Siqhubeka nengxoxo emayelana nezindlela zokukhulisa ukuphepha kwenethiwekhi. Kulesi sihloko sizokhuluma ngezinyathelo ezengeziwe zokuphepha nokuhlela amanethiwekhi angenawaya aphephe kakhudlwana.
Isandulela sengxenye yesibili
Esihlokweni esedlule Kube nengxoxo ngezinkinga zokuphepha kwenethiwekhi ye-WiFi kanye nezindlela eziqondile zokuvikela ekufinyeleleni okungagunyaziwe. Izinyathelo ezicacile zokuvimbela ukuvinjelwa kwethrafikhi zazicatshangelwa: ukubethela, ukufihla inethiwekhi nokuhlunga kwe-MAC, kanye nezindlela ezikhethekile, isibonelo, ukulwa ne-Rogue AP. Nokho, ngaphezu kwezindlela eziqondile zokuvikela, kukhona nezingaqondile. Lobu ubuchwepheshe obungasizi nje kuphela ukuthuthukisa ikhwalithi yokuxhumana, kodwa futhi nokuthuthukisa ukuphepha.
Izici ezimbili eziyinhloko zamanethiwekhi angenawaya: ukufinyelela okukude ngaphandle kokuthinta kanye nomoya womsakazo njengendlela yokusakaza yokudlulisa idatha, lapho noma yimuphi umamukeli wesignali ekwazi ukulalela umoya, futhi noma yisiphi isidluliseli singavala inethiwekhi ngokusakazwa okungenamsebenzi kanye nokuphazanyiswa komsakazo kalula. Lokhu, phakathi kwezinye izinto, akunawo umthelela ongcono kakhulu ekuvikelekeni kukonke kwenethiwekhi engenantambo.
Ngeke uphile ngokuphepha uwedwa. Kusafanele sisebenze ngandlela thize, okungukuthi, ukushintshanisa idatha. Futhi kulolu hlangothi kunezinye izikhalazo eziningi nge-WiFi:
- izikhala ekukhavisweni (“amabala amhlophe”);
- umthelela wemithombo yangaphandle kanye nezindawo zokufinyelela ezingomakhelwane komunye nomunye.
Ngenxa yalokho, ngenxa yezinkinga ezichazwe ngenhla, ikhwalithi yesiginali iyancipha, uxhumano lulahlekelwa ukuzinza, futhi isivinini sokushintshaniswa kwedatha siyehla.
Yiqiniso, abalandeli bamanethiwekhi anezintambo bayokujabulela ukuqaphela ukuthi uma usebenzisa ikhebula futhi, ikakhulukazi, uxhumano lwe-fiber-optic, izinkinga ezinjalo azibonwa.
Umbuzo uphakama: ingabe kungenzeka ngandlela thize ukuxazulula lezi zinkinga ngaphandle kokusebenzisa noma yiziphi izindlela eziqinile njengokuxhuma kabusha bonke abantu abanganelisekile kunethiwekhi enezintambo?
Zonke izinkinga ziqala kuphi?
Ngesikhathi sokuzalwa kwehhovisi namanye amanethiwekhi e-WiFi, ngokuvamile babelandela i-algorithm elula: babeka indawo eyodwa yokufinyelela phakathi nendawo ukuze kwandiswe ukutholakala. Uma bekungekho amandla esignali anele ezindaweni ezikude, i-antenna ekhulisayo yengezwa endaweni yokufinyelela. Akuvamile ukuthi kungezwe indawo yesibili yokufinyelela, isibonelo, ehhovisi lomqondisi elikude. Cishe yilokho konke ukuthuthukiswa.
Le ndlela yayinezizathu zayo. Okokuqala, ekuqaleni kwamanethiwekhi angenawaya, imishini yawo yayibiza kakhulu. Okwesibili, ukufaka izindawo eziningi zokufinyelela kwakusho ukubhekana nemibuzo eyayingenazo izimpendulo ngaleso sikhathi. Isibonelo, indlela yokuhlela ukushintsha kweklayenti okungenamthungo phakathi kwamaphoyinti? Indlela yokubhekana nokugxambukela? Indlela yokwenza lula kanye nokwenza lula ukuphathwa kwamaphoyinti, isibonelo, ukusetshenziswa kanyekanye kokuvinjelwa/izimvume, ukuqapha, nokunye. Ngakho-ke, kwakulula kakhulu ukulandela isimiso: amadivaysi ambalwa, angcono.
Ngesikhathi esifanayo, indawo yokufinyelela, etholakala ngaphansi kophahla, isakazwa kumdwebo oyindilinga (ngokunembile, nxazonke).
