{"id":92780,"date":"2020-08-30T19:42:10","date_gmt":"2020-08-30T17:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity"},"modified":"2020-08-30T19:42:10","modified_gmt":"2020-08-30T17:42:10","slug":"osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","title":{"rendered":"Rysy zabezpe\u010den\u00ed bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 2 \u2014 Nep\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Rysy zabezpe\u010den\u00ed bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 2 \u2014 Nep\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany\" src=\"\/wp-content\/uploads\/2020\/08\/98625bbefd1ce79a419ec724562d3969.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Pokra\u010dujeme v diskusi o metod\u00e1ch zvy\u0161ov\u00e1n\u00ed bezpe\u010dnosti s\u00edt\u00ed. V tomto \u010dl\u00e1nku se zam\u011b\u0159\u00edme na dal\u0161\u00ed bezpe\u010dnostn\u00ed opat\u0159en\u00ed a organizaci l\u00e9pe chr\u00e1n\u011bn\u00fdch bezdr\u00e1tov\u00fdch s\u00edt\u00ed.<\/em><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p><\/p>\n<h2 id=\"predislovie-ko-vtoroy-chasti\">P\u0159edmluva k druh\u00e9 \u010d\u00e1sti<\/h2>\n<p><\/p>\n<p>V p\u0159edchoz\u00edm \u010dl\u00e1nku <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/516508\/\"><strong>\u201eRysy zabezpe\u010den\u00ed bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 1 \u2014 P\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany\u201c<\/strong><\/a><\/noindex> byla zm\u00edn\u011bna probl\u00e9matika bezpe\u010dnosti WiFi s\u00edt\u011b a p\u0159\u00edm\u00e9 metody ochrany p\u0159ed neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem. Byla probr\u00e1na jasn\u00e1 opat\u0159en\u00ed k prevenci odposlechu: \u0161ifrov\u00e1n\u00ed, skr\u00fdv\u00e1n\u00ed s\u00edt\u011b a filtrov\u00e1n\u00ed podle MAC, stejn\u011b jako specifick\u00e9 metody, jako je boj proti Rogue AP. Nicm\u00e9n\u011b krom\u011b p\u0159\u00edm\u00fdch metod ochrany existuj\u00ed tak\u00e9 nep\u0159\u00edm\u00e9. To jsou technologie, kter\u00e9 nejen\u017ee pom\u00e1haj\u00ed zlep\u0161ovat kvalitu spojen\u00ed, ale tak\u00e9 p\u0159isp\u00edvaj\u00ed k vy\u0161\u0161\u00ed \u00farovni ochrany.<\/p>\n<p><\/p>\n<p>Dva hlavn\u00ed rysy bezdr\u00e1tov\u00fdch s\u00edt\u00ed: vzd\u00e1len\u00fd bezkontaktn\u00ed p\u0159\u00edstup a r\u00e1diov\u00e9 spektrum jako vys\u00edlac\u00ed m\u00e9dium p\u0159enosu dat, kde ka\u017ed\u00fd p\u0159ij\u00edma\u010d sign\u00e1lu m\u016f\u017ee poslouchat p\u0159enos, a ka\u017ed\u00fd vys\u00edla\u010d m\u016f\u017ee blokovat s\u00ed\u0165 zbyte\u010dn\u00fdmi p\u0159enosy a prost\u011b ru\u0161en\u00ed. To, mimo jin\u00e9, negativn\u011b ovliv\u0148uje celkovou bezpe\u010dnost bezdr\u00e1tov\u00e9 s\u00edt\u011b.<\/p>\n<p><\/p>\n<p>O samotn\u00e9 bezpe\u010dnosti se ned\u00e1 dlouhodob\u011b \u017e\u00edt. Je je\u0161t\u011b nutn\u00e9 n\u011bjak pracovat, tedy vym\u011b\u0148ovat si data. A z t\u00e9to str\u00e1nky m\u00e1 WiFi mnoho dal\u0161\u00edch v\u00fdhrad:<\/p>\n<p><\/p>\n<ul>\n<li>mezi prostory pokryt\u00ed (\u201eb\u00edl\u00e9 skvrny\u201c);<\/li>\n<li>vliv vn\u011bj\u0161\u00edch zdroj\u016f a sousedn\u00edch p\u0159\u00edstupov\u00fdch bod\u016f na sebe navz\u00e1jem.<\/li>\n<\/ul>\n<p><\/p>\n<p>V d\u016fsledku v\u00fd\u0161e uveden\u00fdch probl\u00e9m\u016f se sni\u017euje kvalita sign\u00e1lu, spojen\u00ed ztr\u00e1c\u00ed stabilitu a kles\u00e1 rychlost v\u00fdm\u011bny dat.<\/p>\n<p><\/p>\n<p>Samoz\u0159ejm\u011b, p\u0159\u00edznivci dr\u00e1tov\u00fdch s\u00edt\u00ed s pot\u011b\u0161en\u00edm poznamenaj\u00ed, \u017ee p\u0159i pou\u017e\u00edv\u00e1n\u00ed kabelov\u00fdch a zejm\u00e9na optick\u00fdch spojen\u00ed se s t\u011bmito probl\u00e9my nesetk\u00e1vaj\u00ed.