基于SSL VPN的单点登录在智慧校园平台中的应用

在过去几年的时间中,宁波广播电视大学开发和购买了各类信息系统和运维系统,例如工资查询系统、科研管理系统、智慧校园门户和思福迪堡垒机等。基于网络安全和信息保密的考虑,这些系统需要部署在校园网环境中对授权用户开放访问,在互联网上授权用户只能通过登录vpn后才能访问这些系统。该文采用了深信服的sslvpn,认证方式包括本地密码认证和cas票据认证,对于已经接入智慧校园统一身份认证的系统,采用cas票据认证先登录vpn,再访问这些系统,对于思福迪堡垒机等运维系统,只需新建若干个本地账户分配给有需要的老师即可。此外,该文还实现了vpn无感知拉起业务系统的功能,被授权的用户在互联网上直接输入业务系统的网址,就能调用vpn并访问该业务系统,达到方便又安全的效果。

The Application of Single Sign-on based on SSL VPN in Smart Campus Platform

In the past few years,Ningbo TV&Radio University has developed and purchased various information systems and opera?tion and maintenance systems,such as salary query system,scientific research management system,smart campus portal and SAFETYBASE fortress machine,etc.Based on the consideration of network security and information confidentiality,these systems need to be deployed in the campus network environment to open access to authorized users.Authorized users on the Internet can only access these systems by logging in VPN.In this paper,we use SSL VPN of SANGFOR,which includes local password authenti?cation and CAS bill authentication.For the system that has been connected to the unified identity authentication of smart campus,we use CAS bill authentication to log in VPN first,and then access these systems.For the operation and maintenance system such as the SAFETY BASE fortress machine,we only need to create a number of local accounts and assign them to the teachers who need them.In addition,this paper also realizes the function of pulling up the business system without VPN awareness.Authorized users can directly input the web address of the business system on the Internet,and then they can call VPN and visit the business system,achieving the convenient and safe effect.