Kodwa-ke, izimo zezakhiwo zezakhiwo azingeni kahle emidwebeni yokusakaza isignali eyindilinga. Ngakho-ke, kwezinye izindawo isignali cishe ayifinyeleli, futhi idinga ukukhuliswa, futhi kwezinye izindawo ukusakazwa kwedlula umjikelezo futhi kufinyeleleke kubantu bangaphandle.
Umfanekiso 1. Isibonelo sokuhlanganisa kusetshenziswa iphuzu elilodwa ehhovisi.
Ukubhala. Lokhu ukuhlawumbisela okunganaki okunganaki izithiyo ekusakazweni, kanye nokuqondisa kwesiginali. Empeleni, izimo zemidwebo zamamodeli wamaphuzu ahlukene zingahluka.
Isimo singathuthukiswa ngokusebenzisa izindawo zokufinyelela ezengeziwe.
Okokuqala, lokhu kuzovumela amadivaysi okudlulisa ukuthi asatshalaliswe ngokuphumelelayo endaweni yonkana yegumbi.
Okwesibili, kungenzeka ukunciphisa izinga lesignali, livimbele ukuthi lidlule umjikelezo wehhovisi noma esinye isikhungo. Kulokhu, ukuze ufunde ithrafikhi yenethiwekhi engenantambo, udinga ukusondela eduze kwe-perimeter noma ufake imikhawulo yayo. Umhlaseli wenza ngendlela efanayo ukuze angene kunethiwekhi enezintambo zangaphakathi.
Umfanekiso 2: Ukwenyusa inombolo yezindawo zokufinyelela kuvumela ukusatshalaliswa okungcono kokuhlanganisa.
Ake sibheke izithombe zombili futhi. Eyokuqala ibonisa ngokucacile enye yezinto ezinobungozi eziyinhloko zenethiwekhi engenazintambo - isignali ingabanjwa ebangeni elihloniphekile.
Esithombeni sesibili isimo asikathuthuki kangako. Lapho izindawo zokufinyelela zithe xaxa, indawo yokumbozwa iphumelela kakhulu, futhi ngesikhathi esifanayo amandla esignali acishe angadluleli ngalé komjikelezo, uma sikhuluma nje, ngale kwemingcele yehhovisi, ihhovisi, isakhiwo kanye nezinye izinto ezingenzeka.
Umhlaseli kuyodingeka ukuthi ngandlela thize anyonyobe asondele engaziwa ukuze abambe isignali ebuthakathaka uma kuqhathaniswa "esuka emgwaqeni" noma "ephuma ephaseji" njalonjalo. Ukuze wenze lokhu, udinga ukusondela eduze kwesakhiwo sehhovisi, isibonelo, ukuma ngaphansi kwamafasitela. Noma zama ukungena esakhiweni samahhovisi ngokwaso. Kunoma ikuphi, lokhu kwandisa ingozi yokubanjwa ekugadweni kwevidiyo nokuqashelwa ukuphepha. Lokhu kunciphisa kakhulu isikhawu sesikhathi sokuhlasela. Lokhu ngeke kubizwe ngokuthi “izimo ezifanele zokugebenga.”
Yebo, kusele esinye futhi “isono sokuqala”: amanethiwekhi angenantambo asakazwa ebangeni elifinyelelekayo elingatholwa yiwo wonke amakhasimende. Ngempela, inethiwekhi ye-WiFi ingaqhathaniswa ne-Ethernet HUB, lapho isignali idluliselwa kuzo zonke izimbobo ngesikhathi esisodwa. Ukuze ugweme lokhu, idivaysi ngayinye kufanele ixhumane ngeshaneli yayo yamafrikhwensi, okungekho omunye umuntu okufanele ayiphazamise.
Nasi isifinyezo sezinkinga eziyinhloko. Ake sicabangele izindlela zokuzixazulula.
Amakhambi: okuqondile nokungaqondile
Njengoba sekushiwo esihlokweni esandulele, ukuvikeleka okuphelele akukwazi ukutholakala kunoma yikuphi. Kodwa ungenza kube nzima ngangokunokwenzeka ukwenza ukuhlasela, okwenza umphumela ungabi nanzuzo maqondana nomzamo osetshenzisiwe.
Ngokuvamile, imishini yokuzivikela ingahlukaniswa ngamaqembu amabili amakhulu:
- ubuchwepheshe obuqondile bokuvikela ithrafikhi njengokubethela noma ukuhlunga kwe-MAC;
- ubuchwepheshe obuhloselwe ezinye izinjongo ekuqaleni, isibonelo, ukwandisa isivinini, kodwa ngesikhathi esifanayo ngokungaqondile kwenza impilo yomhlaseli ibe nzima nakakhulu.
