Ukuphathwa Komlawuli

Ukusebenzisa i-Controller Interface

Ungasebenzisa isixhumi esibonakalayo sesilawuli ngezindlela ezimbili ezilandelayo:

Ukusebenzisa i-Control GUI

I-GUI esekwe kusiphequluli yakhelwe kusilawuli ngasinye.
Ivumela abasebenzisi abangafika kwabahlanu ukuthi ngesikhathi esisodwa baphequlule amakhasi okuphatha e-HTTP noma e-HTTPS (HTTP + SSL) ukuze balungiselele amapharamitha futhi baqaphe isimo sokusebenza sesilawuli kanye nezindawo zaso zokufinyelela ezihlobene.
Ukuze uthole izincazelo ezinemininingwane yesilawuli se-GUI, bona Usizo Lwe-inthanethi. Ukuze ufinyelele usizo lwe-inthanethi, chofoza Usizo ku-GUI yesilawuli.

Qaphela
Sincoma ukuthi unike amandla isixhumi esibonakalayo se-HTTPS futhi ukhubaze isixhumi esibonakalayo se-HTTP ukuze uqinisekise ukuphepha okuqinile.

I-GUI yesilawuli isekelwa kulokhu okulandelayo web iziphequluli:

• I-Microsoft Internet Explorer 11 noma inguqulo yakamuva (Windows)
• I-Mozilla Firefox, Inguqulo 32 noma inguqulo yakamuva (iWindows, Mac)
• I-Apple Safari, Inguqulo 7 noma inguqulo yakamuva (Mac)

Qaphela
Sincoma ukuthi usebenzise i-GUI yesilawuli kusiphequluli esilayishwe ngaso webisitifiketi somqondisi (isitifiketi somuntu wesithathu). Futhi sincoma ukuthi ungasebenzisi i-GUI yesilawuli esipheqululini esilayishwe isitifiketi esizisayinele wena. Ezinye izinkinga zokunikezela ziye zaqashelwa ku-Google Chrome (73.0.3675.0 noma inguqulo yakamuva) ngezitifiketi ezizisayinele. Ukuze uthole ulwazi olwengeziwe, bona i-CSCvp80151.

Imihlahlandlela kanye Nemikhawulo ekusebenziseni isilawuli GUI
Landela le mihlahlandlela uma usebenzisa i-GUI yesilawuli:

• Kuya view i-Main Dashboard eyethulwe ku-Release 8.1.102.0, kufanele uvule i-JavaScript ku- web isiphequluli.

Qaphela
Qinisekisa ukuthi ukulungiswa kwesikrini kusethelwe ku-1280×800 noma ngaphezulu. Izinqumo ezincane azisekelwa.

• Ungasebenzisa noma isixhumi esibonakalayo sembobo yesevisi noma isixhumi esibonakalayo sokuphatha ukuze ufinyelele i-GUI.
• Ungasebenzisa kokubili i-HTTP ne-HTTPS uma usebenzisa isixhumi esibonakalayo sembobo yesevisi. I-HTTPS inikwe amandla ngokuzenzakalelayo futhi i-HTTP nayo ingavulwa.
• Chofoza Usizo phezulu kunoma yiliphi ikhasi ku-GUI ukuze ufinyelele usizo lwe-inthanethi. Kungase kudingeke ukuthi ukhubaze i-pop-up blocker yesiphequluli sakho ukuze view usizo lwe-inthanethi.

Ngena ngemvume ku-GUI

Qaphela
Ungakumisi ukuqinisekiswa kwe-TACACS+ uma isilawuli sisethelwe ukusebenzisa ukuqinisekiswa kwasendaweni.

Inqubo
Isinyathelo 1
Faka ikheli le-IP yesilawuli kubha yekheli lesiphequluli sakho. Ukuze uthole uxhumano oluvikelekile, faka https://ip-address. Ukuze uthole uxhumano oluvikeleke kancane, faka https://ip-address.

Isinyathelo 2
Uma ucelwa, faka igama lomsebenzisi elivumelekile nephasiwedi, bese uchofoza okuthi KULUNGILE.
I Isifinyezo ikhasi liyaboniswa.
Qaphela Igama lomsebenzisi lokuphatha nephasiwedi oyidalile kuwizadi yokucupha abucayi kakhulu.
Ukuphuma ku-GUI
Inqubo

Isinyathelo 1
Chofoza Phuma ekhoneni eliphezulu kwesokudla sekhasi.

Isinyathelo 2
Chofoza okuthi Vala ukuze uqedele inqubo yokuphuma futhi uvimbele abasebenzisi abangagunyaziwe ukuthi bafinyelele isilawuli se-GUI.

Isinyathelo 3
Uma uyalwa ukuthi uqinisekise isinqumo sakho, chofoza Yebo.

