{"id":95330,"date":"2020-09-28T07:42:51","date_gmt":"2020-09-28T05:42:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2"},"modified":"2020-09-28T07:42:51","modified_gmt":"2020-09-28T05:42:51","slug":"cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","title":{"rendered":"Cisco ISE: Krijimi i p\u00ebrdoruesve, shtimi i server\u00ebve LDAP, integrimi me AD. Pjesa 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Cisco<\/p>\n

Mir\u00ebsevini n\u00eb publikimin e dyt\u00eb t\u00eb ciklit t\u00eb artikujve t\u00eb dedikuar Cisco ISE. N\u00eb t\u00eb parin artikulli yn\u00eb<\/u><\/a><\/noindex>  u trajtuan p\u00ebrfitimet dhe dallimet e zgjidhjeve t\u00eb Network Access Control (NAC) nga standardet AAA, unik\u00ebsia e Cisco ISE, arkitektura dhe procesi i instalimit t\u00eb produktit.<\/p>\n

N\u00eb k\u00ebt\u00eb artikull ne do t\u00eb thellohemi n\u00eb krijimin e llogarive, shtimin e server\u00ebve LDAP dhe integrimin me Microsoft Active Directory, si dhe detajet gjat\u00eb pun\u00ebs me PassiveID. Para leximit, rekomandoj t\u00eb njihni me pjes\u00ebn e par\u00eb<\/u><\/a><\/noindex>.<\/p>\n

1. Pak terminologji<\/h2>\n

Identiteti i P\u00ebrdoruesit<\/strong> \u2014 llogari i p\u00ebrdoruesit, q\u00eb p\u00ebrmban informacionin e p\u00ebrdoruesit dhe formon kredencialet e tij p\u00ebr qasje n\u00eb rrjet. Parametrat e m\u00ebposht\u00ebm zakonisht sh\u00ebnohen n\u00eb User Identity: emri i p\u00ebrdoruesit, adresa e post\u00ebs elektronike, fjal\u00ebkalimi, p\u00ebrshkrimi i llogaris\u00eb, grupi i p\u00ebrdoruesve dhe roli.<\/p>\n

Grupet e P\u00ebrdoruesve <\/strong>\u2014 grupet e p\u00ebrdoruesve \u2014 jan\u00eb nj\u00eb grup individ\u00ebsh q\u00eb kan\u00eb nj\u00eb set t\u00eb p\u00ebrbashk\u00ebt privilegjesh q\u00eb u lejojn\u00eb atyre qasje n\u00eb nj\u00eb grup t\u00eb caktuar sh\u00ebrbimesh dhe funksionesh Cisco ISE.<\/p>\n

Grupet e Identitetit t\u00eb P\u00ebrdoruesit \u2014 <\/strong>grupet e paracaktuara t\u00eb p\u00ebrdoruesve, t\u00eb cilat tashm\u00eb kan\u00eb informacion dhe rol t\u00eb caktuar. Grupet e m\u00ebposhtme t\u00eb Identitetit t\u00eb P\u00ebrdoruesve ekzistojn\u00eb automatikisht, ku mund t\u00eb shtoni p\u00ebrdorues dhe grupe p\u00ebrdoruesish: Employee (punonj\u00ebs), SponsorAllAccount, SponsorGroupAccounts, SponsorOwnAccounts (llogari sponsoruese p\u00ebr menaxhimin e portalit t\u00eb mysafir\u00ebve), Guest (mysafir), ActivatedGuest (mysafiri i aktivizuar).<\/p>\n

Roli i P\u00ebrdoruesit \u2014 <\/strong>roli i p\u00ebrdoruesit \u2014 \u00ebsht\u00eb nj\u00eb set lejesh q\u00eb p\u00ebrcakton cilat detyra mund t\u00eb kryej\u00eb p\u00ebrdoruesi dhe n\u00eb cilat sh\u00ebrbime mund t\u00eb ket\u00eb qasje. Shpesh, roli i p\u00ebrdoruesit \u00ebsht\u00eb i lidhur me grupin e p\u00ebrdoruesve.<\/p>\n

P\u00ebr m\u00eb tep\u00ebr, \u00e7do p\u00ebrdorues dhe grup p\u00ebrdoruesish ka atribute shtes\u00eb q\u00eb lejojn\u00eb t\u00eb ve\u00e7ohen dhe t\u00eb sakt\u00ebsohen m\u00eb qart\u00eb ky p\u00ebrdorues (grupi i p\u00ebrdoruesve). M\u00eb shum\u00eb informacion n\u00eb udh\u00ebzuesin<\/u><\/a><\/noindex>.<\/p>\n

