{"id":36454,"date":"2019-10-31T22:11:44","date_gmt":"2019-10-31T19:11:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor\/"},"modified":"2019-10-31T22:11:44","modified_gmt":"2019-10-31T19:11:44","slug":"opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","title":{"rendered":"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead\u00a0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Roz\u0161\u00edrenie ve\u013ek\u00fdch miest a vznik aglomer\u00e1ci\u00ed je jedn\u00fdm z d\u00f4le\u017eit\u00fdch trendov soci\u00e1lneho rozvoja dnes. Iba Moskva sa v roku 2019 mus\u00ed roz\u0161\u00edri\u0165 o 4 mili\u00f3ny \u0161tvorcov\u00fdch metrov b\u00fdvania (a to nehovoriac o 15 obciach, ktor\u00e9 sa pripoja do roku 2020). Na celom tomto obrovskom \u00fazem\u00ed bud\u00fa musie\u0165 oper\u00e1tori pripojenia poskytova\u0165 pou\u017e\u00edvate\u013eom pr\u00edstup k internetu. Tieto m\u00f4\u017eu by\u0165 ako mestsk\u00e9 mikroobyvate\u013estv\u00e1 s hustou viacposchodovou v\u00fdstavbou, tak aj \u201ered\u0161ie\u201c rodinn\u00e9 dedinky. Pre tieto pr\u00edpady sa po\u017eiadavky na zariadenia mierne l\u00ed\u0161ia. Analyzovali sme ka\u017ed\u00fd z t\u00fdchto scen\u00e1rov a vytvorili univerz\u00e1lny model optick\u00e9ho prep\u00edna\u010da \u2014 T2600G-28SQ. V tomto pr\u00edspevku podrobne presk\u00famame funkcie zariadenia, ktor\u00e9 bud\u00fa zauj\u00edmav\u00e9 pre oper\u00e1torov pripojenia po celom Rusku.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/2f2d13a385278230dd0f608778b9f13d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Miesto v sieti<\/h2>\n<p>\nPrep\u00edna\u010d T2600G-28SQ je ur\u010den\u00fd ako na pr\u00e1cu na \u00farovni pr\u00edstupu v sieti, tak aj na agreg\u00e1ciu liniek od in\u00fdch prep\u00edna\u010dov \u00farovne pr\u00edstupu. Je to prep\u00edna\u010d druhej \u00farovne, ktor\u00fd vykon\u00e1va prep\u00ednanie a statick\u00fa routovanie. Ak m\u00e1 oper\u00e1tor vybudovan\u00fa agreg\u00e1ciu a pr\u00edstup (routovanie iba v jadre siete), T2600G-28SQ sa hod\u00ed na ktor\u00fako\u013evek \u00farove\u0148. Pri dynamicky routovanej agreg\u00e1cii je potrebn\u00e9 zoh\u013eadni\u0165 niektor\u00e9 obmedzenia pri pou\u017eit\u00ed.<\/p>\n<p>Model T2600G-28SQ je plnohodnotn\u00fd akt\u00edvny Ethernet prep\u00edna\u010d bez \u010fal\u0161\u00edch obmedzen\u00ed, ktor\u00e9 sa objavuj\u00fa pri pou\u017e\u00edvan\u00ed technol\u00f3gi\u00ed xPON alebo podobn\u00fdch. Napr\u00edklad, bez rizika n\u00e1hleho poklesu r\u00fdchlosti s narastaj\u00facim po\u010dtom pou\u017e\u00edvate\u013eov alebo zlou kompatibilitou medzi zariadeniami r\u00f4znych dod\u00e1vate\u013eov a firmv\u00e9rmi. K rozhraniam zariadenia sa m\u00f4\u017eu pripoji\u0165 ako koncov\u00ed pou\u017e\u00edvatelia, tak aj ni\u017e\u0161ie prep\u00edna\u010de s optick\u00fdmi uplinkmi, napr\u00edklad model T2600G-28TS. Na sch\u00e9me ni\u017e\u0161ie s\u00fa zn\u00e1zornen\u00e9 najbe\u017enej\u0161ie pr\u00edklady tak\u00fdchto pripojen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/549fa77db33abc70324ba18a52261b5d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPre pr\u00edstup k sieti koncov\u00e9ho pou\u017e\u00edvate\u013ea m\u00f4\u017ee by\u0165 vyu\u017eit\u00e1 optick\u00e1 vl\u00e1kna alebo kr\u00faten\u00e1 dvojica. Na strane odberate\u013ea m\u00f4\u017ee by\u0165 optick\u00e1 vl\u00e1kna terminovan\u00e1 bu\u010f pomocou mediakonvertora, napr\u00edklad TP-Link MC220L; alebo s pou\u017eit\u00edm optick\u00e9ho rozhrania v SOHO smerova\u010di.<\/p>\n<p>Na pripojenie bl\u00edzko umiestnen\u00e9ho klienta je mo\u017en\u00e9 vyu\u017ei\u0165 \u0161tyri RJ-45 porty, ktor\u00e9 pracuj\u00fa na r\u00fdchlostiach 10\/100\/1000 Mbit\/s. Ak by to z nejak\u00e9ho d\u00f4vodu nesta\u010dilo, oper\u00e1tor m\u00f4\u017ee \u201ekonvertova\u0165\u201c optick\u00e9 rozhrania prep\u00edna\u010da na meden\u00e9. Toto je mo\u017en\u00e9 uskuto\u010dni\u0165 prostredn\u00edctvom \u0161pecializovan\u00fdch \u201emeden\u00fdch\u201c SFP s RJ-45 konektorom. Av\u0161ak tak\u00e9to rie\u0161enie nemo\u017eno pova\u017eova\u0165 za typick\u00e9.<\/p>\n<h2>Nieko\u013eko pr\u00edkladov z praxe<\/h2>\n<p>\nPre \u00faplnos\u0165 obrazu uvedieme nieko\u013eko pr\u00edkladov vyu\u017eitia prep\u00edna\u010dov modelu T2600G-28SQ.<\/p>\n<p>Moskvarsk\u00fd poskytovate\u013e <noindex><a rel=\"nofollow\" href=\"https:\/\/www.divo.ru\/\">\u201eDIVO\u201c<\/a><\/noindex>, ktor\u00fd okrem internetu poskytuje aj slu\u017eby telef\u00f3nie a k\u00e1blovej TV, vyu\u017e\u00edva T2600G-28SQ na \u00farovni pr\u00edstupu pri budovan\u00ed siet\u00ed v s\u00fakromnom sektore (domy a radov\u00e9 domy). Z poh\u013eadu klienta sa pripojenie realizuje na smerova\u010de so SFP portom, ako aj na m\u00e9diov\u00e9 prevodn\u00edky. V s\u00fa\u010dasnosti sa u n\u00e1s s\u00e9riovo nevyr\u00e1baj\u00fa SOHO smerova\u010de so SFP portom, ale ur\u010dite nad t\u00fdm prem\u00fd\u0161\u013eame.<\/p>\n<p>Telekomunika\u010dn\u00fd oper\u00e1tor <noindex><a rel=\"nofollow\" href=\"https:\/\/mks-net.ru\/\">MKS<\/a><\/noindex> z Pavlovsk\u00e9ho Posadu vyu\u017e\u00edva prep\u00edna\u010de T2600G-28SQ ako \u201emal\u00fa agreg\u00e1ciu\u201c, pou\u017e\u00edvaj\u00fac na pr\u00edstupe prep\u00edna\u010de modelov T2600G-28TS a T2500G-10TS.<\/p>\n<p>Skupina spolo\u010dnost\u00ed <noindex><a rel=\"nofollow\" href=\"http:\/\/garantia.tv\/\">\u201eZ\u00e1ruka\u201c<\/a><\/noindex> poskytuje na juhov\u00fdchode Moskovskej oblasti (Kolomna, Luhovice, Zareisk, Strieborn\u00e9 ryby, Jazer\u00e1) pr\u00edstup k internetu, TV, telef\u00f3nii, syst\u00e9my videon\u00e1jdenia. Pribli\u017en\u00e1 topol\u00f3gia je tu rovnak\u00e1 ako u MKS: T2600G-28SQ na \u00farovni agreg\u00e1cie a T2600G-28TS a T2500G-10TS na \u00farovni pr\u00edstupu.<\/p>\n<p>Poskytovate\u013e <noindex><a rel=\"nofollow\" href=\"http:\/\/www.sktv.ru\/\">SKTV<\/a><\/noindex> z Krasnoznamenska poskytuje pr\u00edstup k internetu prostredn\u00edctvom siete s hlbok\u00fdm prenikan\u00edm optiky. Je tie\u017e zalo\u017een\u00e1 na T2600G-28SQ.<\/p>\n<p>V nasleduj\u00facich kapitol\u00e1ch stru\u010dne pop\u00ed\u0161eme niektor\u00e9 mo\u017enosti modelu T2600G-28SQ. Aby sme nepodd\u00favali materi\u00e1l, nieko\u013eko mo\u017enost\u00ed sme nechali stranou: QinQ (VLAN VPN), smerovanie, QoS a \u010fal\u0161ie. Mysl\u00edme, \u017ee sa k nim m\u00f4\u017eeme vr\u00e1ti\u0165 v jednej z nasleduj\u00facich spr\u00e1v.<\/p>\n<h2>Mo\u017enosti prep\u00edna\u010da<\/h2>\n<p><\/p>\n<h3>Z\u00e1lohovanie \u2013 STP<\/h3>\n<p>\nSTP \u2013 Spanning Tree Protocol. Protokol prepojovacieho (pokryvacieho) stromu je zn\u00e1my u\u017e ve\u013emi dlho, za \u010do m\u00f4\u017eeme po\u010fakova\u0165 v\u00e1\u017een\u00e9mu Rade Perlmanovi. V modern\u00fdch sie\u0165ach sa administr\u00e1tori sna\u017eia zo v\u0161etk\u00fdch s\u00edl vyhn\u00fa\u0165 pou\u017eitiu tohto protokolu. \u00c1no, STP m\u00e1 svoje nedostatky. A je ve\u013emi dobre, ak existuje alternat\u00edva. Av\u0161ak, ako to \u010dasto b\u00fdva, alternat\u00edva k tomuto protokolu bude silne z\u00e1visl\u00e1 od dod\u00e1vate\u013ea. Preto Spanning Tree Protocol zost\u00e1va dodnes takmer jedin\u00fdm rie\u0161en\u00edm, ktor\u00e9 podporuje takmer v\u0161etci v\u00fdrobcovia a je zn\u00e1me v\u0161etk\u00fdm sie\u0165ov\u00fdm administr\u00e1torom.<\/p>\n<p>Prep\u00edna\u010d TP-Link T2600G-28SQ podporuje tri verzie STP: klasick\u00fd STP (IEEE 802.1D), RSTP (802.1W) a MSTP (802.1S).