Ukusebenzisa i-Controller CLI
I-Cisco Wireless solution command-line interface (CLI) yakhelwe kusilawuli ngasinye. I-CLI ikuvumela ukuthi usebenzise uhlelo lokulingisa lwetheminali ye-VT-100 ukuze ulungiselele endaweni noma ukude, ugade, futhi ulawule izilawuli ngazinye kanye nezindawo zokufinyelela ezingasindi ezihambisana nazo. I-CLI iyisixhumi esibonakalayo esisekelwe emibhalweni esilula, esinesakhiwo esinesihlahla esivumela abasebenzisi abangafika kwabahlanu abanezinhlelo zokulingisa esigcinalwazi esinamandla we-Telnet ukufinyelela isilawuli.

Qaphela
Sincoma ukuthi ungasebenzisi imisebenzi emibili ngesikhathi esisodwa ye-CLI ngoba lokhu kungase kuphumele ekuziphatheni okungalungile noma okukhiphayo okungalungile kwe-CLI.

Qaphela
Ukuze uthole ulwazi olwengeziwe mayelana nemiyalo ethile, bona i-Cisco Wireless Controller Command Reference ukuze uthole ukukhishwa okufanelekile kokuthi: https://www.cisco.com/c/en/us/support/wireless/wireless-lan-controller-software/products-command-reference-list.html

Ngena ngemvume ku-Controller CLI
Ungafinyelela isilawuli se-CLI usebenzisa noma iyiphi kulezi zindlela ezilandelayo:

• Uxhumano lwe-serial oluqondile embobeni yesilawuli sekhonsoli
• Iseshini ekude ngenethiwekhi isebenzisa i-Telnet noma i-SSH ngokusebenzisa imbobo yesevisi elungiselelwe kusengaphambili noma izimbobo zesistimu yokusabalalisa

Ukuze uthole ulwazi olwengeziwe mayelana nezimbobo nezinketho zokuxhumana zekhonsoli kuzilawuli, bheka umhlahlandlela wokufaka wemodeli yesilawuli efanele.

Ukusebenzisa Uxhumano Lwe-serial Yasendaweni
Ngaphambi kokuthi uqale
Udinga lezi zinto ukuze uxhume ku-serial port:

• Ikhompyutha esebenzisa uhlelo lokulingisa olufana ne-Putty, SecureCRT, noma okufanayo
• Ikhebula elijwayelekile le-Cisco console elinesixhumi se-RJ45

Ukuze ungene kusilawuli se-CLI ngokusebenzisa imbobo ye-serial, landela lezi zinyathelo:
Inqubo

Isinyathelo 1
Xhuma ikhebula le-console; xhuma isiphetho esisodwa sekhebula le-serial le-Cisco console elijwayelekile ngesixhumi se-RJ45 embobeni yesilawuli sekhonsoli kanye nesinye isiphetho sembobo ye-serial ye-PC yakho.

Isinyathelo 2
Lungiselela uhlelo lwe-terminal emulator enezilungiselelo ezizenzakalelayo:

• 9600 XNUMX ngenhla
• 8 izingcezu zedatha
• 1 ima kancane
• Akukho ukulingana
• Akukho ukulawulwa kokugeleza kwehadiwe

Qaphela
Imbobo ye-serial yesilawuli isethelwe isilinganiso se-baud esingu-9600 kanye nesikhathi esifushane sokuvala. Uma ungathanda ukushintsha noma yiliphi kulawa manani, sebenzisa inani lokucushwa le-baudrate bese ulungisa inani lokuvala le-serial ukuze wenze izinguquko zakho. Uma usetha inani lokuvala le-serial libe ngu-0, izikhathi zochungechunge azipheli. Uma ushintsha isivinini sekhonsoli sibe ivelu ngaphandle kuka-9600, isivinini sekhonsoli esisetshenziswa isilawuli sizoba ngu-9600 ngesikhathi sokuqalisa futhi sizoshintsha kuphela lapho kuqedwa inqubo yokuqalisa. Ngakho-ke, sincoma ukuthi ungashintshi isivinini se-console, ngaphandle nje kwesilinganiso sesikhashana ngokwesisekelo esidingekayo.

Isinyathelo 3
Ngena ku-CLI–Uma ucelwa, faka igama lomsebenzisi elivumelekile nephasiwedi ukuze ungene kusilawuli. Igama lomsebenzisi lokuphatha nephasiwedi oyidalile kuwizadi yokucupha abucayi kakhulu. Yazi Igama lomsebenzisi elizenzakalelayo ngumlawuli, futhi igama eliyimfihlo elimisiwe elokuthi admin. I-CLI ibonisa ukwaziswa kwesistimu yezimpande:
(Cisco Controller) >

Qaphela
Ukwaziswa kwesistimu kungaba yinoma iyiphi iyunithi yezinhlamvu ze-alphanumeric kufika ezinhlamvu ezingu-31. Ungayishintsha ngokufaka umyalo we-config prompt.

