Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

ื‘ืจื•ื›ื™ื ื”ื‘ืื™ื ืฆื• ื“ื™ ื“ืจื™ื˜ ืคึผืึธืกื˜ืŸ ืื™ืŸ ื“ื™ Cisco ISE ืกืขืจื™ืข. ืœื™ื ืงืก ืฆื• ืึทืœืข ืึทืจื˜ื™ืงืœืขืŸ ืื™ืŸ ื“ืขืจ ืกืขืจื™ืข ื–ืขื ืขืŸ ื’ืขื’ืขื‘ืŸ ืื•ื ื˜ืŸ:

  1. Cisco ISE: ื”ืงื“ืžื”, ืจืขืงื•ื•ื™ืจืขืžืขื ืฅ, ื™ื ืกื˜ืึทืœื™ืจื•ื ื’. ื˜ื™ื™ืœ 1

  2. Cisco ISE: ืงืจื™ื™ื™ื˜ื™ื ื’ ื ื™ืฆืขืจืก, ืึทื“ื™ื ื’ LDAP ืกืขืจื•ื•ืขืจืก, ื™ื ื˜ืึทื’ืจื™ื™ื˜ื™ื ื’ ืžื™ื˜ AD. ื˜ื™ื™ืœ 2

  3. Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

ืื™ืŸ ื“ืขื ืคึผืึธืกื˜ืŸ, ืื™ืจ ื•ื•ืขื˜ ื•ื ื˜ืขืจื˜ื•ืงื  ื–ื™ืš ืื™ืŸ ื’ืึทืกื˜ ืึทืงืกืขืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืึท ืฉืจื™ื˜-ื“ื•ืจืš-ืฉืจื™ื˜ ืคื™ืจืŸ ืฆื• ื™ื ื˜ืึทื’ืจื™ื™ื˜ื™ื ื’ Cisco ISE ืื•ืŸ FortiGate ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ FortiAP, ืึทืŸ ืึทืงืกืขืก ืคื•ื ื˜ ืคื•ืŸ ืคืึธืจื˜ื™ื ืขื˜ (ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ืงื™ื™ืŸ ืžื™ื˜ืœ ื•ื•ืึธืก ืฉื˜ื™ืฆื˜ RADIUS CoA โ€” ื˜ื•ื™ืฉ ืคื•ืŸ ืื•ื™ื˜ืืจื™ื–ืืฆื™ืข).

ืึทื˜ืึทื˜ืฉื˜ ื–ืขื ืขืŸ ืื•ื ื“ื–ืขืจ ืึทืจื˜ื™ืงืœืขืŸ. ืคืึธืจื˜ื™ื ืขื˜ - ืึท ืกืขืœืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื ื•ืฆื™ืง ืžืึทื˜ืขืจื™ืึทืœืก.

ื˜ืึธืŸื: ื˜ืฉืขืง ืคึผื•ื™ื ื˜ ืกืžื‘ ื“ืขื•ื•ื™ืกืขืก ืฉื˜ื™ืฆืŸ ื ื™ืฉื˜ RADIUS CoA.

ื•ื•ื•ื ื“ืขืจืœืขืš ืคื™ืจืขืจืฉืึทืคื˜ ื‘ืืฉืจื™ื™ื‘ื˜ ืื™ืŸ ืขื ื’ืœื™ืฉ ื•ื•ื™ ืฆื• ืฉืึทืคึฟืŸ ืึท ื’ืึทืกื˜ ืึทืงืกืขืก ื ื™ืฆืŸ Cisco ISE ืื•ื™ืฃ ืึท Cisco WLC (Wireless Controller). ื–ืืœ ืก ืคื™ื’ื•ืจ ืขืก ืื•ื™ืก!

1. ื”ืงื“ืžื”

ื’ืึทืกื˜ ืึทืงืกืขืก (ืคึผืึธืจื˜ืึทืœ) ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฆื•ืฉื˜ืขืœืŸ ืึทืงืกืขืก ืฆื• ื“ืขืจ ืื™ื ื˜ืขืจื ืขืฅ ืึธื“ืขืจ ืฆื• ื™ื ืขืจืœืขืš ืจืขืกื•ืจืกืŸ ืคึฟืึทืจ ื’ืขืกื˜ ืื•ืŸ ื ื™ืฆืขืจืก ื•ื•ืึธืก ืื™ืจ ื˜ืึธืŸ ื ื™ืฉื˜ ื•ื•ืขืœืŸ ืฆื• ืœืึธื–ืŸ ืื™ืŸ ื“ื™ื™ืŸ ื”ื™ื’ืข ื ืขืฅ. ืขืก ื–ืขื ืขืŸ 3 ืคึผืจืขื“ืขืคื™ื ืขื“ ื˜ื™ื™ืคึผืก ืคื•ืŸ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ (ื’ืึทืกื˜ ื˜ื•ื™ืขืจ):

  1. ื”ืึธืฆืคึผืึธื˜ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ - ืึทืงืกืขืก ืฆื• ื“ื™ ื ืขืฅ ืื™ื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ืฆื• ื’ืขืกื˜ ืึธืŸ ืœืึธื’ื™ืŸ ื“ืึทื˜ืŸ. ื™ื•ื–ืขืจื– ื–ืขื ืขืŸ ื‘ื›ืœืœ ืคืืจืœืื ื’ื˜ ืฆื• ืึธื ื ืขืžืขืŸ ื“ื™ ืคื™ืจืžืข 'ืก "ื ื•ืฆืŸ ืื•ืŸ ืคึผืจื™ื•ื•ืึทื˜ืงื™ื™ื˜ ืคึผืึธืœื™ื˜ื™ืง" ืื™ื™ื“ืขืจ ืึทืงืกืขืก ื“ื™ ื ืขืฅ.