<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d3b855c50499dfdd1c9298b785e7ed0e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ t\u00fdchto mo\u017enost\u00ed je pre v\u00e4\u010d\u0161inu mal\u00fdch internetov\u00fdch poskytovate\u013eov v Rusku \u00faplne vhodn\u00fd be\u017en\u00fd RSTP, ktor\u00fd m\u00e1 pred klasickou verziou jednu nepopierate\u013en\u00fa v\u00fdhodu \u2014 zna\u010dne krat\u0161\u00ed \u010das konvergencie.<\/p>\n<p>Najflexibilnej\u0161\u00edm protokolom v s\u00fa\u010dasnosti je MSTP, ktor\u00fd podporuje virtu\u00e1lne siete (VLAN) a umo\u017e\u0148uje viacero r\u00f4znych stromov, \u010do umo\u017e\u0148uje vyu\u017ei\u0165 v\u0161etky dostupn\u00e9 z\u00e1lo\u017en\u00e9 cesty. Administr\u00e1tor vytv\u00e1ra nieko\u013eko r\u00f4znych in\u0161tanci\u00ed stromu (a\u017e osem), z ktor\u00fdch ka\u017ed\u00e1 obsluhuje ur\u010dit\u00fa sadu virtu\u00e1lnych siet\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/4ad6b189e70e5e5b4e5f49e3466ddf5a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/0e62120fdf688cf5d97232689dc98793.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/34f36032e615a2e78ab6de666843c846.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ff0bab82970cf086bdca2b80c33b302d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b class=\"spoiler_title\">Nuansy MSTP<\/b>Za\u010diato\u010dn\u00edci administr\u00e1tori pri pou\u017e\u00edvan\u00ed MSTP musia by\u0165 ve\u013emi opatrn\u00ed. To s\u00favis\u00ed s t\u00fdm, \u017ee spr\u00e1vanie protokolu v r\u00e1mci regi\u00f3nu a medzi regi\u00f3nmi sa l\u00ed\u0161i. Preto pri konfigurovan\u00ed prep\u00edna\u010dov je potrebn\u00e9 dba\u0165 na to, aby zostali v r\u00e1mci jedn\u00e9ho regi\u00f3nu.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/eb3d5a63fca93ae335ac8334fedcfe58.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u010co vlastne je ten zn\u00e1my regi\u00f3n? Regi\u00f3n v terminol\u00f3gii MSTP je s\u00fabor navz\u00e1jom prepojen\u00fdch prep\u00edna\u010dov, ktor\u00e9 maj\u00fa zhodn\u00e9 nasleduj\u00face charakteristiky: n\u00e1zov regi\u00f3nu, \u010d\u00edslo rev\u00edzie a rozdelenie virtu\u00e1lnych siet\u00ed (VLAN) medzi in\u0161tanciami protokolu.<\/p>\n<p>Samozrejme, protokol Spanning Tree (ak\u00e1ko\u013evek verzia) umo\u017e\u0148uje nielen bojova\u0165 proti slu\u010dk\u00e1m, ktor\u00e9 vznikaj\u00fa pri pripojen\u00ed z\u00e1lo\u017en\u00fdch kan\u00e1lov, ale tie\u017e chr\u00e1ni\u0165 pred chybami kabelov\u00e9ho prep\u00ednania, ke\u010f in\u017einier \u00famyselne alebo ne\u00famyselne sp\u00e1ja nespr\u00e1vne porty a vytv\u00e1ra svojimi \u010dinmi slu\u010dku.<\/p>\n<p>Sk\u00fasenej\u0161\u00ed sie\u0165ov\u00ed administr\u00e1tori preferuj\u00fa vyu\u017e\u00edva\u0165 r\u00f4zne dodato\u010dn\u00e9 mo\u017enosti na ochranu protokolu STP pred \u00fatokmi alebo zlo\u017eit\u00fdmi hav\u00e1rkami. Model T2600G-28SQ pon\u00faka cel\u00fd rad tak\u00fdchto funkci\u00ed: Loop Protect a Root Protect, TC Guard, BPDU Protect a BPDU Filter.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/dc2b070ae735f29d593041cb2f8e9c1b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSpr\u00e1vne vyu\u017eitie vy\u0161\u0161ie uveden\u00fdch mo\u017enost\u00ed spolu s \u010fal\u0161\u00edmi podporovan\u00fdmi mechanizmami ochrany umo\u017en\u00ed stabilizova\u0165 miestnu sie\u0165 a spravi\u0165 ju predv\u00eddate\u013enej\u0161ou.<\/p>\n<h3>Z\u00e1lohovanie \u2013 LAG<\/h3>\n<p>\nLAG \u2013 Link Aggregation Group. Je to technol\u00f3gia, ktor\u00e1 umo\u017e\u0148uje spoji\u0165 nieko\u013eko fyzick\u00fdch kan\u00e1lov do jedn\u00e9ho logick\u00e9ho. V\u0161etky ostatn\u00e9 protokoly prestan\u00fa pou\u017e\u00edva\u0165 fyzick\u00e9 kan\u00e1ly, ktor\u00e9 s\u00fa s\u00fa\u010das\u0165ou LAG, osobitne a za\u010dn\u00fa \"vidie\u0165\" jeden logick\u00fd rozhranie. Pr\u00edkladom tak\u00e9ho protokolu je STP.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/c4d88dffb88b5828e1a78bf371657601.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVyv\u00e1\u017eenie u\u017e\u00edvate\u013esk\u00e9ho prev\u00e1dzkov\u00e9ho toku medzi fyzick\u00fdmi kan\u00e1lmi v r\u00e1mci logick\u00e9ho sa vykon\u00e1va na z\u00e1klade hashov\u00e9ho s\u00fa\u010dtu. Na jeho v\u00fdpo\u010det m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 MAC adresy odosielate\u013ea, pr\u00edjemcu, alebo ich p\u00e1r; rovnako ako IP adresy odosielate\u013ea, pr\u00edjemcu, alebo ich p\u00e1r. Inform\u00e1cie protokolov \u0161tvrtej \u00farovne (TCP\/UDP porty) sa neber\u00fa do \u00favahy.<\/p>\n<p>Prep\u00edna\u010d T2600G-28SQ podporuje statick\u00e9 a dynamick\u00e9 LAG.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/3bb9b553de91adaef9674497ed588757.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1f8150d3408c726752d272bb072d1e36.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa dohodnutie parametrov \u010dinnosti dynamickej skupiny sa pou\u017e\u00edva protokol LACP.<\/p>\n<h3>Bezpe\u010dnos\u0165 \u2013 pr\u00edstupov\u00e9 zoznamy (ACL)<\/h3>\n<p>\nN\u00e1\u0161 prep\u00edna\u010d T2600G-28SQ umo\u017e\u0148uje filtrova\u0165 u\u017e\u00edvate\u013esk\u00fd prev\u00e1dzkov\u00fd tok pomocou pr\u00edstupov\u00fdch zoznamov (ACL \u2013 Access Control List).<\/p>\n<p>Podporovan\u00e9 pr\u00edstupov\u00e9 zoznamy m\u00f4\u017eu by\u0165 viacer\u00fdch r\u00f4znych typov: MAC a IP (IPv4\/IPv6), kombinovan\u00e9, ako aj na vykon\u00e1vanie obsahov\u00e9ho filtrovania. Po\u010det podporovan\u00fdch pr\u00edstupov\u00fdch zoznamov ka\u017ed\u00e9ho typu z\u00e1vis\u00ed od aktu\u00e1lneho \u0161abl\u00f3nu SDM, ktor\u00fd sme op\u00edsali v inej sekcii.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/bb322755068083267fb194d564eaddfe.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOper\u00e1tor m\u00f4\u017ee vyu\u017ei\u0165 t\u00fato mo\u017enos\u0165 na blokovanie r\u00f4zneho ne\u017eiad\u00faceho prenosu d\u00e1t v sieti. Pr\u00edkladom tak\u00e9hoto prenosu m\u00f4\u017ee by\u0165 IPv6 pakety (cez pole EtherType), ak pr\u00edslu\u0161n\u00e1 slu\u017eba nie je poskytovan\u00e1; alebo blokova\u0165 SMB na porte 445. V sieti so statickou adres\u00e1ciou DHCP\/BOOTP nie je prenos potrebn\u00fd, preto pomocou ACL m\u00f4\u017ee spr\u00e1vca filtrova\u0165 UDP d\u00e1tagramy na portoch 67 a 68. Z\u00e1kaz miestneho IPoE prenosu d\u00e1t je tie\u017e mo\u017en\u00e9 realizova\u0165 pomocou ACL. Tak\u00e9to blokovanie m\u00f4\u017ee by\u0165 \u017eiadan\u00e9 v sie\u0165ach oper\u00e1torov, ktor\u00ed pou\u017e\u00edvaj\u00fa PPPoE.<\/p>\n<p>Proces vyu\u017e\u00edvania pr\u00edstupov\u00fdch zoznamov je mimoriadne jednoduch\u00fd. Po vytvoren\u00ed samotn\u00e9ho zoznamu je potrebn\u00e9 prida\u0165 do\u0148 potrebn\u00fd po\u010det z\u00e1znamov, ktor\u00fdch typ priamo z\u00e1vis\u00ed od konfigurovan\u00e9ho zoznamu.<\/p>\n<p><b class=\"spoiler_title\">Nastavenie pr\u00edstupov\u00fdch zoznamov<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/b657b4b762f334f5f39b96228d11d4b7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/7db1c5c5f42a62bbe65b57fa342d4598.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/21c697e3ac31d56917b1fb09448f3a3f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/58a20ff5c0d9bc59ba0180997ba8dc8d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e516199c05bc1b68203d3f6b5a1735ee.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/046bd4c507d75678f16ee66755246755.