Zyxel OMNI ADSL LAN H [26/533] Ieee 802 x

Ɋɭɤɨɜɨɞɫɬɜɨ ɩɨɥɶɡɨɜɚɬɟɥɹ ɞɥɹ ɦɚɪɲɪɭɬɢɡɚɬɨɪɨɜ ɫɟɪɢɢ OMNI ADSL LAN

1-4 Ɂɧɚɤɨɦɫɬɜɨ ɫ OMNI ADSL

ɤɨɦɩɶɸɬɟɪɚ ɥɨɤɚɥɶɧɨɣ ɫɟɬɢ, ɤɨɬɨɪɵɣ "ɜɢɞɢɬ" ɬɨɥɶɤɨ Ethernet ɢ ɧɟ ɪɚɫɩɨɡɧɚɸɬ PPPoE, ɬɟɦ ɫɚɦɵɦ

ɢɫɤɥɸɱɚɹ ɧɟɨɛɯɨɞɢɦɨɫɬɶ ɭɩɪɚɜɥɟɧɢɹ ɤɥɢɟɧɬɚɦɢ PPPoE ɧɚ ɨɬɞɟɥɶɧɵɯ ɤɨɦɩɶɸɬɟɪɚɯ.

¾ IEEE 802.1x - ɫɬɚɧɞɚɪɬ ɫɟɬɟɜɨɣ ɛɟɡɨɩɚɫɧɨɫɬɢ

Ɇɚɪɲɪɭɬɢɡɚɬɨɪ OMNI ADSL ɩɨɞɞɟɪɠɢɜɚɟɬ ɫɬɚɧɞɚɪɬ ɫɟɬɟɜɨɣ ɛɟɡɨɩɚɫɧɨɫɬɢ IEEE 802.1x,

ɩɨɜɵɲɚɸɳɢɣ ɧɚɞɟɠɧɨɫɬɶ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɩɨɥɶɡɨɜɚɬɟɥɟɣ. ȼ ɦɚɪɲɪɭɬɢɡɚɬɨɪɟ ɢɦɟɟɬɫɹ ɜɫɬɪɨɟɧɧɚɹ

ɛɚɡɚ ɞɚɧɧɵɯ, ɩɨɞɞɟɪɠɢɜɚɸɳɚɹ ɚɭɬɟɧɬɢɮɢɤɚɰɢɸ ɞɨ 32 ɩɨɥɶɡɨɜɚɬɟɥɟɣ ɫɟɬɢ ɫ ɩɨɦɨɳɶɸ ɯɷɲ-ɩɪɨɰɟɞɭɪɵ

ɤɪɢɩɬɨɝɪɚɮɢɱɟɫɤɨɣ ɡɚɳɢɬɵ MD5. ȼ ɭɫɬɪɨɣɫɬɜɟ ɩɪɢɦɟɧɹɟɬɫɹ EAP-ɫɨɜɦɟɫɬɢɦɵɣ RADIUS-ɫɟɪɜɟɪ

(RFC2138, 2139 - Remote Authentication Dial In User Service - ɋɥɭɠɛɚ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɭɞɚɥɟɧɧɵɯ

ɩɨɥɶɡɨɜɚɬɟɥɟɣ ɩɨ ɤɨɦɦɭɬɢɪɭɟɦɵɦ ɤɚɧɚɥɚɦ ɫɜɹɡɢ) ɞɥɹ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɧɟɨɝɪɚɧɢɱɟɧɧɨɝɨ ɱɢɫɥɚ

ɚɛɨɧɟɧɬɨɜ ɫɟɬɢ, ɩɨɥɶɡɭɸɳɢɯɫɹ ɩɪɨɬɨɤɨɥɨɦ EAP (Extensible Authentication Protocol - Ɋɚɫɲɢɪɟɧɧɵɣ

ɩɪɨɬɨɤɨɥɨɦ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ). EAP ɹɜɥɹɟɬɫɹ ɩɪɨɬɨɤɨɥɨɦ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ, ɩɨɞɞɟɪɠɢɜɚɸɳɢɦ

ɪɚɡɥɢɱɧɵɟ ɫɩɨɫɨɛɵ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɩɨɥɶɡɨɜɚɬɟɥɟɣ.

