Chinyorwa chichakurukura matambudziko ekuronga network network nenzira yechinyakare uye nzira dzekugadzirisa nyaya dzakafanana uchishandisa cloud technologies.
Zvekureva. Nebula iSaaS gore nharaunda yekuchengetedza kure kure network network. Zvese zvinoshandiswa neNebula-enabled zvinodzorwa kubva mugore kuburikidza nekubatanidza kwakachengeteka. Iwe unogona kubata yakakura yakagovaniswa network network kubva kune imwechete centre pasina kushandisa simba rekuigadzira.
Для чего нужен очередной облачный сервис?
Dambudziko guru kana uchishanda netiweki zvivakwa harisi kugadzira network nekutenga michina, kana kuiisa mune rack, asi zvimwe zvese zvinofanirwa kuitwa netiweki iyi mune ramangwana.
New network - kushushikana kwekare
Pakuisa node itsva yetiweki mukushanda mushure mekuisa uye nekubatanidza michina, yekutanga gadziriso inotanga. Kubva pakuona kwe "mabhosi makuru" - hapana chakaoma: "Tinotora zvinyorwa zvekushanda zvepurojekiti uye tinotanga kugadzirisa ..." Izvi zvinonyatsotaurwa kana zvinhu zvose zvetiweki zviri mune imwe nzvimbo yedata. Kana vakapararira pamatavi, musoro wekupa mukana wekure unotanga. Idenderedzwa rakashata rakadaro: kuti uwane kure kure netiweki, unofanirwa kugadzirisa network network, uye nekuda kweizvi iwe unoda kuwana pane network ...
Tinofanira kuuya nezvirongwa zvakasiyana-siyana kuti tibude mugwara ratsanangurwa pamusoro apa. Semuenzaniso, laptop ine Internet yekuwana kuburikidza ne USB 4G modem yakabatana kuburikidza nechigamba tambo kune tsika network. Mutengi weVPN akaiswa pane iyi laptop, uye kuburikidza nayo manetiweki maneja kubva kudzimbahwe anoedza kuwana mukana kune network yebazi. Iyo hurongwa haisi iyo yakanyanya kujeka - kunyangwe ukaunza laptop ine pre-yakagadzirirwa VPN kune iri kure saiti uye wokumbira kuibatidza, zviri kure nenyaya yekuti zvese zvichashanda kekutanga. Kunyanya kana isu tichitaura nezve imwe nzvimbo ine mupi akasiyana.
Zvinoitika kuti nzira yakavimbika ndeyekuva nenyanzvi yakanaka "kune rumwe rutivi rwemutsara" iyo inogona kugadzirisa chikamu chake maererano neprojekti. Kana pasina chinhu chakadaro muvashandi vebazi, sarudzo dzinosara: kungave kuburitsa kana bhizinesi kufamba.
Tinoda zvakare monitoring system. Inoda kuisirwa, kugadziridzwa, kuchengetwa (kungoita yekutarisa disk nzvimbo uye kuita nguva dzose backups). Uye izvo hazvizivi chinhu nezvemidziyo yedu kudzamara tazvitaura. Kuti uite izvi, unofanirwa kunyoresa zvigadziriso zvezvikamu zvese zvemidziyo uye unogara uchitarisa kukosha kwezvinyorwa.
Zvakanaka kana vashandi vane "one-man orchestra" yavo, iyo, kunze kweruzivo rwakananga rwemaneti network, anoziva kushanda neZabbix kana imwe nzira yakafanana. Zvikasadaro, isu tinohaya mumwe munhu pavashandi kana outsource it.
Cherechedza: Kukanganisa kwakanyanya kunotanga nemazwi anoti: "Chii chiripo kugadzirisa iyi Zabbix (Nagios, OpenView, nezvimwewo)? Ndichakurumidza kuitora uye yakagadzirira! "
Kubva pakuitwa kusvika pakushanda
Ngatitarisei muenzaniso chaiwo.
Meseji yealarm yakagamuchirwa ichiratidza kuti nzvimbo yekupinda yeWiFi pane imwe nzvimbo haisi kudaira.
Ari kupi?
