Isu tinoenderera mberi nenhaurirano nezve nzira dzekuwedzera network kuchengetedza. Muchikamu chino tichataura nezve mamwe matanho ekuchengetedza uye kuronga mamwe akachengeteka asina waya network.
Nhanganyaya kuchikamu chechipiri
Munyaya yapfuura Paive nenhaurirano nezve matambudziko ekuchengetedza network yeWiFi uye nzira dzakananga dzedziviriro kubva mukuwanikwa kusingatenderwe. Matanho akajeka ekudzivirira kuvharirwa kwemigwagwa akatariswa: encryption, network kuhwanda uye MAC kusefa, pamwe neakakosha nzira, semuenzaniso, kurwisa Rogue AP. Zvisinei, kunze kwenzira dzakananga dzekudzivirira, kunewo dzisina kunanga. Aya ndiwo matekinoroji anobatsira kwete chete kuvandudza kunaka kwekutaurirana, asi zvakare kuwedzera kuchengetedzwa.
Maviri makuru maficha easina waya network: kure kusingabatanidze kuwana uye mhepo yeredhiyo seyekutepfenyura yekufambisa data, uko chero chiratidzo chinogamuchira chinogona kuteerera kumhepo, uye chero mupepeti anogona kuvhara network neasina basa kutapurirana uye kungovhiringidza redhiyo. Izvi, pakati pezvimwe zvinhu, hazvina zvazvinoita pakuchengetedzeka kwese kweiyo wireless network.
Hauzorarami nekuchengetedzeka wega. Tichiri kufanira kushanda neimwe nzira, ndiko kuti, kuchinjana data. Uye kudivi rino kune zvimwe zvichemo zvakawanda nezve WiFi:
- mikaha mukuvhara ("mavara machena");
- pesvedzero yezvinyorwa zvekunze uye nzvimbo dzekuwana dzakavakidzana pane imwe neimwe.
Somugumisiro, nekuda kwezvinetso zvinotsanangurwa pamusoro apa, hutano hwechiratidzo hunoderera, kushamwaridzana kunorasikirwa nekugadzikana, uye dhidhiyo yekutsinhanisa data inodonha.
Ehe, mafeni e wired network achafara kuziva kuti kana uchishandisa tambo uye, kunyanya, fiber-optic yekubatanidza, matambudziko akadaro haaonekwe.
Mubvunzo unomuka: zvinogoneka here kugadzirisa nyaya idzi pasina kushandisa chero nzira dzakasimba dzakadai sekubatanidza vanhu vese vasingagutsikane kune network ine waya?
Matambudziko ese anotangira papi?
Panguva yekuzvarwa kwehofisi uye mamwe maWiFi network, ivo vaiwanzo tevera algorithm iri nyore: vaiisa imwe nzvimbo yekupinda pakati peiyo perimeter kuti vawedzere kufukidzwa. Kana pakanga pasina simba rechiratidzo rakakwana renzvimbo dziri kure, antenna inosimudzira yakawedzerwa kunzvimbo yekupinda. Kashoma nzvimbo yechipiri yekuwana yakawedzerwa, semuenzaniso, yehofisi yemutungamiriri ari kure. Ndiko zvimwe kuvandudzwa kwese.
Iyi nzira yaive nezvikonzero zvayo. Chekutanga, mambakwedza Wireless network, midziyo yavo yaidhura. Chechipiri, kuisa mamwe mapoinzi ekuwana kwaireva kutarisana nemibvunzo yaive isina mhinduro panguva iyoyo. Semuenzaniso, maitiro ekuronga isina musono mutengi achichinja pakati pemapoinzi? Nzira yekugadzirisa sei nekupindirana? Maitiro ekurerutsa uye kugadzirisa manejimendi emapoinzi, semuenzaniso, kushandiswa panguva imwe chete yezvirambidzo / mvumo, kutarisa, zvichingodaro. Nokudaro, zvakanga zviri nyore zvikuru kutevera musimboti: michina mishoma, zviri nani.
Panguva imwecheteyo, nzvimbo yekuwana, iri pasi pedenga, inoparidzirwa mune denderedzwa (kunyanya, kutenderera) diagram.