2. Krijimi i p\u00ebrdoruesve lokal\u00eb<\/h2>\n

1) N\u00eb Cisco ISE ka mund\u00ebsin\u00eb p\u00ebr t\u00eb krijuar p\u00ebrdorues lokal\u00eb dhe p\u00ebr t'i p\u00ebrdorur ata n\u00eb politik\u00ebn e aksesit ose madje p\u00ebr t'u dh\u00ebn\u00eb rol administrimi produktit. Zgjidhni Administration \u2192 Identity Management \u2192 Identities \u2192 Users \u2192 Add.<\/em><\/p>\n

\"CiscoFigura 1. Shtimi i p\u00ebrdoruesit lokal n\u00eb Cisco ISE<\/p>\n

2) N\u00eb dritaren e shfaqur, krijoni nj\u00eb p\u00ebrdorues lokal, caktoni fjal\u00ebkalimin dhe parametrat e tjer\u00eb t\u00eb kuptuesh\u00ebm.<\/p>\n

\"CiscoFigura 2. Krijimi i p\u00ebrdoruesit lokal n\u00eb Cisco ISE<\/p>\n

3) P\u00ebrdoruesit gjithashtu mund t\u00eb importohen. N\u00eb k\u00ebt\u00eb sked\u00eb t\u00eb nj\u00ebjt\u00ebn Administrata \u2192 Menaxhimi i Identitetit \u2192 Identitetet \u2192 P\u00ebrdoruesit <\/em>zgjidhni opsionin Importoni <\/em>dhe ngarkoni nj\u00eb sked\u00eb csv ose txt me p\u00ebrdoruesit. P\u00ebr t\u00eb marr\u00eb nj\u00eb model zgjidhni Krijo nj\u00eb Model<\/em>, pastaj duhet ta plot\u00ebsoni at\u00eb me informacionin rreth p\u00ebrdoruesve n\u00eb formatin e duhur.<\/p>\n

\"CiscoFigura 3. Importimi i p\u00ebrdoruesve n\u00eb Cisco ISE<\/p>\n

3. Shtimi i server\u00ebve LDAP<\/h2>\n

T\u00eb kujtojm\u00eb se LDAP \u2014 \u00ebsht\u00eb nj\u00eb protokoll popullor i nivelit aplikativ q\u00eb lejon t\u00eb merrni informacion, t\u00eb kryeni autentikimin, t\u00eb k\u00ebrkoni llogarit\u00eb n\u00eb katalog\u00ebt e server\u00ebve LDAP, punon mbi portin 389 ose 636 (SSL). Shembuj t\u00eb shquar t\u00eb server\u00ebve LDAP jan\u00eb Active Directory, Sun Directory, Novell eDirectory dhe OpenLDAP. \u00c7do regjistrim n\u00eb katalogun LDAP p\u00ebrcaktohet nga DN (Emri i Distinguar) dhe p\u00ebr t\u00eb formuar politik\u00ebn e aksesit lind nevoja p\u00ebr t\u00eb marr\u00eb (retrieval) llogarit\u00eb, grupet e p\u00ebrdoruesve dhe atributet.<\/p>\n

N\u00eb Cisco ISE \u00ebsht\u00eb e mundur t\u00eb konfigurohet qasje n\u00eb shum\u00eb server\u00eb LDAP, duke realizuar k\u00ebshtu redundanc\u00eb. N\u00eb rast se serveri primar LDAP nuk \u00ebsht\u00eb i aksesuesh\u00ebm, ISE do t\u00eb p\u00ebrpiqet t\u00eb kontaktoj\u00eb serverin sekondar dhe k\u00ebshtu me radh\u00eb. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse ka 2 PAN, at\u00ebher\u00eb p\u00ebr PAN-n\u00eb primare mund t\u00eb b\u00ebhet prioritete nj\u00eb LDAP, dhe p\u00ebr PAN-n\u00eb sekondare \u2014 nj\u00eb LDAP tjet\u00ebr.<\/p>\n