  2. ื‘ืืฆืืœื˜ืข ื’ืึทืกื˜ ื˜ื•ื™ืขืจ - ืึทืงืกืขืก ืฆื• ื“ื™ ื ืขืฅ ืื•ืŸ ืœืึธื’ื™ืŸ ื“ืึทื˜ืŸ ืžื•ื–ืŸ ื–ื™ื™ืŸ ืืจื•ื™ืก ื“ื•ืจืš ื“ื™ ืคึผืึทื˜ืจืึธืŸ - ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ื’ืึทืกื˜ ืึทืงืึทื•ื ืฅ ืื•ื™ืฃ Cisco ISE.

  3. ื–ื™ืš-ืจืขื’ื™ืกื˜ืจื™ืจื˜ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ - ืื™ืŸ ื“ืขื ืคืึทืœ, ื’ืขืกื˜ ื ื•ืฆืŸ ื™ื’ื–ื™ืกื˜ื™ื ื’ ืœืึธื’ื™ืŸ ื“ืขื˜ืึทื™ืœืก, ืึธื“ืขืจ ืฉืึทืคึฟืŸ ืึท ื—ืฉื‘ื•ืŸ ืคึฟืึทืจ ื–ื™ืš ืžื™ื˜ ืœืึธื’ื™ืŸ ื“ืขื˜ืึทื™ืœืก, ืึธื‘ืขืจ ืคึผืึทื˜ืจืึธืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงื•ื ื’ ืื™ื– ืคืืจืœืื ื’ื˜ ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึทืงืกืขืก ืฆื• ื“ื™ ื ืขืฅ.

ืงื™ื™ืคืœ ืคึผืึธืจื˜ืึทืœืก โ€‹โ€‹ืงืขื ืขืŸ ื–ื™ื™ืŸ ื“ื™ืคึผืœื•ื™ื“ ืื•ื™ืฃ Cisco ISE ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜. ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ืื™ืŸ ื“ื™ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ, ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื•ื•ืขื˜ ื–ืขืŸ ื“ื™ ืกื™ืกืงืึธ ืœืึธื’ืึธ ืื•ืŸ ื ืึธืจืžืึทืœ ืคึผืจืึธืกื˜ ืคืจืึทืกืขืก. ืึทืœืข ื“ืขื ืงืขื ืขืŸ ื–ื™ื™ืŸ ืงืึทืกื˜ืึทืžื™ื™ื–ื“ ืื•ืŸ ืืคื™ืœื• ืฉื˜ืขืœืŸ ืฆื• ื–ืขืŸ ืžืึทื ื“ืึทื˜ืึธืจื™ ืึทื“ืก ืื™ื™ื“ืขืจ ืื™ืจ ื‘ืึทืงื•ืžืขืŸ ืึทืงืกืขืก.

ื’ืึทืกื˜ ืึทืงืกืขืก ืกืขื˜ืึทืคึผ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืฆืขื˜ื™ื™ืœื˜ ืื™ืŸ 4 ื”ื•ื™ืคึผื˜ ืกื˜ืขืคึผืก: ืคืึธืจื˜ื™ืึทืคึผ ืกืขื˜ืึทืคึผ, Cisco ISE ืื•ืŸ ืคืึธืจื˜ื™ืึทืคึผ ืงืึทื ืขืงื˜ื™ื•ื•ื™ื˜ื™, ื’ืึทืกื˜ ื˜ื•ื™ืขืจ ืฉืึทืคื•ื ื’ ืื•ืŸ ืึทืงืกืขืก ืคึผืึธืœื™ื˜ื™ืง ืกืขื˜ืึทืคึผ.

2. ืงืึทื ืคื™ื’ื™ืขืจ ืคืึธืจื˜ื™ืึทืคึผ ืื•ื™ืฃ ืคืึธืจื˜ื™ื’ืึทื˜ืข

FortiGate ืื™ื– ืึทืŸ ืึทืงืกืขืก ืคื•ื ื˜ ืงืึธื ื˜ืจืึธืœืœืขืจ ืื•ืŸ ืึทืœืข ืกืขื˜ื˜ื™ื ื’ืก ื–ืขื ืขืŸ ื’ืขืžืื›ื˜ ืื•ื™ืฃ ืขืก. ืคืึธืจื˜ื™ืึทืคึผ ืึทืงืกืขืก ืคื•ื ืงื˜ืŸ ืฉื˜ื™ืฆืŸ PoE, ืึทื–ื•ื™ ืึทืžืึธืœ ืื™ืจ ื”ืึธื‘ืŸ ืงืึธื ื ืขืงื˜ืขื“ ืขืก ืฆื• ื“ื™ ื ืขืฅ ื“ื•ืจืš ืขื˜ื”ืขืจื ืขื˜, ืื™ืจ ืงืขื ืขืŸ ืึธื ื”ื™ื™ื‘ืŸ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ.