Ehe, a good network administrator ane yake yega dhairekitori umo zvese zvakanyorwa pasi. Mibvunzo inotanga kana ruzivo urwu ruchida kugoverwa. Semuenzaniso, iwe unofanirwa nekukurumidza kutumira mutumwa kuti agadzirise zvinhu ipapo ipapo, uye nekuda kweizvi iwe unofanirwa kuburitsa chimwe chinhu senge: "Nzvimbo yekupinda munzvimbo yebhizinesi paStroiteley Street, kuvaka 1, pauriri hwe3, hofisi Nha. 301 padyo nemusuwo wekupinda pasi pesirin'i."
Ngatitii tine rombo rakanaka uye nzvimbo yekupinda inofambiswa nePoE, uye switch inobvumira kuti itangezve kure. Iwe haufanirwe kufamba, asi iwe unoda kure kure kune switch. Chinosara ndechekugadzirisa kutumira kwechiteshi kuburikidza nePAT pane router, funga iyo VLAN yekubatanidza kubva kunze, zvichingodaro. Zvakanaka kana zvinhu zvose zvakagadzirirwa mberi. Basa racho ringasava rakaoma, asi rinoda kuitwa.
Saka, chikafu chekudya chakatangwazve. Hazvina kubatsira?
Ngatitii chimwe chinhu chisina kumira zvakanaka muhardware. Iye zvino tiri kutsvaga ruzivo nezve waranti, kutanga-up uye mamwe mashoko ekufarira.
Kutaura nezve WiFi. Kushandisa vhezheni yeimba yeWPA2-PSK, ine kiyi imwe yemidziyo yese, haikurudzirwe munharaunda yemakambani. Chekutanga, kiyi imwe yemunhu wese haina kuchengetedzeka, uye chechipiri, kana mushandi mumwe aenda, unofanirwa kushandura kiyi iyi yakajairika uye woitazve marongero pamidziyo yese yevashandisi. Kuti udzivise matambudziko akadai, pane WPA2-Enterprise ine chokwadi chega chega chega mushandisi. Asi nokuda kweizvi unoda RADIUS server - imwe yuniti yezvivakwa inoda kudzorwa, ma backups akaitwa, zvichingodaro.
Ndokumbira utarise kuti pamatanho ese, kungave kuita kana kushanda, takashandisa masisitimu ekutsigira. Izvi zvinosanganisira laptop ine “yechitatu-bato” Internet yekubatanidza, yekutarisa sisitimu, dhatabhesi rekushandisa, uye RADIUS senzira yekusimbisa. Kuwedzera kunetiweki zvishandiso, iwe zvakare unofanirwa kuchengetedza wechitatu-bato masevhisi.
Mumamiriro ezvinhu akadaro, unogona kunzwa mazano: "Ipa kune gore uye usatambura." Chokwadi kune gore Zabbix, pamwe kune gore RADIUS kumwe kunhu, uye kunyangwe dhatabhesi regore kuchengetedza runyoro rwemidziyo. Dambudziko nderekuti izvi hazvidiwe zvakasiyana, asi "mubhodhoro rimwe." Uye zvakadaro, mibvunzo inomuka nezve kuronga kupinda, yekutanga mudziyo kuseta, chengetedzo, nezvimwe zvakawanda.
Zvinotaridzika sei kana uchishandisa Nebula?
Zvechokwadi, pakutanga "gore" harizivi chinhu pamusoro pezvirongwa zvedu kana midziyo yakatengwa.
Kutanga, chimiro chesangano chinogadzirwa. Ndiko kuti, hurongwa hwese: mahofisi makuru nematavi anotanga kunyoreswa mugore. Details inotsanangurwa uye maakaundi anogadzirwa kuti atumire chiremera.
Iwe unogona kunyoresa zvishandiso zvako mugore nenzira mbiri: yechinyakare nzira - nekungoisa nhamba yeserial paunenge uchizadza fomu rewebhu kana nekutarisa kodhi yeQR uchishandisa nharembozha. Zvese zvaunoda kune yechipiri nzira ndeye smartphone ine kamera uye Internet kuwana, kusanganisira kuburikidza nenharembozha.
Ehe, zvivakwa zvinodiwa zvekuchengetedza ruzivo, zvese accounting uye zvigadziriso, zvinopihwa neZyxel Nebula.
Mufananidzo 1. Nebula Control Center security report.
