{"id":90038,"date":"2020-07-28T13:42:35","date_gmt":"2020-07-28T11:42:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti"},"modified":"2020-07-28T13:42:35","modified_gmt":"2020-07-28T11:42:35","slug":"pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti","title":{"rendered":"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/91bb96ba827ebe68538175c8762b5f5e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<strong><em>Ce trebuie s\u0103 iei \u00een considerare atunci c\u00e2nd alegi un router VPN pentru o re\u021bea distribuit\u0103? \u0218i ce func\u021bii ar trebui s\u0103 aib\u0103? Asta este ceea ce discut\u0103m \u00een recenzia noastr\u0103 despre ZyWALL VPN1000.<\/em><\/strong><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2 id=\"vvedenie\">Introducere<\/h2>\n<p><\/p>\n<p>P\u00e2n\u0103 acum, majoritatea publica\u021biilor noastre s-au concentrat pe dispozitivele VPN destinate accesului la re\u021bea din loca\u021bii periferice. De exemplu, pentru conectarea diverselor filiale cu sediul central, accesul la re\u021bea al unor companii mici autonome sau chiar al unor gospod\u0103rii private. A venit momentul s\u0103 discut\u0103m despre un nod central pentru o re\u021bea distribuit\u0103.<\/p>\n<p><\/p>\n<p>Este evident c\u0103 nu po\u021bi construi o re\u021bea modern\u0103 pentru o mare companie bazat\u0103 doar pe dispozitive de clas\u0103 economic\u0103. \u0218i organizarea unui serviciu cloud de furnizare de servicii pentru consumatori nu este posibil\u0103 \u00een acest mod. Undeva trebuie s\u0103 existe echipamente capabile s\u0103 deservesc\u0103 un num\u0103r mare de clien\u021bi simultan. De data aceasta, vom discuta despre un astfel de dispozitiv - Zyxel VPN1000.<\/p>\n<p><\/p>\n<p>At\u00e2t pentru participan\u021bii mari, c\u00e2t \u0219i pentru cei mici \u00een schimbul de re\u021bea, putem distinge criterii prin care se evalueaz\u0103 adecvarea unui anumit dispozitiv pentru a rezolva o problem\u0103.<\/p>\n<p><\/p>\n<p>Iat\u0103 c\u00e2teva dintre acestea:<\/p>\n<p><\/p>\n<ul>\n<li>capacit\u0103\u021bile tehnice \u0219i func\u021bionale;<\/li>\n<li>managementul;<\/li>\n<li>securitatea;<\/li>\n<li>rezisten\u021ba la e\u0219ec.<\/li>\n<\/ul>\n<p><\/p>\n<p>Este greu s\u0103 eviden\u021biezi ce este mai important \u0219i de ce poate fi renun\u021bat. Este nevoie de toate. Dac\u0103 un dispozitiv nu \u00eendepline\u0219te cerin\u021bele pe vreun criteriu, aceasta poate conduce la probleme mai t\u00e2rziu.<\/p>\n<p><\/p>\n<p>Cu toate acestea, anumite caracteristici ale dispozitivelor destinate s\u0103 asigure func\u021bionarea nodurilor centrale \u0219i echipamentelor care func\u021bioneaz\u0103 \u00een principal \u00een periferie pot varia semnificativ.<\/p>\n<p><\/p>\n<p>Pentru nodul central, puterea de calcul devine prioritar\u0103 \u2014 aceasta implic\u0103 un sistem de r\u0103cire for\u021bat\u0103 \u0219i, prin urmare, zgomot din ventilator. Pentru dispozitivele periferice, care sunt de obicei amplasate \u00een birouri \u0219i locuin\u021be, zgomotul este o problem\u0103 inacceptabil\u0103.<\/p>\n<p><\/p>\n<p>Un alt aspect interesant este distribu\u021bia porturilor. \u00cen cazul dispozitivelor periferice, este mai mult sau mai pu\u021bin clar cum vor fi utilizate \u0219i c\u00e2\u021bi clien\u021bi vor fi conecta\u021bi. De aceea, se poate stabili o divizare strict\u0103 a porturilor pe WAN, LAN, DMZ, se poate efectua o legare strict\u0103 la protocol etc. \u00cen nodul central, \u00eens\u0103, nu exist\u0103 aceea\u0219i certitudine. De exemplu, s-a ad\u0103ugat un nou segment de re\u021bea care necesit\u0103 conectare printr-o interfa\u021b\u0103 proprie \u2013 cum s\u0103 proced\u0103m? Aici este nevoie de o solu\u021bie mai universal\u0103 cu posibilitatea de configurare flexibil\u0103 a interfe\u021belor.