1) ืื•ื™ืฃ FortiGate, ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ WiFi & ืกื•ื•ื™ื˜ืฉ ืงืึธื ื˜ืจืึธืœืœืขืจ> ืžืึทื ืึทื’ืขื“ ืคืึธืจื˜ื™ืึทืคึผืก> ืฉืึทืคึฟืŸ ื ื™ื™ึท> ืžืึทื ืึทื’ืขื“ ืึทืคึผ. ื ื™ืฆืŸ ื“ืขื ืึทืงืกืขืก ืคื•ื ื˜ ืก ื™ื™ื ืฆื™ืง ืกื™ืจื™ืึทืœ ื ื•ืžืขืจ, ื•ื•ืึธืก ืื™ื– ื’ืขื“ืจื•ืงื˜ ืื•ื™ืฃ ื“ื™ ืึทืงืกืขืก ืคื•ื ื˜ ื–ื™ืš, ืœื™ื™ื’ืŸ ืขืก ื•ื•ื™ ืึท ื›ื™ื™ืคืขืฅ. ืึธื“ืขืจ ืขืก ืงืขื ืขืŸ ื•ื•ื™ื™ึทื–ืŸ ื–ื™ืš ืื•ืŸ ื“ืึทืŸ ื“ืจื™ืงืŸ Authorize ื ื™ืฆืŸ ื“ื™ ืจืขื›ื˜ ืžื•ื™ื– ืงื ืขืคึผืœ.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

2) ืคืึธืจื˜ื™ืึทืคึผ ืกืขื˜ื˜ื™ื ื’ืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืขืœื™ืงื™ื™ึทื˜, ืœืžืฉืœ, ืœืึธื–ืŸ ื•ื•ื™ ืื™ืŸ ื“ื™ ืกืงืจืขืขื ืฉืึธื˜. ืื™ืš ืจืขืงืึธืžืขื ื“ื™ืจืŸ ื•ื•ืขื ื“ืŸ ืื•ื™ืฃ ื“ื™ 5 GHz ืžืึธื“ืข, ื•ื•ื™ื™ึทืœ ืขื˜ืœืขื›ืข ื“ืขื•ื•ื™ืกืขืก ื˜ืึธืŸ ื ื™ื˜ ืฉื˜ื™ืฆืŸ 2.4 GHz.

3) ื“ืขืจื ืึธืš ืื™ืŸ ื“ื™ ืงื•ื•ื™ื˜ืœ WiFi & ืกื•ื•ื™ื˜ืฉ ืงืึธื ื˜ืจืึธืœืœืขืจ> ืคืึธืจื˜ื™ืึทืคึผ ืคึผืจืึธืคื™ืœืขืก> ืฉืึทืคึฟืŸ ื ื™ื™ึท ืžื™ืจ ืฉืึทืคึฟืŸ ืึท ืกืขื˜ื˜ื™ื ื’ืก ืคึผืจืึธืคื™ืœ ืคึฟืึทืจ ื“ื™ ืึทืงืกืขืก ืคื•ื ื˜ (ื•ื•ืขืจืกื™ืข 802.11 ืคึผืจืึธื˜ืึธืงืึธืœ, SSID ืžืึธื“ืข, ืงืึทื ืึทืœ ืึธืคื˜ืงื™ื™ึทื˜ ืื•ืŸ ื–ื™ื™ืขืจ ื ื•ืžืขืจ).

ืคืึธืจื˜ื™ืึทืคึผ ืกืขื˜ื˜ื™ื ื’ืก ื‘ื™ื™ึทืฉืคึผื™ืœCisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

4) ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืฉืจื™ื˜ ืื™ื– ืฆื• ืฉืึทืคึฟืŸ ืึท SSID. ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ WiFi & ืกื•ื•ื™ื˜ืฉ ืงืึธื ื˜ืจืึธืœืœืขืจ> SSIDs> ืฉืึทืคึฟืŸ ื ื™ื™ึท> SSID. ื“ืึธ ืคื•ืŸ ื“ื™ ื•ื•ื™ื›ื˜ื™ืง ืื™ื™ื ืขืจ ื–ืึธืœ ื–ื™ื™ืŸ ืงืึทื ืคื™ื’ื™ืขืจื“:

  • ืึทื“ืจืขืก ืคึผืœืึทืฅ ืคึฟืึทืจ ื’ืึทืกื˜ WLAN - IP / ื ืขื˜ืžืึทืกืง

  • RADIUS ืึทืงืึทื•ื ื˜ื™ื ื’ ืื•ืŸ ื–ื™ื›ืขืจ ืฉื˜ืึธืฃ ืงืึทื ืขืงืฉืึทืŸ ืื™ืŸ ื“ื™ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ื™ื•ื•ืข ืึทืงืกืขืก ืคืขืœื“

  • ืžื™ื˜ืœ ื“ืขื˜ืขืงืฉืึทืŸ ืึธืคึผืฆื™ืข

  • SSID ืื•ืŸ ื‘ืจืึธื“ืงืึทืกื˜ SSID ืึธืคึผืฆื™ืข

  • ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืึธื“ืข ืกืขื˜ื˜ื™ื ื’ืก> ืงืึทืคึผื˜ื™ื•ื•ืข ื˜ื•ื™ืขืจ 

  • ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื˜ื•ื™ืขืจ - ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืื•ืŸ ืึทืจื™ื™ึทื ืœื™ื™ื’ืŸ ืึท ืœื™ื ืง ืฆื• ื“ื™ ื‘ืืฉืืคืŸ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ ืคึฟื•ืŸ Cisco ISE ืคึฟื•ืŸ ืฉืจื™ื˜ 20

  • ื‘ืึทื ื™ืฆืขืจ ื’ืจื•ืคืข - ื’ืึทืกื˜ ื’ืจื•ืคืข - ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง - ืœื™ื™ื’ RADIUS ืฆื• Cisco ISE (ื–. 6 ืึทื ื•ื•ืขืจื“ื–)

SSID ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื‘ื™ื™ึทืฉืคึผื™ืœCisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

5) ื“ืขืจื ืึธืš ืื™ืจ ื–ืึธืœ ืžืึทื›ืŸ ื›ึผืœืœื™ื ืื™ืŸ ื“ื™ ืึทืงืกืขืก ืคึผืึธืœื™ื˜ื™ืง ืื•ื™ืฃ FortiGate. ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ ืคึผืึธืœื™ื˜ื™ืง & ืึทื‘ื“ื–ืฉืขืงืฅ > ืคื™ืจืขื•ื•ืึทืœืœ ืคึผืึธืœื™ื˜ื™ืง ืื•ืŸ ืฉืึทืคึฟืŸ ืึท ื”ืขืจืฉืŸ ื•ื•ื™ ื“ืึธืก:

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

3. ืจืึทื“ื™ื•ืก ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ

6) ื’ื™ื™ืŸ ืฆื• ื“ื™ Cisco ISE ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ ืคึผืึธืœื™ื˜ื™ืง > ืคึผืึธืœื™ื˜ื™ืง ืขืœืขืžืขื ื˜ืŸ > ื“ื™ืงืฉืึทื ืขืจื™ื– > ืกื™ืกื˜ืขื > ืจืึทื“ื™ื•ืก > ืจืึทื“ื™ื•ืก ื•ื•ืขื ื“ืึธืจืก > ืœื™ื™ื’. ืื™ืŸ ื“ืขื ืงื•ื•ื™ื˜ืœ, ืžื™ืจ ื•ื•ืขืœืŸ ืœื™ื™ื’ืŸ Fortinet RADIUS ืฆื• ื“ืขืจ ืจืฉื™ืžื” ืคื•ืŸ ื’ืขืฉื˜ื™ืฆื˜ ืคึผืจืึธื˜ืึธืงืึธืœืก, ื•ื•ื™ื™ึทืœ ื›ึผืžืขื˜ ื™ืขื“ืขืจ ืคืึทืจืงื•ื™ืคืขืจ ื”ืื˜ ื–ื™ื™ึทืŸ ืื™ื™ื’ืขื ืข ืกืคึผืขืฆื™ืคื™ืฉ ืึทื˜ืจื™ื‘ื™ื•ืฅ - VSA (ื•ื•ืขื ื“ืึธืจ-ืกืคึผืขืฆื™ืคื™ืฉ ืึทื˜ืจื™ื‘ื™ื•ืฅ).

ื ืจืฉื™ืžื” ืคื•ืŸ Fortinet RADIUS ืึทื˜ืจื™ื‘ื™ื•ืฅ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ื“ืึธ. VSAs ื–ืขื ืขืŸ ืื•ื ื˜ืขืจืฉื™ื™ื“ืŸ ื“ื•ืจืš ื–ื™ื™ืขืจ ื™ื™ื ืฆื™ืง ื•ื•ืขื ื“ืึธืจ ืฉื™ื™ึทืŸ ื ื•ืžืขืจ. ืคืึธืจื˜ื™ื ืขื˜ ื”ืื˜ ื“ืขื ืฉื™ื™ึทืŸ = 12356. ืคื•ืœ ืจืขืฉื™ืžืข ื“ื™ VSA ืื™ื– ืืจื•ื™ืก ื“ื•ืจืš ื“ื™ ื™ืึทื ืึท.

7) ืฉื˜ืขืœืŸ ื“ื™ ื ืึธืžืขืŸ ืคื•ืŸ ื“ื™ ื•ื•ืขืจื˜ืขืจื‘ื•ืš, ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืคืึทืจืงื•ื™ืคืขืจ ืฉื™ื™ึทืŸ (12356) ืื•ืŸ ื“ืจื™ืงืŸ ืคืึธืจืœื™ื™ื’ืŸ.

8) ื ืึธืš ืžื™ืจ ื’ื™ื™ืŸ ืฆื• ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ื ืขื˜ื•ื•ืึธืจืง ื“ื™ื•ื•ื™ื™ืก ืคึผืจืึธืคื™ืœืขืก > ืœื™ื™ื’ ืื•ืŸ ืฉืึทืคึฟืŸ ืึท ื ื™ื™ึทืข ืžื™ื˜ืœ ืคึผืจืึธืคื™ืœ. ืื™ืŸ ื“ื™ RADIUS Dictionaries ืคืขืœื“, ืกืขืœืขืงื˜ื™ืจืŸ ื“ืขื ืคืจื™ืขืจ ื‘ืืฉืืคืŸ Fortinet RADIUS ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ ื“ื™ ืงืึธืึท ืžืขื˜ื”ืึธื“ืก ืฆื• ื ื•ืฆืŸ ืฉืคึผืขื˜ืขืจ ืื™ืŸ ื“ื™ ISE ืคึผืึธืœื™ื˜ื™ืง. ืื™ืš ืื•ื™ืกื“ืขืจื•ื•ื™ื™ืœื˜ RFC 5176 ืื•ืŸ Port Bounce (ืฉืึทื˜ื“ืึทื•ืŸ / ืงื™ื™ืŸ ืฉืึทื˜ื“ืึทื•ืŸ ื ืขืฅ ืฆื•ื‘ื™ื ื“) ืื•ืŸ ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ื•ื•ืึทืกืึทืก: 

