Ulawulo loMlawuli

Ukusebenzisa i-Control Interface

Ungasebenzisa ujongano lomlawuli kwezi ndlela zimbini zilandelayo:

Ukusebenzisa i-GUI yoMlawuli

I-GUI esekwe kwisikhangeli yakhiwe kumlawuli ngamnye.
Ivumela abasebenzisi abahlanu ukuba bakhangele ngaxeshanye kumlawuli we-HTTP okanye i-HTTPS (HTTP + SSL) amaphepha okulawula ukuqwalasela iiparamitha kunye nokubeka iliso kwimo yokusebenza yomlawuli kunye neendawo zayo zokufikelela ezinxulumene nazo.
Ngeenkcazo ezineenkcukacha zomlawuli we-GUI, bona Uncedo lwe-Intanethi. Ukufikelela kuncedo lwe-intanethi, cofa uNcedo kwisilawuli se-GUI.

Phawula
Sincoma ukuba wenze ujongano lwe-HTTPS kwaye uvale ujongano lweHTTP ukuze uqinisekise ukhuseleko olomeleleyo.

Umlawuli we-GUI uxhaswa koku kulandelayo web izikhangeli:

• IMicrosoft Internet Explorer 11 okanye inguqulelo yamva (Windows)
• Mozilla Firefox, Version 32 okanye inguqulelo yamva (Windows, Mac)
• Apple Safari, Version 7 okanye inguqulelo yamva (Mac)

Phawula
Sicebisa ukuba usebenzise isilawuli se-GUI kwisikhangeli esilayishwe ngaso webisatifikethi solawulo (isiqinisekiso somntu wesithathu). Sikwacebisa ukuba ungasebenzisi isilawuli se-GUI kwisikhangeli esifakwe isatifikethi esizisayinileyo. Eminye imiba yonikezelo iye yaqatshelwa kwiGoogle Chrome (73.0.3675.0 okanye inguqulelo yamva) enezatifikethi ezizisayinileyo. Ngolwazi oluthe vetshe, bona i-CSCvp80151.

Izikhokelo kunye nezithintelo ekusebenziseni isiLawuli GUI
Landela ezi zikhokelo xa usebenzisa isilawuli GUI:

• Ukuya view iDashboard Engundoqo eyaziswa kuKhupho 8.1.102.0, kufuneka uvule iJavaScript kwi web umkhangeli zincwadi.

Phawula
Qinisekisa ukuba isisombululo seskrini sisetelwe kwi-1280×800 okanye ngaphezulu. Izisombululo ezincinci azixhaswa.

• Ungasebenzisa nokuba ujongano lwezibuko lenkonzo okanye ujongano lolawulo ukufikelela kwi GUI.
• Ungasebenzisa zombini i-HTTP kunye ne-HTTPS xa usebenzisa i-interface ye-port yenkonzo. I-HTTPS yenziwe ngokungagqibekanga kwaye i-HTTP nayo inokuvulwa.
• Cofa uNcedo phezulu nakweliphi na iphepha kwi-GUI ukufikelela kuncedo lwe-intanethi. Kuya kufuneka uvale isithinteli se-pop-up kwisikhangeli sakho view uncedo lwe-intanethi.

Ngena kwi GUI

Phawula
Musa ukuqwalasela i-TACACS+ uqinisekiso xa umlawuli emiselwe ukusebenzisa uqinisekiso lwasekuhlaleni.

Inkqubo
Inyathelo loku-1
Ngenisa idilesi ye-IP yesilawuli kwibar yedilesi yesikhangeli sakho. Ngoqhagamshelwano olukhuselekileyo, ngenisa https://ip-address. Ngoqhagamshelwano olukhuseleke kancinci, ngenisa https://ip-address.

Inyathelo loku-2
Xa uyalelwa, ngenisa igama lomsebenzisi elisebenzayo kunye negama lokugqitha, kwaye ucofe u-Kulungile.
I Isishwankathelo iphepha liyaboniswa.
Phawula Igama lomsebenzisi lolawulo kunye negama lokugqitha olenzileyo kwiwizard yoqwalaselo zinovakalelo.
Ukuloga ngaphandle kwe-GUI
Inkqubo

Inyathelo loku-1
Cofa Phuma kwikona ephezulu ephepheni.

Inyathelo loku-2
Cofa uVala ukugqiba inkqubo yokuphuma kwaye uthintele abasebenzisi abangagunyaziswanga ukufikelela kumlawuli we-GUI.

Inyathelo loku-3
Xa ucelwa ukuba uqinisekise isigqibo sakho, cofa u-Ewe.

Ukusebenzisa uMlawuli weCLI
A Cisco Wireless isisombululo umyalelo-line interface (CLI) yakhelwe kumlawuli ngamnye. I-CLI ikuvumela ukuba usebenzise inkqubo yokulinganisa i-terminal ye-VT-100 ukumisela kwindawo okanye ukude, ukubeka iliso, nokulawula abalawuli ngabanye kunye neendawo zabo zofikelelo ezikhaphukhaphu ezinxulumeneyo. I-CLI yi-text-based elula, i-interface eyakhiwe ngemithi evumela ukuba abasebenzisi abahlanu abaneenkqubo zokulinganisa i-terminal ye-Telnet ukuba bafikelele kumlawuli.