Iqembu lokuqala lachazwa engxenyeni yokuqala. Kodwa futhi sinezinyathelo ezengeziwe ezingaqondile ku-arsenal yethu. Njengoba kushiwo ngenhla, ukwandisa inani lezindawo zokufinyelela kukuvumela ukuthi unciphise izinga lesignali futhi wenze indawo yokumboza ifane, futhi lokhu kwenza ukuphila kube nzima kumhlaseli.
Esinye isixwayiso ukuthi ukwandisa isivinini sokudlulisa idatha kwenza kube lula ukusebenzisa izinyathelo zokuphepha ezengeziwe. Isibonelo, ungafaka iklayenti le-VPN kukhompuyutha ephathekayo ngayinye futhi udlulise idatha ngisho nangaphakathi kwenethiwekhi yendawo ngeziteshi ezibethelwe. Lokhu kuzodinga izinsiza ezithile, okuhlanganisa ihadiwe, kodwa izinga lokuvikela lizokhula kakhulu.
Ngezansi sinikeza incazelo yobuchwepheshe obungathuthukisa ukusebenza kwenethiwekhi futhi bukhuphule ngokungaqondile izinga lokuvikela.
Izindlela ezingaqondile zokuthuthukisa ukuvikeleka - yini engasiza?
Ukuqondisa Kweklayenti
Isici Sokuqondisa Kweklayenti sikhuthaza amadivayisi weklayenti ukuthi asebenzise ibhendi ye-5GHz kuqala. Uma le nketho ingatholakali kuklayenti, lisazokwazi ukusebenzisa i-2.4 GHz. Kumanethiwekhi wefa anenani elincane lezindawo zokufinyelela, umsebenzi omningi wenziwa kubhendi engu-2.4 GHz. Kububanzi befrikhwensi engu-5 GHz, uhlelo olulodwa lwephoyinti lokufinyelela ngeke lwamukeleke ezimeni eziningi. Iqiniso liwukuthi isignali ene-frequency ephezulu idlula ezindongeni futhi igobe izithiyo zibe zimbi nakakhulu. Isincomo esijwayelekile: ukuze uqinisekise ukuxhumana okuqinisekisiwe kubhendi ye-5GHz, kungcono ukusebenza ngomugqa obonakalayo ukusuka endaweni yokufinyelela.
Ezindinganisweni zanamuhla 802.11ac no-802.11ax, ngenxa yenani elikhulu lamashaneli, kungenzeka ukufaka amaphuzu amaningana wokufinyelela ebangeni eliseduze, okuvumela ukuthi unciphise amandla ngaphandle kokulahlekelwa, noma ngisho nokuthola, isivinini sokudlulisa idatha. Ngenxa yalokho, ukusetshenziswa kwebhendi ye-5GHz kwenza ukuphila kube nzima kakhulu kubahlaseli, kodwa kuthuthukisa ikhwalithi yokuxhumana kumakhasimende afinyelelekayo.
Lo msebenzi uvezwa:
- ezindaweni zokufinyelela ze-Nebula ne-NebulaFlex;
- kuma-firewall anomsebenzi wesilawuli.
Ukwelapha Okuzenzakalelayo
Njengoba kushiwo ngenhla, ama-contours we-perimeter yegumbi awahambisani kahle nemidwebo eyindilinga yezindawo zokufinyelela.
Ukuze uxazulule le nkinga, okokuqala, udinga ukusebenzisa inani eliphelele lamaphoyinti okufinyelela, futhi okwesibili, unciphise ithonya elihlangene. Kodwa uma umane unciphisa amandla ama-transmitter, lokho kuphazamiseka okuqondile kungaholela ekuwohlokeni kokuxhumana. Lokhu kuzobonakala ikakhulukazi uma iphuzu elilodwa noma amaningi okufinyelela ehluleka.
Ukupholisa Okuzenzakalelayo kukuvumela ukuthi ulungise ngokushesha amandla ngaphandle kokulahlekelwa ukwethembeka nesivinini sokudlulisa idatha.
Uma usebenzisa lo msebenzi, isilawuli sihlola isimo nokusebenza kwezindawo zokufinyelela. Uma omunye wabo engasebenzi, khona-ke omakhelwane bayalwa ukuba bakhulise amandla esignali ukuze bagcwalise "indawo emhlophe". Uma indawo yokufinyelela isivukile futhi isebenza futhi, izindawo ezingomakhelwane ziyalelwa ukunciphisa amandla esignali ukuze kuncishiswe ukugxambukela.