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJe potrebn\u00e9 poznamena\u0165, \u017ee pr\u00edstupov\u00e9 zoznamy m\u00f4\u017eu vykon\u00e1va\u0165 nielen be\u017en\u00e9 oper\u00e1cie povolenia alebo z\u00e1kazu prenosu d\u00e1t, ale taktie\u017e sa zaobera\u0165 ich presmerovan\u00edm, zrkadlen\u00edm, ako aj vykon\u00e1va\u0165 ich prezna\u010dovanie alebo obmedzova\u0165 r\u00fdchlos\u0165.<br \/>\nPo vytvoren\u00ed v\u0161etk\u00fdch potrebn\u00fdch ACL m\u00f4\u017ee spr\u00e1vca vykona\u0165 ich in\u0161tal\u00e1ciu. Je povolen\u00e9 pripoji\u0165 pr\u00edstupov\u00fd zoznam ako k priamemu fyzick\u00e9mu portu, tak aj k ur\u010ditej virtu\u00e1lnej sieti.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ec357308fa285421d175a88df5ac04d9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Bezpe\u010dnos\u0165 \u2013 po\u010det MAC adries<\/h3>\n<p>\nNiekedy sa u oper\u00e1torov objav\u00ed potreba obmedzi\u0165 po\u010det MAC adries, ktor\u00e9 prep\u00edna\u010d nau\u010d\u00ed na ur\u010ditom porte. Pr\u00edstupov\u00e9 zoznamy umo\u017e\u0148uj\u00fa dosiahnu\u0165 tento efekt, ale vy\u017eaduj\u00fa explicitn\u00e9 uvedenie samotn\u00fdch MAC adries. Ak je potrebn\u00e9 len obmedzi\u0165 po\u010det kan\u00e1lov\u00fdch adries bez ich explicitn\u00e9ho uvedenia, pomocou toho pom\u00f4\u017ee portov\u00e1 bezpe\u010dnos\u0165.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/24ae781fb88a0873ca3dd356a2006906.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u00e9to obmedzenie m\u00f4\u017ee by\u0165 potrebn\u00e9 napr\u00edklad na ochranu pred pripojen\u00edm celej miestnej siete k jedn\u00e9mu rozhraniu prep\u00edna\u010da poskytovate\u013ea. Je potrebn\u00e9 poznamena\u0165, \u017ee sa hovor\u00ed o prep\u00ednanom pripojen\u00ed, preto\u017ee pri pripojen\u00ed pomocou smerova\u010da na strane klienta T2600G-28SQ nau\u010d\u00ed iba jednu adresu \u2013 to je MAC adresa patriaca WAN portu klientsk\u00e9ho smerova\u010da.<\/p>\n<p>Existuje cel\u00e1 \u0159ada \u00fatok\u016f zam\u011b\u0159en\u00fdch na p\u0159ep\u00edna\u010dovou tabulku. To m\u016f\u017ee zahrnovat jak p\u0159ete\u010den\u00ed tabulky, tak MAC-spoofing. Mo\u017enost port security umo\u017en\u00ed chr\u00e1nit se p\u0159ed p\u0159ete\u010den\u00edm mostov\u00e9 tabulky a p\u0159ed \u00fatoky, jejich\u017e c\u00edlem je \u00famysln\u00e9 p\u0159e\u0161kolen\u00ed p\u0159ep\u00edna\u010de, tedy otr\u00e1ven\u00ed jeho mostov\u00e9 tabulky.<\/p>\n<p>Nelze opomenout ani probl\u00e9my s nefunk\u010dn\u00edm klientsk\u00fdm vybaven\u00edm. \u010casto se setk\u00e1v\u00e1me se situacemi, kdy \u0161patn\u011b funguj\u00edc\u00ed s\u00ed\u0165ov\u00e1 karta po\u010d\u00edta\u010de \u010di router vytv\u00e1\u0159ej\u00ed proud r\u00e1mc\u016f s naprosto libovoln\u00fdmi adresami odes\u00edlatele a p\u0159\u00edjemce. Tento proud m\u016f\u017ee snadno vy\u010derpat CAM.<\/p>\n<p>Dal\u0161\u00edm zp\u016fsobem omezen\u00ed po\u010dtu pou\u017e\u00edvan\u00fdch z\u00e1znam\u016f v mostov\u00e9 tabulce je n\u00e1stroj MAC VLAN Security, pomoc\u00ed kter\u00e9ho m\u016f\u017ee administr\u00e1tor ur\u010dit maxim\u00e1ln\u00ed po\u010det z\u00e1znam\u016f pro konkr\u00e9tn\u00ed virtu\u00e1ln\u00ed s\u00ed\u0165.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/fa90cfe20142f297e914206510ad7564.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVedle spr\u00e1vy dynamick\u00fdch z\u00e1znam\u016f v p\u0159ep\u00edna\u010dov\u00e9 tabulce m\u016f\u017ee administr\u00e1tor tak\u00e9 vytv\u00e1\u0159et statick\u00e9 z\u00e1znamy.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/88c7e50213071ebe54bde20ee7b52aa1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMaxim\u00e1ln\u011b mostov\u00e1 tabulka modelu T2600G-28SQ umo\u017e\u0148uje pojmout a\u017e 16K z\u00e1znam\u016f.<br \/>\nDal\u0161\u00ed mo\u017enost\u00ed, ur\u010denou pro filtrov\u00e1n\u00ed p\u0159enosu u\u017eivatelsk\u00e9ho provozu, je funkce Port Isolation, kter\u00e1 jasn\u011b ukazuje, v jak\u00e9m sm\u011bru je povoleno p\u0159epos\u00edl\u00e1n\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/8a0e032269dcb413eeea61d4c717da48.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/b7c793b92d5c84fc2fee017635539f96.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Bezpe\u010dnost \u2013 IMPB<\/h3>\n<p>\nNa na\u0161ich rozlehl\u00fdch pl\u00e1n\u00edch se p\u0159\u00edstup oper\u00e1tor\u016f s\u00edt\u00ed k ot\u00e1zk\u00e1m zaji\u0161t\u011bn\u00ed bezpe\u010dnosti v s\u00edti li\u0161\u00ed od \u00fapln\u00e9ho ignorov\u00e1n\u00ed a\u017e po maxim\u00e1ln\u00ed vyu\u017eit\u00ed v\u0161ech mo\u017enost\u00ed, kter\u00e9 za\u0159\u00edzen\u00ed podporuj\u00ed.<\/p>\n<p>Funkce IPv4 IMPB (IP-MAC-Port Binding) a IPv6 IMPB umo\u017e\u0148uj\u00ed br\u00e1nit se cel\u00e9mu spektru \u00fatok\u016f spojen\u00fdch s podvodn\u00fdm IP a MAC-adresami ze strany abonent\u016f za pomoci propojen\u00ed IP a MAC-adres za\u0159\u00edzen\u00ed z\u00e1kazn\u00edka s rozhran\u00edm p\u0159ep\u00edna\u010de poskytovatele. Tato vazba m\u016f\u017ee b\u00fdt prov\u00e1d\u011bna ru\u010dn\u011b nebo pomoc\u00ed funkc\u00ed ARP Scanning a DHCP Snooping.<\/p>\n<p><b class=\"spoiler_title\">Z\u00e1kladn\u00ed nastaven\u00ed IMPB<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e5b0e69b9da1049814bb411bd20344d3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/a3d1b057ed3abd39977bfcdcc7f1b83c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d90b855df7bf6c8a4738fa7afa170bb4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/0b289aa55874e001186ea0c909b67617.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/10bd1a6e78ab0a197b932b45099c96dc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/9444e36953d7ee692937f53393ecaecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>K spravedlnosti je t\u0159eba \u0159\u00edci, \u017ee pro ochranu protokolu DHCP m\u016f\u017ee b\u00fdt pou\u017eita zvl\u00e1\u0161tn\u00ed funkce \u2013 DHCP Filter.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/3660b80c507504477a408cca7a3af947.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/476c0d9882812335df366c18e20bf784.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPomoc\u00ed t\u00e9to funkce m\u016f\u017ee s\u00ed\u0165ov\u00fd administr\u00e1tor ru\u010dn\u011b ur\u010dit, kter\u00e1 rozhran\u00ed jsou p\u0159ipojena k legitimn\u00edm DHCP-server\u016fm. T\u00edmto zp\u016fsobem nemohou podvodn\u00e9 DHCP servery zasahovat do procesu vyjedn\u00e1v\u00e1n\u00ed IP parametr\u016f.<\/p>\n<h3>Bezpe\u010dnost \u2013 DoS Defend<\/h3>\n<p>\nPosudzovan\u00fd model umo\u017e\u0148uje chr\u00e1ni\u0165 pou\u017e\u00edvate\u013eov pred nieko\u013ek\u00fdmi najzn\u00e1mej\u0161\u00edmi a najroz\u0161\u00edrenej\u0161\u00edmi DoS \u00fatokmi z minulosti.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/4e247ca7c7f54f7bfeaa1bfb7256c4ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVe\u013ek\u00e1 \u010das\u0165 z uveden\u00fdch \u00fatokov u\u017e v\u00f4bec neohrozuje zariadenia s modern\u00fdmi opera\u010dn\u00fdmi syst\u00e9mami, av\u0161ak v na\u0161ich sie\u0165ach sa st\u00e1le m\u00f4\u017eu vyskytova\u0165 aj tak\u00e9, pre ktor\u00e9 posledn\u00e1 aktualiz\u00e1cia softv\u00e9ru bola vykonan\u00e1 pred mnoh\u00fdmi rokmi.<\/p>\n<h3>Podpora DHCP<\/h3>\n<p>\nPrep\u00edna\u010d TP-Link T2600G-28SQ m\u00f4\u017ee fungova\u0165 ako DHCP server alebo relay, a m\u00f4\u017ee vykon\u00e1va\u0165 r\u00f4znu filtr\u00e1ciu DHCP spr\u00e1v, ak je in\u00e9 zariadenie nastaven\u00e9 ako server.