Isihloko sizoxoxa ngezinkinga zokuhlela ingqalasizinda yenethiwekhi ngendlela yendabuko nezindlela zokuxazulula izinkinga ezifanayo kusetshenziswa ubuchwepheshe bamafu.
Ukuze kubhekwe I-Nebula iyindawo yefu ye-SaaS yokugcina ingqalasizinda yenethiwekhi ukude. Wonke amadivayisi anikwe amandla i-Nebula aphethwe kusukela emafini ngoxhumo oluvikelekile. Ungaphatha ingqalasizinda yenethiwekhi enkulu esabalalisiwe kusuka esikhungweni esisodwa ngaphandle kokusebenzisa umzamo wokuyidala.
Kungani udinga enye insiza yefu?
Inkinga enkulu lapho usebenza nengqalasizinda yenethiwekhi ayiklami inethiwekhi nokuthenga imishini, noma ngisho ukuyifaka ku-rack, kodwa konke okunye okuzodingeka kwenziwe ngale nethiwekhi esikhathini esizayo.
Inethiwekhi entsha - izinkathazo ezindala
Lapho kufakwa inodi yenethiwekhi entsha ekusebenzeni ngemva kokufaka nokuxhuma okokusebenza, ukucushwa kokuqala kuyaqala. Ngokombono "wabaphathi abakhulu" - akukho lutho oluyinkimbinkimbi: "Sithatha imibhalo yokusebenza yephrojekthi bese siqala ukusetha ..." Lokhu kushiwo kahle lapho zonke izakhi zenethiwekhi zitholakala esikhungweni esisodwa sedatha. Uma zihlakazeke kuwo wonke amagatsha, ubuhlungu bekhanda bokunikeza ukufinyelela kude buqala. Umbuthano ononya: ukuze uthole ukufinyelela okukude ngenethiwekhi, udinga ukumisa okokusebenza kwenethiwekhi, futhi ngenxa yalokhu udinga ukufinyelela kunethiwekhi...
Kufanele siqhamuke namasu ahlukene ukuze siphume kule nkinga echazwe ngenhla. Isibonelo, ikhompuyutha ephathekayo enokufinyelela ku-inthanethi ngemodemu ye-USB 4G ixhunywe ngentambo yesichibi kunethiwekhi yangokwezifiso. Kufakwe iklayenti le-VPN kule laptop, futhi ngayo umlawuli wenethiwekhi ovela endlunkulu uzama ukuthola ukufinyelela kunethiwekhi yegatsha. Uhlelo akulona olusobala kakhulu - ngisho noma uletha ikhompuyutha ephathekayo ene-VPN elungiselelwe ngaphambilini kusayithi elikude bese ucela ukuyivula, akulona iqiniso ukuthi konke kuzosebenza okokuqala. Ikakhulukazi uma sikhuluma ngendawo ehlukile enomhlinzeki ohlukile.
Kuvela ukuthi indlela enokwethenjelwa kakhulu ukuba nochwepheshe omuhle "ngakolunye uhlangothi lomugqa" ongakwazi ukumisa ingxenye yakhe ngokusho kwephrojekthi. Uma ingekho into enjalo kubasebenzi begatsha, izinketho zisekhona: kungaba ukukhishwa kwemisebenzi noma ukuhamba kwebhizinisi.
Sidinga nohlelo lokuqapha. Idinga ukufakwa, ukumiswa, ukugcinwa (okungenani qapha isikhala sediski futhi wenze izipele ezivamile). Futhi engazi lutho mayelana nemishini yethu size siyisho. Ukuze wenze lokhu, udinga ukubhalisa izilungiselelo zazo zonke izingcezu zemishini futhi uqaphe njalo ukuhlobana kwamarekhodi.
Kuhle uma abasebenzi benayo "i-orchestra yomuntu oyedwa", okuthi, ngaphezu kolwazi oluthile lomphathi wenethiwekhi, owazi ukusebenza noZabbix noma olunye uhlelo olufanayo. Uma kungenjalo, siqasha omunye umuntu kubasebenzi noma sisebenzela ngaphandle.
Qaphela. Amaphutha abuhlungu kakhulu aqala ngala mazwi: “Yini ekhona yokumisa le Zabbix (Nagios, OpenView, njll.)? Ngizoyilanda ngokushesha futhi isilungile!"
Kusukela ekusetshenzisweni kuya ekusebenzeni
Ake sibheke isibonelo esithile.
Kutholwe umlayezo we-alamu okhombisa ukuthi indawo yokufinyelela ye-WiFi ndawana thize ayiphenduli.
Kuphi?