Zvakadini nekugadzirisa access? Kuvhura zviteshi, kutumira traffic kuburikidza negedhi rinopinda, zvese izvo vatariri vekuchengetedza vanodana nerudo "kunhonga maburi"? Sezvineiwo, haufanirwe kuita zvese izvi. Zvishandiso zvinoshandisa Nebula zvinogadzira chinongedzo chinobuda. Uye maneja anobatanidza kwete kune chimwe chinhu chakasiyana, asi kune gore rekugadzirisa. Nebula inopindirana pakati pezvibatanidza zviviri: kune mudziyo uye kune network network maneja komputa. Izvi zvinoreva kuti nhanho yekufonera anouya admin anogona kudzikiswa kana kusvetuka zvachose. Uye hapana mamwe "maburi" mune firewall.
Zvakadini neRADUIS server? Mushure mezvose, imwe mhando yekusimbisa yepakati inodiwa!
Uye mabasa aya anotorwawo neNebula. Kusimbiswa kwemaakaundi ekuwana michina kunoitika kuburikidza nedatabase rakachengeteka. Izvi zvinorerutsa zvakanyanya kutumwa kana kubviswa kwekodzero dzekutonga sisitimu. Isu tinofanirwa kuendesa kodzero - gadzira mushandisi, topa basa. Tinofanira kubvisa kodzero - isu tinoita zvinodzosera kumashure.
Zvakasiyana, zvakakodzera kutaura WPA2-Enterprise, iyo inoda yakaparadzana yekusimbisa sevhisi. Zyxel Nebula ine analogue yayo - DPPSK, iyo inokutendera kuti ushandise WPA2-PSK ine kiyi yega yega mushandisi.
"Isina kunaka" mibvunzo
Pazasi isu tichaedza kupa mhinduro kumibvunzo yakaoma kwazvo inowanzo bvunzwa kana uchipinda musangano wegore
Yakachengeteka here?
Mune chero kutumwa kwekutonga uye manejimendi kuve nechokwadi chekuchengetedza, zvinhu zviviri zvinoita basa rakakosha: kusazivikanwa uye encryption.
Kushandisa encryption kuchengetedza traffic kubva kune prying maziso chinhu icho vaverengi vanonyanya kujaira kana kushoma.
Anonymization inovanza ruzivo nezve muridzi uye sosi kubva kune cloud provider vashandi. Ruzivo rwemunhu rwunobviswa uye marekodhi anopihwa "isina chiso" identifier. Kana iyo Cloud software yekuvandudza kana maneja anochengetedza gore system anogona kuziva muridzi wezvikumbiro. "Zvabvepi izvi? Ndiani angafarira izvi? " - mibvunzo yakadaro icharamba isina kupindurwa. Kushaikwa kweruzivo nezvemuridzi uye kwakabva kunoita kuti mukati kutambe nguva isina musoro.
Kana tikaenzanisa nzira iyi neyechinyakare tsika yekuburitsa kana kuhaya maneja ari kuuya, zviri pachena kuti makore matekinoroji akachengeteka. Nyanzvi inopinda yeIT inoziva zvakawanda nezvesangano rake, uye inogona, willy-nilly, kukonzera kukuvadza kwakakura maererano nechengetedzo. Nyaya yekudzingwa kana kupera kwekondirakiti ichiri kuda kugadziriswa. Dzimwe nguva, pamusoro pekuvhara kana kudzima account, izvi zvinosanganisira shanduko yepasi rose yemapassword ekuwana masevhisi, pamwe nekuongororwa kwezvese zviwanikwa zve "kukanganwa" mapoinzi ekupinda uye anogona "bookmark".
Zvakadini zvinodhura kana zvakachipa Nebula pane ari kuuya admin?
Zvose zvine hukama. Nebula's basic features inowanikwa mahara. Chaizvoizvo, chii chingave chakachipa?
Ehe, hazvibviri kuita zvachose pasina network maneja kana munhu anomutsiva. Mubvunzo ndewehuwandu hwevanhu, hunyanzvi hwavo uye kugovera munzvimbo dzese.
