{"id":97633,"date":"2020-10-20T02:42:47","date_gmt":"2020-10-20T00:42:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq"},"modified":"2020-10-20T02:42:47","modified_gmt":"2020-10-20T00:42:47","slug":"private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","title":{"rendered":"Private PSK (Pre-Shared Key) \u2013 ExtremeCloud IQ platvormi omadused ja v\u00f5imalused","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>WPA3 on juba vastu v\u00f5etud ja alates juulist 2020 on see kohustuslik WiFi-Alliance'i sertifitseerimisega seadmete jaoks. WPA2 ei ole kehtetuks tunnistatud ega seda plaanita. Samas toetavad nii WPA2 kui ka WPA3 PSK ja Enterprise re\u017eiime, kuid me soovitame meie artiklis arutada Private PSK tehnoloogiat ning selle kaudu saavutatavaid eeliseid.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 ExtremeCloud IQ platvormi omadused ja v\u00f5imalused\" src=\"\/wp-content\/uploads\/2020\/10\/098108c3884a2214168bd2d320d8e9f9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nWPA2-Personal'i probleemid on juba vanad ja peamiselt on need juba parandatud (Priority Management Frames, KRACK haavatavuse parandamine jne). Peamine j\u00e4\u00e4v puudus WPA2 PSK kasutamisel on see, et n\u00f5rgad paroolid on suhteliselt kergesti murdatev s\u00f5nastikur\u00fcnnaku abil. Kui parool on olnud ohustatud ja seda tuleb muuta, tuleb k\u00f5ik \u00fchendatud seadmed (ja juurdep\u00e4\u00e4supunktid) uuesti konfigureerida, mis v\u00f5ib osutuda v\u00e4ga t\u00f6\u00f6mahukaks protsessiks (WiFi-Alliance soovitab n\u00f5rkade paroolide probleemi lahendamiseks kasutada v\u00e4hemalt 20 t\u00e4hem\u00e4rgist pikki paroole).<\/p>\n<p>Teine k\u00fcsimus, mida WPA2-Personal'i kaudu m\u00f5nikord lahendada ei saa, on erinevate profiilide (vlan, QoS, tulem\u00fc\u00fcr jne) m\u00e4\u00e4ramine seadme gruppidele, mis on \u00fchendatud sama SSID'ga.<\/p>\n<p>WPA2-Enterprise abil on v\u00f5imalik lahendada k\u00f5ik eelnevalt nimetatud probleemid, kuid selle eest tuleb maksta:<\/p>\n<ul>\n<li>PKI (Public Key Infrastructure) ja turvasertifikaatide olemasolu v\u00f5i \u00fclesseadmine;<\/li>\n<li>V\u00f5ivad esineda raskused seadistamisel;<\/li>\n<li>V\u00f5ivad esineda raskused t\u00f5rkeotsingul;<\/li>\n<li>Ei ole optimaalne lahendus IoT seadmete v\u00f5i k\u00fclalisjuurdep\u00e4\u00e4su jaoks.<\/li>\n<\/ul>\n<p>\nRadikaalsem lahendus WPA2-Personal'i probleemidele on \u00fcleminek WPA3-le, mille peamine t\u00e4iustamine on SAE (Simultaneous Authentication of Equals) ja staatilised PSK-d. WPA3-Personal lahendab s\u00f5nastikur\u00fcnnaku probleemi, kuid ei tagage ainulaadset tuvastamist autentimise k\u00e4igus ning seega profiilide m\u00e4\u00e4ramise v\u00f5imalust (kuna kasutatakse endiselt \u00fchiseid staatilisi paroole).<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 ExtremeCloud IQ platvormi omadused ja v\u00f5imalused\" src=\"\/wp-content\/uploads\/2020\/10\/6ea0cbf3ec9e5f2decef500cf9a04cd1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nLisaks tuleb arvestada, et enam kui 95% olemasolevatest klientidest ei toeta praegu WPA3 ja SAE, samas kui WPA2 t\u00f6\u00f6tab edukalt miljardites juba v\u00e4lja antud seadmetes.<\/p>\n<p>Kuna Extreme Networks on v\u00e4lja t\u00f6\u00f6tanud Private Pre-Shared Key (PPSK) tehnoloogia, et lahendada eespool kirjeldatud olemasolevaid v\u00f5i potentsiaalselt v\u00f5imalikke probleeme. PPSK on \u00fchilduv igasuguste Wi-Fi klientide kanssa, mis toetavad WPA2-PSK ning v\u00f5imaldab saavutada turvalisust, mis on v\u00f5rdne WPA2-Enterprise tasemega, ilma et oleks vaja rajada 802.1X\/EAP infrastruktuuri. Private PSK on sisuliselt WPA2-PSK, kuid iga kasutaja (v\u00f5i kasutajate grupp) v\u00f5ib omada enda d\u00fcnaamiliselt genereeritud parooli. PPSK haldamine ei erine PSK haldamisest, kuna kogu protsess on automatiseeritud. Paroolide andmebaasi saab hoida kas juurdep\u00e4\u00e4supunktides kohapeal v\u00f5i pilves.