<\/p>\n<p><\/p>\n<p>Vznik\u00e1 ot\u00e1zka: lze tyto probl\u00e9my vy\u0159e\u0161it, ani\u017e by se uch\u00fdlili k n\u011bjak\u00fdm radik\u00e1ln\u00edm opat\u0159en\u00edm, jako je p\u0159epln\u011bn\u00ed v\u0161ech nespokojen\u00fdch do dr\u00e1tov\u00e9 s\u00edt\u011b?<\/p>\n<p><\/p>\n<h2 id=\"gde-nachalo-vseh-problem\">Kde za\u010d\u00ednaj\u00ed v\u0161echny probl\u00e9my?<\/h2>\n<p><\/p>\n<p>V po\u010d\u00e1tc\u00edch vzniku kancel\u00e1\u0159sk\u00fdch a dal\u0161\u00edch WiFi s\u00edt\u00ed se obvykle postupovalo podle jednoduch\u00e9ho algoritmu: um\u00edstila se jedin\u00e1 p\u0159\u00edstupov\u00e1 stanice do centra perimetru s c\u00edlem maxim\u00e1ln\u00edho pokryt\u00ed. Pokud sign\u00e1l nesta\u010dil pro vzd\u00e1len\u00e9 oblasti, p\u0159id\u00e1vala se k p\u0159\u00edstupov\u00e9 stanici zesiluj\u00edc\u00ed ant\u00e9na. Velmi z\u0159\u00eddka byla p\u0159id\u00e1na druh\u00e1 p\u0159\u00edstupov\u00e1 stanice, nap\u0159\u00edklad pro vzd\u00e1lenou kancel\u00e1\u0159 \u0159editele. To je asi v\u0161echna vylep\u0161en\u00ed.<\/p>\n<p><\/p>\n<p>Takov\u00fd p\u0159\u00edstup m\u011bl sv\u00e9 d\u016fvody. Za prv\u00e9, na po\u010d\u00e1tku v\u00fdvoje bezdr\u00e1tov\u00fdch s\u00edt\u00ed byla jejich technika drah\u00e1. Za druh\u00e9, instalace v\u00edce p\u0159\u00edstupov\u00fdch stanic znamenala \u010delit ot\u00e1zk\u00e1m, na kter\u00e9 tehdy nebylo odpov\u011bd\u00ed. Nap\u0159\u00edklad, jak organizovat bezprobl\u00e9mov\u00e9 p\u0159ep\u00edn\u00e1n\u00ed klienta mezi stanicemi? Jak bojovat s vz\u00e1jemnou interferenc\u00ed? Jak zjednodu\u0161it a uspo\u0159\u00e1dat spr\u00e1vu stanic, nap\u0159\u00edklad sou\u010dasn\u00e9 pou\u017eit\u00ed z\u00e1kaz\u016f\/pondek a monitorov\u00e1n\u00ed atd.? Proto bylo mnohem jednodu\u0161\u00ed postupovat podle pravidla: \u010d\u00edm m\u00e9n\u011b za\u0159\u00edzen\u00ed, t\u00edm l\u00e9pe.<\/p>\n<p><\/p>\n<p>Z\u00e1rove\u0148 p\u0159\u00edstupov\u00e1 stanice um\u00edst\u011bn\u00e1 pod stropem vys\u00edlala podle kruhov\u00e9ho (p\u0159esn\u011bji \u0159e\u010deno ov\u00e1ln\u00e9ho) diagramu.<\/p>\n<p><\/p>\n<p>Nicm\u00e9n\u011b tvary architektonick\u00fdch budov se p\u0159\u00edli\u0161 dob\u0159e nehod\u00ed do ov\u00e1ln\u00fdch diagram\u016f \u0161\u00ed\u0159en\u00ed sign\u00e1lu. Proto n\u011bkam sign\u00e1l t\u00e9m\u011b\u0159 nedosahuje a mus\u00ed se zesilovat, zat\u00edmco n\u011bkde vys\u00edl\u00e1n\u00ed p\u0159ekra\u010duje hranici a st\u00e1v\u00e1 se dostupn\u00fdm pro neautorizovan\u00e9 osoby.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Rysy zabezpe\u010den\u00ed bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 2 \u2014 Nep\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany\" src=\"\/wp-content\/uploads\/2020\/08\/0020ab189634ee1e0b5fdb8b783d60da.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zek 1. P\u0159\u00edklad pokryt\u00ed p\u0159i pou\u017eit\u00ed jedin\u00e9 stanice v kancel\u00e1\u0159i.<\/em><\/p>\n<p><\/p>\n<p><em><strong>Pozn\u00e1mka<\/strong>. Hovo\u0159\u00edme o hrub\u00e9m p\u0159ibl\u00ed\u017een\u00ed, kter\u00e9 nezohled\u0148uje p\u0159ek\u00e1\u017eky pro \u0161\u00ed\u0159en\u00ed a tak\u00e9 sm\u011brovost sign\u00e1lu. V praxi se tvary diagram\u016f pro r\u016fzn\u00e9 modely p\u0159\u00edstupov\u00fdch stanic mohou li\u0161it.<\/em><\/p>\n<p><\/p>\n<p>Situaci lze zlep\u0161it pou\u017eit\u00edm v\u00edce p\u0159\u00edstupov\u00fdch stanic.<\/p>\n<p><\/p>\n<p>Za prv\u00e9, to umo\u017en\u00ed efektivn\u011bj\u0161\u00ed rozlo\u017een\u00ed vys\u00edlac\u00edch za\u0159\u00edzen\u00ed na plo\u0161e m\u00edstnosti.