{"id":92780,"date":"2020-08-30T19:42:10","date_gmt":"2020-08-30T17:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity"},"modified":"2020-08-30T19:42:10","modified_gmt":"2020-08-30T17:42:10","slug":"osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","title":{"rendered":"Caracteristici de securitate pentru re\u021bele wireless \u0219i cablate. Partea 2 \u2013 M\u0103suri indirecte de protec\u021bie.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Caracteristici de securitate pentru re\u021bele wireless \u0219i cablate. Partea 2 \u2013 M\u0103suri indirecte de protec\u021bie.\" src=\"\/wp-content\/uploads\/2020\/08\/98625bbefd1ce79a419ec724562d3969.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Continu\u0103m discu\u021bia despre metodele de \u00eembun\u0103t\u0103\u021bire a securit\u0103\u021bii re\u021belelor. \u00cen acest articol, vom vorbi despre m\u0103suri suplimentare de securitate \u0219i organizarea unor re\u021bele wireless mai sigure.<\/em><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p><\/p>\n<h2 id=\"predislovie-ko-vtoroy-chasti\">Prefa\u021b\u0103 la partea a doua<\/h2>\n<p><\/p>\n<p>\u00cen articolul anterior <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/516508\/\"><strong>\u201eParticularit\u0103\u021bile protec\u021biei re\u021belelor wireless \u0219i cablate. Partea 1 \u2013 M\u0103suri directe de protec\u021bie\u201d<\/strong><\/a><\/noindex> s-a discutat despre problemele de securitate ale re\u021belei WiFi \u0219i metodele directe de protec\u021bie \u00eempotriva accesului neautorizat. Au fost analizate m\u0103surile evidente pentru prevenirea intercept\u0103rii traficului: criptare, ascunderea re\u021belei \u0219i filtrarea dup\u0103 MAC, precum \u0219i metode speciale, cum ar fi combaterea AP-urilor r\u0103u inten\u021bionate. Totu\u0219i, pe l\u00e2ng\u0103 metodele directe de protec\u021bie, exist\u0103 \u0219i altele indirec\u021bionate. Acestea sunt tehnologii care nu doar c\u0103 ajut\u0103 la \u00eembun\u0103t\u0103\u021birea calit\u0103\u021bii conexiunii, dar contribuie \u0219i la \u00eembun\u0103t\u0103\u021birea securit\u0103\u021bii.<\/p>\n<p><\/p>\n<p>Dou\u0103 tr\u0103s\u0103turi principale ale re\u021belelor wireless: accesul la distan\u021b\u0103 f\u0103r\u0103 contact \u0219i spectrul radio ca mediu de transmisie \u00een mod difuz, unde orice receptor al semnalului poate asculta frecven\u021bele, iar orice emi\u021b\u0103tor poate umple re\u021beaua cu transmisii inutile \u0219i pur \u0219i simplu interferen\u021be radio. Aceasta, printre altele, afecteaz\u0103 negativ securitatea general\u0103 a re\u021belei wireless.<\/p>\n<p><\/p>\n<p>O securitate solid\u0103 nu este suficient\u0103. De asemenea, trebuie s\u0103 lucr\u0103m, adic\u0103 s\u0103 schimb\u0103m date. \u00cen aceast\u0103 privin\u021b\u0103, WiFi are multe alte nemul\u021bumiri:<\/p>\n<p><\/p>\n<ul>\n<li>g\u0103uri \u00een acoperire (\u201ezone moarte\u201d);<\/li>\n<li>influentele surselor externe \u0219i ale punctelor de acces vecine asupra unii altora.<\/li>\n<\/ul>\n<p><\/p>\n<p>Ca urmare, din cauza problemelor descrise mai sus, calitatea semnalului scade, conexiunea devine instabil\u0103, iar viteza de schimb de date scade.<\/p>\n<p><\/p>\n<p>Desigur, sus\u021bin\u0103torii re\u021belelor cablate vor men\u021biona cu pl\u0103cere c\u0103, \u00een cazul folosirii conexiunilor prin cablu \u0219i, cu at\u00e2t mai mult, cele prin fibr\u0103 optic\u0103, aceste probleme nu apar.