{"id":89699,"date":"2020-07-25T13:42:16","date_gmt":"2020-07-25T11:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti"},"modified":"2020-07-25T13:42:16","modified_gmt":"2020-07-25T11:42:16","slug":"est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","title":{"rendered":"Existuje kontrol\u00e9r \u2013 niet probl\u00e9mov: ako jednoducho udr\u017eiava\u0165 pr\u00e1cu bezdr\u00f4tovej siete","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V roku 2019 vykonala konzulta\u010dn\u00e1 spolo\u010dnos\u0165 Miercom nez\u00e1visl\u00e9 technologick\u00e9 hodnotenie Wi-Fi 6 kontrol\u00e9rov Cisco Catalyst s\u00e9rie 9800. Pre t\u00fato \u0161t\u00fadiu bola zostaven\u00e1 testovacia zostava z kontrol\u00e9rov a pr\u00edstupov\u00fdch bodov Wi-Fi 6 od spolo\u010dnosti Cisco a bola vykonan\u00e1 hodnotenie technick\u00e9ho rie\u0161enia v nasleduj\u00facich kateg\u00f3ri\u00e1ch:<\/p>\n<ul>\n<li>Dostupnos\u0165;<\/li>\n<li>Bezpe\u010dnos\u0165;<\/li>\n<li>Automatiz\u00e1cia.<\/li>\n<\/ul>\n<p>\nV\u00fdsledky \u0161t\u00fadie s\u00fa uveden\u00e9 ni\u017e\u0161ie. Od roku 2019 bola funkcionalita kontrol\u00e9rov Cisco Catalyst s\u00e9rie 9800 v\u00fdznamne vylep\u0161en\u00e1 \u2013 tieto aspekty s\u00fa tie\u017e reflektovan\u00e9 v tomto \u010dl\u00e1nku.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nO \u010fal\u0161\u00edch v\u00fdhod\u00e1ch technol\u00f3gie Wi-Fi 6, pr\u00edkladoch implement\u00e1cie a oblastiach pou\u017eitia si m\u00f4\u017eete pre\u010d\u00edta\u0165<noindex><a rel=\"nofollow\" href=\"http:\/\/rrcwifi6.promo\/?utm_source=habrblogcisco&amp;utm_medium=cpc&amp;utm_campaign=rrcwifi6&amp;utm_content=articlecatalyst\"> tu<\/a><\/noindex>.<\/p>\n<h2><strong>Preh\u013ead rie\u0161enia<\/strong><\/h2>\n<p><\/p>\n<h3><strong>Wi-Fi 6 kontrol\u00e9ry Cisco Catalyst s\u00e9rie 9800<\/strong><\/h3>\n<p>\nS\u00e9ria bezdr\u00f4tov\u00fdch kontrol\u00e9rov Cisco Catalyst s\u00e9rie 9800, zalo\u017een\u00e1 na opera\u010dnom syst\u00e9me IOS-XE (ktor\u00fd sa tie\u017e pou\u017e\u00edva pre prep\u00edna\u010de a smerova\u010de Cisco), je pon\u00fakan\u00e1 v r\u00f4znych variantoch.<\/p>\n<p><img decoding=\"async\" alt=\"Existuje kontrol\u00e9r \u2013 niet probl\u00e9mov: ako jednoducho udr\u017eiava\u0165 pr\u00e1cu bezdr\u00f4tovej siete\" src=\"\/wp-content\/uploads\/2020\/07\/b75d0fdc2caa8f49a5a4a893d4e67a78.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVy\u0161\u0161\u00ed model kontrol\u00e9ra 9800-80 podporuje priepustnos\u0165 bezdr\u00f4tovej siete a\u017e do 80 Gbit\/s. Jeden kontrol\u00e9r 9800-80 podporuje a\u017e 6000 pr\u00edstupov\u00fdch bodov a a\u017e 64 000 bezdr\u00f4tov\u00fdch klientov.<\/p>\n<p>Model strednej \u00farovne \u2013 kontrol\u00e9r 9800-40 \u2013 podporuje priepustnos\u0165 a\u017e do 40 Gbit\/s, a\u017e 2000 pr\u00edstupov\u00fdch bodov a a\u017e 32 000 bezdr\u00f4tov\u00fdch klientov.<\/p>\n<p>Okrem t\u00fdchto modelov bol do konkurentn\u00e9ho anal\u00fdzy zahrnut\u00fd aj bezdr\u00f4tov\u00fd kontrol\u00e9r 9800-CL (CL znamen\u00e1 Cloud). Model 9800-CL pracuje vo virtu\u00e1lnych prostrediach na hyperv\u00edzoroch VMWare ESXI a KVM a jeho vlastnosti z\u00e1visia od pridelen\u00fdch hardv\u00e9rov\u00fdch zdrojov pre virtu\u00e1lny stroj kontrol\u00e9ra. V maxim\u00e1lnej konfigur\u00e1cii kontrol\u00e9r Cisco 9800-CL, rovnako ako vy\u0161\u0161\u00ed model 9800-80, podporuje \u0161k\u00e1lovate\u013enos\u0165 a\u017e do 6000 pr\u00edstupov\u00fdch bodov a a\u017e 64 000 bezdr\u00f4tov\u00fdch klientov.