{"id":314420,"date":"2020-12-07T03:01:56","date_gmt":"2020-12-07T03:01:56","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=314420"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=314420","title":{"rendered":"Wi-Fi \u0434\u043b\u044f \u043c\u0430\u043c\u044b"},"content":{"rendered":"\n
\n

\u041f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u0430\u0434\u0430\u0447\u0438<\/h2>\n

\u0421\u0434\u0435\u043b\u0430\u0442\u044c Wi-Fi \u0432 2+ \u043a\u043e\u043c\u043d\u0430\u0442\u043d\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0432 \u043b\u044e\u0431\u043e\u0439 \u043b\u043e\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043d\u0435 \u043d\u0438\u0436\u0435 90\u041c\u0431\u0438\u0442\/\u0441 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (IEEE 802.11ac).<\/p>\n

\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0447\u0442\u043e \u043d\u0430\u0448\u0430 \u0442\u0438\u043f\u043e\u0432\u0430\u044f \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0442\u0438\u043f\u043e\u0432\u043e\u0439 \u043d\u0430\u0431\u043e\u0440 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439:<\/p>\n

    \n
  1. \u041f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u042f\u043d\u0434\u0435\u043a\u0441DNS) <\/li>\n
  2. \u0411\u043e\u044f\u0449\u0430\u044f\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0431\u0430\u0431\u0443\u0448\u043a\u0430 (\u042f\u043d\u0434\u0435\u043a\u0441DNS, \u0431\u0435\u0437 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u0432\u0438\u0440\u0443\u0441\u043e\u0432) <\/li>\n
  3. \u0421\u0442\u0443\u0434\u0435\u043d\u0442 5 \u043a\u0443\u0440\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043d\u0443\u0436\u0435\u043d \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 (\u0432\u044b\u0445\u043e\u0434 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VPN \u0432 \u0415\u0432\u0440\u043e\u043f\u0443, DNS 8.8.8.8)<\/li>\n
  4. \u0428\u043a\u043e\u043b\u044c\u043d\u0438\u043a 7 \u043a\u043b\u0430\u0441\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0430\u0434\u043e \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432 21:00 \u0447\u0430\u0441 \u043f\u043e \u0431\u0443\u0434\u043d\u044f\u043c \u0438 \u0432 22:00 \u0447\u0430\u0441\u0430 \u043f\u043e \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u043c (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u042f\u043d\u0434\u0435\u043a\u0441DNS \u00ab\u0421\u0435\u043c\u0435\u0439\u043d\u044b\u0439\u00bb \u0438 \u043f\u043e \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0435\u043c\/\u0432\u043a\u043b\u044e\u0447\u0430\u0435\u043c SSID).<\/li>\n<\/ol>\n

    <\/p>\n

    \u0420\u0430\u0434\u0438\u043e \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435<\/h2>\n

    \u041d\u0430\u0447\u043d\u0443 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0435\u0441\u043b\u0438 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0431\u0435\u0442\u043e\u043d\u043d\u044b\u0435 \u0441\u0442\u0435\u043d\u044b \u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043d\u0430\u0442 2 \u0438 \u0431\u043e\u043b\u0435\u0435, \u0442\u043e \u043e\u0434\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Wi-Fi \u0431\u0443\u0434\u0435\u0442 \u043d\u0435 \u043e\u0431\u043e\u0439\u0442\u0438\u0441\u044c, \u0432\u0435\u0434\u044c 20 \u041c\u0431\u0438\u0442\/\u0441 \u043d\u0430 \u0434\u0438\u0432\u0430\u043d\u0435 \u0443 \u043e\u043a\u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0447\u0442\u043e \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0441\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u043e\u043b\u0436\u0435 \u0431\u044b\u0442\u044c \u043d\u0435 \u043d\u0438\u0436\u0435 -65\u0434\u0411.<\/p>\n