ืคืึธืจื˜ื™ื ืขื˜-ืึทืงืกืขืก-ืคึผืจืึธืคื™ืœ = ืœื™ื™ืขื ืขืŸ-ืฉืจื™ื™ึทื‘ืŸ

ืคืึธืจื˜ื™ื ืขื˜-ื’ืจื•ืคึผืข-ื ืึธืžืขืŸ = fmg_faz_admins

9) ื•ื•ื™ื™ึทื˜ืขืจ, ืœื™ื™ื’ืŸ FortiGate ืคึฟืึทืจ ืงืึทื ืขืงื˜ื™ื•ื•ื™ื˜ื™ ืžื™ื˜ ISE. ืฆื• ื˜ืึธืŸ ื“ืึธืก, ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ื ืขื˜ื•ื•ืึธืจืง ืจืขืกืึธื•ืจืกืขืก > ื ืขื˜ื•ื•ืึธืจืง ื“ื™ื•ื•ื™ื™ืก ืคึผืจืึธื•ืคื™ื™ืœื– > ืœื™ื™ื’. ืคืขืœื“ืขืจ ืฆื• ื˜ื•ื™ืฉืŸ ื ืึธืžืขืŸ, ืคืึทืจืงื•ื™ืคืขืจ, RADIUS ื“ื™ืงืฉืึทื ืขืจื™ื– (IP ืึทื“ืจืขืก ืื™ื– ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืคืึธืจื˜ื™ื’ืึทื˜ืข, ื ื™ืฉื˜ ืคืึธืจื˜ื™ืึทืคึผ).

ื‘ื™ื™ึทืฉืคึผื™ืœ ืคื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจ RADIUS ืคึฟื•ืŸ ื“ื™ ISE ื–ื™ื™ึทื˜Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

10) ื ืึธืš ื“ืขื, ืื™ืจ ื–ืึธืœ ืงืึทื ืคื™ื’ื™ืขืจ RADIUS ืื•ื™ืฃ ื“ื™ FortiGate ื–ื™ื™ึทื˜. ืื™ืŸ ื“ื™ FortiGate ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“, ื’ื™ื™ืŸ ืฆื• ื‘ืึทื ื™ืฆืขืจ & ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ> RADIUS ืกืขืจื•ื•ืขืจืก> ืฉืึทืคึฟืŸ ื ื™ื™ึท. ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ื ืึธืžืขืŸ, IP ืึทื“ืจืขืก ืื•ืŸ ืฉืขืจื“ ืกื•ื“ (ืคึผืึทืจืึธืœ) ืคื•ืŸ ื“ื™ ืคืจื™ืขืจื“ื™ืงืข ืคึผืึทืจืึทื’ืจืึทืฃ. ื•ื•ื™ื™ึทื˜ืขืจ ื’ื™ื˜ ื˜ืขืกื˜ ื‘ืึทื ื™ืฆืขืจ ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ืื•ืŸ ืึทืจื™ื™ึทืŸ ืงื™ื™ืŸ ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคึผื•ืœื“ ื“ื•ืจืš RADIUS (ืœืžืฉืœ, ืึท ื”ื™ื’ืข ื‘ืึทื ื™ืฆืขืจ ืื•ื™ืฃ ื“ื™ Cisco ISE).

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

11) ืœื™ื™ื’ ืึท RADIUS ืกืขืจื•ื•ืขืจ ืฆื• ื“ื™ ื’ืึทืกื˜-ื’ืจื•ืคึผืข (ืื•ื™ื‘ ืขืก ื˜ื•ื˜ ื ื™ืฉื˜ ืขืงืกื™ืกื˜ื™ืจืŸ) ืื•ืŸ ืึท ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืžืงื•ืจ ืคื•ืŸ ื ื™ืฆืขืจืก.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

12) ื“ื• ื–ืืœืกื˜ ื ื™ืฉื˜ ืคืึทืจื’ืขืกืŸ ืฆื• ืœื™ื™ื’ืŸ ื“ื™ ื’ืึทืกื˜-ื’ืจื•ืคึผืข ืฆื• ื“ื™ SSID ืžื™ืจ ื‘ืืฉืืคืŸ ืคืจื™ืขืจ ืื™ืŸ ืฉืจื™ื˜ 4.

