{"id":92780,"date":"2020-08-30T19:42:10","date_gmt":"2020-08-30T17:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity"},"modified":"2020-08-30T19:42:10","modified_gmt":"2020-08-30T17:42:10","slug":"osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","title":{"rendered":"Vlastnosti ochrany bezdr\u00f4tov\u00fdch a pevne pripojen\u00fdch siet\u00ed. \u010cas\u0165 2 \u2014 Nepriame met\u00f3dy ochrany","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Vlastnosti ochrany bezdr\u00f4tov\u00fdch a pevne pripojen\u00fdch siet\u00ed. \u010cas\u0165 2 \u2014 Nepriame met\u00f3dy ochrany\" src=\"\/wp-content\/uploads\/2020\/08\/98625bbefd1ce79a419ec724562d3969.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Pokra\u010dujeme v diskusii o met\u00f3dach zvy\u0161ovania bezpe\u010dnosti siet\u00ed. V tomto \u010dl\u00e1nku sa budeme rozpr\u00e1va\u0165 o \u010fal\u0161\u00edch bezpe\u010dnostn\u00fdch opatreniach a organiz\u00e1cii lep\u0161ie chr\u00e1nen\u00fdch bezdr\u00f4tov\u00fdch siet\u00ed.<\/em><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p><\/p>\n<h2 id=\"predislovie-ko-vtoroy-chasti\">Predslov k druhej \u010dasti<\/h2>\n<p><\/p>\n<p>V predch\u00e1dzaj\u00facom \u010dl\u00e1nku <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/516508\/\"><strong>\u201eVlastnosti ochrany bezdr\u00f4tov\u00fdch a pevne pripojen\u00fdch siet\u00ed. \u010cas\u0165 1 \u2014 Priame met\u00f3dy ochrany\u201c<\/strong><\/a><\/noindex> sme sa zaoberali probl\u00e9mami bezpe\u010dnosti siete WiFi a priamymi met\u00f3dami ochrany pred neopr\u00e1vnen\u00fdm pr\u00edstupom. Boli presk\u00faman\u00e9 o\u010dividn\u00e9 opatrenia na prevenciu odchytu d\u00e1tov\u00e9ho prenosu: \u0161ifrovanie, skr\u00fdvanie siete a filtrovanie pod\u013ea MAC, ako aj \u0161peci\u00e1lne met\u00f3dy, ako napr\u00edklad boj proti Rogue AP. Av\u0161ak okrem priamych sp\u00f4sobov ochrany existuj\u00fa aj nepriame. Ide o technol\u00f3gie, ktor\u00e9 nielen pom\u00e1haj\u00fa zlep\u0161i\u0165 kvalitu spojenia, ale aj dodato\u010dne prispievaj\u00fa k zv\u00fd\u0161eniu ochrany.<\/p>\n<p><\/p>\n<p>Dve hlavn\u00e9 vlastnosti bezdr\u00f4tov\u00fdch siet\u00ed: vzdialen\u00fd bezkontaktn\u00fd pr\u00edstup a r\u00e1diov\u00fd vzduch ako vysielacie prostredie na prenos d\u00e1t, kde m\u00f4\u017ee ak\u00fdko\u013evek prij\u00edma\u010d sign\u00e1lu odpo\u010d\u00fava\u0165 ef\u00edr a ak\u00fdko\u013evek vysiela\u010d m\u00f4\u017ee zahlcova\u0165 sie\u0165 nepodstatn\u00fdmi prenosmi a jednoducho r\u00e1diov\u00fdmi ru\u0161eniami. To, mimo in\u00e9ho, negat\u00edvne ovplyv\u0148uje celkov\u00fa bezpe\u010dnos\u0165 bezdr\u00f4tovej siete.<\/p>\n<p><\/p>\n<p>Sami nepre\u017eijete len s bezpe\u010dnos\u0165ou. \u010clovek mus\u00ed aj pracova\u0165, teda vymie\u0148a\u0165 si d\u00e1ta. A z tejto strany m\u00e1 WiFi mno\u017estvo \u010fal\u0161\u00edch nedostatkov:<\/p>\n<p><\/p>\n<ul>\n<li>medzery v pokryt\u00ed (\u201ebiele miesta\u201c);<\/li>\n<li>vplyv vonkaj\u0161\u00edch zdrojov a susedn\u00fdch pr\u00edstupov\u00fdch bodov navz\u00e1jom.<\/li>\n<\/ul>\n<p><\/p>\n<p>V d\u00f4sledku vy\u0161\u0161ie uveden\u00fdch probl\u00e9mov sa zni\u017euje kvalita sign\u00e1lu, spojenie str\u00e1ca stabilitu a kles\u00e1 r\u00fdchlos\u0165 v\u00fdmeny d\u00e1t.<\/p>\n<p><\/p>\n<p>Samozrejme, fan\u00fa\u0161ikovia pevne pripojen\u00fdch siet\u00ed s rados\u0165ou poznamenaj\u00fa, \u017ee pri pou\u017eit\u00ed k\u00e1blov\u00fdch a, e\u0161te viac, optick\u00fdch spojen\u00ed sa s tak\u00fdmito probl\u00e9mami nestret\u00e1vaj\u00fa.