Ukusebenzisa i-Remote Telnet noma i-SSH Connection

Ngaphambi kokuthi uqale
Udinga lezi zinto ukuze uxhume kusilawuli ukude:

• I-PC enoxhumo lwenethiwekhi ekhelini le-IP lokuphatha, ikheli lembobo yesevisi, noma uma ukuphathwa kunikwe amandla kusixhumi esibonakalayo esiguqukayo sesilawuli okukhulunywa ngaso.
• Ikheli le-IP lesilawuli
• Uhlelo lokulingisa lwetheminali ye-VT-100 noma igobolondo le-DOS leseshini ye-Telnet

Qaphela
Ngokuzenzakalelayo, abalawuli bavimba izikhathi ze-Telnet. Kufanele usebenzise uxhumo lwasendaweni embobeni ye-serial ukuze unike amandla izikhathi ze-Telnet.

Qaphela
Amaciphe we-aes-cbc awasekelwe kusilawuli. Iklayenti le-SSH elisetshenziselwa ukungena ngemvume kusilawuli kufanele libe nobuncane be-non-aes-cbc cipher.

Inqubo
Isinyathelo 1
Qinisekisa ukuthi uhlelo lwakho lokulingisa lwetheminali ye-VT-100 noma isixhumi esibonakalayo segobolondo le-DOS silungiselelwe ngalezi mingcele:

• Ikheli le-Ethernet
• Imbobo 23

Isinyathelo 2
Sebenzisa ikheli le-IP yesilawuli ku-Telnet ku-CLI.

Isinyathelo 3
Uma ucelwa, faka igama lomsebenzisi elivumelekile nephasiwedi ukuze ungene kusilawuli.

Qaphela
Igama lomsebenzisi lokuphatha nephasiwedi oyidalile kuwizadi yokucupha abucayi kakhulu. Yazi Igama lomsebenzisi elizenzakalelayo ngumlawuli, futhi igama eliyimfihlo elimisiwe elokuthi admin.
I-CLI ibonisa ukwaziswa kwesistimu yezimpande.

Qaphela
Ukwaziswa kwesistimu kungaba yinoma iyiphi iyunithi yezinhlamvu ze-alphanumeric kufika ezinhlamvu ezingu-31. Ungayishintsha ngokufaka umyalo we-config prompt.

Ukuphuma ku-CLI
Uma uqeda ukusebenzisa i-CLI, zulazula uye ezingeni lempande bese ufaka umyalo wokuphuma. Uyacelwa ukuthi ulondoloze noma yiziphi izinguquko ozenzile ku-RAM eguquguqukayo.

Qaphela
I-CLI ikukhipha ngokuzenzakalelayo ngaphandle kokulondoloza izinguquko ngemva kwemizuzu emi-5 yokungasebenzi. Ungasetha ukuphuma ngokuzenzakalelayo kusuka ku-0 (ungalinge uphume) kuye emaminithini angu-160 usebenzisa umyalo wokumisa ukuphelelwa yisikhathi. Ukuze uvimbele izikhathi ze-SSH noma ze-Telnet ekuphelelweni isikhathi, sebenzisa umyalo we-config wesikhathi sokuvala esingu-0.

Ukuzulazula ku-CLI

• Uma ungena ku-CLI, usezingeni lempande. Kusukela ezingeni lempande, ungafaka noma yimuphi umyalo ogcwele ngaphandle kokuzulazula kuqala uye ezingeni elilungile lomyalo.
• Uma ufaka igama elingukhiye lezinga eliphezulu njengokuthi config, debug, njalo njalo ngaphandle kwezimpikiswano, uyiswa kumodi engaphansi yalelo gama elingukhiye elihambisanayo.
• U-Ctrl + Z noma ukuphuma kokungena kubuyisela ukwaziswa kwe-CLI kuleveli emisiwe noma yempande.
• Uma uzulazulela ku-CLI, faka ? ukuze ubone izinketho ezengeziwe ezitholakalayo zanoma yimuphi umyalo onikeziwe ezingeni lamanje.
• Ungakwazi futhi ukufaka ukhiye wesikhala noma wethebhu ukuze uqedele igama elingukhiye lamanje uma ungadideki.
• Faka usizo ezingeni lempande ukuze ubone izinketho zokuhlela zomugqa womyalo otholakalayo.

Ithebula elilandelayo libala imiyalelo oyisebenzisayo ukuzulazula ku-CLI nokwenza imisebenzi evamile.

Ithebula 1: Imiyalo Ye-CLI Navigation kanye Nemisebenzi Evamile

Umyalo	Isenzo
Usizo	Ezingeni lempande, view imiyalo yokuzulazula ebanzi yesistimu
?	View imiyalo etholakalayo ezingeni lamanje
umyalo ?	View imingcele yomyalo othile
Phuma	Yehla ngezinga elilodwa
I-Ctrl + Z	Buyela kusuka kunoma yiliphi izinga uye ezingeni lempande
gcina ukulungiselelwa	Ezingeni lempande, londoloza izinguquko zokumisa ukusuka ku-RAM esebenzayo ukuya ku-RAM engaguquki (i-NVRAM) ukuze zigcinwe ngemva kokuqalisa kabusha.
setha kabusha isistimu	Ezingeni lempande, setha kabusha isilawuli ngaphandle kokuphuma ngemvume
Phuma	Ikukhipha ku-CLI

