{"id":36454,"date":"2019-10-31T22:11:44","date_gmt":"2019-10-31T19:11:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor\/"},"modified":"2019-10-31T22:11:44","modified_gmt":"2019-10-31T19:11:44","slug":"opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","title":{"rendered":"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.\u00a0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Expanze velk\u00fdch m\u011bst a vznik aglomerac\u00ed je dnes jedn\u00edm z d\u016fle\u017eit\u00fdch trend\u016f soci\u00e1ln\u00edho v\u00fdvoje. Jen Moskva by se v roce 2019 m\u011bla roz\u0161\u00ed\u0159it o 4 miliony \u010dtvere\u010dn\u00edch metr\u016f bydlen\u00ed (a to nepo\u010d\u00edt\u00e1me 15 obc\u00ed, kter\u00e9 se p\u0159ipoj\u00ed do roku 2020). Na cel\u00e9 t\u00e9to obrovsk\u00e9 plo\u0161e budou m\u00edt oper\u00e1to\u0159i nutnost poskytovat u\u017eivatel\u016fm p\u0159\u00edstup k internetu. M\u016f\u017ee se jednat jak o m\u011bstsk\u00e9 mikroregiony s hustou v\u00edcepodla\u017en\u00ed z\u00e1stavbou, tak o \u201e\u0159\u00edzen\u00ed\u201c chatov\u00e9 osady. Pro tato odd\u011blen\u00ed se n\u00e1roky na vybaven\u00ed pon\u011bkud li\u0161\u00ed. Analyzovali jsme ka\u017ed\u00fd z t\u011bchto sc\u00e9n\u00e1\u0159\u016f a vytvo\u0159ili univerz\u00e1ln\u00ed model optick\u00e9ho p\u0159ep\u00edna\u010de - T2600G-28SQ. V tomto p\u0159\u00edsp\u011bvku podrobn\u011b prozkoum\u00e1me funkce za\u0159\u00edzen\u00ed, kter\u00e9 budou zaj\u00edmat oper\u00e1tory po cel\u00e9 Rusk\u00e9 federaci.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/2f2d13a385278230dd0f608778b9f13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>M\u00edsto v s\u00edti<\/h2>\n<p>\nP\u0159ep\u00edna\u010d T2600G-28SQ je ur\u010den jak pro pr\u00e1ci na \u00farovni p\u0159\u00edstupu v s\u00edti, tak pro agregaci odkaz\u016f z jin\u00fdch p\u0159ep\u00edna\u010d\u016f \u00farovn\u011b p\u0159\u00edstupu. Je to p\u0159ep\u00edna\u010d druh\u00e9 \u00farovn\u011b, kter\u00fd prov\u00e1d\u00ed p\u0159ep\u00edn\u00e1n\u00ed a statick\u00e9 sm\u011brov\u00e1n\u00ed. Pokud m\u00e1 oper\u00e1tor provedenou jak p\u0159ep\u00edn\u00e1n\u00ed, tak agregaci a p\u0159\u00edstup (sm\u011brov\u00e1n\u00ed pouze v j\u00e1dru s\u00edt\u011b), T2600G-28SQ se p\u0159izp\u016fsob\u00ed na jak\u00e9koli \u00farovni. V p\u0159\u00edpad\u011b dynamicky sm\u011brovan\u00e9 agregace je v\u0161ak pot\u0159eba vz\u00edt v \u00favahu ur\u010dit\u00e1 omezen\u00ed sc\u00e9n\u00e1\u0159\u016f pou\u017eit\u00ed.<\/p>\n<p>Model T2600G-28SQ je plnohodnotn\u00fd aktivn\u00ed Ethernetov\u00fd p\u0159ep\u00edna\u010d bez dal\u0161\u00edch omezen\u00ed, kter\u00e1 vznikaj\u00ed p\u0159i pou\u017eit\u00ed technologi\u00ed xPON nebo podobn\u00fdch. Nap\u0159\u00edklad bez hrozby n\u00e1hl\u00e9ho poklesu rychlosti s rostouc\u00edm po\u010dtem u\u017eivatel\u016f nebo \u0161patn\u00e9 kompatibility mezi vybaven\u00edm r\u016fzn\u00fdch v\u00fdrobc\u016f a firmwarem. K rozhran\u00edm za\u0159\u00edzen\u00ed se mohou p\u0159ipojovat jak koncov\u00ed u\u017eivatel\u00e9, tak pod\u0159\u00edzen\u00e9 p\u0159ep\u00edna\u010de s optick\u00fdmi uplinky, jako je nap\u0159\u00edklad model T2600G-28TS. Na n\u00e1sleduj\u00edc\u00edm sch\u00e9matu jsou uvedeny nejb\u011b\u017en\u011bj\u0161\u00ed p\u0159\u00edklady takov\u00fdch p\u0159ipojen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/549fa77db33abc70324ba18a52261b5d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPro p\u0159\u00edstup k s\u00edti koncov\u00e9ho u\u017eivatele m\u016f\u017ee b\u00fdt pou\u017eito optick\u00e9 vl\u00e1kno nebo kroucen\u00e1 dvojlinka. Na stran\u011b u\u017eivatele m\u016f\u017ee b\u00fdt optick\u00e9 vl\u00e1kno terminov\u00e1no bu\u010f pomoc\u00ed p\u0159evodn\u00edku m\u00e9di\u00ed (mediakonvertor), nap\u0159\u00edklad TP-Link MC220L, nebo s pou\u017eit\u00edm optick\u00e9ho rozhran\u00ed v SOHO routeru.<\/p>\n<p>Pro p\u0159ipojen\u00ed bl\u00edzk\u00e9ho klienta lze vyu\u017e\u00edt \u010dty\u0159i RJ-45 porty pracuj\u00edc\u00ed na rychlostech 10\/100\/1000 Mb\/s. Pokud by v\u0161ak z n\u011bjak\u00e9ho d\u016fvodu bylo toto nedostate\u010dn\u00e9, oper\u00e1tor m\u016f\u017ee \"konvertovat\" optick\u00e9 rozhran\u00ed switche na m\u011bd\u011bn\u00e9. To lze prov\u00e9st pomoc\u00ed specializovan\u00fdch \"m\u011bd\u011bn\u00fdch\" SFP s RJ-45 konektorem. Takov\u00e9 \u0159e\u0161en\u00ed v\u0161ak nelze nazvat typov\u00fdm.<\/p>\n<h2>N\u011bkolik p\u0159\u00edklad\u016f z praxe<\/h2>\n<p>\nPro \u00faplnost bychom r\u00e1di uvedli n\u011bkolik p\u0159\u00edklad\u016f vyu\u017eit\u00ed switch\u016f modelu T2600G-28SQ.<\/p>\n<p>Podmoskevsk\u00fd provider <noindex><a rel=\"nofollow\" href=\"https:\/\/www.divo.ru\/\">\"DIVO\"<\/a><\/noindex>, kter\u00fd krom\u011b internetu nab\u00edz\u00ed tak\u00e9 telefonn\u00ed slu\u017eby a kabelovou TV, pou\u017e\u00edv\u00e1 T2600G-28SQ na \u00farovni p\u0159\u00edstupu p\u0159i budov\u00e1n\u00ed s\u00edt\u00ed v soukrom\u00e9m sektoru (chaty a \u0159adov\u00e9 domy). Z pohledu klienta je p\u0159ipojen\u00ed realizov\u00e1no k router\u016fm s SFP portem a tak\u00e9 m\u00e9diakonvertor\u016fm. V sou\u010dasn\u00e9 dob\u011b se u n\u00e1s s\u00e9riov\u011b nevyr\u00e1b\u011bj\u00ed SOHO routery s SFP portem, ale ur\u010dit\u011b o tom p\u0159em\u00fd\u0161l\u00edme.<\/p>\n<p>Telekomunika\u010dn\u00ed oper\u00e1tor <noindex><a rel=\"nofollow\" href=\"https:\/\/mks-net.ru\/\">MKS<\/a><\/noindex> z Pavlovo-Posadsk\u00e9ho okresu pou\u017e\u00edv\u00e1 switche T2600G-28SQ jako \"malou agregaci\", p\u0159i\u010dem\u017e na p\u0159\u00edstupu pou\u017e\u00edv\u00e1 switche model\u016f T2600G-28TS a T2500G-10TS.<\/p>\n<p>Skupina spole\u010dnost\u00ed <noindex><a rel=\"nofollow\" href=\"http:\/\/garantia.tv\/\">\"Garantie\"<\/a><\/noindex> nab\u00edz\u00ed na jihov\u00fdchod\u011b Moskevsk\u00e9 oblasti (Kolomna, Luhovice, Zarejsk, St\u0159\u00edbrn\u00e9 rybn\u00edky, Ozero) p\u0159\u00edstup k internetu, TV, telefonn\u00edm slu\u017eb\u00e1m a syst\u00e9my videomonitoringu. Orienta\u010dn\u00ed topologie je zde podobn\u00e1 jako u MKS: T2600G-28SQ na \u00farovni agregace a T2600G-28TS a T2500G-10TS na \u00farovni p\u0159\u00edstupu.<\/p>\n<p>Provider <noindex><a rel=\"nofollow\" href=\"http:\/\/www.sktv.ru\/\">SKTV<\/a><\/noindex> z Krasnoznamenka poskytuje p\u0159\u00edstup k internetu pomoc\u00ed s\u00edt\u011b s hlubok\u00fdm pronik\u00e1n\u00edm optiky. Na jej\u00edm z\u00e1klad\u011b tak\u00e9 le\u017e\u00ed T2600G-28SQ.<\/p>\n<p>V n\u00e1sleduj\u00edc\u00edch odd\u00edlech stru\u010dn\u011b pop\u00ed\u0161eme n\u011bkter\u00e9 mo\u017enosti modelu T2600G-28SQ. Abychom materi\u00e1l nenafukovali, n\u011bkolik mo\u017enost\u00ed jsme nechali stranou: QinQ (VLAN VPN), routov\u00e1n\u00ed, QoS a dal\u0161\u00ed. Mysl\u00edme, \u017ee se k nim m\u016f\u017eeme vr\u00e1tit v n\u011bkter\u00e9m z n\u00e1sleduj\u00edc\u00edch p\u0159\u00edsp\u011bvk\u016f.<\/p>\n<h2>Mo\u017enosti switche<\/h2>\n<p><\/p>\n<h3>Z\u00e1lohov\u00e1n\u00ed \u2013 STP<\/h3>\n<p>\nSTP \u2013 Spanning Tree Protocol. Protokol spojovac\u00edho (pokryt\u00ed) stromu je zn\u00e1m ji\u017e velmi dlouho, a to d\u00edky v\u00e1\u017een\u00e9 Rad\u011b Perlmanov\u00e9. V modern\u00edch s\u00edt\u00edch se administr\u00e1to\u0159i sna\u017e\u00ed v\u0161emi zp\u016fsoby vyhnout pou\u017e\u00edv\u00e1n\u00ed tohoto protokolu. Ano, STP nen\u00ed bez nedostatk\u016f. A je velmi dob\u0159e, pokud m\u00e1 alternativu. Nicm\u00e9n\u011b, jak to \u010dasto b\u00fdv\u00e1, alternativa tohoto protokolu bude siln\u011b z\u00e1viset na dodavateli. Proto Spanning Tree Protocol z\u016fst\u00e1v\u00e1 t\u00e9m\u011b\u0159 jedin\u00fdm \u0159e\u0161en\u00edm, kter\u00e9 podporuj\u00ed prakticky v\u0161ichni v\u00fdrobci a je zn\u00e1m\u00e9 v\u0161em s\u00ed\u0165ov\u00fdm administr\u00e1tor\u016fm.