<\/p>\n<p><\/p>\n<p>Vyn\u00e1ra sa ot\u00e1zka: d\u00e1 sa nejak\u00fdm sp\u00f4sobom vyrie\u0161i\u0165 tieto probl\u00e9my, bez toho, aby sme museli siahnu\u0165 po radik\u00e1lnych opatreniach ako prepojenie v\u0161etk\u00fdch nespokojn\u00fdch na pevn\u00fa sie\u0165?<\/p>\n<p><\/p>\n<h2 id=\"gde-nachalo-vseh-problem\">Kde sa za\u010d\u00edna v\u0161etko zl\u00e9?<\/h2>\n<p><\/p>\n<p>Na za\u010diatku vzniku kancel\u00e1rskych a in\u00fdch WiFi siet\u00ed sa spravidla postupovalo pod\u013ea jednoduch\u00e9ho algoritmu: umiestnila sa jedin\u00e1 pr\u00edstupov\u00e1 bod v strede perimetru s cie\u013eom maxim\u00e1lneho pokrytia. Ak pre vzdialen\u00e9 oblasti sign\u00e1l nesta\u010dil, k pr\u00edstupov\u00e9mu bodu sa pridala zosil\u0148uj\u00faca ant\u00e9na. Ve\u013emi zriedka sa prid\u00e1vala druh\u00e1 pr\u00edstupov\u00e1 bod, napr\u00edklad pre vzdialen\u00fa riadite\u013esk\u00fa kancel\u00e1riu. A to je asi v\u0161etko zdokonalenie.<\/p>\n<p><\/p>\n<p>Tento pr\u00edstup mal svoje d\u00f4vody. Po prv\u00e9, na po\u010diatku vzniku bezdr\u00f4tov\u00fdch siet\u00ed bolo vybavenie pre ne drah\u00e9. Po druh\u00e9, nain\u0161talova\u0165 viac pr\u00edstupov\u00fdch bodov znamenalo \u010deli\u0165 ot\u00e1zkam, na ktor\u00e9 vtedy neboli odpovede. Napr\u00edklad, ako organizova\u0165 bezprobl\u00e9mov\u00e9 prep\u00ednanie klienta medzi bodmi? Ako bojova\u0165 s vz\u00e1jomnou interferenciou? Ako zjednodu\u0161i\u0165 a usporiada\u0165 spr\u00e1vu pr\u00edstupov\u00fdch bodov, napr\u00edklad s\u00fa\u010dasn\u00fdm uplat\u0148ovan\u00edm z\u00e1kazov \/ povolen\u00ed, monitorovanie a tak \u010falej. Preto bolo ove\u013ea jednoduch\u0161ie postupova\u0165 pod\u013ea princ\u00edpu: \u010d\u00edm menej zariaden\u00ed, t\u00fdm lep\u0161ie.<\/p>\n<p><\/p>\n<p>Z\u00e1rove\u0148 pr\u00edstupov\u00fd bod umiestnen\u00fd pod stropom vysielal pod\u013ea obvodov\u00e9ho (presnej\u0161ie povedan\u00e9, okr\u00fahleho) diagramu.<\/p>\n<p><\/p>\n<p>Av\u0161ak formy architektonick\u00fdch stavieb sa do okr\u00fahlych diagramov \u0161\u00edrenia sign\u00e1lu ve\u013emi dobre nezapadaj\u00fa. Preto niekde sign\u00e1l takmer nedosiahne a mus\u00ed sa zosil\u0148ova\u0165, zatia\u013e \u010do inde vysielanie prekra\u010duje hranice perimetra a st\u00e1va sa dostupn\u00fdm pre cudz\u00edch.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vlastnosti ochrany bezdr\u00f4tov\u00fdch a pevne pripojen\u00fdch siet\u00ed. \u010cas\u0165 2 \u2014 Nepriame met\u00f3dy ochrany\" src=\"\/wp-content\/uploads\/2020\/08\/0020ab189634ee1e0b5fdb8b783d60da.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zok 1. Pr\u00edklad pokrytia pri pou\u017eit\u00ed jedin\u00e9ho bodu v kancel\u00e1rii.<\/em><\/p>\n<p><\/p>\n<p><em><strong>Pozn\u00e1mka<\/strong>. Ide o hrub\u00e9 pribl\u00ed\u017eenie, v ktorom sa nezoh\u013ead\u0148uj\u00fa prek\u00e1\u017eky pre \u0161\u00edrenie, ani smer sign\u00e1lu. V praxi sa formy diagramov pre r\u00f4zne modely pr\u00edstupov\u00fdch bodov m\u00f4\u017eu l\u00ed\u0161i\u0165.<\/em><\/p>\n<p><\/p>\n<p>Situ\u00e1ciu je mo\u017en\u00e9 zlep\u0161i\u0165, ak sa pou\u017eije viac pr\u00edstupov\u00fdch bodov.<\/p>\n<p><\/p>\n<p>Po prv\u00e9, to umo\u017en\u00ed efekt\u00edvnej\u0161ie rozmiestni\u0165 vysielacie zariadenia po ploche miestnosti.<\/p>\n<p><\/p>\n<p>Po druh\u00e9, objav\u00ed sa mo\u017enos\u0165 zn\u00ed\u017ei\u0165 \u00farove\u0148 sign\u00e1lu, aby sa nedostal mimo hranice kancel\u00e1rie alebo in\u00e9ho objektu. Tak v tomto pr\u00edpade, aby sa zaznamenal bezdr\u00f4tov\u00fd prenos, je potrebn\u00e9 takmer pribl\u00ed\u017ei\u0165 sa k perimetru alebo dokonca vst\u00fapi\u0165 do jeho hran\u00edc. Pribli\u017ene takto \u010din\u00ed \u00fato\u010dn\u00edk, aby sa vkl\u00ednil do vn\u00fatornej k\u00e1blovej siete.