<\/p>\n<p>Najjednoduch\u0161\u00ed sp\u00f4sob, ako poskytn\u00fa\u0165 pou\u017e\u00edvate\u013eom potrebn\u00e9 IP parametre, je vyu\u017ei\u0165 zabudovan\u00fd DHCP server v prep\u00edna\u010di. Z\u00e1kladn\u00e9 parametre sa takto u\u017e m\u00f4\u017eu odovzda\u0165 abonentom.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/6feeb5fb761cad5a22dbca61ed5b08bf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/01882aa858887731da3e9fa6c05e64f1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/2f77b2ab3746cafc0473ebfb2df24049.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPripojili sme n\u00e1\u0161 SOHO router Archer C6 k jedn\u00e9mu z rozhran\u00ed prep\u00edna\u010da a overili sme \u00faspe\u0161nos\u0165 z\u00edskania adresy klientsk\u00fdm zariaden\u00edm.<\/p>\n<p><b class=\"spoiler_title\">Vyzer\u00e1 to takto<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/f23431e30e54b8b2da86071793ef4704.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/01ee35c7f5bff8ebec723406a827a147.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZabudovan\u00fd DHCP server v prep\u00edna\u010di \u2014 pravdepodobne nie je naj\u0161k\u00e1lovate\u013enej\u0161\u00edm a najflexibilnej\u0161\u00edm rie\u0161en\u00edm: ch\u00fdba podpora pre nestandardn\u00e9 mo\u017enosti, neexistuje prepojenie s IPAM. Ak v\u0161ak oper\u00e1tor potrebuje viac kontroly nad procesom pride\u013eovania IP adries, pou\u017eije sa niektor\u00fd dedikovan\u00fd DHCP server.<\/p>\n<p>T2600G-28SQ umo\u017e\u0148uje pre ka\u017ed\u00fa pou\u017e\u00edvate\u013esk\u00fa pods\u00fa\u0165a\u017e ur\u010di\u0165 samostatn\u00fd dedikovan\u00fd DHCP server, na ktor\u00fd bud\u00fa presmerovan\u00e9 spr\u00e1vy diskutovan\u00e9ho protokolu. V\u00fdber pods\u00fa\u0165a\u017ee sa uskuto\u010d\u0148uje indikovan\u00edm pr\u00edslu\u0161n\u00e9ho L3 rozhrania: VLAN (SVI), routed port alebo port-channel.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/29593e528cf2c49533c5f29aaa2e9c7c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/0a0979d517db2fad23b517abe2b12d80.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAby sme overili fungovanie relay-u, nakonfigurovali sme samostatn\u00fd router in\u00e9ho dod\u00e1vate\u013ea na pr\u00e1cu ako DHCP server, ktor\u00e9ho nastavenia s\u00fa uveden\u00e9 ni\u017e\u0161ie.<\/p>\n<pre><code class=\"plaintext\">R1#sho run | s pool\nip dhcp pool test\n\u00a0network 192.168.0.0 255.255.255.0\n\u00a0default-router 192.168.0.1\n\u00a0dns-server 8.8.8.8<\/code><\/pre>\n<p>\nKlientsk\u00fd router op\u00e4\u0165 \u00faspe\u0161ne z\u00edskal IP adresu.<\/p>\n<pre><code class=\"plaintext\">R1#sho ip dhcp binding\nBindings from all pools not associated with VRF:\nIP address\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Client-ID\/\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Lease expiration\u00a0 \u00a0 \u00a0 Type\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Hardware address\/\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0User name\n192.168.0.2 \u00a0 \u00a0 \u00a0 \u00a0 010c.8063.f0c2.6a\u00a0 \u00a0 May 24 2019 05:07 PM\u00a0 \u00a0 Automatic<\/code><\/pre>\n<p>\nPod spoilerom \u2014 obsah zachyten\u00e9ho paketu medzi prep\u00edna\u010dom a dedikovan\u00fdm DHCP serverom.<\/p>\n<p><b class=\"spoiler_title\">Obsah paketu<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/c2aeec99eaf08babfcc45f05c1b8fe20.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nJe potrebn\u00e9 zd\u00f4razni\u0165 pr\u00edtomnos\u0165 podpory mo\u017enosti 82 zo strany prep\u00edna\u010da. Po jej aktiv\u00e1cii prep\u00edna\u010d prid\u00e1 inform\u00e1cie o pou\u017e\u00edvate\u013eskom rozhran\u00ed, z ktor\u00e9ho bola spr\u00e1va DHCP Discover prijat\u00e1. Okrem toho model T2600G-28SQ umo\u017e\u0148uje nastavi\u0165 politiku spracovania pridan\u00fdch inform\u00e1ci\u00ed pri vkladan\u00ed mo\u017enosti \u010d. 82. Pr\u00edtomnos\u0165 podpory uvedenej mo\u017enosti m\u00f4\u017ee by\u0165 u\u017eito\u010dn\u00e1 v situ\u00e1cii, ke\u010f je potrebn\u00e9 klientovi pride\u013eova\u0165 rovnak\u00fa IP adresu bez oh\u013eadu na to, ak\u00fd identifik\u00e1tor klient (client-id) sa oznamuje.<br \/>\nNa obr\u00e1zku ni\u017e\u0161ie je zobrazen\u00e1 spr\u00e1va DHCP Discover (odovzdan\u00e1 rel\u00e9om) s pridanou mo\u017enos\u0165ou \u010d. 82.<\/p>\n<p><b class=\"spoiler_title\">Spr\u00e1va s mo\u017enos\u0165ou \u010d. 82<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/5209e964b2f4b961549caa41186aae1a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSamozrejme, spravova\u0165 mo\u017enos\u0165 \u010d. 82 je mo\u017en\u00e9 aj bez nastavenia plnohodnotn\u00e9ho DHCP rel\u00e9, pr\u00edslu\u0161n\u00e9 nastavenia s\u00fa uveden\u00e9 v podbode 'DHCP L2 Relay'.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/030b8b8d5643db187fbc536ee9a65ad3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d1ef234eaa7e68494e8cfdf63f9b61ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA teraz zmen\u00edme nastavenia DHCP servera, aby sme demon\u0161trovali fungovanie mo\u017enosti \u010d. 82.<\/p>\n<pre><code class=\"plaintext\">R1#sho run | s dhcp\nip dhcp pool test\n\u00a0network 192.168.0.0 255.255.255.0\n\u00a0default-router 192.168.0.1\n\u00a0dns-server 8.8.8.8\n\u00a0class option82_test\n\u00a0\u00a0address range 192.168.0.222 192.168.0.222\nip dhcp class option82_test\n\u00a0relay agent information\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0relay-information hex 010e010c74702d6c696e6b5f746573740208000668ff7b66f675\nR1#sho ip dhcp binding\nZ\u00e1pisy zo v\u0161etk\u00fdch poolov, ktor\u00e9 nie s\u00fa spojen\u00e9 s VRF:\nIP adresa\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Client-ID\/\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Lease expiration\u00a0 \u00a0 \u00a0 \u00a0 Type\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Hardware address\/\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0User name\n192.168.0.222 \u00a0 \u00a0 \u00a0 010c.8063.f0c2.6a \u00a0 \u00a0\u00a0\u00a024. m\u00e1ja 2019 17:33 \u00a0 \u00a0Automatick\u00e9<\/code><\/pre>\n<p><b class=\"spoiler_title\">Takto to vyzer\u00e1<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ea060a5e7f651f439d01f87e769cebcb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nFunkcia DHCP interface relay bude u\u017eito\u010dn\u00e1 v situ\u00e1cii, ke\u010f na prep\u00edna\u010di nielen\u017ee existuje L3 rozhranie pripojen\u00e9 k ur\u010ditej sieti, ale aj toto rozhranie m\u00e1 IP adresu. V pr\u00edpade, \u017ee na takomto rozhran\u00ed nie je adresa, pom\u00f4\u017ee funkcia DHCP VLAN relay. Inform\u00e1cie o podsieti sa v tomto pr\u00edpade ber\u00fa z predvolen\u00e9ho rozhrania, t.j. adresn\u00e9 priestory v nieko\u013ek\u00fdch virtu\u00e1lnych sie\u0165ach bud\u00fa rovnak\u00e9 (prekr\u00fdva\u0165 sa).<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/144798b0657313867fe3561a19491588.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u010casto oper\u00e1tori po\u017eaduj\u00fa aj ochranu klientov pred nespr\u00e1vnym alebo zlomyse\u013en\u00fdm zapnut\u00edm DHCP servera na klientskej technike. Diskusiu o tejto funk\u010dnosti sme sa rozhodli presun\u00fa\u0165 do jednej z \u010dast\u00ed venovan\u00fdch ot\u00e1zkam bezpe\u010dnosti.