{"id":35991,"date":"2019-10-31T22:08:59","date_gmt":"2019-10-31T19:08:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1\/"},"modified":"2019-10-31T22:08:59","modified_gmt":"2019-10-31T19:08:59","slug":"set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1","title":{"rendered":"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dobr\u00fd den, v\u00e1\u017een\u00ed u\u017eivatel\u00e9 a n\u00e1hodn\u00ed n\u00e1v\u0161t\u011bvn\u00edci. V t\u00e9to s\u00e9rii \u010dl\u00e1nk\u016f se budeme zab\u00fdvat vytv\u00e1\u0159en\u00edm jednoduch\u00e9 s\u00edt\u011b pro firmu, kter\u00e1 nen\u00ed p\u0159\u00edli\u0161 n\u00e1ro\u010dn\u00e1 na svou IT infrastrukturu, ale z\u00e1rove\u0148 pot\u0159ebuje zajistit sv\u00fdm zam\u011bstnanc\u016fm kvalitn\u00ed p\u0159ipojen\u00ed k internetu, p\u0159\u00edstup ke sd\u00edlen\u00fdm souborov\u00fdm zdroj\u016fm, poskytnut\u00ed VPN p\u0159\u00edstupu k pracovn\u00edmu m\u00edstu a p\u0159ipojen\u00ed syst\u00e9mu videon\u00e1hled\u016f, jeho\u017e p\u0159\u00edstup by byl mo\u017en\u00fd z jak\u00e9hokoliv m\u00edsta na sv\u011bt\u011b. Pro segment mal\u00e9ho podnik\u00e1n\u00ed je charakteristick\u00fd rychl\u00fd r\u016fst a t\u00edm p\u00e1dem i p\u0159epl\u00e1nov\u00e1n\u00ed s\u00edt\u011b. V tomto \u010dl\u00e1nku za\u010dneme s jednou kancel\u00e1\u0159\u00ed pro 15 pracovn\u00edch m\u00edst a budeme d\u00e1le roz\u0161i\u0159ovat s\u00ed\u0165. Pokud v\u00e1s zaj\u00edm\u00e1 n\u011bjak\u00e9 t\u00e9ma, pi\u0161te do koment\u00e1\u0159\u016f, pokus\u00edme se ho implementovat do \u010dl\u00e1nku. P\u0159edpokl\u00e1d\u00e1m, \u017ee \u010dten\u00e1\u0159 je obezn\u00e1men se z\u00e1klady po\u010d\u00edta\u010dov\u00fdch s\u00edt\u00ed, ale na v\u0161echny technick\u00e9 term\u00edny poskytnu odkazy na Wikipedii. Pokud n\u011bco nen\u00ed jasn\u00e9, klikn\u011bte a opravte tuto chybu.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTak za\u010dneme. Jak\u00e1koli s\u00ed\u0165 za\u010d\u00edn\u00e1 prozkoum\u00e1n\u00edm ter\u00e9nu a sb\u011brem po\u017eadavk\u016f klienta, kter\u00e9 budou pozd\u011bji formulov\u00e1ny do technick\u00e9 specifikace. \u010casto ani z\u00e1kazn\u00edk s\u00e1m pln\u011b nech\u00e1pe, co chce a co k tomu pot\u0159ebuje, proto ho mus\u00edme nav\u00e9st k tomu, co jsme schopni ud\u011blat. To je pr\u00e1ce sp\u00ed\u0161e obchodn\u00edho z\u00e1stupce, my se v\u0161ak postar\u00e1me o technickou \u010d\u00e1st, tak\u017ee p\u0159edpokl\u00e1dejme, \u017ee k n\u00e1m p\u0159i\u0161lo takov\u00e9to v\u00fdchoz\u00ed po\u017eadavky:<\/p>\n<ul>\n<li>17 pracovn\u00edch m\u00edst na stoln\u00edch po\u010d\u00edta\u010d\u00edch<\/li>\n<li>S\u00ed\u0165ov\u00e9 diskov\u00e9 \u00falo\u017ei\u0161t\u011b (<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/NAS\">NAS<\/a><\/noindex>)<\/li>\n<li>Syst\u00e9m videon\u00e1hled\u016f s vyu\u017eit\u00edm <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%92%D0%B8%D0%B4%D0%B5%D0%BE%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%82%D0%BE%D1%80#%D0%A1%D0%B5%D1%82%D0%B5%D0%B2%D1%8B%D0%B5_%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%82%D0%BE%D1%80%D1%8B_(NVR)\">NVR<\/a><\/noindex> a