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Vlastnosti ochrany bezdr\u00f4tov\u00fdch a pevne pripojen\u00fdch siet\u00ed. \u010cas\u0165 2 \u2014 Nepriame met\u00f3dy ochrany\" src=\"\/wp-content\/uploads\/2020\/08\/f4a2b2d75790a459fe2e0de477e4fa05.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zok 2. Zv\u00fd\u0161enie po\u010dtu pr\u00edstupov\u00fdch bodov umo\u017e\u0148uje lep\u0161ie rozlo\u017eenie pokrytia.<\/em><\/p>\n<p><\/p>\n<p>Pozrime sa e\u0161te raz na oba obr\u00e1zky. Na prvom je jasne vidite\u013en\u00e1 jedna z hlavn\u00fdch zranite\u013enost\u00ed bezdr\u00f4tovej siete \u2013 sign\u00e1l je mo\u017en\u00e9 zachyti\u0165 na zna\u010dn\u00fa vzdialenos\u0165.<\/p>\n<p><\/p>\n<p>Na druhom obr\u00e1zku situ\u00e1cia nie je tak\u00e1 kritick\u00e1. \u010c\u00edm viac pr\u00edstupov\u00fdch bodov, t\u00fdm efekt\u00edvnej\u0161ia je oblas\u0165 pokrytia a pritom v\u00fdkon sign\u00e1lu u\u017e takmer nepresahuje perimetr, doslova povedan\u00e9, za hranice kancel\u00e1rie, kancel\u00e1rie, budovy a in\u00fdch mo\u017en\u00fdch objektov.<\/p>\n<p><\/p>\n<p>\u00dato\u010dn\u00edk sa mus\u00ed nejak\u00fdm sp\u00f4sobom nen\u00e1padne pribl\u00ed\u017ei\u0165, aby zachytil relat\u00edvne slab\u00fd sign\u00e1l \u201ez ulice\u201c alebo \u201ez chodby\u201c a tak \u010falej. Na to sa treba pribl\u00ed\u017ei\u0165 k administrat\u00edvnej budove, aby sa napr\u00edklad postavil pod oknami. Alebo sa sna\u017ei\u0165 prenikn\u00fa\u0165 priamo do administrat\u00edvnej budovy. V ka\u017edom pr\u00edpade to zvy\u0161uje riziko, \u017ee sa \u201eodhal\u00ed\u201c na videokamer\u00e1ch, a m\u00f4\u017ee by\u0165 zazret\u00fd ochrannou slu\u017ebou. Z\u00e1rove\u0148 sa t\u00fdm v\u00fdrazne skracuje \u010dasov\u00fd interval na \u00fatok. Toto u\u017e \u0165a\u017eko nazva\u0165 \u201eide\u00e1lnymi podmienkami na hackovanie\u201c.<\/p>\n<p><\/p>\n<p>Samozrejme, zost\u00e1va e\u0161te jeden \u201eprvotn\u00fd hriech\u201c: bezdr\u00f4tov\u00e9 siete vysielaj\u00fa v dostupnom p\u00e1sme, ktor\u00e9 m\u00f4\u017eu zachyti\u0165 v\u0161etci klienti. Ozaj, WiFi sie\u0165 sa d\u00e1 porovna\u0165 s Ethernet-HUB, kde sa sign\u00e1l posiela okam\u017eite na v\u0161etky porty. Aby sa tomu zabr\u00e1nilo, v ide\u00e1lnom pr\u00edpade by ka\u017ed\u00e1 dvojica zariaden\u00ed mala komunikova\u0165 na svojom frekven\u010dnom kan\u00e1li, do ktor\u00e9ho by nikto in\u00fd nemal zasahova\u0165.<\/p>\n<p><\/p>\n<p>Tu s\u00fa v skratke hlavn\u00e9 probl\u00e9my. Pozrime sa na cesty ich rie\u0161enia.<\/p>\n<p><\/p>\n<h2 id=\"sredstva-zaschity-pryamye-i-kosvennye\">Prostriedky ochrany: priame a nepriame<\/h2>\n<p><\/p>\n<p>Ako u\u017e bolo povedan\u00e9 v predch\u00e1dzaj\u00facom \u010dl\u00e1nku, dokonal\u00fa ochranu v \u017eiadnom pr\u00edpade nedosiahneme. Ale m\u00f4\u017eeme maxim\u00e1lne s\u0165a\u017ei\u0165 vykonanie \u00fatoku, urobi\u0165 v\u00fdsledok nerentabiln\u00fdm vzh\u013eadom na vynalo\u017een\u00e9 \u00fasilie.<\/p>\n<p><\/p>\n<p>Prostriedky ochrany m\u00f4\u017eeme podmiene\u010dne rozdeli\u0165 do dvoch hlavn\u00fdch skup\u00edn:<\/p>\n<p><\/p>\n<ul>\n<li>technol\u00f3gie priamej ochrany prenosu, ako je \u0161ifrovanie alebo filtrovanie pod\u013ea MAC;<\/li>\n<li>technol\u00f3gie, ktor\u00e9 s\u00fa p\u00f4vodne ur\u010den\u00e9 na in\u00e9 \u00fa\u010dely, napr\u00edklad na zv\u00fd\u0161enie r\u00fdchlosti, ale pritom nepriamo komplikuj\u00fa \u017eivot \u00fato\u010dn\u00edkovi.