{"id":21628,"date":"2024-12-11T15:59:55","date_gmt":"2024-12-11T08:59:55","guid":{"rendered":"https:\/\/thegioifirewall.com\/?p=21073"},"modified":"2025-03-24T07:27:20","modified_gmt":"2025-03-24T07:27:20","slug":"huong-dan-cau-hinh-ldap-servers-tren-firewall-fortinet","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/huong-dan-cau-hinh-ldap-servers-tren-firewall-fortinet\/","title":{"rendered":"H\u01af\u1edaNG D\u1eaaN C\u1ea4U H\u00ccNH LDAP SERVERS TR\u00caN FIREWALL FORTINET"},"content":{"rendered":"\n
    \n
  1. LDAP l\u00e0 g\u00ec?<\/strong><\/li>\n<\/ol>\n\n\n\n

    LDAP (Lightweight Directory Access Protocol) l\u00e0 m\u1ed9t giao th\u1ee9c \u1ee9ng d\u1ee5ng cho ph\u00e9p truy c\u1eadp v\u00e0 qu\u1ea3n l\u00fd c\u00e1c c\u1ea5u tr\u00fac th\u01b0 m\u1ee5c. C\u1ea5u tr\u00fac th\u01b0 m\u1ee5c c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c hi\u1ec3u l\u00e0 m\u1ed9t t\u1eadp h\u1ee3p c\u00e1c \u0111\u1ed1i t\u01b0\u1ee3ng (nh\u01b0 ng\u01b0\u1eddi d\u00f9ng, nh\u00f3m ng\u01b0\u1eddi d\u00f9ng) \u0111\u01b0\u1ee3c s\u1eafp x\u1ebfp theo m\u00f4 h\u00ecnh ph\u00e2n c\u1ea5p logic, v\u1edbi m\u1ed7i \u0111\u1ed1i t\u01b0\u1ee3ng mang theo c\u00e1c thu\u1ed9c t\u00ednh ho\u1eb7c \u0111\u1eb7c \u0111i\u1ec3m ri\u00eang.<\/p>\n\n\n\n

    LDAP \u0111\u01a1n gi\u1ea3n l\u00e0 n\u01a1i l\u01b0u tr\u1eef th\u00f4ng tin v\u1ec1 User v\u00e0 Group User. Fortigate s\u1ebd k\u1ebft n\u1ed1i \u0111\u1ebfn LDAP Server \u0111\u1ec3 truy xu\u1ea5t c\u00e1c th\u00f4ng tin n\u00e0y, ph\u1ee5c v\u1ee5 cho vi\u1ec7c thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch t\u01b0\u1eddng l\u1eeda ho\u1eb7c c\u1ea5u h\u00ecnh k\u1ebft n\u1ed1i VPN, t\u00f9y theo nhu c\u1ea7u c\u1ee5 th\u1ec3.<\/p>\n\n\n\n

      \n
    1. H\u01af\u1edaNG D\u1eaaN C\u1ea4U H\u00ccNH<\/strong><\/li>\n<\/ol>\n\n\n\n

      B\u01b0\u1edbc 1: Khai b\u00e1o k\u1ebft n\u1ed1i AD v\u1edbi thi\u1ebft b\u1ecb Fortinet<\/strong><\/p>\n\n\n\n

      B\u1ea1n h\u00e3y \u0111\u0103ng nh\u1eadp v\u00e0o Fortigate s\u1eed d\u1ee5ng t\u00e0i kho\u1ea3n Admin.<\/p>\n\n\n\n

      \"\"<\/figure>\n\n\n\n

      Ch\u1ecdn User & Device<\/strong> -> LDAP Servers<\/strong> -> Nh\u1ea5n v\u00e0o Create New.<\/strong><\/p>\n\n\n\n