I-WiFi engenamthungo
Uma uthi nhlá, lobu buchwepheshe abukwazi neze ukubizwa ngokuthi ukwandisa izinga lokuphepha, kunalokho, kunalokho, kwenza kube lula ngeklayenti (kuhlanganise nomhlaseli) ukushintsha phakathi kwamaphoyinti okufinyelela kunethiwekhi efanayo. Kodwa uma kusetshenziswa amaphuzu amabili noma ngaphezulu okufinyelela, udinga ukuqinisekisa ukusebenza okulula ngaphandle kwezinkinga ezingadingekile. Ngaphezu kwalokho, uma indawo yokufinyelela igcwele kakhulu, ibhekana kabi kakhulu nemisebenzi yezokuphepha efana nokubethela, ukubambezeleka ekushintshisaneni kwedatha nezinye izinto ezingemnandi zenzeka. Mayelana nalokhu, ukuzulazula okungenamthungo kuwusizo olukhulu lokusabalalisa umthwalo ngokuguquguqukayo nokuqinisekisa ukusebenza okungaphazamiseki kumodi evikelekile.
Ilungiselela imingcele yamandla esignali yokuxhuma nokunqamula amaklayenti angenantambo (I-Signal Threshold noma Ibanga Lamandla Esiginali)
Uma usebenzisa indawo eyodwa yokufinyelela, lo msebenzi, ngokomthetho, awunandaba. Kodwa inqobo nje uma amaphuzu ambalwa alawulwa yisilawuli esebenza, kungenzeka ukuhlela ukusatshalaliswa kwamaselula kwamaklayenti kuwo wonke ama-AP ahlukene. Kuhle ukukhumbula ukuthi imisebenzi yesilawuli sephoyinti lokufinyelela iyatholakala emigqeni eminingi yamarutha asuka ku-Zyxel: ATP, USG, USG FLEX, VPN, ZyWALL.
Amadivayisi angenhla anesici sokunqamula iklayenti elixhunywe ku-SSID ngesignali ebuthakathaka. “Ebuthakathaka” kusho ukuthi isignali ingaphansi komkhawulo osethwe kusilawuli. Ngemva kokuba iklayenti linqanyuliwe, lizothumela isicelo sokucwaninga ukuze lithole enye indawo yokufinyelela.
Isibonelo, iklayenti elixhunywe endaweni yokufinyelela enesignali engezansi -65dBm, uma isiteshi sinqamula umkhawulo ungu-60dBm, kulokhu indawo yokufinyelela izonqamula iklayenti ngaleli zinga lesiginali. Iklayenti manje liqala inqubo yokuxhuma kabusha futhi selizovele lixhumeke kwenye indawo yokufinyelela ngesignali enkulu noma elingana no- -60dBm (umkhawulo wesignali yesiteshi).
Lokhu kubalulekile uma usebenzisa izindawo zokufinyelela eziningi. Lokhu kuvimbela isimo lapho amaklayenti amaningi enqwabelana khona ngesikhathi esisodwa, kuyilapho ezinye izindawo zokufinyelela zingenzi lutho.
Ngaphezu kwalokho, ungakwazi ukunciphisa ukuxhumeka kwamakhasimende ngesignali ebuthakathaka, okungenzeka ukuthi itholakala ngaphandle kwe-perimeter yekamelo, isibonelo, ngemuva kodonga ehhovisi elingumakhelwane, elisivumela ukuba sicabangele lo msebenzi njengendlela engaqondile. yokuvikela.
Ukushintshela ku-WiFi 6 njengenye yezindlela zokuthuthukisa ukuphepha
Sesivele sikhulume ngezinzuzo zamakhambi aqondile ekuqaleni kwesihloko esandulele. “Izici zokuvikela amanethiwekhi angenantambo nawentambo. Ingxenye 1 - Izinyathelo eziqondile zokuvikela".
Amanethiwekhi e-WiFi 6 ahlinzeka ngesivinini esisheshayo sokudlulisa idatha. Ngakolunye uhlangothi, iqembu elisha lezindinganiso likuvumela ukuthi ukwandise isivinini, ngakolunye uhlangothi, ungabeka amaphuzu amaningi okufinyelela endaweni efanayo. Izinga elisha livumela amandla amancane ukuthi asetshenziselwe ukudlulisa ngesivinini esiphezulu.
Ukukhushulwa kwesivinini sokudlulisa idatha.