<\/p>\n<p><\/p>\n<p>Se pune \u00eentrebarea: se poate rezolva cumva aceste probleme, f\u0103r\u0103 a recurge la m\u0103suri radicale, precum reproiectarea tuturor utilizatorilor nemul\u021bumi\u021bi la re\u021beaua cablat\u0103?<\/p>\n<p><\/p>\n<h2 id=\"gde-nachalo-vseh-problem\">De unde \u00eencep toate problemele?<\/h2>\n<p><\/p>\n<p>La \u00eenceputul dezvolt\u0103rii re\u021belelor WiFi office \u0219i altele, acestea erau adesea configurate printr-un algoritm simplu: se instala un singur punct de acces \u00een centrul perimetrului, cu scopul de a maximiza acoperirea. Dac\u0103 puterea semnalului era insuficient\u0103 pentru zonele \u00eendep\u0103rtate, se ad\u0103uga o anten\u0103 amplificatoare la punctul de acces. Foarte rar se ad\u0103uga un al doilea punct de acces, de exemplu, pentru biroul directorului. Asta a fost, cred, toate \u00eembun\u0103t\u0103\u021birile.<\/p>\n<p><\/p>\n<p>Approach had its reasons. \u00cen primul r\u00e2nd, la \u00eenceputul dezvolt\u0103rii re\u021belelor wireless, echipamentele pentru acestea erau scumpe. \u00cen al doilea r\u00e2nd, instalarea mai multor puncte de acces \u00eensemna a se confrunta cu \u00eentreb\u0103ri la care nu existau r\u0103spunsuri atunci. De exemplu, cum s\u0103 organiz\u0103m comutarea f\u0103r\u0103 \u00eentreruperi a clien\u021bilor \u00eentre puncte? Cum s\u0103 combatem interferen\u021ba? Cum s\u0103 simplific\u0103m \u0219i s\u0103 organiz\u0103m gestionarea punctelor, de exemplu, aplicarea simultan\u0103 a restric\u021biilor\/permiselor, monitorizarea \u0219i a\u0219a mai departe. A\u0219adar, era mult mai simplu s\u0103 aplici principiul: cu c\u00e2t mai pu\u021bine dispozitive, cu at\u00e2t mai bine.<\/p>\n<p><\/p>\n<p>\u00cen acela\u0219i timp, un punct de acces plasat pe tavan transmitea pe un grafic circular (sau, mai bine spus, oval).<\/p>\n<p><\/p>\n<p>Cu toate acestea, formele arhitecturale nu se integreaz\u0103 foarte bine \u00een graficele circulare ale propag\u0103rii semnalului. A\u0219a c\u0103, \u00een unele zone, semnalul aproape c\u0103 nu ajunge, iar alteori emisia dep\u0103\u0219e\u0219te perimetrul \u0219i devine accesibil\u0103 pentru al\u021bii.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Caracteristici de securitate pentru re\u021bele wireless \u0219i cablate. Partea 2 \u2013 M\u0103suri indirecte de protec\u021bie.\" src=\"\/wp-content\/uploads\/2020\/08\/0020ab189634ee1e0b5fdb8b783d60da.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Figura 1. Exemplu de acoperire utiliz\u00e2nd un singur punct \u00een birou.<\/em><\/p>\n<p><\/p>\n<p><em><strong>Not\u0103<\/strong>. Este vorba despre o aproximare brut\u0103, care nu \u021bine cont de obstacolele \u00een calea propag\u0103rii, precum \u0219i de direc\u021bionarea semnalului. \u00cen practic\u0103, formele graficelor pentru diferite modele de puncte pot varia.<\/em><\/p>\n<p><\/p>\n<p>Situa\u021bia poate fi \u00eembun\u0103t\u0103\u021bit\u0103 prin utilizarea mai multor puncte de acces.<\/p>\n<p><\/p>\n<p>\u00cen primul r\u00e2nd, acest lucru va permite o distribu\u021bie mai eficient\u0103 a dispozitivelor de transmitere pe \u00eentreaga suprafa\u021b\u0103 a camerei.