{"id":54104,"date":"2019-12-18T00:00:00","date_gmt":"2019-12-17T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika"},"modified":"2020-02-18T14:02:05","modified_gmt":"2020-02-18T11:02:05","slug":"sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika","title":{"rendered":"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/7932ae430c14e26ccf1a0f9c45ce080b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>St\u00e1nek, kter\u00fd si m\u016f\u017eete osahat u n\u00e1s v laborato\u0159i, pokud m\u00e1te z\u00e1jem. <\/i><\/p>\n<p>SD-WAN a SD-Access jsou dva r\u016fzn\u00e9 nov\u00e9 propriet\u00e1rn\u00ed p\u0159\u00edstupy k budov\u00e1n\u00ed s\u00edt\u00ed. V budoucnu by se m\u011bly slou\u010dit do jedn\u00e9 overlayov\u00e9 s\u00edt\u011b, ale prozat\u00edm se jen p\u0159ibli\u017euj\u00ed. Logika je takov\u00e1: vezmeme s\u00ed\u0165 z 90. let a aplikujeme na ni v\u0161echny pot\u0159ebn\u00e9 opravy a funkce, ani\u017e bychom \u010dekali, a\u017e se za 10 let stane nov\u00fdm otev\u0159en\u00fdm standardem. <\/p>\n<p>SD-WAN je patch SDN pro distribuovan\u00e9 podnikov\u00e9 s\u00edt\u011b. Transport samostatn\u011b, kontrola samostatn\u011b, tak\u017ee kontrola se zjednodu\u0161uje.<\/p>\n<p>V\u00fdhody \u2014 v\u0161echny komunika\u010dn\u00ed kan\u00e1ly jsou aktivn\u011b vyu\u017e\u00edv\u00e1ny v\u010detn\u011b z\u00e1lo\u017en\u00edho. Existuje sm\u011brov\u00e1n\u00ed paket\u016f k aplikac\u00edm: co, p\u0159es jak\u00fd kan\u00e1l a s jakou prioritou. Zjednodu\u0161en\u00e1 procedura nasazen\u00ed nov\u00fdch bod\u016f: m\u00edsto aplikace konfigurace sta\u010d\u00ed zadat adresu serveru Cisco na velk\u00e9m internetu, v datov\u00e9m centru KROK nebo u z\u00e1kazn\u00edka, odkud se berou konfigurace specifick\u00e9 pro va\u0161i s\u00ed\u0165. <\/p>\n<p>SD-Access (DNA) \u2014 to je automatizace \u0159\u00edzen\u00ed lok\u00e1ln\u00ed s\u00edt\u011b: konfigurace z jednoho m\u00edsta, pr\u016fvodci, pohodln\u00e9 rozhran\u00ed. V podstat\u011b se buduje jin\u00e1 s\u00ed\u0165 s jin\u00fdm transportem na \u00farovni protokol\u016f nad va\u0161\u00ed a na hranic\u00edch perimetru je zaji\u0161t\u011bna kompatibilita se star\u00fdmi s\u00edt\u011bmi. <\/p>\n<p>S t\u00edm se tak\u00e9 pod\u00edv\u00e1me n\u00ed\u017ee. <\/p>\n<p>Te\u010f trochu uk\u00e1zek na testovac\u00edch st\u00e1nc\u00edch v na\u0161\u00ed laborato\u0159i, jak to vypad\u00e1 a funguje. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Za\u010dneme se SD-WAN. Hlavn\u00ed mo\u017enosti:<\/h3>\n<p><\/p>\n<ul>\n<li>Zjednodu\u0161en\u00ed nasazen\u00ed nov\u00fdch bod\u016f (ZTP) \u2014 p\u0159edpokl\u00e1d\u00e1 se, \u017ee n\u011bjak\u00fdm zp\u016fsobem zad\u00e1v\u00e1te bodu adresu serveru s nastaven\u00edmi. Bod se k n\u011bmu p\u0159ihl\u00e1s\u00ed, obdr\u017e\u00ed konfiguraci, aplikuje ji a p\u0159ipoj\u00ed se k va\u0161\u00ed \u0159\u00eddic\u00ed panelu. T\u00edm se zaji\u0161\u0165uje Zero-Touch Provisioning (ZTP). K nasazen\u00ed koncov\u00e9ho za\u0159\u00edzen\u00ed nemus\u00ed s\u00ed\u0165ov\u00fd in\u017een\u00fdr vycestovat na m\u00edsto. Hlavn\u00ed je, aby na m\u00edst\u011b spr\u00e1vn\u011b zapnul za\u0159\u00edzen\u00ed a p\u0159ipojil k n\u011bmu v\u0161echny kabely, d\u00e1le se za\u0159\u00edzen\u00ed samo p\u0159ipoj\u00ed k syst\u00e9mu. Konfigurace lze nahr\u00e1t prost\u0159ednictv\u00edm DNS dotaz\u016f v cloudu dodavatele z p\u0159ipojen\u00e9ho USB disku, nebo lze otev\u0159\u00edt hypertextov\u00fd odkaz z notebooku p\u0159ipojen\u00e9ho k za\u0159\u00edzen\u00ed p\u0159es Wi-Fi nebo Ethernet.<\/li>\n<li>Zjednodu\u0161en\u00ed rutinn\u00edho administrativn\u00edho \u0159\u00edzen\u00ed s\u00edt\u011b \u2014 konfigurace ze \u0161ablon, glob\u00e1ln\u00ed politiky, kter\u00e9 lze centr\u00e1ln\u011b nastavovat na p\u011bt pobo\u010dek i na 5 000. V\u0161e z jednoho m\u00edsta. Aby nebyla dlouh\u00e1 cesta \u2014 velmi u\u017eite\u010dn\u00e1 mo\u017enost automatick\u00e9ho n\u00e1vratu k p\u0159edchoz\u00ed konfiguraci.