<\/li>\n<\/ul>\n<p><\/p>\n<p>V prvej \u010dasti sa hovorilo o prvej skupine. Ale v na\u0161ej arzen\u00e1le m\u00e1me aj \u010fal\u0161ie nepriam\u00e9 opatrenia. Ako u\u017e bolo spomenut\u00e9, zv\u00fd\u0161enie po\u010dtu pr\u00edstupov\u00fdch bodov umo\u017e\u0148uje zn\u00ed\u017ei\u0165 \u00farove\u0148 sign\u00e1lu a vyrovna\u0165 pokrytie, \u010do komplikuje \u017eivot \u00fato\u010dn\u00edkovi.<\/p>\n<p><\/p>\n<p>\u010eal\u0161\u00edm aspektom je, \u017ee zv\u00fd\u0161enie r\u00fdchlosti prenosu \u00fadajov u\u013eah\u010duje zavedenie \u010fal\u0161\u00edch bezpe\u010dnostn\u00fdch opatren\u00ed. Napr\u00edklad je mo\u017en\u00e9 nain\u0161talova\u0165 VPN klienta na ka\u017ed\u00fd notebook a pren\u00e1\u0161a\u0165 \u00fadaje aj v r\u00e1mci lok\u00e1lnej siete cez \u0161ifrovan\u00e9 kan\u00e1ly. To si vy\u017eiada ur\u010dit\u00e9 zdroje, vr\u00e1tane hardv\u00e9rov\u00fdch, ale \u00farove\u0148 ochrany sa t\u00fdm v\u00fdrazne zvy\u0161uje.<\/p>\n<p><\/p>\n<p>Ni\u017e\u0161ie uv\u00e1dzame popis technol\u00f3gi\u00ed, ktor\u00e9 m\u00f4\u017eu zlep\u0161i\u0165 fungovanie siete a nepriamo zv\u00fd\u0161i\u0165 \u00farove\u0148 ochrany.<\/p>\n<p><\/p>\n<h2 id=\"kosvennye-sredstva-uluchsheniya-zaschity--chto-mozhet-pomoch\">Nepriame prostriedky na zlep\u0161enie ochrany \u2014 \u010do m\u00f4\u017ee pom\u00f4c\u0165?<\/h2>\n<p><\/p>\n<h3 id=\"client-steering\">Client Steering<\/h3>\n<p><\/p>\n<p>Funkcia Client Steering pon\u00faka klientsk\u00fdm zariadeniam mo\u017enos\u0165 najsk\u00f4r vyu\u017ei\u0165 p\u00e1smo 5 GHz. Ak t\u00e1to mo\u017enos\u0165 nie je klientovi dostupn\u00e1, st\u00e1le m\u00f4\u017ee pou\u017e\u00edva\u0165 2,4 GHz. Pre zastaran\u00e9 siete s mal\u00fdm po\u010dtom pr\u00edstupov\u00fdch bodov sa hlavn\u00e1 pr\u00e1ca vykon\u00e1va v p\u00e1sme 2,4 GHz. Pre frekven\u010dn\u00e9 p\u00e1smo 5 GHz bude sch\u00e9ma s jedn\u00fdm pr\u00edstupov\u00fdm bodom v mnoh\u00fdch pr\u00edpadoch neprijate\u013en\u00e1. Skuto\u010dnos\u0165 je tak\u00e1, \u017ee sign\u00e1l s vy\u0161\u0161ou frekvenciou hor\u0161ie prenik\u00e1 cez steny a obch\u00e1dza prek\u00e1\u017eky. Be\u017en\u00e9 odpor\u00fa\u010danie: pre zabezpe\u010denie garantovanej spojenia v p\u00e1sme 5 GHz \u2014 je preferovan\u00e9 pracova\u0165 v priamej vidite\u013enosti od pr\u00edstupov\u00e9ho bodu.<\/p>\n<p><\/p>\n<p>V modern\u00fdch norm\u00e1ch 802.11ac a 802.11ax je mo\u017en\u00e9 v\u010faka v\u00e4\u010d\u0161iemu po\u010dtu kan\u00e1lov nastavi\u0165 nieko\u013eko pr\u00edstupov\u00fdch bodov na bli\u017e\u0161iu vzdialenos\u0165, \u010do umo\u017e\u0148uje zn\u00ed\u017ei\u0165 v\u00fdkon, pri\u010dom sa nestr\u00e1ca, a dokonca sa zvy\u0161uje r\u00fdchlos\u0165 prenosu \u00fadajov. Kone\u010dne, pou\u017eitie p\u00e1sma 5 GHz komplikuje \u017eivot \u00fato\u010dn\u00edkom, ale zlep\u0161uje kvalitu spojenia pre klientov, ktor\u00ed s\u00fa v dosahu.<\/p>\n<p><\/p>\n<p>T\u00e1to funkcia je predlo\u017een\u00e1:<\/p>\n<p><\/p>\n<ul>\n<li>v pr\u00edstupov\u00fdch bodoch Nebula a NebulaFlex;<\/li>\n<li>v firewally s funkciou riadi\u010da.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"auto-healing\">Auto Healing<\/h3>\n<p><\/p>\n<p>Ako u\u017e bolo spomenut\u00e9, kont\u00fary obvodu miestnosti sa zle vmestia do zaoblen\u00fdch diagramov pr\u00edstupov\u00fdch bodov.