Kana iri iyo yakabhadharwa sevhisi yakawedzerwa, kubvunza mubvunzo wakananga: inodhura zvakanyanya kana yakachipa - maitiro akadaro anogara asina kururama uye rimwe divi. Zvingave zvakanyanya kunaka kuenzanisa zvinhu zvakawanda, kubva pamari kubhadhara basa renyanzvi chaidzo uye kupera nemitengo yekuona kudyidzana kwavo nekondirakiti kana munhu: kutonga kwemhando, kudhirowa zvinyorwa, kuchengetedza mwero wekuchengetedza, uye zvichingodaro.
Kana isu tiri kutaura nezve musoro wekuti zvinobatsira here kana kuti zvisingabatsiri kutenga iyo yakabhadharwa pasuru yemasevhisi (Pro-Pack), saka mhinduro yekufungidzira inogona kunzwika seizvi: kana sangano iri diki, unogona kuwana neiyo yakakosha. vhezheni, kana sangano riri kukura, saka zvine musoro kufunga nezvePro-Pack. Misiyano pakati peshanduro dzeZyxel Nebula inogona kuoneka muTafura 1.
Tafura 1. Musiyano pakati pekutanga uye Pro-Pack maficha seti yeNebula.
Izvi zvinosanganisira kuzivisa kwepamberi, kuongororwa kwemushandisi, kugadzirisa cloning, uye zvimwe zvakawanda.
Zvakadini nekuchengetedzwa kwemotokari?
Nebula inoshandisa protocol kuve nechokwadi chekushanda kwakachengeteka kwemidziyo yetiweki.
NETCONF inogona kumhanya pamusoro peakati wandei maprotocol:
- ();
- ();
- ();
- ().
Kana tikaenzanisa NETCONF nedzimwe nzira, semuenzaniso, manejimendi kuburikidza neSNMP, zvinofanirwa kucherechedzwa kuti NECONF inotsigira inobuda TCP yekubatanidza kukunda NAT barriers uye inoonekwa seyakavimbika.
Zvakadini nerutsigiro rwehardware?
Ehe, haufanirwe kushandura sevha kamuri kuita zoo ine vamiriri veasingawanzo uye ari mungozi mhando dzemidziyo. Izvo zvinodikanwa kwazvo kuti michina yakabatanidzwa nemanejimendi tekinoroji inovhara mativi ese: kubva pakati switch kuenda kunzvimbo dzekuwana. Zyxel mainjiniya akatarisira mukana uyu. Nebula inoshandisa michina yakawanda:
- 10G pakati switch;
- maswiti level yekupinda;
- chinja nePoE;
- nzvimbo dzekuwana;
- network gateways.
Uchishandisa huwandu hwakasiyana hwemidziyo inotsigirwa, unogona kuvaka network yemhando dzakasiyana dzemabasa. Izvi ndezvechokwadi kunyanya kumakambani ari kukura kwete kumusoro, asi kunze, achigara achiongorora nzvimbo itsva dzekuita bhizinesi.
Kuenderera mberi kukura
Midziyo yetiweki ine nzira yechinyakare manejimendi ine nzira imwe chete yekuvandudza - kushandura mudziyo pachayo, ingave itsva firmware kana mamwe mamodule. Panyaya yeZyxel Nebula, pane imwe nzira yekuvandudza - kuburikidza nekuvandudza makore ezvivakwa. Semuenzaniso, mushure mekugadzirisa Nebula Control Center (NCC) kushanduro 10.1. (Gunyana 21, 2020) zvitsva zvinowanikwa kune vashandisi, hezvino zvimwe zvacho:
- Muridzi wesangano zvino anogona kuendesa kodzero dzose dzekuva muridzi kune mumwe maneja ari musangano rimwechete;
- basa idzva rinonzi Owner Representative, rine kodzero dzakafanana nemuridzi wesangano;
- itsva sangano-wide firmware update feature (Pro-Pack feature);
- sarudzo mbiri nyowani dzakawedzerwa kune iyo topology: kutangazve chishandiso uye kushandura PoE port simba nekudzima (Pro-Pack basa);
- tsigiro yemhando nyowani dzekuwana: WAC500, WAC500H, WAC5302D-Sv2 uye NWA1123ACv3;
- tsigiro yekusimbisa voucher neQR kodhi kudhinda (Pro-Pack basa).
Useful links
Source: www.habr.com