Inika amandla Web futhi Secure Web Amamodi

Lesi sigaba sinikeza imiyalelo yokunika amandla imbobo yesistimu yokusabalalisa njenge- web port (esebenzisa i-HTTP) noma njengesivikelo web port (esebenzisa i-HTTPS). Ungakwazi ukuvikela ukuxhumana ne-GUI ngokunika amandla i-HTTPS. I-HTTPS ivikela izikhathi zesiphequluli se-HTTP ngokusebenzisa iphrothokholi ye-Secure Sockets Layer (SSL). Uma unika amandla i-HTTPS, isilawuli sikhiqiza esaso sasendaweni web isitifiketi sokuphatha se-SSL futhi sisisebenzisa ngokuzenzakalelayo ku-GUI. Futhi unenketho yokulanda isitifiketi esikhiqizwe ngaphandle.

Ungahlela web futhi ivikelekile web imodi usebenzisa i-GUI yesilawuli noma i-CLI.

Qaphela
Ngenxa yomkhawulo ku-RFC-6797 ye-HTTP Strict Transport Security (HSTS), lapho ufinyelela i-GUI yesilawuli usebenzisa ikheli le-IP lokuphatha, i-HSTS ayihlonishwa futhi yehluleka ukuqondisa kabusha isuka ku-HTTP iye kuphrothokholi ye-HTTPS kusiphequluli. Ukuqondisa kabusha kwehlulekile uma ngabe i-GUI yesilawuli yayifinyelelwe ngaphambilini kusetshenziswa iphrothokholi ye-HTTPS. Ukuze uthole ulwazi olwengeziwe, bona idokhumenti ye-RFC-6797.

Lesi sigaba siqukethe izigatshana ezilandelayo:

Inika amandla Web futhi Secure Web Amamodi (GUI)

Inqubo

Isinyathelo 1
Khetha Ukuphatha > I-HTTP-HTTPS.
I Ukucushwa kwe-HTTP-HTTPS ikhasi liyaboniswa.

Isinyathelo 2
Ukuze unike amandla web imodi, evumela abasebenzisi ukuthi bafinyelele i-GUI yesilawuli besebenzisa “http://ip-address,” khetha Inikwe amandla ukusuka Ukufinyelela kwe-HTTP uhlu lokudonsela phansi. Uma kungenjalo, khetha okuthi Kukhutshaziwe. Inani elizenzakalelayo lithi Ikhutshaziwe. Web Imodi ayilona uxhumano oluvikelekile.

Isinyathelo 3
Ukuze unike amandla ukuphepha web imodi, evumela abasebenzisi ukuthi bafinyelele i-GUI yesilawuli besebenzisa “https://ip-address,” khetha Inikwe amandla ukusuka Ukufinyelela kwe-HTTPS uhlu lokudonsela phansi. Uma kungenjalo, khetha Ikhutshaziwe. Inani elizenzakalelayo linikwe amandla. Kuvikelekile web Imodi iwukuxhumana okuphephile.

Isinyathelo 4
Kwe Web Iseshini Isikhathi siphelile field, faka inani lesikhathi, ngemizuzu, ngaphambi kwe web izikhathi zeseshini ziphelile ngenxa yokungasebenzi. Ungafaka inani eliphakathi kwemizuzu eyi-10 neyi-160 (ihlanganisiwe). Inani elizenzakalelayo imizuzu engama-30.

Isinyathelo 5
Chofoza Faka isicelo.

Isinyathelo 6
Uma unike amandla ukuvikela web Imodi ku-Isinyathelo sesi-3, isilawuli sikhiqiza indawo web isitifiketi sokuphatha se-SSL futhi sisisebenzisa ngokuzenzakalelayo ku-GUI. Imininingwane yesitifiketi samanje ivela phakathi nendawo Ukucushwa kwe-HTTP-HTTPS ikhasi.

Qaphela
Uma uthanda, ungasusa isitifiketi samanje ngokuchofoza okuthi Susa Isitifiketi futhi wenze isilawuli sikhiqize isitifiketi esisha ngokuchofoza Khiqiza Kabusha Isitifiketi. Unenketho yokusebenzisa isitifiketi se-SSL sohlangothi lweseva ongasilanda kusilawuli. Uma usebenzisa i-HTTPS, ungasebenzisa izitifiketi ze-SSC noma ze-MIC.

Isinyathelo 7
Khetha Isilawuli > Okujwayelekile ukuvula ikhasi Elijwayelekile.
Khetha okukodwa kokukhethwa kukho okulandelayo kokuthi Web Uhlu oluya phansi Lwetimu Yombala:

• Okuzenzakalelayo–Ilungiselela okuzenzakalelayo web itimu yombala yesilawuli se-GUI.
• I-Red–Configures i web umbala wetimu njengobomvu ku-GUI yesilawuli.

Isinyathelo 8
Chofoza Faka isicelo.