Phawula
Sicebisa ukuba ungaqhubeki imisebenzi emibini ngaxeshanye ye-CLI kuba oku kunokubangela ukuziphatha okungalunganga okanye isiphumo esingalunganga se-CLI.

Phawula
Ngolwazi oluthe kratya malunga nemiyalelo ethile, bona iCisco Wireless Controller Command Reference kukhupho olufanelekileyo ku: https://www.cisco.com/c/en/us/support/wireless/wireless-lan-controller-software/products-command-reference-list.html

Ukungena kuMlawuli weCLI
Unokufikelela kumlawuli we-CLI usebenzisa naziphi na iindlela ezilandelayo:

• Uqhagamshelo oluthe ngqo kwi-console port yesilawuli
• Iseshini ekude phezu komsebenzi womnatha usebenzisa iTelnet okanye iSSH ngokusebenzisa izibuko lenkonzo esele iqwalaselwe okanye izibuko lenkqubo yonikezelo

Ngolwazi oluthe vetshe malunga namazibuko kunye neenketho zoqhagamshelo lwekhonsoli kubalawuli, bona isikhokelo sokuhlohla sesilawuli esifanelekileyo.

Ukusebenzisa uQhakamshelwano lothotho lweNdawo
Ngaphambi kokuba uqale
Udinga ezi zinto ukuze uqhagamshelane nothotho lwezibuko:

• Ikhompyuter esebenzisa inkqubo yokulinganisa yeterminal efana nePutty, SecureCRT, okanye efanayo
• Intambo ye-serial ye-Cisco console ene-RJ45 yokudibanisa

Ukuloga kumlawuli we-CLI ngokusebenzisa i-serial port, landela la manyathelo:
Inkqubo

Inyathelo loku-1
Qhagamshela intambo yeconsole; qhagamshela enye isiphelo sesiqhelo seCisco console intambo yesiriyali ene-RJ45 isinxibelelanisi kwi-console port yomlawuli kunye nesinye isiphelo kwi-serial port yePC yakho.

Inyathelo loku-2
Qwalasela inkqubo yokulinganisa isiphelo sendlela enemimiselo engagqibekanga:

• 9600 bade
• 8 amasuntswana edatha
• Yima kancinci
• Akukho mlinganiso
• Akukho lawulo lokuhamba kwehardware

Phawula
Isilawuli se-serial port simiselwe i-9600 yezinga le-baud kunye nexesha elifutshane lokuphuma. Ukuba ungathanda ukutshintsha nokuba yiyiphi kula maxabiso, sebenzisa ixabiso lothotho lwebhaudrate kwaye uqwalasele ixabiso lexesha lokuphuma kothotho ukwenza utshintsho lwakho. Ukuba umisela ixabiso lexesha lokuphuma kothotho ukuya ku-0, iiseshini zothotho azinakuphelelwa lixesha. Ukuba utshintsha isantya se-console kwixabiso elingaphandle kwe-9600, isantya se-console esisetyenziswe ngumlawuli siya kuba yi-9600 ngexesha lokuqalisa kwaye siya kutshintsha kuphela ekugqityweni kwenkqubo yokuqalisa. Ngoko ke, sincoma ukuba ungatshintshi isantya se-console, ngaphandle komlinganiselo wexeshana kwisiseko esifunekayo.

Inyathelo loku-3
Ngena kwi-CLI-Xa ucelwa, ngenisa igama lomsebenzisi elisebenzayo kunye negama lokugqitha ukuze ungene kumlawuli. Igama lomsebenzisi lolawulo kunye negama lokugqitha olenzileyo kwiwizard yoqwalaselo zinovakalelo. Qaphela Igama lomsebenzisi elihlala likhona ngumlawuli, kwaye igama eliyimfihlo elimiselweyo ngu admin. I-CLI ibonisa inqanaba lenkqubo yengcambu ngokukhawuleza:
(uMlawuli weCisco) >

Phawula
Umyalelo wenkqubo unokuba naluphi na umtya wealphanumeric ukuya kuthi ga kwi-31 yamagama. Ungayitshintsha ngokungenisa umyalelo we-config prompt.

Ukusebenzisa i-Remote Telnet okanye i-SSH Connection

Ngaphambi kokuba uqale
Udinga ezi zinto ukuze uqhagamshelane nomlawuli ukude:

• I-PC enoqhagamshelo lwenethiwekhi nokuba yidilesi ye-IP yolawulo, idilesi yenkonzo yezibuko, okanye ukuba ulawulo luvuliwe kujongano oluguquguqukayo lomlawuli ekuthethwa ngawo.
• Idilesi ye-IP yomlawuli
• Inkqubo yokulinganisa i-terminal ye-VT-100 okanye iqokobhe le-DOS leseshoni ye-Telnet

Phawula
Ngokungagqibekanga, abalawuli bavala iiseshini zeTelnet. Kufuneka usebenzise uqhagamshelo lwasekuhlaleni kwizibuko lothotho ukwenza iiseshoni zeTelnet zisebenze.