<\/p>\n<p><\/p>\n<p>\u00cen al doilea r\u00e2nd, exist\u0103 posibilitatea de a reduce nivelul semnalului, \u00eempiedic\u00e2ndu-l s\u0103 dep\u0103\u0219easc\u0103 perimetrul biroului sau al altui obiect. \u00cen acest caz, pentru a contabiliza traficul re\u021belei wireless, trebuie s\u0103 te aproprii aproape de perimetru sau chiar s\u0103 p\u0103trunzi \u00een limitele acestuia. Aproape c\u0103 la fel ac\u021bioneaz\u0103 un atacator pentru a se infiltra \u00een re\u021beaua intern\u0103 prin cablu.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Caracteristici de securitate pentru re\u021bele wireless \u0219i cablate. Partea 2 \u2013 M\u0103suri indirecte de protec\u021bie.\" src=\"\/wp-content\/uploads\/2020\/08\/f4a2b2d75790a459fe2e0de477e4fa05.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Figura 2. Cre\u0219terea num\u0103rului de puncte de acces permite o mai bun\u0103 distribuire a acoperirii.<\/em><\/p>\n<p><\/p>\n<p>Haide\u021bi s\u0103 revizuim din nou ambele figuri. \u00cen prima se observ\u0103 clar una dintre principalele vulnerabilit\u0103\u021bi ale re\u021belelor wireless \u2014 semnalul poate fi captat de la o distan\u021b\u0103 considerabil\u0103.<\/p>\n<p><\/p>\n<p>\u00cen a doua figur\u0103, situa\u021bia nu este at\u00e2t de grav\u0103. Cu c\u00e2t sunt mai multe puncte de acces, cu at\u00e2t zona de acoperire este mai eficient\u0103 \u0219i, \u00een acela\u0219i timp, puterea semnalului nu dep\u0103\u0219e\u0219te aproape deloc perimetrul, \u00een termeni simpli, limitele biroului, cl\u0103dirii sau altor obiecte posibile.<\/p>\n<p><\/p>\n<p>Atacatorul va trebui s\u0103 se strecoare c\u00e2t mai aproape, astfel \u00eenc\u00e2t s\u0103 poat\u0103 intercepta un semnal relativ slab \u201ede la strad\u0103\u201d sau \u201edin coridor\u201d \u0219i a\u0219a mai departe. Pentru aceasta, trebuie s\u0103 se apropie de cl\u0103direa biroului, de exemplu, s\u0103 se pozi\u021bioneze sub feronerie. Sau s\u0103 \u00eencerce s\u0103 p\u0103trund\u0103 \u00een cl\u0103direa biroului. \u00cen orice caz, acest lucru cre\u0219te riscul de a fi \u201e\u021bi\u021ba\u201d pe camerele de supraveghere, de a fi observat de securitate. De asemenea, se reduce semnificativ intervalul de timp pentru atac. Acest lucru este deja greu de numit \u201econdi\u021bii ideale pentru hacking\u201d.<\/p>\n<p><\/p>\n<p>Desigur, r\u0103m\u00e2ne o alt\u0103 \u201ep\u0103cat originar\u201d: re\u021belele wireless transmit \u00een banda disponibil\u0103, care poate fi interceptat\u0103 de to\u021bi clien\u021bii. De fapt, re\u021beaua WiFi poate fi comparat\u0103 cu un Ethernet-HUB, unde semnalul este transmis simultan pe toate porturile. Pentru a evita acest lucru, ideal ar fi ca fiecare pereche de dispozitive s\u0103 comunice pe canalul s\u0103u de frecven\u021b\u0103, \u00een care nimeni altcineva s\u0103 nu interfereze.<\/p>\n<p><\/p>\n<p>Iat\u0103 pe scurt principalele probleme. S\u0103 analiz\u0103m c\u0103ile de rezolvare a acestora.<\/p>\n<p><\/p>\n<h2 id=\"sredstva-zaschity-pryamye-i-kosvennye\">M\u0103suri de protec\u021bie: directe \u0219i indirecte<\/h2>\n<p><\/p>\n<p>A\u0219a cum s-a men\u021bionat \u00een precedentul articol, nu se poate ob\u021bine o protec\u021bie ideal\u0103 \u00een niciun caz. Dar se poate face c\u00e2t mai dificil\u0103 realizarea unui atac, f\u0103c\u00e2nd rezultatul nerentabil \u00een raport cu eforturile depuse.