Isinyathelo 9
Chofoza Londoloza Ukucushwa.

Inika amandla Web futhi Secure Web Amamodi (CLI)
Inqubo

Isinyathelo 1
Nika amandla noma vala web imodi ngokufaka lo myalo: config network webimodi {vula | khubaza}
Lo myalo uvumela abasebenzisi ukuthi bafinyelele i-GUI yesilawuli besebenzisa “http://ip-address.” Inani elizenzakalelayo likhutshaziwe. Web Imodi ayilona uxhumano oluvikelekile.

Isinyathelo 2
Lungiselela i- web umbala wetimu yesilawuli se-GUI ngokufaka lo myalo: config network webumbala {okuzenzakalelayo | bomvu}
Itimu yombala ezenzakalelayo yesilawuli se-GUI inikwe amandla. Ungashintsha uhlelo lombala oluzenzakalelayo njengolubomvu usebenzisa inketho ebomvu. Uma ushintsha itimu yombala kusilawuli se-CLI, udinga ukulayisha kabusha isikrini se-GUI yesilawuli ukuze usebenzise izinguquko zakho.

Isinyathelo 3
Nika amandla noma vala ukuphepha web imodi ngokufaka lo myalo: hlela inethiwekhi ivikelekileweb {vumela | khubaza}
Lo myalo uvumela abasebenzisi ukuthi bafinyelele i-GUI yesilawuli besebenzisa “https://ip-address.” Inani elizenzakalelayo linikwe amandla. Kuvikelekile web Imodi iwukuxhumana okuphephile.

Isinyathelo 4
Nika amandla noma vala ukuphepha web Imodi enokuphepha okwengeziwe ngokufaka lo myalo: hlela inethiwekhi ivikelekileweb i-cipher-option ephezulu {vula | khubaza}
Lo myalo uvumela abasebenzisi ukuthi bafinyelele i-GUI yesilawuli besebenzisa “https://ip-address” kodwa ezipheqululini kuphela ezisekela ama-cipher angu-128-bit (noma amakhulu). Nge-Release 8.10, lo myalo, ngokuzenzakalelayo, usesimweni esinikwe amandla. Uma ama-cipher aphezulu anikwe amandla, SHA1, SHA256, SHA384 okhiye bayaqhubeka nokufakwa kuhlu futhi i-TLSv1.0 ikhutshaziwe. Lokhu kusebenza ku webi-auth kanye webadmin kodwa hhayi eye-NMSP.

Isinyathelo 5
Nika amandla noma khubaza i-SSLv3 ye web ukuphathwa ngokufaka lo myalo: hlela inethiwekhi ivikelekileweb sslv3 {vula | khubaza}

Isinyathelo 6
Nika amandla ama-bit cipher angu-256 kuseshini ye-SSH ngokufaka lo myalo: config network ssh cipher-option high {vula | khubaza}

Isinyathelo 7
[Ongakukhetha] Khubaza i-telnet ngokufaka lo myalo: lungisa i-telnet yenethiwekhi{vula | khubaza}

Isinyathelo 8
Nika amandla noma vala okuncamelayo kwe-RC4-SHA (i-Rivest Cipher 4-Secure Hash Algorithm) yama-cipher suites (ngaphezu kwe-CBC cipher suites) ukuze web ubuqiniso kanye web ukuphathwa ngokufaka lo myalo: hlela inethiwekhi ivikelekileweb cipher-option rc4-preference {vula | khubaza}

Isinyathelo 9
Qinisekisa ukuthi isilawuli sikhiqize isitifiketi ngokufaka lo myalo: khombisa isifinyezo sesitifiketi
Ulwazi olufana nokulandelayo luyavela:
Web Isitifiketi Sokuphatha……………….. Senziwe endaweni
Web Isitifiketi Sokuqinisekisa…………….. Senziwe endaweni
Imodi yokuhambisana nesitifiketi:……………. icishiwe

Isinyathelo 10
(Ongakukhetha) Khiqiza isitifiketi esisha ngokufaka lo myalo: hlela isitifiketi khiqiza webadmin
Ngemva kwemizuzwana embalwa, isilawuli siqinisekisa ukuthi isitifiketi senziwe.

Isinyathelo 11
Londoloza isitifiketi se-SSL, ukhiye, futhi uvikelekile web iphasiwedi ku-RAM engaguquki (i-NVRAM) ukuze izinguquko zakho zigcinwe kukho konke ukuqalisa kabusha ngokufaka lo myalo: gcina ukulungiselelwa

Isinyathelo 12
Qalisa kabusha isilawuli ngokufaka lo myalo: setha kabusha isistimu

I-Telnet kanye Neseshini Secure Shell

I-Telnet iyiphrothokholi yenethiwekhi esetshenziselwa ukunikeza ukufinyelela ku-CLI yesilawuli. I-Secure Shell (SSH) inguqulo ephephe kakhulu ye-Telnet esebenzisa ukubethela kwedatha kanye nesiteshi esivikelekile sokudlulisa idatha. Ungasebenzisa i-GUI yesilawuli noma i-CLI ukuze ulungiselele izikhathi ze-Telnet ne-SSH. Ekukhishweni okungu-8.10.130.0, i-Cisco Wave 2 APs isekela ama-cipher suite alandelayo:

• I-HMAC: hmac-sha2-256,hmac-sha2-512
• KEX: diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521
• Ukhiye Wokusingatha: ecdsa-sha2-nistp256, ssh-rsa
• Ama-ciphers: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

Lesi sigaba siqukethe izigatshana ezilandelayo:

Imihlahlandlela kanye Nemikhawulo ku-Telnet kanye Neseshini Secure Shell

• Uma ukupheja kwesilawuli kukhutshaziwe futhi amaklayenti asebenzisa umtapo wezincwadi we-OpenSSH_8.1p1 OpenSSL 1.1.1 axhunywe kusilawuli, ungase uzwe isibonisi esiphumayo sibanda. Ungacindezela noma yimuphi ukhiye ukuze uvule isibonisi. Sincoma ukuthi usebenzise enye yezindlela ezilandelayo ukugwema lesi simo: · Xhuma usebenzisa inguqulo ehlukile ye-OpenSSH kanye ne-Open SSL library.
• Sebenzisa i-Putty
• Sebenzisa i-Telnet
• Lapho ithuluzi i-Putty lisetshenziswa njengeklayenti le-SSH ukuze lixhumeke kusilawuli esisebenzisa izinguqulo ezingu-8.6 nangaphezulu, ungase ubone ukunqanyulwa ku-Putty lapho okukhiphayo okukhulu kuceliwe lapho ukupheyisha kuvaliwe. Lokhu kubonwa lapho isilawuli sinokucushwa okuningi futhi sinenani eliphezulu lama-AP namaklayenti, noma kunoma yiziphi izimo. Sincoma ukuthi usebenzise amanye amaklayenti e-SSH ezimeni ezinjalo.
• Ekukhishweni okungu-8.6, izilawuli zithuthwa zisuka ku-OpenSSH zayiswa ku-libssh, futhi i-libssh ayiwasekeli lawa ma-algorithms wokushintshaniswa kokhiye (KEX): ecdh-sha2-nistp384 kanye ne-ecdh-sha2-nistp521. I-ecdh-sha2-nistp256 kuphela esekelwayo.
• Kokukhishwayo okungu-8.10.130.0 nokukhishwa kamuva, abalawuli abasasekeli ama-legacy cipher suites, ama-cipher abuthakathaka, ama-MAC nama-KEX.

Ilungiselela i-Telnet ne-SSH Sessions (GUI)
Inqubo

Isinyathelo 1 Khetha Ukuphatha > I-Telnet-SSH ukuvula i Ukucushwa kwe-Telnet-SSH ikhasi.
Isinyathelo 2 Kwe Isikhathi sokungenzi lutho (amaminithi) endaweni, faka inombolo yamaminithi iseshini ye-Telnet evunyelwe ukuthi ihlale ingasebenzi ngaphambi kokuthi inqanyulwe. Ibanga elivumelekile lisuka kumaminithi angu-0 kuye kwangu-160. Inani elingu-0 libonisa ukuthi akukho sikhathi sokuvala.
Isinyathelo 3 Ukusuka Inombolo enkulu yamaseshini uhlu lokudonsela phansi, khetha inombolo yezikhathi ze-Telnet noma ze-SSH ezivunyelwe kanyekanye. Ibanga elivumelekile lisuka kumaseshini angu-0 kuye ku-5 (okuhlanganisayo), futhi inani elizenzakalelayo amaseshini angu-5. Inani likaziro libonisa ukuthi izikhathi ze-Telnet noma ze-SSH azivunyelwe.
Isinyathelo 4 Ukuze uvale ngokuqinile izikhathi zokungena zamanje, khetha Ukuphatha > Izikhathi Zomsebenzisi futhi ohlwini lokudonsela phansi lweseshini ye-CLI, khetha Vala.
Isinyathelo 5 Ukusuka Vumela Okusha Uhlu oluya phansi lwe-Telnet Sessions, khetha Yebo noma Cha ukuze uvumele noma ungavumeli izikhathi ezintsha ze-Telnet kusilawuli. Inani elizenzakalelayo nguNo.
Isinyathelo 6 Ukusuka Vumela Okusha Izikhathi ze-SSH uhlu lokudonsela phansi, khetha Yebo noma Cha ukuze uvumele noma ungavumeli okusha I-SSH amaseshini kusilawuli. Inani elizenzakalelayo lithi Yebo.
Isinyathelo 7 Londoloza ukumisa kwakho.

Okufanele ukwenze ngokulandelayo
Ukubona isifinyezo sezilungiselelo zokucushwa kwe-Telnet, khetha Ukuphatha > Isifinyezo. Ikhasi lokufingqa eliboniswayo libonisa izikhathi ezengeziwe ze-Telnet ne-SSH zivunyelwe.