<\/p>\n<p><\/p>\n<p>Za druh\u00e9, vznik\u00e1 mo\u017enost sn\u00ed\u017eit \u00farove\u0148 sign\u00e1lu, co\u017e br\u00e1n\u00ed jeho p\u0159ekro\u010den\u00ed perimetru kancel\u00e1\u0159e nebo jin\u00e9 budovy. V tomto p\u0159\u00edpad\u011b, aby bylo mo\u017en\u00e9 po\u010d\u00edtat provoz bezdr\u00e1tov\u00e9 s\u00edt\u011b, je t\u0159eba se t\u00e9m\u011b\u0159 p\u0159ibl\u00ed\u017eit k perimetru nebo dokonce vstoupit do jeho hranic. Tak funguje i \u00fato\u010dn\u00edk, kter\u00fd se sna\u017e\u00ed vniknout do vnit\u0159n\u00ed kabelov\u00e9 s\u00edt\u011b.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Rysy zabezpe\u010den\u00ed bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 2 \u2014 Nep\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany\" src=\"\/wp-content\/uploads\/2020\/08\/f4a2b2d75790a459fe2e0de477e4fa05.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zek 2. Zv\u00fd\u0161en\u00ed po\u010dtu p\u0159\u00edstupov\u00fdch bod\u016f umo\u017e\u0148uje lep\u0161\u00ed rozlo\u017een\u00ed pokryt\u00ed.<\/em><\/p>\n<p><\/p>\n<p>Poj\u010fme si je\u0161t\u011b jednou prohl\u00e9dnout oba obr\u00e1zky. Na prvn\u00edm jasn\u011b vid\u00edme jednu z hlavn\u00edch zranitelnost\u00ed bezdr\u00e1tov\u00e9 s\u00edt\u011b \u2014 sign\u00e1l lze zachytit na slu\u0161nou vzd\u00e1lenost.<\/p>\n<p><\/p>\n<p>Na druh\u00e9m obr\u00e1zku situace nen\u00ed tak kritick\u00e1. \u010c\u00edm v\u00edce p\u0159\u00edstupov\u00fdch bod\u016f, t\u00edm efektivn\u011bj\u0161\u00edm je pokryt\u00ed a z\u00e1rove\u0148 v\u00fdkon sign\u00e1lu se t\u00e9m\u011b\u0159 nevymyk\u00e1 z obrysu, zjednodu\u0161en\u011b \u0159e\u010deno, z obrys\u016f kancel\u00e1\u0159e, budovy a dal\u0161\u00edch mo\u017en\u00fdch objekt\u016f.<\/p>\n<p><\/p>\n<p>\u00dato\u010dn\u00edk se mus\u00ed n\u011bjak nen\u00e1padn\u011b p\u0159ibl\u00ed\u017eit, aby zachytil relativn\u011b slab\u00fd sign\u00e1l z \"ulice\" nebo \"koryta\" a tak d\u00e1le. K tomu je nutn\u00e9 se dostat bl\u00edzko k kancel\u00e1\u0159sk\u00e9 budov\u011b, nap\u0159\u00edklad st\u00e1t pod okny. Nebo se sna\u017eit proniknout p\u0159\u00edmo do kancel\u00e1\u0159sk\u00e9 budovy. V ka\u017ed\u00e9m p\u0159\u00edpad\u011b to zvy\u0161uje riziko, \u017ee bude \"odhalen\" na kamerov\u00e9m syst\u00e9mu, a \u017ee ho uvid\u00ed ochranka. T\u00edm se v\u00fdrazn\u011b zkracuje \u010dasov\u00fd interval pro \u00fatok. To u\u017e t\u011b\u017eko nazvat \"ide\u00e1ln\u00edmi podm\u00ednkami pro hacking.\"<\/p>\n<p><\/p>\n<p>Samoz\u0159ejm\u011b, st\u00e1le zb\u00fdv\u00e1 jedna \"prvotn\u00ed h\u0159\u00edch\": bezdr\u00e1tov\u00e9 s\u00edt\u011b vys\u00edlaj\u00ed v dostupn\u00e9m rozsahu, kter\u00fd mohou zachytit v\u0161ichni klienti. O skute\u010dnosti, \u017ee WiFi s\u00ed\u0165 lze srovnat s Ethernet-HUB, kde je sign\u00e1l p\u0159en\u00e1\u0161en okam\u017eit\u011b na v\u0161echny porty, nen\u00ed t\u0159eba pochybovat. Aby se tomu p\u0159ede\u0161lo, ide\u00e1ln\u011b by ka\u017ed\u00e1 dvojice za\u0159\u00edzen\u00ed m\u011bla komunikovat na sv\u00e9m frekven\u010dn\u00edm kan\u00e1lu, do kter\u00e9ho by nikdo jin\u00fd nem\u011bl zasahovat.<\/p>\n<p><\/p>\n<p>Toto jsou v kostce hlavn\u00ed probl\u00e9my. Poj\u010fme se pod\u00edvat na zp\u016fsoby jejich \u0159e\u0161en\u00ed.<\/p>\n<p><\/p>\n<h2 id=\"sredstva-zaschity-pryamye-i-kosvennye\">Ochrann\u00e9 prost\u0159edky: p\u0159\u00edm\u00e9 a nep\u0159\u00edm\u00e9<\/h2>\n<p><\/p>\n<p>Jak ji\u017e bylo \u0159e\u010deno v p\u0159edchoz\u00edm \u010dl\u00e1nku, ide\u00e1ln\u00ed ochrany v \u017e\u00e1dn\u00e9m p\u0159\u00edpad\u011b nedos\u00e1hneme. Ale lze maxim\u00e1ln\u011b zt\u00ed\u017eit proveden\u00ed \u00fatoku, aby se v\u00fdsledek stal nerentabiln\u00edm vzhledem k vynalo\u017een\u00e9mu \u00fasil\u00ed.