<\/p>\n<p><\/p>\n<p>\u00cenc\u0103rcat m\u0103surile de protec\u021bie pot fi \u00eemp\u0103r\u021bite \u00een dou\u0103 grupuri principale:<\/p>\n<p><\/p>\n<ul>\n<li>tehnologii de protec\u021bie direct\u0103 a traficului, cum ar fi criptarea sau filtrarea pe baza MAC;<\/li>\n<li>tehnologii destinate ini\u021bial altor scopuri, cum ar fi cre\u0219terea vitezei, dar care, \u00een acela\u0219i timp, complic\u0103 indirect via\u021ba infractorului.<\/li>\n<\/ul>\n<p><\/p>\n<p>Despre primul grup s-a vorbit \u00een prima parte. Dar \u00een arsenalul nostru mai exist\u0103 \u0219i m\u0103suri suplimentare indirecte. A\u0219a cum s-a men\u021bionat anterior, cre\u0219terea num\u0103rului de puncte de acces reduce nivelul semnalului \u0219i uniformizeaz\u0103 zona de acoperire, ceea ce \u00eengreuneaz\u0103 via\u021ba infractorilor.<\/p>\n<p><\/p>\n<p>Un alt aspect este c\u0103 cre\u0219terea vitezei de transfer al datelor faciliteaz\u0103 aplicarea unor m\u0103suri suplimentare de securitate. De exemplu, se poate instala un client VPN pe fiecare laptop pentru a transmite date chiar \u0219i \u00een interiorul re\u021belei locale prin canale criptate. Aceasta va necesita anumite resurse, inclusiv hardware, dar nivelul de protec\u021bie cre\u0219te semnificativ.<\/p>\n<p><\/p>\n<p>Mai jos prezent\u0103m descrierea tehnologiilor care permit \u00eembun\u0103t\u0103\u021birea func\u021bion\u0103rii re\u021belei \u0219i cresc indirect gradul de protec\u021bie.<\/p>\n<p><\/p>\n<h2 id=\"kosvennye-sredstva-uluchsheniya-zaschity--chto-mozhet-pomoch\">M\u0103suri indirecte de \u00eembun\u0103t\u0103\u021bire a protec\u021biei \u2014 ce poate ajuta?<\/h2>\n<p><\/p>\n<h3 id=\"client-steering\">Client Steering<\/h3>\n<p><\/p>\n<p>Func\u021bia Client Steering sugereaz\u0103 dispozitivelor client s\u0103 foloseasc\u0103 mai \u00eent\u00e2i banda de 5GHz. Dac\u0103 aceast\u0103 op\u021biune nu este disponibil\u0103, clientul va putea totu\u0219i utiliza 2.4GHz. Pentru re\u021belele \u00eenvechite cu un num\u0103r mic de puncte de acces, majoritatea muncii se desf\u0103\u0219oar\u0103 \u00een banda de 2.4GHz. \u00cen cazul frecven\u021bei de 5GHz, o schem\u0103 cu un singur punct de acces va fi inacceptabil\u0103 \u00een multe cazuri. Acest lucru se datoreaz\u0103 faptului c\u0103 semnalul cu o frecven\u021b\u0103 mai mare trece mai greu prin pere\u021bi \u0219i se ocole\u0219te obstacolele. Recomandarea general\u0103: pentru a asigura o conexiune garantat\u0103 \u00een banda de 5GHz \u2014 este preferabil s\u0103 se lucreze \u00een linie dreapt\u0103 de la punctul de acces.<\/p>\n<p><\/p>\n<p>\u00cen standardele moderne 802.11ac \u0219i 802.11ax, datorit\u0103 num\u0103rului mai mare de canale, pot fi instalate mai multe puncte de acces la o distan\u021b\u0103 mai mic\u0103, ceea ce permite reducerea puterii f\u0103r\u0103 a pierde, ba chiar c\u00e2\u0219tig\u00e2nd \u00een ceea ce prive\u0219te viteza de transfer al datelor. Ca rezultat, utilizarea benzii de 5GHz \u00eengreuneaz\u0103 via\u021ba infractorilor, dar \u00eembun\u0103t\u0103\u021be\u0219te calitatea conexiunii pentru clien\u021bii afla\u021bi \u00een zona de accesibilitate.<\/p>\n<p><\/p>\n<p>Aceast\u0103 func\u021bie este prezentat\u0103:<\/p>\n<p><\/p>\n<ul>\n<li>la punctele de acces Nebula \u0219i NebulaFlex;<\/li>\n<li>la firewall-uri cu func\u021bia de controler.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"auto-healing\">Auto Healing<\/h3>\n<p><\/p>\n<p>A\u0219a cum s-a men\u021bionat anterior, contururile perimetrului \u00eenc\u0103perii se integreaz\u0103 prost \u00een diagramele rotunde ale punctelor de acces.