Chero muzvinabhizimisi anoedza kuderedza mari inoshandiswa. Izvi zvinoshandawo kune zvigadzirwa zveIT.
Kana hofisi itsva ichivhurwa, bvudzi remumwe munhu rinotanga kumira. Mushure mezvose, zvakakosha kuronga:
- local area network;
- Indaneti. Zvingava nani kuva negadziriro yeparutivi kuburikidza nomupi wechipiri;
- VPN kuhofisi yepakati (kana kumapazi ese);
- HotSpot yevatengi vane mvumo yeSMS;
- kusefa traffic kuitira kuti vashandi vasagare pasocial network kana kutaura paSkype;
- chengetedza network kubva kumavhairasi nekurwiswa. Ipa dziviriro kubva kune intrusions (IDS/IPS);
- yako yega mail server (kana iwe usingavimbi chero pdd.yandex.ru) ine antivirus uye antispam;
- file dump;
- Iwe ungangoda runhare, kureva kuronga PBX, batanidza kune SIP mupi uye zvimwe zvinonaka...
Asi nyanzvi yeIT haizokwanisi kusimudza network yebhizinesi nezvinodiwa zvakadaro ... Hire anodhura system administrator?
Nhamba yakakura kwazvo yeRuble iri kubuda maererano nemitengo yeramangwana.
Asi mari idzi dzinogona kudzikiswa zvakanyanya kana ukateerera UTM mhinduro, izvo zvino kune nhamba huru. Uye sezvo ini ndichiomerera kune zano re "zvakareruka, zvirinani" mukugadzirisa matambudziko angu, maziso angu akawira paUTM. (X).
Iyi sisitimu inozobatsira sei kuchengetedza bhajeti rekambani uye nei usingade inodhura sisitimu maneja kuti uichengetedze - ini ndichakuudza pazasi.
Asi ndichitarisa kumberi, ndichataura kuti ichi chigadzirwa chakananga uye chine painogumira. Iwe unogona kuongorora kugona kwegedhi mune zvakadzama .
Ndakaigadzirira iyo chinyorwa "muchiRussia", ndiko kuti, pasina kutarisa mumabhuku, kunzwisisa kuti intuitively yakajeka sei zvinhu zvose.
Kutanga kuiswa
ICS inogona kuiswa zvese pane chaiyo hardware uye mune hypervisor. Unogona kushandisa chero fanless PC.Somuenzaniso, iyi.
Iyo sisitimu yakavakirwa pa uye pamidziyo mizhinji inofanira kusimuka pasina matambudziko.
Kuiswa kunoitwa padhisiki yakachena. Kunyanya, kana paine chimwe chinhu ipapo, unogona kutaura zvakachengeteka kwachiri.Nehurombo, iyo yekuisa inotsigira Chirungu chete. Asi mushure mekuiswa, iyo huru interface inogona kunge iri muchiRussia.
Kushivirira kwemhosva hakuna kukanganwika zvakare.Kana paine akati wandei dhisiki muhurongwa, anogona kusanganiswa kuita RAID uchishandisa ZFS.
Sarudza network interface uye ipa IP kubva kune yakasarudzwa network.
Rondedzera zita rezita chairo kana ukaronga kumisikidza, semuenzaniso, sevha yetsamba. Kana pasina kudiwa kwakadaro ikozvino, saka iwe unogona kuinyora zvisina tsarukano. Gare gare iwe unogona kuzvigadzirisa mune iyo interface.
Ndizvo! Iwe unogona kuisa iyo web interface kuburikidza neIP kero yawakatsanangura muzvirongwa uye port 81. DHCP haigoneki panguva ino, saka uchafanirwa kupa IP kero kubva kune imwecheteyo network paPC yako.
Isu tinobatana neInternet uye tinobatanidza mahofisi.
Paunotanga kupinda, wizard inotangwa, iyo inoita Iwe unokumbirwa kuseta password yakasimba.
Tenzi
Zvadaro tinoenda kunetiweki zvigadziriso
uye isu tinogadzirisa chinongedzo kune mupi wedu uye mabasa eese network network.
Iwe unogona kuseta vakati wandei vanopa uye kuronga kuenzanisa.
Nenzira, kana iwe usingade Chirungu interface mutauro, unogona kuchichinja nyore pano.
Kana iwe uchida kubatanidza hofisi, semuenzaniso, kuhofisi yepamusoro. Zvadaro tinogadzira kubatana kutsva
uye gadzirisa nzira kune zviwanikwa mune iri kure network.
Ingokanganwa nezve dynamic routing - haisipo.
Pamwe ndiri kunyanya kusarudzwa, asi IMHO iyi idambudziko rakakura ...