<\/p>\n<h3>IEEE 802.1X<\/h3>\n<p>\nJedn\u00fdm z sp\u00f4sobov autentifik\u00e1cie pou\u017e\u00edvate\u013eov v sieti je vyu\u017eitie protokolu IEEE 802.1X. Popularita tohto protokolu v sie\u0165ach oper\u00e1torov v Rusku u\u017e kles\u00e1, no st\u00e1le sa pou\u017e\u00edva predov\u0161etk\u00fdm v lok\u00e1lnych sie\u0165ach ve\u013ek\u00fdch spolo\u010dnost\u00ed na autentifik\u00e1ciu intern\u00fdch pou\u017e\u00edvate\u013eov organiz\u00e1cie. Prepn\u00fa\u0165 na 802.1X je mo\u017en\u00e9 aj v prep\u00edna\u010di T2600G-28SQ, \u010do poskytovate\u013eovi u\u013eah\u010duje jeho vyu\u017eitie, ak to je potrebn\u00e9.<\/p>\n<p>Na fungovanie protokolu IEEE 802.1X s\u00fa potrebn\u00ed traja \u00fa\u010dastn\u00edci: klientsk\u00e9 zariadenie (supplicant), pr\u00edstupov\u00fd prep\u00edna\u010d poskytovate\u013ea (authenticator) a autentifika\u010dn\u00e9 servery (zvy\u010dajne RADIUS servery).<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/84a83abce77dedc15167d8bf9544104b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ\u00e1kladn\u00e1 konfigur\u00e1cia zo strany oper\u00e1tora je extr\u00e9mne jednoduch\u00e1. Sta\u010d\u00ed zada\u0165 IP adresu pou\u017e\u00edvan\u00e9ho RADIUS servera, na ktorom sa bude nach\u00e1dza\u0165 datab\u00e1za pou\u017e\u00edvate\u013eov, a vybra\u0165 rozhrania, pre ktor\u00e9 je potrebn\u00e1 autentifik\u00e1cia.<\/p>\n<p><b class=\"spoiler_title\">Z\u00e1kladn\u00e1 konfigur\u00e1cia 802.1X<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/fce16a4e161f748c122d870c1402a33b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ce7f4a576c6cac958b6532c14dbe74c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/26e55f233ce1d4699125fa708bd71d7d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/14e3511a67b3ead7705f1a9bd17e126d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ee8916b8b20f2e0feccc750dcf6a3966.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ klientskej strany s\u00fa tie\u017e potrebn\u00e9 minimalizovan\u00e9 nastavenia. V\u0161etky modern\u00e9 opera\u010dn\u00e9 syst\u00e9my u\u017e obsahuj\u00fa potrebn\u00fd softv\u00e9r. Ak je to v\u0161ak potrebn\u00e9, m\u00f4\u017eete nain\u0161talova\u0165 a pou\u017ei\u0165 TP-Link 802.1x Client \u2013 aplik\u00e1ciu, ktor\u00e1 umo\u017e\u0148uje autentifik\u00e1ciu klienta v sieti.<\/p>\n<p>Pri pripojen\u00ed pou\u017e\u00edvate\u013esk\u00e9ho po\u010d\u00edta\u010da priamo do siete poskytovate\u013ea je potrebn\u00e9 aktivova\u0165 nastavenia autentifik\u00e1cie pre ten sie\u0165ov\u00fd adapt\u00e9r, ktor\u00fd sa pou\u017e\u00edva na pripojenie.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/48fb3e3d391705c4a424841708ec227b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/5574857815c75f90169113ed468baaac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/71545d12becfb9c311ca733a71c4ea25.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAv\u0161ak v s\u00fa\u010dasnosti sa k sieti oper\u00e1tora zvy\u010dajne nepripojuje priamo po\u010d\u00edta\u010d pou\u017e\u00edvate\u013ea, ale nejak\u00fd SOHO smerova\u010d, ktor\u00fd zabezpe\u010duje fungovanie lok\u00e1lnej siete predplatite\u013ea (ako dr\u00f4tov\u00fdch, tak aj bezdr\u00f4tov\u00fdch segmentov). V tomto pr\u00edpade musia by\u0165 v\u0161etky nastavenia protokolu 802.1X vykonan\u00e9 priamo na smerova\u010di.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/80c6e5133ef1bce755f724d9489017ab.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMysl\u00edme si, \u017ee v sie\u0165ach oper\u00e1torov bol tento sp\u00f4sob autentifik\u00e1cie nepr\u00e1vom zabudnut\u00fd. \u00c1no, pevn\u00e9 spojenie predplatite\u013ea s portom prep\u00edna\u010da je mo\u017eno jednoduch\u0161\u00edm rie\u0161en\u00edm z h\u013eadiska nastaven\u00ed pou\u017e\u00edvate\u013esk\u00e9ho zariadenia. Ale ak je pou\u017e\u00edvanie prihlasovacieho mena a hesla nevyhnutn\u00e9, 802.1X nebude tak n\u00e1ro\u010dn\u00fdm protokolom v porovnan\u00ed s pou\u017e\u00edvan\u00fdmi pripojeniami na b\u00e1ze tunelov PPTP\/L2TP\/PPPoE.<\/p>\n<h3>PPPoE ID Insertion<\/h3>\n<p>\nMnoh\u00ed pou\u017e\u00edvatelia, nielen v na\u0161ej krajine, ale aj vo svete, st\u00e1le preferuj\u00fa pou\u017e\u00edvanie ve\u013emi jednoduch\u00fdch hesiel. A pr\u00edpady kr\u00e1de\u017ee prihlasovac\u00edch \u00fadajov, bohu\u017eia\u013e, nie s\u00fa zriedkav\u00e9. Ak oper\u00e1tor vo svojej sieti pou\u017e\u00edva protokol PPPoE na autentifik\u00e1ciu pou\u017e\u00edvate\u013eov, prep\u00edna\u010d TP-Link T2600G-28SQ pom\u00f4\u017ee vyrie\u0161i\u0165 probl\u00e9m spojen\u00fd s \u00fanikom prihlasovac\u00edch \u00fadajov. To sa dosiahne pridan\u00edm \u0161peci\u00e1lnej zna\u010dky k spr\u00e1ve PPPoE Active Discovery. Takto m\u00f4\u017ee poskytovate\u013e autentifikova\u0165 predplatite\u013ea nielen na z\u00e1klade pou\u017e\u00edvate\u013esk\u00e9ho mena a hesla, ale aj pomocou \u010fal\u0161\u00edch \u00fadajov. Medzi tieto \u010fal\u0161ie \u00fadaje patr\u00ed MAC adresa klientsk\u00e9ho zariadenia, ako aj rozhranie prep\u00edna\u010da, ku ktor\u00e9mu je pripojen\u00e9.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/36bee4f88c30e6d73d67e48aa4caf279.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNiektor\u00ed oper\u00e1tori z\u00e1sadne zakazuj\u00fa predplatite\u013eovi (p\u00e1r pou\u017e\u00edvate\u013esk\u00e9 meno a heslo) mo\u017enos\u0165 pohybova\u0165 sa po sieti. Funkcia PPPoE ID Insertion pom\u00f4\u017ee aj v tomto pr\u00edpade.<\/p>\n<h3>IGMP<\/h3>\n<p>\nProtokol IGMP (Internet Group Management Protocol) existuje u\u017e nieko\u013eko desa\u0165ro\u010d\u00ed. Jeho popularita je celkom pochopite\u013en\u00e1 a \u013eahko vysvetlite\u013en\u00e1. No v IGMP interakcii sa z\u00fa\u010dast\u0148uj\u00fa dve strany: PC pou\u017e\u00edvate\u013ea (alebo in\u00e9 zariadenie, napr\u00edklad STB) a IP smerova\u010d, ktor\u00fd obsluhuje ur\u010dit\u00fd segment siete. Prep\u00edna\u010de sa na tejto v\u00fdmene nijako nez\u00fa\u010dast\u0148uj\u00fa. Pravda, posledn\u00e9 tvrdenie nie je \u00faplne pravdiv\u00e9. Alebo v modern\u00fdch sie\u0165ach v\u00f4bec nie je pravdiv\u00e9. Podpora protokolu IGMP zo strany prep\u00edna\u010dov je nevyhnutn\u00e1 na optimaliz\u00e1ciu prenosu skupinov\u00e9ho prev\u00e1dzky. Naslouchan\u00edm pou\u017e\u00edvate\u013eskej prev\u00e1dzky prep\u00edna\u010d objavuje v \u0148om spr\u00e1vy IGMP Report, pomocou ktor\u00fdch ur\u010duje porty na prenos skupinov\u00e9ho prev\u00e1dzky. Op\u00edsan\u00e1 mo\u017enos\u0165 sa naz\u00fdva IGMP Snooping.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/821a3271de0abaf96f30d0362197641c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e2aabb8cceef6cf5744b73d2dbe06757.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d05831139a806d59e3a254e81c117870.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodpora protokolu IGMP sa m\u00f4\u017ee pou\u017e\u00edva\u0165 nielen na optimaliz\u00e1ciu prev\u00e1dzky ako takej, ale aj na ur\u010dovanie predplatite\u013eov, ktor\u00fdm m\u00f4\u017ee by\u0165 poskytovan\u00e1 ur\u010dit\u00e1 slu\u017eba, napr\u00edklad IPTV. Desired goal can be achieved either by manually setting filter parameters or by using authentication.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1bcce235ca8a0b7c5e252923f2dde5aa.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/7f01f7f1ffd91a43842027db73877424.