Ilungiselela i-Telnet ne-SSH Sessions (CLI)
Inqubo

Isinyathelo 1 
Vumela noma ungavumeli izikhathi ezintsha ze-Telnet kusilawuli ngokufaka lo myalo: config network telnet {vula | khubaza}
Inani elizenzakalelayo likhutshaziwe.

Isinyathelo 2
Vumela noma ungavumeli izikhathi ezintsha ze-SSH kusilawuli ngokufaka lo myalo: lungisa inethiwekhi ye-ssh {vula | khubaza}
Inani elizenzakalelayo linikwe amandla.

Qaphela
Sebenzisa inketho yenethiwekhi ye-ssh cipher-high {vula | khubaza} umyalo wokwenza i-sha2 isebenze
isekelwa kusilawuli.

Isinyathelo 3
(Ongakukhetha) Cacisa inani lamaminithi iseshini ye-Telnet evunyelwe ukuthi ihlale ingasebenzi ngaphambi kokuba inqanyulwe ngokufaka lo myalo: config isikhathi sokuvala isikhathi sokuvala
Ibanga elivumelekile lesikhathi sokuvala lisuka kumaminithi angu-0 kuye kwangu-160, futhi inani elimisiwe liyimizuzu emi-5. Inani elingu-0 libonisa ukuthi akukho sikhathi sokuvala.

Isinyathelo 4
(Ongakukhetha) Cacisa inombolo yezikhathi ze-Telnet noma ze-SSH ngesikhathi esisodwa ezivunyelwe ngokufaka lo myalo: config sessions maxsessions session_num
Ibanga elivumelekile le-session_num lisuka ku-0 kuye ku-5, futhi inani elizenzakalelayo liyizikhathi ezi-5. Inani likaziro libonisa ukuthi izikhathi ze-Telnet noma ze-SSH azivunyelwe.

Isinyathelo 5
Londoloza izinguquko zakho ngokufaka lo myalo: gcina ukulungiselelwa

Isinyathelo 6
Ungavala zonke izikhathi ze-Telnet noma ze-SSH ngokufaka lo myalo: lungisa ukungena ngemvume vala {session-id | konke}
I-id yeseshini ingathathwa kumyalo wesikhathi sokungena ngemvume.

Ukuphatha kanye Nokuqapha Remote Telnet kanye SSH Sessions
Inqubo

Isinyathelo 1
Bona izilungiselelo zokucushwa kwe-Telnet ne-SSH ngokufaka lo myalo: bonisa isifinyezo senethiwekhi

Ulwazi olufana nokulandelayo luyaboniswa:
Igama le-RF-Network………………………….. TestNetwork1
Web Imodi…………………………………… Nika amandla ukuvikela
Web Imodi………………………….. Nika amandla
Kuvikelekile Web Imodi ye-Cipher-Option High………. Khubaza
Kuvikelekile Web Imodi ye-Cipher-Option SSLv2……… Khubaza
Vikela iShell (ssh)…………………….. Nika amandla
I-Telnet……………………………….. Khubaza …

Isinyathelo 2
Bona izilungiselelo zokucushwa kweseshini ye-Telnet ngokufaka lo myalo: bonisa izikhathi
Ulwazi olufana nokulandelayo luyaboniswa:
Isikhathi sokuvala sokungena kwe-CLI (amaminithi)………… 5
Inani eliphakeme kakhulu lamaSeshini e-CLI……. 5

Isinyathelo 3
Bona zonke izikhathi ze-Telnet ezisebenzayo ngokufaka lo myalo: khombisa ukungena ngemvume
Ulwazi olufana nokulandelayo luyaboniswa:

I-ID Igama Lomsebenzisi Uxhumano Kusukela I-Idle Time Session Isikhathi
————————————————————
00 admin EIA-232 00:00:00 00:19:04

Isinyathelo 4
Sula izikhathi ze-Telnet noma ze-SSH ngokufaka lo myalo: sula iseshini-id
Ungakwazi ukubona i-id yeseshini ngokusebenzisa umbukiso ukungena ngemvume umyalo.

Ilungiselela Amalungelo e-Telnet Wabasebenzisi Abakhethiwe Bokuphatha (GUI)
Usebenzisa isilawuli, ungalungiselela amalungelo e-Telnet kubasebenzisi abakhethiwe bokuphatha. Ukuze wenze lokhu, kufanele ngabe unike amandla amalungelo e-Telnet ezingeni lomhlaba jikelele. Ngokuzenzakalelayo, bonke abasebenzisi bokuphatha banamalungelo e-Telnet anikwe amandla.

Qaphela
Izikhathi ze-SSH azithintwa yilesi sici.

Inqubo

Isinyathelo 1 Khetha Ukuphatha > Abasebenzisi Bokuphathwa Kwendawo.
Isinyathelo 2 Use Ikhasi Labasebenzisi Bokuphathwa Kwendawo, hlola noma ungahloli i I-Telnet Iyakwazi thikha ibhokisi lomsebenzisi ophethe.
Isinyathelo 3 Londoloza ukucushwa.