<\/p>\n<p><\/p>\n<p>Aby sa tento probl\u00e9m vyrie\u0161il, je potrebn\u00e9 najprv pou\u017ei\u0165 optim\u00e1lny po\u010det pr\u00edstupov\u00fdch bodov a po druh\u00e9, zn\u00ed\u017ei\u0165 vz\u00e1jomn\u00fd vplyv. Ak by sa v\u0161ak jednoducho vzala a ru\u010dne zn\u00ed\u017eila v\u00fdkon vysiela\u010dov, tak\u00fdto priamy z\u00e1sah m\u00f4\u017ee vies\u0165 k zhor\u0161eniu spojenia. To bude obzvl\u00e1\u0161\u0165 c\u00edti\u0165 pri v\u00fdpadku jedn\u00e9ho alebo viacer\u00fdch pr\u00edstupov\u00fdch bodov.<\/p>\n<p><\/p>\n<p>Auto Healing umo\u017e\u0148uje flexibilne prisp\u00f4sobova\u0165 v\u00fdkon bez straty spo\u013eahlivosti a r\u00fdchlosti prenosu d\u00e1t.<\/p>\n<p><\/p>\n<p>Pri pou\u017e\u00edvan\u00ed tejto funkcie kontrol\u00e9r kontroluje stav a funk\u010dnos\u0165 pr\u00edstupov\u00fdch bodov. Ak jeden z nich nepracuje, susedn\u00e9 pr\u00edstupov\u00e9 body dostan\u00fa pr\u00edkaz zv\u00fd\u0161i\u0165 v\u00fdkon sign\u00e1lu, aby vyplnili \u201ebiele miesto\u201c. Po op\u00e4tovnom uveden\u00ed pr\u00edstupov\u00e9ho bodu do prev\u00e1dzky dostan\u00fa susedn\u00e9 body pr\u00edkaz zn\u00ed\u017ei\u0165 v\u00fdkon sign\u00e1lu, aby sa zn\u00ed\u017eila \u00farove\u0148 vz\u00e1jomn\u00fdch ru\u0161en\u00ed.<\/p>\n<p><\/p>\n<h3 id=\"besshovnyy-wifi-rouming\">Bezprobl\u00e9mov\u00fd WiFi roaming<\/h3>\n<p><\/p>\n<p>Na prv\u00fd poh\u013ead je \u0165a\u017ek\u00e9 nazva\u0165 t\u00fato technol\u00f3giu zvy\u0161uj\u00facou \u00farove\u0148 bezpe\u010dnosti, sk\u00f4r naopak, preto\u017ee u\u013eah\u010duje prep\u00ednanie klientov (vr\u00e1tane \u00fato\u010dn\u00edkov) medzi pr\u00edstupov\u00fdmi bodmi v jednej sieti. Ak sa v\u0161ak pou\u017e\u00edva dve alebo viac pr\u00edstupov\u00fdch bodov, treba zabezpe\u010di\u0165 pohodln\u00fa pr\u00e1cu bez zbyto\u010dn\u00fdch probl\u00e9mov. Okrem toho, ak je pr\u00edstupov\u00fd bod pre\u0165a\u017een\u00fd, hor\u0161ie zvl\u00e1da ochrann\u00e9 funkcie, ako je \u0161ifrovanie, a m\u00f4\u017eu nasta\u0165 oneskorenia pri v\u00fdmene d\u00e1t a in\u00e9 nepr\u00edjemn\u00e9 veci. V tomto oh\u013eade bezprobl\u00e9mov\u00fd roaming predstavuje ve\u013ek\u00fa pomoc pri flexibilnom rozde\u013eovan\u00ed z\u00e1\u0165a\u017ee a zabezpe\u010den\u00ed nepretr\u017eitej pr\u00e1ce v chr\u00e1nenom re\u017eime.<\/p>\n<p><\/p>\n<h3 id=\"nastroyka-porogovyh-znacheniy-urovnya-signala-dlya-podklyucheniya-i-otklyucheniya-besprovodnyh-klientov-signal-threshold-ili-signal-strength-range\">Nastavenie prahov\u00fdch hodn\u00f4t \u00farovne sign\u00e1lu pre prip\u00e1janie a odpojovanie bezdr\u00f4tov\u00fdch klientov (Signal Threshold alebo Signal Strength Range)<\/h3>\n<p><\/p>\n<p>Pri pou\u017e\u00edvan\u00ed osamel\u00e9ho pr\u00edstupov\u00e9ho bodu t\u00e1to funkcia v z\u00e1sade nem\u00e1 v\u00fdznam. Ale ak pracuje nieko\u013eko pr\u00edstupov\u00fdch bodov riaden\u00fdch kontrol\u00e9rom, je mo\u017en\u00e9 usporiada\u0165 mobiln\u00e9 rozdelenie klientov medzi r\u00f4zne AP. Treba pripomen\u00fa\u0165, \u017ee funkcie kontrol\u00e9ra pr\u00edstupov\u00fdch bodov s\u00fa be\u017ene dostupn\u00e9 v mnoh\u00fdch radoch routerov od spolo\u010dnosti Zyxel: ATP, USG, USG FLEX, VPN, ZyWALL.<\/p>\n<p><\/p>\n<p>V uveden\u00fdch zariadeniach je funkcia na odpojenie klienta pripojen\u00e9ho k SSID so slab\u00fdm sign\u00e1lom. \u201eSlab\u00fd\u201c znamen\u00e1, \u017ee sign\u00e1l je pod prahom stanoven\u00fdm na kontrol\u00e9ri. Po tom, \u010do bol klient odpojen\u00fd, odo\u0161le pokusn\u00fd dopyt na n\u00e1jdenie in\u00e9ho pr\u00edstupov\u00e9ho bodu.<\/p>\n<p><\/p>\n<p>Napr\u00edklad, klient sa pripojil k pr\u00edstupov\u00e9mu bodu so sign\u00e1lom ni\u017e\u0161\u00edm ako -65 dBm, ak je prah odpojenia stanice -60 dBm, v tomto pr\u00edpade pr\u00edstupov\u00fd bod odpoj\u00ed klienta s takouto \u00farov\u0148ou sign\u00e1lu. Teraz klient spust\u00ed proced\u00faru op\u00e4tovn\u00e9ho pripojenia a pripoj\u00ed sa k in\u00e9mu pr\u00edstupov\u00e9mu bodu so sign\u00e1lom, ktor\u00fd presahuje alebo sa rovn\u00e1 -60 dBm (prahov\u00e1 hodnota sign\u00e1lu stanice).