<\/p>\n<p><\/p>\n<p>Ochrann\u00e9 prost\u0159edky lze zjednodu\u0161en\u011b rozd\u011blit do dvou z\u00e1kladn\u00edch skupin:<\/p>\n<p><\/p>\n<ul>\n<li>technologie p\u0159\u00edm\u00e9 ochrany provozu, jako je \u0161ifrov\u00e1n\u00ed nebo filtrov\u00e1n\u00ed podle MAC;<\/li>\n<li>technologie, kter\u00e9 byly p\u016fvodn\u011b ur\u010deny pro jin\u00e9 \u00fa\u010dely, nap\u0159\u00edklad pro zvy\u0161ov\u00e1n\u00ed rychlosti, ale z\u00e1rove\u0148 nep\u0159\u00edmo zt\u011b\u017euj\u00edc\u00ed \u017eivot \u00fato\u010dn\u00edkovi.<\/li>\n<\/ul>\n<p><\/p>\n<p>O prvn\u00ed skupin\u011b bylo \u0159e\u010deno v prvn\u00ed \u010d\u00e1sti. V na\u0161em arzen\u00e1lu v\u0161ak m\u00e1me tak\u00e9 dal\u0161\u00ed nep\u0159\u00edm\u00e9 prost\u0159edky. Jak ji\u017e bylo zm\u00edn\u011bno, zv\u00fd\u0161en\u00ed po\u010dtu p\u0159\u00edstupov\u00fdch bod\u016f sni\u017euje \u00farove\u0148 sign\u00e1lu a rovnom\u011brn\u011b rozd\u011bluje pokryt\u00ed, co\u017e zt\u011b\u017euje \u017eivot \u00fato\u010dn\u00edkovi.<\/p>\n<p><\/p>\n<p>Dal\u0161\u00edm aspektem je, \u017ee zv\u00fd\u0161en\u00ed rychlosti p\u0159enosu dat usnad\u0148uje pou\u017eit\u00ed dal\u0161\u00edch bezpe\u010dnostn\u00edch opat\u0159en\u00ed. Nap\u0159\u00edklad lze na ka\u017ed\u00e9m notebooku nainstalovat klienta VPN a p\u0159en\u00e1\u0161et data i v r\u00e1mci lok\u00e1ln\u00ed s\u00edt\u011b \u0161ifrovan\u00fdmi kan\u00e1ly. To si vy\u017e\u00e1d\u00e1 ur\u010dit\u00e9 zdroje, v\u010detn\u011b hardwarov\u00fdch, ale \u00farove\u0148 ochrany se t\u00edmto v\u00fdrazn\u011b zvy\u0161uje.<\/p>\n<p><\/p>\n<p>N\u00ed\u017ee uv\u00e1d\u00edme popis technologi\u00ed, kter\u00e9 mohou zlep\u0161it fungov\u00e1n\u00ed s\u00edt\u011b a nep\u0159\u00edmo zv\u00fd\u0161it \u00farove\u0148 ochrany.<\/p>\n<p><\/p>\n<h2 id=\"kosvennye-sredstva-uluchsheniya-zaschity--chto-mozhet-pomoch\">Nep\u0159\u00edm\u00e9 prost\u0159edky zlep\u0161en\u00ed ochrany \u2013 co m\u016f\u017ee pomoci?<\/h2>\n<p><\/p>\n<h3 id=\"client-steering\">Client Steering<\/h3>\n<p><\/p>\n<p>Funkce Client Steering nab\u00edz\u00ed klientsk\u00fdm za\u0159\u00edzen\u00ed nejprve vyu\u017e\u00edvat p\u00e1smo 5 GHz. Pokud tato mo\u017enost klientovi nen\u00ed dostupn\u00e1, m\u016f\u017ee st\u00e1le pou\u017e\u00edvat 2,4 GHz. Pro zastaral\u00e9 s\u00edt\u011b s mal\u00fdm po\u010dtem p\u0159\u00edstupov\u00fdch bod\u016f se hlavn\u00ed \u010dinnost odehr\u00e1v\u00e1 v p\u00e1smu 2,4 GHz. U frekven\u010dn\u00edho p\u00e1sma 5 GHz je sch\u00e9ma s jedn\u00edm p\u0159\u00edstupov\u00fdm bodem mnohdy nep\u0159ijateln\u00e9. D\u016fvodem je, \u017ee sign\u00e1l s vy\u0161\u0161\u00ed frekvenc\u00ed h\u016f\u0159e pronik\u00e1 skrze st\u011bny a obch\u00e1z\u00ed p\u0159ek\u00e1\u017eky. Obvykl\u00e9 doporu\u010den\u00ed: pro zaji\u0161t\u011bn\u00ed spolehliv\u00e9ho spojen\u00ed v p\u00e1smu 5 GHz je preferov\u00e1n p\u0159\u00edm\u00fd v\u00fdhled od p\u0159\u00edstupov\u00e9ho bodu.<\/p>\n<p><\/p>\n<p>V modern\u00edch standardech 802.11ac a 802.11ax d\u00edky v\u011bt\u0161\u00edmu po\u010dtu kan\u00e1l\u016f lze um\u00edstit n\u011bkolik p\u0159\u00edstupov\u00fdch bod\u016f bl\u00ed\u017ee k sob\u011b, co\u017e umo\u017e\u0148uje sn\u00ed\u017eit v\u00fdkon, a to bez ztr\u00e1ty, ba naopak i se ziskem na rychlosti p\u0159enosu dat. V\u00fdsledkem je, \u017ee pou\u017eit\u00ed p\u00e1sma 5 GHz zkomplikuje \u017eivot \u00fato\u010dn\u00edk\u016fm, ale zlep\u0161\u00ed kvalitu spojen\u00ed pro klienty, kte\u0159\u00ed se nach\u00e1zej\u00ed v dosahu.<\/p>\n<p><\/p>\n<p>Tato funkce je prezentov\u00e1na:<\/p>\n<p><\/p>\n<ul>\n<li>v p\u0159\u00edstupov\u00fdch bodech Nebula a NebulaFlex;<\/li>\n<li>v br\u00e1n\u00e1ch firewall s funkc\u00ed kontroleru.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"auto-healing\">Auto Healing<\/h3>\n<p><\/p>\n<p>Jak ji\u017e bylo uvedeno, obrysy perimetru m\u00edstnosti se \u0161patn\u011b vejdou do zaoblen\u00fdch diagram\u016f p\u0159\u00edstupov\u00fdch bod\u016f.