<\/p>\n<p>P\u0159ep\u00edna\u010d TP-Link T2600G-28SQ podporuje t\u0159i verze STP: klasick\u00fd STP (IEEE 802.1D), RSTP (802.1W) a MSTP (802.1S).<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d3b855c50499dfdd1c9298b785e7ed0e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ t\u011bchto mo\u017enost\u00ed je pro v\u011bt\u0161inu mal\u00fdch internetov\u00fdch poskytovatel\u016f v Rusku zcela p\u0159ijateln\u00fd b\u011b\u017en\u00fd RSTP, kter\u00fd m\u00e1 oproti klasick\u00e9 verzi jedno nepopirateln\u00e9 v\u00fdhody \u2013 mnohem krat\u0161\u00ed dobu konvergence.<\/p>\n<p>Nejflexibiln\u011bj\u0161\u00edm protokolem je v sou\u010dasnosti MSTP, kter\u00fd podporuje virtu\u00e1ln\u00ed s\u00edt\u011b (VLAN) a umo\u017e\u0148uje n\u011bkolik r\u016fzn\u00fdch strom\u016f, co\u017e umo\u017e\u0148uje vyu\u017e\u00edt v\u0161echny dostupn\u00e9 z\u00e1lo\u017en\u00ed cesty. Administr\u00e1tor vytv\u00e1\u0159\u00ed n\u011bkolik r\u016fzn\u00fdch instanc\u00ed stromu (a\u017e osm), z nich\u017e ka\u017ed\u00e1 obsluhuje ur\u010ditou sadu virtu\u00e1ln\u00edch s\u00edt\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/4ad6b189e70e5e5b4e5f49e3466ddf5a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/0e62120fdf688cf5d97232689dc98793.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/34f36032e615a2e78ab6de666843c846.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ff0bab82970cf086bdca2b80c33b302d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b class=\"spoiler_title\">Nuance MSTP<\/b>Za\u010d\u00ednaj\u00edc\u00ed administr\u00e1to\u0159i by m\u011bli b\u00fdt p\u0159i pou\u017e\u00edv\u00e1n\u00ed MSTP velmi opatrn\u00ed. To je zp\u016fsobeno t\u00edm, \u017ee chov\u00e1n\u00ed protokolu uvnit\u0159 regionu a mezi regiony se li\u0161\u00ed. Proto je p\u0159i konfiguraci p\u0159ep\u00edna\u010d\u016f d\u016fle\u017eit\u00e9 db\u00e1t na to, aby se z\u016fstalo uvnit\u0159 jednoho regionu.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/eb3d5a63fca93ae335ac8334fedcfe58.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCo je vlastn\u011b tento proslul\u00fd region? Regionem v terminologii MSTP se naz\u00fdv\u00e1 soubor vz\u00e1jemn\u011b propojen\u00fdch p\u0159ep\u00edna\u010d\u016f, kter\u00e9 maj\u00ed shodn\u00e9 n\u00e1sleduj\u00edc\u00ed charakteristiky: jm\u00e9no regionu, \u010d\u00edslo revize a rozd\u011blen\u00ed virtu\u00e1ln\u00edch s\u00edt\u00ed (VLAN) mezi instancemi protokolu.<\/p>\n<p>Samoz\u0159ejm\u011b, protokol Spanning Tree (jak\u00e9koli verze) nejen bojuje s smy\u010dkami vznikaj\u00edc\u00edmi p\u0159i p\u0159ipojen\u00ed z\u00e1lo\u017en\u00edch kan\u00e1l\u016f, ale tak\u00e9 ochra\u0148uje p\u0159ed chybami kabelov\u00e9ho spojen\u00ed, kdy in\u017een\u00fdr \u00famysln\u011b nebo ne\u00famysln\u011b propojuje nespr\u00e1vn\u00e9 porty, \u010d\u00edm\u017e vytv\u00e1\u0159\u00ed smy\u010dku.<\/p>\n<p>Zku\u0161en\u00ed s\u00ed\u0165ov\u00ed administr\u00e1to\u0159i \u010dasto preferuj\u00ed vyu\u017e\u00edvat r\u016fzn\u00e9 dal\u0161\u00ed mo\u017enosti ochrany protokolu STP p\u0159ed \u00fatoky nebo komplikovan\u00fdmi hav\u00e1riemi. Model T2600G-28SQ nab\u00edz\u00ed celou \u0159adu takov\u00fdch funkc\u00ed: Loop Protect a Root Protect, TC Guard, BPDU Protect a BPDU Filter.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/dc2b070ae735f29d593041cb2f8e9c1b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSpr\u00e1vn\u00e9 pou\u017e\u00edv\u00e1n\u00ed v\u00fd\u0161e uveden\u00fdch mo\u017enost\u00ed spolu s dal\u0161\u00edmi podporovan\u00fdmi mechanismy ochrany umo\u017en\u00ed stabilizovat m\u00edstn\u00ed s\u00ed\u0165 a u\u010dinit ji p\u0159edv\u00eddateln\u011bj\u0161\u00ed.<\/p>\n<h3>Z\u00e1lohov\u00e1n\u00ed \u2013 LAG<\/h3>\n<p>\nLAG \u2013 Link Aggregation Group. Je to technologie, kter\u00e1 umo\u017e\u0148uje slou\u010dit n\u011bkolik fyzick\u00fdch kan\u00e1l\u016f do jednoho logick\u00e9ho. V\u0161echny ostatn\u00ed protokoly p\u0159estanou pou\u017e\u00edvat fyzick\u00e9 kan\u00e1ly zahrnut\u00e9 v LAG samostatn\u011b a za\u010dnou 'vid\u011bt' jeden logick\u00fd interface. P\u0159\u00edkladem takov\u00e9ho protokolu je STP.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/c4d88dffb88b5828e1a78bf371657601.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVyva\u017eov\u00e1n\u00ed u\u017eivatelsk\u00e9ho provozu mezi fyzick\u00fdmi kan\u00e1ly uvnit\u0159 logick\u00e9ho je prov\u00e1d\u011bno na z\u00e1klad\u011b hash hodnoty. Pro jej\u00ed v\u00fdpo\u010det mohou b\u00fdt pou\u017eity MAC adresy odes\u00edlatele, p\u0159\u00edjemce, nebo jejich dvojice; stejn\u011b jako IP adresy odes\u00edlatele, p\u0159\u00edjemce, nebo jejich dvojice. Informace protokol\u016f \u010dtvrt\u00e9 vrstvy (porty TCP\/UDP) se nezohled\u0148uj\u00ed.<\/p>\n<p>P\u0159ep\u00edna\u010d T2600G-28SQ podporuje statick\u00e9 a dynamick\u00e9 LAG.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/3bb9b553de91adaef9674497ed588757.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1f8150d3408c726752d272bb072d1e36.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPro sjedn\u00e1v\u00e1n\u00ed parametr\u016f pr\u00e1ce dynamick\u00e9 skupiny se pou\u017e\u00edv\u00e1 protokol LACP.<\/p>\n<h3>Bezpe\u010dnost \u2013 p\u0159\u00edstupov\u00e9 seznamy (ACL)<\/h3>\n<p>\nN\u00e1\u0161 p\u0159ep\u00edna\u010d T2600G-28SQ umo\u017e\u0148uje filtrovat u\u017eivatelsk\u00fd provoz pomoc\u00ed p\u0159\u00edstupov\u00fdch seznam\u016f (ACL \u2013 Access Control List).<\/p>\n<p>Podporovan\u00e9 p\u0159\u00edstupov\u00e9 seznamy mohou b\u00fdt n\u011bkolika r\u016fzn\u00fdch typ\u016f: MAC a IP (IPv4\/IPv6), kombinovan\u00e9, a tak\u00e9 pro prov\u00e1d\u011bn\u00ed filtrov\u00e1n\u00ed obsahu. Po\u010det podporovan\u00fdch p\u0159\u00edstupov\u00fdch seznam\u016f ka\u017ed\u00e9ho typu z\u00e1vis\u00ed na aktu\u00e1ln\u011b pou\u017e\u00edvan\u00e9m \u0161ablon\u011b SDM, kterou jsme popsali v jin\u00e9 \u010d\u00e1sti.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/bb322755068083267fb194d564eaddfe.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOper\u00e1tor m\u016f\u017ee tuto mo\u017enost pou\u017e\u00edt k blokov\u00e1n\u00ed r\u016fzn\u00fdch ne\u017e\u00e1douc\u00edch dat v s\u00edti. P\u0159\u00edkladem takov\u00e9ho provozu mohou b\u00fdt pakety IPv6 (pomoc\u00ed pole EtherType), pokud p\u0159\u00edslu\u0161n\u00e1 slu\u017eba nen\u00ed poskytov\u00e1na; nebo blokovat SMB na portu 445. V s\u00edti se statickou adresac\u00ed DHCP\/BOOTP nen\u00ed provoz pot\u0159ebn\u00fd, a proto m\u016f\u017ee administr\u00e1tor pomoc\u00ed ACL filtrovat UDP datagramy na portech 67 a 68. Blokaci m\u00edstn\u00edho IPoE provozu lze rovn\u011b\u017e prov\u00e9st pomoc\u00ed ACL. Takov\u00e9 blokace mohou b\u00fdt \u017e\u00e1dan\u00e9 v s\u00edt\u00edch oper\u00e1tor\u016f, kte\u0159\u00ed pou\u017e\u00edvaj\u00ed PPPoE.<\/p>\n<p>Proces vyu\u017e\u00edv\u00e1n\u00ed seznam\u016f p\u0159\u00edstupu je velmi jednoduch\u00fd. Po vytvo\u0159en\u00ed samotn\u00e9ho seznamu je t\u0159eba do n\u011bj p\u0159idat pot\u0159ebn\u00fd po\u010det z\u00e1znam\u016f, jejich\u017e typ p\u0159\u00edmo z\u00e1vis\u00ed na nastavovan\u00e9m seznamu.<\/p>\n<p><b class=\"spoiler_title\">Nastaven\u00ed seznam\u016f p\u0159\u00edstupu<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/b657b4b762f334f5f39b96228d11d4b7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/7db1c5c5f42a62bbe65b57fa342d4598.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/21c697e3ac31d56917b1fb09448f3a3f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/58a20ff5c0d9bc59ba0180997ba8dc8d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e516199c05bc1b68203d3f6b5a1735ee.