{"id":89699,"date":"2020-07-25T13:42:16","date_gmt":"2020-07-25T11:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti"},"modified":"2020-07-25T13:42:16","modified_gmt":"2020-07-25T11:42:16","slug":"est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","title":{"rendered":"Exist\u0103 un controller \u2013 nu sunt probleme: cum s\u0103 \u00eentre\u021bii cu u\u0219urin\u021b\u0103 func\u021bionarea re\u021belei wireless","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen 2019, compania de consultan\u021b\u0103 Miercom a realizat o evaluare tehnologic\u0103 independent\u0103 a controlerelor Wi-Fi 6 Cisco Catalyst din seria 9800. Pentru acest studiu, a fost creat un banc de testare din controlere \u0219i puncte de acces Wi-Fi 6 de la Cisco, iar solu\u021bia tehnic\u0103 a fost evaluat\u0103 \u00een urm\u0103toarele categorii:<\/p>\n<ul>\n<li>Disponibilitate;<\/li>\n<li>Securitate;<\/li>\n<li>Automatizare.<\/li>\n<\/ul>\n<p>\nRezultatele cercet\u0103rii sunt prezentate mai jos. De la 2019, func\u021bionalitatea controlerelor Cisco Catalyst din seria 9800 a fost \u00eembun\u0103t\u0103\u021bit\u0103 semnificativ - aceste aspecte sunt de asemenea reflectate \u00een acest articol.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nDespre alte avantaje ale tehnologiei Wi-Fi 6, exemple de implementare \u0219i domenii de aplicare se poate citi<noindex><a rel=\"nofollow\" href=\"http:\/\/rrcwifi6.promo\/?utm_source=habrblogcisco&amp;utm_medium=cpc&amp;utm_campaign=rrcwifi6&amp;utm_content=articlecatalyst\"> aici<\/a><\/noindex>.<\/p>\n<h2><strong>Prezentarea solu\u021biei<\/strong><\/h2>\n<p><\/p>\n<h3><strong>Controlerele Wi-Fi 6 Cisco Catalyst din seria 9800<\/strong><\/h3>\n<p>\nSeria de controlere wireless Cisco Catalyst din seria 9800, bazat\u0103 pe sistemul de operare IOS-XE (care este, de asemenea, utilizat pentru switch-uri \u0219i routere Cisco), este oferit\u0103 \u00een diverse variante.<\/p>\n<p><img decoding=\"async\" alt=\"Exist\u0103 un controller \u2013 nu sunt probleme: cum s\u0103 \u00eentre\u021bii cu u\u0219urin\u021b\u0103 func\u021bionarea re\u021belei wireless\" src=\"\/wp-content\/uploads\/2020\/07\/b75d0fdc2caa8f49a5a4a893d4e67a78.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nModelul de v\u00e2rf, controlerul 9800-80, suport\u0103 o capacitate a re\u021belei wireless de p\u00e2n\u0103 la 80 Gbps. Un controler 9800-80 poate gestiona p\u00e2n\u0103 la 6000 de puncte de acces \u0219i p\u00e2n\u0103 la 64 000 de clien\u021bi wireless.<\/p>\n<p>Modelul de nivel mediu - controlerul 9800-40 - suport\u0103 o capacitate de p\u00e2n\u0103 la 40 Gbps, p\u00e2n\u0103 la 2000 de puncte de acces \u0219i p\u00e2n\u0103 la 32 000 de clien\u021bi wireless.<\/p>\n<p>Pe l\u00e2ng\u0103 aceste modele, analiza competitiv\u0103 a inclus \u0219i controlerul wireless 9800-CL (CL \u00eenseamn\u0103 Cloud). Modelul 9800-CL func\u021bioneaz\u0103 \u00een medii virtuale pe hypervisoare VMWare ESXI \u0219i KVM, iar specifica\u021biile sale depind de resursele hardware alocate ma\u0219inii virtuale a controlerului. \u00cen configura\u021bia maxim\u0103, controlerul Cisco 9800-CL, la fel ca modelul de v\u00e2rf 9800-80, suport\u0103 scalabilitatea p\u00e2n\u0103 la 6000 de puncte de acces \u0219i p\u00e2n\u0103 la 64 000 de clien\u021bi wireless.<\/p>\n<p>\u00cen cadrul studiului, au fost utilizate puncte de acces Cisco Aironet AP din seria 4800, care suport\u0103 frecven\u021bele de 2,4 \u0219i 5 GHz cu posibilitatea de comutare dinamic\u0103 \u00een modul dual 5-GHz.<\/p>\n<h2><strong>Banc de testare<\/strong><\/h2>\n<p>\n\u00cen cadrul test\u0103rii, a fost creat un banc de testare format din dou\u0103 controlere wireless Cisco Catalyst 9800-CL func\u021bion\u00e2nd \u00eentr-un cluster \u0219i puncte de acces Cisco Aironet AP din seria 4800.