<\/p>\n<p><\/p>\n<p>Un detaliu important este satura\u021bia dispozitivului cu diverse func\u021bii. Desigur, abordarea \u00een care o unitate de echipament \u00eendepline\u0219te bine o singur\u0103 sarcin\u0103 are avantajele ei. \u00cens\u0103 cea mai interesant\u0103 situa\u021bie apare atunci c\u00e2nd trebuie s\u0103 facem un pas \u00een st\u00e2nga sau \u00een dreapta. Desigur, se poate achizi\u021biona un alt dispozitiv \u021bint\u0103 pentru fiecare nou\u0103 sarcin\u0103. \u0218i a\u0219a, p\u00e2n\u0103 c\u00e2nd se termin\u0103 bugetul sau spa\u021biul \u00een rack.<\/p>\n<p><\/p>\n<p>\u00cen contrast, un set extins de func\u021bii permite folosirea unui singur dispozitiv pentru a rezolva mai multe probleme. De exemplu, ZyWALL VPN1000 suport\u0103 mai multe tipuri de conexiuni prin VPN, inclusiv SSL \u0219i IPsec VPN, precum \u0219i conexiuni la distan\u021b\u0103 pentru angaja\u021bi. Asta \u00eenseamn\u0103 c\u0103 un singur dispozitiv rezolv\u0103 at\u00e2t problemele conexiunilor \u00eentre site-uri, c\u00e2t \u0219i pe cele ale clien\u021bilor. Dar exist\u0103 un \u201edar\u201d. Pentru ca acest lucru s\u0103 func\u021bioneze, trebuie s\u0103 existe un rezervor de performan\u021b\u0103. De exemplu, \u00een cazul ZyWALL VPN1000, nucleul hardware IPsec VPN asigur\u0103 o performan\u021b\u0103 ridicat\u0103 a tunelului VPN, iar echilibrarea\/rezervele VPN cu algoritmii SHA\u20112 \u0219i IKEv2 garanteaz\u0103 o fiabilitate \u0219i o securitate ridicat\u0103 pentru afaceri.<\/p>\n<p><\/p>\n<p>Mai jos sunt enumerate c\u00e2teva func\u021bii utile care acoper\u0103 una sau mai multe dintre direc\u021biile descrise anterior.<\/p>\n<p><\/p>\n<p><strong>SD-WAN<\/strong> ofere o platform\u0103 pentru managementul cloud, beneficiind de avantajele managementului centralizat al comunic\u0103rii \u00eentre site-uri, cu posibilitatea de control \u0219i monitorizare de la distan\u021b\u0103. ZyWALL VPN1000 suport\u0103, de asemenea, modul de func\u021bionare adecvat acolo unde sunt necesare func\u021bii extinse de VPN.<\/p>\n<p><\/p>\n<p><strong>Suport pentru platformele cloud pentru servicii critice.<\/strong> ZyWALL VPN1000 este certificat pentru utilizare cu Microsoft Azure \u0219i AWS. Utilizarea dispozitivelor testate anterior este preferabil\u0103 pentru organiza\u021biile de orice nivel, mai ales dac\u0103 infrastructura IT utilizeaz\u0103 o combina\u021bie de re\u021bea local\u0103 \u0219i cloud.<\/p>\n<p><\/p>\n<p><strong>Filtrarea con\u021binutului<\/strong> \u00eent\u0103re\u0219te securitatea prin blocarea accesului la site-uri web mali\u021bioase sau nedorite. Previne desc\u0103rcarea de malware de pe site-uri nesigure sau compromise. \u00cen cazul ZyWALL VPN1000, licen\u021ba anual\u0103 pentru acest serviciu este deja inclus\u0103 \u00een pachet.<\/p>\n<p><\/p>\n<p><strong>Politici geoeconomice<\/strong> <strong>(Geo IP)<\/strong> permit monitorizarea traficului \u0219i analiza loca\u021biei adreselor IP, refuz\u00e2nd accesul din regiuni inutile sau poten\u021bial periculoase. Licen\u021ba anual\u0103 pentru acest serviciu este, de asemenea, inclus\u0103 \u00een pachet la achizi\u021bionarea dispozitivului.