<\/p>\n<p>Pri vykon\u00e1van\u00ed v\u00fdskumu boli pou\u017eit\u00e9 pr\u00edstupov\u00e9 body Cisco Aironet AP s\u00e9rie 4800, ktor\u00e9 podporuj\u00fa pr\u00e1cu na frekvenci\u00e1ch 2,4 a 5 GHz s mo\u017enos\u0165ou dynamick\u00e9ho prechodu do re\u017eimu dual 5-GHz.<\/p>\n<h2><strong>Testovac\u00ed st\u00e1nok<\/strong><\/h2>\n<p>\nV r\u00e1mci testovania bola zostaven\u00e1 zostava z dvoch bezdr\u00f4tov\u00fdch kontrol\u00e9rov Cisco Catalyst 9800-CL, ktor\u00e9 pracovali v clustre, a pr\u00edstupov\u00fdch bodov Cisco Aironet AP s\u00e9rie 4800.<\/p>\n<p>Ako klientsk\u00e9 zariadenia boli pou\u017eit\u00e9 notebooky zna\u010diek Dell a Apple, ako aj smartf\u00f3n Apple iPhone.<\/p>\n<p><img decoding=\"async\" alt=\"Existuje kontrol\u00e9r \u2013 niet probl\u00e9mov: ako jednoducho udr\u017eiava\u0165 pr\u00e1cu bezdr\u00f4tovej siete\" src=\"\/wp-content\/uploads\/2020\/07\/d2821ca58a54a4fab2c5a208b20fb51f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2><strong>Testovanie dostupnosti<\/strong><\/h2>\n<p>\nDostupnos\u0165 sa ur\u010duje ako schopnos\u0165 pou\u017e\u00edvate\u013eov z\u00edska\u0165 pr\u00edstup k syst\u00e9mu alebo slu\u017ebe a vyu\u017e\u00edva\u0165 ich. Vysok\u00e1 dostupnos\u0165 znamen\u00e1 nepretr\u017eit\u00fd pr\u00edstup k syst\u00e9mu alebo slu\u017ebe, ktor\u00fd nie je z\u00e1visl\u00fd od r\u00f4znych udalost\u00ed.<\/p>\n<p>Vysok\u00e1 dostupnos\u0165 bola testovan\u00e1 v \u0161tyroch scen\u00e1roch, prv\u00e9 tri scen\u00e1re s\u00fa predv\u00eddate\u013en\u00e9 alebo pl\u00e1novan\u00e9 udalosti, ktor\u00e9 sa m\u00f4\u017eu uskuto\u010dni\u0165 v pracovnom alebo nepracovnom \u010dase. \u0160tvrt\u00fd scen\u00e1r je klasick\u00fd v\u00fdpadok, ktor\u00fd je nepredv\u00eddate\u013enou udalos\u0165ou.<\/p>\n<p>Popis scen\u00e1rov:<\/p>\n<ul>\n<li>Oprava ch\u00fdb \u2013 mikroaktualiz\u00e1cia syst\u00e9mu (bugfix alebo security patch), ktor\u00e1 umo\u017e\u0148uje opravi\u0165 konkr\u00e9tnu chybu alebo zranite\u013enos\u0165 bez nutnosti celkov\u00e9ho aktualizovania syst\u00e9mov\u00e9ho softv\u00e9ru.<\/li>\n<li>Funk\u010dn\u00e9 aktualizovanie \u2013 prid\u00e1vanie alebo roz\u0161irovanie aktu\u00e1lnych funkci\u00ed syst\u00e9mu in\u0161talovan\u00edm funk\u010dn\u00fdch aktualiz\u00e1ci\u00ed.<\/li>\n<li>\u00dapln\u00e9 aktualizovanie \u2013 aktualiz\u00e1cia obrazu softv\u00e9ru ovl\u00e1da\u010da.<\/li>\n<li>Pridanie pr\u00edstupov\u00e9ho bodu \u2013 pridanie novej modelovej pr\u00edstupovej bodu do bezdr\u00f4tovej siete bez nutnosti prekonfigurovania alebo aktualiz\u00e1cie softv\u00e9ru bezdr\u00f4tov\u00e9ho ovl\u00e1da\u010da.<\/li>\n<li>V\u00fdpadok \u2013 zlyhanie bezdr\u00f4tov\u00e9ho ovl\u00e1da\u010da.<\/li>\n<\/ul>\n<p><\/p>\n<h3><strong>Oprava ch\u00fdb a zranite\u013enost\u00ed<\/strong><\/h3>\n<p>\nVo viacer\u00fdch konkuren\u010dn\u00fdch rie\u0161eniach in\u0161tal\u00e1cia opr\u00e1v \u010dasto vy\u017eaduje kompletn\u00fa aktualiz\u00e1ciu softv\u00e9ru syst\u00e9mu bezdr\u00f4tov\u00e9ho ovl\u00e1da\u010da, \u010do m\u00f4\u017ee vies\u0165 k nepl\u00e1novan\u00fdm prestojom. V pr\u00edpade rie\u0161enia od Cisco sa opravy in\u0161taluj\u00fa bez preru\u0161enia produktivity. Opravy m\u00f4\u017eu by\u0165 in\u0161talovan\u00e9 na ktoromko\u013evek z komponentov, pri\u010dom bezdr\u00f4tov\u00e1 infra\u0161trukt\u00fara pokra\u010duje v \u010dinnosti.<\/p>\n<p>Samotn\u00fd postup je pomerne jednoduch\u00fd. S\u00fabor opravy sa skop\u00edruje do prie\u010dinka sp\u00fa\u0161\u0165ania na jednom z bezdr\u00f4tov\u00fdch ovl\u00e1da\u010dov Cisco, a potom sa cez grafick\u00e9 rozhranie alebo pr\u00edkazov\u00fd riadok potvrd\u00ed oper\u00e1cia. Okrem toho m\u00f4\u017ee by\u0165 oprava zru\u0161en\u00e1 a odstr\u00e1nen\u00e1 tie\u017e cez grafick\u00e9 rozhranie alebo pr\u00edkazov\u00fd riadok bez preru\u0161enia chodu syst\u00e9mu.