<\/p>\n<p><\/p>\n<p>To hr\u00e1 d\u00f4le\u017eit\u00fa \u00falohu pri pou\u017e\u00edvan\u00ed viacer\u00fdch pr\u00edstupov\u00fdch bodov. T\u00fdmto sa zabra\u0148uje situ\u00e1cii, ke\u010f je v\u00e4\u010d\u0161ina klientov zhroma\u017eden\u00e1 na jednom bode, zatia\u013e \u010do ostatn\u00e9 pr\u00edstupov\u00e9 body s\u00fa nevyu\u017eit\u00e9.<\/p>\n<p><\/p>\n<p>Okrem toho je mo\u017en\u00e9 obmedzi\u0165 pripojenie klientov so slab\u00fdm sign\u00e1lom, ktor\u00ed sa pravdepodobne nach\u00e1dzaj\u00fa na okraji budovy, napr\u00edklad za stenou v susednej kancel\u00e1rii, \u010do tie\u017e umo\u017e\u0148uje pova\u017eova\u0165 t\u00fato funkciu za nepriamy sp\u00f4sob ochrany.<\/p>\n<p><\/p>\n<h3 id=\"perehod-na-wifi-6-kak-odin-iz-putey-povysheniya-urovnya-bezopasnosti\">Prechod na WiFi 6 ako jeden z sp\u00f4sobov zv\u00fd\u0161enia \u00farovne bezpe\u010dnosti<\/h3>\n<p><\/p>\n<p>O v\u00fdhod\u00e1ch priamych prostriedkov ochrany sme u\u017e hovorili v predch\u00e1dzaj\u00facom \u010dl\u00e1nku <strong>\u201eVlastnosti ochrany bezdr\u00f4tov\u00fdch a pevne pripojen\u00fdch siet\u00ed. \u010cas\u0165 1 \u2014 Priame met\u00f3dy ochrany\u201c<\/strong>.<\/p>\n<p><\/p>\n<p>Siete WiFi 6 zabezpe\u010duj\u00fa vy\u0161\u0161ie r\u00fdchlosti prenosu d\u00e1t. Na jednej strane nov\u00fd s\u00fabor \u0161tandardov umo\u017e\u0148uje zv\u00fd\u0161i\u0165 r\u00fdchlos\u0165, na druhej strane umiestni\u0165 e\u0161te viac pr\u00edstupov\u00fdch bodov na tej istej ploche. Nov\u00fd \u0161tandard umo\u017e\u0148uje pou\u017e\u00edva\u0165 ni\u017e\u0161\u00ed v\u00fdkon na prenos pri vy\u0161\u0161ej r\u00fdchlosti.<\/p>\n<p><\/p>\n<p><strong>Zv\u00fd\u0161enie r\u00fdchlosti prenosu d\u00e1t<\/strong>.<\/p>\n<p><\/p>\n<p>Prechod na WiFi 6 predpoklad\u00e1 zv\u00fd\u0161enie r\u00fdchlosti prenosu a\u017e na 11 Gb\/s (typ modul\u00e1cie 1024-QAM, kan\u00e1ly 160 MHz). Pri tom nov\u00e9 zariadenia podporuj\u00face WiFi 6 maj\u00fa vy\u0161\u0161\u00ed v\u00fdkon. Jedn\u00fdm z hlavn\u00fdch probl\u00e9mov pri zav\u00e1dzan\u00ed \u010fal\u0161\u00edch bezpe\u010dnostn\u00fdch opatren\u00ed, ako je VPN kan\u00e1l pre ka\u017ed\u00e9ho pou\u017e\u00edvate\u013ea, je pokles r\u00fdchlosti. S WiFi 6 bude \u013eah\u0161ie zavies\u0165 \u010fal\u0161ie ochrann\u00e9 syst\u00e9my.<\/p>\n<p><\/p>\n<h3 id=\"bss-coloring\">BSS Farbiv\u00e1<\/h3>\n<p><\/p>\n<p>Predt\u00fdm sme p\u00edsali, \u017ee rovnomernej\u0161ie pokrytie umo\u017e\u0148uje zn\u00ed\u017ei\u0165 prenikanie WiFi sign\u00e1lu za obvod. No pri \u010fal\u0161om raste po\u010dtu pr\u00edstupov\u00fdch bodov m\u00f4\u017ee by\u0165 aj pou\u017eitie Auto Healing nedostato\u010dn\u00e9, ke\u010f\u017ee \u201ecudz\u00ed\u201c traffic zo susedn\u00e9ho bodu sa aj tak dost\u00e1va do prij\u00edmacej z\u00f3ny.<\/p>\n<p><\/p>\n<p>Pri pou\u017e\u00edvan\u00ed BSS Coloring pr\u00edstupov\u00fd bod ozna\u010duje \u0161peci\u00e1lne zna\u010dky (farb\u00ed) svoje d\u00e1tov\u00e9 pakety. To umo\u017e\u0148uje ignorova\u0165 vplyv susedn\u00fdch vysielac\u00edch zariaden\u00ed (pr\u00edstupov\u00fdch bodov).