As a springboard machine, the hardware fortress machine manages the virtual machine through VNC.
As a springboard machine, the hardware fortress machine manages the virtual machine through VNC.
I. demand
In order to ensure the security of the intranet server, the company uses the fortress machine as the springboard. When it needs to access the intranet server, it distributes different resources according to different users to realize the flexible control of users' access to the host and ensure the security of the host.
II. Topological environment
In the topology, the host CAS address is 172.2.215.114, and the virtual machine address is 172.2.216.110
Third, the idea of configuration is to add hosts to resources add host accounts to resources to create users who log in to the host and associate host resources with users in authorization.
Test whether you can log in
Note: if you use ssh or VNC to log in to the server, you need to click on the right side of the fortress machine web page to download the client software and select the client you need to install.
IV. Configuration steps
1. Add a host
2. Add host account
In the user configuration, the customer makes restrictions on the client of remote access, such as time, address segment, validity period and so on.
3. Associate the host resource with the user account in the authorization
5. Testing
1. Log in using the host account you created earlier
Click OPS-mainframe OPS-log in
VI. points for attention
When logging in through VNC, the default VNC server account is root. When adding a host account, you will enter a host account: for example, 1:root, where 1 means that the VNC port will be added 1 when logging in to the virtual machine with VNC service through the fortress machine jump. If 0:root is used, the default VNC port number 5900 corresponding to the virtual machine will be used to log in if the VNC port 5910 is modified in the host information. 1:root is used in the host account, and the access port initiated by the actual client is 5911.