<\/li>\n<li>\u0158\u00edzen\u00ed provozu na \u00farovni aplikac\u00ed \u2014 zaji\u0161t\u011bn\u00ed kvality a st\u00e1l\u00e1 aktualizace signatur aplikac\u00ed. Politiky se nastavuj\u00ed a aplikuj\u00ed centr\u00e1ln\u011b (nen\u00ed pot\u0159eba ps\u00e1t a aktualizovat routingov\u00e9 mapy pro ka\u017ed\u00fd router, jako d\u0159\u00edve). Je vid\u011bt, kdo, kam a co pos\u00edl\u00e1. <\/li>\n<li>Segmentace s\u00edt\u011b. Nez\u00e1visl\u00e9 izolovan\u00e9 VPN nad celou infrastrukturou \u2014 ka\u017ed\u00e1 s vlastn\u00ed routovac\u00ed politikou. Ve v\u00fdchoz\u00edm nastaven\u00ed je provoz mezi nimi uzav\u0159en, lze otev\u00edrat p\u0159\u00edstupy pouze pro specifick\u00e9 typy provozu ve srozumiteln\u00fdch uzlech s\u00edt\u011b, nap\u0159\u00edklad povolen\u00edm v\u0161eho p\u0159es velk\u00fd firewall nebo proxy. <\/li>\n<li>Viditelnost historie kvality provozu s\u00edt\u011b \u2014 jak fungovaly aplikace a kan\u00e1ly. Velmi u\u017eite\u010dn\u00e9 pro anal\u00fdzu a opravu situace je\u0161t\u011b p\u0159ed t\u00edm, ne\u017e za\u010dnou u\u017eivatel\u00e9 pod\u00e1vat st\u00ed\u017enosti na nestabiln\u00ed fungov\u00e1n\u00ed aplikac\u00ed.<\/li>\n<li>Viditelnost kan\u00e1l\u016f \u2014 zda stoj\u00ed za to, kolik skute\u010dn\u011b p\u0159ij\u00edmaj\u00ed dva r\u016fzn\u00ed oper\u00e1to\u0159i na objektu, nebo zda ve skute\u010dnosti proch\u00e1zej\u00ed p\u0159es jednu a tut\u00e9\u017e s\u00ed\u0165 a degraduj\u00ed\/padaj\u00ed z\u00e1rove\u0148. <\/li>\n<li>Viditelnost pro cloudov\u00e9 aplikace a \u0159\u00edzen\u00ed provozu p\u0159es ur\u010dit\u00e9 kan\u00e1ly na jeho z\u00e1klad\u011b (Cloud Onramp). <\/li>\n<li>Jedno za\u0159\u00edzen\u00ed obsahuje router a firewall (p\u0159esn\u011bji, NGFW). M\u00e9n\u011b za\u0159\u00edzen\u00ed \u2014 levn\u011bj\u0161\u00ed nasazen\u00ed nov\u00e9 pobo\u010dky.<\/li>\n<\/ul>\n<h3>Komponenty a architektura \u0159e\u0161en\u00ed SD-WAN<\/h3>\n<p>\nKoncov\u00e1 za\u0159\u00edzen\u00ed \u2014 WAN routery, kter\u00e9 mohou b\u00fdt hardwarov\u00e9 nebo virtu\u00e1ln\u00ed. <\/p>\n<p>Orkestr\u00e1tory \u2014 prost\u0159edek pro spr\u00e1vu s\u00edt\u011b. Na nich se nastavuj\u00ed parametry koncov\u00fdch za\u0159\u00edzen\u00ed, politiky routov\u00e1n\u00ed provozu, funkce zabezpe\u010den\u00ed. Vznikaj\u00ed konfigurace, kter\u00e9 se automaticky odes\u00edlaj\u00ed skrze kontroln\u00ed s\u00ed\u0165 na uzly. Paraleln\u011b orkestr\u00e1tor sleduje s\u00ed\u0165 a prov\u00e1d\u00ed monitoring \u2014 dostupnost za\u0159\u00edzen\u00ed, port\u016f, komunika\u010dn\u00edch kan\u00e1l\u016f, zat\u00ed\u017een\u00ed rozhran\u00ed.<\/p>\n<p>Analytick\u00e9 n\u00e1stroje. Vytv\u00e1\u0159ej\u00ed zpr\u00e1vy na z\u00e1klad\u011b \u00fadaj\u016f shrom\u00e1\u017ed\u011bn\u00fdch z koncov\u00fdch za\u0159\u00edzen\u00ed: historie kvality provozu kan\u00e1l\u016f, s\u00ed\u0165ov\u00fdch aplikac\u00ed, dostupnosti uzl\u016f atd. <\/p>\n<p>Controllery odpov\u00eddaj\u00ed za zav\u00e1d\u011bn\u00ed politik routov\u00e1n\u00ed provozu na s\u00ed\u0165. Nejbli\u017e\u0161\u00edm analogem v tradi\u010dn\u00edch s\u00edt\u00edch je BGP Route Reflector. Glob\u00e1ln\u00ed politiky, kter\u00e9 administr\u00e1tor nastavuje v orchestr\u00e1toru, vedou k tomu, \u017ee controllery m\u011bn\u00ed sou\u010d\u00e1st sv\u00fdch routovac\u00edch tabulek a rozes\u00edlaj\u00ed aktualizovan\u00e9 informace na koncov\u00e1 za\u0159\u00edzen\u00ed.<\/p>\n<h3>Co z\u00edsk\u00e1v\u00e1 IT slu\u017eba od SD-WAN:<\/h3>\n<p><\/p>\n<ol>\n<li>Z\u00e1lo\u017en\u00ed kan\u00e1l je neust\u00e1le vyu\u017e\u00edv\u00e1n (nepl\u00fdtv\u00e1 \u010dasem). Vyjde to levn\u011bji, proto\u017ee si m\u016f\u017eete dovolit dva ten\u010d\u00ed kan\u00e1ly. <\/li>\n<li>Automatick\u00e9 p\u0159ep\u00edn\u00e1n\u00ed provozu aplikac\u00ed mezi kan\u00e1ly. <\/li>\n<li>\u010cas administr\u00e1tora: m\u016f\u017eete glob\u00e1ln\u011b rozv\u00edjet s\u00ed\u0165, a ne se plazit od za\u0159\u00edzen\u00ed k za\u0159\u00edzen\u00ed s konfiguracemi. <\/li>\n<li>Rychlost z\u0159izov\u00e1n\u00ed nov\u00fdch pobo\u010dek. Je v\u00fdrazn\u011b vy\u0161\u0161\u00ed.