Sebelumnya kita berbicara tentang masalah teknis yang sangat tinggi dari sistem transmisi data berkabel dan nirkabel. Artikel ini akan fokus pada masalah keamanan dan jaringan yang lebih aman.
Kami melokalkan masalah
«Wi-Fi — ?», : , «», , , , «», .
:
. , , .
(, -). , , ARP . .
«», .
:
, .
. , , , . . , , , WiFi.
, , port security MAC. , -, MAC , -, . . — , , . , : .
, , . , , , MAC , . , , , . , , — . , , .
, - — . , . , - - .
:
. . !
:
. . , , WiFi. , VLAN, ACL, . , , VPN (). . , VPN .
, , , () port security. , , , MAC . . port security ACL — . .
, , WiFi.
:
. . , .
Ethernet-HUB, , , .
WiFi — .
:
« » : ( ) , , , .
WiFI
, , . , , .
, ( !) « ».
?
, :
- , MAC ;
- , , , , .
. , , .
WiFi
— (SSID) WiFi . Hide SSID , . , , , .
SSID, — BSSID (Basic Service Set Identifie). WiFi . WiFi .
MAC
« ». (Access Control List, ACL). - port security . ( ) MAC . MAC ( — MAC ). , WiFi. , .
Rogue AP
Rogue AP — , . , , , .
Zyxel .
, , , , .
, . WPA/WPA2-Enterprise, Extensible Authentication Protocol (EAP) , , , .
USG FLEX 100.
1. USG FLEX 100.
, WEP (Wired Equivalent Privacy, ), WPA, WPA2...
WPA2-PSK (pre-shared key) . , , — . - .
WiFi 6 c WPA3 WPA2 Enterprise , . ( RADIUS).
Nebula AX Dynamic Personal Pre-Shared Key (DPPSK) — , (PSK) . , WiFi .
WiFi 6?
WiFi 6, , WPA3 . , Zyxel - Unified Pro.
Unified Pro Zyxel WAX510D, Unified Pro Zyxel WAX650S, Unified Pro Zyxel NWA110AX 802.11ax (Wi-Fi 6) Nebula, .
2. Unified Pro Zyxel WAX650S Unified Pro Zyxel WAX510D.
, 802.11ax (WiFi 6).
WPA3-Enterprise 192-bit mode
WPA3-Enterprise — .
, WPA3-Enterprise :
- 256- Galois/Counter Mode — ,
- 384- Hashed Message Authentication Mode — ;
- Elliptic Curve Diffie-Hellman exchange, Elliptic Curve Digital Signature Algorithm — .
WPA3-Enterprise , SSL / TLS:
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, EC DH/DSA - NIST P-384;
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, EC DH/DSA - NIST P-384, RSA 3072 ;
- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 — «» , EC, RSA 3072 , DH- 15.
WPA3-Personal WPA2-PSK
Pre-Shared Key, , WPA3 SAE, ( IEEE 802.11-2016)
. , (), — ( ) , SAE , .
SAE (Key Reinstallation Attacks, KRACK ), offline , , , PSK-.
SAE forward secrecy, . , , , . SAE , , .
Enhanced Open —
Enhanced Open — Opportunistic Wireless Encryption, OWE, Internet Engineering Task Force RFC 8110, . unsophisticated packet injection, .
Enhanced Open — .
27 .