Ilungiselela Amalungelo e-Telnet Wabasebenzisi Abakhethiwe Bokuphatha (CLI)
Inqubo

• Lungiselela amalungelo e-Telnet kumsebenzisi okhethiwe wokuphatha ngokufaka lo myalo: config mgmtuser telnet igama lomsebenzisi {vula | khubaza}

Ukuphatha phezu Wireless

Ukuphatha phezu kwesici esingenantambo kukuvumela ukuthi ugade futhi ulungiselele izilawuli zendawo usebenzisa iklayenti elingenantambo. Lesi sici sisekelwa kuyo yonke imisebenzi yokuphatha ngaphandle kokulayishwayo nokulandiwe kusuka (okudluliswa kuye nokusuka) kusilawuli. Lesi sici sivimba ukufinyelela kokuphathwa okungenantambo kusilawuli esifanayo idivayisi yeklayenti engenantambo ehlotshaniswa naso okwamanje. Akuvimbeli ukufinyelela kokuphatha kweklayenti elingenantambo elihlotshaniswa nesinye isilawuli ngokuphelele. Ukuze uvimbele ngokuphelele ukufinyelela kokuphatha kumaklayenti angenantambo ngokusekelwe ku-VLAN nokunye, sincoma ukuthi usebenzise izinhlu zokulawula ukufinyelela (ama-ACL) noma indlela efanayo.

Imikhawulo Ekuphatheni Ngokungenantambo

• Ukuphatha phezu kwe-Wireless kungakhutshazwa kuphela uma amaklayenti eshintsha phakathi nendawo.
• Ukuphatha nge-Wireless akusekelwe kumakhasimende ashintshayo wendawo we-FlexConnect. Kodwa-ke, i-Management over Wireless isebenzela okungewonaweb amaklayenti wokuqinisekisa uma unomzila oya kusilawuli osuka kusayithi le-FlexConnect.

Lesi sigaba siqukethe izigatshana ezilandelayo:
Inika amandla Ukuphathwa Ngokungenantambo (GUI)
Inqubo

Isinyathelo 1 Khetha Ukuphatha > Mgmt Nge-Wireless ukuvula i- Ukuphatha Nge-Wireless ikhasi.
Isinyathelo 2 Hlola Nika amandla Ukuphathwa Kwesilawuli ukuze kufinyeleleke ekuhloleni Kwamaklayenti Angenantambo ibhokisi ukuze unike amandla ukuphathwa ngokungenantambo kwe-WLAN noma uyeke ukukhetha ukuze ukhubaze lesi sici. Ngokuzenzakalelayo, isesimweni sokukhubazeka.
Isinyathelo 3 Londoloza ukucushwa.

Inika amandla Ukuphathwa Ngokungenantambo (CLI)
Inqubo

Isinyathelo 1
Qinisekisa ukuthi ukuphathwa kokusebenzelana okungenantambo kunikwe amandla noma kukhutshaziwe ngokufaka lo myalo: bonisa isifinyezo senethiwekhi

• Uma kukhutshaziwe: Nika amandla ukuphatha ngaphandle kocingo ngokufaka lo myalo: config network mgmt-via-wireless enable
• Uma kungenjalo, sebenzisa iklayenti elingenantambo ukuze uzihlanganise nendawo yokufinyelela exhunywe kusilawuli ofuna ukusiphatha.

Isinyathelo 2
Ngena ku-CLI ukuze uqinisekise ukuthi ungakwazi ukuphatha i-WLAN usebenzisa iklayenti elingenantambo ngokufaka lo myalo: telnet wrc-ip-addr CLI-command

Ukuphathwa koMlawuli 13

Ilungiselela Ukuphatha usebenzisa i-Dynamic Interfaces (CLI)

Isixhumi esibonakalayo esinamandla sikhutshaziwe ngokuzenzakalela futhi singavulwa uma sidingeka ukuze sifinyeleleke emisebenzini eminingi yokuphatha. Uma sezinikwe amandla, zonke izixhumi ezibonakalayo ziyatholakala ukuze abaphathi bafinyelele isilawuli. Ungasebenzisa izinhlu zokulawula ukufinyelela (ama-ACL) ukuze ukhawulele lokhu kufinyelela njengoba kudingeka.

Inqubo

• Nika amandla noma khubaza ukuphatha usebenzisa izixhumi ezibonakalayo eziguquguqukayo ngokufaka lo myalo: config network mgmt-via-dynamic-interface {vula | khubaza}

Amadokhumenti / Izinsiza

I-CISCO Wireless Controller Configuration Guide [pdf] Umhlahlandlela Womsebenzisi Umhlahlandlela Wokulungiselela Isilawuli Esingenantambo, Umhlahlandlela Wokulungisa Isilawuli, Umhlahlandlela Wokucushwa Okungenantambo, Umhlahlandlela Wokulungiselela, Ukulungiselela

Izithenjwa

• Imaniwali yosebenzisayo