{"id":89699,"date":"2020-07-25T13:42:16","date_gmt":"2020-07-25T11:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti"},"modified":"2020-07-25T13:42:16","modified_gmt":"2020-07-25T11:42:16","slug":"est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","title":{"rendered":"Kontroler \u2013 \u017e\u00e1dn\u00fd probl\u00e9m: jak snadno udr\u017eovat bezdr\u00e1tovou s\u00ed\u0165","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V roce 2019 provedla konzulta\u010dn\u00ed spole\u010dnost Miercom nez\u00e1visl\u00e9 technologick\u00e9 hodnocen\u00ed Wi-Fi 6 kontroler\u016f Cisco Catalyst s\u00e9rie 9800. Pro tuto studii byla sestavena testovac\u00ed stanice z kontroler\u016f a p\u0159\u00edstupov\u00fdch bod\u016f Wi-Fi 6 od Cisco a byla provedena technick\u00e1 hodnocen\u00ed v n\u00e1sleduj\u00edc\u00edch kategori\u00edch:<\/p>\n<ul>\n<li>Dostupnost;<\/li>\n<li>Bezpe\u010dnost;<\/li>\n<li>Automatizace.<\/li>\n<\/ul>\n<p>\nV\u00fdsledky studie jsou uvedeny n\u00ed\u017ee. Od roku 2019 byl funk\u010dn\u00ed rozsah kontroler\u016f Cisco Catalyst s\u00e9rie 9800 v\u00fdznamn\u011b vylep\u0161en \u2013 tyto aspekty jsou tak\u00e9 zm\u00edn\u011bny v tomto \u010dl\u00e1nku.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nO dal\u0161\u00edch v\u00fdhod\u00e1ch technologie Wi-Fi 6, p\u0159\u00edpadech implementace a oblastech pou\u017eit\u00ed se m\u016f\u017eete do\u010d\u00edst<noindex><a rel=\"nofollow\" href=\"http:\/\/rrcwifi6.promo\/?utm_source=habrblogcisco&amp;utm_medium=cpc&amp;utm_campaign=rrcwifi6&amp;utm_content=articlecatalyst\"> zde<\/a><\/noindex>.<\/p>\n<h2><strong>P\u0159ehled \u0159e\u0161en\u00ed<\/strong><\/h2>\n<p><\/p>\n<h3><strong>Wi-Fi 6 kontrolery Cisco Catalyst s\u00e9rie 9800<\/strong><\/h3>\n<p>\nS\u00e9rie bezdr\u00e1tov\u00fdch kontroler\u016f Cisco Catalyst s\u00e9rie 9800, zalo\u017een\u00e1 na opera\u010dn\u00edm syst\u00e9mu IOS-XE (kter\u00fd se tak\u00e9 pou\u017e\u00edv\u00e1 pro switche a routery Cisco), je nab\u00edzena v r\u016fzn\u00fdch variant\u00e1ch.<\/p>\n<p><img decoding=\"async\" alt=\"Kontroler \u2013 \u017e\u00e1dn\u00fd probl\u00e9m: jak snadno udr\u017eovat bezdr\u00e1tovou s\u00ed\u0165\" src=\"\/wp-content\/uploads\/2020\/07\/b75d0fdc2caa8f49a5a4a893d4e67a78.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVy\u0161\u0161\u00ed model kontroleru 9800-80 podporuje propustnost bezdr\u00e1tov\u00e9 s\u00edt\u011b a\u017e 80 Gbit\/s. Jeden kontroler 9800-80 podporuje a\u017e 6000 p\u0159\u00edstupov\u00fdch bod\u016f a a\u017e 64 000 bezdr\u00e1tov\u00fdch klient\u016f.<\/p>\n<p>Model st\u0159edn\u00ed t\u0159\u00eddy \u2013 kontroler 9800-40 \u2013 podporuje propustnost a\u017e 40 Gbit\/s, a\u017e 2000 p\u0159\u00edstupov\u00fdch bod\u016f a a\u017e 32 000 bezdr\u00e1tov\u00fdch klient\u016f.<\/p>\n<p>Krom\u011b t\u011bchto model\u016f byl do konkuren\u010dn\u00edho hodnocen\u00ed za\u0159azen tak\u00e9 bezdr\u00e1tov\u00fd kontroler 9800-CL (CL znamen\u00e1 Cloud). Model 9800-CL pracuje ve virtu\u00e1ln\u00edch prost\u0159ed\u00edch na hypervizorech VMWare ESXI a KVM, a jeho parametr z\u00e1vis\u00ed na p\u0159id\u011blen\u00fdch zdroj\u00edch hardware pro virtu\u00e1ln\u00ed stroj kontroleru. Ve sv\u00e9 maxim\u00e1ln\u00ed konfiguraci kontroler Cisco 9800-CL stejn\u011b jako vy\u0161\u0161\u00ed model 9800-80 podporuje \u0161k\u00e1lovatelnost a\u017e 6000 p\u0159\u00edstupov\u00fdch bod\u016f a a\u017e 64 000 bezdr\u00e1tov\u00fdch klient\u016f.<\/p>\n<p>P\u0159i prov\u00e1d\u011bn\u00ed studie byly pou\u017eity p\u0159\u00edstupov\u00e9 body Cisco Aironet AP s\u00e9rie 4800, kter\u00e9 podporuj\u00ed provoz na frekvenc\u00edch 2,4 a 5 Ghz s mo\u017enost\u00ed dynamick\u00e9ho p\u0159ep\u00edn\u00e1n\u00ed do re\u017eimu dual 5-GHz.