Yiqiniso, umlawuli wenethiwekhi omuhle unenkomba yakhe yomuntu siqu lapho konke kubhalwe khona phansi. Imibuzo iqala lapho lolu lwazi ludinga ukwabiwa. Isibonelo, udinga ngokuphuthumayo ukuthumela isithunywa ukuze silungise izinto ngaso leso sikhathi, futhi ngenxa yalokhu udinga ukukhipha okuthile okufana nalokhu: "Indawo yokufinyelela esikhungweni sebhizinisi ku-Stroiteley Street, isakhiwo 1, esitezi sesi-3, igumbi No. 301 eduze komnyango ongaphambili ngaphansi kophahla."
Ake sithi sinenhlanhla futhi indawo yokufinyelela inikwa amandla nge-PoE, futhi iswishi ivumela ukuthi iqaliswe kabusha ukude. Awudingi ukuhamba, kodwa udinga ukufinyelela ukude ekushintsheni. Okusele nje ukulungisa ukudluliselwa kwembobo nge-PAT kumzila, thola i-VLAN yokuxhuma ngaphandle, njalonjalo. Kuhle uma yonke into isethwe kusenesikhathi. Umsebenzi ungase ungabi nzima, kodwa kudingeka wenziwe.
Ngakho, isitolo sokudla saqalwa kabusha. Akusizanga?
Ake sithi kukhona okungalungile kuhadiwe. Manje sifuna ulwazi mayelana newaranti, ukuqala kanye neminye imininingwane ethakazelisayo.
Ekhuluma nge-WiFi. Ukusebenzisa inguqulo yasekhaya ye-WPA2-PSK, enokhiye owodwa wawo wonke amadivayisi, akunconyiwe endaweni yebhizinisi. Okokuqala, ukhiye owodwa wawo wonke umuntu umane ungaphephile, futhi okwesibili, lapho isisebenzi esisodwa sihamba, kufanele ushintshe lo khiye ovamile futhi wenze kabusha izilungiselelo kuwo wonke amadivayisi kubo bonke abasebenzisi. Ukuze ugweme izinkinga ezinjalo, kukhona i-WPA2-Enterprise enokuqinisekiswa komuntu ngamunye komsebenzisi ngamunye. Kodwa kulokhu udinga iseva ye-RADIUS - enye iyunithi yengqalasizinda edinga ukulawulwa, ama-backups enziwe, njalonjalo.
Sicela uqaphele ukuthi kuzo zonke izigaba, kungaba ukuqaliswa noma ukusebenza, sasebenzisa amasistimu okusekela. Lokhu kufaka phakathi ikhompuyutha ephathekayo enoxhumo lwe-inthanethi "lomuntu wesithathu", isistimu yokuqapha, isizindalwazi sereferensi yemishini, kanye ne-RADIUS njengohlelo lokuqinisekisa. Ngokungeziwe kumadivayisi enethiwekhi, kufanele futhi ugcine izinsizakalo zezinkampani zangaphandle.
Ezimweni ezinjalo, ungezwa iseluleko: "Yinike ifu futhi ungahlupheki." Impela kukhona i-Zabbix yefu, mhlawumbe kukhona i-RADIUS yefu endaweni ethile, ngisho nesizindalwazi samafu sokugcina uhlu lwamadivayisi. Inkinga ukuthi lokhu akudingekile ngokwehlukana, kodwa “ebhodleleni elilodwa.” Noma kunjalo, kuphakama imibuzo mayelana nokuhlela ukufinyelela, ukusethwa kwedivayisi kokuqala, ukuphepha, nokunye okuningi.
Ibukeka kanjani uma usebenzisa i-Nebula?
Yiqiniso, ekuqaleni "ifu" alazi lutho mayelana nezinhlelo zethu noma imishini ethengiwe.
Okokuqala, iphrofayela yenhlangano iyadalwa. Okusho ukuthi, yonke ingqalasizinda: indlunkulu namagatsha kuqala abhaliswe efwini. Imininingwane icacisiwe futhi kwakhiwa ama-akhawunti okudluliselwa kwamandla.
Ungabhalisa amadivayisi akho emafini ngezindlela ezimbili: indlela yakudala - ngokumane ufake inombolo yomkhiqizo lapho ugcwalisa ifomu lewebhu noma ngokuskena ikhodi ye-QR usebenzisa iselula. Okudingayo endleleni yesibili i-smartphone enekhamera nokufinyelela ku-inthanethi, okuhlanganisa nomhlinzeki weselula.
Kunjalo, ingqalasizinda edingekayo yokugcina ulwazi, kokubili accounting kanye nezilungiselelo, inikezwa Zyxel Nebula.
Umfanekiso 1. Umbiko wokuphepha we-Nebula Control Center.