4. ื‘ืึทื ื™ืฆืขืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ

13) ืึธืคึผื˜ื™ืึธื ืึทืœืœื™, ืื™ืจ ืงืขื ืขืŸ ืึทืจื™ื™ึทื ืคื™ืจ ืึท ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืฆื• ื“ื™ ISE ื’ืึทืกื˜ ื˜ื•ื™ืขืจ ืึธื“ืขืจ ืฉืึทืคึฟืŸ ืึท ื–ื™ืš-ื’ืขื—ืชืžืขื˜ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืื™ืŸ ื“ื™ ืงื•ื•ื™ื˜ืœ ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก> ื’ืึทืกื˜ ืึทืงืกืขืก> ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข> Certification> ืกื™ืกื˜ืขื ืกืขืจื˜ื™ืคื™ืงืึทืฅ.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

14) ื ืึธืš ืื™ืŸ ื˜ืึทื‘ ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก > ื’ืึทืกื˜ ืึทืงืกืขืก > ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ื’ืจื•ืคึผืขืก > ื‘ืึทื ื™ืฆืขืจ ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ื’ืจื•ืคึผืขืก > ืœื™ื™ื’ ืฉืึทืคึฟืŸ ืึท ื ื™ื™ึทืข ื‘ืึทื ื™ืฆืขืจ ื’ืจื•ืคึผืข ืคึฟืึทืจ ื’ืึทืกื˜ ืึทืงืกืขืก, ืึธื“ืขืจ ื ื•ืฆืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืึธื ืขืก.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

15) ื•ื•ื™ื™ื˜ืขืจ ืื™ืŸ ื“ื™ ืงื•ื•ื™ื˜ืœ ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ืฉืึทืคึฟืŸ ื’ืึทืกื˜ ื™ื•ื–ืขืจื– ืื•ืŸ ืœื™ื™ื’ืŸ ื–ื™ื™ ืฆื• ื“ื™ ื’ืจื•ืคึผืขืก ืคื•ืŸ ื“ื™ ืคืจื™ืขืจื“ื™ืงืข ืคึผืึทืจืึทื’ืจืึทืฃ. ืื•ื™ื‘ ืื™ืจ ื•ื•ื™ืœืŸ ืฆื• ื ื•ืฆืŸ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืึทืงืึทื•ื ืฅ, ื”ืึธืคึผืงืขืŸ ื“ืขื ืฉืจื™ื˜.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

16) ื ืึธืš ืžื™ืจ ื’ื™ื™ืŸ ืฆื• ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก> ื’ืึทืกื˜ ืึทืงืกืขืก> ืื™ื“ืขื ื˜ื™ื˜ืขื˜> ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ืžืงื•ืจ ืกื™ืงื•ื•ืึทื ืก > ื’ืึทืกื˜ ื˜ื•ื™ืขืจ ืกื™ืงื•ื•ืึทื ืก - ื“ืึธืก ืื™ื– ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืกื™ืงื•ื•ืึทื ืก ืคึฟืึทืจ ื’ืึทืกื˜ ื™ื•ื–ืขืจื–. ืื•ืŸ ืื™ืŸ ื“ื™ ืคืขืœื“ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื–ื•ื›ืŸ ืจืฉื™ืžื” ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืกื“ืจ.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

17) ืฆื• ื’ืขื‘ื  ืฆื• ื•ื•ื™ืกืŸ ื’ืขืกื˜ ืžื™ื˜ ืึท ืื™ื™ืŸ-ืฆื™ื™ึทื˜ ืคึผืึทืจืึธืœ, ืื™ืจ ืงืขื ืขืŸ ืงืึทื ืคื™ื’ื™ืขืจ SMS ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ืึธื“ืขืจ ืึท ืกืžื˜ืคึผ ืกืขืจื•ื•ืขืจ ืคึฟืึทืจ ื“ืขื ืฆื•ื•ืขืง. ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก> ื’ืึทืกื˜ ืึทืงืกืขืก> ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข> ืกืžื˜ืคึผ ืกืขืจื•ื•ื™ืจืขืจ ืึธื“ืขืจ SMS ื’ืึทื˜ืขื•ื•ื™ื™ึท ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ืคึฟืึทืจ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก. ืื™ืŸ ื“ืขื ืคืึทืœ ืคื•ืŸ ืึท SMTP ืกืขืจื•ื•ืขืจ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืฉืึทืคึฟืŸ ืึท ื—ืฉื‘ื•ืŸ ืคึฟืึทืจ ื“ื™ ISE ืื•ืŸ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ื“ืึทื˜ืŸ ืื™ืŸ ื“ืขื ืงื•ื•ื™ื˜ืœ.

18) ืคึฟืึทืจ SMS ื ืึธื•ื˜ืึทืคืึทืงื™ื™ืฉืึทื ื–, ื ื•ืฆืŸ ื“ื™ ืฆื•ื ืขืžืขืŸ ืงื•ื•ื™ื˜ืœ. ISE ื”ืื˜ ืคืึทืจ-ืื™ื ืกื˜ืึทืœื™ืจืŸ ืคึผืจืึธื•ืคื™ื™ืœื– ืคื•ืŸ ืคืึธืœืงืก SMS ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื–, ืึธื‘ืขืจ ืขืก ืื™ื– ื‘ืขืกืขืจ ืฆื• ืžืึทื›ืŸ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข. ื ื™ืฆืŸ ื“ื™ ืคึผืจืึธื•ืคื™ื™ืœื– ื•ื•ื™ ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ ืคื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ SMS Email Gatewayื™ ืึธื“ืขืจ SMS ื”ื˜ื˜ืคึผ ืึทืคึผื™.