<\/p>\n<p><\/p>\n<p><strong>Gestionarea re\u021belei wireless<\/strong> \u00een ZyWALL VPN1000 include un controler de re\u021bea wireless, care permite gestionarea a p\u00e2n\u0103 la 1032 de puncte de acces dintr-o interfa\u021b\u0103 centralizat\u0103. Companiile pot desf\u0103\u0219ura sau extinde re\u021beaua wireless gestionat\u0103 cu eforturi minime. Este demn de men\u021bionat c\u0103 cifra 1032 este \u00eentr-adev\u0103r mare. Pe seama c\u0103 la un punct de acces se pot conecta p\u00e2n\u0103 la 10 utilizatori, ob\u021binem o cifr\u0103 destul de impresionant\u0103.<\/p>\n<p><\/p>\n<p><strong>Balansarea \u0219i rezervarea<\/strong>. Seria VPN suport\u0103 balansarea \u00eenc\u0103rc\u0103turii \u0219i rezervarea pe mai multe interfe\u021be externe. Astfel, se pot conecta mai multe canale de la mai mul\u021bi furnizori, protej\u00e2ndu-se astfel de problemele de conectivitate.<\/p>\n<p><\/p>\n<p><strong>Capacitatea de rezervare a dispozitivului (Device HA)<\/strong> pentru conexiune ne\u00eentrerupt\u0103, chiar \u0219i atunci c\u00e2nd unul dintre dispozitive iese din func\u021biune. F\u0103r\u0103 aceasta, este greu de realizat o operare 24\/7 cu un timp de nefunc\u021bionare minim.<\/p>\n<p><\/p>\n<p>Zyxel Device HA Pro func\u021bioneaz\u0103 \u00een modul <em>activ\/passiv<\/em>, pentru care nu este necesar\u0103 o procedur\u0103 complex\u0103 de configurare. Acest lucru permite sc\u0103derea pragului de intrare \u0219i utilizarea imediat\u0103 a rezerv\u0103rii. Spre deosebire de <em>activ\/activ<\/em>, c\u00e2nd administratorul de sistem trebuie s\u0103 urmeze o preg\u0103tire suplimentar\u0103, s\u0103 fie capabil s\u0103 configureze rutarea dinamic\u0103, s\u0103 \u00een\u021beleag\u0103 ce sunt pachetele asimetrice etc. \u2013 configurarea modului <em>activ\/passiv<\/em> func\u021bioneaz\u0103 considerabil mai simplu \u0219i necesit\u0103 mai pu\u021bin timp.<\/p>\n<p><\/p>\n<p>C\u00e2nd folosi\u021bi dispozitivul Zyxel HA Pro, dispozitivele schimb\u0103 semnale <em>heartbeat<\/em> printr-un port dedicat. Porturile dispozitivului activ \u0219i pasiv sunt <em>heartbeat<\/em> conectate prin cablu Ethernet. Dispozitivul pasiv sincronizeaz\u0103 complet informa\u021biile cu dispozitivul activ. \u00cen special, toate sesiunile, tunelurile \u0219i conturile de utilizatori sunt sincronizate \u00eentre dispozitive. \u00cen plus, dispozitivul pasiv p\u0103streaz\u0103 o copie de rezerv\u0103 a fi\u0219ierului de configurare \u00een cazul \u00een care dispozitivul activ e\u0219ueaz\u0103. Astfel, \u00een caz de defec\u021biune a dispozitivului principal, transferul se realizeaz\u0103 f\u0103r\u0103 \u00eentreruperi.<\/p>\n<p><\/p>\n<p>Este de remarcat c\u0103 \u00een sistemele active<em>\/active<\/em> \u00eenc\u0103 trebuie rezervate 20-25% din resursele sistemului pentru comutarea \u00een caz de e\u0219ecuri. \u00cen cazul \u00een <em>activ\/passiv<\/em> care un dispozitiv este complet \u00een rezerv\u0103 \u0219i este gata s\u0103 gestioneze imediat traficul de re\u021bea \u0219i s\u0103 men\u021bin\u0103 buna func\u021bionare a re\u021belei.<\/p>\n<p><\/p>\n<p>Pe scurt: \u201eFolosind dispozitivul Zyxel HA Pro \u0219i av\u00e2nd un canal de rezerv\u0103, afacerea este protejat\u0103 at\u00e2t \u00eempotriva pierderii conexiunii din cauza furnizorului, c\u00e2t \u0219i \u00eempotriva problemelor cauzate de defectarea routerului.