Kuthiwani ngokusetha ukufinyelela? Ukuvula izimbobo, ukudlulisa ithrafikhi ngesango elingenayo, konke lokho abaphathi bezokuphepha abakubiza ngothando ngokuthi "ukukha izimbobo"? Ngenhlanhla, awudingi ukwenza konke lokhu. Amadivayisi asebenzisa i-Nebula asungula uxhumo oluphumayo. Futhi umlawuli akaxhumeki kudivayisi ehlukile, kodwa efwini ukuze acushwe. I-Nebula ilamula phakathi kokuxhumana okubili: kudivayisi nakwikhompuyutha yomphathi wenethiwekhi. Lokhu kusho ukuthi isigaba sokufonela umlawuli ongenayo singancishiswa noma seqiwe ngokuphelele. Futhi azikho "izimbobo" ezengeziwe ku-firewall.
Kuthiwani ngeseva ye-RADUIS? Phela, uhlobo oluthile lokufakazela ubuqiniso obumaphakathi luyadingeka!
Futhi le misebenzi iphinde ithathwe yiNebula. Ukuqinisekiswa kwama-akhawunti okuthola okokusebenza kwenzeka ngesizindalwazi esivikelekile. Lokhu kwenza kube lula kakhulu ukuthunyelwa noma ukuhoxiswa kwamalungelo okuphatha uhlelo. Sidinga ukudlulisa amalungelo - dala umsebenzisi, sabele indima. Sidinga ukususa amalungelo - senza izinyathelo ezihlehlayo.
Ngokwehlukana, kufanelekile ukusho i-WPA2-Enterprise, edinga isevisi yokuqinisekisa ehlukile. I-Zyxel Nebula ine-analogue yayo - DPPSK, ekuvumela ukuthi usebenzise i-WPA2-PSK ngokhiye ngamunye kumsebenzisi ngamunye.
Imibuzo "engalungile".
Ngezansi sizozama ukunikeza izimpendulo zemibuzo enzima kakhulu evame ukubuzwa lapho kungena isevisi yefu
Ingabe iphephile ngempela?
Kunoma yikuphi ukuthunyelwa kokulawula nokuphatha ukuze kuqinisekiswe ukuphepha, izici ezimbili zidlala indima ebalulekile: ukungaziwa nokubethela.
Ukusebenzisa ukubethela ukuze kuvikelwe ithrafikhi emehlweni e-prying into abafundi abajwayele kakhulu noma kancane ngayo.
Ukungaziwa kufihla ulwazi mayelana nomnikazi nomthombo kubasebenzi abahlinzeka ngamafu. Ulwazi lomuntu siqu luyasuswa futhi amarekhodi anikezwe isihlonzi "esingenabuso". Akekho unjiniyela wesofthiwe yefu noma umlawuli ogcina isistimu yamafu abakwazi umnikazi wezicelo. "Kuvelaphi lokhu? Ubani ongase abe nesithakazelo kulokhu?” - imibuzo enjalo ngeke iphenduleke. Ukungabi bikho kolwazi ngomnikazi nomthombo kwenza umuntu ongaphakathi abe nokumosha isikhathi okungenanjongo.
Uma siqhathanisa le ndlela nomkhuba ovamile wokukhipha noma ukuqasha umlawuli ongenayo, kusobala ukuthi ubuchwepheshe bamafu buphephe kakhudlwana. Uchwepheshe we-IT ongenayo wazi okuningi ngenhlangano yakhe, futhi, ngokuzithandela, angabangela ukulimala okukhulu mayelana nezokuphepha. Indaba yokuchithwa noma yokunqanyulwa kwenkontileka isadinga ukuxazululwa. Kwesinye isikhathi, ngaphezu kokuvimba noma ukususa i-akhawunti, lokhu kuhlanganisa ukuguqulwa komhlaba wonke kwamagama ayimfihlo okufinyelela izinsiza, kanye nokuhlolwa kwazo zonke izinsiza zezindawo zokungena “ezikhohliwe” kanye “namabhukhimakhi” angenzeka.
Ibiza kangakanani noma ishibhe kangakanani i-Nebula kunomphathi ongenayo?
Konke kuhlobene. Izici eziyisisekelo ze-Nebula zitholakala mahhala. Empeleni, yini engabizi nakakhulu?
Yiqiniso, akunakwenzeka ukwenza ngokuphelele ngaphandle komlawuli wenethiwekhi noma umuntu esikhundleni sakhe. Umbuzo inombolo yabantu, ubuchwepheshe babo nokusabalalisa kuwo wonke amasayithi.