<\/p>\n<h2><strong>Testovac\u00ed stanice<\/strong><\/h2>\n<p>\nV r\u00e1mci testov\u00e1n\u00ed byla sestavena stanice ze dvou bezdr\u00e1tov\u00fdch kontroler\u016f Cisco Catalyst 9800-CL pracuj\u00edc\u00edch v clusteru a p\u0159\u00edstupov\u00fdch bod\u016f Cisco Aironet AP s\u00e9rie 4800.<\/p>\n<p>Jako klientsk\u00e1 za\u0159\u00edzen\u00ed byly pou\u017eity notebooky firem Dell a Apple, stejn\u011b jako smartphone Apple iPhone.<\/p>\n<p><img decoding=\"async\" alt=\"Kontroler \u2013 \u017e\u00e1dn\u00fd probl\u00e9m: jak snadno udr\u017eovat bezdr\u00e1tovou s\u00ed\u0165\" src=\"\/wp-content\/uploads\/2020\/07\/d2821ca58a54a4fab2c5a208b20fb51f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><strong>Testov\u00e1n\u00ed dostupnosti<\/strong><\/h2>\n<p>\nDostupnost je definov\u00e1na jako schopnost u\u017eivatel\u016f p\u0159istupovat k syst\u00e9mu nebo slu\u017eb\u011b a pou\u017e\u00edvat je. Vysok\u00e1 dostupnost znamen\u00e1 nep\u0159etr\u017eit\u00fd p\u0159\u00edstup k syst\u00e9mu nebo slu\u017eb\u011b, nez\u00e1visl\u00fd na r\u016fzn\u00fdch ud\u00e1lostech.<\/p>\n<p>Vysok\u00e1 dostupnost byla testov\u00e1na ve \u010dty\u0159ech sc\u00e9n\u00e1\u0159\u00edch, p\u0159i\u010dem\u017e prvn\u00ed t\u0159i sc\u00e9n\u00e1\u0159e jsou p\u0159edv\u00eddateln\u00e9 nebo pl\u00e1novan\u00e9 ud\u00e1losti, kter\u00e9 se mohou uskute\u010dnit b\u011bhem pracovn\u00edho nebo nepracovn\u00edho \u010dasu. \u010ctvrt\u00fd sc\u00e9n\u00e1\u0159 je klasick\u00fd v\u00fdpadek, kter\u00fd je nep\u0159edv\u00eddatelnou ud\u00e1lost\u00ed.<\/p>\n<p>Popis sc\u00e9n\u00e1\u0159\u016f:<\/p>\n<ul>\n<li>Oprava chyb je mikroaktualizace syst\u00e9mu (bugfix nebo bezpe\u010dnostn\u00ed z\u00e1plata), kter\u00e1 umo\u017e\u0148uje opravit ur\u010ditou chybu nebo zranitelnost bez pln\u00e9 aktualizace syst\u00e9mov\u00e9ho softwaru;<\/li>\n<li>Funkcion\u00e1ln\u00ed aktualizace je p\u0159id\u00e1n\u00ed nebo roz\u0161\u00ed\u0159en\u00ed aktu\u00e1ln\u00ed funkce syst\u00e9mu instalac\u00ed funkcion\u00e1ln\u00edch aktualizac\u00ed;<\/li>\n<li>Pln\u00e1 aktualizace je aktualizace obrazu softwaru \u0159adi\u010de;<\/li>\n<li>P\u0159id\u00e1n\u00ed p\u0159\u00edstupov\u00e9ho bodu znamen\u00e1 p\u0159id\u00e1n\u00ed nov\u00e9ho modelu p\u0159\u00edstupov\u00e9ho bodu do bezdr\u00e1tov\u00e9 s\u00edt\u011b bez nutnosti p\u0159enastaven\u00ed nebo aktualizace softwaru bezdr\u00e1tov\u00e9ho \u0159adi\u010de;<\/li>\n<li>V\u00fdpadek je selh\u00e1n\u00ed bezdr\u00e1tov\u00e9ho \u0159adi\u010de.<\/li>\n<\/ul>\n<p><\/p>\n<h3><strong>Opravy chyb a zranitelnost\u00ed<\/strong><\/h3>\n<p>\n\u010casto v mnoha konkuren\u010dn\u00edch \u0159e\u0161en\u00edch vy\u017eaduje instalace oprav plnou aktualizaci softwaru syst\u00e9mu bezdr\u00e1tov\u00e9ho \u0159adi\u010de, co\u017e m\u016f\u017ee v\u00e9st k nepl\u00e1novan\u00fdm prostoj\u016fm. V p\u0159\u00edpad\u011b \u0159e\u0161en\u00ed od Cisco se aktualizace prov\u00e1d\u00ed bez p\u0159eru\u0161en\u00ed produktivity. Opravy mohou b\u00fdt nainstalov\u00e1ny na jakoukoli ze sou\u010d\u00e1st\u00ed, p\u0159i\u010dem\u017e bezdr\u00e1tov\u00e1 infrastruktura pokra\u010duje v pr\u00e1ci.<\/p>\n<p>Samotn\u00fd proces je dost jednoduch\u00fd. Soubor opravy je zkop\u00edrov\u00e1n do slo\u017eky pro spu\u0161t\u011bn\u00ed na jednom z bezdr\u00e1tov\u00fdch \u0159adi\u010d\u016f Cisco, a pot\u00e9 je operace potvrzena bu\u010f prost\u0159ednictv\u00edm grafick\u00e9ho rozhran\u00ed, nebo p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku. Krom\u011b toho je mo\u017en\u00e9 prost\u0159ednictv\u00edm grafick\u00e9ho rozhran\u00ed nebo p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku tak\u00e9 opravu zru\u0161it a odstranit, tak\u00e9 bez p\u0159eru\u0161en\u00ed provozu syst\u00e9mu.