<\/p>\n<p><\/p>\n<p><strong>Rezum\u00e2nd cele spuse anterior<\/strong><\/p>\n<p><\/p>\n<p>Pentru nodul central al re\u021belei distribuite, este mai bine s\u0103 folosi\u021bi un dispozitiv cu un anumit num\u0103r de porturi (interfe\u021be de conectare) disponibile. Este de dorit s\u0103 ave\u021bi interfe\u021be RJ45 pentru simplitate \u0219i costuri reduse, dar \u0219i SFP pentru a alege \u00eentre o conexiune pe fibr\u0103 optic\u0103 \u0219i un cablu de cupru.<\/p>\n<p><\/p>\n<p><strong>Acest dispozitiv ar trebui s\u0103 fie:<\/strong><\/p>\n<p><\/p>\n<ul>\n<li>performant, adaptat la fluctua\u021bii mari de sarcin\u0103;<\/li>\n<li>cu o interfa\u021b\u0103 de operare intuitiv\u0103;<\/li>\n<li>cu un set bogat, dar nu excesiv de func\u021bii \u00eencorporate, inclusiv \u00een ceea ce prive\u0219te securitatea;<\/li>\n<li>cu posibilitatea de a construi scheme de redundan\u021b\u0103 \u2014 duplicarea canalelor \u0219i a dispozitivelor;<\/li>\n<li>sus\u021bin\u00e2nd gestionarea, pentru a controla \u00eentreaga infrastructur\u0103 ramificat\u0103, form\u00e2nd un nod central \u0219i dispozitive periferice, dintr-un singur punct;<\/li>\n<li>ca o \u201ecirea\u0219\u0103 de pe tort\u201d \u2014 suport pentru tendin\u021bele moderne, cum ar fi integrarea cu resursele cloud, \u0219i a\u0219a mai departe.<\/li>\n<\/ul>\n<p><\/p>\n<h2 id=\"zywall-vpn1000-v-roli-centralnogo-uzla-seti\">ZyWALL VPN1000 ca nod central al re\u021belei<\/h2>\n<p><\/p>\n<p>La prima vedere, se observ\u0103 c\u0103 Zyxel nu a economisit pe porturi \u00een ZyWALL VPN1000.<\/p>\n<p><\/p>\n<p>Avem:<\/p>\n<p><\/p>\n<ul>\n<li>\n<p>12 porturi RJ\u201145 (GBE) configurabile;<\/p>\n<p>\n<\/li>\n<li>\n<p>2 porturi SFP (GBE) configurabile;<\/p>\n<p>\n<\/li>\n<li>\n<p>2 porturi USB 3.0 cu suport pentru modemuri 3G\/4G.<\/p>\n<p>\n<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/76f183e2d2e43f7b386e487431ec37de.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 1. Aspectul general al ZyWALL VPN1000.<\/em><\/p>\n<p><\/p>\n<p>Este important de men\u021bionat de la \u00eenceput c\u0103 dispozitivul nu este pentru birouri de acas\u0103, \u00een primul r\u00e2nd din cauza ventilatoarelor puternice. Aici sunt patru la num\u0103r.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/431c6abc77f3ab578754a5feb82a3463.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 2. Panoul din spate al ZyWALL VPN1000.<\/em><\/p>\n<p><\/p>\n<p>S\u0103 vedem cum arat\u0103 interfa\u021ba.<\/p>\n<p><\/p>\n<p>Trebuie s\u0103 ne atrag\u0103 aten\u021bia un aspect important. Exist\u0103 foarte multe func\u021bii, iar o descriere detaliat\u0103 \u00een cadrul unui singur articol nu va fi posibil\u0103. Dar un lucru bun la produsele Zyxel este c\u0103 exist\u0103 o documenta\u021bie foarte detaliat\u0103, mai ales un manual de utilizare (administrare). A\u0219adar, pentru a avea o idee despre bog\u0103\u021bia func\u021biilor, s\u0103 trecem rapid prin tab-uri.<\/p>\n<p><\/p>\n<p>Din default, portul 1 \u0219i portul 2 sunt dedicate WAN. \u00cencep\u00e2nd cu portul al treilea, sunt interfe\u021bele pentru re\u021beaua local\u0103.<\/p>\n<p><\/p>\n<p>Portul 3 cu IP-ul implicit 192.168.1.1 este perfect pentru conectare.<\/p>\n<p><\/p>\n<p>Conect\u0103m cablul patch, acces\u0103m adresa <em><noindex><a rel=\"nofollow\" href=\"https:\/\/192.168.1.1\">https:\/\/192.168.1.1<\/a><\/noindex><\/em> \u0219i putem observa fereastra de \u00eenregistrare a utilizatorului \u00een interfa\u021ba web.<\/p>\n<p><\/p>\n<p><em><strong>Not\u0103<\/strong>. Pentru management, se poate utiliza sistemul cloud de management SD-WAN.