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/4b257dcc852f8ca94cb3fe3d2a4d88cc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodpora skupinov\u00e9ho prev\u00e1dzkovania na prep\u00edna\u010doch TP-Link je dostato\u010dne flexibiln\u00e1. Napr\u00edklad v\u0161etky parametre m\u00f4\u017eu by\u0165 nastaven\u00e9 pre ka\u017ed\u00fa virtu\u00e1lnu sie\u0165 samostatne.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/de5878132f6c38ecb29dd708d1e789ba.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/6217a8a6140a1c78ba44d66f052d4738.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAk je k jedn\u00e9mu rozhraniu smerova\u010da pripojen\u00fdch viac podsiet\u00ed, v ktor\u00fdch sa nach\u00e1dzaj\u00fa pr\u00edjemcovia viacn\u00e1sobn\u00e9ho prenosu, bude tento smerova\u010d n\u00faten\u00fd odosla\u0165 viacero k\u00f3pi\u00ed paketov cez toto rozhranie (po jednej pre ka\u017ed\u00fa virtu\u00e1lnu sie\u0165). <br \/>\nOptimalizova\u0165 proces prenosu viacn\u00e1sobn\u00e9ho prenosu v tomto pr\u00edpade je mo\u017en\u00e9 pomocou technol\u00f3gie MVR \u2013 Multicast VLAN Registration.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/5ee56dda04ed4094589294b824e9637f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/29c20443d795e53590633d7103bcf4e0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodstata rie\u0161enia spo\u010d\u00edva v tom, \u017ee sa vytvor\u00ed jedna virtu\u00e1lna sie\u0165, ktor\u00e1 zdru\u017euje v\u0161etk\u00fdch pr\u00edjemcov. T\u00e1to virtu\u00e1lna sie\u0165 sa v\u0161ak pou\u017e\u00edva iba na viacn\u00e1sobn\u00fd prenos. Tak\u00fdto pr\u00edstup umo\u017e\u0148uje smerova\u010du odosla\u0165 iba jednu k\u00f3piu viacn\u00e1sobn\u00e9ho prenosu cez rozhranie.<\/p>\n<h3>DDM, OAM a DLDP<\/h3>\n<p>\nDDM \u2013 Digit\u00e1lne diagnostick\u00e9 monitorovanie. Po\u010das prev\u00e1dzky optick\u00fdch modulov je \u010dasto potrebn\u00e9 sledova\u0165 stav samotn\u00e9ho modulu, ako aj optick\u00e9ho kan\u00e1la, ku ktor\u00e9mu je pripojen\u00fd. S touto \u00falohou pom\u00e1ha funkcia DDM. S jej pomocou m\u00f4\u017eu in\u017einieri oper\u00e1tora sledova\u0165 teplotu ka\u017ed\u00e9ho modulu, ktor\u00fd t\u00fato funkciu podporuje, nap\u00e4tie na \u0148om a pr\u00fad, ako aj v\u00fdkony odosielan\u00e9ho a prij\u00edman\u00e9ho optick\u00e9ho sign\u00e1lu.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ba794f2dc717a9ce45c305dc063f9a82.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNastavenie prahov\u00fdch hodn\u00f4t pre vy\u0161\u0161ie uveden\u00e9 parametre umo\u017en\u00ed generova\u0165 udalos\u0165 v pr\u00edpade, ak tieto hodnoty prekro\u010dia pr\u00edpustn\u00fd rozsah.<\/p>\n<p><b class=\"spoiler_title\">Nastavenie prahov pre DDM<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/614f4f968e1719c13ed211f41edc4f58.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/8b30d970b78bb5c0fa06a8cbcc860784.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/7059eeaec5bbc20008986b51d6993832.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSamozrejme, administr\u00e1tor m\u00f4\u017ee zobrazi\u0165 aktu\u00e1lne hodnoty uveden\u00fdch parametrov.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ef99e685414acf1dd75015ae6c6c2691.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPrep\u00edna\u010d TP-Link T2600G-28SQ disponuje akt\u00edvnym syst\u00e9mom vzduchov\u00e9ho chladenia. Navy\u0161e sme sa nikdy nestretli s prehrievan\u00edm SFP modulov v na\u0161ich prep\u00edna\u010doch s\u00favisiacim s hustotou portov. Ak by v\u0161ak \u010disto teoreticky mohla nasta\u0165 tak\u00e1to mo\u017enos\u0165 (napr\u00edklad z d\u00f4vodu nejakej poruchy vn\u00fatri SFP modulu), funkcionalita DDM okam\u017eite upozorn\u00ed administr\u00e1tora na potenci\u00e1lne nebezpe\u010dn\u00fa situ\u00e1ciu. Nebezpe\u010denstvo tu nie je zjavne pre samotn\u00fd prep\u00edna\u010d, ale pre di\u00f3du\/laser vo vn\u00fatri SFP, preto\u017ee s jeho rast\u00facou teplotou m\u00f4\u017ee doch\u00e1dza\u0165 k degrad\u00e1cii v\u00fdkonu vy\u017earovan\u00e9ho optick\u00e9ho sign\u00e1lu, \u010do povedie k zn\u00ed\u017eeniu optick\u00e9ho rozpo\u010dtu.<\/p>\n<p>Tu je tie\u017e potrebn\u00e9 poznamena\u0165, \u017ee prep\u00edna\u010de TP-Link nemaj\u00fa \u201efunkciu\u201c vendor lock, \u010di\u017ee podporovan\u00e9 s\u00fa ak\u00e9ko\u013evek kompatibiln\u00e9 SFP moduly, \u010do ur\u010dite u\u013eah\u010d\u00ed pr\u00e1cu sie\u0165ov\u00fdm administr\u00e1torom.<\/p>\n<p>OAM \u2014 Oper\u00e1cie, spr\u00e1va a \u00fadr\u017eba (IEEE 802.3ah). OAM \u2013 protokol druhej \u00farovne modelu OSI, ur\u010den\u00fd na monitorovanie a h\u013eadanie por\u00fach v sie\u0165ach Ethernet. S pomocou tohto protokolu m\u00f4\u017ee prep\u00edna\u010d sledova\u0165 v\u00fdkon ur\u010dit\u00e9ho spojenia a chyby, generova\u0165 upozornenia, aby sie\u0165ov\u00fd administr\u00e1tor mohol efekt\u00edvnej\u0161ie spravova\u0165 sie\u0165.<\/p>\n<p><b class=\"spoiler_title\">Z\u00e1kladn\u00e9 nastavenie OAM<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e01a92e3efdf54c592c20c59d93ffd3f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/c1968538fc68c081b1ee570f03be52d6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/b5f76da323308ae245b44cf8fde2dc4d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/cc95bb55e5d19e82e35363864e45555e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b class=\"spoiler_title\">Podrobnosti o fungovan\u00ed OAM<\/b>Dve susedn\u00e9 zariadenia podporuj\u00face OAM sa pravidelne vymie\u0148aj\u00fa spr\u00e1vami zasielan\u00edm OAMPDU, ktor\u00e9 s\u00fa troch typov: Informational, Event Notification a Loopback Control. S pomocou informa\u010dn\u00fdch OAMPDU si susedn\u00e9 prep\u00edna\u010de posielaj\u00fa navz\u00e1jom \u0161tatistick\u00e9 inform\u00e1cie, ako aj \u00fadaje definovan\u00e9 administr\u00e1torom. Tento typ spr\u00e1v sa tie\u017e pou\u017e\u00edva na udr\u017eiavanie spojenia prostredn\u00edctvom protokolu OAM. Spr\u00e1vy Event Notification sa pou\u017e\u00edvaj\u00fa funkciou monitorovania spojenia na informovanie druhej strany o vzniknut\u00fdch poruch\u00e1ch. Na ur\u010denie slu\u010dky na linke sa pou\u017e\u00edvaj\u00fa spr\u00e1vy Loopback Control.<\/p>\n<p>Ni\u017e\u0161ie sme sa rozhodli vymenova\u0165 hlavn\u00e9 mo\u017enosti, ktor\u00e9 protokol OAM poskytuje:<\/p>\n<ul>\n<li>monitorovanie prostredia (zistenie a po\u010d\u00edtanie chybn\u00fdch r\u00e1mcov),\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/f9b75f293bb5220c4eaaf5c0c3df54a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<ul>\n<li>RFI \u2013 Remote Failure Indication (zasielanie ozn\u00e1menia o poruche na kan\u00e1li),\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/54690ec0bfd8fc2814bac37fdab0816e.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<ul>\n<li>Remote Loopback (testovanie kan\u00e1la na meranie oneskorenia, vari\u00e1cie oneskorenia (jitter), po\u010dtu stratenej r\u00e1mcov).\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/2a1c80ad408ed0afa46397591cd71de2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u010eal\u0161ou mo\u017enos\u0165ou, ktor\u00e1 je \u017eiadan\u00e1 na optick\u00fdch prep\u00edna\u010doch, je schopnos\u0165 detekova\u0165 probl\u00e9my na komunika\u010dnom kan\u00e1li, \u010do vedie k tomu, \u017ee kan\u00e1l sa st\u00e1va simplexn\u00fdm, teda zasielanie d\u00e1t m\u00f4\u017ee prebieha\u0165 iba jedn\u00fdm smerom. Na\u0161e prep\u00edna\u010de na \u00fa\u010dely detekcie jednosmern\u00fdch odkazov vyu\u017e\u00edvaj\u00fa protokol DLDP \u2013 Device Link Detection Protocol. Je spravodliv\u00e9 poznamena\u0165, \u017ee protokol DLDP je podporovan\u00fd ako na optick\u00fdch, tak aj na meden\u00fdch rozhraniach, av\u0161ak pod\u013ea n\u00e1\u0161ho n\u00e1zoru bude najviac \u017eiadan\u00fd pri pou\u017eit\u00ed optick\u00fdch vl\u00e1kien.