Nekudaro, maumbirwo ezvivakwa zvekuvaka haakwane zvakanyanya mumatenderedza masaini ekuparadzira madhiyagiramu. Naizvozvo, mune dzimwe nzvimbo chiratidzo chinenge chisingasviki, uye chinoda kukwidziridzwa, uye mune dzimwe nzvimbo kutepfenyura kunodarika perimeter uye kunosvika kune vekunze.
Mufananidzo 1. Muenzaniso wekuvhara uchishandisa imwe pfungwa muhofisi.
taura pfungwa. Uku ndiko kufungidzira kwakashata kusingafungi zvipingamupinyi pakuparadzira, pamwe nekutungamira kwechiratidzo. Mukuita, maumbirwo emadhayagiramu emhando dzakasiyana dzemapoinzi anogona kusiyana.
Mamiriro ezvinhu anogona kuvandudzwa nekushandisa mamwe mapoinzi ekuwana.
Chekutanga, izvi zvinobvumira michina yekutapurirana kuti igoverwe zvinobudirira munzvimbo yese yekamuri.
Kechipiri, zvinogoneka kudzikisa chiyero chechiratidzo, ichichidzivirira kuti chisapfuurire perimeter yehofisi kana imwe nzvimbo. Muchiitiko ichi, kuti uverenge Wireless network traffic, iwe unofanirwa kusvika padhuze neiyo perimeter kana kutopinda miganhu yayo. Anorwisa anoita nenzira yakafanana kupinda mukati mewaya network.
Mufananidzo 2: Kuwedzera huwandu hwenzvimbo dzekuwana kunobvumira kugovera kuri nani kwekuvhara.
Ngatitarisei pamifananidzo miviri zvakare. Yekutanga inoratidza zvakajeka imwe yekusagadzikana kukuru kweiyo isina waya network - chiratidzo chinogona kubatwa chiri kure.
Mumufananidzo wechipiri mamiriro acho haana kunyanya kufambira mberi. Iyo yakawanda yekuwana nzvimbo, iyo inonyanya kushanda nzvimbo yekuvhara, uye panguva imwe chete iyo chiratidzo chesimba rinenge hachipfuurire kupfuura perimeter, zvishoma kutaura, kupfuura miganhu yehofisi, hofisi, chivakwa uye zvimwe zvinogoneka zvinhu.
Anorwisa anotofanira kusvetukira pedyo asingaonekwe kuti abate chiratidzo chisina kusimba "kubva mumugwagwa" kana "kubva mukoridho" zvichingodaro. Kuti uite izvi, unofanirwa kuswedera pedyo nechivako chehofisi, somuenzaniso, kumira pasi pemahwindo. Kana kuti edza kupinda muchivako chehofisi pachayo. Chero zvazvingaitika, izvi zvinowedzera njodzi yekufumurwa pavhidhiyo kuongororwa uye kucherechedzwa nechengetedzo. Izvi zvinoderedza zvakanyanya nguva yenguva yekurwisa. Izvi hazvigone kunzi "yakanakira mamiriro ekubira."
Ehezve, kuchine chimwezve "chivi chekutanga": mawaya network kutepfenyurwa munzvimbo inosvikika iyo inogona kubvumwa nevatengi vese. Chokwadi, network yeWiFi inogona kufananidzwa neEthernet HUB, uko chiratidzo chinofambiswa kune ese madoko kamwechete. Kuti udzivise izvi, zvine mutsindo imwe neimwe yemidziyo inofanirwa kutaurirana pane yayo frequency chiteshi, izvo zvisina mumwe munhu anofanirwa kukanganisa.
Heino pfupiso yematambudziko makuru. Ngationei nzira dzokudzigadzirisa nadzo.
Mishonga: zvakananga uye zvisina kunanga
Sezvatotaurwa munyaya yapfuura, kudzivirira kwakakwana hakugone kuwanikwa chero ipi zvayo. Asi iwe unogona kuita kuti zviome sezvinobvira kuita kurwisa, uchiita kuti mhedzisiro ishaye pundutso maererano nekuedza kunoitwa.
Conventional, midziyo yekudzivirira inogona kukamurwa kuita mapoka maviri makuru:
- yakananga nzira dzekudzivirira traffic senge encryption kana MAC kusefa;
- matekinoroji ayo aimboitirwa zvimwe zvinangwa, semuenzaniso, kuwedzera kukurumidza, asi panguva imwecheteyo zvisina kunanga zvinoita kuti hupenyu hweanorwisa huve hwakaoma.