Ukushintshela ku-WiFi 6 kuhilela ukukhuphula isivinini sokushintshisana sibe ngu-11Gb/s (uhlobo lokumodulisa 1024-QAM, iziteshi ezingu-160 MHz). Ngesikhathi esifanayo, amadivayisi amasha asekela i-WiFi 6 asebenza kangcono. Enye yezinkinga eziyinhloko lapho kuqaliswa izinyathelo zokuphepha ezengeziwe, njengesiteshi se-VPN kumsebenzisi ngamunye, ukwehla kwesivinini. Nge-WiFi 6, kuzoba lula ukusebenzisa izinhlelo ezengeziwe zokuphepha.
Umbala we-BSS
Sibhale phambilini ukuthi ukumbozwa okufanayo kunganciphisa ukungena kwesiginali ye-WiFi ngale komjikelezo. Kodwa ngokukhula okuqhubekayo kwenani lezindawo zokufinyelela, ngisho nokusetshenziswa kwe-Auto Healing kungase kunganele, ngoba ithrafikhi "yangaphandle" evela endaweni engumakhelwane isazongena endaweni yokwamukela.
Uma usebenzisa Umbala we-BSS, indawo yokungena ishiya amamaki akhethekile (imibala) amaphakethe ayo edatha. Lokhu kukuvumela ukuthi ungawunaki umthelela wamadivayisi angomakhelwane okudlulisa (amaphuzu okufinyelela).
I-MU-MIMO ethuthukisiwe
I-802.11ax futhi inokuthuthukiswa okubalulekile kubuchwepheshe be-MU-MIMO (Abasebenzisi Abaningi - Okokufaka Okuningi Okuphumayo Okuningi). I-MU-MIMO ivumela indawo yokufinyelela ukuthi ixhumane namadivayisi amaningi ngesikhathi esisodwa. Kodwa ezingeni langaphambilini, lobu buchwepheshe bungasekela kuphela amaqembu amaklayenti amane ngefrikhwensi efanayo. Lokhu kwenza ukudluliselwa kwaba lula, kodwa hhayi ukwamukela. I-WiFi 6 isebenzisa i-8x8 yabasebenzisi abaningi i-MIMO ukuze idlulise futhi yamukele.
Qaphela. I-802.11ax inyusa usayizi wamaqembu e-MU-MIMO angezansi, ihlinzeka ngokusebenza kahle kwenethiwekhi ye-WiFi. I-uplink yabasebenzisi abaningi be-MIMO iyisengezo esisha ku-802.11ax.
I-OFDMA (ukufinyelela okuningi kwe-Orthogonal frequency-division)
Le ndlela entsha yokufinyelela nokulawula isiteshi ithuthukiswa ngokusekelwe kubuchwepheshe osebufakazelwe kakade kubuchwepheshe beselula be-LTE.
I-OFDMA ivumela isignali engaphezu kweyodwa ukuthi ithunyelwe emugqeni ofanayo noma eshaneli ngesikhathi esifanayo ngokunikeza isikhawu sesikhathi ekudluliselweni ngakunye nokusebenzisa ukuhlukaniswa kwamafrikhwensi. Ngenxa yalokho, akugcini nje ukukhuphuka isivinini ngenxa yokusetshenziswa okungcono kwesiteshi, kodwa futhi nokuphepha kuyanda.
Isifingqo
Amanethiwekhi e-WiFi aya avikeleka kakhulu minyaka yonke. Ukusetshenziswa kobuchwepheshe besimanje kusivumela ukuthi sihlele izinga elamukelekayo lokuvikela.
Izindlela eziqondile zokuvikela ngendlela yokubethela kwethrafikhi zizibonakalise kahle impela. Ungakhohlwa mayelana nezinyathelo ezengeziwe: ukuhlunga nge-MAC, ukufihla i-ID yenethiwekhi, I-Rogue AP Detection (I-Rogue AP Containment).
Kodwa kukhona nezinyathelo ezingaqondile ezithuthukisa ukusebenza ngokuhlanganyela kwamadivayisi angenawaya futhi andise isivinini sokushintshana kwedatha.
Ukusetshenziswa kobuchwepheshe obusha kwenza kube lula ukunciphisa izinga lesignali kusuka kumaphuzu, okwenza ukumbozwa kufane kakhulu, okunomthelela omuhle empilweni yenethiwekhi yonke engenazintambo iyonke, kuhlanganise nokuphepha.
Umqondo ophusile ubeka ukuthi zonke izindlela zinhle ukuthuthukisa ukuphepha: kokubili okuqondile nokungaqondile. Le nhlanganisela ikuvumela ukuthi wenze ukuphila kube nzima ngangokunokwenzeka kumhlaseli.
Izixhumanisi eziwusizo:
- Izici zokuvikela amanethiwekhi angenantambo nanezintambo. Ingxenye 1 - Izinyathelo eziqondile zokuvikela
Source: www.habr.com