<\/p>\n<p>Ca dispozitive client, au fost utilizate laptopuri de la companiile Dell \u0219i Apple, precum \u0219i smartphone-uri Apple iPhone.<\/p>\n<p><img decoding=\"async\" alt=\"Exist\u0103 un controller \u2013 nu sunt probleme: cum s\u0103 \u00eentre\u021bii cu u\u0219urin\u021b\u0103 func\u021bionarea re\u021belei wireless\" src=\"\/wp-content\/uploads\/2020\/07\/d2821ca58a54a4fab2c5a208b20fb51f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><strong>Testarea disponibilit\u0103\u021bii<\/strong><\/h2>\n<p>\nDisponibilitatea este definit\u0103 ca abilitatea utilizatorilor de a accesa \u0219i utiliza un sistem sau un serviciu. Disponibilitatea ridicat\u0103 implic\u0103 acces continuu la sistem sau serviciu, indiferent de anumite evenimente.<\/p>\n<p>Disponibilitatea ridicat\u0103 a fost testat\u0103 \u00een patru scenarii, primele trei scenarii fiind evenimente predictibile sau planificate, care pot avea loc \u00een timpul lucrului sau \u00een afara acestuia. Al patrulea scenariu este un e\u0219ec clasic, care reprezint\u0103 un eveniment imprevizibil.<\/p>\n<p>Descrierea scenariilor:<\/p>\n<ul>\n<li>Remedierea erorilor \u2013 un microupdate al sistemului (bugfix sau patch de securitate), care permite corectarea unei erori sau a unei vulnerabilit\u0103\u021bi f\u0103r\u0103 a necesita o actualizare complet\u0103 a software-ului de sistem;<\/li>\n<li>Actualizare func\u021bional\u0103 \u2013 ad\u0103ugarea sau extinderea func\u021bionalit\u0103\u021bii actuale a sistemului prin instalarea actualiz\u0103rilor func\u021bionale;<\/li>\n<li>Actualizare complet\u0103 \u2013 actualizarea imaginii software-ului controlerului;<\/li>\n<li>Ad\u0103ugarea unui punct de acces \u2013 ad\u0103ugarea unui nou model de punct de acces \u00een re\u021beaua wireless f\u0103r\u0103 a necesita reconfigurarea sau actualizarea software-ului controlerului wireless;<\/li>\n<li>E\u0219ec \u2013 defectarea controlerului wireless.<\/li>\n<\/ul>\n<p><\/p>\n<h3><strong>Remedierea erorilor \u0219i vulnerabilit\u0103\u021bilor<\/strong><\/h3>\n<p>\nAdesea, \u00een multe solu\u021bii concurente, instalarea patch-urilor necesit\u0103 o actualizare complet\u0103 a software-ului sistemului controlerului wireless, ceea ce poate duce la \u00eentreruperi neplanificate. \u00cen cazul solu\u021biei Cisco, instalarea patch-urilor se face f\u0103r\u0103 a opri productivitatea. Patch-urile pot fi instalate pe oricare dintre componente, \u00een timp ce infrastructura wireless continu\u0103 s\u0103 func\u021bioneze.<\/p>\n<p>Procedura \u00een sine este destul de simpl\u0103. Fi\u0219ierul patch-ului este copiat \u00een folderul de \u00eenc\u0103rcare ini\u021bial\u0103 pe unul dintre controlerele wireless Cisco, iar apoi opera\u021biunea este confirmat\u0103 prin intermediul interfe\u021bei grafice sau a liniei de comand\u0103. \u00cen plus, prin intermediul interfe\u021bei grafice sau a liniei de comand\u0103, patch-ul poate fi, de asemenea, anulat \u0219i \u0219ters, f\u0103r\u0103 a \u00eentrerupe func\u021bionarea sistemului.<\/p>\n<h3><strong>Actualizare func\u021bional\u0103<\/strong><\/h3>\n<p>\nActualiz\u0103rile func\u021bionale ale software-ului sunt utilizate pentru activarea unor func\u021bii noi. Una dintre aceste \u00eembun\u0103t\u0103\u021biri este actualizarea bazei de date a semn\u0103turilor aplica\u021biilor. Acest pachet a fost instalat pe controlerele Cisco ca test. La fel ca \u00een cazul corec\u021biilor, actualizarea func\u021biilor se aplic\u0103, se instaleaz\u0103 sau se elimin\u0103 f\u0103r\u0103 a avea downtime sau a \u00eentrerupe activitatea sistemului.