<\/li>\n<li>M\u00e9n\u011b prostoj\u016f b\u011bhem v\u00fdm\u011bny nefunk\u010dn\u00edho za\u0159\u00edzen\u00ed.<\/li>\n<li>Rychl\u00e9 p\u0159ekonfigurov\u00e1n\u00ed s\u00edt\u011b pro nov\u00e9 slu\u017eby.<\/li>\n<\/ol>\n<h3>Co z\u00edsk\u00e1v\u00e1 firma od SD-WAN:<\/h3>\n<p><\/p>\n<ol>\n<li>Zaru\u010den\u00fd provoz obchodn\u00edch aplikac\u00ed na distribuovan\u00e9 s\u00edti, v\u010detn\u011b p\u0159es otev\u0159en\u00e9 internetov\u00e9 kan\u00e1ly. To se t\u00fdk\u00e1 p\u0159edv\u00eddatelnosti podnik\u00e1n\u00ed. <\/li>\n<li>Okam\u017eit\u00e1 podpora nov\u00fdch obchodn\u00edch aplikac\u00ed na cel\u00e9 distribuovan\u00e9 s\u00edti bez ohledu na po\u010det pobo\u010dek. To se t\u00fdk\u00e1 rychlosti podnik\u00e1n\u00ed.<\/li>\n<li>Rychl\u00e9 a bezpe\u010dn\u00e9 p\u0159ipojen\u00ed pobo\u010dek na jak\u00fdchkoli vzd\u00e1len\u00fdch m\u00edstech s pou\u017eit\u00edm jak\u00e9koliv technologie p\u0159ipojen\u00ed (internet je v\u0161ude, dedikovan\u00e9 linky a VPN ne). To se t\u00fdk\u00e1 flexibility podnik\u00e1n\u00ed p\u0159i v\u00fdb\u011bru lokace.<\/li>\n<li>M\u016f\u017ee to b\u00fdt projekt s dod\u00e1n\u00edm a uveden\u00edm do provozu, nebo slu\u017eba <br \/>\ns m\u011bs\u00ed\u010dn\u00edmi platbami od IT spole\u010dnosti, poskytovatele telekomunikac\u00ed nebo cloudov\u00e9ho oper\u00e1tora. Jak komu vyhovuje.<\/li>\n<\/ol>\n<p>\nV\u00fdhody podnik\u016f od SD-WAN mohou b\u00fdt naprosto r\u016fzn\u00e9, nap\u0159\u00edklad n\u00e1m jeden z\u00e1kazn\u00edk \u0159ekl, \u017ee od top mana\u017eera dostal po\u017eadavek na uskute\u010dn\u011bn\u00ed p\u0159\u00edm\u00e9 linky se v\u0161emi zam\u011bstnanci velk\u00e9 spole\u010dnosti a mo\u017enost\u00ed dod\u00e1vat obsah. <\/p>\n<blockquote><p>Pro n\u00e1s to byla \"vojensk\u00e1 operace\". V tu dobu jsme ji\u017e \u0159e\u0161ili \u00fakol modernizace KSPT. A kdy\u017e ch\u00e1peme, \u017ee se mus\u00edme v z\u00e1sad\u011b v\u011bnovat obnov\u011b za\u0159\u00edzen\u00ed, a technologick\u00fd stack se posunul d\u00e1l, pro\u010d se zab\u00fdvat obnovou stejn\u00fdch technologi\u00ed a slu\u017eeb, pokud m\u016f\u017eeme ud\u011blat krok vp\u0159ed. <\/p><\/blockquote>\n<p>\nSD-WAN je na m\u00edst\u011b instalov\u00e1n silami administr\u00e1tor\u016f. To je d\u016fle\u017eit\u00e9 pro vzd\u00e1len\u00e9 pobo\u010dky, kde m\u016f\u017ee prost\u011b chyb\u011bt kvalifikovan\u00fd spr\u00e1vce. Po\u0161lete je po\u0161tou a \u0159ekn\u011bte: \u201eKabel 1 zapn\u011bte do krabice 1, kabel 2 \u2013 do krabice 2, a nezapome\u0148te to zam\u011bnit! Nezam\u011b\u0148te to, #@$@%!\u201c. A pokud to nepopletou, za\u0159\u00edzen\u00ed se samo spoj\u00ed s centr\u00e1ln\u00edm serverem, st\u00e1hne a aplikuje sv\u00e9 konfigurace, a tato kancel\u00e1\u0159 se stane sou\u010d\u00e1st\u00ed zabezpe\u010den\u00e9 s\u00edt\u011b spole\u010dnosti. Je p\u0159\u00edjemn\u00e9, kdy\u017e nen\u00ed t\u0159eba cestovat a snadno ospravedlnit v rozpo\u010dtu.<\/p>\n<p>Zde je sch\u00e9ma st\u00e1nku:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/f73175ebe0e3f30bdbd2b032e4343279.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\nN\u011bkolik p\u0159\u00edklad\u016f nastaven\u00ed:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/cba908326273f635279d506428198c18.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Politika \u2013 glob\u00e1ln\u00ed pravidla \u0159\u00edzen\u00ed provozu. \u00daprava politiky.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/f72d3800917f72b45a923f8ab9136825.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Aktivace politiky \u0159\u00edzen\u00ed provozu. <\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/8720e69816ce1f4b95755db36e195ce0.