<\/p>\n<p><\/p>\n<p>Pentru a rezolva aceast\u0103 problem\u0103, \u00een primul r\u00e2nd, trebuie s\u0103 utiliz\u0103m un num\u0103r optim de puncte de acces, iar \u00een al doilea r\u00e2nd, s\u0103 reducem influen\u021ba reciproc\u0103. Dar dac\u0103 pur \u0219i simplu lu\u0103m \u0219i reducem manual puterea transmi\u021b\u0103torilor, o astfel de interven\u021bie direct\u0103 poate duce la o degradare a semnalului. Acest lucru va fi cu at\u00e2t mai perceptibil atunci c\u00e2nd una sau mai multe puncte de acces ies din func\u021biune.<\/p>\n<p><\/p>\n<p>Auto Healing permite ajustarea rapid\u0103 a puterii f\u0103r\u0103 pierderi de fiabilitate \u0219i vitez\u0103 de transfer al datelor.<\/p>\n<p><\/p>\n<p>C\u00e2nd se folose\u0219te aceast\u0103 func\u021bie, controllerul verific\u0103 starea \u0219i func\u021bionalitatea punctelor de acces. Dac\u0103 unul dintre ele nu func\u021bioneaz\u0103, cele adiacente primesc indica\u021bii s\u0103 creasc\u0103 puterea semnalului pentru a acoperi \u00abzona alb\u0103\u00bb. Odat\u0103 ce punctul de acces func\u021bioneaz\u0103 din nou, punctele adiacente primesc indica\u021bii s\u0103 reduc\u0103 puterea semnalului pentru a diminua nivelul interferen\u021belor reciproce.<\/p>\n<p><\/p>\n<h3 id=\"besshovnyy-wifi-rouming\">Roaming WiFi f\u0103r\u0103 \u00eentreruperi<\/h3>\n<p><\/p>\n<p>La prima vedere, aceast\u0103 tehnologie nu poate fi considerat\u0103 o cre\u0219tere a nivelului de securitate, dimpotriv\u0103, deoarece faciliteaz\u0103 comutarea clientului (inclusiv a atacatorului) \u00eentre punctele de acces din aceea\u0219i re\u021bea. Dar dac\u0103 sunt utilizate dou\u0103 sau mai multe puncte de acces, trebuie asigurat\u0103 o func\u021bionare convenabil\u0103 f\u0103r\u0103 probleme suplimentare. \u00cen plus, dac\u0103 un punct de acces este suprasolicitat, acesta va avea dificult\u0103\u021bi \u00een \u00eendeplinirea func\u021biilor de protec\u021bie, cum ar fi criptarea, vor ap\u0103rea \u00eent\u00e2rzieri \u00een transmiterea datelor \u0219i alte inconveniente. \u00cen acest sens, roamingul f\u0103r\u0103 \u00eentreruperi este un mare ajutor pentru a distribui flexibil \u00eenc\u0103rc\u0103tura \u0219i a asigura func\u021bionarea ne\u00eentrerupt\u0103 \u00een modul protejat.<\/p>\n<p><\/p>\n<h3 id=\"nastroyka-porogovyh-znacheniy-urovnya-signala-dlya-podklyucheniya-i-otklyucheniya-besprovodnyh-klientov-signal-threshold-ili-signal-strength-range\">Setarea valorilor prag pentru nivelul semnalului de conectare \u0219i deconectare a clien\u021bilor wireless (Signal Threshold sau Signal Strength Range)<\/h3>\n<p><\/p>\n<p>C\u00e2nd se folose\u0219te un singur punct de acces, aceast\u0103 func\u021bie nu are, \u00een principiu, semnifica\u021bie. Dar \u00een cazul \u00een care func\u021bioneaz\u0103 mai multe puncte de acces, gestionate de un controller, se poate organiza o distribu\u021bie mobil\u0103 a clien\u021bilor prin diferite AP. Este important de men\u021bionat c\u0103 func\u021biile de control al punctelor de acces sunt disponibile \u00een multe serii de routere de la Zyxel: ATP, USG, USG FLEX, VPN, ZyWALL.<\/p>\n<p><\/p>\n<p>Dispozitivele men\u021bionate mai sus au o func\u021bie de deconectare a clien\u021bilor care sunt conecta\u021bi la un SSID cu semnal slab. \u201eSlab\u201d \u00eenseamn\u0103 c\u0103 semnalul este sub pragul stabilit pe controler. Dup\u0103 ce clientul a fost deconectat, va trimite o solicitare de \u00eencercare pentru a c\u0103uta un alt punct de acces.