<\/p>\n<h3><strong>Actualizare complet\u0103<\/strong><\/h3>\n<p>\n\u00cen prezent, actualizarea complet\u0103 a imaginii software-ului controlerului se efectueaz\u0103 la fel ca \u0219i actualizarea func\u021bional\u0103, adic\u0103 f\u0103r\u0103 downtime. Cu toate acestea, aceast\u0103 op\u021biune este disponibil\u0103 doar \u00een configura\u021bii de cluster, atunci c\u00e2nd exist\u0103 mai mult de un controler. Actualizarea complet\u0103 se efectueaz\u0103 secven\u021bial: mai \u00eent\u00e2i pe un controler, apoi pe cel\u0103lalt.<\/p>\n<h3><strong>Ad\u0103ugarea unui nou model de punct de acces<\/strong><\/h3>\n<p>\nConectarea de noi puncte de acces, care anterior nu au fost utilizate cu imaginea software-ului controlerului, la re\u021beaua wireless este o opera\u021biune destul de frecvent\u0103, mai ales \u00een re\u021bele mari (aeroporturi, hoteluri, fabrici). Adesea, \u00een solu\u021biile concurente, aceast\u0103 opera\u021biune necesit\u0103 actualizarea software-ului de sistem sau repornirea controlerelor.<\/p>\n<p>\u00cen procesul de conectare a noilor puncte de acces Wi-Fi 6 la clusterul controlerelor Cisco Catalyst seria 9800, nu se observ\u0103 probleme de acest fel. Conectarea noilor puncte la controler se face f\u0103r\u0103 actualiz\u0103ri ale software-ului controlerului, iar acest proces nu necesit\u0103 repornirea, astfel c\u0103 nu influen\u021beaz\u0103 \u00een niciun fel re\u021beaua wireless.<\/p>\n<h3><strong>Defec\u021biunea controlerului<\/strong><\/h3>\n<p>\n\u00cen medii de testare se utilizeaz\u0103 dou\u0103 controlere (Activ \/ Standby) Wi-Fi 6, iar punctul de acces are o conexiune direct\u0103 la ambele controlere.<\/p>\n<p>Un controler wireless este activ, iar cel\u0103lalt, respectiv, de rezerv\u0103. \u00cen cazul unei defec\u021biuni a controlerului activ, managementul este preluat de controlerul de rezerv\u0103, iar statutul acestuia se schimb\u0103 \u00een activ. Aceast\u0103 procedur\u0103 se desf\u0103\u0219oar\u0103 f\u0103r\u0103 \u00eentreruperea punctului de acces \u0219i a Wi-Fi pentru clien\u021bi.<\/p>\n<h2><strong>Securitate<\/strong><\/h2>\n<p>\n\u00cen aceast\u0103 sec\u021biune se discut\u0103 aspectele asigur\u0103rii securit\u0103\u021bii, care \u00een re\u021belele wireless reprezint\u0103 o problem\u0103 extrem de relevant\u0103. Securitatea solu\u021biei este evaluat\u0103 dup\u0103 urm\u0103toarele caracteristici:<\/p>\n<ul>\n<li>Recunoa\u0219terea aplica\u021biilor;<\/li>\n<li>Urm\u0103rirea fluxului de trafic (Flow tracking);<\/li>\n<li>Analiza traficului criptat;<\/li>\n<li>Detectarea \u0219i prevenirea atacurilor;<\/li>\n<li>Mijloace de autentificare;<\/li>\n<li>Mijloace de protec\u021bie pentru dispozitivele clien\u021bilor.<\/li>\n<\/ul>\n<p><\/p>\n<h3><strong>Recunoa\u0219terea aplica\u021biilor<\/strong><\/h3>\n<p>\n\u00cen r\u00e2ndul diverselor produse de pe pia\u021ba Wi-Fi corporativ \u0219i industrial, exist\u0103 diferen\u021be \u00een ceea ce prive\u0219te capacitatea produselor de a identifica traficul pe baza aplica\u021biilor. Produse de la diferi\u021bi furnizori pot identifica un num\u0103r diferit de aplica\u021bii. \u00cen plus, multe dintre aplica\u021biile enumerate de solu\u021biile concurente ca fiind posibile pentru identificare sunt, de fapt, site-uri web, nu aplica\u021bii unice.<\/p>\n<p>Exist\u0103 o alt\u0103 caracteristic\u0103 interesant\u0103 a recunoa\u0219terii aplica\u021biilor: solu\u021biile difer\u0103 semnificativ \u00een ceea ce prive\u0219te precizia identific\u0103rii.<\/p>\n<p>Av\u00e2nd \u00een vedere toate testele efectuate, se poate afirma cu responsabilitate c\u0103 solu\u021bia Wi-Fi-6 de la Cisco realizeaz\u0103 recunoa\u0219terea aplica\u021biilor cu o precizie foarte bun\u0103: au fost identificate corect aplica\u021bii populare precum Jabber, Netflix, Dropbox, YouTube \u0219i altele, precum \u0219i servicii web. De asemenea, solu\u021biile Cisco pot analiza mai profund pachetele de date prin DPI (Inspec\u021bia Profund\u0103 a Pachetelor).