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Hromadn\u00e9 nastaven\u00ed z\u00e1kladn\u00edch parametr\u016f za\u0159\u00edzen\u00ed (IP adresy, DHCP pooly).<\/i><\/p>\n<h3>Screenshoty monitorov\u00e1n\u00ed v\u00fdkonu aplikac\u00ed<\/h3>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/40fbe6c95baebe265e062a0d9205c198.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Pro cloudov\u00e9 aplikace.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/54240225067a87662fa0ca488d8f75a3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Podrobn\u011b pro Office365.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/75ff697cb496179eb771dbf88ce71cb3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Pro on-prem aplikace. Bohu\u017eel jsme na na\u0161em st\u00e1nku nena\u0161li aplikace s chybami (FEC Recovery rate je v\u0161ude nula).<\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/93fdcaf46286cd64e0b158c6f112e8a6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Dal\u0161\u00ed \u2013 v\u00fdkon kan\u00e1l\u016f p\u0159enosu dat.<\/i><\/p>\n<h3>Jak\u00fd hardware je podporov\u00e1n na SD-WAN<\/h3>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/2b40239285043142e97d1e6898119fb9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n1. Hardwarov\u00e9 platformy:<\/p>\n<ul>\n<li>Routery Cisco vEdge (d\u0159\u00edv\u011bj\u0161\u00ed n\u00e1zev \u2013 Viptela vEdge), b\u011b\u017e\u00edc\u00ed na opera\u010dn\u00edm syst\u00e9mu Viptela.<\/li>\n<li>Routery Integrated Services Router (ISR) s\u00e9rie 1 000 a 4 000, b\u011b\u017e\u00edc\u00ed na IOS XE SD-WAN.<\/li>\n<li>Router Aggregation Services Router (ASR) s\u00e9rie 1 000, b\u011b\u017e\u00edc\u00ed na IOS XE SD-WAN.<\/li>\n<\/ul>\n<p>\n2. Virtu\u00e1ln\u00ed platformy:<\/p>\n<ul>\n<li>Router Cloud Services Router (CSR) 1 000v, b\u011b\u017e\u00edc\u00ed na IOS XE SD-WAN.<\/li>\n<li>Router vEdge Cloud Router, b\u011b\u017e\u00edc\u00ed na opera\u010dn\u00edm syst\u00e9mu Viptela.<\/li>\n<\/ul>\n<p>\nVirtu\u00e1ln\u00ed platformy lze nasazovat na v\u00fdpo\u010detn\u00edch platform\u00e1ch Cisco x86, nap\u0159\u00edklad Enterprise Network Compute System (ENCS) s\u00e9rie 5 000, Unified Computing System (UCS) a Cloud Services Platform (CSP) s\u00e9rie 5 000. Virtu\u00e1ln\u00ed platformy mohou tak\u00e9 b\u011b\u017eet na jak\u00e9mkoli za\u0159\u00edzen\u00ed x86, kter\u00e9 pou\u017e\u00edv\u00e1 hypervisor, jako je KVM nebo VMware ESi.<\/p>\n<h3>Jak se nasazuj\u00ed nov\u00e1 za\u0159\u00edzen\u00ed<\/h3>\n<p>\nSeznam licencovan\u00fdch za\u0159\u00edzen\u00ed k nasazen\u00ed se stahuje bu\u010f ze smart \u00fa\u010dtu v Cisco nebo se nahr\u00e1v\u00e1 CSV souborem. V\u00edce screenshot\u016f se pokus\u00edm z\u00edskat pozd\u011bji, moment\u00e1ln\u011b nem\u00e1me \u017e\u00e1dn\u00e1 nov\u00e1 za\u0159\u00edzen\u00ed k nasazen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/880aaa116c35107320e0fbce61624e7b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Postup krok\u016f, kter\u00fdm za\u0159\u00edzen\u00ed proch\u00e1z\u00ed p\u0159i nasazen\u00ed.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/95d92a7d701ee3ff1672cf4ccd922b27.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Jak se nasazuj\u00ed nov\u00e1 za\u0159\u00edzen\u00ed\/zp\u016fsob dod\u00e1n\u00ed konfigurace<\/h3>\n<p>\nZakl\u00e1d\u00e1me za\u0159\u00edzen\u00ed ve Smart Account.<\/p>\n<p>CSV soubor lze nahr\u00e1t, nebo postupn\u011b po jednom:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/0434a3dbf75666e397cddc285001d6cd.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\nVypl\u0148ujeme parametry za\u0159\u00edzen\u00ed:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/66e54600d307cbd83f68e468ccdc234f.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\nD\u00e1le v vManage synchronizujeme data se Smart Account. Za\u0159\u00edzen\u00ed se objev\u00ed v seznamu:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/a99add074b70d7650c25c9dab4925eba.