    \u0412\u043e\u0442 \u043f\u0440\u0438\u043c\u0435\u0440:
    \u0421\u0442\u0430\u0432\u0438\u043c \u043e\u0434\u043d\u0443 \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043f\u0440\u0438\u0445\u043e\u0436\u0435\u0439, \u0432 5 \u0413\u0413\u0446 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u0437\u043e\u043d\u0430 \u043a\u043e\u043f\u0440\u044b\u0442\u0438\u044f \u0434\u043e -65\u0434\u0411 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a:<\/p>\n

    \"image\" \"image\"
    \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0434\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0435\u0449\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 2 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n

    \"image\" \"image\"
    \"image\"<\/p>\n

    \u0422\u0430\u043a \u0443\u0436\u0435 \u043b\u0443\u0447\u0448\u0435, \u0441 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c.
    <\/a> <\/p>\n

    \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Wi-Fi \u043d\u0430 \u0431\u0430\u0437\u0435 Mikrotik hAP ac<\/h2>\n

    1. \u0421\u0445\u0435\u043c\u0430 \u0441\u0435\u0442\u0438 \u0438 \u0430\u0434\u0440\u0435\u0441\u043d\u044b\u0439 \u043f\u043b\u0430\u043d<\/p>\n

    \"image\"
    <\/a>\"Piccy.info<\/a><\/a><\/p>\n

    2. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 multicast \u0434\u043b\u044f IPTV. \u042d\u0442\u043e \u043b\u0435\u0433\u043a\u043e \u043d\u0430\u0433\u0443\u0433\u043b\u0438\u0442\u044c.<\/p>\n

    3. \u041f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e \u0441\u043e\u0437\u0434\u0430\u0442\u044c 4 VLAN-\u0430: 10,20,30,40, \u043f\u043e\u0434 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f<\/p>\n