IP kamer (8 kus\u016f)<\/li>\n<li>Pokryt\u00ed kancel\u00e1\u0159e Wi-Fi, p\u0159\u00edtomnost dvou s\u00edt\u00ed (intern\u00ed a hostuj\u00edc\u00ed)<\/li>\n<li>Mo\u017enost p\u0159id\u00e1n\u00ed s\u00ed\u0165ov\u00fdch tisk\u00e1ren (do 3 kus\u016f)<\/li>\n<li>Perspektiva otev\u0159en\u00ed druh\u00e9 kancel\u00e1\u0159e na druh\u00e9m konci m\u011bsta<\/li>\n<\/ul>\n<p><\/p>\n<h3>V\u00fdb\u011br vybaven\u00ed<\/h3>\n<p>\nNebudu se p\u0159\u00edli\u0161 zam\u011b\u0159ovat na v\u00fdb\u011br dodavatele, proto\u017ee to je ot\u00e1zka, kter\u00e1 vyvol\u00e1v\u00e1 v\u011b\u010dn\u00e9 spory, zastav\u00edme se u toho, \u017ee s zna\u010dkou jsme se ji\u017e rozhodli, je to Cisco. <\/p>\n<p>Z\u00e1kladem s\u00edt\u011b je <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9C%D0%B0%D1%80%D1%88%D1%80%D1%83%D1%82%D0%B8%D0%B7%D0%B0%D1%82%D0%BE%D1%80\">sm\u011brova\u010d<\/a><\/noindex> (router). Je d\u016fle\u017eit\u00e9 posoudit na\u0161e pot\u0159eby, jeliko\u017e pl\u00e1nujeme dal\u0161\u00ed roz\u0161\u00ed\u0159en\u00ed s\u00edt\u011b. Po\u0159\u00edzen\u00ed routeru s p\u0159edstihem n\u00e1m u\u0161et\u0159\u00ed n\u00e1klady p\u0159i roz\u0161\u00ed\u0159en\u00ed, i kdy\u017e to v prvn\u00ed f\u00e1zi bude o n\u011bco dra\u017e\u0161\u00ed. Cisco pro segment mal\u00fdch podnik\u016f nab\u00edz\u00ed \u0159adu Rvxxx, kde jsou k dispozici routery pro dom\u00e1c\u00ed kancel\u00e1\u0159e (RV1xx, kter\u00e9 obvykle maj\u00ed vestav\u011bn\u00fd Wi-Fi modul), ur\u010den\u00e9 pro p\u0159ipojen\u00ed n\u011bkolika pracovn\u00edch stanic a s\u00ed\u0165ov\u00e9ho \u00falo\u017ei\u0161t\u011b. Jejich n\u00e1s ale nezaj\u00edmaj\u00ed, proto\u017ee maj\u00ed pom\u011brn\u011b omezen\u00e9 mo\u017enosti pro VPN a n\u00edzkou propustnost. Vestav\u011bn\u00fd bezdr\u00e1tov\u00fd modul n\u00e1s tak\u00e9 nezaj\u00edm\u00e1, nebo\u0165 p\u0159edpokl\u00e1d\u00e1me um\u00edst\u011bn\u00ed v technick\u00e9 m\u00edstnosti ve sk\u0159\u00edni, Wi-Fi bude zaji\u0161t\u011bno pomoc\u00ed AP (<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%91%D0%B5%D1%81%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BD%D0%B0%D1%8F_%D1%82%D0%BE%D1%87%D0%BA%D0%B0_%D0%B4%D0%BE%D1%81%D1%82%D1%83%D0%BF%D0%B0\">Access Point\u2019s<\/a><\/noindex>). Na\u0161\u00edm v\u00fdb\u011brem bude RV320, kter\u00fd je mlad\u0161\u00edm modelem vy\u0161\u0161\u00ed \u0159ady. Nem\u00e1me pot\u0159ebu velk\u00e9ho po\u010dtu port\u016f ve vestav\u011bn\u00e9m switchi, proto\u017ee switch bude samostatn\u00fd, aby zajistil dostate\u010dn\u00fd po\u010det port\u016f. Mezi hlavn\u00ed v\u00fdhody routeru pat\u0159\u00ed pom\u011brn\u011b vysok\u00e1 propustnost <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/VPN\">VPN<\/a><\/noindex> serveru (75 Mbit\/s), licence pro 10 VPN tunel\u016f, mo\u017enost vybudov\u00e1n\u00ed Site-2-site VPN tunelu. Tak\u00e9 d\u016fle\u017eit\u00fdm bodem je existence druh\u00e9ho WAN portu pro zaji\u0161t\u011bn\u00ed z\u00e1lo\u017en\u00edho p\u0159ipojen\u00ed k Internetu.