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV rozbalovac\u00ed nab\u00eddce naproti za\u0159\u00edzen\u00ed klikneme na Generate Bootstrap Configuration <br \/>\na z\u00edsk\u00e1me po\u010d\u00e1te\u010dn\u00ed konfiguraci:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/d8a15bbf1248c64b7dd11d19996aad43.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTuto konfiguraci je t\u0159eba nahr\u00e1t za\u0159\u00edzen\u00ed. Nejjednodu\u0161\u0161\u00ed zp\u016fsob \u2014 p\u0159ipojit k za\u0159\u00edzen\u00ed flash disk se souborem pojmenovan\u00fdm ciscosd-wan.cfg. P\u0159i spu\u0161t\u011bn\u00ed za\u0159\u00edzen\u00ed bude tento soubor hledat. <\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/06e47a93f82a5db1680f36cee977c70b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPo z\u00edsk\u00e1n\u00ed po\u010d\u00e1te\u010dn\u00ed konfigurace bude za\u0159\u00edzen\u00ed schopno se p\u0159ipojit k orchestr\u00e1toru a z\u00edskat od n\u011bj plnou konfiguraci. <\/p>\n<h3>Pod\u00edvejme se na SD-Access (DNA)<\/h3>\n<p>\nSD-Access zjednodu\u0161uje nastaven\u00ed port\u016f a p\u0159\u00edstupov\u00fdch pr\u00e1v pro p\u0159ipojen\u00ed u\u017eivatel\u016f. To se prov\u00e1d\u00ed pomoc\u00ed wizard\u016f. Parametry port\u016f jsou nastavov\u00e1ny v vazb\u011b na skupiny \"Administr\u00e1to\u0159i\", \"\u00da\u010detnictv\u00ed\", \"Tisk\u00e1rny\", nikoliv na VLAN a IP pods\u00edt\u011b. To minimalizuje chyby spojen\u00e9 s lidsk\u00fdm faktorem. Pokud m\u00e1 nap\u0159\u00edklad firma mnoho pobo\u010dek po Rusku a centr\u00e1ln\u00ed kancel\u00e1\u0159 je p\u0159et\u00ed\u017eena, umo\u017e\u0148uje SD-Access \u0159e\u0161it v\u00edce \u00fakol\u016f p\u0159\u00edmo na m\u00edst\u011b. Nap\u0159\u00edklad probl\u00e9my s troubleshootingem. <\/p>\n<p>Pro bezpe\u010dnostn\u00ed ot\u00e1zky je d\u016fle\u017eit\u00e9, \u017ee SD-Access p\u0159edpokl\u00e1d\u00e1 jasn\u00e9 rozd\u011blen\u00ed u\u017eivatel\u016f a za\u0159\u00edzen\u00ed do skupin a definov\u00e1n\u00ed politik interakce mezi nimi, autorizaci p\u0159i jak\u00e9mkoli p\u0159ipojen\u00ed klienta do s\u00edt\u011b a zaji\u0161t\u011bn\u00ed \"pr\u00e1v p\u0159\u00edstupu\" po cel\u00e9 s\u00edti. Pokud se t\u00e9to metodiky dodr\u017e\u00ed, spr\u00e1va se st\u00e1v\u00e1 mnohem jednodu\u0161\u0161\u00ed. <\/p>\n<p>Proces spu\u0161t\u011bn\u00ed pro nov\u00e9 kancel\u00e1\u0159e byl tak\u00e9 zjednodu\u0161en d\u00edky Plug-and-Play agent\u016fm ve switch\u00edch. Nen\u00ed t\u0159eba chodit do rozvad\u011b\u010de s konzol\u00ed, nebo dokonce jezdit na m\u00edsto.<\/p>\n<p>Zde jsou p\u0159\u00edklady nastaven\u00ed:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/065b6f5072bc08291bd8c6b3edfb07d8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCelkov\u00fd stav. <\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/4cd930efb6b9bd8ff1e46cf68bebba11.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Incidenty, kter\u00e9 by m\u011bl administr\u00e1tor zkontrolovat.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/e7f9dcc447afea524aff3136fd9399d7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Automatick\u00e9 doporu\u010den\u00ed, co zm\u011bnit v konfigurac\u00edch.<\/i><\/p>\n<h3>Pl\u00e1n integrace SD-WAN se SD-Access<\/h3>\n<p>\nSly\u0161el jsem, \u017ee Cisco m\u00e1 takov\u00e9 pl\u00e1ny \u2014 SD-WAN a SD-Access. To by m\u011blo v\u00fdrazn\u011b sn\u00ed\u017eit probl\u00e9my s \u0159\u00edzen\u00edm teritori\u00e1ln\u011b rozlo\u017een\u00fdch a lok\u00e1ln\u00edch KSP. <\/p>\n<p>vManage (orchestr\u00e1tor SD-WAN) je spravov\u00e1n p\u0159es API s DNA Center (\u0159\u00edzen\u00edm SD-Access).<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/907b3cf97c1eed0d605efbb8116d5cb7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPolitiky mikro- a makrossegmentace se mapuj\u00ed n\u00e1sleduj\u00edc\u00edm zp\u016fsobem:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/22c1c833596e03761784a4157c53e870.