I-ProHoster > Блог > Ukuphatha > 3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Sawubona, bafundi abathandekayo bebhulogi ye-TS Solution, siqhubeka nochungechunge lwezihloko zezixazululo ze-NGFW CheckPoint engxenyeni ye-SMB. Ukuze kube lula, ungazijwayeza ngebanga lamamodeli, ufunde izici namakhono ku ingxenye yokuqala, bese siphakamisa ukuphendukela ekukhipheni nasekusetheni kokuqala sisebenzisa isibonelo sempahla yangempela ye-1590 Check Point ku ingxenye yesibili.

Kulabo abasanda kujwayelana nohla lwemodeli ye-SMB - ilungele amahhovisi amancane noma amagatsha abantu abangafika kwabangama-200 (lapho ukhetha imodeli 1590). Esinye sezici zalo mndeni ukusekelwa kokuxhumana okungenantambo; lokhu kungaba usizo uma ingqalasizinda inamadivayisi ane-adaptha ye-WiFi noma i-NGFW idinga ukufinyelela ku-inthanethi ngokuxhumana kweselula. Ngemisebenzi esohlwini uzodinga ubuchwepheshe: i-WiFi, i-LTE. Lesi sihloko simayelana nalokhu, lapho sizobheka khona:

  1. Inika amandla futhi ilungiselela imodi ye-WiFi ye-NGFW.
  2. Ivumela futhi ilungise imodi yokusebenza ye-LTE ye-NGFW.
  3. Iziphetho ezijwayelekile mayelana nobuchwepheshe obungenawaya be-NGFW.

I-NGFW ne-WiFi

Uma sibuyela engxenyeni yesi-2 yochungechunge lwethu, sishiye inketho yokuxhumeka komsebenzisi okungenantambo kukhutshaziwe, ngakho-ke udinga ukuya kuthebhu Idivayisi → Inethiwekhi → Okungenantambo

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Kusithombe-skrini engisinikezile, kunezindlela ezimbili zokusebenza ze-WiFi ezingaba khona:

  1. I-2.4 GHz imvamisa esekelwa izizukulwane eziningi zamadivayisi ahlukahlukene angenawaya.
  2. I-5 GHz imvamisa okuyindinganiso yesimanje yokusebenza ngemishini engenantambo; ukwesekwa kutholakala kuwo wonke ama-smartphones esimanje, amaphilisi namakhompyutha aphathekayo.

Futhi kusukela kusithombe-skrini (ngenhla) ungaqaphela ukuthi sengivele nginike amandla imodi yokusebenza ye-5 GHz, ake simise i-2.4 GHz ndawonye, ​​ukwenza lokhu, chofoza inkinobho "Lungisa".

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ewindini lokudala indawo yokufinyelela, siyacelwa ukuthi sicacise isethi evamile yamapharamitha. Ungasebenzisa iphasiwedi noma iseva yeRadius njengendlela yokuqinisekisa. Inketho ethi “Vumela ukufinyelela kusuka kule nethiwekhi kuya kumanethiwekhi endawo” inesibopho sokufinyelela kwamakhasimende akho angenantambo ezinsizeni zangaphakathi ezitholakala ngemuva kwe-GFW Check Point. Uma iphoyinti lakho selilungisiwe, ungashintsha amapharamitha engeziwe.

Izilungiselelo ezitholakalayo
3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ngemuva kokuthi idivayisi engaphansi kokuhlolwa isixhumeke endaweni yakho yokufinyelela, singaqiniseka ukuthi ikunethiwekhi yethu, hamba kuthebhu: Amalogi nokuqapha → Isimo → Amadivayisi Angasebenzi Angenantambo

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Uma sichofoza entweni enegama, sizobona izici zeklayenti elixhunyiwe:

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ngaphezu kolwazi mayelana nedivayisi, ngicabangela izinketho ezilandelayo eziwusizo:

  • gcina into ezosetshenziswa emithethweni (1);
  • vimba ukufinyelela kuleli klayenti (2).

Ngaphezu kwalokho, ngokusekelwe kuzilungiselelo zethu ze-Application Blade (kumatemu okuhlola, enye yamamojula), ukuchofoza izixhumanisi ezingase zibe yingozi akuvunyelwe.