      \"\"\/<\/figure>\n\n\n\n

      Nh\u1eadp c\u00e1c th\u00f4ng tin sau:<\/p>\n\n\n\n

        \n
      • Name:<\/strong> \u0110\u1eb7t t\u00ean cho m\u00e1y ch\u1ee7 LDAP (v\u00ed d\u1ee5: AD_Server).<\/li>\n\n\n\n
      • Server IP\/Name:<\/strong> \u0110\u1ecba ch\u1ec9 IP ho\u1eb7c t\u00ean mi\u1ec1n c\u1ee7a m\u00e1y ch\u1ee7 AD.<\/li>\n\n\n\n
      • Server Port:<\/strong> 389 (ho\u1eb7c 636 n\u1ebfu d\u00f9ng LDAPS).<\/li>\n\n\n\n
      • Common Name Identifier<\/strong>: sAMAccountName (\u0111\u1ec3 \u0111\u1ed3ng b\u1ed9 theo t\u00ean \u0111\u0103ng nh\u1eadp).<\/li>\n\n\n\n
      • Distinguished Name:<\/strong> Nh\u1eadp DN c\u1ee7a t\u1ed5 ch\u1ee9c trong AD (v\u00ed d\u1ee5: DC=forticlozz,DC=com).<\/li>\n\n\n\n
      • Bind Type:<\/strong> ch\u1ecdn Regular, t\u00f9y theo m\u1ee9c \u0111\u1ed9 b\u1ea3o m\u1eadt.<\/li>\n\n\n\n
      • Username v\u00e0 Password<\/strong>: Th\u00f4ng tin c\u1ee7a t\u00e0i kho\u1ea3n c\u00f3 quy\u1ec1n truy c\u1eadp AD.<\/li>\n<\/ul>\n\n\n\n

        Nh\u1ea5n Test Connectivity<\/strong> \u0111\u1ec3 ki\u1ec3m tra k\u1ebft n\u1ed1i.<\/p>\n\n\n\n

        Nh\u1ea5n OK<\/strong> \u0111\u1ec3 l\u01b0u l\u1ea1i<\/p>\n\n\n\n

        \"\"\/<\/figure>\n\n\n\n

        B\u01b0\u1edbc 2: \u00c1nh x\u1ea1 user c\u1ee7a AD l\u00ean thi\u1ebft b\u1ecb Fortinet<\/strong><\/p>\n\n\n\n

        Sau khi k\u1ebft n\u1ed1i LDAP th\u00e0nh c\u00f4ng, c\u00e1c b\u1ea1n v\u00e0o menu User Definition<\/strong>, \u0111\u1ec3 l\u1ea5y c\u00e1c t\u00e0i kho\u1ea3n v\u1ec1. <\/p>\n\n\n\n

        Ti\u1ebfp theo, b\u1ea1n v\u00e0o menu User Definition<\/strong>, ch\u1ecdn Create New.<\/strong><\/p>\n\n\n\n

        Trong ph\u1ea7n User Type,<\/strong> h\u00e3y ch\u1ecdn Remote LDAP User<\/strong> v\u00e0 sau \u0111\u00f3 nh\u1ea5n Next.<\/strong><\/p>\n\n\n\n

        \"\"\/<\/figure>\n\n\n\n

        Ch\u1ecdn LDAP Server \u0111\u00e3 c\u1ea5u h\u00ecnh, nh\u1ea5n Next<\/strong>.<\/p>\n\n\n\n

        \"\"\/<\/figure>\n\n\n\n

        Fortinet s\u1ebd li\u1ec7t k\u00ea t\u1ea5t c\u1ea3 c\u00e1c group c\u00f3 trong AD<\/p>\n\n\n\n

        Ch\u1ecdn OU m\u00e0 b\u1ea1n \u0111\u00e3 t\u1ea1o (n\u01a1i ch\u1ee9a user)<\/p>\n\n\n\n

        Nh\u1ea5n Add all Results<\/strong> \u0111\u1ec3 th\u00eam to\u00e0n b\u1ed9 user v\u00e0o firewall, ho\u1eb7c n\u1ebfu b\u1ea1n mu\u1ed1n th\u00eam t\u1eebng user th\u00ec k\u00edch chu\u1ed9t ph\u1ea3i v\u00e0o user ch\u1ecdn Add Selected.<\/strong><\/p>\n\n\n\n