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa \u00farovni paket\u016f to vypad\u00e1 takto:<\/p>\n<p><img decoding=\"async\" alt=\"SD-WAN a DNA na pomoc administr\u00e1torovi: rysy architektur a praxe\" src=\"\/wp-content\/uploads\/2019\/12\/e9e9949031680cf1289690373163652c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Kdo a co si o tom mysl\u00ed<\/h3>\n<p>\nOd roku 2016 se v\u011bnujeme SD-WAN v samostatn\u00e9 laboratorn\u00ed oblasti, kde testujeme r\u016fzn\u00e9 varianty \u0159e\u0161en\u00ed pro pot\u0159eby maloobchodu, bankovnictv\u00ed, dopravy a pr\u016fmyslu. <\/p>\n<p>V\u017edy hodn\u011b komunikujeme s re\u00e1ln\u00fdmi z\u00e1kazn\u00edky. <\/p>\n<p>Mohu \u0159\u00edci, \u017ee maloobchod ji\u017e s jistotou testuje SD-WAN, p\u0159i\u010dem\u017e n\u011bkte\u0159\u00ed to d\u011blaj\u00ed se dodavateli (nej\u010dast\u011bji s Cisco), ale jsou i ti, kte\u0159\u00ed se sna\u017e\u00ed probl\u00e9m vy\u0159e\u0161it samostatn\u011b: vyv\u00edjej\u00ed svoj\u00ed verzi softwaru, kter\u00e1 funkcionalitou p\u0159ipom\u00edn\u00e1 SD-WAN.<\/p>\n<p>V\u0161ichni cht\u011bj\u00ed nebo jinak p\u0159ich\u00e1zej\u00ed k centralizovan\u00e9mu \u0159\u00edzen\u00ed cel\u00e9ho spektra za\u0159\u00edzen\u00ed. Je to jeden bod administrace pro nestandardn\u00ed instalace a standardn\u00ed pro r\u016fzn\u00e9 dodavatele a technologie. Je d\u016fle\u017eit\u00e9 minimalizovat ru\u010dn\u00ed pr\u00e1ci, proto\u017ee to jednak sni\u017euje riziko lidsk\u00e9ho faktoru p\u0159i nastavov\u00e1n\u00ed za\u0159\u00edzen\u00ed, a za druh\u00e9 to uvol\u0148uje zdroje IT odd\u011blen\u00ed pro \u0159e\u0161en\u00ed dal\u0161\u00edch \u00fakol\u016f. Obvykle pochopen\u00ed pot\u0159eby p\u0159ich\u00e1z\u00ed kv\u016fli velmi dlouh\u00fdm cykl\u016fm aktualizace po cel\u00e9 zemi. A nap\u0159\u00edklad pokud maloobchod prod\u00e1v\u00e1 alkohol, pot\u0159ebuje st\u00e1l\u00e9 spojen\u00ed pro prodej. Aktualizace nebo prostoj b\u011bhem dne p\u0159\u00edmo ovliv\u0148uje tr\u017eby. <\/p>\n<p>V maloobchodu se nyn\u00ed jasn\u011b formuje ch\u00e1p\u00e1n\u00ed, pro jak\u00e9 \u00fakoly IT pou\u017eije SD-WAN: <\/p>\n<ol>\n<li>Rychl\u00e9 nasazen\u00ed (\u010dasto je t\u0159eba na LTE p\u0159ed p\u0159\u00edchodem kabelov\u00e9ho poskytovatele, \u010dasto je t\u0159eba, aby novou pobo\u010dku zvedl administr\u00e1tor ve m\u011bst\u011b podle GPH, a pak jen centrum sledovalo a konfigurovalo).<\/li>\n<li>Centralizovan\u00e9 \u0159\u00edzen\u00ed, spojen\u00ed pro zahrani\u010dn\u00ed objekty. <\/li>\n<li>Sn\u00ed\u017een\u00ed n\u00e1klad\u016f na telekomunikace.<\/li>\n<li>R\u016fzn\u00e9 dopl\u0148kov\u00e9 slu\u017eby (funkce DPI umo\u017e\u0148uj\u00ed prioritn\u00ed dod\u00e1v\u00e1n\u00ed provozu od d\u016fle\u017eit\u00fdch aplikac\u00ed, jako je pokladn\u00ed syst\u00e9m).<\/li>\n<li>Pr\u00e1ce s kan\u00e1ly automaticky, nikoli ru\u010dn\u011b. <\/li>\n<\/ol>\n<p>\nA je zde tak\u00e9 kontrola na shodu \u2014 hodn\u011b se o tom mluv\u00ed, ale nikdo to nevn\u00edm\u00e1 jako probl\u00e9m. Udr\u017eov\u00e1n\u00ed toho, \u017ee v\u0161e funguje spr\u00e1vn\u011b, tak\u00e9 v t\u00e9to paradigm\u011b norm\u00e1ln\u011b funguje. Mnoho lid\u00ed si mysl\u00ed, \u017ee t\u00edmto sm\u011brem se bude vyv\u00edjet cel\u00fd trh s\u00ed\u0165ov\u00fdch technologi\u00ed. <\/p>\n<p>Banky, podle m\u00e9ho n\u00e1zoru, zat\u00edm testuj\u00ed SD-WAN sp\u00ed\u0161e jako novou technologickou funkci. \u010cekaj\u00ed na konec podpory p\u0159edchoz\u00edch generac\u00ed za\u0159\u00edzen\u00ed a teprve potom se budou m\u011bnit. Banky maj\u00ed v\u016fbec svou zvl\u00e1\u0161tn\u00ed atmosf\u00e9ru, pokud jde o komunika\u010dn\u00ed kan\u00e1ly, tak\u017ee je sou\u010dasn\u00fd stav odv\u011btv\u00ed nijak zvl\u00e1\u0161\u0165 netr\u00e1p\u00ed. Probl\u00e9my sp\u00ed\u0161e spo\u010d\u00edvaj\u00ed v jin\u00fdch oblastech. <\/p>\n<p>Na rozd\u00edl od rusk\u00e9ho trhu se v Evrop\u011b SD-WAN aktivn\u011b zav\u00e1d\u00ed. Maj\u00ed