Phawula
I-aes-cbc ciphers ayixhaswanga kwisilawuli. Umxhasi we-SSH osetyenziswayo ukungena kumlawuli kufuneka abe nobuncinane be-non-aes-cbc cipher.

Inkqubo
Inyathelo loku-1
Qinisekisa ukuba inkqubo yakho yokulinganisa i-VT-100 okanye ujongano lweqokobhe le-DOS luqwalaselwe ngezi parameters:

• Idilesi ye-Ethernet
• Izibuko 23

Inyathelo loku-2
Sebenzisa idilesi ye-IP yomlawuli kwi-Telnet kwi-CLI.

Inyathelo loku-3
Xa uyalelwa, ngenisa igama lomsebenzisi elisebenzayo kunye negama lokugqitha ukuze ungene kumlawuli.

Phawula
Igama lomsebenzisi lolawulo kunye negama lokugqitha olenzileyo kwiwizard yoqwalaselo zinovakalelo. Qaphela Igama lomsebenzisi elihlala likhona ngumlawuli, kunye negama lokugqitha elihlala lihleli ngu admin.
I-CLI ibonisa inqanaba lenkqubo yengcambu ngokukhawuleza.

Phawula
Umyalelo wenkqubo unokuba naluphi na umtya wealphanumeric ukuya kuthi ga kwi-31 yamagama. Ungayitshintsha ngokungenisa umyalelo we-config prompt.

Ukuloga ngaphandle kwe-CLI
Xa ugqiba ukusebenzisa i-CLI, yiya kwinqanaba leengcambu kwaye ungenise umyalelo wokuphuma. Uyacelwa ukuba ugcine naluphi na utshintsho olwenzileyo kwi-RAM eguqukayo.

Phawula
I-CLI ikhuphela ngaphandle ngaphandle kokugcina naluphi na utshintsho emva kwemizuzu emi-5 yokungasebenzi. Ungaseta ukuphuma ngokuzenzekelayo ukusuka ku-0 (ungaze uphume) ukuya kwimizuzu eyi-160 usebenzisa uthotho lomyalelo wokuphuma kwexesha. Ukuthintela i-SSH okanye iiseshini zeTelnet ekuphelisweni kwexesha, sebenzisa iiseshini zoqwalaselo ixesha lokuphuma 0 umyalelo.

Ukukhangela i-CLI

• Xa ungena kwi-CLI, ukwinqanaba leengcambu. Ukusuka kwinqanaba lengcambu, ungangenisa nawuphi na umyalelo opheleleyo ngaphandle kokuqala ukuya kwinqanaba elichanekileyo lomyalelo.
• Ukuba ufaka igama elingundoqo lezinga eliphezulu elifana ne-config, debug, njalo njalo ngaphandle kweengxabano, uthathwa kwi-submode yelo gama elingundoqo elihambelanayo.
• U-Ctrl + Z okanye ungeniso lokungena lubuyisela i-CLI yokwazisa kokungagqibekanga okanye kwinqanaba lengcambu.
• Xa usiya kwi-CLI, ngenisa? ukubona iinketho ezongezelelweyo ezikhoyo kuwo nawuphi na umyalelo onikiweyo kwinqanaba langoku.
• Unako kwakhona ukungena isithuba okanye iqhosha lethebhu ukugqiba igama elingundoqo langoku ukuba alicacanga.
• Ngenisa uncedo kwinqanaba lengcambu ukuze ubone iinketho zokuhlela zomgca womyalelo.

Le theyibhile ilandelayo idwelisa imiyalelo oyisebenzisayo ukujonga i-CLI kunye nokwenza imisebenzi eqhelekileyo.

Itheyibhile 1: Imiyalelo ye-CLI yokuHamba kunye neMisebenzi eqhelekileyo

Umyalelo	Isenzo
Nceda	Kwinqanaba leengcambu, view imiyalelo yokukhangela ebanzi yenkqubo
?	View imiyalelo ekhoyo kwinqanaba langoku
umyalelo ?	View iparameters zomyalelo othile
Phuma	Yehla inqanaba elinye
Ctrl + Z	Buyela kuyo nayiphi na inqanaba ukuya kwinqanaba leengcambu
gcina uqwalaselo	Kwinqanaba lengcambu, gcina utshintsho loqwalaselo ukusuka kwi-RAM esebenzayo ukuya kwi-RAM engaguqukiyo (NVRAM) ukuze zigcinwe emva kokuqalisa kwakhona
phinda usete inkqubo	Kwinqanaba leengcambu, setha kwakhona isilawuli ngaphandle kokuphuma ngaphandle
phuma	Ukhupha kwi-CLI