<\/p>\n<h3><strong>Funk\u010dn\u00e9 aktualizovanie<\/strong><\/h3>\n<p>\nFunk\u010dn\u00e9 aktualiz\u00e1cie softv\u00e9ru sa pou\u017e\u00edvaj\u00fa na aktiv\u00e1ciu nov\u00fdch funkci\u00ed. Jedn\u00fdm z t\u00fdchto vylep\u0161en\u00ed je aktualiz\u00e1cia datab\u00e1zy podpisov aplik\u00e1ci\u00ed. Tento bal\u00edk bol nain\u0161talovan\u00fd v zariadeniach Cisco ako test. Rovnako ako v pr\u00edpade opr\u00e1v, aj aktualiz\u00e1cia funkci\u00ed sa aplikuje, in\u0161taluje alebo odstra\u0148uje bez v\u00fdpadkov alebo preru\u0161enia \u010dinnosti syst\u00e9mu.<\/p>\n<h3><strong>\u00dapln\u00e1 aktualiz\u00e1cia<\/strong><\/h3>\n<p>\nV s\u00fa\u010dasnosti sa \u00fapln\u00e1 aktualiz\u00e1cia obrazu softv\u00e9ru ovl\u00e1da\u010da vykon\u00e1va rovnako ako funk\u010dn\u00e1, teda bez v\u00fdpadkov. Av\u0161ak t\u00e1to mo\u017enos\u0165 je k dispoz\u00edcii iba v klastrov\u00fdch konfigur\u00e1ci\u00e1ch, kde je viac ako jeden ovl\u00e1da\u010d. \u00dapln\u00e1 aktualiz\u00e1cia sa vykon\u00e1va sekven\u010dne: najprv na jednom ovl\u00e1da\u010di, potom na druhom.<\/p>\n<h3><strong>Pridanie nov\u00e9ho modelu pr\u00edstupov\u00e9ho bodu<\/strong><\/h3>\n<p>\nPripojenie nov\u00fdch pr\u00edstupov\u00fdch bodov, ktor\u00e9 predt\u00fdm neboli prev\u00e1dzkovan\u00e9 s pou\u017e\u00edvan\u00fdm obrazom softv\u00e9ru ovl\u00e1da\u010da, k bezdr\u00f4tovej sieti je pomerne \u010dastou oper\u00e1ciou, najm\u00e4 vo ve\u013ek\u00fdch sie\u0165ach (letisk\u00e1, hotely, v\u00fdrobn\u00e9 z\u00e1vody). Pomerne \u010dasto si v rie\u0161eniach konkurentov t\u00e1to oper\u00e1cia vy\u017eaduje aktualiz\u00e1ciu syst\u00e9mov\u00e9ho softv\u00e9ru alebo re\u0161tartovanie ovl\u00e1da\u010dov.<\/p>\n<p>Pri pripojen\u00ed nov\u00fdch pr\u00edstupov\u00fdch bodov Wi-Fi 6 ku klastrom ovl\u00e1da\u010dov Cisco Catalyst s\u00e9rie 9800 sa tak\u00e9to probl\u00e9my nevyskytuj\u00fa. Pripojenie nov\u00fdch bodov k ovl\u00e1da\u010du prebieha bez aktualiz\u00e1ci\u00ed softv\u00e9ru ovl\u00e1da\u010da, a tento proces si nevy\u017eaduje re\u0161tartovanie, \u010d\u00edm sa nijako neovplyv\u0148uje bezdr\u00f4tov\u00e1 sie\u0165.<\/p>\n<h3><strong>Zlyhanie ovl\u00e1da\u010da<\/strong><\/h3>\n<p>\nV testovacom prostred\u00ed sa pou\u017e\u00edvaj\u00fa dva ovl\u00e1da\u010de (Akt\u00edvny \/ Z\u00e1lo\u017en\u00fd) Wi-Fi 6 a pr\u00edstupov\u00fd bod m\u00e1 priamu konektivitu s oboma ovl\u00e1da\u010dmi.<\/p>\n<p>Jeden bezdr\u00f4tov\u00fd ovl\u00e1da\u010d je akt\u00edvny, zatia\u013e \u010do druh\u00fd je z\u00e1lo\u017en\u00fd. Pri zlyhan\u00ed akt\u00edvneho ovl\u00e1da\u010da preber\u00e1 kontrolu z\u00e1lo\u017en\u00fd ovl\u00e1da\u010d a jeho stav sa men\u00ed na akt\u00edvny. Tento proces prebieha bez preru\u0161enia pre pr\u00edstupov\u00fd bod a Wi-Fi pre klientov.<\/p>\n<h2><strong>Bezpe\u010dnos\u0165<\/strong><\/h2>\n<p>\nV tejto \u010dasti sa zaober\u00e1me aspektmi zabezpe\u010denia, ktor\u00e9 je v bezdr\u00f4tov\u00fdch sie\u0165ach mimoriadne aktu\u00e1lnou \u00falohou. Zabezpe\u010denie rie\u0161enia sa hodnot\u00ed pod\u013ea nasleduj\u00facich charakterist\u00edk:<\/p>\n<ul>\n<li>Rozpozn\u00e1vanie aplik\u00e1ci\u00ed;<\/li>\n<li>Sledovanie toku prenosu (Flow tracking);<\/li>\n<li>Anal\u00fdza \u0161ifrovan\u00e9ho prenosu;<\/li>\n<li>Detekcia a prevencia vniknutia;<\/li>\n<li>Prostriedky autentifik\u00e1cie;<\/li>\n<li>Ochrana z\u00e1kazn\u00edckych zariaden\u00ed.