Through the "intranet penetration" technology, remote access to the Xiangguohe ERP system in the corporate LAN is realized during business trips

overview

The importance of the ERP system to the enterprise is self-evident. Whether it is finance, production, sales or procurement, it is necessary to use the ERP system to assist. However, these important data in ERP are corporate confidential documents, which often require localized management and can only be deployed under the corporate intranet.

Sometimes we need to remotely log in to ERP to deal with urgent matters outside the home. We can solve this problem through intranet penetration, map the ERP server port to the public network, and then use the generated public network address to remotely log in to the ERP system.

1. View the server port of the cross-river server

Xiangguohe software is popular because it can help enterprises establish a standardized, accurate and real-time inventory database, automatic purchase control, simple interface, easy operation, and no need for cumbersome installation of software and database.

Open the ERP server like crossing the river, you can see the LAN ip address and port number at the bottom, and we can see that the port is 8089.

image-20230331131315785

2. Intranet penetration

Here we use CPOLAR internal network penetration tool, which supports http/https/tcp protocol, does not require public network IP, does not need to set up routers, and does not limit traffic.

cpolar official website: https://www.cpolar.com/

Visit the official website of cpolar, register an account, and then download the zip compression package suitable for Windows platform. After decompression, you will get the cpolar installation package, and then double-click the installation package to install it by default.

20230423094258

After cpolar is successfully installed, visit the local cpolar web UI management interface [ http://localhost:9200 ] on the browser port 9200 , and log in with the cpolar account.

20230130105810

Click on the tunnel management on the left dashboard - create a tunnel, create a tcp tunnel, point to port 8089, which is the port number of the river crossing service we checked above

  • Tunnel name: you can customize the name, be careful not to duplicate the existing tunnel name
  • Protocol: select tcp
  • Local address: 8089
  • Domain name type: choose a random domain name for free
  • Region: Select China VIP

click创建

image-20230331132903029

After the tunnel is successfully created, click on the status on the left - online tunnel list, view the generated public network address, and then copy the address

image-20230331132950497

3. Remote public network connection

After generating the public network address, we open the Elephant Over the River client, click to select the account set, change the application server address to the public network address to connect, and the port number needs to fill in the port number corresponding to the public network address

image-20230331133334503

The test connection prompt is successful, indicating that the remote connection is successful

image-20230331133537932

Logging in is also normal. After logging in, we can see that the address in the lower left corner has become our public network address.

image-20230331133720825

4. Fixed public network address

Since the tunnel we created using cpolar just now uses a random public network address, it will change randomly within 24 hours, which is not conducive to long-term remote access. Therefore, we can configure a fixed TCP address for it, which is a fixed address and will not change randomly

Note that the cpolar package needs to be upgraded to a professional package or above, and the bandwidth corresponding to each package is different.

4.1 Reserve a fixed TCP address

Log in to the background of cpolar official website, click Reserve on the left, select the reserved tcp address, click Reserve,

image-20230331135243554

Copy the reserved tcp address after the reservation is successful

image-20230331135339050

4.2 Configure fixed TCP address

Visit http://127.0.0.1:9200/, log in to the cpolar web UI management interface, click Tunnel Management on the left dashboard - Tunnel List, find the 8089 port tunnel to be configured, and click Edit on the right

image-20230331140021815

Modify the tunnel information and configure the successfully reserved tcp address domain name into the tunnel

  • Domain name type: fixed tcp port
  • Reserved tcp address: fill in the successfully reserved address

click更新

image-20230331135955092

After the update is complete, open the online tunnel list, and you can see that the public network address has changed, and the address name has also become a fixed tcp address

image-20230331140103226

5. Use a fixed address to connect

Open the Elephant Over the River client, click to select the account set, change the random public network address of the application server address to our fixed public network address for connection, and change the port number to the corresponding port number

image-20230331140734403

The test connection prompts that the connection is successful, indicating that the connection is ok

image-20230331140825374

Then log in, and after logging in successfully, such a fixed tcp address is set, and this address will not change randomly. We can use this fixed public network address on any computer to log in remotely like crossing the river to remotely connect to the account set.

image-20230331141036788

Guess you like

Origin blog.csdn.net/m0_59281987/article/details/132619961