<\/p>\n<h3><strong>Funkcion\u00e1ln\u00ed aktualizace<\/strong><\/h3>\n<p>\nFunk\u010dn\u00ed aktualizace softwaru jsou pou\u017e\u00edv\u00e1ny k aktivaci nov\u00fdch funkc\u00ed. Jedn\u00edm z t\u011bchto vylep\u0161en\u00ed je aktualizace datab\u00e1ze podpis\u016f aplikac\u00ed. Tento bal\u00ed\u010dek byl nainstalov\u00e1n na ovlada\u010d\u00edch Cisco jako test. Stejn\u011b jako u oprav se funk\u010dn\u00ed aktualizace aplikuje, instaluje nebo odstra\u0148uje bez prostoj\u016f \u010di p\u0159eru\u0161en\u00ed provozu syst\u00e9mu.<\/p>\n<h3><strong>\u00dapln\u00e1 aktualizace<\/strong><\/h3>\n<p>\nV tuto chv\u00edli se \u00fapln\u00e1 aktualizace softwarov\u00e9ho obrazu ovlada\u010de prov\u00e1d\u00ed stejn\u011b jako funk\u010dn\u00ed aktualizace, tedy bez prostoj\u016f. Tato mo\u017enost je v\u0161ak dostupn\u00e1 pouze v clusterov\u00e9 konfiguraci, kdy je v\u00edce ne\u017e jeden ovlada\u010d. \u00dapln\u00e1 aktualizace se prov\u00e1d\u00ed postupn\u011b: nejprve na jednom ovlada\u010di, pot\u00e9 na druh\u00e9m.<\/p>\n<h3><strong>P\u0159id\u00e1n\u00ed nov\u00e9ho modelu p\u0159\u00edstupov\u00e9ho bodu<\/strong><\/h3>\n<p>\nP\u0159ipojen\u00ed nov\u00fdch p\u0159\u00edstupov\u00fdch bod\u016f, kter\u00e9 d\u0159\u00edve nebyly provozov\u00e1ny s pou\u017e\u00edvan\u00fdm obrazem softwaru ovlada\u010de, k bezdr\u00e1tov\u00e9 s\u00edti je pom\u011brn\u011b \u010dastou operac\u00ed, zejm\u00e9na ve velk\u00fdch s\u00edt\u00edch (leti\u0161t\u011b, hotely, v\u00fdroby). \u010casto v \u0159e\u0161en\u00edch konkurent\u016f tato operace vy\u017eaduje aktualizaci syst\u00e9mov\u00e9ho softwaru nebo restart ovlada\u010d\u016f.<\/p>\n<p>P\u0159i p\u0159ipojov\u00e1n\u00ed nov\u00fdch p\u0159\u00edstupov\u00fdch bod\u016f Wi-Fi 6 k clusteru ovlada\u010d\u016f Cisco Catalyst s\u00e9rie 9800 se podobn\u00e9 probl\u00e9my nevyskytuj\u00ed. P\u0159ipojen\u00ed nov\u00fdch bod\u016f k ovlada\u010di se prov\u00e1d\u00ed bez aktualizac\u00ed softwaru ovlada\u010de a tento proces nevy\u017eaduje restart, \u010d\u00edm\u017e se nijak neovliv\u0148uje bezdr\u00e1tov\u00e1 s\u00ed\u0165.<\/p>\n<h3><strong>Selh\u00e1n\u00ed ovlada\u010de<\/strong><\/h3>\n<p>\nV testovac\u00edm prost\u0159ed\u00ed jsou pou\u017eity dva ovlada\u010de (Aktivn\u00ed \/ StandBy) Wi-Fi 6 a p\u0159\u00edstupov\u00fd bod m\u00e1 p\u0159\u00edm\u00e9 p\u0159ipojen\u00ed k ob\u011bma ovlada\u010d\u016fm.<\/p>\n<p>Jeden bezdr\u00e1tov\u00fd ovlada\u010d je aktivn\u00ed, zat\u00edmco druh\u00fd je rezervn\u00ed. P\u0159i selh\u00e1n\u00ed aktivn\u00edho ovlada\u010de p\u0159eb\u00edr\u00e1 \u0159\u00edzen\u00ed rezervn\u00ed ovlada\u010d a jeho stav se m\u011bn\u00ed na aktivn\u00ed. Tento proces prob\u00edh\u00e1 bez p\u0159eru\u0161en\u00ed pro p\u0159\u00edstupov\u00fd bod a Wi-Fi pro klienty.<\/p>\n<h2><strong>Bezpe\u010dnost<\/strong><\/h2>\n<p>\nV t\u00e9to \u010d\u00e1sti se zab\u00fdv\u00e1me aspekty zaji\u0161t\u011bn\u00ed bezpe\u010dnosti, kter\u00e1 je v bezdr\u00e1tov\u00fdch s\u00edt\u00edch z\u00e1sadn\u00ed \u00falohou. Bezpe\u010dnost \u0159e\u0161en\u00ed se hodnot\u00ed podle n\u00e1sleduj\u00edc\u00edch charakteristik:<\/p>\n<ul>\n<li>Rozpozn\u00e1v\u00e1n\u00ed aplikac\u00ed;<\/li>\n<li>Sledov\u00e1n\u00ed toku provozu (Flow tracking);<\/li>\n<li>Anal\u00fdza \u0161ifrovan\u00e9ho provozu;<\/li>\n<li>Detekce a prevence \u00fatok\u016f;<\/li>\n<li>Prost\u0159edky autentizace;<\/li>\n<li>Ochrana koncov\u00fdch za\u0159\u00edzen\u00ed z\u00e1kazn\u00edk\u016f.