<\/p>\n<p><\/p>\n<p>De exemplu, dac\u0103 un client se conecteaz\u0103 la un punct de acces cu un semnal sub -65 dBm, iar pragul de deconectare al sta\u021biei este de -60 dBm, \u00een acest caz, punctul de acces va deconecta clientul cu un astfel de nivel de semnal. Acum clientul ini\u021biaz\u0103 procedeul de reconectare \u0219i se va conecta la un alt punct de acces cu un semnal mai mare sau egal cu -60 dBm (valoarea pragului semnalului sta\u021biei).<\/p>\n<p><\/p>\n<p>Aceasta joac\u0103 un rol important atunci c\u00e2nd se utilizeaz\u0103 mai multe puncte de acces. Astfel, se previne situa\u021bia \u00een care majoritatea clien\u021bilor se aglomereaz\u0103 pe un singur punct, \u00een timp ce celelalte puncte de acces r\u0103m\u00e2n neutilizate.<\/p>\n<p><\/p>\n<p>\u00cen plus, se poate limita conectarea clien\u021bilor cu semnal slab, care au o mare probabilitate de a fi \u00een afara perimetrului \u00eenc\u0103perii, de exemplu, \u00een spatele unui zid \u00een biroul vecin, ceea ce permite considerarea acestei func\u021bii ca un metod\u0103 indirect\u0103 de protec\u021bie.<\/p>\n<p><\/p>\n<h3 id=\"perehod-na-wifi-6-kak-odin-iz-putey-povysheniya-urovnya-bezopasnosti\">Trecerea la WiFi 6 ca una dintre modalit\u0103\u021bile de \u00eembun\u0103t\u0103\u021bire a nivelului de securitate<\/h3>\n<p><\/p>\n<p>Despre avantajele m\u0103surilor de protec\u021bie directe am discutat anterior \u00een articolul anterior <strong>\u201eParticularit\u0103\u021bile protec\u021biei re\u021belelor wireless \u0219i cablate. Partea 1 \u2013 M\u0103suri directe de protec\u021bie\u201d<\/strong>.<\/p>\n<p><\/p>\n<p>Re\u021belele WiFi 6 ofer\u0103 viteze de transfer de date mai mari. Pe de o parte, noua grup\u0103 de standarde permite cre\u0219terea vitezei, iar pe de alt\u0103 parte \u2014 plasarea \u0219i mai multor puncte de acces pe aceea\u0219i suprafa\u021b\u0103. Noua standard permite utilizarea unei puteri mai mici pentru a transmite la o vitez\u0103 mai mare.<\/p>\n<p><\/p>\n<p><strong>Cre\u0219terea vitezei de schimb de date<\/strong>.<\/p>\n<p><\/p>\n<p>Trecerea la WiFi 6 preconizeaz\u0103 o cre\u0219tere a vitezei de schimb de p\u00e2n\u0103 la 11 Gb\/s (tip de modula\u021bie 1024-QAM, canale de 160 MHz). \u00cen acest context, noile dispozitive care suport\u0103 WiFi 6 au o performan\u021b\u0103 mai bun\u0103. Una dintre principalele probleme \u00een implementarea unor m\u0103suri de securitate suplimentare, cum ar fi un canal VPN pentru fiecare utilizator, este sc\u0103derea vitezei. Cu WiFi 6, va fi mai u\u0219or s\u0103 se aplice sisteme suplimentare de protec\u021bie.<\/p>\n<p><\/p>\n<h3 id=\"bss-coloring\">BSS Coloring<\/h3>\n<p><\/p>\n<p>Anterior, am scris c\u0103 o acoperire mai uniform\u0103 reduce penetrarea semnalului WiFi \u00een perimetru. Dar, pe m\u0103sur\u0103 ce num\u0103rul punctelor de acces cre\u0219te, chiar \u0219i utilizarea Auto Healing poate fi insuficient\u0103, deoarece traficul \u201estr\u0103in\u201d de la un punct vecin va penetra totu\u0219i zona de recep\u021bie.<\/p>\n<p><\/p>\n<p>C\u00e2nd se utilizeaz\u0103 BSS Coloring, punctul de acces las\u0103 semne speciale (coloreaz\u0103) pachetele sale de date. Aceasta permite ignorarea influen\u021bei dispozitivelor transmi\u021b\u0103toare vecine (puncte de acces).