¾ Ɍɪɚɧɫɥɹɰɢɹ ɫɟɬɟɜɵɯ ɚɞɪɟɫɨɜ (NAT)

ɉɪɨɰɟɞɭɪɚ ɬɪɚɧɫɥɹɰɢɢ ɫɟɬɟɜɵɯ ɚɞɪɟɫɨɜ (NAT) ɩɨɡɜɨɥɹɟɬ ɨɫɭɳɟɫɬɜɥɹɬɶ ɩɪɟɨɛɪɚɡɨɜɚɧɢɟ IP-ɚɞɪɟɫɚ,

ɢɫɩɨɥɶɡɭɸɳɟɝɨɫɹ ɜɧɭɬɪɢ ɨɞɧɨɣ ɫɟɬɢ (ɧɚɩɪɢɦɟɪ, ɱɚɫɬɧɵɣ IP-ɚɞɪɟɫ ɥɨɤɚɥɶɧɨɣ ɫɟɬɢ), ɜ IP-ɚɞɪɟɫ,

ɢɡɜɟɫɬɧɵɣ ɩɨɥɶɡɨɜɚɬɟɥɹɦ ɞɪɭɝɨɣ ɫɟɬɢ (ɧɚɩɪɢɦɟɪ, ɨɛɳɟɞɨɫɬɭɩɧɵɣ IP-ɚɞɪɟɫ ɝɥɨɛɚɥɶɧɨɣ ɫɟɬɢ Internet).

¾ ɉɟɪɟɧɚɩɪɚɜɥɟɧɢɟ ɬɪɚɮɢɤɚ

ɉɪɨɰɟɞɭɪɚ ɩɟɪɟɧɚɩɪɚɜɥɟɧɢɹ ɬɪɚɮɢɤɚ ɚɜɬɨɦɚɬɢɱɟɫɤɢ ɧɚɩɪɚɜɥɹɟɬ ɬɪɚɮɢɤ WAN ɤ ɪɟɡɟɪɜɧɨɦɭ ɲɥɸɡɭ

LAN, ɟɫɥɢ OMNI ADSL ɧɟ ɦɨɠɟɬ ɭɫɬɚɧɨɜɢɬɶ ɫɨɟɞɢɧɟɧɢɟ ɫ ɂɧɬɟɪɧɟɬɨɦ, ɜɵɩɨɥɧɹɹ, ɬɚɤɢɦ ɨɛɪɚɡɨɦ,

ɮɭɧɤɰɢɢ ɞɨɩɨɥɧɢɬɟɥɶɧɨɝɨ ɪɟɡɟɪɜɢɪɨɜɚɧɢɹ ɜ ɫɥɭɱɚɟ ɧɟɜɨɡɦɨɠɧɨɫɬɢ ɩɨɞɤɥɸɱɟɧɢɹ ɤ WAN ɨɛɵɱɧɵɦ

ɨɛɪɚɡɨɦ.

¾ Ɇɟɠɫɟɬɟɜɨɣ ɷɤɪɚɧ

ȼ OMNI ADSL ɩɪɢɦɟɧɹɟɬɫɹ ɫɟɬɟɜɨɣ ɷɤɪɚɧ (ɛɪɚɧɞɦɚɭɷɪ) ɫ ɢɧɫɩɟɤɰɢɟɣ ɩɚɤɟɬɨɜ ɫ ɭɱɟɬɨɦ ɫɨɫɬɨɹɧɢɹ ɢ ɫ