<\/p>\n<h3><strong>Monitorizarea fluxurilor de trafic<\/strong><\/h3>\n<p>\nA fost efectuat un alt test pentru a determina dac\u0103 sistemul poate urm\u0103ri \u0219i raporta cu exactitate fluxurile de date (de exemplu, mi\u0219c\u0103rile fi\u0219ierelor mari). Pentru a verifica aceasta, un fi\u0219ier de 6,5 megabytes a fost trimis prin re\u021bea folosind protocolul de transfer de fi\u0219iere (FTP).<\/p>\n<p>Solu\u021bia Cisco a reu\u0219it pe deplin s\u0103 \u00eendeplineasc\u0103 sarcina \u0219i a putut s\u0103 urm\u0103reasc\u0103 acest trafic datorit\u0103 NetFlow \u0219i capacit\u0103\u021bilor sale hardware. Traficul a fost imediat detectat \u0219i identificat cu exactitate, inclusiv volumul total de date transferate.<\/p>\n<h3><strong>Analiza traficului criptat<\/strong><\/h3>\n<p>\nTraficul datelor utilizatorilor este din ce \u00een ce mai mult criptat. Acest lucru se face pentru a-l proteja \u00eempotriva urm\u0103ririi sau intercept\u0103rii de c\u0103tre atacatori. Dar, \u00een acela\u0219i timp, hackerii folosesc din ce \u00een ce mai mult criptarea pentru a-\u0219i ascunde software-ul mali\u021bios \u0219i pentru a desf\u0103\u0219ura alte opera\u021biuni dubioase, cum ar fi atacurile Man-in-the-Middle (MiTM) sau, de exemplu, atacurile cu keylogging.<\/p>\n<p>Majoritatea \u00eentreprinderilor verific\u0103 o parte din traficul criptat, de obicei desf\u0103c\u00e2ndu-l cu ajutorul firewall-urilor sau sistemelor de prevenire a intruziunilor. \u00cens\u0103 acest proces este consumator de timp \u0219i nu \u00eembun\u0103t\u0103\u021be\u0219te performan\u021ba re\u021belei \u00een ansamblu. \u00cen plus, dup\u0103 decriptare, aceste date devin vulnerable \u00een fa\u021ba ochilor curio\u0219i.<\/p>\n<p>Controlerele Cisco Catalyst din seria 9800 rezolv\u0103 cu succes analiza traficului criptat prin alte mijloace. Solu\u021bia se nume\u0219te Encrypted Traffic Analytics (ETA). ETA este o tehnologie unic\u0103, f\u0103r\u0103 analogii disponibile \u00een solu\u021biile concurente de pe pia\u021b\u0103, care detecteaz\u0103 malware \u00een traficul criptat f\u0103r\u0103 a necesita decriptarea acestuia. ETA este o func\u021bie de baz\u0103 a IOS-XE, care include Enhanced NetFlow \u0219i utilizeaz\u0103 algoritmi comportamentali avansa\u021bi pentru a identifica modelele de trafic mali\u021bios ascunse \u00een traficul criptat.<\/p>\n<p><img decoding=\"async\" alt=\"Exist\u0103 un controller \u2013 nu sunt probleme: cum s\u0103 \u00eentre\u021bii cu u\u0219urin\u021b\u0103 func\u021bionarea re\u021belei wireless\" src=\"\/wp-content\/uploads\/2020\/07\/02b0c737b6482cede84e9d6347c7d977.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nETA nu decripteaz\u0103 mesajele, ci colecteaz\u0103 profiluri ale metadatelor fluxurilor criptate de trafic \u2013 dimensiunea pachetelor, intervalele de timp dintre pachete \u0219i multe altele. Apoi, metadatele sunt exportate \u00een \u00eenregistr\u0103ri NetFlow v9 \u00een Cisco Stealthwatch.<\/p>\n<p>Func\u021bia cheie a Stealthwatch este monitorizarea continu\u0103 a traficului \u0219i crearea unor indicatori de baz\u0103 ai activit\u0103\u021bii normale a re\u021belei. Folosind metadatele fluxului criptat trimise de ETA, Stealthwatch aplic\u0103 \u00eenv\u0103\u021barea automat\u0103 la mai multe niveluri pentru a identifica anomaliile comportamentale \u00een trafic care ar putea indica evenimente suspecte.<\/p>\n<p>Anul trecut, compania Cisco a fost ajutat\u0103 de Miercom pentru a evalua independent solu\u021bia Cisco Encrypted Traffic Analytics. \u00cen cadrul acestei evalu\u0103ri, Miercom a trimis separat amenin\u021b\u0103ri cunoscute \u0219i necunoscute (viru\u0219i, troiani, ransomware) \u00een trafic criptat \u0219i necriptat prin re\u021bele mari ETA \u0219i non-ETA pentru a identifica amenin\u021b\u0103rile.