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/046bd4c507d75678f16ee66755246755.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJe t\u0159eba poznamenat, \u017ee seznamy p\u0159\u00edstupu mohou vykon\u00e1vat nejen b\u011b\u017en\u00e9 operace pro povolen\u00ed nebo z\u00e1kaz pr\u016fchodu provozu, ale tak\u00e9 se zab\u00fdvat jeho p\u0159esm\u011brov\u00e1n\u00edm, zrcadlen\u00edm, a prov\u00e1d\u011bt p\u0159e ozna\u010den\u00ed nebo omezovat rychlost.<br \/>\nJakmile jsou v\u0161echny pot\u0159ebn\u00e9 ACL vytvo\u0159eny, m\u016f\u017ee administr\u00e1tor prov\u00e9st jejich instalaci. Je povoleno p\u0159ipojen\u00ed seznamu p\u0159\u00edstupu jak k fyzick\u00e9mu portu, tak k ur\u010dit\u00e9 virtu\u00e1ln\u00ed s\u00edti.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ec357308fa285421d175a88df5ac04d9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Bezpe\u010dnost \u2013 po\u010det MAC adres<\/h3>\n<p>\nN\u011bkdy maj\u00ed oper\u00e1to\u0159i pot\u0159ebu omezit po\u010det MAC adres, kter\u00e9 switch nau\u010d\u00ed na ur\u010dit\u00e9m portu. Seznamy p\u0159\u00edstupu umo\u017e\u0148uj\u00ed dos\u00e1hnout uveden\u00e9ho efektu, av\u0161ak vy\u017eaduj\u00ed explicitn\u00ed uveden\u00ed samotn\u00fdch MAC adres. Pokud je t\u0159eba pouze omezit po\u010det kan\u00e1lov\u00fdch adres, ale neuv\u00e1d\u011bt je v\u00fdslovn\u011b, m\u016f\u017ee pomoci port security.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/24ae781fb88a0873ca3dd356a2006906.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTakov\u00e9 omezen\u00ed m\u016f\u017ee b\u00fdt nap\u0159\u00edklad po\u017eadov\u00e1no k ochran\u011b p\u0159ed p\u0159ipojen\u00edm cel\u00e9 lok\u00e1ln\u00ed s\u00edt\u011b k jednomu rozhran\u00ed switche poskytovatele. Zde je t\u0159eba poznamenat, \u017ee hovo\u0159\u00edme o spojen\u00edm p\u0159es switch, proto\u017ee p\u0159i p\u0159ipojen\u00ed pomoc\u00ed routeru na stran\u011b klienta T2600G-28SQ se nau\u010d\u00ed pouze jednu adresu \u2013 to je MAC pat\u0159\u00edc\u00ed WAN portu klientsk\u00e9ho routeru.<\/p>\n<p>Existuje cel\u00e1 \u0159ada \u00fatok\u016f zam\u011b\u0159en\u00fdch na p\u0159ep\u00ednac\u00ed tabulku. Mohou to b\u00fdt jak p\u0159ete\u010den\u00ed tabulky, tak MAC-spoofing. Mo\u017enost port security umo\u017e\u0148uje chr\u00e1nit se proti p\u0159ete\u010den\u00ed mostov\u00e9 tabulky a proti \u00fatok\u016fm, jejich\u017e c\u00edlem je \u00famysln\u00e9 p\u0159e\u0161kolen\u00ed p\u0159ep\u00edna\u010de a otrava jeho mostov\u00e9 tabulky.<\/p>\n<p>Nelze opomenout ani \u0161patn\u011b funguj\u00edc\u00ed klientsk\u00e9 vybaven\u00ed. Nen\u00ed vz\u00e1cn\u00e9, kdy\u017e nefunk\u010dn\u00ed s\u00ed\u0165ov\u00e1 karta po\u010d\u00edta\u010de nebo router vytv\u00e1\u0159\u00ed tok r\u00e1mc\u016f s naprosto n\u00e1hodn\u00fdmi adresami odes\u00edlatele a p\u0159\u00edjemce. Takov\u00fd tok m\u016f\u017ee snadno vy\u010derpat CAM.<\/p>\n<p>Dal\u0161\u00edm zp\u016fsobem, jak omezit po\u010det pou\u017e\u00edvan\u00fdch z\u00e1znam\u016f v mostov\u00e9 tabulce, je n\u00e1stroj MAC VLAN Security, pomoc\u00ed kter\u00e9ho m\u016f\u017ee spr\u00e1vce stanovit maxim\u00e1ln\u00ed po\u010det z\u00e1znam\u016f pro konkr\u00e9tn\u00ed virtu\u00e1ln\u00ed s\u00ed\u0165.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/fa90cfe20142f297e914206510ad7564.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKrom\u011b spr\u00e1vy dynamick\u00fdch z\u00e1znam\u016f v p\u0159ep\u00ednac\u00ed tabulce m\u016f\u017ee spr\u00e1vce tak\u00e9 vytv\u00e1\u0159et statick\u00e9.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/88c7e50213071ebe54bde20ee7b52aa1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMaxim\u00e1ln\u011b umo\u017e\u0148uje mostov\u00e1 tabulka modelu T2600G-28SQ ulo\u017eit a\u017e 16K z\u00e1znam\u016f.<br \/>\nDal\u0161\u00ed mo\u017enost\u00ed, ur\u010denou k filtrov\u00e1n\u00ed p\u0159enosu u\u017eivatelsk\u00e9ho provozu, je funkce Port Isolation, kter\u00e1 explicitn\u011b ur\u010duje, jak\u00fdm sm\u011brem je povoleno p\u0159epos\u00edl\u00e1n\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/8a0e032269dcb413eeea61d4c717da48.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/b7c793b92d5c84fc2fee017635539f96.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Bezpe\u010dnost \u2013 IMPB<\/h3>\n<p>\nNa prostoru na\u0161\u00ed rozs\u00e1hl\u00e9 vlasti se p\u0159\u00edstup oper\u00e1tor\u016f k ot\u00e1zk\u00e1m zabezpe\u010den\u00ed v s\u00edti li\u0161\u00ed od \u00fapln\u00e9ho ignorov\u00e1n\u00ed a\u017e po maxim\u00e1ln\u00ed vyu\u017eit\u00ed v\u0161ech mo\u017enost\u00ed, kter\u00e9 za\u0159\u00edzen\u00ed podporuje.<\/p>\n<p>Funkce IPv4 IMPB (IP-MAC-Port Binding) a IPv6 IMPB umo\u017e\u0148uj\u00ed chr\u00e1nit se p\u0159ed celou \u0159adou \u00fatok\u016f souvisej\u00edc\u00edch s podvr\u017een\u00edm IP a MAC adres ze strany u\u017eivatel\u016f t\u00edm, \u017ee se IP a MAC adresy klientsk\u00e9ho vybaven\u00ed v\u00e1\u017eou na rozhran\u00ed p\u0159ep\u00edna\u010de poskytovatele. Tato vazba m\u016f\u017ee b\u00fdt provedena ru\u010dn\u011b nebo pomoc\u00ed funkc\u00ed ARP Scanning a DHCP Snooping.<\/p>\n<p><b class=\"spoiler_title\">Hlavn\u00ed nastaven\u00ed IMPB<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e5b0e69b9da1049814bb411bd20344d3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/a3d1b057ed3abd39977bfcdcc7f1b83c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d90b855df7bf6c8a4738fa7afa170bb4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/0b289aa55874e001186ea0c909b67617.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/10bd1a6e78ab0a197b932b45099c96dc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/9444e36953d7ee692937f53393ecaecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Spravedlnosti je pot\u0159eba \u0159\u00edci, \u017ee pro ochranu protokolu DHCP m\u016f\u017ee b\u00fdt pou\u017eita speci\u00e1ln\u00ed funkce \u2013 DHCP Filter.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/3660b80c507504477a408cca7a3af947.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/476c0d9882812335df366c18e20bf784.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPomoc\u00ed t\u00e9to funkce m\u016f\u017ee s\u00ed\u0165ov\u00fd spr\u00e1vce ru\u010dn\u011b ozna\u010dit ty rozhran\u00ed, ke kter\u00fdm jsou p\u0159ipojeny skute\u010dn\u00e9 DHCP servery. T\u00edmto zp\u016fsobem nemohou podvodn\u00e9 DHCP servery zasahovat do procesu vyjedn\u00e1v\u00e1n\u00ed IP parametr\u016f.<\/p>\n<h3>Bezpe\u010dnost \u2013 DoS Defend<\/h3>\n<p>\nP\u0159edstavovan\u00fd model chr\u00e1n\u00ed u\u017eivatele p\u0159ed n\u011bkolika nejzn\u00e1m\u011bj\u0161\u00edmi a d\u0159\u00edve roz\u0161\u00ed\u0159en\u00fdmi DoS \u00fatoky.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/4e247ca7c7f54f7bfeaa1bfb7256c4ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u011bt\u0161ina uveden\u00fdch \u00fatok\u016f u\u017e nep\u0159edstavuje skute\u010dnou hrozbu pro za\u0159\u00edzen\u00ed s modern\u00edmi opera\u010dn\u00edmi syst\u00e9my, av\u0161ak v na\u0161ich s\u00edt\u00edch se st\u00e1le mohou objevovat i takov\u00e9, pro kter\u00e9 bylo posledn\u00ed aktualizace softwaru provedeno p\u0159ed mnoha lety.<\/p>\n<h3>Podpora DHCP<\/h3>\n<p>\nP\u0159ep\u00edna\u010d TP-Link T2600G-28SQ m\u016f\u017ee slou\u017eit jak jako DHCP server nebo relay, tak vykon\u00e1vat r\u016fzn\u00e9 filtrov\u00e1n\u00ed DHCP zpr\u00e1v, pokud jin\u00fdm za\u0159\u00edzen\u00edm je server.<\/p>\n<p>Nejjednodu\u0161\u0161\u00ed zp\u016fsob, jak u\u017eivatel\u016fm poskytnout pot\u0159ebn\u00e9 IP parametry, je aktivovat vestav\u011bn\u00fd DHCP server v p\u0159ep\u00edna\u010di. Hlavn\u00ed parametry lze pomoc\u00ed n\u011bj ji\u017e poskytnout abonent\u016fm.