ISE mb\u00ebshtet 2 lloje k\u00ebrkimesh (lookup) kur punon me server\u00eb LDAP: K\u00ebrkimi i P\u00ebrdoruesve dhe K\u00ebrkimi i Adresave MAC. K\u00ebrkimi i P\u00ebrdoruesve lejon q\u00eb t\u00eb b\u00ebhet k\u00ebrkimi p\u00ebr p\u00ebrdorues n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave LDAP dhe t\u00eb merret informacioni i m\u00ebposht\u00ebm pa autentikim: p\u00ebrdoruesit dhe atributet e tyre, grupet e p\u00ebrdoruesve. K\u00ebrkimi i Adresave MAC lejon gjithashtu q\u00eb pa autentikim t\u00eb b\u00ebhet k\u00ebrkimi p\u00ebr adres\u00ebn MAC n\u00eb katalog\u00ebt LDAP dhe t\u00eb merret informacioni p\u00ebr pajisjen, grupin e pajisjeve sipas adresave MAC dhe atributet e tjera specifike.<\/p>\n

Si shembull t\u00eb integrimit, do t\u00eb shtojm\u00eb Active Directory n\u00eb Cisco ISE si nj\u00eb server LDAP.<\/p>\n

1) Shkoni n\u00eb sked\u00ebn Administrata \u2192 Menaxhimi i Identitetit \u2192 Burimet e Identitetit t\u00eb Jasht\u00ebm \u2192 LDAP \u2192 Shto.<\/em> <\/p>\n

\"CiscoFigura 4. Shtimi i serverit LDAP<\/p>\n

2) N\u00eb panelin P\u00ebrgjithsh\u00ebm <\/em>jepni emrin e serverit LDAP dhe skem\u00ebn (n\u00eb rastin ton\u00eb Active Directory). <\/p>\n

\"CiscoFigura 5. Shtimi i serverit LDAP me skem\u00ebn Active Directory<\/p>\n

3) M\u00eb pas kaloni n\u00eb Connection <\/em>sked\u00ebn dhe jepni Hostname\/Adresa IP <\/em>Server\u00ebt AD, porti (389 \u2014 LDAP, 636 \u2014 SSL LDAP), kredencialet e administratorit t\u00eb domenit (Admin DN \u2014 DN i plot\u00eb), parametrat e tjer\u00eb mund t\u00eb lihen si\u00e7 jan\u00eb regullat e treguesit.<\/p>\n

Sh\u00ebnim<\/strong><\/em>: p\u00ebrdorimi i t\u00eb dh\u00ebnave t\u00eb adminit t\u00eb domenit p\u00ebr t\u00eb shmangur probleme potenciale.<\/p>\n

\"CiscoFigura 6. Futja e t\u00eb dh\u00ebnave t\u00eb serverit LDAP<\/p>\n

4) N\u00eb seksionin Organizata e Drejtoris\u00eb <\/em>duhet t\u00eb specifikohet zona e direktor\u00ebve p\u00ebrmes DN, nga ku t\u00ebrhiqen p\u00ebrdoruesit dhe grupet e p\u00ebrdoruesve.<\/p>\n

\"CiscoFigura 7. P\u00ebrcaktimi i direktor\u00ebve, nga t\u00eb cil\u00ebt do t\u00eb t\u00ebrhiqen grupet e p\u00ebrdoruesve<\/p>\n

5) Kaloni n\u00eb dritaren Grupet \u2192 Shto \u2192 Zgjidh Grupet Nga Drejtoria <\/em>p\u00ebr t\u00eb zgjedhur t\u00ebrheqjen e grupeve nga serveri LDAP. <\/p>\n

\"CiscoFigura 8. Shtimi i grupeve nga serveri LDAP<\/p>\n

6) N\u00eb dritaren q\u00eb shfaqet, klikoni T\u00ebrheq Grupet. <\/em>N\u00ebse grupet u t\u00ebrhoq\u00ebn, at\u00ebher\u00eb hapat paraprak\u00eb jan\u00eb p\u00ebrfunduar me sukses. N\u00eb t\u00eb kund\u00ebrt, provoni nj\u00eb administrator tjet\u00ebr dhe kontrolloni aksesin e ISE me serverin LDAP p\u00ebrmes protokollit LDAP.<\/p>\n

\"CiscoFigura 9. Lista e grupeve t\u00eb p\u00ebrdoruesve t\u00eb t\u00ebrhequra<\/p>\n

7) N\u00eb sked\u00ebn Atributet <\/em>mund\u00ebsisht mund t\u00eb tregoni se cilat atribute nga serveri LDAP duhet t\u00eb t\u00ebrhiqen, nd\u00ebrsa n\u00eb dritaren Vendosjet Avancuara <\/em>aktivizoni opsionin Aktivizo Ndryshimin e Fjal\u00ebkalimit<\/em>, i cili do t'i detyroj\u00eb p\u00ebrdoruesit t\u00eb ndryshojn\u00eb fjal\u00ebkalimin, n\u00ebse ai ka skaduar ose \u00ebsht\u00eb riparuar. N\u00eb \u00e7do rast, klikoni D\u00ebrgo <\/em>p\u00ebr t\u00eb vazhduar.<\/p>\n