<\/p>\n<p>Pentru testare, a fost rulat un cod mali\u021bios \u00een ambele re\u021bele. \u00cen ambele cazuri, activitatea suspect\u0103 a fost detectat\u0103 treptat. \u00cen re\u021beaua ETA, amenin\u021b\u0103rile au fost detectate cu 36% mai repede \u00een faza ini\u021bial\u0103 dec\u00e2t \u00een re\u021beaua non-ETA. Pe parcursul opera\u021biunii, productivitatea detect\u0103rii \u00een re\u021beaua ETA a crescut. \u00cen final, dup\u0103 c\u00e2teva ore de func\u021bionare, \u00een re\u021beaua ETA au fost descoperite cu succes dou\u0103 treimi din amenin\u021b\u0103rile active, de dou\u0103 ori mai mult dec\u00e2t \u00een re\u021beaua non-ETA.<\/p>\n<p>Func\u021bionalitatea ETA este bine integrat\u0103 cu Stealthwatch. Amenin\u021b\u0103rile sunt clasificate \u00een func\u021bie de severitate, afi\u0219ate cu informa\u021bii detaliate, precum \u0219i cu op\u021biuni de ac\u021biune pentru remedieri dup\u0103 confirmare. Concluzia este c\u0103 ETA func\u021bioneaz\u0103!<\/p>\n<h3><strong>Detectarea \u0219i prevenirea intruziunilor<\/strong><\/h3>\n<p>\nCisco are now offering another effective tool for security \u2014 Cisco Advanced Wireless Intrusion Prevention System (aWIPS): a threat detection and prevention mechanism for wireless networks. The aWIPS solution operates at the level of controllers, access points, and Cisco DNA Center management software. The threat detection, alerting, and prevention process combines network traffic analysis, information about network devices and topology, signature-based methods, and anomaly detection, ultimately ensuring high accuracy and preventing threats to the wireless network.<\/p>\n<p>The full integration of aWIPS into the network infrastructure allows for continuous monitoring of wireless traffic in both wired and wireless networks and utilizes it for automatic analysis of potential attacks from multiple sources, to comprehensively identify and prevent possible attacks.<\/p>\n<h3><strong>Authentication methods<\/strong><\/h3>\n<p>\nCurrently, in addition to classic authentication methods, Cisco Catalyst series 9800 solutions support WPA3. WPA3 is the latest version of WPA, representing a set of protocols and technologies that provide authentication and encryption for Wi-Fi networks.<\/p>\n<p>WPA3 uses the Simultaneous Authentication of Equals (SAE) method to provide the most robust protection for users against third-party password guessing attempts. When a client connects to an access point, it performs an SAE exchange. Upon success, each party generates a cryptographically secure key, from which a session key is derived, and then they enter the confirmation state. After this, the client and access point can enter confirmation states every time a session key needs to be generated. The method employs forward secrecy, where an attacker may compromise one key but not all other keys.<\/p>\n<p>This means that SAE is designed so that an attacker intercepting traffic has only one attempt to guess the password before the intercepted data becomes useless. To conduct a prolonged password guessing attack, physical access to the access point would be required.<\/p>\n<h3><strong>Client device protection mechanisms<\/strong><\/h3>\n<p>\nPrincipala metod\u0103 de protec\u021bie a clien\u021bilor \u00een solu\u021biile wireless Cisco Catalyst din seria 9800 este \u00een prezent Cisco Umbrella WLAN \u2014 un serviciu de securitate \u00een re\u021bea bazat pe cloud, care func\u021bioneaz\u0103 la nivel DNS \u0219i care detecteaz\u0103 automat at\u00e2t amenin\u021b\u0103rile cunoscute, c\u00e2t \u0219i pe cele noi.