Kuwanikwa kweInternet kune vashandi
Kazhinji kazhinji, basa guru regedhi nderekudzora kuwana kwevashandi paInternet.
Vashandi vanogona kuzivikanwa neIP/Mac kana nekupinda/password kuburikidza nemumiririri kana nhapwa portal.
Zvakare, kana sangano rako richishandisa Active Directory, saka iyo ICS inogona kusanganiswa nayo.
Masefa ekusefa (apo mushandi anogona uye asingakwanise kuenda) akawandisa.
Huwandu hukuru hweakagadzirira-akagadzirwa mutemo matemplate:
Unogona kubvumira YouTube, asi rambidza kurodha mavhidhiyo ipapo.
Asi iwe haufanirwe kuzviganhurira uye ICS ichiri kukuudza kupi uye ndiani akaenda kupi nemishumo yayo yakakura:
Zvakadini nemuenzi Wi-Fi?
Uye muenzi Wi-Fi inogona kurongeka mukutevedzera zvinodiwa nemitemo yeRussia pane inosungirwa mushandisi kuzivikanwa.
IKS inotsigira kutumira SMS kuburikidza neSMPP protocol kuburikidza nechero mupi weSMS.
Telephony.
Hongu, hongu! Hapana chikonzero chekuisa sevha yakaparadzana neAsterisk. Yatova muIKS.
Ndakabudirira kubatanidza SIP kubva kuMegafon (emotion, multifon).
Maitiro ekutora SIP kubva kuMegafon pamaserura mareti emunhu anogona kuverengerwa muchinyorwa .
Chengetedzo.
Kune akawanda maturusi muIKS ayo anokutendera iwe kugadzirisa iyo nhanho yekuchengetedza zvinoenderana nezvaunoda: kubva emahara antivirus ClamAV uye. kune zvigadzirwa , kugadzirisa chete kuburikidza newebhu inonzwisisika.
Kunyangwe iyo yakafanana isingadzoreki fail2Ban inogona kugadzirwa mune mashoma mabhatani
Zvakare, ICS inogona kutarisa traffic kuburikidza netflow protocol kubva kunetiweki zvishandiso pasina kupfuura traffic kuburikidza pachayo.
Kukurukurirana kwakanaka
Kukurukurirana kwevashandi kunogona kurongeka kwete chete nefoni uye tsamba
asiwo kuburikidza nejabber. Ichokwadi, vanhu vashomanana vanoyeuka nezveprotocol yakadaro.
Web server:
Kune kunyange sevha yewebhu ine PHP rutsigiro paIKS. Iwe unogona kuisa chako cheHTTPS chitupa kana iwe watenga, kana kutsanangura kuti IKS inogamuchira yemahara Let's Encrypt.
Izvi zvakakwana kubata bhizinesi kadhi saiti kana advertising yekumhara peji. Asi hauzokwanisi kuisa inorema portal ine tsika modules. Uye mukuona kwangu, uhu hupenzi. Mushure mezvose, gedhi rinofanira kuramba riri gedhi.
Flexible yekutarisa uye zviziviso zvigadziriso.
Maalarm anogona kutumirwa kunyangwe kuTeregiramu. Uye mune chokwadi cheRussian Federation, pane kunyange mukana wekutumira mameseji kuburikidza neproxy.
Mukupedzisa
Iyo Internet gedhi "ICS" ine zvinenge zvese zvikamu zvinodiwa pakushanda kwehofisi diki.
Uyezve, izvi zvese zvinogona kumisikidzwa neanovice system maneja.
Zvisinei nekuti iyo system haina kuvakwa paFreeBSD, hapana yekuwana nayo kuburikidza ne ssh. Ndokunge, haugone kuisa PHP module pasina madondoro. Iwe unofanirwa kugutsikana nezvaunazvo ... Kana kukumbira rutsigiro kuti uzvipedze.
Chero zvazvingava, pakutanga uye tarisa kuti gedhi iri rakakukodzera sei.
Rezinesi harina zuva rekupera, asi kunyangwe izvi mutengo wakanyanya
Pakumira, mune zvekugadzira bvunzo, iyo system yakazviratidza zvakakwana.
Kana mutengi achibvumira uye iwe unofarira kuti urongwa uhwu huchaita sei mu "kurwa", ipapo mumwedzi 3-6 ndichanyora kuongorora nematambudziko ose nematambudziko akamuka. Kana ikashanda, isu tichatarisa kunaka kwekutsigirwa kwehunyanzvi.
Mune zvirevo, ndinotarisira kuti iwe ubvunze mibvunzo inoda kutariswa kwakadzama mukushandiswa kwekurwa.
Source: www.habr.com