8) Serveri LDAP shfaqet n\u00eb sked\u00ebn p\u00ebrkat\u00ebse dhe m\u00eb pas mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb formuar politikat e aksesit.<\/p>\n

\"CiscoFigura 10. Lista e server\u00ebve LDAP t\u00eb shtuar<\/p>\n

4. Integrimi me Active Directory<\/h2>\n

1) Duke shtuar serverin Microsoft Active Directory si server LDAP, mor\u00ebm p\u00ebrdoruesit, grupet e p\u00ebrdoruesve, por jo loget. Tani propozoj t\u00eb konfigurojm\u00eb nj\u00eb integrim t\u00eb plot\u00eb t\u00eb AD me Cisco ISE. Kaloni n\u00eb sked\u00ebn Administrata \u2192 Menaxhimi i Identitetit \u2192 Burimet e Identitetit t\u00eb Jashtme \u2192 Active Directory \u2192 Shto. <\/em><\/p>\n

V\u00ebrejtje: <\/strong><\/em>p\u00ebr integrimin e suksessh\u00ebm me AD, ISE duhet t\u00eb jet\u00eb brenda domenit dhe t\u00eb ket\u00eb lidhshm\u00ebri t\u00eb plot\u00eb me DNS, NTP dhe server\u00ebt AD, nd otherwise nothing will work.<\/p>\n

\"CiscoFigura 11. Shtimi i serverit Active Directory<\/p>\n

2) N\u00eb dritaren q\u00eb shfaqet, futni t\u00eb dh\u00ebnat e administratorit t\u00eb domenit dhe markoni kutin\u00eb Ruaj Kredencialet. <\/em>Shtes\u00eb, mund t\u00eb tregoni OU (Nj\u00ebsia Organizative), n\u00ebse ISE ndodhet n\u00eb nj\u00eb OU t\u00eb caktuar. M\u00eb pas do t\u00eb duhet t\u00eb zgjidhni node Cisco ISE, q\u00eb d\u00ebshironi t\u00eb lidhni me domenin.<\/p>\n

\"CiscoFigura 12. Futja e kredencialeve<\/p>\n

3) Para se t\u00eb shtoni kontrolluesit e domenit, sigurohuni q\u00eb n\u00eb PSN n\u00eb sked\u00ebn Administrata \u2192 Sistemi \u2192 Nd\u00ebrmarrja<\/em> t\u00eb jet\u00eb aktivizuar opsioni Sh\u00ebrbimi i Identitetit Pasiv<\/em>. PassiveID <\/strong>\u2014 opsioni q\u00eb lejon p\u00ebrkthimin e User n\u00eb IP dhe anasjelltas. PassiveID merr informacion nga AD p\u00ebrmes WMI, agjent\u00ebve t\u00eb ve\u00e7ant\u00eb AD ose portit SPAN n\u00eb switch (nuk \u00ebsht\u00eb opsioni m\u00eb i mir\u00eb).<\/p>\n

V\u00ebrejtje: <\/strong><\/em>p\u00ebr t\u00eb kontrolluar statusin e Passive ID, futni n\u00eb konsol\u00ebn ISE show application status ise | include PassiveID.<\/strong><\/p>\n

\"CiscoFigura 13. Aktivizimi i opsionit PassiveID <\/p>\n

4) Kaloni n\u00eb sked\u00ebn Administrimi \u2192 Menaxhimi i Identitetit \u2192 Burimet e Identitetit t\u00eb Jashtme \u2192 Active Directory \u2192 PassiveID <\/em>dhe zgjidhni opsionin Shto DC-t\u00eb<\/em>. M\u00eb pas, zgjidhni me shenj\u00eb dom\u00ebn e nevojshme dhe klikoni OK.<\/em><\/p>\n

\"CiscoFig. 14. Shtimi i kontrolluesve t\u00eb domain-it<\/p>\n

5) Zgjidhni DC-t\u00eb e shtuar dhe klikoni butonin Redakto. <\/em>Specifikoni FQDN <\/em>t\u00eb DC-s\u00eb suaj, logun dhe fjal\u00ebkalimin e domain-it, si dhe opsionin e lidhjes WMI <\/em>ose Agent<\/em>. Zgjidhni WMI dhe klikoni OK.<\/em><\/p>\n

