{"id":97567,"date":"2020-10-19T14:42:54","date_gmt":"2020-10-19T12:42:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-nastrojka-gostevogo-dostupa-na-fortiap-chast-3"},"modified":"2020-10-19T14:42:54","modified_gmt":"2020-10-19T12:42:54","slug":"cisco-ise-nastrojka-gostevogo-dostupa-na-fortiap-chast-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-nastrojka-gostevogo-dostupa-na-fortiap-chast-3","title":{"rendered":"Cisco ISE: Konfigurimi i qasjes p\u00ebr mysafir\u00ebt n\u00eb FortiAP. Pjesa 3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Cisco<\/p>\n

Mir\u00ebsevini n\u00eb publikimin e tret\u00eb t\u00eb ciklit t\u00eb artikujve t\u00eb dedikuar Cisco ISE. lidhjet p\u00ebr t\u00eb gjith\u00eb artikujt n\u00eb cik\u00ebl jan\u00eb m\u00eb posht\u00eb:<\/p>\n

    \n
  1. \n

    Cisco ISE: Hyrje, k\u00ebrkesat, instalimi. Pjesa 1<\/a><\/noindex><\/p>\n<\/li>\n

  2. \n

    Cisco ISE: Krijimi i p\u00ebrdoruesve, shtimi i server\u00ebve LDAP, integrimi me AD. Pjesa 2<\/a><\/noindex><\/p>\n<\/li>\n

  3. \n

    Cisco ISE: Konfigurimi i qasjes p\u00ebr mysafir\u00ebt n\u00eb FortiAP. Pjesa 3<\/a><\/noindex><\/p>\n<\/li>\n<\/ol>\n

    N\u00eb k\u00ebt\u00eb publikim do t\u00eb shihni nj\u00eb p\u00ebrmbledhje mbi aksesin e mysafir\u00ebve, si dhe nj\u00eb udh\u00ebzues hap pas hapi p\u00ebr integrimin e Cisco ISE me FortiGate p\u00ebr konfigurimin e FortiAP - pik\u00ebs s\u00eb aksesit nga Fortinet (n\u00eb p\u00ebrgjith\u00ebsi i p\u00ebrshtatsh\u00ebm p\u00ebr \u00e7do pajisje q\u00eb mb\u00ebshtet) RADIUS CoA <\/strong>- Ndryshim Autorizimi.<\/p>\n

    Shtojm\u00eb gjithashtu artikujt tan\u00eb Fortinet - nj\u00eb p\u00ebrzgjedhje e materialeve t\u00eb dobishme<\/a><\/noindex>.<\/p>\n

    Sh\u00ebnim<\/em><\/strong>: Pajisjet Check Point SMB nuk mb\u00ebshtesin RADIUS CoA.<\/p>\n

    E mrekullueshme manual<\/a><\/noindex> n\u00eb anglisht p\u00ebrshkruan se si t\u00eb krijoni qasje p\u00ebr mysafir\u00ebt me Cisco ISE n\u00eb Cisco WLC (Kontrolluesi Wireless). Le t\u00eb shqyrtojm\u00eb!<\/p>\n

    1. Hyrje<\/h2>\n

    Aksesi p\u00ebr mysafir\u00ebt (portali) lejon ofrimin e aksesit n\u00eb internet ose n\u00eb burimet e brendshme p\u00ebr mysafir\u00ebt dhe p\u00ebrdoruesit q\u00eb nuk d\u00ebshironi t\u00eb lejoni n\u00eb rrjetin tuaj lokal. Ekzistojn\u00eb 3 lloje t\u00eb paracaktuara t\u00eb portalit p\u00ebr mysafir\u00eb:<\/p>\n

      \n
    1. \n

      Portali i mysafir\u00ebve Hotspot - akses n\u00eb rrjet p\u00ebr mysafir\u00ebt jepet pa t\u00eb dh\u00ebna hyr\u00ebse. N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebrdoruesit k\u00ebrkohet t\u00eb pranojn\u00eb \"Politik\u00ebn e P\u00ebrdorimit dhe Privat\u00ebsis\u00eb\" t\u00eb kompanis\u00eb p\u00ebrpara se t\u00eb fitojn\u00eb akses n\u00eb rrjet.<\/p>\n<\/li>\n

    2. \n

      Portali i mysafir\u00ebve t\u00eb sponsorizuar - aksesin n\u00eb rrjet dhe t\u00eb dh\u00ebnat p\u00ebr hyrje duhet t\u00eb jap\u00eb sponsori - p\u00ebrdoruesi p\u00ebrgjegj\u00ebs p\u00ebr krijimin e llogarive p\u00ebr mysafir\u00eb n\u00eb Cisco ISE.<\/p>\n<\/li>\n