<\/p>\n<p><\/p>\n<h3 id=\"uluchshennyy-mu-mimo\">Vylep\u0161en\u00fd MU-MIMO<\/h3>\n<p><\/p>\n<p>V 802.11ax s\u00fa tie\u017e d\u00f4le\u017eit\u00e9 vylep\u0161enia technol\u00f3gie MU-MIMO (Multi-User \u2014 Multiple Input Multiple Output). MU-MIMO umo\u017e\u0148uje pr\u00edstupov\u00e9mu bodu vymie\u0148a\u0165 si d\u00e1ta s viacer\u00fdmi zariadeniami s\u00fa\u010dasne. Ale v predch\u00e1dzaj\u00facom \u0161tandarde mohla t\u00e1to technol\u00f3gia podporova\u0165 iba skupiny \u0161tyroch klientov na jednej frekvencii. To u\u013eah\u010dovalo prenos, ale nie pr\u00edjem. WiFi 6 vyu\u017e\u00edva viackan\u00e1lov\u00fd MIMO 8\u00d78 na prenos a pr\u00edjem.<\/p>\n<p><\/p>\n<p><em><strong>Pozn\u00e1mka.<\/strong> \u0160tandard 802.11ax zvy\u0161uje ve\u013ekos\u0165 skup\u00edn MU-MIMO vo vstupnom pr\u00fade, \u010d\u00edm zabezpe\u010duje efekt\u00edvnej\u0161\u00ed v\u00fdkon siete WiFi. Mnohopou\u017e\u00edvate\u013esk\u00fd v\u00fdstupn\u00fd kan\u00e1l MIMO je nov\u00fdm doplnkom k 802.11ax.<\/em><\/p>\n<p><\/p>\n<h3 id=\"ofdma-orthogonal-frequency-division-multiple-access\">OFDMA (Orthogonal frequency-division multiple access)<\/h3>\n<p><\/p>\n<p>Toto je nov\u00e1 met\u00f3da pr\u00edstupu k kan\u00e1lom a riadenia, ktor\u00e1 bola vyvinut\u00e1 na z\u00e1klade technol\u00f3gii, ktor\u00e9 u\u017e boli vysk\u00fa\u0161an\u00e9 v technol\u00f3gii mobilnej siete LTE.<\/p>\n<p><\/p>\n<p>OFDMA umo\u017e\u0148uje zasiela\u0165 viac ako jeden sign\u00e1l po tej istej l\u00ednii alebo kan\u00e1li s\u00fa\u010dasne, pridelen\u00edm \u010dasov\u00e9ho intervalu pre ka\u017ed\u00fd prenos a aplikovan\u00edm frekven\u010dn\u00e9ho delenia. V\u00fdsledkom je nielen zv\u00fd\u0161enie r\u00fdchlosti lep\u0161ou vyu\u017eite\u013enos\u0165ou kan\u00e1la, ale aj zv\u00fd\u0161en\u00e1 bezpe\u010dnos\u0165.<\/p>\n<p><\/p>\n<h2 id=\"rezyume\">Zhrnutie<\/h2>\n<p><\/p>\n<p>Sie\u0165ov\u00e9 WiFi sa s ka\u017ed\u00fdm rokom st\u00e1vaj\u00fa \u010doraz bezpe\u010dnej\u0161\u00edmi. Pou\u017e\u00edvanie modern\u00fdch technol\u00f3gi\u00ed umo\u017e\u0148uje usporiada\u0165 prijate\u013en\u00fa \u00farove\u0148 ochrany.<\/p>\n<p><\/p>\n<p>Priame met\u00f3dy ochrany vo forme \u0161ifrovania trafficu sa uk\u00e1zali ako ve\u013emi \u00fa\u010dinn\u00e9. Nezab\u00fadajme ani na \u010fal\u0161ie opatrenia: filtrovanie pod\u013ea MAC, skrytie identifik\u00e1tora siete, Rogue AP Detection (Podozriv\u00fd AP Kontrola).<\/p>\n<p><\/p>\n<p>Existuj\u00fa v\u0161ak aj nepriame opatrenia, ktor\u00e9 zlep\u0161uj\u00fa spolupr\u00e1cu bezdr\u00f4tov\u00fdch zariaden\u00ed a zvy\u0161uj\u00fa r\u00fdchlos\u0165 v\u00fdmeny \u00fadajov.<\/p>\n<p><\/p>\n<p>Pou\u017e\u00edvanie nov\u00fdch technol\u00f3gi\u00ed umo\u017e\u0148uje zn\u00ed\u017ei\u0165 \u00farove\u0148 sign\u00e1lu z bodov, \u010do rob\u00ed pokrytie rovnomernej\u0161\u00edm, \u010do m\u00e1 pozit\u00edvny vplyv na celkov\u00e9 fungovanie celej bezdr\u00f4tovej siete, vr\u00e1tane jej bezpe\u010dnosti.<\/p>\n<p><\/p>\n<p>Zdrav\u00fd rozum nazna\u010duje, \u017ee na zv\u00fd\u0161enie bezpe\u010dnosti s\u00fa dobr\u00e9 v\u0161etky prostriedky: priame aj nepriame. Tak\u00e1to kombin\u00e1cia maxim\u00e1lne komplikuje \u017eivot zlo\u010dincom.<\/p>\n<p><\/p>\n<h2 id=\"poleznye-ssylki\">U\u017eito\u010dn\u00e9 odkazy:<\/h2>\n<p><\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/zyxelru\">Telegram chat Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/ci_general_20191031_520516.shtml\">F\u00f3rum o zariadeniach Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Ve\u013ea u\u017eito\u010dn\u00fdch vide\u00ed na kan\u00e1li Zyxel (Youtube)<\/a><\/noindex><\/li>\n<li>Osobitosti ochrany bezdr\u00f4tov\u00fdch a dr\u00f4tov\u00fdch siet\u00ed. \u010cas\u0165 1 \u2014 Priame ochrann\u00e9 opatrenia<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Wi-Fi alebo kr\u00faten\u00e1 dvojica \u2014 \u010do je lep\u0161ie?