<\/li>\n<\/ul>\n<p><\/p>\n<h3><strong>Rozpozn\u00e1vanie aplik\u00e1ci\u00ed<\/strong><\/h3>\n<p>\nMedzi r\u00f4znymi produktmi na trhu podnikov\u00fdch a priemyseln\u00fdch Wi-Fi existuj\u00fa rozdiely v tom, ako dobre produkty identifikuj\u00fa prenos na z\u00e1klade aplik\u00e1ci\u00ed. Produkty r\u00f4znych v\u00fdrobcov m\u00f4\u017eu identifikova\u0165 r\u00f4zne mno\u017estvo aplik\u00e1ci\u00ed. Mnoh\u00e9 z aplik\u00e1ci\u00ed, ktor\u00e9 s\u00fa uveden\u00e9 u konkurentov ako mo\u017en\u00e9 na identifik\u00e1ciu, s\u00fa v skuto\u010dnosti webov\u00e9 str\u00e1nky, nie jedine\u010dn\u00e9 aplik\u00e1cie.<\/p>\n<p>Existuje aj \u010fal\u0161ia zauj\u00edmav\u00e1 vlastnos\u0165 rozpozn\u00e1vania aplik\u00e1ci\u00ed: rie\u0161enia sa zna\u010dne l\u00ed\u0161ia v presnosti identifik\u00e1cie.<\/p>\n<p>Ber\u00fac do \u00favahy v\u0161etky vykonan\u00e9 testy, m\u00f4\u017eeme zodpovedne poveda\u0165, \u017ee Wi-Fi-6 rie\u0161enie Cisco vykon\u00e1va rozpozn\u00e1vanie aplik\u00e1ci\u00ed ve\u013emi presne: presne boli identifikovan\u00e9 aplik\u00e1cie ako Jabber, Netflix, Dropbox, YouTube a in\u00e9 popul\u00e1rne aplik\u00e1cie, rovnako ako webov\u00e9 slu\u017eby. Rie\u0161enia Cisco m\u00f4\u017eu tie\u017e hlb\u0161ie prenikn\u00fa\u0165 do d\u00e1tov\u00fdch paketov pomocou DPI (Deep Packet Inspection).<\/p>\n<h3><strong>Sledovanie prenosu d\u00e1t<\/strong><\/h3>\n<p>\nBol vykonan\u00fd \u010fal\u0161\u00ed test, aby sa zistilo, \u010di m\u00f4\u017ee syst\u00e9m presne sledova\u0165 a hl\u00e1si\u0165 prenos d\u00e1t (napr\u00edklad pohyb ve\u013ek\u00fdch s\u00faborov). Na overenie tohto bol po sieti odoslan\u00fd s\u00fabor s ve\u013ekos\u0165ou 6,5 megabajtu prostredn\u00edctvom protokolu prenosu s\u00faborov (FTP).<\/p>\n<p>Rie\u0161enie Cisco si s \u00falohou plne poradilo a dok\u00e1zalo sledova\u0165 tento prenos v\u010faka NetFlow a svojim hardv\u00e9rov\u00fdm schopnostiam. Prenos bol okam\u017eite detegovan\u00fd a identifikovan\u00fd s presn\u00fdm objemom prenesen\u00fdch d\u00e1t.<\/p>\n<h3><strong>Anal\u00fdza \u0161ifrovan\u00e9ho prenosu<\/strong><\/h3>\n<p>\nPrenos pou\u017e\u00edvate\u013esk\u00fdch d\u00e1t je \u010doraz \u010dastej\u0161ie \u0161ifrovan\u00fd. Je to uroben\u00e9 s cie\u013eom chr\u00e1ni\u0165 ho pred sledovan\u00edm alebo zachyt\u00e1van\u00edm zlomyse\u013en\u00fdmi akt\u00e9rmi. Av\u0161ak spolu s t\u00fdm, hackeri \u010doraz \u010dastej\u0161ie pou\u017e\u00edvaj\u00fa \u0161ifrovanie na skrytie svojich malv\u00e9rov a vykon\u00e1vanie in\u00fdch sporn\u00fdch oper\u00e1ci\u00ed, ako s\u00fa \u00fatoky typu Man-in-the-Middle (MiTM) alebo napr\u00edklad \u00fatoky s pou\u017eit\u00edm keylogovania.<\/p>\n<p>V\u00e4\u010d\u0161ina podnikov kontroluje \u010das\u0165 \u0161ifrovan\u00e9ho prenosu najprv jeho de\u0161ifrovan\u00edm prostredn\u00edctvom firewallov alebo syst\u00e9mov na detekciu naru\u0161en\u00ed. Tento proces je v\u0161ak \u010dasovo n\u00e1ro\u010dn\u00fd a neprospieva celkovej v\u00fdkonnosti siete. Navy\u0161e, po de\u0161ifrovan\u00ed sa tieto d\u00e1ta st\u00e1vaj\u00fa zranite\u013en\u00fdmi vo\u010di zvedav\u00fdm o\u010diam.<\/p>\n<p>Cisco Catalyst s\u00e9rie 9800 \u00faspe\u0161ne rie\u0161ia anal\u00fdzu \u0161ifrovan\u00e9ho prenosu prostredn\u00edctvom in\u00fdch prostriedkov. Rie\u0161enie sa naz\u00fdva Encrypted Traffic Analytics (ETA). ETA je technol\u00f3gia, ktor\u00e1 nem\u00e1 v s\u00fa\u010dasnosti konkurenciu a dok\u00e1\u017ee odhali\u0165 \u0161kodliv\u00fd softv\u00e9r v \u0161ifrovanom prenosu bez potreby jeho de\u0161ifrovania. ETA je z\u00e1kladn\u00e1 funkcia IOS-XE, ktor\u00e1 zah\u0155\u0148a Enhanced NetFlow a vyu\u017e\u00edva pokro\u010dil\u00e9 behavior\u00e1lne algoritmy na identifik\u00e1ciu \u0161kodliv\u00fdch vzorov prenosu skr\u00fdvaj\u00facich sa v \u0161ifrovanom prenose.