<\/p>\n<p>Za routerem n\u00e1sleduje <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A1%D0%B5%D1%82%D0%B5%D0%B2%D0%BE%D0%B9_%D0%BA%D0%BE%D0%BC%D0%BC%D1%83%D1%82%D0%B0%D1%82%D0%BE%D1%80\">switch<\/a><\/noindex>. Nejv\u00fdznamn\u011bj\u0161\u00ed parametr switchi je sada funkc\u00ed, kter\u00fdmi disponuje. Ale nejprve spo\u010d\u00edt\u00e1me porty. V na\u0161em p\u0159\u00edpad\u011b pl\u00e1nujeme p\u0159ipojit k switchi: 17 PC, 2 AP (Wi-Fi p\u0159\u00edstupov\u00e9 body), 8 IP kamer, 1 NAS, 3 s\u00ed\u0165ov\u00e9 tisk\u00e1rny. Pomoc\u00ed aritmetiky dostaneme \u010d\u00edslo 31, co\u017e odpov\u00edd\u00e1 po\u010dtu za\u0159\u00edzen\u00ed, kter\u00e9 budou zpo\u010d\u00e1tku p\u0159ipojeny k s\u00edti, p\u0159id\u00e1me k tomu 2 <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9A%D0%B0%D0%BD%D0%B0%D0%BB_%D1%81%D0%B2%D1%8F%D0%B7%D0%B8_%D0%B2_%D1%8D%D0%BB%D0%B5%D0%BA%D1%82%D1%80%D0%BE%D0%BD%D0%BD%D0%BE%D0%B9_%D1%81%D0%B5%D1%82%D0%B8\">uplinky<\/a><\/noindex> (pl\u00e1nujeme toti\u017e roz\u0161i\u0159ovat s\u00ed\u0165) a skon\u010d\u00edme na 48 portech. Te\u010f k funkcionalit\u011b: n\u00e1\u0161 switch by m\u011bl um\u011bt <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/VLAN\">VLAN<\/a><\/noindex>, ide\u00e1ln\u011b v\u0161ech 4096, p\u0159ipojen\u00ed pomoc\u00ed optiky neubl\u00ed\u017e\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/SFP\">SFP<\/a><\/noindex> z\u00e1suvky, aby bylo mo\u017en\u00e9 p\u0159ipojit switch na druh\u00e9m konci budovy optikou, m\u011bl by um\u011bt fungovat v uzav\u0159en\u00e9m okruhu, co\u017e n\u00e1m umo\u017e\u0148uje z\u00e1lohov\u00e1n\u00ed spojen\u00ed (<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/STP\">STP- Spanning Tree Protocol<\/a><\/noindex>), tak\u00e9 AP a kamery budou nap\u00e1jeny p\u0159es kroucenou dvojlinku, proto je pot\u0159ebn\u00e9 m\u00edt <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/Power_over_Ethernet\">PoE<\/a><\/noindex> (o protokolech se m\u016f\u017eete do\u010d\u00edst v wikipedii, n\u00e1zvy jsou klikateln\u00e9). P\u0159\u00edli\u0161 slo\u017eit\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A1%D0%B5%D1%82%D0%B5%D0%B2%D0%B0%D1%8F_%D0%BC%D0%BE%D0%B4%D0%B5%D0%BB%D1%8C_OSI\">L3<\/a><\/noindex> Funk\u010dnost nen\u00ed pro n\u00e1s pot\u0159ebn\u00e1, tak\u017ee na\u0161e volba padne na Cisco SG250-50P, proto\u017ee m\u00e1 pro n\u00e1s dostate\u010dn\u00e9 funkce a z\u00e1rove\u0148 neobsahuje nadbyte\u010dn\u00e9 mo\u017enosti. O Wi-Fi budeme mluvit v dal\u0161\u00edm \u010dl\u00e1nku, proto\u017ee je to dost obs\u00e1hl\u00e9 t\u00e9ma. Tam se tak\u00e9 zam\u011b\u0159\u00edme na v\u00fdb\u011br A\u0420. NAS a kamery nevyb\u00edr\u00e1me, p\u0159edpokl\u00e1d\u00e1me, \u017ee se t\u00edm zab\u00fdvaj\u00ed jin\u00ed lid\u00e9, n\u00e1s zaj\u00edm\u00e1 pouze s\u00ed\u0165.