<\/p>\n<p><\/p>\n<h3 id=\"uluchshennyy-mu-mimo\">MU-MIMO \u00eembun\u0103t\u0103\u021bit<\/h3>\n<p><\/p>\n<p>\u00cen 802.11ax exist\u0103, de asemenea, \u00eembun\u0103t\u0103\u021biri importante ale tehnologiei MU-MIMO (Multi-User \u2014 Multiple Input Multiple Output). MU-MIMO permite punctului de acces s\u0103 schimbe date cu mai multe dispozitive simultan. \u00cens\u0103, \u00een standardul anterior, aceast\u0103 tehnologie putea sus\u021bine doar grupuri de patru clien\u021bi pe aceea\u0219i frecven\u021b\u0103. Aceasta facilita transmiterea, dar nu recep\u021bia. WiFi 6 folose\u0219te MIMO multiplu 8\u00d78 pentru transmitere \u0219i recep\u021bie.<\/p>\n<p><\/p>\n<p><em><strong>Not\u0103.<\/strong> Standardul 802.11ax cre\u0219te dimensiunea grupurilor MU-MIMO \u00een fluxul de date de intrare, asigur\u00e2nd o performan\u021b\u0103 mai eficient\u0103 a re\u021belei WiFi. Canalul de ie\u0219ire MIMO multifunc\u021bional este o noutate \u00een 802.11ax.<\/em><\/p>\n<p><\/p>\n<h3 id=\"ofdma-orthogonal-frequency-division-multiple-access\">OFDMA (Acces multiplu prin diviziune de frecven\u021b\u0103 ortogonal\u0103)<\/h3>\n<p><\/p>\n<p>Aceast\u0103 nou\u0103 metod\u0103 de acces la canale \u0219i de management este dezvoltat\u0103 pe baza tehnologiilor care au fost deja testate \u00een tehnologia celular\u0103 LTE.<\/p>\n<p><\/p>\n<p>OFDMA permite trimiterea mai multor semnale pe aceea\u0219i linie sau canal simultan, aloc\u00e2nd un interval de timp pentru fiecare transmisie \u0219i aplic\u00e2nd divizarea pe frecven\u021b\u0103. Ca rezultat, nu doar c\u0103 viteza cre\u0219te datorit\u0103 unei mai bune utiliz\u0103ri a canalului, dar \u0219i securitatea se \u00eembun\u0103t\u0103\u021be\u0219te.<\/p>\n<p><\/p>\n<h2 id=\"rezyume\">Rezumat<\/h2>\n<p><\/p>\n<p>Re\u021belele WiFi devin tot mai sigure an de an. Utilizarea tehnologiilor moderne permite organizarea unui nivel acceptabil de protec\u021bie.<\/p>\n<p><\/p>\n<p>Metodele directe de protec\u021bie, cum ar fi criptarea traficului, s-au dovedit a fi destul de eficiente. S\u0103 nu uit\u0103m de m\u0103surile suplimentare: filtrarea MAC, ascunderea identificatorului re\u021belei, Detectarea AP Rogue (Containment AP Rogue).<\/p>\n<p><\/p>\n<p>Dar exist\u0103 \u0219i m\u0103suri indirecte care \u00eembun\u0103t\u0103\u021besc colaborarea dispozitivelor wireless \u0219i cresc viteza de schimb de date.<\/p>\n<p><\/p>\n<p>Utilizarea noilor tehnologii permite reducerea nivelului semnalului de la puncte, f\u0103c\u00e2nd acoperirea mai uniform\u0103, ceea ce influen\u021beaz\u0103 pozitiv starea \u00eentregii re\u021bele wireless, inclusiv siguran\u021ba acesteia.<\/p>\n<p><\/p>\n<p>Cuv\u00e2ntul bun sim\u021b sugereaz\u0103 c\u0103 pentru a spori securitatea, toate metodele sunt valide: at\u00e2t directe, c\u00e2t \u0219i indirecte. Aceast\u0103 combina\u021bie complic\u0103 c\u00e2t mai mult via\u021ba infractorilor.<\/p>\n<p><\/p>\n<h2 id=\"poleznye-ssylki\">Linkuri utile:<\/h2>\n<p><\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/zyxelru\">Chatul Telegram Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/ci_general_20191031_520516.shtml\">Forum despre echipamentele Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Multe video-uri utile pe canalul Zyxel (Youtube)<\/a><\/noindex><\/li>\n<li>Particularit\u0103\u021bile protec\u021biei re\u021belelor wireless \u0219i cablate. Partea 1 \u2014 M\u0103suri directe de protec\u021bie<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Wi-Fi sau cablu r\u0103sucit \u2014 care este mai bun?