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Synchroniz\u00e1cia pr\u00edstupov\u00fdch bodov Wi-Fi pre spolupr\u00e1cu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Wi-Fi 6: potrebn\u00fd je nov\u00fd \u0161tandard bezdr\u00f4tovej komunik\u00e1cie be\u017en\u00e9mu pou\u017e\u00edvate\u013eovi a ak \u00e1no, tak pre\u010do?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">WiFi 6 MU-MIMO a OFDMA: Dve opory v\u00e1\u0161ho \u00faspechu v bud\u00facnosti<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Bud\u00facnos\u0165 WiFi<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Pou\u017e\u00edvanie multigigabitov\u00fdch prep\u00edna\u010dov ako filozofia kompromisu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Dve v jednom, alebo migr\u00e1cia kontrol\u00e9ra pr\u00edstupov\u00e9ho bodu do br\u00e1ny<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">WiFi 6 je u\u017e tu: \u010do pon\u00faka trh a pre\u010do potrebujeme t\u00fato technol\u00f3giu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zlep\u0161ujeme v\u00fdkon Wi-Fi. V\u0161eobecn\u00e9 z\u00e1sady a u\u017eito\u010dn\u00e9 veci<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zlep\u0161ujeme v\u00fdkon Wi-Fi. \u010cas\u0165 2. \u0160pecifik\u00e1 zariaden\u00ed<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zlep\u0161ujeme pr\u00e1cu Wi-Fi. \u010cas\u0165 3. Rozmiestnenie pr\u00edstupov\u00fdch bodov<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Synchroniz\u00e1cia pr\u00edstupov\u00fdch bodov Wi-Fi pre spolupr\u00e1cu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Moje 2 centy: Wi-Fi dnes a zajtra<\/a><\/noindex><\/li>\n<\/ol>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/516914\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u0435\u0440\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u043a\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u00ab\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u041f\u0440\u044f\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\u00bb \u0448\u043b\u0430 \u0440\u0435\u0447\u044c \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 WiFi \u0438 \u043f\u0440\u044f\u043c\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0411\u044b\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92781,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92780","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-30T17:42:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-30T17:42:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Osobitosti ochrany bezdr\u00f4tov\u00fdch a dr\u00f4tov\u00fdch siet\u00ed. \u010cas\u0165 2 \u2014 Nepriame ochrann\u00e9 opatrenia | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/osobennosti-zashhity-besprovodnyh-i-provodnyh-setej-chast-2-kosvennye-mery-zashhity","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-30T17:42:10+00:00","article:modified_time":"2020-08-30T17:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92780","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:01:24","updated":"2022-09-30 00:38:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/92780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=92780"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/92780\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/92781"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=92780"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=92780"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=92780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}