<\/p>\n<h3>Pl\u00e1nov\u00e1n\u00ed<\/h3>\n<p>\nNejd\u0159\u00edve si ur\u010d\u00edme, jak\u00e9 virtu\u00e1ln\u00ed s\u00edt\u011b pot\u0159ebujeme (co jsou virtu\u00e1ln\u00ed s\u00edt\u011b VLAN si m\u016f\u017eete p\u0159e\u010d\u00edst na Wikipedii). M\u00e1me tedy n\u011bkolik logick\u00fdch segment\u016f s\u00edt\u011b: <\/p>\n<ul>\n<li>Klientsk\u00e9 pracovn\u00ed stanice (PC)<\/li>\n<li>Server (NAS)<\/li>\n<li>Videodohled<\/li>\n<li>Hostuj\u00edc\u00ed za\u0159\u00edzen\u00ed (WiFi)<\/li>\n<\/ul>\n<p>\nTak\u00e9, dle pravidel dobr\u00e9ho t\u00f3nu, um\u00edst\u00edme rozhran\u00ed pro spr\u00e1vu za\u0159\u00edzen\u00ed do samostatn\u00e9 VLAN. VLANy m\u016f\u017eeme \u010d\u00edslovat v libovoln\u00e9m po\u0159ad\u00ed, j\u00e1 si zvol\u00edm toto:<\/p>\n<ul>\n<li>VLAN10 Management (MGMT)<\/li>\n<li>VLAN50 Server\u2019s<\/li>\n<li>VLAN100 LAN+WiFi<\/li>\n<li>VLAN150 Visitor\u2019s WiFi (V-WiFi)<\/li>\n<li>VLAN200 CAM\u2019s<\/li>\n<\/ul>\n<p>\nDal\u0161\u00ed slo\u017e\u00edme IP pl\u00e1n, budeme pou\u017e\u00edvat <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9C%D0%B0%D1%81%D0%BA%D0%B0_%D0%BF%D0%BE%D0%B4%D1%81%D0%B5%D1%82%D0%B8\">maska<\/a><\/noindex> 24 bity a pods\u00ed\u0165 192.168.x.x. Za\u010dneme.<\/p>\n<p>V rezervovan\u00e9m poolu budou adresy, kter\u00e9 budou nastaveny staticky (tisk\u00e1rny, servery, spr\u00e1vcovsk\u00e9 rozhran\u00ed atd., pro klienty <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/DHCP\">DHCP<\/a><\/noindex> bude vyd\u00e1vat dynamickou adresu).<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/370bed238c08c1409cf786a0fface77e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak jsme si ud\u011blali p\u0159edstavu o IP, zde je p\u00e1r bod\u016f, na kter\u00e9 bych cht\u011bl upozornit:<\/p>\n<ul>\n<li>V s\u00edti spr\u00e1vy nem\u00e1 smysl zap\u00ednat DHCP, stejn\u011b jako v serverovn\u011b, proto\u017ee v\u0161echny adresy jsou p\u0159id\u011blov\u00e1ny ru\u010dn\u011b p\u0159i nastavov\u00e1n\u00ed za\u0159\u00edzen\u00ed. N\u011bkte\u0159\u00ed si nech\u00e1vaj\u00ed mal\u00fd DHCP pool pro p\u0159\u00edpad p\u0159ipojen\u00ed nov\u00e9ho za\u0159\u00edzen\u00ed pro jeho po\u010d\u00e1te\u010dn\u00ed konfiguraci, ale j\u00e1 m\u00e1m r\u00e1d a doporu\u010duji v\u00e1m konfigurovat za\u0159\u00edzen\u00ed ne na m\u00edst\u011b u z\u00e1kazn\u00edka, ale u sebe na stole, tak\u017ee tento pool zde neud\u011bl\u00e1m.<\/li>\n<li>N\u011bkter\u00e9 modely kamer mohou vy\u017eadovat statickou adresu, my v\u0161ak p\u0159edpokl\u00e1d\u00e1me, \u017ee kamery ji dost\u00e1vaj\u00ed automaticky.<\/li>\n<li>V lok\u00e1ln\u00ed s\u00edti pool nech\u00e1v\u00e1me pro tisk\u00e1rny, proto\u017ee slu\u017eba s\u00ed\u0165ov\u00e9ho tisku nepracuje p\u0159\u00edli\u0161 spolehliv\u011b s dynamick\u00fdmi adresami.<\/li>\n<\/ul>\n<p><\/p>\n<h3>Nastaven\u00ed routeru<\/h3>\n<p>\nNo, kone\u010dn\u011b se dost\u00e1v\u00e1me k nastaven\u00ed. Vezmeme patch cord a p\u0159ipoj\u00edme se k jednomu ze \u010dty\u0159 LAN port\u016f routeru. Ve v\u00fdrobn\u00edm nastaven\u00ed je na routeru zapnut DHCP server a ten je dostupn\u00fd na adrese 192.168.1.1. M\u016f\u017eeme to zkontrolovat pomoc\u00ed konzolov\u00e9ho n\u00e1stroje ipconfig, jeho\u017e v\u00fdstupem bude n\u00e1\u0161 router jako v\u00fdchoz\u00ed br\u00e1na. Zkontrolujeme:<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/cd61e3708c7103d5ae3c98f161efe809.