\"CiscoFig. 15. Futja e t\u00eb dh\u00ebnave t\u00eb kontrolluesit t\u00eb domain-it<\/p>\n

6) N\u00ebse WMI nuk \u00ebsht\u00eb m\u00ebnyra e preferuar e lidhjes me Active Directory, mund t\u00eb p\u00ebrdorni agent\u00ebt ISE. M\u00ebnyra e agjent\u00ebve \u00ebsht\u00eb q\u00eb mund t\u00eb instaloni agjent\u00eb t\u00eb ve\u00e7ant\u00eb n\u00eb servera, t\u00eb cil\u00ebt do t\u00eb regjistrojn\u00eb ngjarjet e ky\u00e7jes. Ka dy mund\u00ebsi instalimi: automatike dhe manuale. P\u00ebr instalimin automatik t\u00eb agjentit n\u00eb t\u00eb nj\u00ebjt\u00ebnTab PassiveID <\/em>zgjidhni opsionin Shto Agjent \u2192 Instalo Agjent T\u00eb Ri<\/em> (DC duhet t\u00eb ket\u00eb qasje n\u00eb Internet). Pastaj plot\u00ebsoni fushat e detyrueshme (emri i agjentit, FQDN i serverit, login\/fjal\u00ebkalimi i administratorit t\u00eb domain-it) dhe klikoni OK.<\/em><\/p>\n

\"CiscoFig. 16. Instalimi automatik i agjentit ISE<\/p>\n

7) P\u00ebr instalimin manual t\u00eb agjentit Cisco ISE, duhet t\u00eb zgjidhni opsionin Regjistro Agjent Ekzistues<\/em>. P\u00ebr ta th\u00ebn\u00eb, agjenti mund t\u00eb shkarkohet n\u00eb tab Qendrat e Pun\u00ebs \u2192 PassiveID \u2192 Oferuesit \u2192 Agjent\u00ebt \u2192 Shkarko Agjent.<\/em><\/p>\n

\"CiscoFig. 17. Shkarkimi i agjentit ISE<\/p>\n

E r\u00ebnd\u00ebsishme: <\/strong><\/em>PassiveID nuk regjistron ngjarjet logoff<\/strong>! Parametri q\u00eb p\u00ebrcakton koh\u00ebn e skadenc\u00ebs quhet koh\u00eb e plakjes s\u00eb sesionit t\u00eb p\u00ebrdoruesit<\/strong> dhe \u00ebsht\u00eb 24 or\u00eb sipas parazgjedhjes. Prandaj, duhet ose t\u00eb b\u00ebni logoff vet\u00eb n\u00eb fund t\u00eb dit\u00ebs s\u00eb pun\u00ebs, ose t\u00eb shkruani nj\u00eb skenar q\u00eb do t\u00eb realizoj\u00eb logoff automatik p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit e ky\u00e7ur. <\/p>\n

P\u00ebr t\u00eb marr\u00eb informacionet logoff<\/strong> p\u00ebrdoren \u00abEndpoint probes\u00bb \u2014 sondat p\u00ebrfundimtare. N\u00eb Cisco ISE ekzistojn\u00eb disa Endpoint probes: RADIUS, SNMP Trap, SNMP Query, DHCP, DNS, HTTP, Netflow, NMAP Scan. RADIUS <\/strong>sonda me an\u00eb t\u00eb CoA <\/strong>(Ndryshimi i Autorizimit) paketat japin informacion mbi ndryshimin e t\u00eb drejtave t\u00eb p\u00ebrdoruesit (p\u00ebr k\u00ebt\u00eb k\u00ebrkohet q\u00eb t\u00eb jete instaluar 802.1X<\/strong>), nd\u00ebrsa konfigurimi n\u00eb switch-at e hyrjes SNMP do t\u00eb jap\u00eb informacion mbi pajisjet e lidhura dhe t\u00eb \u00e7aktivizuara.<\/p>\n