<\/p>\n<p>Cisco Umbrella WLAN ofer\u0103 dispozitivelor clien\u021bilor o conexiune protejat\u0103 la Internet. Acest lucru este realizat prin filtrarea con\u021binutului, adic\u0103 prin blocarea accesului la resursele de pe Internet conform politicii \u00eentreprinderii. Astfel, dispozitivele clien\u021bilor sunt protejate online \u00eempotriva malware-ului, ransomware-ului \u0219i phishing-ului. Aplicarea politicilor se bazeaz\u0103 pe 60 de categorii de con\u021binut, care sunt actualizate continuu.<\/p>\n<h2><strong>Automatizarea<\/strong><\/h2>\n<p>\nRe\u021belele wireless moderne sunt mult mai flexibile \u0219i complexe, astfel c\u0103 metodele tradi\u021bionale de configurare \u0219i extragere a informa\u021biilor de la controlerele wireless nu sunt suficiente. Administratorii de re\u021bea \u0219i speciali\u0219tii \u00een securitate informa\u021bional\u0103 au nevoie de instrumente pentru automatizare \u0219i analiz\u0103, ceea ce determin\u0103 furnizorii de solu\u021bii wireless s\u0103 ofere astfel de instrumente.<\/p>\n<p>Pentru a aborda aceste probleme, controlerele wireless Cisco Catalyst din seria 9800, pe l\u00e2ng\u0103 API-ul tradi\u021bional, ofer\u0103 suport pentru protocolul de configurare a re\u021belei RESTCONF \/ NETCONF cu limbajul de modelare a datelor YANG (Yet Another Next Generation).<\/p>\n<p>NETCONF este un protocol bazat pe XML, pe care aplica\u021biile \u00eel pot folosi pentru a solicita informa\u021bii \u0219i a modifica configura\u021bia dispozitivelor de re\u021bea, cum ar fi controlerele wireless.<\/p>\n<p>Pe l\u00e2ng\u0103 aceste metode, controlerele Cisco Catalyst din seria 9800 permit ob\u021binerea, selectarea \u0219i analiza datelor despre fluxurile de informa\u021bii prin intermediul protocolului NetFlow \u0219i sFlow.<\/p>\n<p>Pentru a asigura securitatea \u0219i pentru a modela traficul, capacitatea de a urm\u0103ri fluxuri specifice reprezint\u0103 un instrument valoros. Protocolul sFlow, care permite captarea a dou\u0103 pachete din fiecare sut\u0103, a fost implementat pentru a rezolva aceast\u0103 problem\u0103. Cu toate acestea, uneori acest lucru poate fi insuficient pentru o analiz\u0103 adecvat\u0103 a fluxului. Prin urmare, o alternativ\u0103 o constituie NetFlow, implementat de Cisco, care permite colectarea \u0219i exportarea 100% a tuturor pachetelor dintr-un flux specific pentru analiza ulterioar\u0103.<\/p>\n<p>O alt\u0103 func\u021bie, de fapt disponibil\u0103 doar \u00een implement\u0103rile hardware ale controlerelor, care permite automatizarea func\u021bion\u0103rii re\u021belei wireless \u00een controlerele Cisco Catalyst din seria 9800, este suportul \u00eencorporat pentru limbajul Python ca extensie pentru utilizarea scripturilor direct pe controlerul wireless.<\/p>\n<p>\u0218i, \u00een final, pentru opera\u021biunile de monitorizare \u0219i gestionare \u00een controlerele Cisco Catalyst din seria 9800 este suportat protocolul SNMP, testat de-a lungul timpului, versiunile 1, 2 \u0219i 3.<\/p>\n<p>Astfel, \u00een ceea ce prive\u0219te automatizarea solu\u021biei Cisco Catalyst din seria 9800, aceasta r\u0103spunde pe deplin cerin\u021belor moderne ale afacerilor, oferind at\u00e2t instrumente noi \u0219i unice, c\u00e2t \u0219i cele testate de-a lungul timpului pentru executarea automat\u0103 a opera\u021biunilor \u0219i analitic\u0103 \u00een re\u021belele wireless de orice dimensiune \u0219i complexitate.<\/p>\n<h2><strong>Concluzie<\/strong><\/h2>\n<p>\n\u00cen solu\u021biile bazate pe controlerele Cisco Catalyst din seria 9800, compania Cisco a demonstrat rezultate excelente \u00een categoriile: disponibilitate ridicat\u0103, securitate \u0219i automatizare.<\/p>\n<p>Solu\u021bia r\u0103spunde pe deplin tuturor cerin\u021belor de disponibilitate ridicat\u0103, cum ar fi comutarea automat\u0103 \u00een mai pu\u021bin de o secund\u0103 \u00een timpul evenimentelor neplanificate \u0219i timpul de inactivitate zero pentru evenimentele planificate.