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/6feeb5fb761cad5a22dbca61ed5b08bf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/01882aa858887731da3e9fa6c05e64f1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/2f77b2ab3746cafc0473ebfb2df24049.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u0159ipojili jsme n\u00e1\u0161 SOHO router Archer C6 k jednomu z rozhran\u00ed p\u0159ep\u00edna\u010de a ov\u011b\u0159ili \u00fasp\u011b\u0161n\u00e9 z\u00edsk\u00e1n\u00ed adresy klientsk\u00fdm za\u0159\u00edzen\u00edm.<\/p>\n<p><b class=\"spoiler_title\">Vypad\u00e1 to takto<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/f23431e30e54b8b2da86071793ef4704.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/01ee35c7f5bff8ebec723406a827a147.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVestav\u011bn\u00fd DHCP server v p\u0159ep\u00edna\u010di mo\u017en\u00e1 nen\u00ed nejv\u00edce \u0161k\u00e1lovateln\u00e9 a flexibiln\u00ed \u0159e\u0161en\u00ed: chyb\u00ed podpora nestandardn\u00edch mo\u017enost\u00ed, neexistuje spojen\u00ed s IPAM. Pokud v\u0161ak oper\u00e1tor po\u017eaduje v\u011bt\u0161\u00ed kontrolu nad procesem p\u0159id\u011blov\u00e1n\u00ed IP adres, pou\u017eije n\u011bjak\u00fd dedikovan\u00fd DHCP server.<\/p>\n<p>T2600G-28SQ umo\u017e\u0148uje pro ka\u017edou u\u017eivatelskou pods\u00ed\u0165 specifikovat samostatn\u00fd dedikovan\u00fd DHCP server, na kter\u00fd budou sm\u011brov\u00e1ny zpr\u00e1vy diskutovan\u00e9ho protokolu. V\u00fdb\u011br pods\u00edt\u011b se prov\u00e1d\u00ed ur\u010den\u00edm odpov\u00eddaj\u00edc\u00edho L3 rozhran\u00ed: VLAN (SVI), sm\u011brovan\u00fd port nebo port-channel.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/29593e528cf2c49533c5f29aaa2e9c7c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/0a0979d517db2fad23b517abe2b12d80.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAbychom ov\u011b\u0159ili funk\u010dnost relay, nakonfigurovali jsme samostatn\u00fd router jin\u00e9ho v\u00fdrobce, aby fungoval jako DHCP server, jeho\u017e nastaven\u00ed je uvedeno n\u00ed\u017ee.<\/p>\n<pre><code class=\"plaintext\">R1#sho run | s pool\nip dhcp pool test\n\u00a0network 192.168.0.0 255.255.255.0\n\u00a0default-router 192.168.0.1\n\u00a0dns-server 8.8.8.8<\/code><\/pre>\n<p>\nKlientsk\u00fd router znovu \u00fasp\u011b\u0161n\u011b obdr\u017eel IP adresu.<\/p>\n<pre><code class=\"plaintext\">R1#sho ip dhcp binding\nBindings from all pools not associated with VRF:\nIP address\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Client-ID\/          \u00a0 \u00a0 Lease expiration        Type\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Hardware address\/\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0User name\n192.168.0.2 \u00a0 \u00a0 \u00a0 \u00a0 010c.8063.f0c2.6a   \u00a0 \u00a0 May 24 2019 05:07 PM    Automatic<\/code><\/pre>\n<p>\nPod spoilerem je obsah zachycen\u00e9ho paketu mezi p\u0159ep\u00edna\u010dem a dedikovan\u00fdm DHCP serverem.<\/p>\n<p><b class=\"spoiler_title\">Obsah paketu<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/c2aeec99eaf08babfcc45f05c1b8fe20.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nNelze opomenout podporu volby 82 ze strany p\u0159ep\u00edna\u010de. Po jej\u00edm aktivov\u00e1n\u00ed p\u0159ep\u00edna\u010d p\u0159id\u00e1 informace o u\u017eivatelsk\u00e9m rozhran\u00ed, ze kter\u00e9ho byla p\u0159ijata zpr\u00e1va DHCP Discover. Model T2600G-28SQ tak\u00e9 umo\u017e\u0148uje nastavit politiku zpracov\u00e1n\u00ed p\u0159id\u00e1van\u00fdch informac\u00ed p\u0159i vlo\u017een\u00ed volby \u010d. 82. Podpora uveden\u00e9 volby m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e1 v situaci, kdy pot\u0159ebuje koncov\u00fd u\u017eivatel z\u00edskat stejnou IP adresu bez ohledu na to, jak\u00fd identifik\u00e1tor klient (client-id) s\u00e1m sebe hl\u00e1s\u00ed.<br \/>\nNa obr\u00e1zku n\u00ed\u017ee je zobrazena zpr\u00e1va DHCP Discover (p\u0159enesen\u00e1 rel\u00e9rem) s p\u0159idanou volbou \u010d. 82.<\/p>\n<p><b class=\"spoiler_title\">Zpr\u00e1va s volbou \u010d. 82<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/5209e964b2f4b961549caa41186aae1a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSamoz\u0159ejm\u011b, \u017ee volbu \u010d. 82 lze \u0159\u00eddit i bez nastaven\u00ed plnohodnotn\u00e9ho DHCP rel\u00e9ru, p\u0159\u00edslu\u0161n\u00e1 nastaven\u00ed jsou uvedena v pododstavci \u201eDHCP L2 Relay\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/030b8b8d5643db187fbc536ee9a65ad3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d1ef234eaa7e68494e8cfdf63f9b61ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed zm\u011bn\u00edme nastaven\u00ed DHCP serveru tak, abychom mohli demonstrovat pou\u017e\u00edv\u00e1n\u00ed volby \u010d. 82.<\/p>\n<pre><code class=\"plaintext\">R1#sho run | s dhcp\nip dhcp pool test\n\u00a0network 192.168.0.0 255.255.255.0\n\u00a0default-router 192.168.0.1\n\u00a0dns-server 8.8.8.8\n\u00a0class option82_test\n\u00a0\u00a0address range 192.168.0.222 192.168.0.222\nip dhcp class option82_test\n\u00a0relay agent information\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0relay-information hex 010e010c74702d6c696e6b5f746573740208000668ff7b66f675\nR1#sho ip dhcp binding\nBindings from all pools not associated with VRF:\nIP address\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Client-ID\/          \u00a0 \u00a0 Lease expiration        Type\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Hardware address\/\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0User name\n192.168.0.222 \u00a0 \u00a0 \u00a0 010c.8063.f0c2.6a   \u00a0 \u00a0 May 24 2019 05:33 PM    Automatic<\/code><\/pre>\n<p><b class=\"spoiler_title\">Takto n\u011bjak<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ea060a5e7f651f439d01f87e769cebcb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nFunkce DHCP interface relay bude u\u017eite\u010dn\u00e1 v situaci, kdy m\u00e1 p\u0159ep\u00edna\u010d nejen L3 rozhran\u00ed p\u0159ipojen\u00e9 k ur\u010dit\u00e9 s\u00edti, ale toto rozhran\u00ed tak\u00e9 disponuje IP adresou. V p\u0159\u00edpad\u011b, \u017ee na takov\u00e9m rozhran\u00ed chyb\u00ed adresa, p\u0159ich\u00e1z\u00ed na pomoc funkce DHCP VLAN relay. Informace o pods\u00edti se v tomto p\u0159\u00edpad\u011b z\u00edsk\u00e1vaj\u00ed z v\u00fdchoz\u00edho rozhran\u00ed, co\u017e znamen\u00e1, \u017ee adresn\u00ed prostory ve v\u00edce virtu\u00e1ln\u00edch s\u00edt\u00edch budou identick\u00e9 (p\u0159ekr\u00fdvat se).<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/144798b0657313867fe3561a19491588.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u010casto je tak\u00e9 pot\u0159eba ochr\u00e1nit koncov\u00e9 u\u017eivatele p\u0159ed chybn\u011b nebo zlovoln\u011b zapnut\u00fdm DHCP serverem na jejich za\u0159\u00edzen\u00edch. O t\u00e9to funkcionalit\u011b jsme se rozhodli hovo\u0159it v jedn\u00e9 z \u010d\u00e1st\u00ed v\u011bnovan\u00fdch ot\u00e1zk\u00e1m bezpe\u010dnosti.<\/p>\n<h3>IEEE 802.1X<\/h3>\n<p>\nJedn\u00edm z zp\u016fsob\u016f autentizace u\u017eivatel\u016f v s\u00edti je pou\u017eit\u00ed protokolu IEEE 802.1X. Popularita tohoto protokolu v s\u00edt\u00edch oper\u00e1tor\u016f v \u010cesk\u00e9 republice ji\u017e kles\u00e1, p\u0159esto je st\u00e1le vyu\u017e\u00edv\u00e1n p\u0159edev\u0161\u00edm v m\u00edstn\u00edch s\u00edt\u00edch velk\u00fdch firem pro autentizaci intern\u00edch u\u017eivatel\u016f organizace. Ve switche T2600G-28SQ je podpora 802.1X, tak\u017ee poskytovatel ji m\u016f\u017ee v p\u0159\u00edpad\u011b pot\u0159eby snadno aktivovat.