3. NGFW yemabhizimisi maduku. Wireless data kutapurirana: WiFi uye LTE

Mhoroi, vaverengi vanodiwa veTS Solution blog, tinoenderera mberi nenhevedzano yezvinyorwa zveNGFW CheckPoint mhinduro muchikamu cheSMB. Kuti zvive nyore, unogona kujairana nemhando yemhando, dzidza maitiro uye kugona mukati kutanga chikamu, tobva takurudzira kutendeudzira kusunungura uye kuseta kwekutanga tichishandisa muenzaniso weiyo chaiyo 1590 Check Point michina mu chikamu chechipiri.

Kune avo vari kungojairana neiyo SMB modhi renji - yakakodzera kumahofisi madiki kana matavi evanhu vanosvika mazana maviri (pakusarudza modhi 200). Chimwe chezvimiro zvemhuri iyi tsigiro yekutaurirana pasina waya; izvi zvinogona kubatsira kana zvivakwa zvine michina ine WiFi adapta kana NGFW inoda kuwana Internet kuburikidza nenharembozha. Kune mabasa akanyorwa iwe uchada matekinoroji: WiFi, LTE. Ichi chinyorwa chiri pamusoro peizvi, apo tichatarisa:

1. Kugonesa uye kugadzirisa iyo NGFW WiFi modhi.
2. Kugonesa uye kugadzirisa iyo LTE inoshanda modhi yeNGFW.
3. General mhedziso nezve isina waya tekinoroji yeNGFW.

NGFW uye WiFi

Kana tikadzokera kuchikamu chechipiri chenhevedzano yedu, isu takasiya sarudzo yewireless mushandisi yekubatanidza yakaremara, saka unofanirwa kuenda kune iyo tab. Chishandiso → Network → Wireless

Mune iyo skrini yandakapa, pane maviri anogoneka eWiFi maitiro ekushandisa:

1. 2.4 GHz inguva inotsigirwa nezvizvarwa zvakawanda zvemhando dzakasiyana-siyana dzisina waya.
2. 5 GHz inguva inova chiyero chemazuva ano chekushanda nemidziyo isina waya; rutsigiro runowanikwa mune ese emazuvano mafoni, mahwendefa uye malaptop.

Zvakare kubva pascreenshot (pamusoro) unogona kuona kuti ini ndatogonesa iyo 5 GHz inoshanda modhi, ngatisete 2.4 GHz pamwechete, kuita izvi, tinya bhatani. "Gadzirisa".

Muwindo rekugadzira nzvimbo yekuwana, isu tinokumbirwa kuti titaure seti yakajairwa yeparameter. Iwe unogona kushandisa password kana Radius server senzira yechokwadi. Iyo "Bvumira kupinda kubva kune ino network kuenda kune emunharaunda network" sarudzo ine basa rekuti vatengi vako vasina waya vawane kune zvemukati zviwanikwa zviri kuseri kweCheck Point NGFW. Kana poindi yako yagadziriswa, unogona kushandura mamwe ma paramita.

Zvirongwa zviripo

Mushure mekunge mudziyo uri muyedzo wabatana nenzvimbo yako yekuwana, tinogona kuita shuwa kuti iri panetiweki yedu, enda kune tab: Marogi & Monitoring → Mamiriro → Wireless Active Devices

Kana tikadzvanya pane chinhu chine zita, tinoona zvimiro zvemutengi akabatana:

Pamusoro peruzivo nezve mudziyo, ini ndinofunga anotevera anobatsira sarudzo:

• chengetedza chinhu chekushandisa mumitemo (1);
• vhara kupinda kune mutengi uyu (2).

Kupfuurirazve, zvichibva pazvigadziro zvedu zveKushandisa Blade (muCheckPoint terminology, imwe yemamodule), kudzvanya pane zvingangove nengozi zvinongedzo zvinorambidzwa.

Isu tinoedza kuvhura imwe yezvikamu pane nharembozha nekubatanidza kuburikidza neWiFi kune NGFW Check Point uye, maererano, kuwana iyo Internet kuburikidza nayo.

Mhedziso: Mushandisi haana kukwanisa kuwana saiti, iri yeboka reAnonymizer.

Nekudaro, isu takatarisa iyo yekutanga kuseta yekubatanidza vashandisi vachishandisa WiFi; izvi zviri nyore mumahofisi madiki uko kune akawanda mawireless zvishandiso. Panguva imwecheteyo, iyo Cheki Point NGFW mhinduro inobvumidza iwe kuchengetedza vashandisi vako kubva mukusagadzikana uye zvakashata zvemukati, uye iwe une inoshanduka sarudzo yekutarisa isina waya inotambira. Ndinoda kutaura zvakasiyana nezvekutonga ndichishandisa nharembozha; iyo nzira yakatsanangurwa mune imwe yedu nyaya.

NGFW uye LTE

Models 1570, 1590 inouya neLTE modem, iyo inokutendera kuti ushandise Micro/Nano SIM uye nekudaro gadza 4G yekubatanidza. Kune avo vanoda kuziva, tichasiya chiyeuchidzo chipfupi pasi pemuparadzi.

Mirayiridzo yekuisa SIM

Saka iwe waisa iyo SIM, mushure meizvozvo iwe unofanirwa kudzokera kuGaia Portal uye enda kune inotevera chikamu Chishandiso → Network → Internet. Nekutadza, iwe unenge uine imwe WAN yekubatanidza; iwe unofanirwa kugadzira nyowani yekubatanidza nekutevera museve mutsvuku.