Iyanika amandla Web kwaye Khusela Web Iindlela

Eli candelo libonelela ngemiyalelo ukwenza izibuko lenkqubo yonikezelo njenge web izibuko (usebenzisa i-HTTP) okanye njengokhuseleko web izibuko (usebenzisa i-HTTPS). Unokukhusela unxibelelwano kunye ne-GUI ngokwenza i-HTTPS. I-HTTPS ikhusela iiseshini zebhrawuza yeHTTP ngokusebenzisa iprotocol yeSecure Sockets Layer (SSL). Xa uvula i-HTTPS, umlawuli uvelisa eyakhe indawo web isiqinisekiso solawulo se-SSL kwaye sisisebenzisa ngokuzenzekelayo kwi-GUI. Ukwanalo nokhetho lokukhuphela isatifikethi esenziwe ngaphandle.

Ungaqwalasela web kwaye ikhuselekile web indlela usebenzisa isilawuli GUI okanye CLI.

Phawula
Ngenxa yomda kwi-RFC-6797 yoKhuseleko lwezoThutho oluQhelekileyo lwe-HTTP (HSTS), xa ufikelela kwi-GUI yomlawuli usebenzisa idilesi ye-IP yolawulo, i-HSTS ayihlonitshwa kwaye ayiphumelelanga ukuqondisa kwakhona kwi-HTTP ukuya kwi-HTTPS protocol kwisiphequluli. Ukwalathisa kwakhona kuyasilela ukuba i-GUI yomlawuli ibifikelelwe ngaphambili kusetyenziswa iprotocol yeHTTPS. Ngolwazi oluthe vetshe, bona i-RFC-6797 uxwebhu.

Eli candelo liqulathe la macandelwana alandelayo:

Iyanika amandla Web kwaye Khusela Web Iindlela (GUI)

Inkqubo

Inyathelo loku-1
Khetha Ulawulo > HTTP-HTTPS.
I Uqwalaselo lweHTTP-HTTPS iphepha liyaboniswa.

Inyathelo loku-2
Ukuvumela web indlela, evumela abasebenzisi ukuba bafikelele kumlawuli we-GUI usebenzisa "http://ip-address,” khetha Ivuliwe isuka e Ufikelelo lweHTTP uluhlu oluhlayo. Kungenjalo, khetha kwaKhubaziwe. Ixabiso elimiselweyo ngu Kukhubazekile. Web Imowudi ayilunxibelelwano olukhuselekileyo.

Inyathelo loku-3
Ukwenza ukhuseleko web indlela, evumela abasebenzisi ukuba bafikelele kumlawuli we-GUI usebenzisa "https://ip-address,” khetha Ivuliwe isuka e Ukufikelela kwi-HTTPS uluhlu oluhlayo. Kungenjalo, khetha Kukhubazekile. Ixabiso elimiselweyo Linikwe amandla. Khusela web Imowudi luqhagamshelwano olukhuselekileyo.

Inyathelo loku-4
Kwi Web Iseshoni Kuphele ixesha Indawo, ngenisa inani lexesha, kwimizuzu, phambi kwe web ixesha leseshoni liphelile ngenxa yokungasebenzi. Ungangenisa ixabiso phakathi kwe-10 kunye ne-160 imizuzu (ibandakanyiwe). Ixabiso elimiselweyo yimizuzu engama-30.

Inyathelo loku-5
Cofa Faka isicelo.

Inyathelo loku-6
Ukuba wenze ukhuseleko web indlela kwiNyathelo 3, umlawuli uvelisa indawo yendawo web isiqinisekiso solawulo se-SSL kwaye sisisebenzisa ngokuzenzekelayo kwi-GUI. Iinkcukacha zesatifikethi sangoku zivela embindini we Uqwalaselo lweHTTP-HTTPS iphepha.

Phawula
Ukuba uyanqwena, ungasicima isatifikethi sangoku ngokucofa Cima isatifikethi kwaye ube nomlawuli enze isatifikethi esitsha ngokucofa uHlaziyo kwakhona isatifikethi. Unokukhetha ukusebenzisa isiqinisekiso se-SSL secala lomncedisi onokuthi ukhuphele kumlawuli. Ukuba usebenzisa i-HTTPS, ungasebenzisa i-SSC okanye izatifikethi ze-MIC.

Inyathelo loku-7
Khetha Umlawuli > Ngokubanzi ukuvula iphepha ngokubanzi.
Khetha enye yezi ndlela zilandelayo kwi Web Uluhlu lokuhla loMxholo woMbala:

• Okuhlala kukho-Ubumbeko ukungagqibeki web umxholo wombala womlawuli we-GUI.
• Ebomvu-Ubumbeko i web umbala umxholo njengobomvu kumlawuli GUI.

Inyathelo loku-8
Cofa Faka isicelo.

Inyathelo loku-9
Cofa Gcina Uqwalaselo.