<\/p>\n<p>Pro fungov\u00e1n\u00ed protokolu IEEE 802.1X jsou pot\u0159eba t\u0159i \u00fa\u010dastn\u00edci: klientsk\u00e9 za\u0159\u00edzen\u00ed (supplicant), p\u0159\u00edstupov\u00fd switch poskytovatele (authenticator) a autentiza\u010dn\u00ed server (obvykle RADIUS server).<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/84a83abce77dedc15167d8bf9544104b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ\u00e1kladn\u00ed konfigurace ze strany oper\u00e1tora je velmi jednoduch\u00e1. Je nutn\u00e9 pouze uv\u00e9st IP adresu pou\u017e\u00edvan\u00e9ho RADIUS serveru, na kter\u00e9m bude uchov\u00e1v\u00e1na u\u017eivatelsk\u00e1 datab\u00e1ze, a tak\u00e9 vybrat rozhran\u00ed, pro kter\u00e9 je pot\u0159ebn\u00e1 autentizace.<\/p>\n<p><b class=\"spoiler_title\">Z\u00e1kladn\u00ed nastaven\u00ed 802.1X<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/fce16a4e161f748c122d870c1402a33b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ce7f4a576c6cac958b6532c14dbe74c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/26e55f233ce1d4699125fa708bd71d7d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/14e3511a67b3ead7705f1a9bd17e126d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ee8916b8b20f2e0feccc750dcf6a3966.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ klientsk\u00e9 strany je tak\u00e9 vy\u017eadov\u00e1no mal\u00e9 nastaven\u00ed. V\u0161echny modern\u00ed opera\u010dn\u00ed syst\u00e9my ji\u017e obsahuj\u00ed pot\u0159ebn\u00fd software. Pokud je to nutn\u00e9, m\u016f\u017eete nainstalovat a pou\u017e\u00edvat aplikaci TP-Link 802.1x Client \u2013 aplikaci, kter\u00e1 umo\u017e\u0148uje autentizaci klienta v s\u00edti.<\/p>\n<p>P\u0159i p\u0159ipojen\u00ed osobn\u00edho po\u010d\u00edta\u010de p\u0159\u00edmo do s\u00edt\u011b poskytovatele je nutn\u00e9 aktivovat nastaven\u00ed autentizace pro s\u00ed\u0165ovou kartu, kter\u00e1 se pou\u017e\u00edv\u00e1 pro p\u0159ipojen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/48fb3e3d391705c4a424841708ec227b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/5574857815c75f90169113ed468baaac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/71545d12becfb9c311ca733a71c4ea25.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV sou\u010dasn\u00e9 dob\u011b se k s\u00edti oper\u00e1tora obvykle nep\u0159ipojuje p\u0159\u00edmo po\u010d\u00edta\u010d u\u017eivatele, ale ur\u010dit\u00fd SOHO router, kter\u00fd zaji\u0161\u0165uje fungov\u00e1n\u00ed m\u00edstn\u00ed s\u00edt\u011b abonenta (jak dr\u00e1tov\u00e9ho, tak bezdr\u00e1tov\u00e9ho segmentu). V tomto p\u0159\u00edpad\u011b mus\u00ed b\u00fdt v\u0161echny nastaven\u00ed protokolu 802.1X prov\u00e1d\u011bna p\u0159\u00edmo na routeru.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/80c6e5133ef1bce755f724d9489017ab.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMysl\u00edme si, \u017ee v oper\u00e1torsk\u00fdch s\u00edt\u00edch je tento zp\u016fsob autentizace nepr\u00e1vem zapomenut. Ano, pevn\u00e9 p\u0159i\u0159azen\u00ed abonenta k portu switche m\u016f\u017ee b\u00fdt z pohledu nastaven\u00ed u\u017eivatelsk\u00e9ho za\u0159\u00edzen\u00ed jednodu\u0161\u0161\u00edm \u0159e\u0161en\u00edm. Ale pokud je pou\u017eit\u00ed u\u017eivatelsk\u00e9ho jm\u00e9na a hesla nezbytn\u00e9, pak 802.1X bude m\u00e9n\u011b zat\u011b\u017euj\u00edc\u00edm protokolem ve srovn\u00e1n\u00ed s p\u0159ipojen\u00edmi zalo\u017een\u00fdmi na tunelov\u00e1n\u00ed PPTP\/L2TP\/PPPoE.<\/p>\n<h3>PPPoE ID Insertion<\/h3>\n<p>\nMnoz\u00ed u\u017eivatel\u00e9 nejen v na\u0161\u00ed zemi, ale i po cel\u00e9m sv\u011bt\u011b st\u00e1le d\u00e1vaj\u00ed p\u0159ednost pou\u017eit\u00ed maxim\u00e1ln\u011b jednoduch\u00fdch hesel. A p\u0159\u00edpady kr\u00e1de\u017ee p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f, bohu\u017eel, nejsou ni\u010d\u00edm neobvykl\u00fdm. Pokud oper\u00e1tor ve sv\u00e9 s\u00edti pou\u017e\u00edv\u00e1 protokol PPPoE pro autentizaci u\u017eivatel\u016f, m\u016f\u017ee p\u0159ep\u00edna\u010d TP-Link T2600G-28SQ pomoci vy\u0159e\u0161it probl\u00e9m s \u00fanikem p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f. Toho je dosa\u017eeno p\u0159id\u00e1n\u00edm speci\u00e1ln\u00edho ozna\u010den\u00ed k zpr\u00e1v\u011b PPPoE Active Discovery. T\u00edmto zp\u016fsobem m\u016f\u017ee poskytovatel autentizovat p\u0159edplatitele nejen podle p\u0159ihla\u0161ovac\u00edho jm\u00e9na a hesla, ale i podle dal\u0161\u00edch \u00fadaj\u016f. Mezi tyto dal\u0161\u00ed \u00fadaje pat\u0159\u00ed MAC adresa klientsk\u00e9ho za\u0159\u00edzen\u00ed a tak\u00e9 rozhran\u00ed p\u0159ep\u00edna\u010de, ke kter\u00e9mu je p\u0159ipojen.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/36bee4f88c30e6d73d67e48aa4caf279.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u011bkte\u0159\u00ed oper\u00e1to\u0159i v z\u00e1sad\u011b cht\u011bj\u00ed zak\u00e1zat p\u0159edplatiteli (p\u00e1r p\u0159ihla\u0161ovac\u00ed jm\u00e9no a heslo) mo\u017enost pohybovat se v s\u00edti. Funkce PPPoE ID Insertion pom\u016f\u017ee i v tomto p\u0159\u00edpad\u011b.<\/p>\n<h3>IGMP<\/h3>\n<p>\nProtokol IGMP (Internet Group Management Protocol) existuje ji\u017e n\u011bkolik desetilet\u00ed. Jeho popularita je zcela pochopiteln\u00e1 a snadno vysv\u011btliteln\u00e1. V interakci IGMP se \u00fa\u010dastn\u00ed dv\u011b strany: po\u010d\u00edta\u010d u\u017eivatele (nebo jak\u00e9koli jin\u00e9 za\u0159\u00edzen\u00ed, nap\u0159\u00edklad STB) a IP router, kter\u00fd obsluhuje ur\u010dit\u00fd segment s\u00edt\u011b. P\u0159ep\u00edna\u010de se na t\u00e9to v\u00fdm\u011bn\u011b nijak nepod\u00edlej\u00ed. Toto tvrzen\u00ed v\u0161ak nen\u00ed zcela pravdiv\u00e9. Nebo v modern\u00edch s\u00edt\u00edch nen\u00ed v\u016fbec pravdiv\u00e9. Podpora protokolu IGMP ze strany p\u0159ep\u00edna\u010d\u016f je nezbytn\u00e1 pro optimalizaci p\u0159enosu skupinov\u00e9ho provozu. Naslouch\u00e1n\u00edm u\u017eivatelsk\u00e9mu provozu p\u0159ep\u00edna\u010d v n\u011bm objevuje zpr\u00e1vy IGMP Report, pomoc\u00ed kter\u00fdch ur\u010duje porty pro p\u0159enos skupinov\u00e9ho provozu. Tento popsan\u00fd re\u017eim se naz\u00fdv\u00e1 IGMP Snooping.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/821a3271de0abaf96f30d0362197641c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e2aabb8cceef6cf5744b73d2dbe06757.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d05831139a806d59e3a254e81c117870.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodpora protokolu IGMP m\u016f\u017ee b\u00fdt vyu\u017eita nejen pro optimalizaci samotn\u00e9ho provozu, ale tak\u00e9 pro ur\u010den\u00ed p\u0159edplatitel\u016f, kter\u00fdm m\u016f\u017ee b\u00fdt poskytov\u00e1na ur\u010dit\u00e1 slu\u017eba, nap\u0159\u00edklad IPTV. C\u00edlen\u00e9ho v\u00fdsledku lze dos\u00e1hnout jak pomoc\u00ed manu\u00e1ln\u00edho nastaven\u00ed filtr\u016f, tak i prost\u0159ednictv\u00edm autentizace.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1bcce235ca8a0b7c5e252923f2dde5aa.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/7f01f7f1ffd91a43842027db73877424.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/4b257dcc852f8ca94cb3fe3d2a4d88cc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodpora skupinov\u00e9ho provozu na p\u0159ep\u00edna\u010d\u00edch TP-Link je realizov\u00e1na dostate\u010dn\u011b flexibiln\u011b. Nap\u0159\u00edklad v\u0161echny parametry mohou b\u00fdt nastaveny pro ka\u017edou virtu\u00e1ln\u00ed s\u00ed\u0165 zvl\u00e1\u0161\u0165.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/de5878132f6c38ecb29dd708d1e789ba.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/6217a8a6140a1c78ba44d66f052d4738.