{"id":97567,"date":"2020-10-19T14:42:54","date_gmt":"2020-10-19T12:42:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-nastrojka-gostevogo-dostupa-na-fortiap-chast-3"},"modified":"2020-10-19T14:42:54","modified_gmt":"2020-10-19T12:42:54","slug":"cisco-ise-nastrojka-gostevogo-dostupa-na-fortiap-chast-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-nastrojka-gostevogo-dostupa-na-fortiap-chast-3","title":{"rendered":"Cisco ISE: Konfigurimi i qasjes s\u00eb mysafir\u00ebve n\u00eb FortiAP. Pjesa 3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Cisco<\/p>\n

Mir\u00eb se erdh\u00ebt n\u00eb publikimin e tret\u00eb t\u00eb ciklit t\u00eb artikujve kushtuar Cisco ISE. Linket p\u00ebr t\u00eb gjith\u00eb artikujt n\u00eb cik\u00ebl jan\u00eb t\u00eb listuara m\u00eb posht\u00eb:<\/p>\n

    \n
  1. \n

    Cisco ISE: Hyrje, k\u00ebrkesat, instalimi. Pjesa 1<\/a><\/noindex><\/p>\n<\/li>\n

  2. \n

    Cisco ISE: Krijimi i p\u00ebrdoruesve, shtimi i server\u00ebve LDAP, integrimi me AD. Pjesa 2<\/a><\/noindex><\/p>\n<\/li>\n

  3. \n

    Cisco ISE: Konfigurimi i qasjes s\u00eb mysafir\u00ebve n\u00eb FortiAP. Pjesa 3<\/a><\/noindex><\/p>\n<\/li>\n<\/ol>\n

    N\u00eb k\u00ebt\u00eb publikim, do t\u00eb zhytni n\u00eb aksesin e mysafir\u00ebve, si dhe nj\u00eb udh\u00ebzues hap pas hapi p\u00ebr integrimin e Cisco ISE dhe FortiGate p\u00ebr konfigurimin e FortiAP \u2014 pik\u00ebs s\u00eb aksesit nga Fortinet (n\u00eb p\u00ebrgjith\u00ebsi p\u00ebrshtatet \u00e7do pajisje q\u00eb mb\u00ebshtet RADIUS CoA <\/strong>\u2014 Ndryshimi i Autorizimit).<\/p>\n

    S\u00eb fundi, po bashkangjis artikujt tan\u00eb Fortinet \u2014 p\u00ebrmbledhje materiale t\u00eb dobishme<\/a><\/noindex>.<\/p>\n

    Sh\u00ebnim<\/em><\/strong>: Pajisjet Check Point SMB nuk mb\u00ebshtesin RADIUS CoA.<\/p>\n

    Nj\u00eb artikull i shk\u00eblqyer nj\u00eb udh\u00ebzues<\/a><\/noindex> n\u00eb anglisht p\u00ebrshkruan se si t\u00eb krijoni qasje p\u00ebr mysafir\u00eb duke p\u00ebrdorur Cisco ISE n\u00eb Cisco WLC (Kryesori Wireless). Le t\u00eb kuptojm\u00eb!<\/p>\n

    1. Hyrje<\/h2>\n

    Qasja e mysafir\u00ebve (portali) lejon ofrimin e aksesit n\u00eb Internet ose p\u00ebr burimet e brendshme p\u00ebr mysafir\u00ebt dhe p\u00ebrdoruesit q\u00eb nuk d\u00ebshironi t'i lejoni n\u00eb rrjetin tuaj t\u00eb brendsh\u00ebm. Ekzistojn\u00eb 3 tipe t\u00eb paracaktuar t\u00eb portalit t\u00eb mysafir\u00ebve (Guest portal):<\/p>\n

      \n
    1. \n

      Hotspot Guest portal \u2014 akses n\u00eb rrjet p\u00ebr mysafir\u00ebt jepet pa t\u00eb dh\u00ebna hyrjeje. Zakonisht, p\u00ebrdoruesit k\u00ebrkohet t\u00eb pranojn\u00eb \u201cPolitik\u00ebn e p\u00ebrdorimit dhe privat\u00ebsis\u00eb\u201d t\u00eb kompanis\u00eb para se t\u00eb fitojn\u00eb akses n\u00eb rrjet.<\/p>\n<\/li>\n