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV prohl\u00ed\u017ee\u010di p\u0159ejdeme na tuto adresu, potvrd\u00edme nebezpe\u010dn\u00e9 p\u0159ipojen\u00ed a p\u0159ihl\u00e1s\u00edme se s p\u0159ihla\u0161ovac\u00edmi \u00fadaji cisco\/cisco. Okam\u017eit\u011b zm\u011bn\u00edme heslo na bezpe\u010dn\u00e9. A jako prvn\u00ed zajdeme do z\u00e1lo\u017eky Setup, \u010d\u00e1st Network, kde p\u0159i\u0159ad\u00edme n\u00e1zev a dom\u00e9nov\u00e9 jm\u00e9no pro router.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/ef1ff04a1307646affec85ee3f20b732.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed p\u0159id\u00e1me do na\u0161eho routeru VLANy. Jdeme do Port Management\/VLAN Membership. Setk\u00e1 n\u00e1s tabulka VLAN\u016f nastaven\u00fdch ve v\u00fdchoz\u00edm stavu.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/ddf0d27018403f3f3ce65e07ea9e8331.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTy nejsou pot\u0159eba, odstran\u00edme v\u0161e krom\u011b prvn\u00ed, proto\u017ee ta je v\u00fdchoz\u00ed a nelze ji odstranit. Hned p\u0159id\u00e1me VLANy, kter\u00e9 jsme napl\u00e1novali. Nezapomeneme za\u0161krtnout pol\u00ed\u010dko naho\u0159e. Tak\u00e9 povol\u00edme spr\u00e1vu za\u0159\u00edzen\u00ed pouze z \u0159\u00eddic\u00ed s\u00edt\u011b, a sm\u011b\u0159ov\u00e1n\u00ed mezi s\u00edt\u011bmi povol\u00edme v\u0161ude krom\u011b hostitelsk\u00e9 s\u00edt\u011b. Porty nastav\u00edme o n\u011bco pozd\u011bji.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/76a77e7fab5795ad1508aeb2258a7a24.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed nastav\u00edme DHCP servery podle na\u0161\u00ed tabulky. K tomu jdeme do DHCP\/DHCP Setup.<br \/>\nPro s\u00edt\u011b, ve kter\u00fdch bude DHCP vypnuto, nastav\u00edme pouze adresu br\u00e1ny, kter\u00e1 bude prvn\u00ed v pods\u00edti (odpov\u00eddaj\u00edc\u00edm zp\u016fsobem i masku).<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/383bf8626bb48b1a2ce345c49305da8f.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV s\u00edt\u00edch s DHCP je to dost jednoduch\u00e9, tak\u00e9 nastav\u00edme adresu br\u00e1ny, n\u00ed\u017ee zap\u00ed\u0161eme pooly a DNS servery:<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/1787da547ce03ac5f7683fb6fbd440ac.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nT\u00edmto jsme se vypo\u0159\u00e1dali s DHCP, nyn\u00ed klienti p\u0159ipojen\u00ed v lok\u00e1ln\u00ed s\u00edti budou z\u00edsk\u00e1vat adresu automaticky. Nyn\u00ed nakonfigurujeme porty (porty se konfiguruj\u00ed podle standardu <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/IEEE_802.1Q\">802.1q<\/a><\/noindex>, odkaz je klikac\u00ed, m\u016f\u017eete se s n\u00edm sezn\u00e1mit). Jak se p\u0159edpokl\u00e1d\u00e1, \u017ee v\u0161ichni klienti budou p\u0159ipojeni p\u0159es spravovan\u00e9 switche, untagged (nativn\u00ed) VLAN na v\u0161ech portech bude MGMT, co\u017e znamen\u00e1, \u017ee jak\u00e9koli za\u0159\u00edzen\u00ed p\u0159ipojen\u00e9 na tento port se dostane do t\u00e9to s\u00edt\u011b (v\u00edce zde). Vrac\u00edme se do Port Management\/VLAN Membership a nastavujeme to. VLAN1 na v\u0161ech portech ponech\u00e1me Excluded, nen\u00ed n\u00e1m pot\u0159eba.