<\/p>\n<p><\/p>\n<p>Aby tuto problematiku vy\u0159e\u0161ili, jednak je pot\u0159eba pou\u017e\u00edt optim\u00e1ln\u00ed po\u010det p\u0159\u00edstupov\u00fdch bod\u016f, a jednak sn\u00ed\u017eit vz\u00e1jemn\u00fd vliv. Pokud v\u0161ak jednodu\u0161e sn\u00ed\u017e\u00edte v\u00fdkon vys\u00edla\u010d\u016f ru\u010dn\u011b \u2014 takov\u00fd p\u0159\u00edstup m\u016f\u017ee v\u00e9st ke zhor\u0161en\u00ed spojen\u00ed. To bude zvl\u00e1\u0161\u0165 znateln\u00e9, pokud dojde k v\u00fdpadku jednoho nebo v\u00edce p\u0159\u00edstupov\u00fdch bod\u016f.<\/p>\n<p><\/p>\n<p>Auto Healing umo\u017e\u0148uje rychl\u00e9 p\u0159izp\u016fsoben\u00ed v\u00fdkonu bez ztr\u00e1ty spolehlivosti a rychlosti p\u0159enosu dat.<\/p>\n<p><\/p>\n<p>P\u0159i pou\u017eit\u00ed t\u00e9to funkce kontrol\u00e9r sleduje stav a funk\u010dnost p\u0159\u00edstupov\u00fdch bod\u016f. Pokud jeden z nich nefunguje, sousedn\u00ed maj\u00ed pokyn zv\u00fd\u0161it v\u00fdkon sign\u00e1lu, aby vyplnily 'b\u00edlou d\u00edru'. Jakmile je p\u0159\u00edstupov\u00fd bod op\u011bt funk\u010dn\u00ed, sousedn\u00ed body dostanou pokyn sn\u00ed\u017eit v\u00fdkon sign\u00e1lu, aby se sn\u00ed\u017eila \u00farove\u0148 vz\u00e1jemn\u00fdch ru\u0161en\u00ed.<\/p>\n<p><\/p>\n<h3 id=\"besshovnyy-wifi-rouming\">Beze\u0161l\u00e9 WiFi p\u0159ep\u00edn\u00e1n\u00ed<\/h3>\n<p><\/p>\n<p>Na prvn\u00ed pohled nelze tuto technologii pova\u017eovat za posiluj\u00edc\u00ed \u00farove\u0148 zabezpe\u010den\u00ed, sp\u00ed\u0161 naopak, proto\u017ee usnad\u0148uje p\u0159ep\u00edn\u00e1n\u00ed klienta (v\u010detn\u011b \u00fato\u010dn\u00edka) mezi p\u0159\u00edstupov\u00fdmi body v jedn\u00e9 s\u00edti. Pokud se v\u0161ak pou\u017e\u00edv\u00e1 dv\u011b nebo v\u00edce p\u0159\u00edstupov\u00fdch bod\u016f, je nutn\u00e9 zajistit bezprobl\u00e9movou funk\u010dnost bez zbyte\u010dn\u00fdch komplikac\u00ed. Krom\u011b toho, pokud je p\u0159\u00edstupov\u00fd bod p\u0159et\u00ed\u017een\u00fd, h\u016f\u0159e zvl\u00e1d\u00e1 ochrann\u00e9 funkce, jako je \u0161ifrov\u00e1n\u00ed, doch\u00e1z\u00ed k prodlev\u00e1m p\u0159i v\u00fdm\u011bn\u011b dat a dal\u0161\u00edm nep\u0159\u00edjemnostem. V tomto ohledu je beze\u0161l\u00e9 p\u0159ep\u00edn\u00e1n\u00ed velk\u00fdm p\u0159\u00ednosem pro flexibiln\u00ed rozlo\u017een\u00ed z\u00e1t\u011b\u017ee a zaji\u0161t\u011bn\u00ed nep\u0159etr\u017eit\u00e9ho provozu v chr\u00e1n\u011bn\u00e9m re\u017eimu.<\/p>\n<p><\/p>\n<h3 id=\"nastroyka-porogovyh-znacheniy-urovnya-signala-dlya-podklyucheniya-i-otklyucheniya-besprovodnyh-klientov-signal-threshold-ili-signal-strength-range\">Nastaven\u00ed prahov\u00fdch hodnot \u00farovn\u011b sign\u00e1lu pro p\u0159ipojen\u00ed a odpojen\u00ed bezdr\u00e1tov\u00fdch klient\u016f (Signal Threshold nebo Signal Strength Range)<\/h3>\n<p><\/p>\n<p>P\u0159i pou\u017eit\u00ed jedin\u00e9ho p\u0159\u00edstupov\u00e9ho bodu tato funkce v podstat\u011b nem\u00e1 v\u00fdznam. Pokud v\u0161ak funguje n\u011bkolik p\u0159\u00edstupov\u00fdch bod\u016f \u0159\u00edzen\u00fdch kontrol\u00e9rem, je mo\u017en\u00e9 uspo\u0159\u00e1dat mobiln\u00ed distribuci klient\u016f mezi r\u016fzn\u00fdmi AP. Je dobr\u00e9 p\u0159ipomenout, \u017ee funkce kontrol\u00e9ru p\u0159\u00edstupov\u00fdch bod\u016f je k dispozici v mnoha \u0159ad\u00e1ch router\u016f od Zyxel: ATP, USG, USG FLEX, VPN, ZyWALL.<\/p>\n<p><\/p>\n<p>V uveden\u00fdch za\u0159\u00edzen\u00edch je funkce pro odpojen\u00ed klienta, kter\u00fd je p\u0159ipojen k SSID se slab\u00fdm sign\u00e1lem. \u201eSlab\u00fd\u201c znamen\u00e1, \u017ee sign\u00e1l je pod prahem stanoven\u00fdm na kontroleru. Po odpojen\u00ed klient ode\u0161le zku\u0161ebn\u00ed dotaz za \u00fa\u010delem nalezen\u00ed jin\u00e9ho p\u0159\u00edstupov\u00e9ho bodu.