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokud je k jednomu rozhran\u00ed routeru p\u0159ipojeno v\u00edce pods\u00edt\u00ed, v nich\u017e se nach\u00e1zej\u00ed p\u0159\u00edjemci multicastov\u00e9ho provozu, router bude nucen poslat n\u011bkolik kopi\u00ed paket\u016f p\u0159es toto rozhran\u00ed (po jedn\u00e9 pro ka\u017edou virtu\u00e1ln\u00ed s\u00ed\u0165). <br \/>\nOptimalizaci procesu p\u0159epos\u00edl\u00e1n\u00ed multicastov\u00e9ho provozu v tomto p\u0159\u00edpad\u011b je mo\u017en\u00e9 prov\u00e9st pomoc\u00ed technologie MVR \u2013 Multicast VLAN Registration.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/5ee56dda04ed4094589294b824e9637f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/29c20443d795e53590633d7103bcf4e0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodstatou \u0159e\u0161en\u00ed je, \u017ee se vytvo\u0159\u00ed jedna virtu\u00e1ln\u00ed s\u00ed\u0165, kter\u00e1 spojuje v\u0161echny p\u0159\u00edjemce. Tato virtu\u00e1ln\u00ed s\u00ed\u0165 je v\u0161ak pou\u017e\u00edvan\u00e1 pouze pro multicastov\u00fd provoz. Tento p\u0159\u00edstup umo\u017e\u0148uje routeru odes\u00edlat pouze jednu kopii multicastov\u00e9ho provozu p\u0159es rozhran\u00ed.<\/p>\n<h3>DDM, OAM a DLDP<\/h3>\n<p>\nDDM \u2013 Digital Diagnostic Monitoring. B\u011bhem provozu optick\u00fdch modul\u016f je \u010dasto nutn\u00e9 sledovat stav samotn\u00e9ho modulu, jako\u017e i optick\u00e9ho kan\u00e1lu, ke kter\u00e9mu je p\u0159ipojen. S touto \u00falohou pom\u016f\u017ee funkce DDM. D\u00edky n\u00ed mohou in\u017een\u00fd\u0159i oper\u00e1tora sledovat teplotu ka\u017ed\u00e9ho modulu s touto funkcionalitou, nap\u011bt\u00ed na n\u011bm, proud, a tak\u00e9 v\u00fdkon p\u0159en\u00e1\u0161en\u00e9ho a p\u0159ij\u00edman\u00e9ho optick\u00e9ho sign\u00e1lu.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ba794f2dc717a9ce45c305dc063f9a82.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNastaven\u00ed prahov\u00fdch hodnot pro v\u00fd\u0161e uveden\u00e9 parametry umo\u017en\u00ed generovat ud\u00e1lost v p\u0159\u00edpad\u011b, \u017ee p\u0159ekro\u010d\u00ed povolen\u00fd rozsah.<\/p>\n<p><b class=\"spoiler_title\">Nastaven\u00ed prah\u016f pro sp\u00edn\u00e1n\u00ed DDM<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/614f4f968e1719c13ed211f41edc4f58.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/8b30d970b78bb5c0fa06a8cbcc860784.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/7059eeaec5bbc20008986b51d6993832.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSamoz\u0159ejm\u011b, \u017ee administr\u00e1tor m\u016f\u017ee zobrazit aktu\u00e1ln\u00ed hodnoty uveden\u00fdch parametr\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ef99e685414acf1dd75015ae6c6c2691.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u0159ep\u00edna\u010d TP-Link T2600G-28SQ m\u00e1 aktivn\u00ed vzduchov\u00e9 chlazen\u00ed. Nav\u00edc jsme se nikdy nesetkali s p\u0159eh\u0159\u00e1t\u00edm SFP modul\u016f v na\u0161ich p\u0159ep\u00edna\u010d\u00edch, kter\u00e9 by bylo zp\u016fsobeno hustotou port\u016f. Pokud bychom v\u0161ak teoreticky p\u0159ipustili takovou mo\u017enost (nap\u0159\u00edklad kv\u016fli n\u011bjak\u00e9mu probl\u00e9mu uvnit\u0159 SFP modulu), administr\u00e1tor bude okam\u017eit\u011b upozorn\u011bn na potenci\u00e1ln\u011b nebezpe\u010dnou situaci pomoc\u00ed DDM. Nebezpe\u010d\u00ed zde nen\u00ed pro samotn\u00fd p\u0159ep\u00edna\u010d, ale pro diodu\/laser uvnit\u0159 SFP, proto\u017ee s rostouc\u00ed teplotou m\u016f\u017ee doch\u00e1zet k degradaci v\u00fdkonu vyza\u0159ovan\u00e9ho optick\u00e9ho sign\u00e1lu, co\u017e povede ke sn\u00ed\u017een\u00ed optick\u00e9ho rozpo\u010dtu.<\/p>\n<p>Je zde tak\u00e9 t\u0159eba poznamenat, \u017ee p\u0159ep\u00edna\u010de TP-Link nemaj\u00ed \"funkci\" vendor lock, co\u017e znamen\u00e1, \u017ee jsou podporov\u00e1ny jak\u00e9koli kompatibiln\u00ed SFP moduly, co\u017e pro s\u00ed\u0165ov\u00e9 administr\u00e1tory samoz\u0159ejm\u011b znamen\u00e1 velk\u00e9 pohodl\u00ed.<\/p>\n<p>OAM \u2014 Operace, spr\u00e1va a \u00fadr\u017eba (IEEE 802.3ah). OAM je protokol druh\u00e9 vrstvy modelu OSI, ur\u010den\u00fd pro monitorov\u00e1n\u00ed a detekci poruch v Ethernetov\u00fdch s\u00edt\u00edch. S pomoc\u00ed tohoto protokolu m\u016f\u017ee p\u0159ep\u00edna\u010d sledovat v\u00fdkonnost konkr\u00e9tn\u00edho spojen\u00ed a chyby, generovat upozorn\u011bn\u00ed, aby s\u00ed\u0165ov\u00fd administr\u00e1tor mohl efektivn\u011bji spravovat s\u00ed\u0165.<\/p>\n<p><b class=\"spoiler_title\">Z\u00e1kladn\u00ed nastaven\u00ed OAM<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e01a92e3efdf54c592c20c59d93ffd3f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/c1968538fc68c081b1ee570f03be52d6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/b5f76da323308ae245b44cf8fde2dc4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/cc95bb55e5d19e82e35363864e45555e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b class=\"spoiler_title\">Podrobnosti o fungov\u00e1n\u00ed OAM<\/b>Dva sousedn\u00ed za\u0159\u00edzen\u00ed, kter\u00e1 podporuj\u00ed OAM, prov\u00e1d\u011bj\u00ed periodickou v\u00fdm\u011bnu zpr\u00e1v zas\u00edl\u00e1n\u00edm OAMPDU, kter\u00e9 maj\u00ed t\u0159i typy: Informa\u010dn\u00ed, Upozorn\u011bn\u00ed na ud\u00e1losti a Udr\u017eov\u00e1n\u00ed smy\u010dky. Pomoc\u00ed informa\u010dn\u00edch OAMPDU si sousedn\u00ed p\u0159ep\u00edna\u010de navz\u00e1jem pos\u00edlaj\u00ed statistick\u00e9 informace a tak\u00e9 \u00fadaje definovan\u00e9 administr\u00e1torem. Tento typ zpr\u00e1v se tak\u00e9 pou\u017e\u00edv\u00e1 k udr\u017eov\u00e1n\u00ed spojen\u00ed pomoc\u00ed protokolu OAM. Zpr\u00e1vy Upozorn\u011bn\u00ed na ud\u00e1losti jsou vyu\u017e\u00edv\u00e1ny funkc\u00ed monitorov\u00e1n\u00ed spojen\u00ed k informov\u00e1n\u00ed druh\u00e9 strany o v\u00fdskytu poruch. K detekci smy\u010dky na lince se pou\u017e\u00edvaj\u00ed zpr\u00e1vy Udr\u017eov\u00e1n\u00ed smy\u010dky.<\/p>\n<p>N\u00ed\u017ee jsme se rozhodli uv\u00e9st hlavn\u00ed mo\u017enosti, kter\u00e9 protokol OAM poskytuje:<\/p>\n<ul>\n<li>monitorov\u00e1n\u00ed prost\u0159ed\u00ed (detekce a po\u010d\u00edt\u00e1n\u00ed ztracen\u00fdch r\u00e1mc\u016f),\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/f9b75f293bb5220c4eaaf5c0c3df54a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<ul>\n<li>RFI \u2013 Indikace vzd\u00e1len\u00e9 poruchy (odesl\u00e1n\u00ed ozn\u00e1men\u00ed o poru\u0161e na kan\u00e1lu),\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/54690ec0bfd8fc2814bac37fdab0816e.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<ul>\n<li>Vzd\u00e1len\u00e1 smy\u010dka (testov\u00e1n\u00ed kan\u00e1lu pro m\u011b\u0159en\u00ed latence, variace latence (jitter), po\u010dtu ztracen\u00fdch r\u00e1mc\u016f).\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/2a1c80ad408ed0afa46397591cd71de2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDal\u0161\u00ed popul\u00e1rn\u00ed mo\u017enost\u00ed, kter\u00e1 je \u017e\u00e1dan\u00e1 na optick\u00fdch p\u0159ep\u00edna\u010d\u00edch, je schopnost detekovat probl\u00e9my na komunika\u010dn\u00edm kan\u00e1lu, co\u017e vede k tomu, \u017ee kan\u00e1l se st\u00e1v\u00e1 simplexn\u00edm, co\u017e znamen\u00e1, \u017ee odes\u00edl\u00e1n\u00ed dat m\u016f\u017ee prob\u00edhat pouze jedn\u00edm sm\u011brem. Na\u0161e p\u0159ep\u00edna\u010de pou\u017e\u00edvaj\u00ed pro detekci jednopr\u016fb\u011b\u017en\u00fdch spojen\u00ed protokol DLDP \u2013 Protokol pro detekci za\u0159\u00edzen\u00ed. Je spravedliv\u00e9 poznamenat, \u017ee protokol DLDP je podporov\u00e1n jak na optick\u00fdch, tak na m\u011bd\u011bn\u00fdch rozhran\u00edch, ale domn\u00edv\u00e1me se, \u017ee bude nejv\u00edce vyu\u017e\u00edv\u00e1n p\u0159i pou\u017e\u00edv\u00e1n\u00ed optick\u00fdch vl\u00e1ken.