{"id":637,"date":"2025-10-30T10:49:22","date_gmt":"2025-10-30T09:49:22","guid":{"rendered":"https:\/\/lavrencic.com\/wordpress\/?page_id=637"},"modified":"2025-10-31T08:52:32","modified_gmt":"2025-10-31T07:52:32","slug":"studija-primer-1","status":"publish","type":"page","link":"https:\/\/lavrencic.com\/wordpress\/index.php\/studija-primer-1\/","title":{"rendered":"\u0160tudija primer 1"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"637\" class=\"elementor elementor-637\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4e0fb49d e-flex e-con-boxed e-con e-parent\" data-id=\"4e0fb49d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-475b1afb elementor-widget elementor-widget-text-editor\" data-id=\"475b1afb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<h1><strong>\u0160tudija primera 1 &#8211; <\/strong>Posodobitev IT infrastrukture v gostinskem lokalu<\/h1>\n<h3 data-start=\"354\" data-end=\"371\">Cilj projekta<\/h3>\n<p data-start=\"372\" data-end=\"667\">Pri naro\u010dniku \u2013 gostinskem lokalu \u2013 je bilo potrebno <strong data-start=\"425\" data-end=\"474\">posodobiti in nadgraditi ra\u010dunalni\u0161ko omre\u017eje<\/strong>, strojno in programsko opremo.<br data-start=\"505\" data-end=\"508\" \/>Cilj je bil zagotoviti zanesljivo, varno in raz\u0161irljivo IT-okolje, ki podpira razli\u010dne uporabni\u0161ke segmente: poslovanje lokala, osebje, goste ter podnajemnike.<\/p>\n<hr data-start=\"669\" data-end=\"672\" \/>\n<h3 data-start=\"674\" data-end=\"698\">Izhodi\u0161\u010da in zahteve<\/h3>\n<p data-start=\"699\" data-end=\"784\">Po ve\u010dletnih spremembah in \u0161iritvah je omre\u017eje postalo kompleksno, saj je zdru\u017eevalo:<\/p>\n<ul>\n<li data-start=\"787\" data-end=\"814\">poslovne funkcije lokala,<\/li>\n<li data-start=\"817\" data-end=\"880\">gostinsko infrastrukturo (POS sistemi, blagajne, tiskalniki),<\/li>\n<li data-start=\"883\" data-end=\"928\">podnajemnike (frizerski salon, stanovanje),<\/li>\n<li data-start=\"931\" data-end=\"992\">Wi-Fi za goste in zaposlene z Android terminali za naro\u010danje.<\/li>\n<\/ul>\n<p data-start=\"994\" data-end=\"1155\">Zaradi <strong data-start=\"1001\" data-end=\"1036\">nara\u0161\u010dajo\u010dih varnostnih gro\u017eenj<\/strong> iz interneta in lokalnih naprav je bilo treba omre\u017eje <strong data-start=\"1091\" data-end=\"1107\">segmentirati<\/strong> \u2013 uvedena so bila <strong data-start=\"1126\" data-end=\"1154\"><a href=\"https:\/\/lavrencic.com\/wordpress\/index.php\/vlan-i-za-zacetnike\/\" target=\"_blank\" rel=\"noopener\">navidezna omre\u017eja<\/a> (VLAN)<\/strong>.<\/p>\n<hr data-start=\"1157\" data-end=\"1160\" \/>\n<h3 data-start=\"1162\" data-end=\"1182\">Tehni\u010dna re\u0161itev<\/h3>\n<h4 data-start=\"1184\" data-end=\"1203\">Strojna in omre\u017ena oprema<\/h4>\n<ul>\n<li><strong data-start=\"1260\" data-end=\"1285\">Glavni usmerjevalnik:<\/strong> Mikrotik hAP ax3.<\/li>\n<li><strong data-start=\"1307\" data-end=\"1326\">Dostopne to\u010dke <\/strong>Mikrotik: wAP (zunanje) in hAP ac2 (notranje to\u010dke Wi-Fi in hkrati tudi stikala).<\/li>\n<li><strong data-start=\"1388\" data-end=\"1400\">Stikala <\/strong>Mikrotik: 5, 8 in 24 portna.<\/li>\n<li><strong>Diskovno polje Synology DS723+<\/strong>: majhen stre\u017enik, ki skrbi za podatke, varnostne kopije, osnovni po\u0161tni stre\u017enik za lastno domeno. Diskovno polje ima tudi nalogo lastnega oblaka, brez dodatnih stro\u0161kov, omejitev, dostopi so mo\u017eni od kjerkoli.<\/li>\n<li>Osebni ra\u010dunalniki, tiskalniki, itn.<\/li>\n<\/ul>\n<h4 data-start=\"1422\" data-end=\"1447\">Segmentacija omre\u017eja<\/h4>\n<p data-start=\"1448\" data-end=\"1493\">Vzpostavljenih je bilo <strong data-start=\"1471\" data-end=\"1492\">6 lo\u010denih VLAN-ov<\/strong>:<\/p>\n<ol>\n<li data-start=\"1498\" data-end=\"1608\"><strong data-start=\"1498\" data-end=\"1518\">Poslovno omre\u017eje<\/strong> \u2013 stre\u017enik, programska oprema za vodenje lokala, NAS diskovno polje, video nadzor, alarmni sistem, ipd.