<\/p>\n<p><img decoding=\"async\" alt=\"Existuje kontrol\u00e9r \u2013 niet probl\u00e9mov: ako jednoducho udr\u017eiava\u0165 pr\u00e1cu bezdr\u00f4tovej siete\" src=\"\/wp-content\/uploads\/2020\/07\/02b0c737b6482cede84e9d6347c7d977.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nETA neod\u0161ifruje spr\u00e1vy, ale zbiera profily metad\u00e1t \u0161ifrovan\u00fdch prenosov \u2013 ve\u013ekos\u0165 paketov, \u010dasov\u00e9 intervaly medzi paketmi a mnoh\u00e9 \u010fal\u0161ie. Potom sa metad\u00e1ta exportuj\u00fa do z\u00e1znamov NetFlow v9 do Cisco Stealthwatch.<\/p>\n<p>K\u013e\u00fa\u010dovou funkciou Stealthwatch je neust\u00e1ly monitoring prenosu a vytv\u00e1ranie z\u00e1kladn\u00fdch ukazovate\u013eov norm\u00e1lnej sie\u0165ovej aktivity. Pomocou metad\u00e1t \u0161ifrovan\u00e9ho prenosu, ktor\u00e9 mu ETA posiela, Stealthwatch aplikuje viacer\u00e9 \u00farovne strojov\u00e9ho u\u010denia na identifik\u00e1ciu behavior\u00e1lnych anom\u00e1li\u00ed v prenose, ktor\u00e9 m\u00f4\u017eu nazna\u010dova\u0165 podozriv\u00e9 udalosti.<\/p>\n<p>Minul\u00fd rok Cisco anga\u017eovalo Miercom na nez\u00e1visl\u00e9 hodnotenie rie\u0161enia Cisco Encrypted Traffic Analytics. Po\u010das tejto evalu\u00e1cie Miercom samostatne posielal zn\u00e1me a nezn\u00e1me hrozby (v\u00edrusy, tr\u00f3jske kone, ransomware) v \u0161ifrovanom a ne\u0161ifrovanom prenose cez ve\u013ek\u00e9 ETA a ne-ETA siete, aby identifikoval hrozby.<\/p>\n<p>Na testovanie bol spusten\u00fd \u0161kodliv\u00fd k\u00f3d v oboch sie\u0165ach. V oboch pr\u00edpadoch sa podozriv\u00e1 aktivita postupne odha\u013eovala. V ETA sieti boli hrozby odha\u013eovan\u00e9 u\u017e o 36 % r\u00fdchlej\u0161ie na za\u010diatku, ne\u017e v ne-ETA sieti. Po\u010das prev\u00e1dzky sa produktivita detekcie v ETA sieti za\u010dala zvy\u0161ova\u0165. Nakoniec po nieko\u013ek\u00fdch hodin\u00e1ch bolo v ETA sieti \u00faspe\u0161ne odhalen\u00fdch dve tretiny akt\u00edvnych hrozieb, \u010do je dvojn\u00e1sobok porovnate\u013en\u00e9ho ukazovate\u013ea v ne-ETA sieti.<\/p>\n<p>Funkcionalita ETA je dobre integrovan\u00e1 so Stealthwatch. Hrozby s\u00fa hodnoten\u00e9 pod\u013ea z\u00e1va\u017enosti, zobrazuj\u00fa sa s podrobn\u00fdmi inform\u00e1ciami a mo\u017enos\u0165ami n\u00e1pravy po potvrden\u00ed. Z\u00e1ver \u2013 ETA funguje!<\/p>\n<h3><strong>Detekcia a prevencia naru\u0161en\u00ed<\/strong><\/h3>\n<p>\nCisco teraz disponuje \u010fal\u0161\u00edm efekt\u00edvnym n\u00e1strojom na zabezpe\u010denie \u2014 Cisco Advanced Wireless Intrusion Prevention System (aWIPS): mechanizmus detekcie a prevencie hrozieb pre bezdr\u00f4tov\u00e9 siete. Rie\u0161enie aWIPS funguje na \u00farovni ovl\u00e1da\u010dov, pr\u00edstupov\u00fdch bodov a softv\u00e9ru Cisco DNA Center. Proces detekcie, upozornenia a prevencie hrozieb kombinuje anal\u00fdzu sie\u0165ovej prev\u00e1dzky, inform\u00e1cie o sie\u0165ov\u00fdch zariadeniach a sie\u0165ovej topol\u00f3gii, met\u00f3dy zalo\u017een\u00e9 na podpisov a detekciu anom\u00e1li\u00ed, \u010d\u00edm nakoniec zabezpe\u010duje vysok\u00fa presnos\u0165 a prevenciu hrozieb bezdr\u00f4tovej siete.