Iyanika amandla Web kwaye Khusela Web Iindlela (CLI)
Inkqubo

Inyathelo loku-1
Yenza okanye uvale web indlela ngokungenisa lo myalelo: config network webimowudi {vula | khubaza}
Lo myalelo uvumela abasebenzisi ukufikelela kumlawuli we-GUI usebenzisa "http://ip-address.” Ixabiso elimiselweyo livaliwe. Web Imowudi ayilunxibelelwano olukhuselekileyo.

Inyathelo loku-2
Qwalasela i web Umxholo wombala womlawuli we-GUI ngokungenisa lo myalelo: config network webumbala {okungagqibekanga | bomvu}
Umxholo wombala omiselweyo womlawuli we-GUI uvuliwe. Ungatshintsha udweliso lombala olungagqibekanga njengobomvu usebenzisa ukhetho olubomvu. Ukuba utshintsha umxholo wombala ukusuka kumlawuli we-CLI, kufuneka uphinde ulayishe isikrini se-GUI yesilawuli ukuze usebenzise utshintsho lwakho.

Inyathelo loku-3
Yenza okanye khubaza ukhuseleko web indlela ngokungenisa lo myalelo: cwangcisa ukhuseleko lwenethiwekhiweb {vula | khubaza}
Lo myalelo uvumela abasebenzisi ukufikelela kumlawuli we-GUI usebenzisa "https://ip-address.” Ixabiso elimiselweyo lenziwe lasebenza. Khusela web Imowudi luqhagamshelwano olukhuselekileyo.

Inyathelo loku-4
Yenza okanye khubaza ukhuseleko web Imowudi enokhuseleko olongeziweyo ngokungenisa lo myalelo: cwangcisa ukhuseleko lwenethiwekhiweb i-cipher-option ephezulu {vula | khubaza}
Lo myalelo uvumela abasebenzisi ukufikelela kumlawuli we-GUI usebenzisa "https://ip-address” kodwa ezisuka kwizikhangeli ezixhasa i-128-bit (okanye enkulu) ii-ciphers. NgoKhupho lwe-8.10, lo myalelo, ngokungagqibekanga, ukwimo enikwe amandla. Xa ii-ciphers eziphezulu zenziwe zasebenza, i-SHA1, SHA256, SHA384 izitshixo ziyaqhubeka ukudweliswa kwaye i-TLSv1.0 iye yacinywa. Oku kusebenza kwi webubunyani kunye webadmin kodwa hayi eye-NMSP.

Inyathelo loku-5
Yenza okanye uvale i-SSLv3 ye web ulawulo ngokungenisa lo myalelo: cwangcisa ukhuseleko lwenethiwekhiweb sslv3 {vula | khubaza}

Inyathelo loku-6
Nika amandla i-256 bit ciphers kwiseshoni ye-SSH ngokungenisa lo myalelo: config network ssh cipher-option phezulu {vula | khubaza}

Inyathelo loku-7
[Ngokhetho] Khubaza i-telnet ngokungenisa lo myalelo: config network telnet{vula | khubaza}

Inyathelo loku-8
Yenza okanye uvale ukhetho lwe-RC4-SHA (i-Rivest Cipher 4-Secure Hash Algorithm) ii-cipher suites (ngaphaya kwe-CBC cipher suites) ukwenzela web uqinisekiso kunye web ulawulo ngokungenisa lo myalelo: cwangcisa ukhuseleko lwenethiwekhiweb i-cipher-option rc4-ekhethwayo {vula | khubaza}

Inyathelo loku-9
Qinisekisa ukuba umlawuli wenze isatifikethi ngokungenisa lo myalelo: bonisa isishwankathelo sesatifikethi
Ulwazi olufana nolu lulandelayo luvela:
Web Isatifikethi soLawulo……………….. Senziwe ekuhlaleni
Web Isatifikethi soQinisekiso…………….. Senziwe ekuhlaleni
Imowudi yokuhambelana nesatifikethi:………………. icimile

Inyathelo loku-10
(Ngokhetho) Yenza isatifikethi esitsha ngokungenisa lo myalelo: ukuvelisa isatifikethi soqwalaselo webadmin
Emva kwemizuzwana embalwa, umlawuli uyaqinisekisa ukuba isatifikethi senziwe.

Inyathelo loku-11
Gcina isatifikethi se-SSL, isitshixo, kwaye ukhuselekile web igama lokugqitha kwi-RAM engaguqukiyo (i-NVRAM) ukuze utshintsho lwakho lugcinwe kwindawo yokuqala ngokungenisa lo myalelo: gcina uqwalaselo

Inyathelo loku-12
Qalisa kwakhona isilawuli ngokungenisa lo myalelo: phinda usete inkqubo

I-Telnet kunye neSeshini eziKhuselekileyo zeShell

I-Telnet yinkqubo yenethiwekhi esetyenziselwa ukunika ufikelelo kwi-CLI yomlawuli. I-Shell ekhuselekileyo (i-SSH) yinguqulelo ekhuselekileyo ye-Telnet esebenzisa ufihlo lwedatha kunye netshaneli ekhuselekileyo yokudluliselwa kwedatha. Ungasebenzisa umlawuli we-GUI okanye i-CLI ukuqwalasela iiseshini zeTelnet kunye ne-SSH. Ekukhutshweni kwe-8.10.130.0, iCisco Wave 2 APs ixhasa ezi suites ze-cipher zilandelayo:

• I-HMAC: hmac-sha2-256,hmac-sha2-512
• KEX: diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521
• Isitshixo somamkeli: ecdsa-sha2-nistp256, ssh-rsa
• I-Ciphers: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

Eli candelo liqulathe la macandelwana alandelayo:

Izikhokelo kunye nezithintelo kwiTelnet kunye noKhuseleko lweeSeshini zeShell

• Xa uqwalaselo loqwalaselo lolawulo luvaliwe kwaye nabaxhasi abasebenzisa i-OpenSSH_8.1p1 OpenSSL 1.1.1 ithala leencwadi liqhagamshelwe kumlawuli, unokufumana imveliso yokukhenkceza. Ungacofa naliphi na iqhosha ukukhulula umboniso. Sicebisa ukuba usebenzise enye yezi ndlela zilandelayo ukunqanda le meko: · Qhagamshela usebenzisa uhlobo olwahlukileyo lwe-OpenSSH kwaye Vula ithala leencwadi le-SSL
• Sebenzisa uPutty
• Sebenzisa iTelnet
• Xa isixhobo sikaPutty sisetyenziswa njengomthengi we-SSH ukuqhagamshela kumlawuli osebenzisa iinguqulelo 8.6 nangaphezulu, unokubona uqhawulo lonxibelelwano olusuka kwiPutty xa imveliso enkulu iceliwe ngepheyiji ivaliwe. Oku kubonwa xa umlawuli enolungelelwaniso oluninzi kwaye unenani eliphezulu le-AP kunye nabaxhasi, okanye kuyo nayiphi na imeko. Sicebisa ukuba usebenzise ezinye iiklayenti ze-SSH kwiimeko ezinjalo.
• Ekukhutshweni kwe-8.6, abalawuli bafuduswa besuka kwi-OpenSSH ukuya kwi-libssh, kwaye i-libssh ayixhasi ezi zitshixo zotshintshiselwano (KEX): ecdh-sha2-nistp384 kunye ne-ecdh-sha2-nistp521. Kuphela yi-ecdh-sha2-nistp256 exhaswayo.
• Kukukhutshwa kwe-8.10.130.0 kunye nokukhutshwa kamva, abalawuli abasaxhasi i-legacy cipher suites, ii-ciphers ezibuthathaka, ii-MAC kunye nee-KEX.

Ukuqwalasela iTelnet kunye neeSeshini ze-SSH (GUI)
Inkqubo

Inyathelo loku-1 Khetha Ulawulo > Telnet-SSH ukuvula i Uqwalaselo lweTelnet-SSH iphepha.
Inyathelo loku-2 Kwi I-Idle Timeout(imizuzu) Indawo, ngenisa inani lemizuzu apho iseshoni yeTelnet ivunyelwe ukuba ihlale ingasebenzi phambi kokuba ipheliswe. Uluhlu olufanelekileyo lusuka kwi-0 ukuya kwi-160 imizuzu. Ixabiso lika-0 libonisa ukuba akukho xesha liphelileyo.
Inyathelo loku-3 Isuka e Elona nani liphezulu leeSeshini uluhlu oluhlayo, khetha inani leeseshoni zeTelnet okanye ze-SSH ezivumelekileyo. Uluhlu oluvumelekileyo luvela kwi-0 ukuya kwii-5 iiseshoni (ezibandakanya), kunye nexabiso elingagqibekanga ziiseshoni ezi-5. Ixabiso lika-zero libonisa ukuba iTelnet okanye iiseshoni ze-SSH azivunyelwanga.
Inyathelo loku-4 Ukuvala ngenkani iiseshini zokungena zangoku, khetha Ulawulo > Iiseshoni zabasebenzisi kwaye kuluhlu oluhlayo lweseshoni ye-CLI, khetha Vala.
Inyathelo loku-5 Isuka e Vumela Okutsha Uluhlu oluhlayo lweeSeshini zeTelnet, khetha Ewe okanye Hayi ukuvumela okanye ukungavumeli iiseshini ezintsha zeTelnet kwisilawuli. Ixabiso elimiselweyo nguNombolo.
Inyathelo loku-6 Isuka e Vumela Okutsha Iiseshoni ze-SSH uluhlu oluthotywayo, khetha Ewe okanye Hayi ukuvumela okanye ukungavumeli entsha I-SSH iiseshini kumlawuli. Ixabiso elimiselweyo ngu Ewe.
Inyathelo loku-7 Gcina ubumbeko lwakho.

Yintoni omawuyenze ngokulandelayo
Ukubona isishwankathelo soseto lolungelelwaniso lweTelnet, khetha Ulawulo > Isishwankathelo. Iphepha lesiShwankathelo eliboniswayo libonisa iiseshini ezongezelelweyo zeTelnet kunye ne-SSH zivumelekile.