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Sizama ukuvula esinye sezigaba kudivayisi yeselula ngokuxhuma nge-WiFi ku-NGFW Check Point futhi, ngokufanelekile, sifinyelele i-inthanethi ngayo.

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Isiphetho: Umsebenzisi akakwazanga ukufinyelela isayithi, elingaphansi kwesigaba se-Anonymizer.

Ngakho-ke, sibheke ukusethwa okuyisisekelo kokuxhuma abasebenzisi be-WiFi; lokhu kulula emahhovisi amancane lapho kukhona inqwaba yamadivaysi angenawaya. Ngesikhathi esifanayo, isixazululo se-Check Point NGFW sikuvumela ukuthi uvikele abasebenzisi bakho ekubeni sengozini nokuqukethwe okunonya, futhi unezinketho eziguquguqukayo zokuqapha abasingathi abangenazintambo. Ngingathanda ukusho ngokwehlukana ukuphathwa usebenzisa uhlelo lokusebenza lweselula; indlela ichazwe kwenye yethu izihloko.

I-NGFW ne-LTE

Amamodeli 1570, 1590 eza nemodemu ye-LTE, ekuvumela ukuthi usebenzise i-Micro/Nano SIM bese usungula uxhumano lwe-4G. Kulabo abafuna ukwazi, sizoshiya isikhumbuzi esifushane ngaphansi kwe-spoiler.

Imiyalelo yokufaka i-SIM
3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ngakho-ke ufake i-SIM, emva kwalokho udinga ukubuyela ku-Gaia Portal bese uya esigabeni esilandelayo Idivayisi → Inethiwekhi → I-inthanethi. Ngokuzenzakalelayo, uzoba noxhumo olulodwa lwe-WAN; udinga ukudala uxhumano olusha ngokulandela umcibisholo obomvu.

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Lapho sizodinga khona ukusetha igama lokuxhuma, sinqume uhlobo lwesixhumi esibonakalayo (esimweni sethu Iselula)

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ukwengeza, vula ithebhu "Ukuqapha Ukuxhumana", lapha kungenzeka ukuthumela ngokuzenzakalelayo: isicelo se-ARP kumzila ozenzakalelayo, amaphakethe we-ICMP emithonjeni ecacisiwe, ngiyaqaphela ukuthi ungacacisa izinsiza zakho zokuqapha.

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ithebhu "Iselula" unesibopho sokukhetha okubalulekile phakathi kwama-SIM, ukufaka idatha yokuqinisekisa uma kudingeka (APN, PIN).

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Kuthebhu "Okuthuthukile" Kuyenzeka ukusetha izilungiselelo zenethiwekhi:

  • izilungiselelo zesixhumi esibonakalayo (MTU, MAC)
  • I-QOS
  • I-ISP Redundancy
  • I-NAT
  • DHCP

Ngemva kokudala uhlobo olusha lokuxhuma, uzothola ithebula lokuxhumana kwe-inthanethi kulo Idivayisi → Inethiwekhi → I-inthanethi:

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Kusithombe-skrini esivezwe ngenhla sibona uxhumano olusha "LTE_TELE2", njengoba ungase uqagele, lena i-SIM evela kumhlinzeki we-Tele2. Ithebula linikeza ulwazi mayelana nezinga lesignali, libonisa iphesenti lokulahlekelwa nesikhathi sokulibaziseka. Ukwengeza, kungenzeka ukuvula inketho Ukuqapha Ukuxhumana.

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Efasiteleni lokuqapha sibona imiphumela yokuthumela izicelo kumaseva afika kwamathathu, enye yawo inkambiso (ya.ru). Kuboniswa lapha:

  • iphesenti yokulahlekelwa kwephakethe;
  • iphesenti lamaphutha enethiwekhi;
  • isikhathi sokuphendula (isilinganiso, ubuncane kanye nobuningi);
  • jitha.