ืึท ื‘ื™ื™ืฉืคึผื™ืœ ืคื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึท SMTP ืกืขืจื•ื•ืขืจ ืื•ืŸ ืึท SMS ื’ื™ื™ื˜ื•ื•ื™ื™ ืคึฟืึทืจ ืึท ืื™ื™ืŸ-ืฆื™ื™ึทื˜ ืคึผืึทืจืึธืœCisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

5. ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ

19) ื•ื•ื™ ื“ืขืจืžืื ื˜ ืื™ืŸ ื“ื™ ืึธื ื”ื™ื™ื‘, ืขืก ื–ืขื ืขืŸ 3 ื˜ื™ื™ืคึผืก ืคื•ืŸ ืคืึทืจ-ืื™ื ืกื˜ืึทืœื™ืจืŸ ื’ืึทืกื˜ ืคึผืึธืจื˜ืึทืœืก: ื”ืึธืฆืคึผืึธื˜, ื‘ืืฆืืœื˜ืข, ื–ื™ืš-ืจืขื’ื™ืกื˜ืจื™ืจื˜. ืื™ืš ืคึฟืึธืจืฉืœืึธื’ืŸ ื˜ืฉื•ื–ื™ื ื’ ื“ื™ ื“ืจื™ื˜ ืึธืคึผืฆื™ืข, ื•ื•ื™ื™ึทืœ ืขืก ืื™ื– ื“ื™ ืžืขืจืกื˜ ืคึผืจืึธืกื˜. ืึธื“ืขืจ ื•ื•ืขื’, ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ื–ืขื ืขืŸ ืœืึทืจื’ืขืœื™ ื™ื™ื“ืขื ื™ืงืึทืœ. ืึทื–ื•ื™ ืœืึธื–ืŸ ืื•ื ื“ื– ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ. ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก> ื’ืึทืกื˜ ืึทืงืกืขืก> ืคึผืึธืจื˜ืึทืœืก โ€‹โ€‹& ืงืึทืžืคึผืึธื•ื ืึทื ืฅ> ื’ืึทืกื˜ ืคึผืึธืจื˜ืึทืœืก> ื–ื™ืš-ืจืขื’ื™ืกื˜ืจื™ืจื˜ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ (ืคืขืœื™ืงื™ื™ึทื˜). 

20) ื•ื•ื™ื™ึทื˜ืขืจ, ืื™ืŸ ื“ื™ ื˜ื•ื™ืขืจ ื‘ืœืึทื˜ ืงื•ืกื˜ืึธืžื™ื–ืึทื˜ื™ืึธืŸ ืงื•ื•ื™ื˜ืœ, ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ "View ืื™ืŸ ืจื•ืกื™ืฉ - ืจื•ืกื™ืฉ", ืึทื–ื•ื™ ืึทื– ื“ืขืจ ื˜ื•ื™ืขืจ ืื™ื– ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ืจื•ืกื™ืฉ. ืื™ืจ ืงืขื ืขืŸ ื˜ื•ื™ืฉืŸ ื“ื™ ื˜ืขืงืกื˜ ืคื•ืŸ ืงื™ื™ืŸ ืงื•ื•ื™ื˜ืœ, ืœื™ื™ื’ืŸ ื“ื™ื™ืŸ ืœืึธื’ืึธ ืื•ืŸ ืžืขืจ. ืื•ื™ืฃ ื“ื™ ืจืขื›ื˜ ืื™ืŸ ื“ื™ ื•ื•ื™ื ืงืœ ืื™ื– ืึท ืคืึธืจื•ื™ืกื™ืงืข ื•ื•ื™ื™ึทื–ื•ื ื’ ืคื•ืŸ ื“ื™ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ ืคึฟืึทืจ ืึท ื‘ืขืกืขืจ ืžื™ื™ื ื•ื ื’.

ื‘ื™ื™ึทืฉืคึผื™ืœ ืคื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ืึท ื’ืึทืกื˜ ื˜ื•ื™ืขืจ ืžื™ื˜ ื–ื™ืš-ืจืขื’ื™ืกื˜ืจืึทืฆื™ืขCisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

21) ื“ืจื™ืงื˜ ืื•ื™ืฃ ืึท ืคืจืึทื–ืข ื˜ื•ื™ืขืจ ืคึผืจื•ื‘ื™ืจืŸ URL ืื•ืŸ ื ืึธื›ืžืึทื›ืŸ ื“ืขื ื˜ื•ื™ืขืจ URL ืฆื• ื“ื™ SSID ืื•ื™ืฃ ื“ื™ ืคืึธืจื˜ื™ื™ื’ืึทื˜ืข ืื™ืŸ ืฉืจื™ื˜ 4. ืžื•ืกื˜ืขืจ URL https://10.10.30.38:8433/portal/PortalSetup.action?portal=deaaa863-1df0-4198-baf1-8d5b690d4361

ืฆื• ื•ื•ื™ื™ึทื–ืŸ ื“ื™ื™ืŸ ืคืขืœื“, ืื™ืจ ืžื•ื–ืŸ ืฆื•ืคึฟืขืœื™ืงืขืจ ื“ื™ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืฆื• ื“ื™ ื’ืึทืกื˜ ื˜ื•ื™ืขืจ, ื–ืขืŸ ืฉืจื™ื˜ 13.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

22) ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงื•ื•ื™ื˜ืœ ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก > ื’ืึทืกื˜ ืึทืงืกืขืก > ืคึผืึธืœื™ื˜ื™ืง ืขืœืขืžืขื ื˜ืŸ > ืจืขื–ื•ืœื˜ืึทื˜ืŸ > ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืคึผืจืึธืคื™ืœืขืก > ืœื™ื™ื’ ืฆื• ืฉืึทืคึฟืŸ ืึท ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืคึผืจืึธืคื™ืœ ืื•ื ื˜ืขืจ ื“ื™ ืคืจื™ืขืจ ื‘ืืฉืืคืŸ ื ืขืฅ ืžื™ื˜ืœ ืคึผืจืึธืคื™ืœ.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

23) ืื™ืŸ ืงื•ื•ื™ื˜ืœ ืึทืจื‘ืขื˜ ืกืขื ื˜ืขืจืก> ื’ืึทืกื˜ ืึทืงืกืขืก> ืคึผืึธืœื™ื˜ื™ืง ืกืขืฅ ืจืขื“ืึทื’ื™ืจืŸ ื“ื™ ืึทืงืกืขืก ืคึผืึธืœื™ื˜ื™ืง ืคึฟืึทืจ WiFi ื™ื•ื–ืขืจื–.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

24) ืœืึธืžื™ืจ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืฆื• ื“ื™ ื’ืึทืกื˜ SSID. ืขืก ืžื™ื“ ืจื™ื“ืขืจืขืงืฅ ืžื™ืจ ืฆื• ื“ื™ ืœืึธื’ื™ืŸ ื‘ืœืึทื˜. ื“ืึธ ืื™ืจ ืงืขื ืขืŸ ืงืœืึธืฅ ืื™ืŸ ืžื™ื˜ ื“ื™ ื’ืึทืกื˜ ื—ืฉื‘ื•ืŸ ื‘ืืฉืืคืŸ ืœืึธื•ืงืึทืœื™ ืื•ื™ืฃ ื“ื™ ISE, ืึธื“ืขืจ ืคืึทืจืฉืจื™ื™ึทื‘ืŸ ื•ื•ื™ ืึท ื’ืึทืกื˜ ื‘ืึทื ื™ืฆืขืจ.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

25) ืื•ื™ื‘ ืื™ืจ ื”ืึธื˜ ืื•ื™ืกื“ืขืจื•ื•ื™ื™ืœื˜ ื“ื™ ื–ื™ืš-ืจืขื’ื™ืกื˜ืจืึทืฆื™ืข ืึธืคึผืฆื™ืข, ืื™ื™ืŸ-ืฆื™ื™ึทื˜ ืœืึธื’ื™ืŸ ื“ืึทื˜ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืฉื™ืงื˜ ื“ื•ืจืš ืคึผืึธืกื˜, ื“ื•ืจืš SMS ืึธื“ืขืจ ื’ืขื“ืจื•ืงื˜.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

26) ืื™ืŸ ื“ื™ RADIUS> ืœืขื‘ืŸ ืœืึธื’ืก ืงื•ื•ื™ื˜ืœ ืื•ื™ืฃ ื“ื™ Cisco ISE, ืื™ืจ ื•ื•ืขื˜ ื–ืขืŸ ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืœืึธื’ื™ืŸ ืœืึธื’ืก.

Cisco ISE: ืงืึทื ืคื™ื’ื™ืขืจ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ ืคืึธืจื˜ื™ืึทืคึผ. ื˜ื™ื™ืœ 3

6. ืžืกืงื ื

ืื™ืŸ ื“ืขื ืœืึทื ื’ ืึทืจื˜ื™ืงืœ, ืžื™ืจ ื”ืึธื‘ืŸ ื”ืฆืœื—ื” ืงืึทื ืคื™ื’ื™ืขืจื“ ื’ืึทืกื˜ ืึทืงืกืขืก ืื•ื™ืฃ Cisco ISE, ื•ื•ื• FortiGate ืืงื˜ืŸ ื•ื•ื™ ื“ื™ ืึทืงืกืขืก ืคื•ื ื˜ ืงืึธื ื˜ืจืึธืœืœืขืจ, ืื•ืŸ FortiAP ืืงื˜ืŸ ื•ื•ื™ ื“ื™ ืึทืงืกืขืก ืคื•ื ื˜. ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืžื™ืŸ ืคื•ืŸ ื ื™ื˜-ื˜ืจื™ื•ื•ื™ืึทืœ ื™ื ืึทื’ืจื™ื™ืฉืึทืŸ, ื•ื•ืึธืก ืึทืžืึธืœ ื•ื•ื™ื“ืขืจ ืคึผืจืึธื•ื•ืขืก ื“ื™ ื•ื•ื™ื™ื“ืกืคึผืจืขื“ ื ื•ืฆืŸ ืคื•ืŸ ISE.

ืฆื• ืคึผืจื•ื‘ื™ืจืŸ Cisco ISE, ืงืึธื ื˜ืึทืงื˜ ืจื•ื ื’ืื•ืŸ ืื•ื™ืš ื‘ืœื™ื™ื‘ืŸ ื˜ื•ื ื“ ืื™ืŸ ืื•ื ื“ื–ืขืจ ื˜ืฉืึทื ืึทืœื– (ื˜ืขืœืขื’ืจืึทื, facebook, VK, TS ืœื™ื™ื–ื•ื ื’ ื‘ืœืึธื’, Yandex Zen).

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’