawm 0 qhia tias tsis muaj sijhawm.
Kauj ruam 3 Los ntawm Cov Sijhawm ntau tshaj plaws daim ntawv teev npe poob, xaiv tus naj npawb ntawm Telnet ib txhij lossis SSH ntu tso cai. Qhov kev siv tau yog los ntawm 0 mus rau 5 ntu (nrog), thiab tus nqi pib yog 5 zaug. Tus nqi ntawm xoom qhia tias Telnet lossis SSH ntu tsis tso cai.
Kauj ruam 4 Txhawm rau kaw cov kev nkag mus tam sim no, xaiv Kev tswj hwm> Cov neeg siv Sessions thiab los ntawm CLI daim ntawv teev npe poob qis, xaiv Kaw.
Kauj ruam 5 Los ntawm Tso cai tshiab Telnet Sessions drop-down list, xaiv Yog lossis Tsis yog tso cai lossis tsis tso cai rau Telnet ntu tshiab ntawm tus maub los. Tus nqi pib yog No.
Kauj ruam 6 Los ntawm Tso cai tshiab SSH Sessions drop-down list, xaiv Yog los yog Tsis yog tso cai los yog tsis tso cai tshiab SSH kev sib ntsib ntawm tus tswj. Tus nqi pib yog Yog lawm.
Kauj ruam 7 Txuag koj lub configuration.

Yuav ua li cas ntxiv
Txhawm rau pom cov ntsiab lus ntawm Telnet configuration settings, xaiv Management> Summary. Nplooj ntawv Summary uas tau tshwm sim qhia tau hais tias muaj kev sib tham Telnet thiab SSH ntxiv.

Configuring Telnet thiab SSH Sessions (CLI)
Txheej txheem

Kauj ruam 1 
Tso cai lossis tsis tso cai rau Telnet ntu tshiab ntawm tus tswj hwm los ntawm kev nkag mus rau cov lus txib no: config network telnet {pab | disable}
Tus nqi pib yog neeg xiam.

Kauj ruam 2
Tso cai lossis tsis tso cai SSH ntu tshiab ntawm tus tswj hwm los ntawm kev nkag mus rau cov lus txib no: config network ssh {pab | disable}
Lub neej ntawd tus nqi yog enabled.

Nco tseg
Siv lub config network ssh cipher-xaiv siab {pab | disable } hais kom ua kom sha2 uas
yog txhawb nyob rau hauv maub los.

Kauj ruam 3
(Optional) Qhia cov naj npawb ntawm cov feeb uas Telnet kev sib kho tau tso cai kom nyob twj ywm ua ntej raug txiav tawm los ntawm kev nkag mus rau cov lus txib no: config sessions timeout timeout
Qhov kev siv tau rau lub sijhawm yog los ntawm 0 mus rau 160 feeb, thiab tus nqi pib yog 5 feeb. Tus nqi ntawm 0 qhia tias tsis muaj sijhawm.

Kauj ruam 4
(Yeem) Qhia kom meej tus naj npawb ntawm Telnet ib txhij lossis SSH ntu tso cai los ntawm kev nkag mus rau cov lus txib no: config sessions maxsessions session_num
Qhov siv tau ntau session_num yog los ntawm 0 txog 5, thiab tus nqi pib yog 5 zaug. Tus nqi ntawm xoom qhia tias Telnet lossis SSH ntu tsis tso cai.

Kauj ruam 5
Txuag koj cov kev hloov pauv los ntawm kev nkag mus rau cov lus txib no: txuag config

Kauj ruam 6
Koj tuaj yeem kaw tag nrho Telnet lossis SSH ntu los ntawm kev nkag mus rau cov lus txib no: config loginsession kaw {session-id | tag nrho}
Cov kev sib tham-id tuaj yeem raug coj los ntawm kev qhia nkag mus-session hais kom ua.

Tswj thiab saib xyuas tej thaj chaw deb Telnet thiab SSH Sessions
Txheej txheem

Kauj ruam 1
Saib Telnet thiab SSH configuration settings los ntawm kev nkag mus rau cov lus txib no: qhia cov ntsiab lus ntawm lub network

Cov ntaub ntawv zoo ib yam li cov hauv qab no yog tso tawm:
RF-Network Name ……………………….. TestNetwork1
Web Hom……………………………………… Pab kom ruaj ntseg
Web Mode ………………………………………
ruaj ntseg Web Hom Cipher-Option Siab ………. Disable
ruaj ntseg Web Hom Cipher-Option SSLv2……… Disable
Secure Plhaub (ssh) …………………….. Pab
Telnet ……………………………… Disable …

Kauj ruam 2
Saib Telnet kev teeb tsa kev teeb tsa los ntawm kev nkag mus rau cov lus txib no: qhia ntu
Cov ntaub ntawv zoo ib yam li cov hauv qab no yog tso tawm:
CLI Login Timeout (feeb)………… 5
Qhov ntau kawg ntawm CLI Sessions……. 5

Kauj ruam 3
Saib tag nrho Telnet ntu ntu los ntawm kev nkag mus rau cov lus txib no: qhia login-session
Cov ntaub ntawv zoo ib yam li cov hauv qab no yog tso tawm:

ID Tus Neeg Siv Lub Npe Kev Sib Txuas Los Ntawm Lub Sijhawm Sijhawm Sib Tham
——————————————————————————
00 admin EIA-232 00:00:00 00:19:04

Kauj ruam 4
Clear Telnet lossis SSH zaug los ntawm kev nkag mus rau cov lus txib no: clear session session-id
Koj tuaj yeem txheeb xyuas qhov kev sib tham-id los ntawm kev siv cov yeeb yam login-session lus txib.

