Shulou(Shulou.com)06/02 Report--

Pre-installed system: user name: SWMaster password: Changeme123

Premise download

First, install SQL database

The steps are as follows

Enter the product key

Check to accept the license terms

Product update check

Check the installation environment

Set up the installation role

Function selection

Installation rules

Keep the default instance configuration

Check disk space requirements

Server configuration

SQL

Server configuration specified service account

Configure database authentication mode

Error report

Check the installation environment

Prepare for installation

Complete the installation

Second, install agile

Open the Agile Controller file and click run installation

Accept the license agreement

Select installation method

Check the installation environment

Configure the IP address of Agile Controller

Configure system parameters (such as NTP, etc.)

Configure database parameters

Installation

Complete the installation

Running

3. Configure Agile Controller

Log in

Modify

Ask for help

View the appropriate scene configuration

Internal users need to be authenticated when they connect to the network, and the network equipment is used as the authentication point.

Agile controller

SM: network administrators through web

SC: network connections authenticate with network devices in a certain way

Admission control

Pre-authentication domain: directly accessible

Isolation domain: the client scans the device securely

Domain after authentication: resources can be accessed after authentication

Visitor management: it is impossible for accounts to exist statically

Registration-approval-Distribution-Certification-Audit-cancellation

Account application-user authentication-audit and cancellation

Business entourage: no matter where the user accesses, the identity remains the same and the access resources remain unchanged at the time of authentication.

1. Define security group (role) dynamic type: specific user for authorization policy, static type: fixed IP address or network segment

2. Deploy the group policy:

3. Automatic operation of the system: 1. Authentication; authorization; execution

Business choreography: define traffic policies and check devices

802.1X authentication messages use multicast messages. For access, you need to enable transparent transmission of multicast messages.

When will quarantine be adopted?

Display radius-server configuration template huawei View radius template

Authorization server: radius server can only be authenticated and billed

1. Add resources

2. Define the authorization result (isolate domain vlan60, domain dynamic ACL after authentication, allow access to resources, deny access to resources)

3. Define authentication rules (define multiple authentication rules)

4. Define authorization rules (define multiple authorization rules, first isolate the domain;)

MAC Bypass:

Resources > Terminal > Terminal list > device Group > add > add device mac address

Define MAC bypass authentication rules: MAC bypass > access device group > terminal device group

Define MAC bypass authorization rules: MAC bypass > access device group > terminal device group > authorization result

Define MAC bypass authorization rules: MAC bypass > access device group > authorization result > deny access

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.