<\/em><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/e178bbbe44045fb263673bfc61a2be56.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 3. Fereastra de introducere a numelui de utilizator \u0219i a parolei<\/em><\/p>\n<p><\/p>\n<p>Parcurgem procedura de introducere a numelui de utilizator \u0219i a parolei \u0219i ob\u021binem pe ecran fereastra Dashboard. A\u0219a cum este de a\u0219teptat pentru un Dashboard\u2014maximum de informa\u021bii utile pe fiecare inch de spa\u021biu pe ecran.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/ce5fa994bad48a9ad7549796670cf8dc.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 4. ZyWALL VPN1000 \u2014 Dashboard.<\/em><\/p>\n<p><\/p>\n<h3 id=\"vkladka-bystraya-nastroyka-wizards\">Tab-ul \u201eConfigurare Rapid\u0103\u201d (Wizards)<\/h3>\n<p><\/p>\n<p>Exist\u0103 dou\u0103 asisten\u021be \u00een interfa\u021b\u0103: pentru configurarea WAN \u0219i pentru configurarea VPN. De fapt, asisten\u021bii sunt o idee bun\u0103, permi\u021b\u00e2nd realizarea set\u0103rilor standard, chiar \u0219i f\u0103r\u0103 experien\u021b\u0103 \u00een utilizarea dispozitivului. Iar pentru cei care doresc mai mult, a\u0219a cum s-a men\u021bionat mai sus\u2014exist\u0103 documenta\u021bie detaliat\u0103.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/013f0bf14c52c7aa40e2bf500efaa76c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 5. Tab-ul \u201eConfigurare Rapid\u0103\u201d.<\/em><\/p>\n<p><\/p>\n<h3 id=\"vkladka-monitoring\">Tab-ul Monitorizare<\/h3>\n<p><\/p>\n<p>Se pare c\u0103 inginerii de la Zyxel au decis s\u0103 ac\u021bioneze dup\u0103 principiu: monitoriz\u0103m tot ce se poate. Desigur, pentru un dispozitiv care func\u021bioneaz\u0103 ca nod central, controlul total nu va strica.<\/p>\n<p><\/p>\n<p>Chiar \u0219i prin desf\u0103\u0219urarea tuturor punctelor de pe panoul lateral, devine evident bog\u0103\u021bia op\u021biunilor.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/a4d92421d81a8b9c5d192bc2aaecc4e5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 6. Tab-ul Monitorizare cu subpuncte desf\u0103\u0219urate.<\/em><\/p>\n<p><\/p>\n<h3 id=\"vkladka-konfiguraciya\">Tab-ul Configurare<\/h3>\n<p><\/p>\n<p>Aici bog\u0103\u021bia func\u021biilor este \u0219i mai evident\u0103.<\/p>\n<p><\/p>\n<p>De exemplu, gestionarea porturilor dispozitivului este \u00eengrijit realizat\u0103.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/4cd1b1cadee684afa9a21df026883ebe.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 7. Tab-ul Configurare cu subpuncte desf\u0103\u0219urate.<\/em><\/p>\n<p><\/p>\n<h3 id=\"vkladka-obsluzhivanie\">Tab-ul \u00centre\u021binere<\/h3>\n<p><\/p>\n<p>Con\u021bine subsec\u021biuni pentru actualizarea firmware-ului, diagnosticare, vizualizarea regulilor de rutare \u0219i \u00eencheierea sesiunii.<\/p>\n<p><\/p>\n<p>Aceste func\u021bii sunt de natur\u0103 auxiliar\u0103 \u0219i sunt prezente, \u00eentr-o form\u0103 sau alta, \u00een aproape fiecare dispozitiv de re\u021bea.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/971da91f73ea03ac16a32ebc7d5939e2.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 8. Tab-ul Mentenan\u021b\u0103 cu subpunctele desf\u0103\u0219urate.<\/em><\/p>\n<p><\/p>\n<h3 id=\"sravnitelnye-harakteristiki\">Caracteristici comparative<\/h3>\n<p><\/p>\n<p>Revizuirea noastr\u0103 ar fi incomplet\u0103 f\u0103r\u0103 o compara\u021bie cu alte alternative.