<\/li>\n<\/ul>\n<p><\/p>\n<h3><strong>Identifikace aplikac\u00ed<\/strong><\/h3>\n<p>\nNa trhu firemn\u00edho a pr\u016fmyslov\u00e9ho Wi-Fi existuj\u00ed rozd\u00edly v tom, jak dob\u0159e produkty identifikuj\u00ed provoz podle aplikac\u00ed. Produkty od r\u016fzn\u00fdch v\u00fdrobc\u016f mohou identifikovat r\u016fzn\u00fd po\u010det aplikac\u00ed. Mnoho aplikac\u00ed, kter\u00e9 konkurence uv\u00e1d\u00ed jako mo\u017en\u00e9 k identifikaci, jsou ve skute\u010dnosti webov\u00e9 str\u00e1nky, nikoli unik\u00e1tn\u00ed aplikace.<\/p>\n<p>Existuje je\u0161t\u011b jedna zaj\u00edmav\u00e1 vlastnost identifikace aplikac\u00ed: \u0159e\u0161en\u00ed se v\u00fdrazn\u011b li\u0161\u00ed v p\u0159esnosti identifikace.<\/p>\n<p>S ohledem na v\u0161echny proveden\u00e9 testy lze d\u016fv\u011bryhodn\u011b prohl\u00e1sit, \u017ee Wi-Fi 6 \u0159e\u0161en\u00ed Cisco vykon\u00e1v\u00e1 identifikaci aplikac\u00ed velmi p\u0159esn\u011b: byly p\u0159esn\u011b identifikov\u00e1ny aplikace jako Jabber, Netflix, Dropbox, YouTube a dal\u0161\u00ed popul\u00e1rn\u00ed aplikace, stejn\u011b jako webov\u00e9 slu\u017eby. \u0158e\u0161en\u00ed Cisco dok\u00e1\u017ee tak\u00e9 hloub\u011bji analyzovat datov\u00e9 pakety pomoc\u00ed DPI (Deep Packet Inspection).<\/p>\n<h3><strong>Sledov\u00e1n\u00ed tok\u016f dat<\/strong><\/h3>\n<p>\nByl proveden dal\u0161\u00ed test s c\u00edlem zjistit, zda m\u016f\u017ee syst\u00e9m p\u0159esn\u011b sledovat a hl\u00e1sit toky dat (nap\u0159\u00edklad p\u0159i p\u0159enosu velk\u00fdch soubor\u016f). K testov\u00e1n\u00ed byl po s\u00edti odesl\u00e1n soubor o velikosti 6,5 megabytu pomoc\u00ed protokolu FTP.<\/p>\n<p>\u0158e\u0161en\u00ed Cisco se \u00fakolu zhostilo zcela a dok\u00e1zalo sledovat tento provoz d\u00edky NetFlow a sv\u00fdm hardwarov\u00fdm schopnostem. Provoz byl okam\u017eit\u011b detekov\u00e1n a identifikov\u00e1n s p\u0159esn\u00fdm objemem p\u0159enesen\u00fdch dat.<\/p>\n<h3><strong>Anal\u00fdza \u0161ifrovan\u00e9ho provozu<\/strong><\/h3>\n<p>\nProvoz u\u017eivatelsk\u00fdch dat je st\u00e1le \u010dast\u011bji \u0161ifrov\u00e1n. To se d\u011bl\u00e1 s c\u00edlem chr\u00e1nit je p\u0159ed sledov\u00e1n\u00edm \u010di zachycen\u00edm zlo\u010dinci. Z\u00e1rove\u0148 v\u0161ak hacke\u0159i \u010d\u00edm d\u00e1l \u010dast\u011bji vyu\u017e\u00edvaj\u00ed \u0161ifrov\u00e1n\u00ed k maskov\u00e1n\u00ed sv\u00e9ho malwaru a prov\u00e1d\u011bn\u00ed dal\u0161\u00edch podez\u0159el\u00fdch operac\u00ed, jako jsou \u00fatoky typu Man-in-the-Middle (MiTM) nebo nap\u0159\u00edklad \u00fatoky s vyu\u017eit\u00edm keyloggenu.<\/p>\n<p>V\u011bt\u0161ina podnik\u016f kontroluje \u010d\u00e1st \u0161ifrovan\u00e9ho provozu, nejprve jej de\u0161ifruje pomoc\u00ed firewallech nebo syst\u00e9m\u016f pro prevenci pr\u016fnik\u016f. Tento proces je v\u0161ak \u010dasov\u011b n\u00e1ro\u010dn\u00fd a neprosp\u00edv\u00e1 celkov\u00e9 v\u00fdkonnosti s\u00edt\u011b. Nav\u00edc se po de\u0161ifrov\u00e1n\u00ed tato data st\u00e1vaj\u00ed zraniteln\u00fdmi v\u016f\u010di zv\u011bdav\u00fdm o\u010d\u00edm.<\/p>\n<p>Ovlada\u010de Cisco Catalyst s\u00e9rie 9800 \u00fasp\u011b\u0161n\u011b \u0159e\u0161\u00ed anal\u00fdzu \u0161ifrovan\u00e9ho provozu jin\u00fdmi prost\u0159edky. \u0158e\u0161en\u00ed nese n\u00e1zev Encrypted Traffic Analytics (ETA). ETA je technologie, kter\u00e1 nem\u00e1 v sou\u010dasnosti na trhu konkurenci a dok\u00e1\u017ee detekovat \u0161kodliv\u00fd software v \u0161ifrovan\u00e9m provozu, ani\u017e by bylo nutn\u00e9 jej de\u0161ifrovat. ETA je z\u00e1kladn\u00ed funkc\u00ed IOS-XE, kter\u00e1 zahrnuje Enhanced NetFlow a vyu\u017e\u00edv\u00e1 pokro\u010dil\u00e9 behavior\u00e1ln\u00ed algoritmy k identifikaci \u0161kodliv\u00fdch vzorc\u016f provozu skr\u00fdvaj\u00edc\u00edch se v \u0161ifrovan\u00e9m toku.