<\/li>\n<li data-start=\"1612\" data-end=\"1672\"><strong data-start=\"1612\" data-end=\"1633\">Gostinsko omre\u017eje<\/strong> \u2013 POS sistemi, blagajne, tiskalniki.<\/li>\n<li data-start=\"1676\" data-end=\"1736\"><strong data-start=\"1676\" data-end=\"1701\">Omre\u017eje podnajemnikov<\/strong> \u2013 frizerski salon in stanovanje.<\/li>\n<li data-start=\"1740\" data-end=\"1936\"><strong data-start=\"1740\" data-end=\"1770\">Wi-Fi za Android terminale<\/strong> \u2013 telefoni za naro\u010dila in pla\u010dila, upravljani preko <strong data-start=\"1823\" data-end=\"1834\">CAPsMAN<\/strong> (centralno upravljanje Mikrotik dostopnih to\u010dk) z omogo\u010denim <strong data-start=\"1896\" data-end=\"1933\">hitrim prehajanjem (fast roaming)<\/strong>.<\/li>\n<li data-start=\"1940\" data-end=\"2012\"><strong data-start=\"1940\" data-end=\"1958\">Wi-Fi za goste<\/strong> \u2013 izolirano omre\u017eje brez dostopa do drugih VLAN-ov.<\/li>\n<li data-start=\"2016\" data-end=\"2093\"><strong data-start=\"2016\" data-end=\"2033\">IP telefonija<\/strong> \u2013 integrirana z infrastrukturo ponudnika Telekom Slovenije.<\/li>\n<\/ol>\n<hr data-start=\"2095\" data-end=\"2098\" \/>\n<h3 data-start=\"2100\" data-end=\"2125\">Varnostna arhitektura<\/h3>\n<ul>\n<li data-start=\"2128\" data-end=\"2239\"><strong data-start=\"2128\" data-end=\"2167\">Dostop med VLAN-i je strogo omejen.<\/strong> Gostje nimajo nikakr\u0161nega dostopa do poslovnih ali gostinskih naprav.<\/li>\n<li data-start=\"2242\" data-end=\"2346\"><strong data-start=\"2242\" data-end=\"2263\">Izolacija gostov:<\/strong> naprave gostov se med seboj ne vidijo, kar prepre\u010duje \u0161irjenje morebitnih oku\u017eb.<\/li>\n<li data-start=\"2349\" data-end=\"2474\"><strong data-start=\"2349\" data-end=\"2365\">Video nadzor<\/strong> nima neposrednega dostopa do interneta; ogled je mogo\u010d le iz poslovnega omre\u017eja ali prek <strong data-start=\"2455\" data-end=\"2471\">VPN-povezave<\/strong>.<\/li>\n<li data-start=\"2477\" data-end=\"2561\"><strong data-start=\"2477\" data-end=\"2490\">Zaposleni<\/strong> uporabljajo le omre\u017eje za goste, brez dostopa do poslovnih sistemov.<\/li>\n<li data-start=\"2564\" data-end=\"2632\">Na vseh ra\u010dunalnikih je name\u0161\u010dena <strong data-start=\"2598\" data-end=\"2631\">protivirusna za\u0161\u010dita F-Secure<\/strong>.<\/li>\n<\/ul>\n<hr data-start=\"2634\" data-end=\"2637\" \/>\n<h3 data-start=\"2639\" data-end=\"2671\">Arhiviranje in varnost kopij<\/h3>\n<ul>\n<li data-start=\"2675\" data-end=\"2845\"><strong data-start=\"2675\" data-end=\"2712\">Celovite dnevne varnostne kopije:<\/strong><br data-start=\"2712\" data-end=\"2715\" \/>Vsi ra\u010dunalniki se vsak dan v celoti arhivirajo (image diskov) na <strong data-start=\"2784\" data-end=\"2803\">Synology DS723+<\/strong> z uporabo <strong data-start=\"2814\" data-end=\"2844\">Active Backup for Business<\/strong>.<\/li>\n<li data-start=\"2849\" data-end=\"2903\"><strong data-start=\"2849\" data-end=\"2901\">Dodatno <\/strong>arhiviranje poslovnih podatkov lastnika lokala:\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li>Lokalna sinhronizacija na NAS, ki se hipno izvaja ob vsaki spremembi katerega koli dokumenta: Excel, Word, PDF, slike.<\/li>\n<li>Dnevna kopija na <strong data-start=\"2964\" data-end=\"2984\">zunanji USB disk.<\/strong><\/li>\n<li>Kopija na <strong data-start=\"3003\" data-end=\"3037\">NAS napravo na doma\u010di lokaciji.<\/strong><\/li>\n<li><strong>Off-site <\/strong>varnostna kopija na<strong> lavrencic.com<\/strong>.