        Nh\u1ea5n Submit<\/strong> \u0111\u1ec3 l\u01b0u c\u1ea5u h\u00ecnh<\/p>\n\n\n\n

        \"\"\/<\/figure>\n\n\n\n

        Khi \u0111\u00f3, to\u00e0n b\u1ed9 c\u00e1c User n\u1eb1m trong OU m\u00e0 c\u00e1c b\u1ea1n \u0111\u00e3 thi\u1ebft l\u1eadp s\u1ebd t\u1ef1 \u0111\u1ed9ng \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p v\u00e0o h\u1ec7 th\u1ed1ng Firewall, s\u1eed d\u1ee5ng ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c l\u00e0 LDAP <\/p>\n\n\n\n

        \"\"\/<\/figure>\n\n\n\n

        C\u00e1c b\u1ea1n truy c\u1eadp v\u00e0o menu User Groups<\/strong> \u0111\u1ec3 \u0111\u1ed3ng b\u1ed9 c\u00e1c nh\u00f3m t\u1eeb h\u1ec7 th\u1ed1ng. Sau \u0111\u00f3, nh\u1ea5n Create New<\/strong> \u0111\u1ec3 t\u1ea1o nh\u00f3m m\u1edbi.<\/p>\n\n\n\n

          \n
        • Type<\/strong>: ch\u1ecdn Firewall<\/strong>.<\/li>\n\n\n\n
        • Ti\u1ebfp theo, trong ph\u1ea7n Remote Groups<\/strong>, nh\u1ea5n Add<\/strong> \u0111\u1ec3 th\u00eam c\u00e1c nh\u00f3m ng\u01b0\u1eddi d\u00f9ng t\u1eeb ngu\u1ed3n LDAP ho\u1eb7c c\u00e1c h\u1ec7 th\u1ed1ng b\u00ean ngo\u00e0i.<\/li>\n\n\n\n
        • Trong m\u1ee5c Remote Server<\/strong>, ch\u1ecdn LDAP server<\/strong> m\u00e0 c\u00e1c b\u1ea1n \u0111\u00e3 c\u1ea5u h\u00ecnh tr\u01b0\u1edbc \u0111\u00f3. L\u00fac n\u00e0y, Fortigate s\u1ebd t\u1ef1 \u0111\u1ed9ng li\u1ec7t k\u00ea t\u1ea5t c\u1ea3 c\u00e1c nh\u00f3m (group) hi\u1ec7n c\u00f3 trong Active Directory (AD) \u0111\u1ec3 b\u1ea1n d\u1ec5 d\u00e0ng ch\u1ecdn v\u00e0 qu\u1ea3n l\u00fd.<\/li>\n\n\n\n
        • Nh\u1ea5n +<\/strong>, ch\u1ecdn OU b\u1ea1n t\u1ea1o (Vd: LDAP_Fozzz)<\/strong>, n\u01a1i c\u00f3 2 User Group \u0111\u00e3 t\u1ea1o tr\u01b0\u1edbc \u0111\u00f3. B\u1ea1n c\u00f3 th\u1ec3 nh\u1ea5n Add all Results<\/strong> \u0111\u1ec3 th\u00eam t\u1ea5t c\u1ea3, ho\u1eb7c chu\u1ed9t ph\u1ea3i v\u00e0o Group v\u00e0 ch\u1ecdn Add Selected<\/strong>.<\/li>\n\n\n\n
        • Nh\u1ea5n OK<\/strong> \u0111\u1ec3 l\u01b0u c\u1ea5u h\u00ecnh<\/li>\n<\/ul>\n\n\n\n
          \"\"\/<\/figure>\n\n\n\n

          Nh\u1ea5n OK<\/strong> \u0111\u1ec3 l\u01b0u l\u1ea1i User Group v\u1eeba t\u1ea1o.<\/p>\n\n\n\n

          \"\"\/<\/figure>\n\n\n\n

          Khi \u0111\u00f3 t\u1ea5t c\u1ea3 c\u00e1c User Group c\u00f3 trong OU m\u00e0 c\u00e1c b\u1ea1n \u0111\u00e3 t\u1ea1o s\u1ebd \u0111\u01b0\u1ee3c th\u00eam v\u00e0o Firewall.<\/p>\n\n\n\n