    2. \n

      Sponsored-Guest portal \u2014 akses n\u00eb rrjet dhe t\u00eb dh\u00ebnat p\u00ebr hyrje duhet t\u00eb jepen nga sponsori \u2014 p\u00ebrdoruesi, p\u00ebrgjegj\u00ebs p\u00ebr krijimin e akount\u00ebve t\u00eb mysafir\u00ebve n\u00eb Cisco ISE.<\/p>\n<\/li>\n

    3. \n

      Self-Registered Guest portal \u2014 n\u00eb k\u00ebt\u00eb rast, mysafir\u00ebt p\u00ebrdorin t\u00eb dh\u00ebna ekzistuese p\u00ebr hyrje, ose krijojn\u00eb vet\u00eb nj\u00eb akount me t\u00eb dh\u00ebna p\u00ebr hyrje, megjithat\u00eb k\u00ebrkohet miratimi i sponsorit p\u00ebr t\u00eb fituar akses n\u00eb rrjet.<\/p>\n<\/li>\n<\/ol>\n

      N\u00eb Cisco ISE mund t\u00eb implementohen shum\u00eb portale n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb. Si parazgjedhje, n\u00eb portalin e mysafir\u00ebve, p\u00ebrdoruesi do t\u00eb shoh\u00eb logon Cisco dhe frazat standarde t\u00eb zakonshme. T\u00eb gjitha k\u00ebto mund t\u00eb personalizohen dhe madje t\u00eb vendoset shfaqja e reklamave t\u00eb detyrueshme para se t\u00eb fitohet akses.<\/p>\n

      Konfigurimi i aksesit p\u00ebr mysafir\u00eb mund t\u00eb ndahet n\u00eb 4 faza kryesore: konfigurimi i FortiAP, krijimi i lidhjes midis Cisco ISE dhe FortiAP, krijimi i portalit p\u00ebr mysafir\u00eb dhe konfigurimi i politik\u00ebs s\u00eb aksesit.<\/p>\n

      2. Konfigurimi i FortiAP n\u00eb FortiGate<\/h2>\n

      FortiGate \u00ebsht\u00eb nj\u00eb kontrollor i pikave t\u00eb aksesit dhe t\u00eb gjitha konfigurimet b\u00ebhen aty. Pik\u00ebt e aksesit FortiAP mb\u00ebshtesin PoE, k\u00ebshtu q\u00eb sapo ta lidhni n\u00eb rrjet p\u00ebrmes Ethernet-it, mund t\u00eb filloni konfigurimin.<\/p>\n

      1) N\u00eb FortiGate, shkoni n\u00eb sked\u00ebn WiFi & Switch Controller > Managed FortiAPs > Create New > Managed AP.<\/em>Duke p\u00ebrdorur numrin e seri unike t\u00eb pik\u00ebs s\u00eb qasjes, e cila \u00ebsht\u00eb e renditur n\u00eb vet\u00eb pik\u00ebn e qasjes, shtoni at\u00eb si nj\u00eb objekt. Ose mund t\u00eb zbuloni automatikisht dhe pastaj klikoni Autorizo <\/em>me klikimin e djatht\u00eb t\u00eb mausit.<\/p>\n

      \"Cisco<\/p>\n

      2) Cil\u00ebsimet e FortiAP mund t\u00eb jen\u00eb n\u00eb parazgjedhje; p\u00ebr shembull, l\u00ebreni si\u00e7 \u00ebsht\u00eb n\u00eb skrin. Rrall\u00eb rekomandoj q\u00eb t\u00eb aktivizoni modalitetin 5 GHz, pasi disa pajisje nuk mb\u00ebshtesin 2.4 GHz.<\/p>\n

      3) M\u00eb pas, n\u00eb sked\u00ebn WiFi & Switch Controller > FortiAP Profiles > Create New <\/em>ne krijojm\u00eb nj\u00eb profil konfigurimi p\u00ebr pik\u00ebn e aksesit (versioni i protokollit 802.11, modaliteti SSID, frekuenca e kanalit dhe numri i tyre).<\/p>\n

      Shembujt e konfigurimeve FortiAP\"Cisco\"Cisco<\/p>\n<\/p>\n

      4) Hapi tjet\u00ebr \u2014 krijimi i SSID. Shkoni n\u00eb sked\u00ebn WiFi & Switch Controller > SSIDs > Create New > SSID. <\/em>K\u00ebtu, nga t\u00eb r\u00ebnd\u00ebsishmet, duhet t\u00eb konfigurohet:<\/p>\n