<\/p>\n<p>Pln\u00e1 integr\u00e1cia aWIPS do sie\u0165ovej infra\u0161trukt\u00fary umo\u017e\u0148uje nepretr\u017eit\u00e9 sledovanie bezdr\u00f4tovej prev\u00e1dzky vo veden\u00fdch aj bezdr\u00f4tov\u00fdch sie\u0165ach a jej vyu\u017eitie na automatizovan\u00fa anal\u00fdzu potenci\u00e1lnych \u00fatokov z mnoh\u00fdch zdrojov, aby sa \u010do najkomplexnej\u0161ie ur\u010dovali a zabra\u0148ovali mo\u017en\u00fdm \u00fatokom.<\/p>\n<h3><strong>Prostriedky autentifik\u00e1cie<\/strong><\/h3>\n<p>\nV s\u00fa\u010dasnosti, okrem klasick\u00fdch prostriedkov autentifik\u00e1cie, pon\u00fakaj\u00fa rie\u0161enia Cisco Catalyst s\u00e9rie 9800 podporu WPA3. WPA3 je najnov\u0161ia verzia WPA, ktor\u00e1 predstavuje s\u00fabor protokolov a technol\u00f3gi\u00ed zabezpe\u010duj\u00facich autentifik\u00e1ciu a \u0161ifrovanie pre siete Wi-Fi.<\/p>\n<p>WPA3 pou\u017e\u00edva met\u00f3du s\u00fa\u010dasnej autentifik\u00e1cie rovnocenn\u00fdch prvkov (SAE \u2014 Simultaneous Authentication of Equals), ktor\u00e1 poskytuje najvy\u0161\u0161iu ochranu pou\u017e\u00edvate\u013eov pred pokusmi o uh\u00e1dnutie hesla tre\u0165ou stranou. Ke\u010f sa klient pripoj\u00ed k pr\u00edstupov\u00e9mu bodu, vykon\u00e1va v\u00fdmenu SAE. V pr\u00edpade \u00faspechu ka\u017ed\u00fd z nich vytvor\u00ed kryptograficky spo\u013eahliv\u00fd k\u013e\u00fa\u010d, z ktor\u00e9ho sa vytvor\u00ed k\u013e\u00fa\u010d rel\u00e1cie, a potom prech\u00e1dzaj\u00fa do stavu potvrdenia. Po tom klient a pr\u00edstupov\u00fd bod m\u00f4\u017eu prech\u00e1dza\u0165 do stavov potvrdenia zaka\u017ed\u00fdm, ke\u010f je potrebn\u00e9 vygenerova\u0165 k\u013e\u00fa\u010d rel\u00e1cie. Met\u00f3da pou\u017e\u00edva priamu tajnos\u0165, pri ktorej \u00fato\u010dn\u00edk m\u00f4\u017ee zlomi\u0165 jeden k\u013e\u00fa\u010d, ale nie v\u0161etky ostatn\u00e9 k\u013e\u00fa\u010de.<\/p>\n<p>To znamen\u00e1, \u017ee SAE je postaven\u00e9 tak, \u017ee \u00fato\u010dn\u00edk, ktor\u00fd zachyt\u00e1va prev\u00e1dzku, m\u00e1 len jeden pokus na uh\u00e1dnutie hesla, sk\u00f4r ne\u017e sa zachyten\u00e9 \u00fadaje stan\u00fa bezcenn\u00fdmi. Na dlhodob\u00e9 h\u00e1danie hesla by bol potrebn\u00fd fyzick\u00fd pr\u00edstup k pr\u00edstupov\u00e9mu bodu.<\/p>\n<h3><strong>Prostriedky ochrany klientskych zariaden\u00ed<\/strong><\/h3>\n<p>\nHlavn\u00fdm prostriedkom ochrany klientov vo bezdr\u00f4tov\u00fdch rie\u0161eniach Cisco Catalyst s\u00e9rie 9800 je moment\u00e1lne Cisco Umbrella WLAN \u2013 cloudov\u00e1 slu\u017eba sie\u0165ovej bezpe\u010dnosti, ktor\u00e1 funguje na \u00farovni DNS s automatick\u00fdm zis\u0165ovan\u00edm zn\u00e1mych aj nov\u00fdch hrozieb.<\/p>\n<p>Cisco Umbrella WLAN poskytuje klientsk\u00fdm zariadeniam zabezpe\u010den\u00e9 pripojenie na Internet. To sa dosahuje pomocou filtrovania obsahu, t.j. blokovan\u00edm pr\u00edstupu k zdrojom na internete pod\u013ea politiky podniku. T\u00fdmto sp\u00f4sobom sa chr\u00e1ni spr\u00e1vnos\u0165 klientsk\u00fdch zariaden\u00ed v internete pred malv\u00e9rom, ransomv\u00e9rom a phishingom. Pou\u017e\u00edvanie polit\u00edk je zalo\u017een\u00e9 na 60 nepretr\u017eite aktualizovan\u00fdch kateg\u00f3ri\u00e1ch obsahu.<\/p>\n<h2><strong>Automatiz\u00e1cia<\/strong><\/h2>\n<p>\nModern\u00e9 bezdr\u00f4tov\u00e9 siete s\u00fa ove\u013ea flexibilnej\u0161ie a komplexnej\u0161ie, preto tradi\u010dn\u00e9 met\u00f3dy konfigur\u00e1cie a z\u00edskavania inform\u00e1ci\u00ed z bezdr\u00f4tov\u00fdch kontrol\u00e9rov nesta\u010dia. Sie\u0165ov\u00fdm administr\u00e1torom a \u0161pecialistom na informa\u010dn\u00fa bezpe\u010dnos\u0165 s\u00fa potrebn\u00e9 n\u00e1stroje na automatiz\u00e1ciu a anal\u00fdzu, \u010do n\u00fati v\u00fdrobcov rie\u0161en\u00ed pre bezdr\u00f4tov\u00e9 siete pon\u00faka\u0165 tieto n\u00e1stroje.