    \/interface bridge vlan add bridge=bridge_vlan_10 tagged=VLAN_10_TRUNK_ETH5,VLAN_10_TRUNK_ETH4 vlan-ids=10 add bridge=bridge_vlan_20 tagged=VLAN_20_TRUNK_ETH5,VLAN_20_TRUNK_ETH4 vlan-ids=20 add bridge=bridge_vlan_30 tagged=VLAN_30_TRUNK_ETH5,VLAN_30_TRUNK_ETH4 vlan-ids=30 add bridge=bridge_vlan_40 tagged=VLAN_40_TRUNK_ETH5,VLAN_40_TRUNK_ETH4 vlan-ids=40 \/interface vlan add interface=ether4 name=VLAN_10_TRUNK_ETH4 vlan-id=10 add interface=ether5 name=VLAN_10_TRUNK_ETH5 vlan-id=10 add interface=ether4 name=VLAN_20_TRUNK_ETH4 vlan-id=20 add interface=ether5 name=VLAN_20_TRUNK_ETH5 vlan-id=20 add interface=ether4 name=VLAN_30_TRUNK_ETH4 vlan-id=30 add interface=ether5 name=VLAN_30_TRUNK_ETH5 vlan-id=30 add interface=ether4 name=VLAN_40_TRUNK_ETH4 vlan-id=40 add interface=ether5 name=VLAN_40_TRUNK_ETH5 vlan-id=40 \/interface bridge port add bridge=bridge_vlan_10 interface=ether2 pvid=10 add bridge=bridge_vlan_10 interface=ether3 pvid=10 add bridge=bridge_vlan_10 interface=wlan_2.4_GHz pvid=10 add bridge=bridge_vlan_10 interface=wlan_5_GHz pvid=10 add bridge=bridge_vlan_10 interface=VLAN_10_TRUNK_ETH5 priority=0 pvid=10 add bridge=bridge_vlan_20 interface=VLAN_20_TRUNK_ETH5 priority=0 pvid=20 add bridge=bridge_vlan_30 interface=VLAN_30_TRUNK_ETH5 priority=0 pvid=30 add bridge=bridge_vlan_40 interface=VLAN_40_TRUNK_ETH5 priority=0 pvid=40 add bridge=bridge_vlan_20 interface=wlan_2.4_GHz_virtual_2 pvid=20 add bridge=bridge_vlan_20 interface=wlan_5_GHz_virtual_2 pvid=20 add bridge=bridge_vlan_30 interface=wlan_2.4_GHz_virtual_3 pvid=30 add bridge=bridge_vlan_30 interface=wlan_5_GHz_virtual_3 pvid=30 add bridge=bridge_vlan_40 interface=wlan_2.4_GHz_virtual_4 pvid=40 add bridge=bridge_vlan_40 interface=wlan_5_GHz_virtual_4 pvid=40 add bridge=bridge_vlan_10 interface=VLAN_10_TRUNK_ETH4 priority=0 pvid=10 add bridge=bridge_vlan_20 interface=VLAN_20_TRUNK_ETH4 priority=0 pvid=20 add bridge=bridge_vlan_30 interface=VLAN_30_TRUNK_ETH4 priority=0 pvid=30 add bridge=bridge_vlan_40 interface=VLAN_40_TRUNK_ETH4 priority=0 pvid=40<\/code><\/pre>\n
      4. \u0417\u0430\u0434\u0430\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432<\/p>\n
    \/interface list add comment=defconf name=WAN add comment=defconf name=LAN \/interface list member add list=LAN add interface=ether1 list=WAN add interface=bridge_vlan_10 list=LAN add interface=bridge_vlan_20 list=LAN add interface=bridge_vlan_30 list=LAN add interface=bridge_vlan_40 list=LAN<\/code><\/pre>\n
      5. \u0417\u0430\u0434\u0430\u0442\u044c IP \u0430\u0434\u0440\u0435\u0441\u0430 \u043d\u0430 LAN \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0431\u0435\u0440\u0435\u043c \u0441\u0435\u0442\u044c 172.16.2.0.24 \u0438 \u0434\u0435\u043b\u0438\u043c \u0435\u0435 \u043d\u0430 4 \u0448\u0442\u0443\u043a\u0438 \u043f\u043e \/26<\/p>\n
    \/ip address add address=172.16.2.126\/26 interface=bridge_vlan_20 network=172.16.2.64 add address=172.16.2.190\/26 interface=bridge_vlan_30 network=172.16.2.128 add address=172.16.2.254\/26 interface=bridge_vlan_40 network=172.16.2.192 add address=172.16.2.62\/26 interface=bridge_vlan_10 network=172.16.2.0<\/code><\/pre>\n
      6. \u0417\u0430\u0434\u0430\u0442\u044c IP \u0430\u0434\u0440\u0435\u0441 \u043d\u0430 WAN \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 (\u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439)<\/p>\n
    \/ip address add address=XXX.XXX.XXX.XXX\/XXX interface=ether1 network=XXX.XXX.XXX.XXX<\/code><\/pre>\n
      7. \u0417\u0430\u0434\u0430\u0442\u044c \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u043f\u043e-\u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430<\/p>\n
    \/ip route add distance=1 gateway=XXX.XXX.XXX.XXX<\/code><\/pre>\n
      8. \u0417\u0430\u0434\u0430\u0442\u044c DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0430<\/p>\n