          \"\"\/<\/figure>\n\n\n\n

          OK, nh\u01b0 v\u1eady l\u00e0 m\u00ecnh \u0111\u00e3 ho\u00e0n th\u00e0nh h\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh LDAP tr\u00ean Fortigate. N\u1ebfu c\u00e1c b\u1ea1n c\u00f3 b\u1ea5t k\u1ef3 th\u1eafc m\u1eafc ho\u1eb7c g\u00f3p \u00fd n\u00e0o, \u0111\u1eebng ng\u1ea7n ng\u1ea1i \u0111\u1ec3 l\u1ea1i b\u00ecnh lu\u1eadn \u0111\u1ec3 ch\u00fang ta c\u00f9ng th\u1ea3o lu\u1eadn v\u00e0 h\u1ed7 tr\u1ee3 nhau nh\u00e9.<\/p>\n\n\n\n

          Ch\u00fac c\u00e1c b\u1ea1n th\u1ef1c hi\u1ec7n th\u00e0nh c\u00f4ng!<\/p>\n\n\n\n

          N\u1ebfu b\u1ea1n g\u1eb7p kh\u00f3 kh\u0103n trong vi\u1ec7c c\u1ea5u h\u00ecnh ho\u1eb7c s\u1eed d\u1ee5ng c\u00e1c s\u1ea3n ph\u1ea9m Sophos t\u1ea1i Vi\u1ec7t Nam, h\u00e3y li\u00ean h\u1ec7 ngay v\u1edbi VaciF \u0111\u1ec3 \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 chi ti\u1ebft v\u00e0 t\u1eadn t\u00ecnh nh\u1ea5t.<\/strong><\/p>\n\n\n\n

          \u0110\u1ed9i ng\u0169 k\u1ef9 thu\u1eadt chuy\u00ean nghi\u1ec7p c\u1ee7a ch\u00fang t\u00f4i lu\u00f4n s\u1eb5n s\u00e0ng \u0111\u1ed3ng h\u00e0nh c\u00f9ng b\u1ea1n, \u0111\u1ea3m b\u1ea3o gi\u00fap b\u1ea1n khai th\u00e1c t\u1ed1i \u0111a hi\u1ec7u qu\u1ea3 c\u1ee7a s\u1ea3n ph\u1ea9m.<\/p>\n\n\n\n

            \n
          • Hotline:<\/strong> 028.7303.5399<\/li>\n\n\n\n
          • Email:<\/strong> info@vacif.com<\/li>\n<\/ul>\n\n\n\n

            Ch\u00fang t\u00f4i cam k\u1ebft mang \u0111\u1ebfn cho b\u1ea1n d\u1ecbch v\u1ee5 h\u1ed7 tr\u1ee3 nhanh ch\u00f3ng v\u00e0 hi\u1ec7u qu\u1ea3 nh\u1ea5t!<\/p>\n","protected":false},"excerpt":{"rendered":"

            LDAP (Lightweight Directory Access Protocol) l\u00e0 m\u1ed9t giao th\u1ee9c \u1ee9ng d\u1ee5ng cho ph\u00e9p truy c\u1eadp v\u00e0 qu\u1ea3n l\u00fd c\u00e1c c\u1ea5u tr\u00fac th\u01b0 m\u1ee5c. C\u1ea5u tr\u00fac th\u01b0 m\u1ee5c c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c hi\u1ec3u l\u00e0 m\u1ed9t t\u1eadp h\u1ee3p c\u00e1c \u0111\u1ed1i t\u01b0\u1ee3ng (nh\u01b0 ng\u01b0\u1eddi d\u00f9ng, nh\u00f3m ng\u01b0\u1eddi d\u00f9ng) \u0111\u01b0\u1ee3c s\u1eafp x\u1ebfp theo m\u00f4 h\u00ecnh ph\u00e2n c\u1ea5p logic, v\u1edbi m\u1ed7i […]<\/p>\n","protected":false},"author":13,"featured_media":21642,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[80],"tags":[352,534],"class_list":["post-21628","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-tai-lieu","tag-fortigate","tag-lightweight-directory-access-protocol","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/21628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=21628"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/21628\/revisions"}],"predecessor-version":[{"id":21665,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/21628\/revisions\/21665"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/21642"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=21628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=21628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=21628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}