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n<hr data-start=\"3099\" data-end=\"3102\" \/>\n<h3 data-start=\"3104\" data-end=\"3160\">Primer iz prakse \u2013 \u201cO\u017eivljanje\u201d ra\u010dunalnika lastnika lokala<\/h3>\n<p data-start=\"3161\" data-end=\"3535\">Ko je <strong data-start=\"3167\" data-end=\"3180\">trdi disk<\/strong> lastnikovega ra\u010dunalnika odpovedal, je bila izvedena popolna <strong data-start=\"3242\" data-end=\"3265\">\u201cbare metal\u201d obnova<\/strong> iz diskovnega polja Synology.<br data-start=\"3295\" data-end=\"3298\" \/><em>Postopek je 26. oktobra 2025, med 8.00 in 12.00, uspe\u0161no povrnil <strong data-start=\"3363\" data-end=\"3385\">celoten sistem 1:1<\/strong> \u2013 operacijski sistem Windows, nastavitve in podatke \u2013 brez izgube informacij.<\/em><br data-start=\"3463\" data-end=\"3466\" \/><em>To potrjuje zanesljivost zasnove arhiviranja in obnovitvenega na\u010drta.<\/em><\/p>\n<hr data-start=\"3537\" data-end=\"3540\" \/>\n<h3 data-start=\"3542\" data-end=\"3562\">Povzetek koristi<\/h3>\n<p>\u2705 Pove\u010dana <strong data-start=\"3576\" data-end=\"3601\">varnost in stabilnost<\/strong> omre\u017eja<br \/>\u2705 Optimizirana <strong data-start=\"3629\" data-end=\"3660\">lo\u010ditev uporabni\u0161kih skupin<br \/><\/strong>\u2705 Enostavno <strong data-start=\"3677\" data-end=\"3717\">upravljanje dostopnih to\u010dk (CAPsMAN)<br \/><\/strong>\u2705 Hitrej\u0161a diagnostika in obnova v primeru okvar<br \/>\u2705 Celovita <strong data-start=\"3786\" data-end=\"3844\">strategija varnostnega kopiranja in povrnitve podatkov<\/strong><\/p>\n<p>Spodaj je prikazana zelo, zelo, pribli\u017ena skica omre\u017eja iz katere je razvidno veliko \u0161tevilo (ve\u010d kot 15) omre\u017enih naprav. Stanje ni identi\u010dno kot je v realni situaciji, zaradi varnosti tudi malo prilagojeno.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-21e6473b e-flex e-con-boxed e-con e-parent\" data-id=\"21e6473b\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1b55d62 e-flex e-con-boxed e-con e-parent\" data-id=\"1b55d62\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-cb36d62 elementor-widget elementor-widget-image\" data-id=\"cb36d62\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"453\" src=\"https:\/\/lavrencic.com\/wordpress\/wp-content\/uploads\/2025\/10\/fontana-mreza-1-1024x453.jpg\" class=\"attachment-large size-large wp-image-650\" alt=\"\" srcset=\"https:\/\/lavrencic.com\/wordpress\/wp-content\/uploads\/2025\/10\/fontana-mreza-1-1024x453.jpg 1024w, https:\/\/lavrencic.com\/wordpress\/wp-content\/uploads\/2025\/10\/fontana-mreza-1-300x133.jpg 300w, https:\/\/lavrencic.com\/wordpress\/wp-content\/uploads\/2025\/10\/fontana-mreza-1-768x340.jpg 768w, https:\/\/lavrencic.com\/wordpress\/wp-content\/uploads\/2025\/10\/fontana-mreza-1.jpg 1334w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>\u0160tudija primera 1 &#8211; Posodobitev IT infrastrukture v gostinskem lokalu Cilj projekta Pri naro\u010dniku \u2013 gostinskem lokalu \u2013 je bilo potrebno posodobiti in nadgraditi ra\u010dunalni\u0161ko omre\u017eje, strojno in programsko opremo.Cilj je bil zagotoviti zanesljivo, varno in raz\u0161irljivo IT-okolje, ki podpira razli\u010dne uporabni\u0161ke segmente: poslovanje lokala, osebje, goste ter podnajemnike. Izhodi\u0161\u010da in zahteve Po ve\u010dletnih spremembah &#8230; <a title=\"\u0160tudija primer 1\" class=\"read-more\" href=\"https:\/\/lavrencic.com\/wordpress\/index.php\/studija-primer-1\/\" aria-label=\"Read more about \u0160tudija primer 1\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-637","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/pages\/637","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=637"}],"version-history":[{"count":91,"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/pages\/637\/revisions"}],"predecessor-version":[{"id":908,"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/pages\/637\/revisions\/908"}],"wp:attachment":[{"href":"https:\/\/lavrencic.com\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}