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/47b234aca57fa6c6dbcfd872c72e06f7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPri zisten\u00ed jednosmern\u00e9ho kan\u00e1la m\u00f4\u017ee prep\u00edna\u010d automaticky vypn\u00fa\u0165 probl\u00e9mov\u00e9 rozhranie, \u010do vedie k prestavbe STP stromu a vyu\u017eitiu z\u00e1lo\u017en\u00fdch komunika\u010dn\u00fdch kan\u00e1lov.<\/p>\n<p>V na\u0161om arzen\u00e1li existuj\u00fa SFP moduly, ktor\u00e9 prij\u00edmaj\u00fa a pren\u00e1\u0161aj\u00fa sign\u00e1l cez jedno vl\u00e1kno. Funguj\u00fa v\u00fdhradne v p\u00e1roch a na prenos v r\u00e1mci p\u00e1ru pou\u017e\u00edvaj\u00fa optick\u00fd sign\u00e1l na r\u00f4znych vlnov\u00fdch d\u013a\u017ekach. Pr\u00edkladom m\u00f4\u017ee by\u0165 p\u00e1r TL-SM321A a TL-SM321B. Pri pou\u017eit\u00ed tohto druhu modulov po\u0161kodenie jedn\u00e9ho vl\u00e1kna povedie k \u00faplnej nefunk\u010dnosti cel\u00e9ho optick\u00e9ho kan\u00e1la. Av\u0161ak aj na tak\u00fdchto kan\u00e1loch bude protokol DLDP \u017eiadan\u00fd, preto\u017ee, hoci sa to deje ve\u013emi zriedkavo, kan\u00e1l m\u00f4\u017ee ma\u0165 r\u00f4zne charakteristiky prieh\u013eadnosti pre r\u00f4zne vlnov\u00e9 d\u013a\u017eky. Pravdepodobnej\u0161\u00edm probl\u00e9mom je r\u00f4zna prieh\u013eadnos\u0165 kan\u00e1la v z\u00e1vislosti od smeru \u0161\u00edrenia svetla. Odhalenie uveden\u00fdch probl\u00e9mov pom\u00f4\u017ee reflektogram, ale to je u\u017e \u00faplne in\u00fd pr\u00edbeh.<\/p>\n<h3>LLDP<\/h3>\n<p>\nV ve\u013ek\u00fdch firemn\u00fdch alebo oper\u00e1torsk\u00fdch sie\u0165ach sa ob\u010das vyskytuj\u00fa probl\u00e9my so zastaran\u00edm dokument\u00e1cie k sieti alebo nepresnos\u0165ami pri jej vypracov\u00e1van\u00ed. Sie\u0165ov\u00fd administr\u00e1tor sa m\u00f4\u017ee ocitn\u00fa\u0165 v situ\u00e1cii, ke\u010f je potrebn\u00e9 zisti\u0165, ak\u00e9 oper\u00e1torsk\u00e9 zariadenie je skuto\u010dne pripojen\u00e9 k dan\u00e9mu rozhraniu switche. Na pomoc pr\u00edde protokol LLDP \u2013 Link Layer Discovery Protocol (IEEE 802.1AB).<\/p>\n<p><b class=\"spoiler_title\">Parametre fungovania LLDP<\/b><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/e1c85683fd68134c4c11843818bf90b9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1375a28a5b9fb76fb1da80a5fb7e9328.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/46f1cb5b878b5fd81378ab4ad09a62f4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/1f8cfe2684ed062bbde3367ef3a7fe74.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/22052a9ebc6df32c3b8818cef380f1cf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/ec0103d4aa6e366e233b2fccbd9eebc7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa\u0161e switche podporuj\u00fa protokol LLDP nielen na zistenie susedn\u00fdch switchov alebo in\u00fdch sie\u0165ov\u00fdch zariaden\u00ed, ale aj na ur\u010denie ich mo\u017enost\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/d0aa712fa6b00fabf2a12fad8eee1e33.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/37b76d160abda490a8c1ecbcf42282da.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/641b4f992392d222fcac2b46766c814a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMeden\u00e9 \u201es\u00farodenci\u201c n\u00e1\u0161ho switche m\u00f4\u017eu pou\u017e\u00edva\u0165 LLDP-MED na zjednodu\u0161enie proced\u00fary pripojenia IP telef\u00f3nov. Taktie\u017e pomocou tejto mo\u017enosti m\u00f4\u017ee PoE switch dohodn\u00fa\u0165 parametre nap\u00e1jania s nap\u00e1jan\u00fdm zariaden\u00edm. O tom sme u\u017e pomerne podrobne hovorili v jednom z na\u0161ich <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tp_link_russia\/blog\/351614\/\">predo\u0161l\u00fdch materi\u00e1lov<\/a><\/noindex>.<\/p>\n<h3>SDM a preposielanie<\/h3>\n<p>\nTakmer v\u0161etky modern\u00e9 switche sprac\u00favaj\u00fa prech\u00e1dzaj\u00face r\u00e1mce a pakety bez pou\u017eitia centr\u00e1lnych procesorov. Spracovanie (v\u00fdpo\u010det kontroln\u00e9ho s\u00fa\u010dtu, aplik\u00e1cia pr\u00edstupov\u00fdch zoznamov a vykon\u00e1vanie \u010fal\u0161\u00edch bezpe\u010dnostn\u00fdch kontrol, ako aj rozhodovanie o prep\u00ednan\u00ed\/routing) je realizovan\u00e9 pomocou \u0161pecializovan\u00fdch obvodov, \u010do umo\u017e\u0148uje dosiahnu\u0165 vysok\u00e9 r\u00fdchlosti prenosu pou\u017e\u00edvate\u013esk\u00e9ho trafficu. Tento diskutovan\u00fd switch umo\u017e\u0148uje spracov\u00e1va\u0165 traffic pri r\u00fdchlosti strediska. To znamen\u00e1, \u017ee v\u00fdkonnos\u0165 zariadenia je dostato\u010dn\u00e1 na prenos d\u00e1t pri maxim\u00e1lnych mo\u017en\u00fdch r\u00fdchlostiach v\u0161etk\u00fdch portov s\u00fa\u010dasne. Model T2600G-28SQ m\u00e1 24 downlink portov (k u\u017e\u00edvate\u013eom), ktor\u00e9 pracuj\u00fa pri r\u00fdchlosti 1 Gbit\/s, a 4 uplink porty (k jadru siete) po 10 Gbit\/s. Pri tom v\u00fdkon switchov\u00e9ho backplane je 128 Gbit\/s, \u010do je dostato\u010dn\u00e9 na spracovanie maxim\u00e1lneho mno\u017estva prich\u00e1dzaj\u00faceho trafficu.<\/p>\n<p>Na spravodlivos\u0165, v\u00fdkon prep\u00ednacej matice je 95,2 mili\u00f3nov paketov za sekundu. To znamen\u00e1, \u017ee pri pou\u017eit\u00ed minim\u00e1lne mo\u017en\u00fdch r\u00e1mcov s d\u013a\u017ekou iba 64 bajtov celkov\u00fd v\u00fdkon zariadenia bude 97,5 Gbit\/s. Av\u0161ak tak\u00fd profil trafficu je prakticky nepredstavite\u013en\u00fd pre siete opera\u010dn\u00fdch oper\u00e1torov.<\/p>\n<p><b class=\"spoiler_title\">\u010co je to pre-overbooking<\/b>\u010eal\u0161ou nemenej d\u00f4le\u017eitou ot\u00e1zkou je pomer r\u00fdchlost\u00ed vzostupn\u00fdch a zostupn\u00fdch kan\u00e1lov (pre-overbooking). Tu u\u017e, zrejme, v\u0161etko z\u00e1vis\u00ed od topol\u00f3gie. Ak administr\u00e1tor pou\u017eije v\u0161etky \u0161tyri rozhrania 10 GE na pripojenie k jadru siete a skombinuje ich technol\u00f3giou LAG (Link Aggregation Group) alebo Port-Channel, potom \u0161tatisticky dosiahnut\u00e1 r\u00fdchlos\u0165 smerom k jadru bude 40 Gbit\/s, \u010do sa uk\u00e1\u017ee by\u0165 viac ako dostato\u010dn\u00e9 na uspokojenie potrieb v\u0161etk\u00fdch pripojen\u00fdch predplatite\u013eov. Navy\u0161e nie je nutn\u00e9, aby v\u0161etky \u0161tyri vzostupn\u00e9 linky boli pripojen\u00e9 k jedn\u00e9mu fyzick\u00e9mu zariadeniu. Pripojenie m\u00f4\u017ee prebieha\u0165 k stohu switchov, alebo k dvom zariadeniam spojen\u00fdm do klastru (pomocou technol\u00f3gie vPC alebo podobn\u00fdch). V tomto pr\u00edpade pre-overbooking neexistuje.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/96c03b6c3e5f3f84122cc4c87de028dd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPou\u017e\u00edvanie v\u0161etk\u00fdch \u0161tyroch vzostupn\u00fdch kan\u00e1lov s\u00fa\u010dasne je mo\u017en\u00e9 nielen zl\u00fa\u010den\u00edm pomocou LAG. Podobn\u00e9ho efektu je mo\u017en\u00e9 dosiahnu\u0165 spr\u00e1vnym nastaven\u00edm MSTP, av\u0161ak to je u\u017e \u00faplne in\u00fd pr\u00edbeh.<\/p>\n<p>Druh\u00fdm \u010dasto sa vyskytuj\u00facim sp\u00f4sobom L2 pripojenia je pou\u017eitie dvoch nez\u00e1visl\u00fdch LAG (po jednom do ka\u017ed\u00e9ho agreg\u00e1tneho prep\u00edna\u010da). V tomto pr\u00edpade je pravdepodobn\u00e9, \u017ee jeden z virtu\u00e1lnych liniek bude zablokovan\u00fd protokolom STP (pri pou\u017eit\u00ed STP alebo RSTP). Preprioritiz\u00e1cia bude 5:6.