M\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb shembull, aktual p\u00ebr konfigurimin e Cisco ISE + AD pa 802.1X dhe RADIUS: p\u00ebrdoruesi \u00ebsht\u00eb lidhur n\u00eb nj\u00eb makin\u00eb Windows, pa b\u00ebr\u00eb logoff, dhe lidh nj\u00eb PC tjet\u00ebr me WiFi. N\u00eb k\u00ebt\u00eb rast, sesioni n\u00eb PC-n\u00eb e par\u00eb do t\u00eb mbetet aktiv, derisa t\u00eb ndodhi skadenca e koh\u00ebs ose t\u00eb ndodhe logoff-i i detyruesh\u00ebm. At\u00ebher\u00eb, n\u00ebse pajisjet kan\u00eb t\u00eb drejta t\u00eb ndryshme, pajisja e fundit t\u00eb ky\u00e7ur do t\u00eb zbatoj\u00eb t\u00eb drejtat e saj.<\/p>\n

8) Shtes\u00eb n\u00eb sked\u00ebn Administrata \u2192 Menaxhimi i Identitetit \u2192 Burimet e Identitetit t\u00eb Jasht\u00ebm \u2192 Active Directory \u2192 Grupet \u2192 Shto \u2192 Zgjidh Grupet nga Dosja <\/em>mund t\u00eb zgjidhni grupet nga AD, t\u00eb cilat d\u00ebshironi t'i t\u00ebrhiqni n\u00eb ISE (n\u00eb rastin ton\u00eb, kjo u b\u00eb n\u00eb pik\u00ebn 3 \u201cShtimi i serverit LDAP\u201d). Zgjidhni opsionin Merrni Grupet \u2192 OK<\/em>. <\/p>\n

\"CiscoFigura 18 a). T\u00ebrheqja e grupeve t\u00eb p\u00ebrdoruesve nga Active Directory<\/p>\n

9) N\u00eb sked\u00ebn Qendrat e Pun\u00ebs \u2192 PassiveID \u2192 P\u00ebrmbledhje \u2192 Paneli i Kontrollit<\/em> mund t\u00eb shihni numrin e sesioneve aktive, numrin e burimeve t\u00eb t\u00eb dh\u00ebnave, agen\u00ebve dhe m\u00eb shum\u00eb.<\/p>\n

\"CiscoFigura 19. Monitorimi i aktivitetit t\u00eb p\u00ebrdoruesve t\u00eb domain-it<\/p>\n

10) N\u00eb sked\u00ebn Sesione t\u00eb Drejtp\u00ebrdrejta<\/em> shfaqen sesionet aktuale. Integrimi me AD \u00ebsht\u00eb i konfiguruar.<\/p>\n

\"CiscoFigura 20. Sesionet aktive t\u00eb p\u00ebrdoruesve t\u00eb domain-it<\/p>\n

5. P\u00ebrfundim<\/h2>\n

N\u00eb k\u00ebt\u00eb artikull u shqyrtuan temat e krijimit t\u00eb p\u00ebrdoruesve lokal n\u00eb Cisco ISE, shtimit t\u00eb server\u00ebve LDAP dhe integrimit me Microsoft Active Directory. N\u00eb artikullin e ardhsh\u00ebm do t\u00eb trajtohet aksesimi i mysafir\u00ebve n\u00eb form\u00ebn e nj\u00eb udh\u00ebzuesi t\u00eb tepruar.<\/p>\n

N\u00ebse keni pyetje n\u00eb lidhje me k\u00ebt\u00eb tem\u00eb ose nevojitet ndihm\u00eb n\u00eb testimin e produktit, kontaktoni n\u00eb linkun<\/u><\/a><\/noindex>.<\/p>\n

Ndjekni p\u00ebrdit\u00ebsimet n\u00eb kanalet tona (Telegram<\/u><\/a><\/noindex>, Facebook<\/u><\/a><\/noindex>, VK<\/u><\/a><\/noindex>, Blogu i Zgjidhjeve TS<\/u><\/a><\/noindex>, Yandex.Zen<\/u><\/a><\/noindex>).<\/p>\n

Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c\u0443 Cisco ISE. \u0412 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435  \u0431\u044b\u043b\u0438 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u044b \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u0438 \u043e\u0442\u043b\u0438\u0447\u0438\u044f Network Access Control (NAC) \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0410\u0410\u0410, \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c Cisco ISE, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0443\u0433\u043b\u0443\u0431\u0438\u043c\u0441\u044f \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Microsoft Active Directory, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043d\u044e\u0430\u043d\u0441\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95331,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95330","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cisco ISE: Krijimi i p\u00ebrdoruesve, shtimi i server\u00ebve LDAP, integrimi me AD. Pjesa 2 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-28T05:42:51+00:00","article:modified_time":"2020-09-28T05:42:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95330","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:07:33","updated":"2022-09-28 09:57:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95330"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95331"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}