dra\u017e\u0161\u00ed komunika\u010dn\u00ed kan\u00e1ly, a proto evropsk\u00e9 spole\u010dnosti p\u0159in\u00e1\u0161ej\u00ed sv\u016fj technologick\u00fd stack do rusk\u00fdch pobo\u010dek. V Rusku je v\u0161ak jist\u00e1 stabilita, proto\u017ee cena kan\u00e1l\u016f (i kdy\u017e je region v\u00fdrazn\u011b dra\u017e\u0161\u00ed ne\u017e centrum) je zcela p\u0159ijateln\u00e1 a nevzbuzuje \u017e\u00e1dn\u00e9 dotazy. Rok co rok se na komunika\u010dn\u00ed kan\u00e1ly bez probl\u00e9m\u016f vy\u010dle\u0148uj\u00ed rozpo\u010dty. <\/p>\n<p>Tady je p\u0159\u00edklad z celosv\u011btov\u00e9 praxe, kdy spole\u010dnost d\u00edky SD-WAN na Cisco u\u0161et\u0159ila \u010das a pen\u00edze. <\/p>\n<p>Existuje takov\u00e1 spole\u010dnost - National Instruments. V ur\u010dit\u00e9m okam\u017eiku si uv\u011bdomili, \u017ee glob\u00e1ln\u00ed v\u00fdpo\u010detn\u00ed s\u00ed\u0165, 'z\u00edskan\u00e1' spojen\u00edm 88 lokalit na cel\u00e9m sv\u011bt\u011b, byla neefektivn\u00ed. Krom\u011b toho spole\u010dnosti chyb\u011bla propustnost a v\u00fdkon glob\u00e1ln\u00ed v\u00fdpo\u010detn\u00ed s\u00edt\u011b. Nebyl tam vyv\u00e1\u017een\u00fd vztah mezi neust\u00e1l\u00fdm r\u016fstem spole\u010dnosti a omezen\u00fdm IT rozpo\u010dtem. <\/p>\n<p>SD-WAN pomohlo National Instruments sn\u00ed\u017eit n\u00e1klady na MPLS o 25 % (\u00faspora 450 tis\u00edc dolar\u016f za rok 2018), a roz\u0161\u00ed\u0159it \u0161\u00ed\u0159ku p\u00e1sma o 3 075 %. <\/p>\n<p>Po implementaci SD-WAN spole\u010dnost z\u00edskala inteligentn\u00ed softwarem definovanou s\u00ed\u0165 a centralizovan\u00e9 \u0159\u00edzen\u00ed politikami, aby automaticky optimalizovala provoz a v\u00fdkon aplikac\u00ed. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/dam\/en_us\/services\/it-case-studies\/ni-case-study.pdf\">Zde<\/a><\/noindex> \u2014 podrobn\u00fd p\u0159\u00edpad.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/spbit.ru\/news\/n176590\/\">Tady<\/a><\/noindex> \u00fa\u017easn\u00fd p\u0159\u00edpad p\u0159esunu S7 do jin\u00e9 kancel\u00e1\u0159e, kdy to ze za\u010d\u00e1tku vypadalo t\u011b\u017ece, ale zaj\u00edmav\u011b \u2014 bylo t\u0159eba p\u0159epracovat 1,5 tis\u00edce port\u016f. Pot\u00e9 se v\u0161ak n\u011bco pokazilo a nakonec se administr\u00e1to\u0159i ocitli t\u011bmi posledn\u00edmi p\u0159ed term\u00ednem, na kter\u00e9 se sypaly v\u0161echny nahromad\u011bn\u00e9 zpo\u017ed\u011bn\u00ed.<\/p>\n<h3>P\u0159e\u010dt\u011bte si v\u00edce anglicky:<\/h3>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.americanbanker.com\/news\/fifth-third-investing-112-million-on-five-year-network-upgrade\">American Banker: Fifth Third investuje do p\u011btilet\u00e9ho vylep\u0161en\u00ed s\u00edt\u011b pomoc\u00ed SD-WAN <\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/gestaltit.com\/tech-talks\/viptela\/viptela-sd-wan\/tom\/building-cloud-sd-wan-success-with-koch\">Budov\u00e1n\u00ed \u00fasp\u011bchu Cloud SD-WAN v Koch<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"http:\/\/gestaltit.com\/tech-talks\/viptela\/viptela-sd-wan\/tom\/mckessons-sd-wan-journey-to-cost-savings\/\">Cesta McKessona k \u00faspor\u00e1m pomoc\u00ed SD-WAN <\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sd-wan-experts.com\/blog\/poc-sd-wan-mind-the-gap\/\">SD-WAN Retail PoC &amp; segmentace: Gap Stores<\/a><\/noindex>.<\/li>\n<li>Ale <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/dam\/en\/us\/solutions\/collateral\/enterprise-networks\/digital-network-architecture\/global-nw-trends-survey.pdf\">glob\u00e1ln\u00ed v\u00fdzkum Cisco<\/a><\/noindex> o s\u00ed\u0165ov\u00fdch trendech ve sv\u011bt\u011b.