    \/ip pool add name=vlan_10_dhcp_pool ranges=172.16.2.21-172.16.2.59 add name=vlan_20_dhcp_pool ranges=172.16.2.85-172.16.2.123 add name=vlan_30_dhcp_pool ranges=172.16.2.159-172.16.2.187 add name=vlan_40_dhcp_pool ranges=172.16.2.223-172.16.2.251 \/ip dhcp-server network add address=172.16.2.0\/26 dns-server=77.88.8.8,77.88.8.1 domain=home.local gateway=172.16.2.62 netmask=26 add address=172.16.2.64\/26 dns-server=77.88.8.88,77.88.8.2 domain=home.local gateway=172.16.2.126 netmask=26 add address=172.16.2.128\/26 dns-server=8.8.8.8,8.8.4.4 domain=home.local gateway=172.16.2.190 netmask=26 add address=172.16.2.192\/26 dns-server=77.88.8.7,77.88.8.3 domain=home.local gateway=172.16.2.254 netmask=26 \/ip dhcp-server add address-pool=vlan_10_dhcp_pool disabled=no interface=bridge_vlan_10 name=dhcp_server_vlan_10 add address-pool=vlan_20_dhcp_pool disabled=no interface=bridge_vlan_20 name=dhcp_server_vlan_20 add address-pool=vlan_30_dhcp_pool disabled=no interface=bridge_vlan_30 name=dhcp_server_vlan_30 add address-pool=vlan_40_dhcp_pool disabled=no interface=bridge_vlan_40 name=dhcp_server_vlan_40<\/code><\/pre>\n
      9. \u041d\u0435 \u0437\u0430\u0431\u044b\u0442\u044c \u043f\u0440\u043e igmp snooping \u0434\u043b\u044f IPTV \u043f\u0440\u0438\u0441\u0442\u0430\u0432\u043a\u0438<\/p>\n
    \/interface bridge add igmp-snooping=yes name=bridge_vlan_10 add igmp-snooping=yes name=bridge_vlan_20 add igmp-snooping=yes name=bridge_vlan_30 add igmp-snooping=yes name=bridge_vlan_40 \/routing igmp-proxy interface add alternative-subnets=0.0.0.0\/0 interface=ether1 upstream=yes<\/code><\/pre>\n
      10. \u0441\u0434\u0435\u043b\u0430\u0442\u044c VPN \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0434\u043e \u0432\u0430\u0448\u0435\u0433\u043e VPS \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a (\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 VPN \u043d\u0430 Debian \u0431\u0443\u0434\u0435\u0442 \u043d\u0438\u0436\u0435)<\/p>\n
    \/interface l2tp-client add connect-to=XXX.XXX.XXX.XXX disabled=no ipsec-secret=XXXXXXX keepalive-timeout=disabled name=l2tp-out1 password=XXXXXX profile=default use-ipsec=yes user=XXXXXX<\/code><\/pre>\n
      11. \u0421\u0434\u0435\u043b\u0430\u0442\u044c Policy Based Routing \u0434\u043b\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u0442\u043e\u0433\u043e SSID, \u0442\u0440\u0430\u0444\u0438\u043a \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u0434\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 VPN \u0442\u0443\u043d\u043d\u0435\u043b\u044c.<\/p>\n
    \/ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=VPN_route_mark passthrough=yes src-address=172.16.2.128\/26 \/ip route add check-gateway=ping distance=1 gateway=10.1.1.1 routing-mark=VPN_route_mark<\/code><\/pre>\n
      12. \u0421\u0434\u0435\u043b\u0430\u0442\u044c NAT<\/p>\n
    \/ip firewall nat add action=masquerade chain=srcnat out-interface-list=WAN src-address=172.16.2.0\/25 add action=masquerade chain=srcnat out-interface=l2tp-out1 src-address=172.16.2.128\/26 add action=masquerade chain=srcnat out-interface-list=WAN src-address=172.16.2.192\/26<\/code><\/pre>\n
      13. \u041c\u043e\u0436\u043d\u043e \u0443\u0431\u0440\u0430\u0442\u044c \u043b\u0438\u0448\u043d\u0435\u0435 \u0438\u0437 \u043f\u0440\u0430\u0432\u0438\u043b \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u0430 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0442\u043e \u0447\u0442\u043e \u0445\u043e\u0447\u0435\u0442\u0441\u044f.<\/p>\n
    \/ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid disabled=yes add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1 add action=drop chain=input comment="defconf: drop all not coming from LAN" disabled=yes in-interface-list=!LAN add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related disabled=yes add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid disabled=yes add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new disabled=yes in-interface-list=WAN<\/code><\/pre>\n
      14. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f SSID<\/p>\n
    \/interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm mode=dynamic-keys name=Profile_Home_wireless supplicant-identity="" \\     unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=home-wifi-00 wpa2-pre-shared-key=home-wifi-00 add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm mode=dynamic-keys name=Profile_Secure_wireless supplicant-identity=\\     "" unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=secure-wifi-00 wpa2-pre-shared-key=secure-wifi-00 add eap-methods="" group-ciphers=tkip,aes-ccm name=Profile_Children_wireless supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=\\     children-wifi-00 wpa2-pre-shared-key=children-wifi-00<\/code><\/pre>\n