Kwatinozoda kuseta zita rekubatanidza, sarudza iyo interface mhando (mune yedu kesi Cellular)

Uyezve, vhura iyo tab "Connection Monitoring", pano zvinogoneka kutumira otomatiki: chikumbiro cheARP kune yakasarudzika nzira, ICMP mapaketi kune yakatarwa masosi, ini ndinoona kuti iwe unogona kutsanangura zviwanikwa zvako zvekutarisa.

Tab "Serura" ine basa rekusarudza zvakakosha pakati peSIMs, kuisa data rechokwadi kana zvichidikanwa (APN, PIN).

Mune tab "Advanced" Zvinokwanisika kuseta network network:

• marongero eiyo interface (MTU, MAC)
• QOS
• ISP Redundancy
• Nat
• DHCP

Mushure mekugadzira mhando nyowani yekubatanidza, iwe unowana tafura yeInternet yekubatanidza mukati Mudziyo → Network → Internet:

Mumufananidzo wakaratidzwa pamusoro tinoona chinongedzo chitsva "LTE_TELE2", sezvaungangofungidzira, iyi iSIM kubva kune Tele2 mupi. Iyo tafura inopa ruzivo nezve chiyero chechiratidzo, inoratidza chikamu chekurasikirwa uye kunonoka nguva. Uyezve, zvinokwanisika kuvhura sarudzo Connection Monitoring.

Muwindo rekutarisa tinoona mhedzisiro yekutumira zvikumbiro kusvika kumaseva matatu, imwe yacho itsika (ya.ru). Ratidzwa pano:

• packet kurasikirwa muzana;
• muzana yezvikanganiso zvetiweki;
• nguva yekupindura (avhareji, shoma uye yakawanda);
• jitter.

Kana iwe uchifarira ruzivo rwehurongwa nezve LTE modem pa NGFW Check Point, saka iwe unofanirwa kuenda Marogi & Kuongorora → Diagnostics → Zvishandiso → Monitor Cellular Modem:

Tevere, isu takaongorora kumhanya kweInternet yekuwana iyo yekupedzisira host, iyo yakabatana neNGFW kuburikidza neWiFi (5 GHz), uye gedhi pacharo rinoshandisa LTE yekubatanidza kutumira mapaketi kuGlobal Network. Isu takaenzanisa hunhu hwakawanikwa nemamiriro ezvinhu kana nzvimbo imwechete yenzvimbo ichishandiswa, asi foni inobatana neInternet zvakananga. Kuti zvive nyore, zvigumisiro zvakavanzwa pasi pemuparadzi.

SpeedTest mhinduro

Ehe, zviratidzo izvi zvine zvikanganiso uye hunhu hwazvo, ngatiisei mberi fungidziro: NGFW 1590 inosimudzira simba reinouya cellular siginecha uchishandisa maviri ekunze antennas. Ichi chirevo chinosimbiswa zvisina kunanga nemhedzisiro ye SpeedTest, yakaitwa pasi pemamiriro akafanana uye kuratidza kuderera kwePing uye latency kune imwechete sosi.

Chinhu

NGFW+LTE

Mobile+LTE

Ping (ms)

30

34

Jitter (ms)

7.2

5.2

Kupinda kumhanya (Mbp/s)

16.1

12

Kumhanya kunobuda (Mbp/s)

10.9

2.97

Kuti tiongorore kushanda kweiyo NGFW Check Point 1590 ekunze antennas, takayera mwero wekugamuchira chiratidzo, uye nekushandisa iyo engineering menyu takaita kuyerwa kwakafanana kwefoni. Zvigumisiro zvinoratidzwa pasi apa:

Saizvozvo, chiyero chesimba rekugamuchira chiratidzo chinoonekwa seyakanakisa kana kukosha kwayo kwakashata kunosvika ku 0. Kukosha kwakawanikwa kwefoni kwaive (-109 dBm), kune modem (-61 dBm). Izvo zvinowanzosimbisa fungidziro yedu uye inoratidza kugadzikana kwekutaurirana kweLTE yemhuri yeNGFW SMB.

Zvose kugumisa

Kupfupisa chikamu chanhasi, matekinoroji maviri akatariswa: WiFi neLTE, iyo inotsigirwa ne1570, 1590 Check Point modhi.

Kune mahofisi maduku nemapazi, hazviiti nguva dzose kuisa nzvimbo dzakasiyana dzisina waya, saka NGFW ichabatsira kuronga network isina waya, uye zvinonyanya kukosha, kudzivirira vashandisi vakadaro.

Kana iri iyo NGFW-yakavakirwa LTE modem, mumaonero angu, anotevera ekushandisa kesi achave ari kudiwa:

1. Kushaikwa kwewaya yekubatanidza kuInternet. Muchiitiko ichi, iwe unozomanikidzwa kushandisa nharembozha kuti upe kubatana kweInternet. Mamiriro ezvinhu aya anoshandawo kune mamwe makambani ane mhando yechiitiko inoda "mobile" kuiswa kweiyo network network, zvisinei nemamiriro ezvinhu (nzvimbo, kuwanikwa kwewaya kutaurirana, nezvimwewo).
2. Reservation ye main wired access channel. Rega ndikuyeuchidze kuti NGFW inotsigira basa nemaSIM maviri, izvi zvinowedzera kukanganisa kushivirira kwezvivakwa zvako pakaitika tsaona neimwe yewaya link. Iwe unogona zvakare kugonesa nemaoko LTE kubatana, zvichienderana nemamiriro ako ekushandisa.

Yakakura kusarudzwa kwezvinhu paCheck Point kubva kuTS Solution. Ramba wakatarisa (teregiramu, Facebook, VK, TS Solution Blog, Yandex Zen).

Source: www.habr.com