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 ExtremeCloud IQ platvormi omadused ja v\u00f5imalused\" src=\"\/wp-content\/uploads\/2020\/10\/878f418cf07e2ffd94d22cd5b42388fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nParoolid v\u00f5ivad olla genereeritud automaatselt, neid on v\u00f5imalik paindlikult m\u00e4\u00e4rata pikkus\/stabiilsus, kehtivusaeg ja kohaletoimetamise meetod (e-post v\u00f5i SMS):<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 ExtremeCloud IQ platvormi omadused ja v\u00f5imalused\" src=\"\/wp-content\/uploads\/2020\/10\/0ba90a70c476ab853bf564816c16f3cb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 ExtremeCloud IQ platvormi omadused ja v\u00f5imalused\" src=\"\/wp-content\/uploads\/2020\/10\/c826ae0d8971d2e997ab8fd9d7c3f160.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSamuti saab seadistada maksimaalse klientide arvu, kes saavad \u00fchendada \u00fche PPSK kaudu, v\u00f5i isegi seadistada \u201eMAC-binding\u201d \u00fchendatud seadmetele. V\u00f5rguhalduse administraatori k\u00e4sul saab igat v\u00f5tme kergesti t\u00fchistada ja juurdep\u00e4\u00e4s v\u00f5rgule keelatakse ilma vajaduseta konfigureerida \u00fcmber k\u00f5iki teisi seadmeid. Kui v\u00f5tme tagasiv\u00f5tmise hetkel on klient \u00fchendatud, siis juurdep\u00e4\u00e4supunkt katkestab automaatselt tema \u00fchenduse v\u00f5rguga.<\/p>\n<p>PPSK peamiste eeliste seas on:<\/p>\n<ul>\n<li>kasutamislihtsus k\u00f5rge turvalisuse tasemel;<\/li>\n<li>s\u00f5nade r\u00fcnnakute peegeldamine lahendatakse pikkade ja vastupidavate paroolidega, mida ExtremeCloudIQ suudab automaatselt genereerida ja edastada;<\/li>\n<li>erinevate turvaprofiilide m\u00e4\u00e4ramine erinevatele seadmetele, mis on \u00fchendatud \u00fche SSID-ga;<\/li>\n<li>suurep\u00e4rane lahendus turvaliseks k\u00fclalisi juurdep\u00e4\u00e4suks;<\/li>\n<li>suurep\u00e4rane lahendus turvaliseks juurdep\u00e4\u00e4suks, kui seadmed ei toeta 802.1X \/ EAP (k\u00e4eshoitavad skannerid v\u00f5i IoT\/VoWiFi seadmed);<\/li>\n<li>menetluse edukas kasutamine ja t\u00e4iustamine \u00fcle 10 aasta.<\/li>\n<\/ul>\n<p>\nIgasuguste tekkinud v\u00f5i j\u00e4\u00e4nud k\u00fcsimuste korral saate alati \u00fchendust v\u00f5tta meie kontori t\u00f6\u00f6tajatega \u2013 <noindex><a rel=\"nofollow\" href=\"mailto:\/\/cis@extremenetworks.com\">cis@extremenetworks.com<\/a><\/noindex>.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/extremenetworks\/blog\/523890\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438 WPA2, \u0438 WPA3 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0440\u0435\u0436\u0438\u043c\u0430\u0445 PSK \u0438 Enterprise, \u043d\u043e \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e Private PSK, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0441 \u0435\u0451 \u043f\u043e\u043c\u043e\u0449\u044c\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97634,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Private PSK (Eelnevalt jagatud v\u00f5ti) \u2013 ExtremeCloud IQ platvormi tunnused ja v\u00f5imalused | ProHoster","description":"WPA3 on juba vastu v\u00f5etud ja alates juulist 2020 on see m\u00f5eldud seadmetele, mis saavad WiFi-Alliance'i sertifikaadi. WPA2 ei ole t\u00fchistatud ja ei ole plaanis seda teha.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster","og:description":"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-20T00:42:47+00:00","article:modified_time":"2020-10-20T00:42:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97633","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:16:25","updated":"2022-09-30 19:05:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=97633"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/97634"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=97633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=97633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=97633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}