    3. \n

      Portali i mysafir\u00ebve t\u00eb regjistruar vet\u00eb - n\u00eb k\u00ebt\u00eb rast, mysafir\u00ebt p\u00ebrdorin t\u00eb dh\u00ebna ekzistuese p\u00ebr hyrje, ose krijojn\u00eb vet\u00eb nj\u00eb llogari me t\u00eb dh\u00ebna hyr\u00ebse, por k\u00ebrkohet konfirmimi i sponsorit p\u00ebr t\u00eb marr\u00eb akses n\u00eb rrjet.<\/p>\n<\/li>\n<\/ol>\n

      N\u00eb Cisco ISE mund t\u00eb zhvilloni shum\u00eb portale nj\u00ebher\u00ebsh. N\u00eb m\u00ebnyr\u00eb default, n\u00eb portalin p\u00ebr mysafir\u00ebt, p\u00ebrdoruesi do t\u00eb shoh\u00eb logon Cisco dhe fraza standarde t\u00eb zakonshme. E gjith\u00eb kjo mund t\u00eb personalizohet dhe madje mund t\u00eb vendoset shikimi i reklamave t\u00eb detyrueshme para se t\u00eb merrni akses.<\/p>\n

      Konfigurimi i qasjes p\u00ebr mysafir\u00ebt mund t\u00eb ndahet n\u00eb 4 hapa kryesor\u00eb: konfigurimi i FortiAP, vendosja e lidhjes midis Cisco ISE dhe FortiAP, krijimi i portalit p\u00ebr mysafir\u00ebt dhe konfigurimi i politikave t\u00eb aksesit.<\/p>\n

      2. Konfigurimi i FortiAP n\u00eb FortiGate<\/h2>\n

      FortiGate \u00ebsht\u00eb kontrolluesi i pikave t\u00eb aksesit dhe t\u00eb gjitha konfigurimet b\u00ebhen n\u00eb t\u00eb. Pikat e aksesit FortiAP mb\u00ebshtesin PoE, k\u00ebshtu q\u00eb sa her\u00eb q\u00eb e lidhni at\u00eb n\u00eb rrjet me Ethernet, mund t\u00eb filloni konfigurimin.<\/p>\n

      1) N\u00eb FortiGate, shkoni te seksioni WiFi & Switch Controller > FortiAP t\u00eb menaxhuar > Krijo t\u00eb re > AP t\u00eb menaxhuar<\/em>. Duke p\u00ebrdorur numrin e ve\u00e7ant\u00eb serial t\u00eb pik\u00ebs s\u00eb aksesit, i cili \u00ebsht\u00eb i sh\u00ebnuar n\u00eb vet\u00eb pik\u00ebn e aksesit, shtoni at\u00eb si objekt. Ose mund t\u00eb zbulohet automatikisht dhe at\u00ebher\u00eb klikoni Autorizo <\/em>me t\u00eb djatht\u00ebn e miut.<\/p>\n

      \"Cisco<\/p>\n

      2) Cil\u00ebsimet e FortiAP mund t\u00eb jen\u00eb si\u00e7 jan\u00eb nga fabrika, p\u00ebr shembull l\u00ebrini ashtu si\u00e7 jan\u00eb n\u00eb screenshot. Fort\u00eb rekomandoj aktivizimin e modit 5 GHz, sepse disa pajisje nuk e mb\u00ebshtesin 2.4 GHz.<\/p>\n

      3) Pastaj n\u00eb seksionin WiFi & Switch Controller > Profile t\u00eb FortiAP > Krijo t\u00eb re <\/em>krijojm\u00eb nj\u00eb profil cil\u00ebsimesh p\u00ebr pik\u00ebn e aksesit (versioni i protokollit 802.11, moda e SSID, frekuenca e kanalit dhe numri i tyre).<\/p>\n

      Shembulli i cil\u00ebsimeve FortiAP\"Cisco\"Cisco<\/p>\n<\/p>\n

      Hapi tjet\u00ebr - krijimi i SSID. Kaloni n\u00eb sked\u00ebn WiFi & Switch Controller > SSIDs > Krijo t\u00eb re > SSID. <\/em>K\u00ebtu nga e r\u00ebnd\u00ebsishmja duhet t\u00eb konfigurohet:<\/p>\n