Ngokuqondene nesevisi enwetshiwe ekhokhelwayo, ebuza umbuzo oqondile: ebiza kakhulu noma eshibhile - indlela enjalo iyohlale ingalungile futhi inohlangothi olulodwa. Kungaba okulungile kakhulu ukuqhathanisa izici eziningi, kusukela emalini ukukhokhela umsebenzi wochwepheshe abathile futhi kugcine ngezindleko zokuqinisekisa ukuxhumana kwabo nosonkontileka noma umuntu ngamunye: ukulawulwa kwekhwalithi, ukudweba imibhalo, ukugcina izinga lokuphepha, kanye njalonjalo.
Uma sikhuluma ngesihloko sokuthi kunenzuzo noma akuzuzisi ukuthenga iphakethe lezinsizakalo ezikhokhelwayo (Pro-Pack), khona-ke impendulo elinganiselwe ingase izwakale kanje: uma inhlangano incane, ungakwazi ukudlula ngokuyisisekelo. inguqulo, uma inhlangano ikhula, khona-ke kunengqondo ukucabanga nge-Pro-Pack. Umehluko phakathi kwezinguqulo ze-Zyxel Nebula ungabonakala kuThebula 1.
Ithebula 1. Umehluko phakathi kwamasethi ezici eziyisisekelo kanye ne-Pro-Pack ye-Nebula.
Lokhu kufaka phakathi ukubika okuthuthukisiwe, ukuhlolwa kwabasebenzisi, ukuhlanganisa ukucushwa, nokunye okuningi.
Kuthiwani ngokuvikelwa kwethrafikhi?
I-Nebula isebenzisa umthetho olandelwayo ukuqinisekisa ukusebenza okuphephile kwempahla yenethiwekhi.
I-NETCONF ingasebenza phezu kwezinqubo ezimbalwa zokuthutha:
- ();
- ();
- ();
- ().
Uma siqhathanisa i-NETCONF nezinye izindlela, isibonelo, ukuphathwa nge-SNMP, kufanele kuqashelwe ukuthi I-NETCONF isekela ukuxhumeka kwe-TCP okuphumayo ukuze kunqobe umgoqo we-NAT futhi kuthathwa njengokwethenjelwa kakhulu.
Kuthiwani ngosekelo lwehadiwe?
Yiqiniso, akufanele uguqule igumbi leseva libe yi-zoo enabameleli bezinhlobo zemishini ezingavamile nezisengozini. Kufiseleka kakhulu ukuthi izinto zokusebenza ezihlanganiswe ubuchwepheshe bokuphatha zimboze zonke izikhombisi-ndlela: kusukela kuswishi emaphakathi kuya ezindaweni zokufinyelela. Onjiniyela be-Zyxel banakekele lokhu okungenzeka. I-Nebula isebenzisa amadivayisi amaningi:
- 10G ukushintshwa okuphakathi;
- amaswishi ezingeni lokufinyelela;
- Ukushintshwa kwe-PoE;
- izindawo zokufinyelela;
- amasango enethiwekhi.
Usebenzisa izinhlobonhlobo zamadivayisi asekelwayo, ungakha amanethiwekhi ezinhlobo ezahlukene zemisebenzi. Lokhu kuyiqiniso ikakhulukazi ezinkampanini ezingakhuli phezulu, kodwa ngaphandle, ezihlala zihlola izindawo ezintsha zokwenza ibhizinisi.
Intuthuko eqhubekayo
Amadivayisi enethiwekhi anendlela yokuphatha evamile anendlela eyodwa kuphela yokuthuthukisa - ukushintsha idivayisi ngokwayo, kungaba i-firmware entsha noma amamojula engeziwe. Endabeni ye-Zyxel Nebula, kunendlela eyengeziwe yokuthuthukisa - ngokwenza ngcono ingqalasizinda yamafu. Isibonelo, ngemva kokubuyekeza i-Nebula Control Center (NCC) ibe yinguqulo engu-10.1. (Septhemba 21, 2020) izici ezintsha ziyatholakala kubasebenzisi, nazi ezinye zazo:
- Umnikazi wenhlangano manje angadlulisela wonke amalungelo obunikazi komunye umlawuli kunhlangano efanayo;
- indima entsha ebizwa ngokuthi Owner Representative, onamalungelo afanayo nawomnikazi wenhlangano;
- isici esisha sokubuyekeza i-firmware esibanzi senhlangano (isici se-Pro-Pack);
- izinketho ezimbili ezintsha zengezwe ku-topology: ukuqalisa kabusha idivayisi nokuvula nokuvala amandla embobo ye-PoE (umsebenzi we-Pro-Pack);
- ukusekelwa kwamamodeli wezindawo zokufinyelela ezintsha: WAC500, WAC500H, WAC5302D-Sv2 kanye ne-NWA1123ACv3;
- ukusekela ukuqinisekiswa kwevawusha ngokuphrinta ikhodi ye-QR (umsebenzi we-Pro-Pack).
Izixhumanisi eziwusizo
Source: www.habr.com