IPacketFence-Inkqubo yoLawulo loFikelelo kuMthombo weNethiwekhi

IipaketheFence

Kungekudala Inverse ibhengeze ukukhutshwa kwenguqulelo 8.2 yePacketFence. Kubo bonke abo bafundi bangaziyo okanye bangevanga ngePacketFence singatsho oko Esi sisimahla (GPL v2) simahla, esihambelana nesisombululo sokuthobela uthungelwano (NPC).

Es ukhetho olufanelekileyo xa uzama ukudibanisa iitekhnoloji ezahlukeneyo zokhuseleko kwizixhobo zokugqibela, ezinjenge-antivirus, uthintelo lokungena ngaphakathi, iingxelo zokuba sesichengeni, umsebenzisi okanye inkqubo yokuqinisekisa kunye nokomeleza ukhuseleko kwenethiwekhi yokufikelela.

IPacketFence inokusetyenziselwa ukukhusela ngokufanelekileyo iinethiwekhi ezincinci kunye neenethiwekhi ezinkulu kakhulu.

Kwakhonan Singasebenzisa iarhente, bavumela ukukhangela ukuthobela, ukumiliselwa kunye nokunye iiphelo zokudibanisa kwinethiwekhi yakho. IPacketFence inokuqinisekisa ukuba iiarhente (okanye abathengi) zifakiwe ngexesha lenkqubo yobhaliso kwaye emva koqhagamshelo ngalunye

Phakathi kwezinto eziphambili zokubeka iliso kunye nokulawula isicelo esisifumanayo:

  • Ukulawulwa kwe-VLAN eguqukayo kunye nolawulo lokufikelela olusekwe kwindima
  • Ukufikelela kwendwendwe: yiza nesakho isixhobo (BYOD)
  • Iiprofayili zePortal
  • Iindidi zokudlwengula ezakhelweyo
  • Ubhaliso oluzenzekelayo
  • I-PKI kunye ne-EAP-TLS inkxaso
  • Ukuphelelwa
  • Ulawulo lwezixhobo
  • Umdibaniso womlilo
  • I-bandwidth accounting
  • Izixhobo zenethiwekhi ezidadayo
  • Uqinisekiso Flexible
  • Ukuhlanganiswa kweMicrosoft Active Directory
  • Iindlela zothungelwano
  • Ukuhanjiswa ngokuthe ngcembe
  • I-Hardware ehambelanayo

Ukusuka apho sinokuqaqambisa oko ngePI-acketFence isinika ithuba lokubeka esweni izixhobo ezixhumeke kwinethiwekhi kwaye sikwazi ukulawula ukuhlala kwazo kuyo apho sinokuthi sinciphise ixesha lakho kwinethiwekhi, inani lebhendi oza kuyisebenzisa, sebenzisa imigaqo-nkqubo yeFirewall.

IPacketFence sisisombululo esingeyonjongo esisebenza ngobuninzi bezixhobo zenethiwekhi (ezinentambo okanye ezingenazingcingo) ezinje nge3Com, Aerohive, Brocade, Cisco, Dell / Force10, Enterasys, Extreme Networks, Huawei, Intel, Meru Network, Mojo Networks, Motorola , Netgear, Nortel / Avaya, Ruckus, Ubiquiti, Xirrus, kunye nokuninzi.

Inguqulelo entsha yoHlaziyo 8.2

Olu phuculo lutsha lokukhutshwa luza nezinto ezintsha, kodwa ngaphezulu kwako konke ukulungiswa.

Nangona esa "minor", le nguqulo 8.2 lolona hlaziyo lukhulu, luzisa uninzi lokongezwa kunye nokuphuculwa.

Kwizinto ezintsha ezinokuqaqanjiswa, sinokufumana umthombo omtsha wokuqinisekisa apho «iphasiwedi yosuku» inokusekwa kunye nokuqinisekiswa kwe- "Web Mojo".

Ukongeza, inkxaso yamaqela eseva akwi-Layer 3 kunye neLizwi ngaphezulu kweenethiwekhi ze-IP kunye nee-ACL ezikhuphelayo zotshintsho lwenethiwekhi yeAruba 5400 yongezwa.

Okokugqibela, abaphuhlisi bacela ukuba baqaphele ukuba i-mac ye-wired kunye ne-ethernet-noeap ungqinisiso ludityanisiwe.

Iibugs zilungisiwe: khuphela i-SAML metadata kwipakethe yolawulo, imiba eyahlukeneyo ye-pfdhcp elungisiweyo, "i-DNS" isithuba sobuxoki sisusiwe, kunye nabanye abambalwa.

Ekugqibeleni, Ukusuka kuluhlu lweziphuculo ezikhoyo ngale nguqulo 8.2, sinokuqaqambisa:

  • Ukuphuculwa kweskripthi sokugcina (amathuba amatsha okupakisha eGolang, ukuqala kwakhona kweRsyslog).
  • Ukulungiswa kwakhona kwemithetho ye-IPtables.
  • Sebenzisa i-MySQL backend kukhetho lwe-pfdhcp.
  • Utshintsho lwenziwe ukusuka kwi-4 Gio ukuya kwi-18 Eio (exbioctet) yebhanti ye-bandwidth ephezulu.
  • Iifilitha zotshintsho lwenethiwekhi ngoku zinokusetyenziselwa endaweni yemodyuli yokutshintsha eyenziweyo ngexesha loqhagamshelo lweRadius.
  • Ukuphuculwa kokubanjiswa kweempazamo zoqwalaselo kwifayile yoqwalaselo ye-pfdetect.conf.
  • Amanani e-HAProxy ngoku / var / run anamagama acacileyo.
  • I-Pfdns ngoku isebenzisa ilayibrari esemgangathweni yeGolang.
  • Inkxaso yeCoA yokutshintsha inethiwekhi kweMeraki yongezwa.
  • Ukucoca phambili kweefayile zonxibelelwano kuyaphuculwa.
  • Ukongeza umsebenzi wovavanyo kwinkqubo yokulumkisa ye-SMTP.

Uyifaka njani iPacketFence kwiLinux?

Isicelo isinika ezimbini zokufaka kulwabiwo olwahlukileyo lweLinux, Enye kwifomathi yedebhu kunye nefomathi ye-rpm kule khonkco.

Olunye usasazo sinokusebenzisa ikhowudi yemvelaphi kwaye siqokelele usetyenziso.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.