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Sincronizarea punctelor de acces Wi-Fi pentru lucru cooperativ<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Wi-Fi 6: are nevoie utilizatorul obi\u0219nuit de un nou standard de comunicare wireless \u0219i dac\u0103 da, de ce?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">WiFi 6 MU-MIMO \u0219i OFDMA: Cele dou\u0103 piloni ai succesului t\u0103u \u00een viitor<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Viitorul WiFi<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Utilizarea switch-urilor multigigabit ca o filosofie a compromisului<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Dou\u0103 \u00een unu, sau migrarea controlerului punctului de acces \u00een gateway<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">WiFi 6 este deja aici: ce ofer\u0103 pia\u021ba \u0219i de ce avem nevoie de aceast\u0103 tehnologie<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">\u00cembun\u0103t\u0103\u021birea func\u021bion\u0103rii Wi-Fi. Principii generale \u0219i lucruri utile<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">\u00cembun\u0103t\u0103\u021birea func\u021bion\u0103rii Wi-Fi. Partea 2. Caracteristici ale echipamentului<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">\u00cembun\u0103t\u0103\u021birea func\u021bion\u0103rii Wi-Fi. Partea 3. Pozi\u021bionarea punctelor de acces<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Sincronizarea punctelor de acces Wi-Fi pentru lucru cooperativ<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Cele cinci cen\u021bi ai mei: Wi-Fi ast\u0103zi \u0219i m\u00e2ine<\/a><\/noindex><\/li>\n<\/ol>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/516914\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u0435\u0440\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u043a\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u00ab\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u041f\u0440\u044f\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\u00bb \u0448\u043b\u0430 \u0440\u0435\u0447\u044c \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 WiFi \u0438 \u043f\u0440\u044f\u043c\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0411\u044b\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92781,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92780","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-30T17:42:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-30T17:42:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Particularit\u0103\u021bile protec\u021biei re\u021belelor wireless \u0219i cablate. Partea 2 \u2014 M\u0103suri indirecte de protec\u021bie | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-30T17:42:10+00:00","article:modified_time":"2020-08-30T17:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92780","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:01:24","updated":"2022-09-30 00:38:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=92780"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92780\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/92781"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=92780"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=92780"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=92780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}