<\/p>\n<p><\/p>\n<p>Mai jos este prezentat\u0103 o tabel\u0103 cu alternativele cele mai apropiate de ZyWALL VPN1000 \u0219i lista de func\u021bii pentru comparare.<\/p>\n<p><\/p>\n<p><em>Tabelul 1. Compara\u021bia ZyWALL VPN1000 cu alternativele.<\/em><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"P\u0103ianjen pentru re\u021bea sau nodul central al unei re\u021bele distribuite\" src=\"\/wp-content\/uploads\/2020\/07\/44c95d1d57655d1aecce649d83f3cbd8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong><em>Explica\u021bii pentru tabelul 1:<\/em><\/strong><\/p>\n<p><\/p>\n<p><em>*1: Necesit\u0103 licen\u021b\u0103<\/em><\/p>\n<p><\/p>\n<p><em>* 2: Low Touch Provision: administratorul trebuie mai \u00eent\u00e2i s\u0103 configureze dispozitivul local, \u00eenainte de ZTP.<\/em><\/p>\n<p><\/p>\n<p><em>* 3: bazat pe sesiune: DPS va fi aplicat doar la o sesiune nou\u0103; acesta nu va afecta sesiunea curent\u0103.<\/em><\/p>\n<p><\/p>\n<p>Dup\u0103 cum vedem, \u00een anumite aspecte, alternativele ajung din urm\u0103 eroul recenziei noastre, de exemplu, Fortinet FG\u2011100E are de asemenea optimizare WAN integrat\u0103, iar Meraki MX100 dispune de func\u021bia AutoVPN (site-to-site), dar \u00een general, din punct de vedere al setului global de func\u021bii, ZyWALL VPN1000 este cu adev\u0103rat lider.<\/p>\n<p><\/p>\n<h2 id=\"rekomendacii-pri-vybore-ustroystv-dlya-centralnogo-uzla-ne-tolko-zyxel\">Recomand\u0103ri pentru alegerea dispozitivelor pentru nodul central (nu doar Zyxel)<\/h2>\n<p><\/p>\n<p>Atunci c\u00e2nd alegem dispozitive pentru organizarea nodului central al unei re\u021bele ramificate cu numeroase filiale, ar trebui s\u0103 ne orient\u0103m pe baza unei serii de parametri: capabilit\u0103\u021bi tehnice, u\u0219urin\u021ba de gestionare, asigurarea securit\u0103\u021bii \u0219i a redundan\u021bei.<\/p>\n<p><\/p>\n<p>O gam\u0103 larg\u0103 de func\u021bii, un num\u0103r mare de porturi fizice cu op\u021biuni de configurare flexibil\u0103: WAN, LAN, DMZ \u0219i disponibilitatea altor func\u021bii pl\u0103cute, precum controlerul pentru punctele de acces, permit rezolvarea rapid\u0103 a multor sarcini.<\/p>\n<p><\/p>\n<p>De asemenea, un rol important \u00eel joac\u0103 existen\u021ba documenta\u021biei \u0219i a unei interfe\u021be de gestionare prietenoase.<\/p>\n<p><\/p>\n<p>Dispune\u021bi de lucruri aparent simple, nu este at\u00e2t de greu s\u0103 crea\u021bi infrastructuri de re\u021bea care s\u0103 cuprind\u0103 diverse site-uri \u0219i loca\u021bii, iar utilizarea norului SD-WAN permite realizarea acestora \u00eentr-un mod c\u00e2t mai flexibil \u0219i sigur.<\/p>\n<p><\/p>\n<h2 id=\"poleznye-ssylki\">Linkuri utile<\/h2>\n<p><\/p>\n<p><u><noindex><a rel=\"nofollow\" href=\"https:\/\/safe.cnews.ru\/articles\/2019-11-06_razbor_rynka_sdwan_kakie_sushchestvuyut\">Analiza pie\u021bei SD-WAN: ce solu\u021bii exist\u0103 \u0219i cui \u00eei sunt utile<\/a><\/noindex><\/u><\/p>\n<p><\/p>\n<p><u><noindex><a rel=\"nofollow\" href=\"https:\/\/www.osp.ru\/lan\/2017\/11\/13053186\">Zyxel Device HA Pro cre\u0219te rezilien\u021ba re\u021belei<\/a><\/noindex><\/u><\/p>\n<p><\/p>\n<p><u><noindex><a rel=\"nofollow\" href=\"https:\/\/support.zyxel.eu\/hc\/ru\/articles\/360001378533-%D0%98%D1%81%D0%BF%D0%BE%D0%BB%D1%8C%D0%B7%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5-%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D0%B8-GeoIP-%D0%B2-%D1%88%D0%BB%D1%8E%D0%B7%D0%B0%D1%85-%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D0%B8-%D1%81%D0%B5%D1%80%D0%B8%D0%B8-ATP-VPN-Zywall-USG\">Utilizarea func\u021biei GeoIP \u00een gateway-urile de securitate din seria ATP\/VPN\/Zywall\/USG<\/a><\/noindex><\/u><\/p>\n<p><\/p>\n<p><u><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/477492\/\">Ce va r\u0103m\u00e2ne \u00een server?