Boka rekutanga rakatsanangurwa muchikamu chekutanga. Asi isu zvakare tine mamwe matanho asina kunanga mune yedu arsenal. Sezvambotaurwa pamusoro apa, kuwedzera nhamba yenzvimbo dzekuwana inokubvumira kuderedza chiyero chechiratidzo uye kuita nzvimbo yekuvhara yunifomu, uye izvi zvinoita kuti hupenyu huve hwakaoma kune anorwisa.
Imwe caveat ndeyekuti kuwedzera kukurumidza kwekufambisa data kunoita kuti zvive nyore kushandisa mamwe matanho ekuchengetedza. Semuenzaniso, unogona kuisa VPN mutengi palaptop yega yega uye kuendesa data kunyangwe mukati metiweki yemuno kuburikidza neakavharirwa chiteshi. Izvi zvinoda zvimwe zviwanikwa, kusanganisira Hardware, asi mwero wekudzivirira uchawedzera zvakanyanya.
Pazasi tinopa tsananguro yetekinoroji inogona kuvandudza mashandiro etiweki uye zvisina kunanga kuwedzera dhigirii rekudzivirira.
Nzira dzisina kunanga dzekuvandudza dziviriro - chii chingabatsira?
Client Steering
Iyo Client Steering ficha inoita kuti mutengi ashandise bhendi re5GHz kutanga. Kana iyi sarudzo isingawanikwe kune mutengi, iye achiri kukwanisa kushandisa 2.4 GHz. Kune network yenhaka ine nhamba diki yenzvimbo dzekuwana, basa rakawanda rinoitwa mu2.4 GHz bhendi. Kune iyo 5 GHz frequency renji, imwechete yekuwana nzvimbo chirongwa haigamuchirwe mune dzakawanda zviitiko. Icho chokwadi ndechekuti chiratidzo chine frequency yakakwirira inopfuura nemumadziro uye inokotama yakatenderedza zvipingamupinyi zvakanyanya. Kurudziro yakajairwa: kuve nechokwadi kutaurirana kwakavimbiswa mu5 GHz bhendi, zviri nani kushanda mumutsara wekuona kubva panzvimbo yekuwana.
Muzviyero zvemazuva ano 802.11ac uye 802.11ax, nekuda kwenhamba yakakura yematanho, zvinokwanisika kuisa akati wandei mapoinzi ekusvika padhuze, izvo zvinokutendera iwe kudzikisa simba pasina kurasikirwa, kana kunyange kuwana, yekumhanyisa data. Nekuda kweizvozvo, kushandiswa kwe5GHz bhendi kunoita kuti hupenyu hunyanye kuoma kune vanorwisa, asi hunovandudza kunaka kwekutaurirana kune vatengi vari kusvika.
Ichi chiitiko chinoratidzwa:
- paNebula neNebulaFlex nzvimbo dzekuwana;
- mune firewalls ane controller basa.
Auto Healing
Sezvambotaurwa pamusoro apa, iyo contours yekamuri perimeter haikodzeri zvakanaka mumadhayagiramu akatenderera enzvimbo dzekuwana.
Kuti ugadzirise dambudziko iri, chekutanga, unofanirwa kushandisa iyo yakakwana nhamba yenzvimbo dzekuwana, uye chechipiri, kuderedza kuwirirana. Asi kana iwe ukangodzikisira nemaoko simba revashambadziri, kupindira kwakananga kwakadaro kunogona kutungamirira mukudzikira mukutaurirana. Izvi zvinonyanya kucherechedzwa kana imwe kana kupfuura nzvimbo dzekuwana dzakundikana.
Auto Healing inobvumidza iwe kukurumidza kugadzirisa simba pasina kurasikirwa nekuvimbika uye nekumhanyisa data.
Paunenge uchishandisa basa iri, mutongi anotarisa mamiriro uye kushanda kwenzvimbo dzekuwana. Kana imwe yadzo isingashande, ipapo vavakidzani vanorayirwa kuti vawedzere simba rechiratidzo kuti vazadze "nzvimbo chena". Kana nzvimbo yekupinda yasimuka uye ichimhanya zvakare, nzvimbo dzakavakidzana dzinorairwa kuderedza simba rechiratidzo kuderedza kupindirana.