<\/p>\n<p><img decoding=\"async\" alt=\"Kontroler \u2013 \u017e\u00e1dn\u00fd probl\u00e9m: jak snadno udr\u017eovat bezdr\u00e1tovou s\u00ed\u0165\" src=\"\/wp-content\/uploads\/2020\/07\/02b0c737b6482cede84e9d6347c7d977.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nETA neod\u0161ifrov\u00e1v\u00e1 zpr\u00e1vy, ale shroma\u017e\u010fuje profily metadat \u0161ifrovan\u00fdch tok\u016f provozu \u2013 velikosti paket\u016f, \u010dasov\u00e9 intervaly mezi pakety a mnoho dal\u0161\u00edho. Pot\u00e9 se metadata exportuj\u00ed v z\u00e1znamech NetFlow v9 do Cisco Stealthwatch.<\/p>\n<p>Kl\u00ed\u010dovou funkc\u00ed Stealthwatch je st\u00e1l\u00e9 monitorov\u00e1n\u00ed provozu a tak\u00e9 vytv\u00e1\u0159en\u00ed z\u00e1kladn\u00edch ukazatel\u016f norm\u00e1ln\u00ed s\u00ed\u0165ov\u00e9 aktivity. S pomoc\u00ed metadat \u0161ifrovan\u00e9ho toku odeslan\u00fdch ETA Stealthwatch aplikuje v\u00edcestup\u0148ov\u00e9 strojov\u00e9 u\u010den\u00ed k odhalen\u00ed behavior\u00e1ln\u00edch anom\u00e1li\u00ed provozu, kter\u00e9 mohou nazna\u010dovat podez\u0159el\u00e9 ud\u00e1losti.<\/p>\n<p>Minul\u00fd rok si spole\u010dnost Cisco najala Miercom k proveden\u00ed nez\u00e1visl\u00e9 evaluace \u0159e\u0161en\u00ed Cisco Encrypted Traffic Analytics. V r\u00e1mci t\u00e9to evaluace Miercom odes\u00edlal zn\u00e1m\u00e9 i nezn\u00e1m\u00e9 hrozby (viry, trojsk\u00e9 kon\u011b, ransomware) v \u0161ifrovan\u00e9m i ne\u0161ifrovan\u00e9m provozu p\u0159es velk\u00e9 ETA a ne-ETA s\u00edt\u011b, aby identifikoval hrozby.<\/p>\n<p>Pro testov\u00e1n\u00ed byl spu\u0161t\u011bn \u0161kodliv\u00fd k\u00f3d v obou s\u00edt\u00edch. V obou p\u0159\u00edpadech podez\u0159el\u00e1 aktivita byla postupn\u011b odhalov\u00e1na. V ETA s\u00edti byly hrozby na po\u010d\u00e1tku odhaleny o 36 % rychleji ne\u017e v ne-ETA s\u00edti. B\u011bhem provozu se produktivita odhalov\u00e1n\u00ed v ETA s\u00edti postupn\u011b zvy\u0161ovala. Nakonec po n\u011bkolika hodin\u00e1ch provozu v ETA s\u00edti byly \u00fasp\u011b\u0161n\u011b odhaleny dv\u011b t\u0159etiny aktivn\u00edch hrozeb, co\u017e je dvakr\u00e1t v\u00edce ne\u017e v ne-ETA s\u00edti.<\/p>\n<p>Funkcionalita ETA je dob\u0159e integrov\u00e1na se Stealthwatch. Hrozby jsou \u0159azeny podle z\u00e1va\u017enosti, zobrazeny s podrobn\u00fdmi informacemi a tak\u00e9 s mo\u017enostmi n\u00e1pravn\u00fdch opat\u0159en\u00ed po potvrzen\u00ed. V\u00fdsledek \u2013 ETA funguje!<\/p>\n<h3><strong>Detekce a prevence naru\u0161en\u00ed<\/strong><\/h3>\n<p>\nCisco nyn\u00ed disponuje dal\u0161\u00edm efektivn\u00edm n\u00e1strojem pro zabezpe\u010den\u00ed \u2014 Cisco Advanced Wireless Intrusion Prevention System (aWIPS): mechanismem pro detekci a prevenci hrozeb pro bezdr\u00e1tov\u00e9 s\u00edt\u011b. \u0158e\u0161en\u00ed aWIPS funguje na \u00farovni kontroler\u016f, p\u0159\u00edstupov\u00fdch bod\u016f a softwaru Cisco DNA Center. Proces detekce, upozorn\u011bn\u00ed a prevence hrozeb kombinuje anal\u00fdzu s\u00ed\u0165ov\u00e9ho provozu, informace o s\u00ed\u0165ov\u00fdch za\u0159\u00edzen\u00edch a topologii s\u00edt\u011b, metody zalo\u017een\u00e9 na signatur\u00e1ch a detekci anom\u00e1li\u00ed, co\u017e v kone\u010dn\u00e9m d\u016fsledku zaji\u0161\u0165uje vysokou p\u0159esnost a prevenci hrozeb bezdr\u00e1tov\u00e9 s\u00edt\u011b.