<\/p>\n<p><\/p>\n<p>Nap\u0159\u00edklad, pokud je klient p\u0159ipojen k p\u0159\u00edstupov\u00e9mu bodu se sign\u00e1lem pod -65dBm, a prahov\u00e9 odpojen\u00ed stanice je -60dBm, v tomto p\u0159\u00edpad\u011b p\u0159\u00edstupov\u00fd bod odpoj\u00ed klienta s t\u00edmto \u00farovn\u00ed sign\u00e1lu. Klient nyn\u00ed spust\u00ed proces op\u011btovn\u00e9ho p\u0159ipojen\u00ed a p\u0159ipoj\u00ed se k jin\u00e9mu p\u0159\u00edstupov\u00e9mu bodu se sign\u00e1lem, kter\u00fd p\u0159ekra\u010duje nebo je roven -60dBm (pr\u00e1h sign\u00e1lu stanice).<\/p>\n<p><\/p>\n<p>To hraje d\u016fle\u017eitou roli p\u0159i pou\u017e\u00edv\u00e1n\u00ed v\u00edce p\u0159\u00edstupov\u00fdch bod\u016f. T\u00edm se zamez\u00ed situaci, kdy se v\u011bt\u0161ina klient\u016f hromad\u00ed na jednom bod\u011b, zat\u00edmco ostatn\u00ed p\u0159\u00edstupov\u00e9 body z\u016fst\u00e1vaj\u00ed nevyu\u017eity.<\/p>\n<p><\/p>\n<p>Krom\u011b toho je mo\u017en\u00e9 omezit p\u0159ipojen\u00ed klient\u016f se slab\u00fdm sign\u00e1lem, kte\u0159\u00ed pravd\u011bpodobn\u011b nach\u00e1zej\u00ed za hranicemi m\u00edstnosti, nap\u0159\u00edklad za zd\u00ed v sousedn\u00ed kancel\u00e1\u0159i, co\u017e tak\u00e9 umo\u017e\u0148uje tuto funkci pova\u017eovat za nep\u0159\u00edmou metodu ochrany.<\/p>\n<p><\/p>\n<h3 id=\"perehod-na-wifi-6-kak-odin-iz-putey-povysheniya-urovnya-bezopasnosti\">P\u0159echod na WiFi 6 jako jeden z krok\u016f ke zv\u00fd\u0161en\u00ed \u00farovn\u011b bezpe\u010dnosti<\/h3>\n<p><\/p>\n<p>O v\u00fdhod\u00e1ch p\u0159\u00edm\u00fdch ochrann\u00fdch prost\u0159edk\u016f jsme ji\u017e hovo\u0159ili v p\u0159edchoz\u00edm \u010dl\u00e1nku <strong>\u201eRysy zabezpe\u010den\u00ed bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 1 \u2014 P\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany\u201c<\/strong>.<\/p>\n<p><\/p>\n<p>S\u00edt\u011b WiFi 6 nab\u00edzej\u00ed vy\u0161\u0161\u00ed rychlost p\u0159enosu dat. Na jedn\u00e9 stran\u011b nov\u00e1 skupina standard\u016f umo\u017e\u0148uje zv\u00fd\u0161it rychlost, na druh\u00e9 stran\u011b lze um\u00edstit je\u0161t\u011b v\u00edce p\u0159\u00edstupov\u00fdch bod\u016f na t\u00e9\u017ee plo\u0161e. Nov\u00fd standard umo\u017e\u0148uje pou\u017e\u00edt men\u0161\u00ed v\u00fdkon pro p\u0159enos p\u0159i vy\u0161\u0161\u00ed rychlosti.<\/p>\n<p><\/p>\n<p><strong>Zv\u00fd\u0161en\u00ed rychlosti v\u00fdm\u011bny dat<\/strong>.<\/p>\n<p><\/p>\n<p>P\u0159echod na WiFi 6 znamen\u00e1 zv\u00fd\u0161en\u00ed rychlosti v\u00fdm\u011bny a\u017e na 11Gb\/s (typ modulace 1024-QAM, kan\u00e1ly 160 MHz). Nov\u00e1 za\u0159\u00edzen\u00ed podporuj\u00edc\u00ed WiFi 6 maj\u00ed p\u0159itom vy\u0161\u0161\u00ed v\u00fdkon. Jedn\u00edm z hlavn\u00edch probl\u00e9m\u016f p\u0159i zav\u00e1d\u011bn\u00ed dal\u0161\u00edch bezpe\u010dnostn\u00edch opat\u0159en\u00ed, jako je VPN kan\u00e1l pro ka\u017ed\u00e9ho u\u017eivatele, je pokles rychlosti. S WiFi 6 bude snaz\u0161\u00ed zav\u00e1d\u011bt dal\u0161\u00ed ochrann\u00e9 syst\u00e9my.<\/p>\n<p><\/p>\n<h3 id=\"bss-coloring\">BSS Coloring<\/h3>\n<p><\/p>\n<p>D\u0159\u00edve jsme psali, \u017ee rovnom\u011brn\u011bj\u0161\u00ed pokryt\u00ed sni\u017euje pronikan\u00ed sign\u00e1lu WiFi za obvod. P\u0159i dal\u0161\u00edm n\u00e1r\u016fstu po\u010dtu p\u0159\u00edstupov\u00fdch bod\u016f v\u0161ak i pou\u017eit\u00ed Auto Healing m\u016f\u017ee b\u00fdt nedostate\u010dn\u00e9, proto\u017ee \"ciz\u00ed\" provoz z vedlej\u0161\u00edho bodu i tak pronik\u00e1 do p\u0159ij\u00edmac\u00ed z\u00f3ny.<\/p>\n<p><\/p>\n<p>P\u0159i pou\u017eit\u00ed BSS Coloring p\u0159\u00edstupov\u00fd bod zanech\u00e1v\u00e1 speci\u00e1ln\u00ed zna\u010dky (barvy) v sv\u00fdch datov\u00fdch paketech. To umo\u017e\u0148uje ignorovat vliv sousedn\u00edch vys\u00edlac\u00edch za\u0159\u00edzen\u00ed (p\u0159\u00edstupov\u00fdch bod\u016f).