Seamless WiFi inotenderera
Pakutanga kuona, tekinoroji iyi haigone kudanwa kuti inowedzera mwero wekuchengetedza; asi, zvinopesana, zvinoita kuti zvive nyore kune mutengi (kusanganisira anorwisa) kuchinja pakati penzvimbo dzekuwana pane imwechete network. Asi kana maviri kana anopfuura mapoinzi ekuwana akashandiswa, unofanirwa kuve nechokwadi chekushanda pasina matambudziko asina basa. Uye zvakare, kana nzvimbo yekupinda yaremerwa, inotarisana zvakanyanya nekuchengetedza mabasa senge encryption, kunonoka mukutsinhana data uye zvimwe zvisingafadzi zvinoitika. Panyaya iyi, kudzungaira kusina musono kunobatsira zvikuru kugovera zviri nyore mutoro uye kuve nechokwadi chekushanda kusingapindiki mune yakachengetedzwa modhi.
Kugadzirisa zvikumbaridzo zvesimba rekubatanidza uye kubvisa mawaya evatengi (Signal Threshold kana Signal Strength Range)
Paunenge uchishandisa imwe nzvimbo yekuwana, basa iri, mumutemo, harina basa. Asi chero mapoinzi akati wandei anodzorwa nemutongi ari kushanda, zvinokwanisika kuronga kugoverwa kwemafoni kwevatengi kune akasiyana maAP. Zvakakodzera kuyeuka kuti nzvimbo yekupinda controller mabasa anowanikwa mumitsara yakawanda yemarouter kubva kuZyxel: ATP, USG, USG FLEX, VPN, ZyWALL.
Zvishandiso zviri pamusoro zvine chimiro chekubvisa mutengi akabatana neSSID nechiratidzo chisina simba. "Isina simba" zvinoreva kuti chiratidzo chiri pazasi pechikumbaridzo chakaiswa pane controller. Mushure mekunge mutengi abviswa, inotumira chikumbiro chekutsvaga kutsvaga imwe nzvimbo yekuwana.
Semuyenzaniso, mutengi akabatana nenzvimbo yekupinda ine chiratidzo pazasi -65dBm, kana chiteshi cheka chikumbaridzo chiri -60dBm, mune iyi nyaya nzvimbo yekupinda inobvisa mutengi nedanho rechiratidzo ichi. Mutengi zvino anotanga nzira yekubatanidza uye anotobatana kune imwe nzvimbo yekupinda ine chiratidzo chikuru kupfuura kana chakaenzana ne -60dBm (chiteshi chiratidzo chikumbaridzo).
Izvi zvakakosha kana uchishandisa akawanda mapoinzi ekuwana. Izvi zvinodzivirira mamiriro ezvinhu apo vatengi vazhinji vanounganidza pane imwe nguva, nepo dzimwe nzvimbo dzekuwana dzisingaite.
Mukuwedzera, iwe unogona kuderedza kushamwaridzana kwevatengi vane chiratidzo chisina simba, avo vanogona kunge vari kunze kwekamuri yekamuri, semuenzaniso, kuseri kwemadziro muhofisi yakavakidzana, iyo inotibvumirawo kufunga basa iri senzira isina kunanga. yekudzivirirwa.
Kuchinjira kuWiFi 6 seimwe yenzira dzekuvandudza kuchengetedzeka
Takatotaura pamusoro pezvakanakira mishonga yakananga kare munyaya yapfuura. "Zvimiro zvekuchengetedza mawaya uye mawaya network. Chikamu 1 - Yakananga matanho ekudzivirira".
WiFi 6 network inopa nekukurumidza kutamisa data. Kune rumwe rutivi, boka idzva rezviyero rinokubvumira kuti uwedzere kukurumidza, kune rumwe rutivi, iwe unogona kuisa kunyange nzvimbo dzakawanda dzekuwana munzvimbo imwechete. Chiyero chitsva chinobvumira simba shoma kuti rishandiswe kufambisa nekumhanya kwepamusoro.
Kuwedzera kumhanyisa data.