Ukuqwalasela iTelnet kunye neeSeshini ze-SSH (CLI)
Inkqubo

Inyathelo loku-1 
Vumela okanye ungavumeli iiseshini ezintsha zeTelnet kumlawuli ngokungenisa lo myalelo: config network telnet {vula | khubaza}
Ixabiso elimiselweyo livaliwe.

Inyathelo loku-2
Vumela okanye ungavumeli iiseshoni ze-SSH ezintsha kumlawuli ngokungenisa lo myalelo: config network ssh {vula | khubaza}
Ixabiso elimiselweyo lenziwe lasebenza.

Phawula
Sebenzisa inethiwekhi yoqwalaselo ssh cipher-option ephezulu {vula | disable} umyalelo wokwenza i-sha2 isebenze
ixhaswa kumlawuli.

Inyathelo loku-3
(Ngokhetho) Cacisa inani lemizuzu apho iseshoni yeTelnet ivunyelwe ukuba ihlale ingasebenzi phambi kokuba inqunyanyiswe ngokufaka lo myalelo: config seshini ixesha lokuvala
Uluhlu olusebenzayo lwexesha lokuphuma lusuka kwi-0 ukuya kwi-160 imizuzu, kwaye ixabiso elimiselweyo yimizuzu emi-5. Ixabiso lika-0 libonisa ukuba akukho xesha liphelileyo.

Inyathelo loku-4
(Ngokhetho) Cacisa inani leeseshoni zeTelnet okanye ze-SSH ezivumelekileyo ngokungenisa lo myalelo: config sessions maxsessions session_num
Uluhlu olusebenzayo session_num lusuka ku-0 ukuya ku-5, kwaye ixabiso elingagqibekanga ziiseshoni ezi-5. Ixabiso lika-zero libonisa ukuba iTelnet okanye iiseshoni ze-SSH azivunyelwanga.

Inyathelo loku-5
Gcina utshintsho lwakho ngokungenisa lo myalelo: gcina uqwalaselo

Inyathelo loku-6
Ungavala zonke iiseshini zeTelnet okanye zeSSH ngokungenisa lo myalelo: config loginsession vala {session-id | zonke}
Iseshoni-id inokuthatyathwa kumboniso wokungeniswa-umyalelo weseshoni.

Ukulawula nokuBeka iliso kwiRemote Telnet kunye neeSeshini ze-SSH
Inkqubo

Inyathelo loku-1
Jonga iTelnet kunye neSSH useto loqwalaselo ngokungenisa lo myalelo: bonisa isishwankathelo sothungelwano

Ulwazi olufana nolu lulandelayo luyaboniswa:
Igama le-RF-Network………………………….. TestNetwork1
Web Imowudi…………………………………… Yenza uKhuseleko
Web Imowudi………………………….. Vulela
Khusela Web Imowudi yeCipher-Ukhetho Phezulu………. Khubaza
Khusela Web Imowudi yeCipher-Ukhetho SSLv2……… Khubaza
Khusela iShell (ssh)……………………….. Vulela
I-Telnet……………………………….. Khubaza …

Inyathelo loku-2
Bona useto lweseshini yeTelnet yoqwalaselo ngokungenisa lo myalelo: bonisa iiseshini
Ulwazi olufana nolu lulandelayo luyaboniswa:
Ixesha lokuNgena kwe-CLI (imizuzu)………… 5
Elona nani liphezulu leeSeshini ze-CLI……. 5

Inyathelo loku-3
Bona zonke iiseshoni zeTelnet ezisebenzayo ngokungenisa lo myalelo: bonisa iseshoni yokungena
Ulwazi olufana nolu lulandelayo luyaboniswa:

I-ID yegama lomsebenzisi uQhagamshelwano ukusuka kwi-Idle Time Session Time
————————————————————
00 admin EIA-232 00:00:00 00:19:04

Inyathelo loku-4
Cima iiseshini zeTelnet okanye ze-SSH ngokungenisa lo myalelo: iseshoni ecacileyo-id
Ungachonga iseshoni-id ngokusebenzisa umboniso Iseshini yokungena umyalelo.

Ukuqwalasela amalungelo eTelnet kubasebenzisi abakhethiweyo boLawulo (GUI)
Usebenzisa umlawuli, ungaqwalasela amalungelo eTelnet kubasebenzisi abakhethiweyo bolawulo. Ukwenza oku, kufuneka wenze amalungelo awodwa eTelnet kwinqanaba lehlabathi. Ngokungagqibekanga, bonke abasebenzisi bolawulo banamalungelo e-Telnet anikwe amandla.

Phawula
Iiseshoni ze-SSH azichatshazelwa luphawu.

Inkqubo

Inyathelo loku-1 Khetha Ulawulo > Abasebenzisi boLawulo lweNdawo.
Inyathelo loku-2 Kwi Iphepha labasebenzisi boLawulo lweNdawo, khangela okanye ungakhangeli i ITelnet iyakwazi khangela ibhokisi yomsebenzisi wolawulo.
Inyathelo loku-3 Gcina ubumbeko.