<\/p>\n<p>\u00dapln\u00e1 integrace aWIPS do s\u00ed\u0165ov\u00e9 infrastruktury umo\u017e\u0148uje kontinu\u00e1ln\u00ed sledov\u00e1n\u00ed bezdr\u00e1tov\u00e9ho provozu jak v kabelov\u00fdch, tak bezdr\u00e1tov\u00fdch s\u00edt\u00edch a vyu\u017eit\u00ed t\u011bchto dat pro automatickou anal\u00fdzu potenci\u00e1ln\u00edch \u00fatok\u016f z mnoha zdroj\u016f, aby bylo mo\u017en\u00e9 co nejkomplexn\u011bji ur\u010dovat a p\u0159edch\u00e1zet mo\u017en\u00fdm \u00fatok\u016fm.<\/p>\n<h3><strong>Prost\u0159edky autentizace<\/strong><\/h3>\n<p>\nKrom\u011b klasick\u00fdch prost\u0159edk\u016f autentizace jsou v \u0159e\u0161en\u00edch Cisco Catalyst s\u00e9rie 9800 k dispozici tak\u00e9 podpora WPA3. WPA3 je posledn\u00ed verz\u00ed WPA, co\u017e je soubor protokol\u016f a technologi\u00ed zaji\u0161\u0165uj\u00edc\u00edch autentizaci a \u0161ifrov\u00e1n\u00ed pro s\u00edt\u011b Wi-Fi.<\/p>\n<p>WPA3 vyu\u017e\u00edv\u00e1 metodu sou\u010dasn\u00e9 autentizace rovnocenn\u00fdch prvk\u016f (SAE \u2014 Simultaneous Authentication of Equals) pro zaji\u0161t\u011bn\u00ed nejspolehliv\u011bj\u0161\u00ed ochrany u\u017eivatel\u016f p\u0159ed pokusy o prolomen\u00ed hesla t\u0159et\u00edmi stranami. Kdy\u017e se klient p\u0159ipojuje k p\u0159\u00edstupov\u00e9mu bodu, prov\u00e1d\u00ed v\u00fdm\u011bnu SAE. V p\u0159\u00edpad\u011b \u00fasp\u011bchu ka\u017ed\u00fd z nich vytvo\u0159\u00ed kryptograficky bezpe\u010dn\u00fd kl\u00ed\u010d, ze kter\u00e9ho se vygeneruje kl\u00ed\u010d relace, a pak p\u0159ech\u00e1zej\u00ed do stavu potvrzen\u00ed. Pot\u00e9 mohou klient i p\u0159\u00edstupov\u00fd bod ka\u017ed\u00fd \u010das p\u0159ech\u00e1zet do stav\u016f potvrzen\u00ed, kdykoli je pot\u0159eba vygenerovat kl\u00ed\u010d relace. Metoda vyu\u017e\u00edv\u00e1 p\u0159\u00edmou tajnost, kdy \u00fato\u010dn\u00edk m\u016f\u017ee prolomit jeden kl\u00ed\u010d, ale ne v\u0161echny ostatn\u00ed kl\u00ed\u010de.<\/p>\n<p>To znamen\u00e1, \u017ee SAE je navr\u017eeno tak, \u017ee \u00fato\u010dn\u00edk, kter\u00fd zachyt\u00ed provoz, m\u00e1 pouze jednu \u0161anci uhodnout heslo, ne\u017e se zachycen\u00e1 data stanou bezcenn\u00fdmi. K tomu, aby bylo mo\u017en\u00e9 prov\u00e9st dlouhodob\u00e9 h\u00e1d\u00e1n\u00ed hesla, by bylo vy\u017eadov\u00e1no fyzick\u00e9 p\u0159ipojen\u00ed k p\u0159\u00edstupov\u00e9mu bodu.<\/p>\n<h3><strong>Ochrann\u00e9 prost\u0159edky klientsk\u00fdch za\u0159\u00edzen\u00ed<\/strong><\/h3>\n<p>\nHlavn\u00edm prost\u0159edkem ochrany klient\u016f v bezdr\u00e1tov\u00fdch \u0159e\u0161en\u00edch Cisco Catalyst s\u00e9rie 9800 je nyn\u00ed Cisco Umbrella WLAN \u2013 cloudov\u00e1 slu\u017eba s\u00ed\u0165ov\u00e9 bezpe\u010dnosti funguj\u00edc\u00ed na \u00farovni DNS, kter\u00e1 automaticky detekuje jak zn\u00e1m\u00e9, tak i nov\u00e9 hrozby.<\/p>\n<p>Cisco Umbrella WLAN zaji\u0161\u0165uje klientsk\u00fdm za\u0159\u00edzen\u00edm bezpe\u010dn\u00e9 p\u0159ipojen\u00ed k Internetu. Toho je dosa\u017eeno pomoc\u00ed filtrov\u00e1n\u00ed obsahu, tedy blokov\u00e1n\u00edm p\u0159\u00edstupu k internetov\u00fdm zdroj\u016fm podle podnikov\u00e9 politiky. T\u00edm se chr\u00e1n\u00ed klientsk\u00e1 za\u0159\u00edzen\u00ed na internetu p\u0159ed malwarem, ransomwarem a phishingem. Aplikace politik je zalo\u017eena na 60 neust\u00e1le aktualizovan\u00fdch kategori\u00edch obsahu.<\/p>\n<h2><strong>Automatizace<\/strong><\/h2>\n<p>\nModern\u00ed bezdr\u00e1tov\u00e9 s\u00edt\u011b jsou mnohem flexibiln\u011bj\u0161\u00ed a slo\u017eit\u011bj\u0161\u00ed, a proto tradi\u010dn\u00ed zp\u016fsoby konfigurace a z\u00edsk\u00e1v\u00e1n\u00ed informac\u00ed z bezdr\u00e1tov\u00fdch kontroler\u016f nesta\u010d\u00ed. S\u00ed\u0165ov\u00ed administr\u00e1to\u0159i a odborn\u00edci na informa\u010dn\u00ed bezpe\u010dnost pot\u0159ebuj\u00ed n\u00e1stroje pro automatizaci a anal\u00fdzu, co\u017e motivuje v\u00fdrobce \u0159e\u0161en\u00ed pro bezdr\u00e1tov\u00e9 s\u00edt\u011b nab\u00edzet takov\u00e9 n\u00e1stroje.