Configuring Telnet Privileges for Selected Management Users (GUI)
Siv tus maub los, koj tuaj yeem teeb tsa Telnet cov cai rau cov neeg siv tswj xaiv. Txhawm rau ua qhov no, koj yuav tsum tau qhib Telnet cov cai hauv ntiaj teb. Los ntawm lub neej ntawd, txhua tus neeg siv kev tswj hwm muaj cov cai Telnet qhib.

Nco tseg
SSH ntu tsis cuam tshuam los ntawm qhov tshwj xeeb no.

Txheej txheem

Kauj ruam 1 Xaiv Kev tswj hwm> Cov neeg siv tswj hauv zos.
Kauj ruam 2 Nyob ntawm Local Management Users page, check lossis uncheck lub Telnet Muaj peev xwm kos lub thawv rau tus neeg siv tswj.
Kauj ruam 3 Txuag lub configuration.

Configuring Telnet Privileges for Selected Management Users (CLI)
Txheej txheem

• Configure Telnet cov cai rau tus neeg siv tswj hwm xaiv los ntawm kev nkag mus rau cov lus txib no: config mgmtuser telnet user-name {pab | disable}

Management ntawm Wireless

Kev tswj hwm ntawm wireless feature tso cai rau koj los saib xyuas thiab teeb tsa cov tswj hwm hauv zos siv tus neeg siv wireless. Cov yam ntxwv no tau txais kev txhawb nqa rau txhua txoj haujlwm tswj hwm tshwj tsis yog uploads rau thiab rub tawm los ntawm (hloov mus rau thiab los ntawm) tus tswj hwm. Qhov no feature thaiv wireless tswj kev nkag mus rau tib lub maub los uas tus neeg siv khoom siv wireless tam sim no cuam tshuam nrog. Nws tsis tiv thaiv kev nkag mus rau tus neeg siv khoom wireless cuam tshuam nrog lwm tus tswj hwm nkaus xwb. Txhawm rau tiv thaiv kev tswj hwm kev nkag mus rau cov neeg siv wireless raws li VLAN thiab lwm yam, peb xav kom koj siv cov npe tswj hwm (ACLs) lossis cov txheej txheem zoo sib xws.

Kev txwv ntawm kev tswj hwm wireless

• Kev tswj hwm wireless tuaj yeem cuam tshuam tsuas yog tias cov neeg siv khoom nyob hauv nruab nrab ntawm kev hloov pauv.
• Kev tswj hwm wireless tsis muaj kev txhawb nqa rau FlexConnect cov neeg siv khoom hloov chaw. Txawm li cas los xij, Management tshaj Wireless ua haujlwm rau cov tsis-web authentication cov neeg siv yog tias koj muaj txoj hauv kev mus rau tus maub los ntawm FlexConnect site.

Tshooj lus no muaj cov ntu nram qab no:
Ua kom muaj kev tswj hwm ntawm Wireless (GUI)
Txheej txheem

Kauj ruam 1 Xaiv Management > Mgmt Ntawm Wireless los qhib lub Management ntawm Wireless nplooj.
Kauj ruam 2 Xyuas cov Ua kom Tswj Tswj Tswj kom nkag tau los ntawm Wireless Clients check lub thawv los pab tswj kev tswj hwm wireless rau WLAN lossis tshem tawm kom tsis txhob cuam tshuam qhov no. Los ntawm lub neej ntawd, nws nyob hauv lub xeev tsis taus.
Kauj ruam 3 Txuag lub configuration.

Ua kom muaj kev tswj hwm ntawm Wireless (CLI)
Txheej txheem

Kauj ruam 1
Txheeb xyuas seb qhov kev tswj hwm ntawm wireless interface puas tau qhib lossis xiam oob qhab los ntawm kev nkag mus rau cov lus txib no: qhia cov ntsiab lus ntawm lub network

• Yog tias xiam oob qhab: Pab tswj kev tswj hwm wireless los ntawm kev nkag mus rau cov lus txib no: config network mgmt-via-wireless enable
• Txwv tsis pub, siv tus neeg siv khoom siv wireless los koom nrog qhov chaw nkag mus txuas nrog tus tswj hwm uas koj xav tswj hwm.

Kauj ruam 2
Nkag mus rau hauv CLI kom paub tseeb tias koj tuaj yeem tswj hwm WLAN siv tus neeg siv wireless los ntawm kev nkag mus rau cov lus txib no: telnet wlc-ip-addr CLI-command

Kev Tswj Xyuas Kev Tswj Xyuas 13

Configuring Management siv Dynamic Interfaces (CLI)

Dynamic interface yog neeg xiam oob qhab los ntawm lub neej ntawd thiab tuaj yeem qhib tau yog tias xav tau los kuj siv tau rau feem ntau lossis tag nrho ntawm kev tswj hwm. Thaum enabled, tag nrho cov dynamic interfaces muaj rau kev tswj kev nkag mus rau cov maub los. Koj tuaj yeem siv cov npe tswj hwm (ACLs) txhawm rau txwv qhov kev nkag mus raws li qhov xav tau.

Txheej txheem

• Pab kom los yog lov tes taw kev tswj hwm siv dynamic interfaces los ntawm kev nkag mus rau cov lus txib no: config network mgmt-via-dynamic-interface {pab | disable}

Cov ntaub ntawv / Cov ntaub ntawv

CISCO Wireless Controller Configuration Guide [ua pdf] Cov neeg siv phau ntawv qhia Wireless Controller Configuration Guide, Controller Configuration Guide, Wireless Configuration Guide, Configuration Guide, Kev teeb tsa

Cov ntaub ntawv

• Cov neeg siv phau ntawv