<\/li>\n<\/ul>\n<h3>V ru\u0161tin\u011b:<\/h3>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/safe.cnews.ru\/articles\/2019-11-06_razbor_rynka_sdwan_kakie_sushchestvuyut\">Na CNews<\/a><\/noindex>. <\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/croc\/blog\/457738\/\">Jak jsme implementovali SD-Access a pro\u010d to bylo pot\u0159eba<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/croc\/blog\/455882\/\">S\u00ed\u0165ov\u00e1 fabrika pro datov\u00e1 centra Cisco ACI - ku pomoci administr\u00e1torovi<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/croc\/blog\/336210\/\">Stabiln\u00ed kan\u00e1l zalo\u017een\u00fd na softwarov\u011b definovan\u00fdch s\u00edt\u00edch SD-WAN: \u0159e\u0161en\u00ed probl\u00e9m\u016f s v\u00fdb\u011brem tras<\/a><\/noindex>.<\/li>\n<li>M\u016fj e-mail, pokud m\u00e1te ot\u00e1zky nebo chcete otestovat sv\u00e9 \u00falohy na na\u0161\u00ed stanici, \u2014 mkazakov@croc.ru.<\/li>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/croc\/blog\/480620\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0442\u0435\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0449\u0443\u043f\u0430\u0442\u044c \u0443 \u043d\u0430\u0441 \u0432 \u043b\u0430\u0431\u0435, \u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0442\u0441\u044f. SD-WAN \u0438 SD-Access \u2014 \u0434\u0432\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u0445 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044e \u0441\u0435\u0442\u0435\u0439. \u0412 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u043e\u043d\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u043b\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0434\u043d\u0443 \u043e\u0432\u0435\u0440\u043b\u0435\u0439\u043d\u0443\u044e \u0441\u0435\u0442\u044c, \u043d\u043e \u043f\u043e\u043a\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u044e\u0442\u0441\u044f. \u041b\u043e\u0433\u0438\u043a\u0430 \u0442\u0430\u043a\u0430\u044f: \u0431\u0435\u0440\u0451\u043c \u0441\u0435\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u0446\u0430 1990-\u0445 \u0438 \u043d\u0430\u043a\u0430\u0442\u044b\u0432\u0430\u0435\u043c \u043d\u0430 \u043d\u0435\u0451 \u0432\u0441\u0435 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0444\u0438\u0447\u0438, \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u044f\u0441\u044c, \u043f\u043e\u043a\u0430 \u044d\u0442\u043e \u0435\u0449\u0451 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-54104","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0442\u0435\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0449\u0443\u043f\u0430\u0442\u044c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47SD-WAN \u0438 DNA \u0432 \u043f\u043e\u043c\u043e\u0449\u044c \u0430\u0434\u043c\u0438\u043d\u0443: \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0442\u0435\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0449\u0443\u043f\u0430\u0442\u044c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-12-17T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:02:05+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47SD-WAN a DNA pro administr\u00e1tora: architektonick\u00e9 specifikace a praxe | ProHoster","description":"Stanice, kterou si m\u016f\u017eete osahat.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SD-WAN \u0438 DNA \u0432 \u043f\u043e\u043c\u043e\u0449\u044c \u0430\u0434\u043c\u0438\u043d\u0443: \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 | ProHoster","og:description":"\u0421\u0442\u0435\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0449\u0443\u043f\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sd-wan-i-dna-v-pomoshh-adminu-osobennosti-arhitektur-i-praktika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-17T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54104","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 10:02:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:12:23","updated":"2026-01-24 10:02:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=54104"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54104\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=54104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=54104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=54104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}