<\/p>\n<p>Pro \u0159e\u0161en\u00ed t\u011bchto \u00fakol\u016f jsou v bezdr\u00e1tov\u00fdch kontrolerech Cisco Catalyst s\u00e9rie 9800 vedle tradi\u010dn\u00edho API k dispozici tak\u00e9 podpora protokolu pro konfiguraci s\u00edt\u011b RESTCONF \/ NETCONF s jazykem modelov\u00e1n\u00ed dat YANG (Yet Another Next Generation).<\/p>\n<p>NETCONF je protokol zalo\u017een\u00fd na XML, kter\u00fd mohou aplikace pou\u017e\u00edt k dotazov\u00e1n\u00ed na informace a k modifikaci konfigurace s\u00ed\u0165ov\u00fdch za\u0159\u00edzen\u00ed, jako jsou bezdr\u00e1tov\u00e9 kontrolery.<\/p>\n<p>Krom\u011b t\u011bchto metod je v kontrolerech Cisco Catalyst s\u00e9rie 9800 implementov\u00e1na mo\u017enost z\u00edsk\u00e1v\u00e1n\u00ed, v\u00fdb\u011bru a anal\u00fdzy dat o toku informac\u00ed pomoc\u00ed protokolu NetFlow a sFlow.<\/p>\n<p>Pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti a pro modelov\u00e1n\u00ed provozu je schopnost sledovat konkr\u00e9tn\u00ed toky cenn\u00fdm n\u00e1strojem. K \u0159e\u0161en\u00ed t\u00e9to \u00falohy byl implementov\u00e1n protokol sFlow, kter\u00fd umo\u017e\u0148uje zachytit dva pakety z ka\u017ed\u00fdch sta. Av\u0161ak n\u011bkdy to m\u016f\u017ee b\u00fdt nedostate\u010dn\u00e9 pro anal\u00fdzu a adekv\u00e1tn\u00ed studium a hodnocen\u00ed toku. Alternativou je NetFlow, realizovan\u00fd spole\u010dnost\u00ed Cisco, kter\u00fd umo\u017e\u0148uje shroma\u017e\u010fovat a exportovat 100 % pakety ve stanoven\u00e9m toku pro n\u00e1slednou anal\u00fdzu.<\/p>\n<p>Dal\u0161\u00ed funkc\u00ed, kter\u00e1 je v\u0161ak dostupn\u00e1 pouze v hardwarov\u00e9 implementaci \u0159adi\u010d\u016f, je vestav\u011bn\u00e1 podpora jazyka Python jako roz\u0161\u00ed\u0159en\u00ed pro pou\u017eit\u00ed skript\u016f p\u0159\u00edmo na samotn\u00e9m bezdr\u00e1tov\u00e9m \u0159adi\u010di, \u010d\u00edm\u017e se automatizuje provoz bezdr\u00e1tov\u00e9 s\u00edt\u011b v \u0159adi\u010d\u00edch Cisco Catalyst s\u00e9rie 9800.<\/p>\n<p>A nakonec, pro operace monitorov\u00e1n\u00ed a \u0159\u00edzen\u00ed v \u0159adi\u010d\u00edch Cisco Catalyst s\u00e9rie 9800 je podporov\u00e1n osv\u011bd\u010den\u00fd protokol SNMP ve verz\u00edch 1, 2 a 3.<\/p>\n<p>T\u00edmto zp\u016fsobem pln\u011b odpov\u00eddaj\u00ed \u0159e\u0161en\u00ed Cisco Catalyst s\u00e9rie 9800 modern\u00edm po\u017eadavk\u016fm podnik\u016f, nab\u00edzej\u00ed jak nov\u00e1 a unik\u00e1tn\u00ed, tak osv\u011bd\u010den\u00e1 n\u00e1stroje pro automatizaci operac\u00ed a anal\u00fdzu v bezdr\u00e1tov\u00fdch s\u00edt\u00edch jak\u00e9koli velikosti a slo\u017eitosti.<\/p>\n<h2><strong>Z\u00e1v\u011br<\/strong><\/h2>\n<p>\nV \u0159e\u0161en\u00edch zalo\u017een\u00fdch na \u0159adi\u010d\u00edch Cisco Catalyst s\u00e9rie 9800 spole\u010dnost Cisco prok\u00e1zala vynikaj\u00edc\u00ed v\u00fdsledky v kategori\u00edch: vysok\u00e1 dostupnost, bezpe\u010dnost a automatizace.<\/p>\n<p>\u0158e\u0161en\u00ed pln\u011b vyhovuje v\u0161em po\u017eadavk\u016fm na vysokou dostupnost, jako je nouzov\u00e9 p\u0159epnut\u00ed za m\u00e9n\u011b ne\u017e sekundu b\u011bhem nepl\u00e1novan\u00fdch ud\u00e1lost\u00ed a nulov\u00fd \u010das v\u00fdpadku pro pl\u00e1novan\u00e9 ud\u00e1losti.