Uma uthanda ulwazi lwesistimu mayelana nemodemu ye-LTE ku-NGFW Check Point, kufanele uye ku Amalogi nokuqapha→ Ukuxilongwa → Amathuluzi → Qapha Imodemu Yeselula:

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Okulandelayo, sihlaziye isivinini sokufinyelela ku-inthanethi komsingathi wokugcina, oxhunywe ku-NGFW nge-WiFi (5 GHz), futhi isango ngokwalo lisebenzisa uxhumano lwe-LTE ukuthumela amaphakethe ku-Global Network. Siqhathanise amanani atholiwe nesimo lapho kusetshenziswa indawo efanayo, kodwa ifoni ixhumeka ku-inthanethi ngokuqondile. Ukuze kube lula, imiphumela ifihliwe ngaphansi kwe-spoiler.

Imiphumela ye-SpeedTest
3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Kunjalo, lezi zinkomba zinamaphutha kanye nezici zazo, ake sibeke phambili i-hypothesis: I-NGFW 1590 ikhulisa amandla esignali yeselula engenayo isebenzisa izimpondo ezimbili zangaphandle. Lesi sitatimende siqinisekiswa ngokungaqondile ngemiphumela ye-SpeedTest, eyenziwe ngaphansi kwezimo ezifanayo futhi ibonisa ukwehla kwe-Ping nokubambezeleka kumthombo ofanayo.

Into

NGFW+LTE

Iselula+LTE

I-Ping (ms)

30

34

Jitter (ms)

7.2

5.2

Isivinini esingenayo (Mbp/s)

16.1

12

Isivinini esiphumayo (Mbp/s)

10.9

2.97

Ukuze sihlole ukusebenza kahle kwezimpondo zangaphandle ze-NGFW Check Point 1590, silinganise izinga lokwamukela isignali, bese sisebenzisa imenyu yobunjiniyela senza isilinganiso esifanayo kufoni. Imiphumela yethulwa ngezansi:

3. I-NGFW yamabhizinisi amancane. Ukudluliswa kwedatha okungenantambo: i-WiFi ne-LTE

Ngokufanelekile, izinga lamandla okwamukela isignali libhekwa njengelingcono kakhulu uma inani layo elinegethivu lifinyelela ku-0. Inani elitholwe ocingweni lalingu-(-109 dBm), kumodemu (-61 dBm). Okuvame ukuqinisekisa i-hypothesis yethu futhi kukhombisa ukuzinza kokuxhumana kwe-LTE komndeni we-NGFW SMB.

Iziphetho ezijwayelekile

Ukufingqa ingxenye yanamuhla, kucatshangelwe ubuchwepheshe obubili: i-WiFi ne-LTE, esekelwa amamodeli we-Check Point we-1570, 1590.

Emahhovisi amancane namagatsha, akunakwenzeka ngaso sonke isikhathi ukufaka izindawo ezihlukene zokufinyelela okungenantambo, ngakho-ke i-NGFW izosiza ukuhlela inethiwekhi engenazintambo, futhi okubaluleke kakhulu, ukuvikela abasebenzisi abanjalo.

Ngokuqondene nemodemu ye-LTE esekwe ku-NGFW, ngokubona kwami, izimo zokusebenzisa ezilandelayo zizodingeka:

  1. Ukuntuleka koxhumano lwezintambo ku-inthanethi. Kulesi simo, uzophoqeleka ukuthi usebenzise ukuxhumana kweselula ukuze unikeze uxhumano lwe-inthanethi. Lesi simo futhi sifanelekile ezinkampanini ezithile uhlobo lwazo lomsebenzi oludinga ukubekwa “kweselula” kwengqalasizinda yenethiwekhi yazo, kungakhathaliseki ukuthi yiziphi izimo (indawo, ukutholakala kokuxhumana ngezintambo, njll.).
  2. Ukubhukha kwesiteshi esikhulu sokufinyelela esinezintambo. Ake ngikukhumbuze ukuthi i-NGFW isekela ukusebenza ngama-SIM amabili, lokhu kwandisa ukubekezelelwa kwephutha kwengqalasizinda yakho uma kwenzeka ingozi ngeyodwa yezixhumanisi ezinezintambo. Ungakwazi futhi ukunika amandla ukuxhumeka kwe-LTE ngesandla, kuye ngesimo sakho sokusebenzisa.

Ukukhethwa okukhulu kwezinto zokwakha ku-Check Point kusuka ku-TS Solution. Hlala ubukele (yocingo, Facebook, VK, I-TS Solution Blog, I-Yandex.Zen).

Source: www.habr.com

Engeza amazwana