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/00fa1c761c9d1228e597d7df94917aa6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed na sv\u00e9 s\u00ed\u0165ov\u00e9 kart\u011b mus\u00edme nastavit statickou adresu z \u0159\u00edzen\u00e9 pods\u00edt\u011b, proto\u017ee jsme se dostali do t\u00e9to pods\u00edt\u011b pot\u00e9, co jsme klikli na \u201eulo\u017eit\u201c, a DHCP servery zde nejsou. Jdeme do nastaven\u00ed s\u00ed\u0165ov\u00e9ho adapt\u00e9ru a nastav\u00edme adresu. Po tomto bude router dostupn\u00fd na adrese 192.168.10.1.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/b9351e1fdd054e81143026d860b1c958.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNastav\u00edme na\u0161e p\u0159ipojen\u00ed k internetu. P\u0159edpokl\u00e1dejme, \u017ee jsme dostali statickou adresu od poskytovatele. Jdeme do Setup\/Network, dole za\u0161krtneme WAN1, klikneme na Edit. Vybereme Static IP a nastav\u00edme svou adresu.<\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/542e032a93b3b72fe0089ff23609771e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA posledn\u00ed v\u011bc na dnes \u2013 nakonfigurujeme vzd\u00e1len\u00fd p\u0159\u00edstup. K tomu jdeme do Firewall\/General a za\u0161krtneme pol\u00ed\u010dko Remote Management, podle pot\u0159eby nastav\u00edme port. <\/p>\n<p><img decoding=\"async\" alt=\"S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00edch Cisco. \u010c\u00e1st 1\" src=\"\/wp-content\/uploads\/2019\/07\/810d1ca915fdcbe1eaf0fbdb3141770c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDneska asi v\u0161e. Na konci \u010dl\u00e1nku m\u00e1me z\u00e1kladn\u011b nakonfigurovan\u00fd router, pomoc\u00ed kter\u00e9ho se m\u016f\u017eeme p\u0159ipojit k internetu. D\u00e9lka \u010dl\u00e1nku p\u0159evy\u0161uje m\u00e9 p\u0159edpoklady, tak\u017ee v dal\u0161\u00ed \u010d\u00e1sti dokon\u010d\u00edme konfiguraci routeru, zprovozn\u00edme VPN, nakonfigurujeme firewall a logov\u00e1n\u00ed, a tak\u00e9 nakonfigurujeme switch, abychom mohli spustit na\u0161i kancel\u00e1\u0159. Douf\u00e1m, \u017ee \u010dl\u00e1nek byl pro V\u00e1s alespo\u0148 trochu u\u017eite\u010dn\u00fd a pou\u010dn\u00fd. P\u00ed\u0161u to poprv\u00e9, ocen\u00edm konstruktivn\u00ed kritiku a dotazy, sna\u017e\u00edm se odpov\u011bd\u011bt v\u0161em a vz\u00edt v \u00favahu va\u0161e pozn\u00e1mky. Tak\u00e9, jak jsem psal na za\u010d\u00e1tku, v\u00edt\u00e1me va\u0161e n\u00e1zory na to, co by se je\u0161t\u011b mohlo v kancel\u00e1\u0159i objevit a co je\u0161t\u011b budeme konfigurovat.<\/p>\n<p>M\u00e9 kontakty:<br \/>\nTelegram: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/hebelz\/\" class=\"user_link\">hebelz<\/a><\/noindex><br \/>\nSkype\/mail: kashuba@antik.sk<br \/>\nP\u0159id\u00e1vejte se, popov\u00edd\u00e1me si.