Ločitev omrežja informacijske in operativne tehnologije

diplomsko delo

Kristjan Židanek (Author), Andrej Kos (Mentor)

Abstract

Diplomsko delo se osredotoča na prikaz načina postavitve ločenega IT in OT omrežja. V uvodnem delu sta razložena pojma informacijske in operativne tehnologije ter nekateri protokoli, s katerimi se srečamo pri omenjenih tehnologijah. Omrežje je postavljeno v virtualnem okolju s programom GNS3, ki spada med omrežne emulatorje. Opisan je namen – zakaj izbrati tako postavitev, shema postavitve in prednosti le-te. Predstavljeno je delovanje omrežja, ki zajema segmentacijo, politike, usmerjanje in povezanost z drugim omrežjem. V zaključnem delu je ponazorjeno upravljanje omrežja v ExtremeCloud IQ Site Engine, kjer je opisan koncept dodajanja naprav v Site Engine in prikaz mape naprav, ki jo zgenerira le-ta na podlagi protokola LLDP. Namen diplomske naloge je prikazati pravilen pristop k postavitvi ločenega IT in OT omrežja ter prikazati, kako tak sistem deluje. Prav tako pa je cilj bralce bolj seznaniti z omenjenim pristopom.

Keywords

informacijska tehnologija;IT;operativna tehnologija;OT;omrežja;ločevanje;redundanca;visokošolski strokovni študij;Aplikativna elektrotehnika;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2024
Typology:	2.11 - Undergraduate Thesis
Organization:	UL FE - Faculty of Electrical Engineering
Publisher:	[K. Židanek]
UDC:	621.39:004.7(043.2)(0.034.2)
COBISS:	201414915
Views:	58
Downloads:	7
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Separation of the information and operational technology network
Secondary abstract:	The thesis focuses on demonstrating the method of setting up a separate IT and OT network. The introductory part explains the concepts of information and operational technology, as well as some protocols encountered in these technologies. The network is set up in a virtual environment using GNS3, which is a network emulator. The purpose, why such a setup is chosen, the setup scheme, and its advantages are described. The network operation, including segmentation, policies, routing, and connectivity with another network, is presented. The final part illustrates network management in ExtremeCloud IQ Site Engine, describing the concept of adding devices to Site Engine and displaying the device map generated by Site Engine based on the LLDP protocol. The purpose of the thesis was to demonstrate the correct approach to setting up a separate IT and OT network and to show how such a system operates. Additionally, the aim was to familiarize readers more with the mentioned approach.
Secondary keywords:	OT;IT;network;separation;redundancy;security;
Type (COBISS):	Bachelor thesis/paper
Study programme:	1000315
Thesis comment:	Univ. v Ljubljani, Fak. za elektrotehniko
Pages:	1 spletni vir (1 datoteka PDF (IX, 63 str.))
ID:	24530639