<\/p>\n<p><\/p>\n<h3 id=\"uluchshennyy-mu-mimo\">Vylep\u0161en\u00fd MU-MIMO<\/h3>\n<p><\/p>\n<p>Ve standardu 802.11ax jsou tak\u00e9 d\u016fle\u017eit\u00e1 vylep\u0161en\u00ed technologie MU-MIMO (Multi-User \u2013 Multiple Input Multiple Output). MU-MIMO umo\u017e\u0148uje p\u0159\u00edstupov\u00e9mu bodu vym\u011b\u0148ovat data se n\u011bkolika za\u0159\u00edzen\u00edmi sou\u010dasn\u011b. Ve p\u0159edchoz\u00edm standardu tato technologie podporovala pouze skupiny \u010dty\u0159 klient\u016f na jedn\u00e9 frekvenci. To usnad\u0148ovalo p\u0159enos, ale ne p\u0159\u00edjem. WiFi 6 pou\u017e\u00edv\u00e1 v\u00edcerozm\u011brn\u00fd MIMO 8\u00d78 pro p\u0159enos i p\u0159\u00edjem.<\/p>\n<p><\/p>\n<p><em><strong>Pozn\u00e1mka.<\/strong> Standard 802.11ax zvy\u0161uje velikost skupin MU-MIMO ve vstupn\u00edm proudu, co\u017e zaji\u0161\u0165uje \u00fa\u010dinn\u011bj\u0161\u00ed v\u00fdkon s\u00edt\u011b WiFi. V\u00edceu\u017eivatelsk\u00fd v\u00fdstupn\u00ed kan\u00e1l MIMO je nov\u00fdm dopln\u011bn\u00edm k 802.11ax.<\/em><\/p>\n<p><\/p>\n<h3 id=\"ofdma-orthogonal-frequency-division-multiple-access\">OFDMA (Orthogonal frequency-division multiple access)<\/h3>\n<p><\/p>\n<p>Jedn\u00e1 se o novou metodu p\u0159\u00edstupu k kan\u00e1l\u016fm a \u0159\u00edzen\u00ed, kter\u00e1 byla vyvinuta na z\u00e1klad\u011b technologi\u00ed, kter\u00e9 byly ji\u017e vyzkou\u0161eny v technologii mobiln\u00edch s\u00edt\u00ed LTE.<\/p>\n<p><\/p>\n<p>OFDMA umo\u017e\u0148uje vys\u00edlat v\u00edce ne\u017e jeden sign\u00e1l po stejn\u00e9 lince nebo kan\u00e1lu sou\u010dasn\u011b, p\u0159i\u010dem\u017e pro ka\u017ed\u00e9 vys\u00edl\u00e1n\u00ed je p\u0159id\u011blen \u010dasov\u00fd interval a aplikuje se frekven\u010dn\u00ed d\u011blen\u00ed. V\u00fdsledkem je nejen zvy\u0161ov\u00e1n\u00ed rychlosti d\u00edky lep\u0161\u00edmu vyu\u017eit\u00ed kan\u00e1lu, ale i zv\u00fd\u0161en\u00ed bezpe\u010dnosti.<\/p>\n<p><\/p>\n<h2 id=\"rezyume\">Shrnut\u00ed<\/h2>\n<p><\/p>\n<p>S\u00edt\u011b WiFi se ka\u017ed\u00fdm rokem st\u00e1vaj\u00ed st\u00e1le bezpe\u010dn\u011bj\u0161\u00edmi. Pou\u017eit\u00ed modern\u00edch technologi\u00ed umo\u017e\u0148uje organizaci p\u0159ijateln\u00fdch \u00farovn\u00ed ochrany.<\/p>\n<p><\/p>\n<p>P\u0159\u00edm\u00e9 ochrann\u00e9 metody ve form\u011b \u0161ifrov\u00e1n\u00ed provozu se velmi dob\u0159e osv\u011bd\u010dily. Nezapom\u00ednejme ani na dal\u0161\u00ed opat\u0159en\u00ed: filtrov\u00e1n\u00ed podle MAC, skryt\u00ed identifik\u00e1toru s\u00edt\u011b, detekce Rogue AP (Omezen\u00ed Rogue AP).<\/p>\n<p><\/p>\n<p>Existuj\u00ed v\u0161ak tak\u00e9 nep\u0159\u00edm\u00e1 opat\u0159en\u00ed, kter\u00e1 zlep\u0161uj\u00ed spolupr\u00e1ci bezdr\u00e1tov\u00fdch za\u0159\u00edzen\u00ed a zvy\u0161uj\u00ed rychlost v\u00fdm\u011bny dat.<\/p>\n<p><\/p>\n<p>Vyu\u017eit\u00ed nov\u00fdch technologi\u00ed umo\u017e\u0148uje sn\u00ed\u017eit \u00farove\u0148 sign\u00e1lu z bod\u016f a u\u010dinit pokryt\u00ed rovnom\u011brn\u011bj\u0161\u00edm, co\u017e pozitivn\u011b ovliv\u0148uje celkov\u00e9 fungov\u00e1n\u00ed bezdr\u00e1tov\u00e9 s\u00edt\u011b, v\u010detn\u011b bezpe\u010dnosti.<\/p>\n<p><\/p>\n<p>Zdrav\u00fd rozum napov\u00edd\u00e1, \u017ee pro zv\u00fd\u0161en\u00ed bezpe\u010dnosti jsou v\u0161echny prost\u0159edky dobr\u00e9: jak p\u0159\u00edm\u00e9, tak nep\u0159\u00edm\u00e9. Tato kombinace umo\u017e\u0148uje maxim\u00e1ln\u011b zt\u00ed\u017eit \u017eivot zlo\u010dinc\u016fm.