<\/a><\/noindex><\/u><\/p>\n<p><\/p>\n<p><u><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/499456\/\">Dou\u0103 \u00een unu, sau migrarea controlerului punctului de acces \u00een gateway<\/a><\/noindex><\/u><\/p>\n<p><\/p>\n<p><u><noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/zyxelru\">Chatul Telegram Zyxel pentru speciali\u0219ti<\/a><\/noindex><\/u><\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/512600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 VPN \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438? \u0418 \u043a\u0430\u043a\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043e\u043d \u0434\u043e\u043b\u0436\u0435\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u044c? \u042d\u0442\u043e\u043c\u0443 \u0438 \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d \u043d\u0430\u0448 \u043e\u0431\u0437\u043e\u0440 ZyWALL VPN1000 \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0414\u043e \u044d\u0442\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439 \u0431\u044b\u043b\u0430 \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u043c\u043b\u0430\u0434\u0448\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c VPN \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0441\u0435\u0442\u044c \u0441 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0438\u043b\u0438\u0430\u043b\u043e\u0432 \u0441\u043e \u0448\u0442\u0430\u0431-\u043a\u0432\u0430\u0440\u0442\u0438\u0440\u043e\u0439, \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0421\u0435\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":90039,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-90038","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0430\u0443\u043a \u0434\u043b\u044f \u043f\u0430\u0443\u0442\u0438\u043d\u044b \u0438\u043b\u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0437\u0435\u043b \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-28T11:42:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-28T11:42:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pute\u021bi ca o p\u00e2nz\u0103 pentru o re\u021bea distribuit\u0103 | ProHoster","description":"Ce trebuie s\u0103 ave\u021bi \u00een vedere.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0430\u0443\u043a \u0434\u043b\u044f \u043f\u0430\u0443\u0442\u0438\u043d\u044b \u0438\u043b\u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0437\u0435\u043b \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/pauk-dlya-pautiny-ili-czentralnyj-uzel-raspredelennoj-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-28T11:42:35+00:00","article:modified_time":"2020-07-28T11:42:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"90038","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:59:44","updated":"2022-09-27 23:08:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/90038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=90038"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/90038\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/90039"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=90038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=90038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=90038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}