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/47b234aca57fa6c6dbcfd872c72e06f7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u0159i detekci jednopr\u016fb\u011b\u017en\u00e9ho kan\u00e1lu m\u016f\u017ee p\u0159ep\u00edna\u010d automaticky vypnout problematick\u00e9 rozhran\u00ed, co\u017e povede k p\u0159estav\u011bn\u00ed STP stromu a vyu\u017eit\u00ed z\u00e1lo\u017en\u00edch komunika\u010dn\u00edch kan\u00e1l\u016f.<\/p>\n<p>V na\u0161em arzen\u00e1lu existuj\u00ed SFP moduly, kter\u00e9 realizuj\u00ed p\u0159\u00edjem a p\u0159enos sign\u00e1lu po jednom vl\u00e1knu. Pracuj\u00ed v\u00fdhradn\u011b v p\u00e1rech a pro p\u0159enos v r\u00e1mci p\u00e1ru vyu\u017e\u00edvaj\u00ed optick\u00fd sign\u00e1l na r\u016fzn\u00fdch vlnov\u00fdch d\u00e9lk\u00e1ch. P\u0159\u00edkladem m\u016f\u017ee b\u00fdt p\u00e1r TL-SM321A a TL-SM321B. P\u0159i pou\u017eit\u00ed takov\u00e9ho typu modul\u016f po\u0161kozen\u00ed jednoho vl\u00e1kna povede k \u00fapln\u00e9 nefunk\u010dnosti cel\u00e9ho optick\u00e9ho kan\u00e1lu. Nicm\u00e9n\u011b i na takov\u00fdch kan\u00e1lech bude protokol DLDP po\u017eadov\u00e1n, nebo\u0165, a\u010dkoli se to st\u00e1v\u00e1 velmi z\u0159\u00eddka, kan\u00e1l m\u016f\u017ee m\u00edt r\u016fzn\u00e9 charakteristiky transparentnosti pro r\u016fzn\u00e9 vlnov\u00e9 d\u00e9lky. Pravd\u011bpodobn\u011bj\u0161\u00edm probl\u00e9mem je odli\u0161n\u00e1 transparentnost kan\u00e1lu v z\u00e1vislosti na sm\u011bru \u0161\u00ed\u0159en\u00ed sv\u011btla. Odhalen\u00ed uveden\u00fdch probl\u00e9m\u016f pom\u016f\u017ee reflektogram, ale to u\u017e je \u00fapln\u011b jin\u00fd p\u0159\u00edb\u011bh.<\/p>\n<h3>LLDP<\/h3>\n<p>\nV obrovsk\u00fdch korpor\u00e1tn\u00edch nebo oper\u00e1torsk\u00fdch s\u00edt\u00edch se ob\u010das objevuj\u00ed probl\u00e9my s zastaralost\u00ed dokumentace k s\u00edti nebo nep\u0159esnostmi p\u0159i jej\u00edm vypracov\u00e1v\u00e1n\u00ed. S\u00ed\u0165ov\u00fd administr\u00e1tor se m\u016f\u017ee setkat se situac\u00ed, kdy je t\u0159eba zjistit, jak\u00e9 oper\u00e1torsk\u00e9 za\u0159\u00edzen\u00ed je skute\u010dn\u011b p\u0159ipojeno k ur\u010dit\u00e9mu rozhran\u00ed p\u0159ep\u00edna\u010de. Na pomoc p\u0159ijde protokol LLDP \u2013 Link Layer Discovery Protocol (IEEE 802.1AB).<\/p>\n<p><b class=\"spoiler_title\">Parametry fungov\u00e1n\u00ed LLDP<\/b><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e1c85683fd68134c4c11843818bf90b9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1375a28a5b9fb76fb1da80a5fb7e9328.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/46f1cb5b878b5fd81378ab4ad09a62f4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1f8cfe2684ed062bbde3367ef3a7fe74.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/22052a9ebc6df32c3b8818cef380f1cf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ec0103d4aa6e366e233b2fccbd9eebc7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa\u0161e p\u0159ep\u00edna\u010de podporuj\u00ed protokol LLDP nejen pro detekci sousedn\u00edch p\u0159ep\u00edna\u010d\u016f nebo jin\u00fdch s\u00ed\u0165ov\u00fdch za\u0159\u00edzen\u00ed, ale tak\u00e9 pro ur\u010den\u00ed jejich schopnost\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d0aa712fa6b00fabf2a12fad8eee1e33.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/37b76d160abda490a8c1ecbcf42282da.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/641b4f992392d222fcac2b46766c814a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nM\u011bd\u011bn\u00ed brat\u0159i na\u0161eho p\u0159ep\u00edna\u010de mohou vyu\u017e\u00edvat LLDP-MED pro zjednodu\u0161en\u00ed procesu p\u0159ipojen\u00ed IP telefon\u016f. Tak\u00e9 d\u00edky t\u00e9to mo\u017enosti m\u016f\u017ee PoE p\u0159ep\u00edna\u010d vyjedn\u00e1vat parametry nap\u00e1jen\u00ed s nap\u00e1jen\u00fdm za\u0159\u00edzen\u00edm. O tom jsme ji\u017e pom\u011brn\u011b podrobn\u011b hovo\u0159ili v jednom z na\u0161ich <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tp_link_russia\/blog\/351614\/\">d\u0159\u00edv\u011bj\u0161\u00edch materi\u00e1l\u016f<\/a><\/noindex>.<\/p>\n<h3>SDM a op\u011btovn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed<\/h3>\n<p>\nPrakticky v\u0161echny modern\u00ed switche zpracov\u00e1vaj\u00ed proch\u00e1zej\u00edc\u00ed r\u00e1mce a pakety bez pou\u017eit\u00ed centr\u00e1ln\u00edho procesoru. Zpracov\u00e1n\u00ed (v\u00fdpo\u010det kontroln\u00edho sou\u010dtu, aplikace p\u0159\u00edstupov\u00fdch seznam\u016f a prov\u00e1d\u011bn\u00ed dal\u0161\u00edch kontrol bezpe\u010dnostn\u00edho syst\u00e9mu, stejn\u011b jako rozhodov\u00e1n\u00ed o p\u0159ep\u00edn\u00e1n\u00ed\/routingu) se prov\u00e1d\u00ed pomoc\u00ed specializovan\u00fdch \u010dip\u016f, co\u017e umo\u017e\u0148uje dos\u00e1hnout vysok\u00fdch rychlost\u00ed p\u0159enosu u\u017eivatelsk\u00e9ho provozu. Diskutovan\u00fd switch umo\u017e\u0148uje zpracov\u00e1vat provoz p\u0159i rychlosti prost\u0159ed\u00ed. To znamen\u00e1, \u017ee v\u00fdkon za\u0159\u00edzen\u00ed je dostate\u010dn\u00fd k p\u0159enosu dat na maxim\u00e1ln\u00edch mo\u017en\u00fdch rychlostech v\u0161ech port\u016f sou\u010dasn\u011b. Model T2600G-28SQ m\u00e1 24 downlink port\u016f (sm\u011brem k u\u017eivatel\u016fm) pracuj\u00edc\u00edch na rychlostech 1 Gb\/s a 4 uplink porty (sm\u011brem k j\u00e1dru s\u00edt\u011b) po 10 Gb\/s. P\u0159itom v\u00fdkon p\u0159ep\u00ednac\u00ed sb\u011brnice switche \u010din\u00ed 128 Gb\/s, co\u017e je dostate\u010dn\u00e9 pro zpracov\u00e1n\u00ed maxim\u00e1ln\u00edho mno\u017estv\u00ed p\u0159\u00edchoz\u00edho provozu.<\/p>\n<p>Spravedliv\u011b je t\u0159eba poznamenat, \u017ee v\u00fdkon p\u0159ep\u00ednac\u00ed matice \u010din\u00ed 95,2 milionu paket\u016f za sekundu. To znamen\u00e1, \u017ee p\u0159i pou\u017eit\u00ed minim\u00e1ln\u011b mo\u017en\u00fdch r\u00e1mc\u016f o d\u00e9lce pouh\u00fdch 64 bajt\u016f bude celkov\u00fd v\u00fdkon za\u0159\u00edzen\u00ed \u010dinit 97,5 Gb\/s. Nicm\u00e9n\u011b takov\u00fd profil provozu je prakticky neuv\u011b\u0159iteln\u00fd pro s\u00edt\u011b oper\u00e1tor\u016f.<\/p>\n<p><b class=\"spoiler_title\">Co je to oversubscription<\/b>Dal\u0161\u00edm d\u016fle\u017eit\u00fdm t\u00e9matem je pom\u011br rychlost\u00ed vzestupn\u00fdch a sestupn\u00fdch kan\u00e1l\u016f (oversubscription). Zde u\u017e, jak je z\u0159ejm\u00e9, v\u0161e z\u00e1vis\u00ed na topologii. Pokud administr\u00e1tor vyu\u017eije v\u0161echny \u010dty\u0159i rozhran\u00ed 10 GE pro p\u0159ipojen\u00ed k j\u00e1dru s\u00edt\u011b a sjednot\u00ed je pomoc\u00ed technologie LAG (Link Aggregation Group) nebo Port-Channel, pak statisticky z\u00edskan\u00e1 rychlost sm\u011brem k j\u00e1dru \u010din\u00ed 40 Gb\/s, co\u017e je v\u00edce ne\u017e dostate\u010dn\u00e9 pro uspokojen\u00ed pot\u0159eb v\u0161ech p\u0159ipojen\u00fdch u\u017eivatel\u016f. A nen\u00ed nutn\u00e9, aby v\u0161echna \u010dty\u0159i vzestupn\u00e1 spojen\u00ed byla p\u0159ipojena k jednomu fyzick\u00e9mu za\u0159\u00edzen\u00ed. P\u0159ipojen\u00ed m\u016f\u017ee b\u00fdt realizov\u00e1no k hromad\u011b switch\u016f, nebo k dv\u011bma za\u0159\u00edzen\u00edmi, kter\u00e1 jsou spojena do clustera (pomoc\u00ed technologie vPC nebo podobn\u00fdch). V tomto p\u0159\u00edpad\u011b oversubscription neexistuje.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/96c03b6c3e5f3f84122cc4c87de028dd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPou\u017eit\u00ed v\u0161ech \u010dty\u0159 vzestupn\u00fdch kan\u00e1l\u016f najednou lze dos\u00e1hnout nejen jejich slou\u010den\u00edm prost\u0159ednictv\u00edm LAG. Podobn\u00e9ho efektu lze dos\u00e1hnout spr\u00e1vn\u00fdm nastaven\u00edm MSTP, ale to u\u017e je \u00fapln\u011b jin\u00fd p\u0159\u00edb\u011bh.