Ukuqwalasela amalungelo eTelnet kubasebenzisi abakhethiweyo boLawulo (CLI)
Inkqubo

• Qwalasela amalungelo eTelnet kumsebenzisi okhethiweyo wolawulo ngokungenisa lo myalelo: config mgmtuser telnet umsebenzisi-igama {vula | khubaza}

Ulawulo phezu Wireless

Ulawulo phezu kwesici esingenazingcingo sikuvumela ukuba ubeke iliso kwaye uqwalasele abalawuli bendawo usebenzisa umxhasi ongenazingcingo. Olu phawu luxhaswa kuyo yonke imisebenzi yolawulo ngaphandle kokulayisha kunye nokukhutshelwa ukusuka (ukudluliselwa ukuya nokusuka) kumlawuli. Olu phawu luvala ukufikelela kulawulo olungenazingcingo kumlawuli ofanayo lowo isixhobo somthengi esingenazingcingo sinxulunyaniswa naye ngoku. Ayikuthinteli ukufikelela kulawulo lomxhasi ongenazingcingo odityaniswa nomnye umlawuli ngokupheleleyo. Ukubhloka ngokupheleleyo ukufikelela kulawulo lwabaxumi abangenazingcingo ngokusekelwe kwi-VLAN njalo njalo, sincoma ukuba usebenzise uluhlu lolawulo lokufikelela (ACLs) okanye indlela efanayo.

Izithintelo kuLawulo ngaphezu kweWireless

• Ulawulo kwi-Wireless lunokucinywa kuphela ukuba abaxhasi bakwi-central switching.
• Ulawulo kwi-Wireless aluxhaswanga kwi-FlexConnect yasekuhlaleni yokutshintsha abathengi. Nangona kunjalo, uLawulo phezu kwe-Wireless lusebenzela uku-web uqinisekiso lwabathengi ukuba unendlela eya kumlawuli ukusuka kwisiza seFlexConnect.

Eli candelo liqulathe la macandelwana alandelayo:
Ukunika amandla uLawulo ngaphezu kweeNcingo ezingenazingcingo (GUI)
Inkqubo

Inyathelo loku-1 Khetha Ulawulo > Mgmt Nge Wireless ukuvula i Ulawulo ngeWireless iphepha.
Inyathelo loku-2 Jonga i Yenza ukuba uLawulo loLawulo lufikeleleke kwi-Wireless Clients check ibhokisi ukwenza ulawulo ngaphaya kweengcingo zeWLAN okanye ungayikhethi ukuvala oluphawu. Ngokungagqibekanga, ikwimo yokukhubazeka.
Inyathelo loku-3 Gcina ubumbeko.

Ukunika amandla uLawulo phezu kweeNcingo ezingenazingcingo (CLI)
Inkqubo

Inyathelo loku-1
Qinisekisa ukuba ulawulo ngaphaya kojongano olungenazingcingo luvuliwe okanye luvaliwe ngokungenisa lo myalelo: bonisa isishwankathelo sothungelwano

• Ukuba ikhubaziwe: Yenza ulawulo phezu kwamacingo ngokungenisa lo myalelo: config network mgmt-via-wireless yenza
• Kungenjalo, sebenzisa umxhasi ongenazingcingo ukudibanisa nendawo yofikelelo eqhagamshelwe kwisilawuli ofuna ukusilawula.

Inyathelo loku-2
Ngena kwi-CLI ukuqinisekisa ukuba ungalawula i-WLAN usebenzisa umxhasi ongenazingcingo ngokungenisa lo myalelo: telnet wrc-ip-addr CLI-command

Ulawulo loMlawuli 13

Ukuqwalasela uLawulo usebenzisa iDynamic Interfaces (CLI)

Ujongano lweDynamic luvaliwe ngokungagqibekanga kwaye lunokuqaliswa ukuba luyafuneka ukuba lufikeleleke kuninzi okanye kuyo yonke imisebenzi yolawulo. Nje ukuba yenziwe, lonke ujongano oluguquguqukayo luyafumaneka kulawulo lofikelelo kumlawuli. Unokusebenzisa uluhlu lolawulo lofikelelo (ACLs) ukunciphisa olu fikelelo njengoko kufuneka.

Inkqubo

• Yenza okanye uvale ulawulo usebenzisa ujongano oluguquguqukayo ngokungenisa lo myalelo: config network mgmt-via-dynamic-interface { yenza | khubaza}

Amaxwebhu / Izibonelelo

Isikhokelo soLungiselelo loMlawuli ongenazingcingo weCISCO [pdf] Isikhokelo somsebenzisi ISikhokelo soLungiselelo loMlawuli ongenazingcingo, iSikhokelo soLungiselelo loMlawuli, iSikhokelo soLungiselelo esingenazingcingo, iSikhokelo soLungiselelo, kuqwalaselo.

Iimbekiselo

• Incwadi yokusebenzisa