<\/p>\n<p><\/p>\n<h2 id=\"poleznye-ssylki\">U\u017eite\u010dn\u00e9 odkazy:<\/h2>\n<p><\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/zyxelru\">Telegram chat Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/ci_general_20191031_520516.shtml\">F\u00f3rum o vybaven\u00ed Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Mnoho u\u017eite\u010dn\u00fdch vide\u00ed na kan\u00e1lu Zyxel (Youtube)<\/a><\/noindex><\/li>\n<li>Rysy ochrany bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 1 \u2014 P\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Wi-Fi nebo kroucen\u00e1 dvojlinka \u2014 co je lep\u0161\u00ed?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Synchronizace p\u0159\u00edstupov\u00fdch bod\u016f Wi-Fi pro spolupr\u00e1ci<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Wi-Fi 6: pot\u0159ebuje nov\u00fd standard bezdr\u00e1tov\u00e9 komunikace b\u011b\u017en\u00fd u\u017eivatel a pokud ano, tak pro\u010d?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">WiFi 6 MU-MIMO a OFDMA: Dva pil\u00ed\u0159e va\u0161eho \u00fasp\u011bchu v budoucnu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Budoucnost WiFi<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Vyu\u017eit\u00ed multigigabitov\u00fdch switch\u016f jako filozofie kompromisu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Dva v jednom, nebo migrace \u0159adi\u010de p\u0159\u00edstupov\u00e9ho bodu do br\u00e1ny<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">WiFi 6 je ji\u017e tady: co trh nab\u00edz\u00ed a pro\u010d pot\u0159ebujeme tuto technologii<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zlep\u0161ujeme fungov\u00e1n\u00ed Wi-Fi. Obecn\u00e9 principy a u\u017eite\u010dn\u00e9 tipy<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zlep\u0161ujeme fungov\u00e1n\u00ed Wi-Fi. \u010c\u00e1st 2. Rysy vybaven\u00ed<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zlep\u0161ujeme fungov\u00e1n\u00ed Wi-Fi. \u010c\u00e1st 3. Um\u00edst\u011bn\u00ed p\u0159\u00edstupov\u00fdch bod\u016f<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Synchronizace p\u0159\u00edstupov\u00fdch bod\u016f Wi-Fi pro spolupr\u00e1ci<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Moje dv\u011b mince: Wi-Fi dnes a z\u00edtra<\/a><\/noindex><\/li>\n<\/ol>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/516914\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u0435\u0440\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u043a\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u00ab\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u041f\u0440\u044f\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\u00bb \u0448\u043b\u0430 \u0440\u0435\u0447\u044c \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 WiFi \u0438 \u043f\u0440\u044f\u043c\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0411\u044b\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92781,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92780","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-30T17:42:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-30T17:42:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rysy ochrany bezdr\u00e1tov\u00fdch a dr\u00e1tov\u00fdch s\u00edt\u00ed. \u010c\u00e1st 2 \u2014 Nep\u0159\u00edm\u00e1 opat\u0159en\u00ed ochrany | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-30T17:42:10+00:00","article:modified_time":"2020-08-30T17:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92780","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:01:24","updated":"2022-09-30 00:38:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/92780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=92780"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/92780\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/92781"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=92780"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=92780"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=92780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}