<\/p>\n<p>Druh\u00fdm \u010dasto pou\u017e\u00edvan\u00fdm zp\u016fsobem L2 p\u0159ipojen\u00ed je vyu\u017eit\u00ed dvou nez\u00e1visl\u00fdch LAG (po jednom k ka\u017ed\u00e9mu p\u0159ep\u00edna\u010di agregace). V tomto p\u0159\u00edpad\u011b bude pravd\u011bpodobn\u011b jeden z virtu\u00e1ln\u00edch kan\u00e1l\u016f zablokov\u00e1n protokolem STP (p\u0159i pou\u017eit\u00ed STP nebo RSTP). P\u0159ep\u00edn\u00e1n\u00ed bude 5:6.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/9d2bb1d7144327338906f5ee2d76d293.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nM\u00e9n\u011b \u010dast\u00e1, ale st\u00e1le pravd\u011bpodobn\u00e1 situace: T2600G-28SQ je p\u0159ipojen nez\u00e1visl\u00fdmi kan\u00e1ly k vy\u0161\u0161\u00edmu p\u0159ep\u00edna\u010di nebo p\u0159ep\u00edna\u010d\u016fm. Protokol STP\/RSTP ponech\u00e1 pouze jeden takov\u00fd kan\u00e1l v odem\u010den\u00e9m stavu. P\u0159ep\u00edn\u00e1n\u00ed bude 5:12.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/fb4a8c1ba5c306b8af912731b779733b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00dakol se hv\u011bzdi\u010dkou: vypo\u010d\u00edtat p\u0159ep\u00edn\u00e1n\u00ed pro situace popsan\u00e9 v \u010d\u00e1sti STP, kde jsme prozkoumali p\u0159\u00edklad topologie, kdy jsou dva p\u0159\u00edstupov\u00e9 p\u0159ep\u00edna\u010de p\u0159ipojeny k jednomu agregovan\u00e9mu za\u0159\u00edzen\u00ed a jsou navz\u00e1jem propojeny.<\/p>\n<p>Programovateln\u00e9 \u010dipy, s jejich\u017e pomoc\u00ed je dosa\u017eeno tak vysok\u00e9 rychlosti p\u0159enosu, jsou pom\u011brn\u011b drah\u00fdm zdrojem, a proto se sna\u017e\u00edme optimalizovat jejich pou\u017eit\u00ed spr\u00e1vn\u00fdm rozd\u011blen\u00edm zdroj\u016f mezi r\u016fzn\u00fdmi funkcemi. Za rozd\u011blen\u00ed odpov\u00edd\u00e1 SDM \u2014 Switch Database Management.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/81327b804ba413cf18cdd5d857a40f2b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nRozd\u011blen\u00ed se prov\u00e1d\u00ed pomoc\u00ed profilu SDM. V sou\u010dasn\u00e9 dob\u011b jsou k dispozici t\u0159i profily, jak je uvedeno n\u00ed\u017ee.<\/p>\n<ul>\n<li>Default nab\u00edz\u00ed vyv\u00e1\u017een\u00e9 \u0159e\u0161en\u00ed pro pou\u017eit\u00ed seznam\u016f MAC a IP a tak\u00e9 z\u00e1znam\u016f ARP detekce.\n<\/li>\n<li>EnterpriseV4 umo\u017e\u0148uje maximalizovat zdroje dostupn\u00e9 pro pou\u017eit\u00ed seznamy MAC a IP.\n<\/li>\n<li>EnterpriseV6 \u010d\u00e1st zdroj\u016f vy\u010dle\u0148uje pro pou\u017eit\u00ed seznamy IPv6.\n<\/li>\n<\/ul>\n<p>\nPro pou\u017eit\u00ed nov\u00e9ho profilu je nutn\u00e9 restartovat p\u0159ep\u00edna\u010d.<\/p>\n<h2>Z\u00e1v\u011br<\/h2>\n<p>\nPodle p\u016fvodn\u00edho zam\u011b\u0159en\u00ed je tento p\u0159ep\u00edna\u010d ide\u00e1ln\u00ed pro telekomunika\u010dn\u00ed oper\u00e1tory, kte\u0159\u00ed maj\u00ed za \u00fakol zajistit p\u0159\u00edstup k s\u00edti na velk\u00e9 vzd\u00e1lenosti. Za\u0159\u00edzen\u00ed m\u016f\u017ee b\u00fdt vyu\u017eito jak na p\u0159\u00edstupov\u00e9 \u00farovni, nap\u0159\u00edklad v reziden\u010dn\u00edch oblastech a \u0159adov\u00fdch domech, tak pro agregaci kan\u00e1l\u016f p\u0159ich\u00e1zej\u00edc\u00edch od p\u0159\u00edstupov\u00fdch p\u0159ep\u00edna\u010d\u016f um\u00edst\u011bn\u00fdch v bytov\u00fdch domech; tedy v\u0161ude, kde jsou pot\u0159eba p\u0159ipojen\u00ed vzd\u00e1len\u00fdch objekt\u016f. P\u0159i pou\u017e\u00edv\u00e1n\u00ed optick\u00fdch komunika\u010dn\u00edch kan\u00e1l\u016f m\u016f\u017ee b\u00fdt p\u0159ipojen\u00fd \u00fa\u010dastn\u00edk vzd\u00e1len a\u017e n\u011bkolik kilometr\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/43c22f2f9139a5cddd6d5c5eb1654ba2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/f98bb979d03ec9f336cb9a93df8d8762.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd switch TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled.&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/26900a2455657ae7192eb09f84d6e1f6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ pohledu klient\u016f mohou b\u00fdt optick\u00e9 linky ukon\u010dov\u00e1ny na mal\u00fdch p\u0159ep\u00edna\u010d\u00edch s optick\u00fdmi rozhran\u00edmi nebo na mediakonvertorech.<\/p>\n<p>\u0160irok\u00e9 spektrum podporovan\u00fdch protokol\u016f a mo\u017enost\u00ed umo\u017en\u00ed pou\u017eit\u00ed T2600G-28SQ v Ethernetov\u00e9 s\u00edti oper\u00e1tora s jakoukoli topologi\u00ed a jakoukoli sadou pou\u017e\u00edvan\u00fdch technologi\u00ed a poskytovan\u00fdch slu\u017eeb. P\u0159ep\u00edna\u010d je spravov\u00e1n vzd\u00e1len\u011b pomoc\u00ed webov\u00e9ho rozhran\u00ed nebo p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku. V p\u0159\u00edpad\u011b pot\u0159eby m\u00edstn\u00edho nastaven\u00ed lze vyu\u017e\u00edt konzolov\u00fd port; u modelu T2600G-28SQ jsou dva: RJ-45 a micro-USB. Jako malou ka\u0148ku zm\u00edn\u00edme absenci podpory pro stacking a druh\u00fd zdroj nap\u00e1jen\u00ed. Pravda, zpravidla mimo datov\u00e1 centra poskytovatel\u016f bude p\u0159\u00edtomnost druh\u00e9 elektrick\u00e9 linky vz\u00e1cnost\u00ed.<\/p>\n<p>Mezi jeho v\u00fdhody pat\u0159\u00ed n\u00edzk\u00e1 cena, velk\u00e9 mno\u017estv\u00ed optick\u00fdch port\u016f pro \u00fa\u010dastn\u00edky, p\u0159\u00edtomnost optick\u00fdch uplink\u016f 10 GE, jako\u017e i \u010dty\u0159i kombinovan\u00e9 porty a p\u0159enos dat rychlost\u00ed prost\u0159ed\u00ed.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tp_link_russia\/blog\/460421\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014\u00a0\u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f. \u041e\u0434\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u041c\u043e\u0441\u043a\u0432\u0430 \u0432 2019 \u0433\u043e\u0434\u0443 \u0434\u043e\u043b\u0436\u043d\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 4 \u043c\u043b\u043d \u043a\u0432\u0430\u0434\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0442\u0440\u043e\u0432 \u0436\u0438\u043b\u044c\u044f (\u0438 \u044d\u0442\u043e \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u044f 15 \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0442\u0441\u044f \u043a 2020 \u0433\u043e\u0434\u0443). \u041d\u0430 \u0432\u0441\u0435\u0439 \u044d\u0442\u043e\u0439 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0439 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443. \u042d\u0442\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27280,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36454","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440 TP-Link T2600G-28SQ \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432: \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:11:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:11:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Optick\u00fd p\u0159ep\u00edna\u010d TP-Link T2600G-28SQ pro poskytovatele slu\u017eeb: podrobn\u00fd p\u0159ehled | ProHoster","description":"Expanze velk\u00fdch m\u011bst a vznik aglomerac\u00ed je jedn\u00edm z d\u016fle\u017eit\u00fdch trend\u016f soci\u00e1ln\u00edho v\u00fdvoje dnes.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440 TP-Link T2600G-28SQ \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432: \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440 | ProHoster","og:description":"\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:11:44+00:00","article:modified_time":"2019-10-31T19:11:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 03:24:53","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:44:23","updated":"2026-01-22 03:24:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36454"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36454\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/27280"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}