<\/p>\n<p>Na rie\u0161enie t\u00fdchto \u00faloh v bezdr\u00f4tov\u00fdch kontrol\u00e9roch Cisco Catalyst s\u00e9rie 9800 je okrem tradi\u010dn\u00fdch API predpokladan\u00e1 podpora protokolu konfigur\u00e1cie siete RESTCONF \/ NETCONF s jazykom modelovania d\u00e1t YANG (Yet Another Next Generation).<\/p>\n<p>NETCONF je protokol zalo\u017een\u00fd na XML, ktor\u00fd m\u00f4\u017eu aplik\u00e1cie pou\u017ei\u0165 na po\u017eiadanie o inform\u00e1cie a zmenu konfigur\u00e1cie sie\u0165ov\u00fdch zariaden\u00ed, ako s\u00fa bezdr\u00f4tov\u00e9 kontrol\u00e9ry.<\/p>\n<p>Okrem t\u00fdchto met\u00f3d v kontrol\u00e9roch Cisco Catalyst s\u00e9rie 9800 bola implementovan\u00e1 schopnos\u0165 z\u00edskava\u0165, filtrova\u0165 a analyzova\u0165 \u00fadaje o toku inform\u00e1ci\u00ed pomocou protokolu NetFlow a sFlow.<\/p>\n<p>Na zabezpe\u010denie bezpe\u010dnosti a modelovanie prev\u00e1dzky je schopnos\u0165 sledova\u0165 konkr\u00e9tne toky cenn\u00fdm n\u00e1strojom. Na rie\u0161enie tejto \u00falohy bol implementovan\u00fd protokol sFlow, ktor\u00fd umo\u017e\u0148uje zachyti\u0165 dva pakety z ka\u017ed\u00fdch sto. Av\u0161ak niekedy to m\u00f4\u017ee by\u0165 nedostato\u010dn\u00e9 na anal\u00fdzu a adekv\u00e1tne \u0161t\u00fadium a hodnotenie toku. Preto alternat\u00edvou je NetFlow, ktor\u00fd bol implementovan\u00fd spolo\u010dnos\u0165ou Cisco a ktor\u00fd umo\u017e\u0148uje 100% zber a export v\u0161etk\u00fdch paketov v ur\u010denom toku na n\u00e1sledn\u00fa anal\u00fdzu.<\/p>\n<p>\u010eal\u0161ou funkciou, pravda, dostupnou len v hardv\u00e9rovej implement\u00e1cii ovl\u00e1dac\u00edch prvkov, ktor\u00e1 umo\u017e\u0148uje automatizova\u0165 pr\u00e1cu bezdr\u00f4tovej siete v ovl\u00e1da\u010doch Cisco Catalyst s\u00e9rie 9800, je vstavan\u00e1 podpora programovacieho jazyka Python ako nadstavby na pou\u017e\u00edvanie skriptov priamo na samotnom bezdr\u00f4tovom ovl\u00e1da\u010di.<\/p>\n<p>A nakoniec, pre oper\u00e1cie monitorovania a spr\u00e1vy v ovl\u00e1da\u010doch Cisco Catalyst s\u00e9rie 9800 sa podporuje osved\u010den\u00fd protokol SNMP verzi\u00ed 1, 2 a 3.<\/p>\n<p>T\u00fdm p\u00e1dom, v oblasti automatiz\u00e1cie, rie\u0161enia Cisco Catalyst s\u00e9rie 9800 plne sp\u013a\u0148aj\u00fa modern\u00e9 po\u017eiadavky biznisu, pon\u00fakaj\u00face ako nov\u00e9 a unik\u00e1tne, tak aj osved\u010den\u00e9 n\u00e1stroje na automatizovan\u00e9 vykon\u00e1vanie oper\u00e1ci\u00ed a analytiku v bezdr\u00f4tov\u00fdch sie\u0165ach akejko\u013evek ve\u013ekosti a zlo\u017eitosti.<\/p>\n<h2><strong>Z\u00e1ver<\/strong><\/h2>\n<p>\nV rie\u0161eniach zalo\u017een\u00fdch na ovl\u00e1da\u010doch Cisco Catalyst s\u00e9rie 9800 spolo\u010dnos\u0165 Cisco preuk\u00e1zala vynikaj\u00face v\u00fdsledky v kateg\u00f3ri\u00e1ch: vysok\u00e1 dostupnos\u0165, bezpe\u010dnos\u0165 a automatiz\u00e1cia.<\/p>\n<p>Rie\u0161enie plne uspokojuje v\u0161etky po\u017eiadavky na vysok\u00fa dostupnos\u0165, ako s\u00fa havarijn\u00e9 prep\u00ednanie za menej ako sekundu pri nepl\u00e1novan\u00fdch udalostiach a nulov\u00e1 doba prestoja pre pl\u00e1novan\u00e9 udalosti.<\/p>\n<p>V ovl\u00e1da\u010doch Cisco Catalyst s\u00e9rie 9800 je realizovan\u00e1 komplexn\u00e1 ochrana, ktor\u00e1 zabezpe\u010duje hlbok\u00fa kontrolu paketov na rozpozn\u00e1vanie aplik\u00e1ci\u00ed a ich spr\u00e1vu, \u00fapln\u00fa transparentnos\u0165 d\u00e1tov\u00fdch tokov a identifik\u00e1ciu hrozieb skryt\u00fdch v za\u0161ifrovanom prenose, a tie\u017e s\u00fa pou\u017eit\u00e9 pokro\u010dil\u00e9 mechanizmy autentifik\u00e1cie a ochrany koncov\u00fdch zariaden\u00ed.