Shanduko kuenda kuWiFi 6 inosanganisira kuwedzera kumhanya kwekuchinjana kusvika ku11Gb/s (modulation type 1024-QAM, 160 MHz chiteshi). Panguva imwecheteyo, zvishandiso zvitsva zvinotsigira WiFi 6 zvine kuita kuri nani. Rimwe rematambudziko makuru paunenge uchiita mamwe matanho ekuchengetedza, akadai seVPN chiteshi chemushandisi wega wega, kudonha kwekumhanya. NeWiFi 6, zvichave nyore kuita mamwe masisitimu ekuchengetedza.
BSS Coloring
Isu takanyora kare kuti kuwedzera yunifomu kufukidzwa kunogona kuderedza kupinda kweiyo WiFi chiratidzo kupfuura perimita. Asi nekuwedzera kukura kwenhamba yekuwana nzvimbo, kunyange kushandiswa kweAuto Healing kunogona kunge kusina kukwana, sezvo motokari "yekune dzimwe nyika" kubva kune imwe nzvimbo yakavakidzana icharamba ichipinda munzvimbo yekugamuchira.
Paunenge uchishandisa BSS Coloring, nzvimbo yekupinda inosiya akakosha mamaki (mavara) ayo data packet. Izvi zvinokutendera kuti urege kufuratira pesvedzero yevavakidzani yekufambisa michina (yekuwana mapoinzi).
Yakavandudzwa MU-MIMO
802.11ax zvakare ine zvakakosha kuvandudzwa kune MU-MIMO (Multi-Mushandisi - Multiple Input Multiple Output) tekinoroji. MU-MIMO inobvumira nzvimbo yekuwana kutaurirana nemidziyo yakawanda panguva imwe chete. Asi mune yakapfuura mwero, tekinoroji iyi yaingokwanisa kutsigira mapoka evatengi vana pahuwandu hwakafanana. Izvi zvakaita kuti kutapurirana kuve nyore, asi kwete kugamuchira. WiFi 6 inoshandisa 8x8 yakawanda-mushandisi MIMO yekufambisa uye kugamuchira.
Cherechedza: 802.11ax inowedzera saizi yepasi pasi MU-MIMO mapoka, ichipa yakanyanya kunaka WiFi network kuita. Yakawanda-mushandisi MIMO uplink ndeye nyowani yekuwedzera kune 802.11ax.
OFDMA (Orthogonal frequency-division multiple access)
Iyi nzira nyowani yekuwana chiteshi uye kutonga inogadzirwa zvichibva pamatekinoroji akatoratidzwa muLTE cellular tekinoroji.
OFDMA inobvumira zvinopfuura chiratidzo chimwe kuti chitumirwe pamutsara mumwechete kana chiteshi panguva imwe chete nekupa nguva yekufamba kune imwe neimwe kutapurirana uye kushandisa frequency division. Nekuda kweizvozvo, kwete chete kukurumidza kunowedzera nekuda kwekushandiswa kuri nani kwechiteshi, asiwo kuchengetedza kunowedzera.
Summary
WiFi network iri kuramba yakachengeteka gore rega rega. Kushandiswa kwemichina yemazuva ano kunotibvumira kuronga chiyero chinogamuchirwa chekudzivirira.
Yakananga nzira dzekudzivirira muchimiro chetraffic encryption dzakaratidza ivo pachavo chaizvo. Usakanganwa nezve mamwe matanho: kusefa neMAC, kuviga network ID, Rogue AP Detection (Rogue AP Containment).
Asi kune zvakare nhanho dzisina kunanga dzinovandudza kushanda kwakabatana kwemidziyo isina waya uye kuwedzera kukurumidza kwekutsinhana kwedata.
Kushandiswa kwemichina mitsva kunoita kuti zvibvirire kuderedza chiyero chechiratidzo kubva pamakona, zvichiita kuti kuvhara kuwedzere yunifomu, iyo ine simba rakanaka pahutano hwese wireless network yose, kusanganisira kuchengeteka.
Kunzwisisa kunorayira kuti nzira dzose dzakanaka kuvandudza kuchengeteka: zvose zvakananga uye zvisina kunanga. Uku kusanganiswa kunokubvumira kuti uite kuti hupenyu huve hwakaoma sezvinobvira kune anorwisa.
Useful links:
- Zvimiro zvekuchengetedzwa kwewireless uye wired network. Chikamu 1 - Yakananga matanho ekudzivirira
Source: www.habr.com