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/9d2bb1d7144327338906f5ee2d76d293.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMenej \u010dast\u00e1, ale napriek tomu celkom pravdepodobn\u00e1 situ\u00e1cia: T2600G-28SQ je pripojen\u00fd nez\u00e1visl\u00fdmi kan\u00e1lmi k nadriaden\u00e9mu prep\u00edna\u010du alebo prep\u00edna\u010dom. Protokol STP\/RSTP ponech\u00e1 iba jeden tak\u00fd link v odblokovanom stave. Preprioritiz\u00e1cia bude 5:12.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/fb4a8c1ba5c306b8af912731b779733b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00daloha s hviezdi\u010dkou: vypo\u010d\u00edtajte preprioritiz\u00e1ciu pre situ\u00e1cie op\u00edsan\u00e9 v sekcii STP, kde sme presk\u00famali pr\u00edklad topol\u00f3gie, ke\u010f s\u00fa dva pr\u00edstupov\u00e9 prep\u00edna\u010de pripojen\u00e9 k jedn\u00e9mu agreg\u00e1tnemu zariadeniu a navz\u00e1jom spojen\u00ed.<\/p>\n<p>Programovate\u013en\u00e9 \u010dipy, pomocou ktor\u00fdch sa dosahuje tak\u00e1 vysok\u00e1 r\u00fdchlos\u0165 prenosu, s\u00fa dos\u0165 drah\u00fdm zdrojom, preto sa sna\u017e\u00edme optimalizova\u0165 ich vyu\u017eitie spr\u00e1vnym rozdelen\u00edm zdrojov medzi r\u00f4zne funkcie. Za rozdelenie zodpoved\u00e1 SDM - Switch Database Management.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/81327b804ba413cf18cdd5d857a40f2b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nRozdelenie sa vykon\u00e1va pomocou profilu SDM. V s\u00fa\u010dasnosti s\u00fa k dispoz\u00edcii na pou\u017eitie tri profily uveden\u00e9 ni\u017e\u0161ie.<\/p>\n<ul>\n<li>Default pon\u00faka vyv\u00e1\u017een\u00e9 rie\u0161enie na pou\u017eitie MAC a IP zoznamov pr\u00edstupu, ako aj z\u00e1znamov ARP detekcie.\n<\/li>\n<li>EnterpriseV4 maximalizuje zdroje dostupn\u00e9 na pou\u017eitie MAC a IP zoznamami pr\u00edstupu.\n<\/li>\n<li>EnterpriseV6 \u010das\u0165 zdrojov vy\u010dle\u0148uje pre pou\u017eitie zoznamami pr\u00edstupu IPv6.\n<\/li>\n<\/ul>\n<p>\nNa pou\u017eitie nov\u00e9ho profilu je potrebn\u00e9 re\u0161tartovanie prep\u00edna\u010da.<\/p>\n<h2>Z\u00e1ver<\/h2>\n<p>\nPod\u013ea p\u00f4vodn\u00e9ho zaradenia je tento prep\u00edna\u010d najvhodnej\u0161\u00ed pre telekomunika\u010dn\u00e9 oper\u00e1tory, ktor\u00ed \u010del\u00ed v\u00fdzvam zabezpe\u010denia pr\u00edstupu k sieti na ve\u013ek\u00e9 vzdialenosti. Zariadenie sa m\u00f4\u017ee pou\u017e\u00edva\u0165 ako na \u00farovni pr\u00edstupu, napr\u00edklad v obytn\u00fdch komplexoch a radov\u00fdch domoch, tak aj na agreg\u00e1ciu kan\u00e1lov z pr\u00edstupov\u00fdch prep\u00edna\u010dov umiestnen\u00fdch v bytov\u00fdch domoch; teda v\u0161ade, kde s\u00fa potrebn\u00e9 pripojenia vzdialen\u00fdch objektov. Pri pou\u017eit\u00ed optick\u00fdch prenosov\u00fdch kan\u00e1lov m\u00f4\u017ee by\u0165 pripojen\u00fd odberate\u013e umiestnen\u00fd vo vzdialenosti nieko\u013ek\u00fdch kilometrov.<\/p>\n<p><img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/43c22f2f9139a5cddd6d5c5eb1654ba2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/f98bb979d03ec9f336cb9a93df8d8762.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead&nbsp;\" src=\"\/wp-content\/uploads\/2019\/07\/26900a2455657ae7192eb09f84d6e1f6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa strane klientov m\u00f4\u017eu by\u0165 optick\u00e9 linky ukon\u010den\u00e9 na mal\u00fdch prep\u00edna\u010doch s optick\u00fdmi rozhraniami, alebo na mediakonvertoroch.<\/p>\n<p>Ve\u013ek\u00e9 mno\u017estvo podporovan\u00fdch protokolov a mo\u017enost\u00ed umo\u017en\u00ed pou\u017e\u00edvanie T2600G-28SQ v Ethernetovej sieti oper\u00e1tora s akouko\u013evek topol\u00f3giou a ak\u00fdmko\u013evek s\u00faborom pou\u017e\u00edvan\u00fdch technol\u00f3gi\u00ed a poskytovan\u00fdch slu\u017eieb. Prep\u00edna\u010d je riaden\u00fd dia\u013ekovo pomocou webov\u00e9ho rozhrania alebo pr\u00edkazov\u00e9ho riadku. Pri potrebe lok\u00e1lneho nastavenia mo\u017eno pou\u017ei\u0165 konzolov\u00fd port, v modeli T2600G-28SQ s\u00fa dva: RJ-45 a micro-USB. Ako mal\u00fa ly\u017eicu popola spomenieme absenciu podpory pre stohovanie a druh\u00e9ho nap\u00e1jacieho zdroja. Av\u0161ak zvy\u010dajne mimo d\u00e1tov\u00fdch centier providerov je existencia druhej elektrickej linky takisto zriedkav\u00e1.<\/p>\n<p>Medzi jeho v\u00fdhody patr\u00ed n\u00edzka cena, ve\u013ek\u00e9 mno\u017estvo odbern\u00fdch optick\u00fdch portov, pr\u00edtomnos\u0165 optick\u00fdch uplinkov 10 GE, ako aj \u0161tyri kombinovan\u00e9 porty a prenos d\u00e1t r\u00fdchlos\u0165ou m\u00e9dia.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tp_link_russia\/blog\/460421\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014\u00a0\u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f. \u041e\u0434\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u041c\u043e\u0441\u043a\u0432\u0430 \u0432 2019 \u0433\u043e\u0434\u0443 \u0434\u043e\u043b\u0436\u043d\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 4 \u043c\u043b\u043d \u043a\u0432\u0430\u0434\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0442\u0440\u043e\u0432 \u0436\u0438\u043b\u044c\u044f (\u0438 \u044d\u0442\u043e \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u044f 15 \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0442\u0441\u044f \u043a 2020 \u0433\u043e\u0434\u0443). \u041d\u0430 \u0432\u0441\u0435\u0439 \u044d\u0442\u043e\u0439 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0439 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443. \u042d\u0442\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27280,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36454","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440 TP-Link T2600G-28SQ \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432: \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:11:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:11:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Optick\u00fd prep\u00edna\u010d TP-Link T2600G-28SQ pre poskytovate\u013eov slu\u017eieb: podrobn\u00fd preh\u013ead | ProHoster","description":"Roz\u0161irovanie ve\u013ek\u00fdch miest a vznik aglomer\u00e1ci\u00ed je jedn\u00fdm z d\u00f4le\u017eit\u00fdch trendov soci\u00e1lneho rozvoja dnes.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440 TP-Link T2600G-28SQ \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432: \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440 | ProHoster","og:description":"\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0446\u0438\u0439 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0436\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/opticheskij-kommutator-tp-link-t2600g-28sq-dlya-servis-provajderov-podrobnyj-obzor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:11:44+00:00","article:modified_time":"2019-10-31T19:11:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 03:24:53","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:44:23","updated":"2026-01-22 03:24:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=36454"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36454\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/27280"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=36454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=36454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=36454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}