<\/p>\n<p>Pre automatiz\u00e1ciu oper\u00e1ci\u00ed a analytiku, rie\u0161enia Cisco Catalyst s\u00e9rie 9800 disponuj\u00fa \u0161irok\u00fdmi mo\u017enos\u0165ami, vyu\u017e\u00edvaj\u00fac ob\u013e\u00faben\u00e9 \u0161tandardn\u00e9 modely: YANG, NETCONF, RESTCONF, tradi\u010dn\u00e9 API rozhrania a vstavan\u00e9 skripty Python.<\/p>\n<p>Tak spolo\u010dnos\u0165 Cisco op\u00e4\u0165 potvrdzuje svoj status popredn\u00e9ho svetov\u00e9ho v\u00fdrobcu sie\u0165ov\u00fdch rie\u0161en\u00ed, ktor\u00fd dr\u017e\u00ed krok s dobou a zoh\u013ead\u0148uje v\u0161etky v\u00fdzvy modern\u00e9ho biznisu.<\/p>\n<p>Podrobnej\u0161ie inform\u00e1cie o rodine prep\u00edna\u010dov Catalyst n\u00e1jdete na <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/ru_ru\/solutions\/enterprise-networks\/catalyst-9000.html?dtid=oblgotr000654\"> webe<\/a><\/noindex> Cisco.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cisco\/blog\/512220\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800. \u0414\u043b\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u044b\u043b \u0441\u043e\u0431\u0440\u0430\u043d \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0439 \u0441\u0442\u0435\u043d\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Wi-Fi 6 \u043e\u0442 Cisco, \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u0445: \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c; \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c; \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0438\u0436\u0435. \u0421 2019 \u0433\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89702,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0415\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u2013 \u043d\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043a\u0430\u043a \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-25T11:42:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-25T11:42:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00e1te ovl\u00e1da\u010d \u2013 nem\u00e1te probl\u00e9m: ako jednoducho udr\u017eiava\u0165 bezdr\u00f4tov\u00fa sie\u0165 | ProHoster","description":"V roku 2019 realizovala konzulta\u010dn\u00e1 spolo\u010dnos\u0165 Miercom nez\u00e1visl\u00fa technologick\u00fa hodnotenie Wi-Fi 6 ovl\u00e1da\u010dov Cisco Catalyst s\u00e9rie 9800.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0415\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u2013 \u043d\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043a\u0430\u043a \u0441 \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 | ProHoster","og:description":"\u0412 2019 \u0433\u043e\u0434\u0443 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Miercom \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 Wi-Fi 6 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/est-kontroller-net-problem-kak-s-legkostyu-podderzhivat-rabotu-besprovodnoj-seti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-25T11:42:16+00:00","article:modified_time":"2020-07-25T11:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89699","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:06:29","updated":"2022-09-30 17:31:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/89699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=89699"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/89699\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/89702"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=89699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=89699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=89699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}