junos提供了基于本地?cái)?shù)據(jù)庫(kù)的認(rèn)證 和基于外部認(rèn)證服務(wù)器的認(rèn)證兩種方式。
一.local 的認(rèn)證方式， 需要admin在firewall上添加用戶和密碼
set access profile profile1 client user1 firewall-user password user1
set access firewall-authentication pass-through default-profile profile1
set security policies from-zone trust to-zone trust policy auth_policy1 match source-address any
set security policies from-zone trust to-zone trust policy auth_policy1 match destination-address any
set security policies from-zone trust to-zone trust policy auth_policy1 match application junos-ftp
set security policies from-zone trust to-zone trust policy auth_policy1 then permit firewall-authentication pass-through client-match user1
二.external authentication server
2.1 ldap 先配置好ldap server 在device上做如下配置
set access profile ldap_pf authentication-order ldap
set access profile ldap_pf authentication-order password
set access profile ldap_pf ldap-options base-distinguished-name CN=users,DC=screenos,DC=spg,DC=juniper,DC=net <--------------------------需與server配置一致
set access profile ldap_pf ldap-server $ldap_server_ip
set security policies from-zone trust to-zone trust policy auth_policy1 match source-address any
set security policies from-zone trust to-zone trust policy auth_policy1 match destination-address any
set security policies from-zone trust to-zone trust policy auth_policy1 match application junos-ftp
set security policies from-zone trust to-zone trust policy auth_policy1 then permit firewall-authentication pass-through profile ldap_pf
2.2 Radius:
set access profile radius_pf authentication-order radius
set access profile radius_pf authentication-order password
set access profile radius_pf radius-server $radius_server_ip secret xxxx
set security policies from-zone trust to-zone trust policy auth_policy1 match source-address any
set security policies from-zone trust to-zone trust policy auth_policy1 match destination-address any
set security policies from-zone trust to-zone trust policy auth_policy1 match application junos-ftp
set security policies from-zone trust to-zone trust policy auth_policy1 then permit firewall-authentication pass-through profile rasius_pf

創(chuàng)新互聯(lián)是一家以成都網(wǎng)站建設(shè)、網(wǎng)頁(yè)設(shè)計(jì)、品牌設(shè)計(jì)、軟件運(yùn)維、seo優(yōu)化排名、小程序App開(kāi)發(fā)等移動(dòng)開(kāi)發(fā)為一體互聯(lián)網(wǎng)公司。已累計(jì)為成都橡塑保溫等眾行業(yè)中小客戶提供優(yōu)質(zhì)的互聯(lián)網(wǎng)建站和軟件開(kāi)發(fā)服務(wù)。

標(biāo)題名稱：JuniperLDAP和RADIUS
瀏覽路徑：http://jinyejixie.com/article6/ijgiog.html

成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián)，為您提供面包屑導(dǎo)航、手機(jī)網(wǎng)站建設(shè)、微信公眾號(hào)、虛擬主機(jī)、網(wǎng)站排名、標(biāo)簽優(yōu)化

廣告

聲明：本網(wǎng)站發(fā)布的內(nèi)容（圖片、視頻和文字）以用戶投稿、用戶轉(zhuǎn)載內(nèi)容為主，如果涉及侵權(quán)請(qǐng)盡快告知，我們將會(huì)在第一時(shí)間刪除。文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng)，如需處理請(qǐng)聯(lián)系客服。電話：028-86922220；郵箱：631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載，或轉(zhuǎn)載時(shí)需注明來(lái)源： 創(chuàng)新互聯(lián)