<\/p>\n<p>Controlerele Cisco Catalyst din seria 9800 implementeaz\u0103 o protec\u021bie \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u0103, asigur\u00e2nd o verificare profund\u0103 a pachetelor pentru recunoa\u0219terea \u0219i gestionarea aplica\u021biilor, transparen\u021b\u0103 total\u0103 a fluxurilor de date \u0219i identificarea amenin\u021b\u0103rilor ascunse \u00een traficul criptat, precum \u0219i utilizarea de mecanisme avansate de autentificare \u0219i protec\u021bie a dispozitivelor client.<\/p>\n<p>Pentru automatizarea opera\u021biunilor \u0219i analitic\u0103, solu\u021biile Cisco Catalyst din seria 9800 dispun de capacit\u0103\u021bi extinse, utiliz\u00e2nd modele standard populare: YANG, NETCONF, RESTCONF, interfe\u021be API tradi\u021bionale \u0219i scripturi Python \u00eencorporate.<\/p>\n<p>Astfel, compania Cisco \u00ee\u0219i confirm\u0103 din nou statutul de lider mondial \u00een solu\u021bii de re\u021bea, care \u021bine pasul cu timpul \u0219i ia \u00een considerare toate provoc\u0103rile afacerilor moderne.<\/p>\n<p>Informa\u021bii suplimentare despre gama de comutatoare Catalyst pot fi g\u0103site pe <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/ru_ru\/solutions\/enterprise-networks\/catalyst-9000.html?dtid=oblgotr000654\"> site<\/a><\/noindex> Cisco.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cisco\/blog\/512220\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800. \u0414\u043b\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u044b\u043b \u0441\u043e\u0431\u0440\u0430\u043d \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0439 \u0441\u0442\u0435\u043d\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Wi-Fi 6 \u043e\u0442 Cisco, \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u0445: \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c; \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c; \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0438\u0436\u0435. \u0421 2019 \u0433\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89702,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0415\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u2013 \u043d\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043a\u0430\u043a \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-25T11:42:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-25T11:42:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Exist\u0103 un controler \u2013 nu sunt probleme: cum s\u0103 men\u021bii cu u\u0219urin\u021b\u0103 func\u021bionarea re\u021belei wireless | ProHoster","description":"\u00cen 2019, compania de consultan\u021b\u0103 Miercom a realizat o evaluare tehnologic\u0103 independent\u0103 a controlerelor Wi-Fi 6 Cisco Catalyst din seria 9800.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0415\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u2013 \u043d\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043a\u0430\u043a \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-25T11:42:16+00:00","article:modified_time":"2020-07-25T11:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89699","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:06:29","updated":"2022-09-30 17:31:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/89699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=89699"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/89699\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/89702"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=89699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=89699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=89699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}