ɡɚɳɢɬɨɣ ɨɬ ɚɬɚɤ ɬɢɩɚ DoS (ɨɬɤɚɡ ɨɬ ɨɛɫɥɭɠɢɜɚɧɢɹ). ɉɨ ɭɦɨɥɱɚɧɢɸ, ɟɫɥɢ ɛɪɚɧɞɦɚɭɷɪ ɜɤɥɸɱɟɧ, ɜɟɫɶ

ɜɯɨɞɹɳɢɣ ɬɪɚɮɢɤ, ɩɨɫɬɭɩɚɸɳɢɣ ɢɡ ɝɥɨɛɚɥɶɧɨɣ ɫɟɬɢ ɜ Ʌȼɋ, ɚɜɬɨɦɚɬɢɱɟɫɤɢ ɛɥɨɤɢɪɭɟɬɫɹ ɞɨ ɩɨɥɭɱɟɧɢɹ

ɫɩɟɰɢɚɥɶɧɨɝɨ ɪɚɡɪɟɲɟɧɢɹ ɢɡ ɥɨɤɚɥɶɧɨɣ ɫɟɬɢ. Ɇɟɠɫɟɬɟɜɨɣ ɷɤɪɚɧ ɭɫɬɪɨɣɫɬɜɚ OMNI ADSL

ɩɨɞɞɟɪɠɢɜɚɟɬ ɢɧɫɩɟɤɰɢɸ ɩɪɨɬɨɤɨɥɨɜ TCP/UDP, ɨɛɧɚɪɭɠɟɧɢɟ ɢ ɩɪɟɞɭɩɪɟɠɞɟɧɢɟ ɚɬɚɤ DoS, ɜɵɞɚɱɭ

ɩɪɟɞɭɩɪɟɠɞɟɧɢɣ ɜ ɪɟɚɥɶɧɨɦ ɦɚɫɲɬɚɛɟ ɜɪɟɦɟɧɢ, ɩɨɞɝɨɬɨɜɤɭ ɨɬɱɟɬɨɜ ɢ ɜɟɞɟɧɢɟ ɠɭɪɧɚɥɨɜ.

¾ Ɏɭɧɤɰɢɹ IPSec VPN

ɉɨɡɜɨɥɹɟɬ ɫɨɡɞɚɬɶ ɜɢɪɬɭɚɥɶɧɭɸ ɱɚɫɬɧɭɸ ɫɟɬɶ (VPN) ɞɥɹ ɫɜɹɡɢ ɫ ɞɟɥɨɜɵɦɢ ɩɚɪɬɧɟɪɚɦɢ ɢ ɮɢɥɢɚɥɚɦɢ

ɩɭɬɟɦ ɢɫɩɨɥɶɡɨɜɚɧɢɹ ɢ ɲɢɮɪɨɜɚɧɢɹ ɞɚɧɧɵɯ ɞɥɹ ɨɛɟɫɩɟɱɟɧɢɹ ɧɚɞɟɠɧɨɣ ɫɜɹɡɢ ɛɟɡ ɡɚɬɪɚɬ ɧɚ

ɜɵɞɟɥɟɧɧɵɟ ɥɢɧɢɢ ɦɟɠɞɭ ɫɚɣɬɚɦɢ. Ɇɚɪɲɪɭɬɢɡɚɬɨɪ OMNI ADSL VPN ɩɨɫɬɪɨɟɧ ɧɚ ɨɫɧɨɜɟ ɫɬɚɧɞɚɪɬɚ

IPSec ɢ ɨɛɥɚɞɚɟɬ ɩɨɥɧɨɣ ɫɨɜɦɟɫɬɢɦɨɫɬɶɸ ɫ ɞɪɭɝɢɦɢ ɜɢɪɬɭɚɥɶɧɵɦɢ ɱɚɫɬɧɵɦɢ ɫɟɬɹɦɢ (VPN),

ɩɨɞɞɟɪɠɢɜɚɸɳɢɦɢ ɷɬɨɬ ɫɬɚɧɞɚɪɬ.