<\/p>\n<p>Na \u0159adi\u010d\u00edch Cisco Catalyst s\u00e9rie 9800 je implementov\u00e1na komplexn\u00ed ochrana, kter\u00e1 zaji\u0161\u0165uje hlubokou kontrolu paket\u016f pro rozpozn\u00e1v\u00e1n\u00ed aplikac\u00ed a jejich \u0159\u00edzen\u00ed, kompletn\u00ed transparentnost datov\u00fdch tok\u016f a identifikaci hrozeb skr\u00fdvaj\u00edc\u00edch se v \u0161ifrovan\u00e9m provozu, a nav\u00edc jsou aplikov\u00e1ny pokro\u010dil\u00e9 mechanismy autentizace a ochrany koncov\u00fdch za\u0159\u00edzen\u00ed.<\/p>\n<p>Pro automatizaci operac\u00ed a anal\u00fdzu disponuj\u00ed \u0159e\u0161en\u00ed Cisco Catalyst s\u00e9rie 9800 \u0161irok\u00fdmi mo\u017enostmi, vyu\u017e\u00edvaj\u00ed popul\u00e1rn\u00ed standardn\u00ed modely: YANG, NETCONF, RESTCONF, tradi\u010dn\u00ed API rozhran\u00ed a vestav\u011bn\u00e9 skripty Python.<\/p>\n<p>T\u00edmto zp\u016fsobem Cisco op\u011bt potvrzuje sv\u016fj statut p\u0159edn\u00edho sv\u011btov\u00e9ho v\u00fdrobce s\u00ed\u0165ov\u00fdch \u0159e\u0161en\u00ed, kter\u00fd dr\u017e\u00ed krok s dobou a bere v \u00favahu v\u0161echny v\u00fdzvy modern\u00edho podnik\u00e1n\u00ed.<\/p>\n<p>Podrobn\u011bj\u0161\u00ed informace o rodin\u011b p\u0159ep\u00edna\u010d\u016f Catalyst naleznete na <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/ru_ru\/solutions\/enterprise-networks\/catalyst-9000.html?dtid=oblgotr000654\"> webu<\/a><\/noindex> Cisco.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cisco\/blog\/512220\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800. \u0414\u043b\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u044b\u043b \u0441\u043e\u0431\u0440\u0430\u043d \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0439 \u0441\u0442\u0435\u043d\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Wi-Fi 6 \u043e\u0442 Cisco, \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u0445: \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c; \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c; \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0438\u0436\u0435. \u0421 2019 \u0433\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89702,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0415\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u2013 \u043d\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043a\u0430\u043a \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-25T11:42:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-25T11:42:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00e1te \u0159adi\u010d \u2013 nem\u00e1te probl\u00e9my: jak snadno udr\u017eovat bezdr\u00e1tovou s\u00ed\u0165 | ProHoster","description":"V roce 2019 provedla konzulta\u010dn\u00ed spole\u010dnost Miercom nez\u00e1visl\u00e9 technologick\u00e9 hodnocen\u00ed Wi-Fi 6 \u0159adi\u010d\u016f Cisco Catalyst s\u00e9rie 9800.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0415\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u2013 \u043d\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043a\u0430\u043a \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-25T11:42:16+00:00","article:modified_time":"2020-07-25T11:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89699","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:06:29","updated":"2022-09-30 17:31:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/89699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=89699"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/89699\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/89702"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=89699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=89699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=89699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}