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/459154\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0443\u0432\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0445\u0430\u0431\u0440\u043e\u0436\u0438\u0442\u0435\u043b\u0438 \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0435 \u0433\u043e\u0441\u0442\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u0440\u0435\u0447\u044c \u043f\u043e\u0439\u0434\u0435\u0442 \u043e \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u0444\u0438\u0440\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a \u0441\u0432\u043e\u0435\u0439 \u0418\u0422- \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043d\u043e \u0432 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0440\u0430\u0431\u043e\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043e\u0431\u0449\u0438\u043c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c VPN \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0435\u043c\u0443 \u043c\u0435\u0441\u0442\u0443 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26906,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35991","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0443\u0432\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0445\u0430\u0431\u0440\u043e\u0436\u0438\u0442\u0435\u043b\u0438 \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0435 \u0433\u043e\u0441\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0435\u0442\u044c \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0443\u0432\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0445\u0430\u0431\u0440\u043e\u0436\u0438\u0442\u0435\u043b\u0438 \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0435 \u0433\u043e\u0441\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:08:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:08:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00ed\u0165 pro mal\u00e9 podniky na za\u0159\u00edzen\u00ed Cisco. \u010c\u00e1st 1 | ProHoster","description":"V\u00edtejte, v\u00e1\u017een\u00ed \u010dlenov\u00e9 Habr a n\u00e1hodn\u00ed host\u00e9.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0442\u044c \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e, \u0443\u0432\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0445\u0430\u0431\u0440\u043e\u0436\u0438\u0442\u0435\u043b\u0438 \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0435 \u0433\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/set-dlya-malogo-biznesa-na-oborudovanii-cisco-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:08:59+00:00","article:modified_time":"2019-10-31T19:08:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35991","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:33:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:25","updated":"2026-01-22 01:33:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=35991"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35991\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/26906"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=35991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=35991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=35991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}