      15. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0430\u043c Wi-Fi \u0441 \u0447\u0435\u0442\u044b\u0440\u044c\u043c\u044f SSID<\/p>\n
    \/interface wireless set [ find default-name=wlan1 ] band=2ghz-g\/n country=russia distance=indoors installation=indoor mode=ap-bridge name=wlan_2.4_GHz security-profile=\\     Profile_Home_wireless ssid=Home_wireless tx-power=13 tx-power-mode=all-rates-fixed vlan-id=10 wireless-protocol=802.11 wps-mode=disabled add keepalive-frames=disabled mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan_2.4_GHz multicast-buffering=disabled name=wlan_2.4_GHz_virtual_2 \\     security-profile=Profile_Secure_wireless ssid=Secure_wireless vlan-id=20 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled add keepalive-frames=disabled mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan_2.4_GHz multicast-buffering=disabled name=wlan_2.4_GHz_virtual_3 \\     security-profile=Profile_Home_wireless ssid=VPN_wireless vlan-id=30 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled add keepalive-frames=disabled mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan_2.4_GHz multicast-buffering=disabled name=wlan_2.4_GHz_virtual_4 \\     security-profile=Profile_Children_wireless ssid=Children_wireless vlan-id=40 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled set [ find default-name=wlan2 ] band=5ghz-n\/ac channel-width=20\/40mhz-Ce country=russia distance=indoors installation=indoor mode=ap-bridge name=\\     wlan_5_GHz security-profile=Profile_Home_wireless ssid=Home_wireless_pro tx-power=13 tx-power-mode=all-rates-fixed vlan-id=10 wireless-protocol=\\     802.11 add keepalive-frames=disabled mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan_5_GHz multicast-buffering=disabled name=wlan_5_GHz_virtual_2 \\     security-profile=Profile_Secure_wireless ssid=Secure_wireless_pro vlan-id=20 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled add keepalive-frames=disabled mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan_5_GHz multicast-buffering=disabled name=wlan_5_GHz_virtual_3 \\     security-profile=Profile_Home_wireless ssid=VPN_wireless_pro vlan-id=30 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled add keepalive-frames=disabled mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan_5_GHz multicast-buffering=disabled name=wlan_5_GHz_virtual_4 \\     security-profile=Profile_Children_wireless ssid=Children_wireless_pro vlan-id=40 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled<\/code><\/pre>\n
      16. \u0412\u044b\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u00ab\u0434\u0435\u0442\u0441\u043a\u0443\u044e\u00bb \u0441\u0435\u0442\u044c \u043f\u043e \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u0438\u044e:<\/p>\n
    \/system scheduler add interval=1d name=Switch_OFF_children_1 on-event=swich_off_children_2.4 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\     start-date=nov\/28\/2020 start-time=21:00:00 add interval=1d name=Switch_ON_children_1 on-event=swich_on_children_2.4 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\     start-date=nov\/28\/2020 start-time=07:00:00 add interval=1d name=Switch_OFF_children_2 on-event=swich_off_children_5 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\     start-date=nov\/28\/2020 start-time=21:00:00 add interval=1d name=Switch_ON_children_2 on-event=swich_on_children_5 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\     start-date=nov\/28\/2020 start-time=07:00:00 \/system script add dont-require-permissions=no name=swich_off_children_2.4 owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\\     "interface wireless disable wlan_2.4_GHz_virtual_4" add dont-require-permissions=no name=swich_on_children_5 owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\\     "interface wireless enable wlan_5_GHz_virtual_4" add dont-require-permissions=no name=swich_on_children_2.4 owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\\     "interface wireless enable wlan_2.4_GHz_virtual_4" add dont-require-permissions=no name=swich_off_children_5 owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\\     "interface wireless disable wlan_5_GHz_virtual_4"<\/code><\/pre>\n
      17. \u041e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e<\/p>\n
    \/ip neighbor discovery-settings set discover-interface-list=LAN \/tool mac-server set allowed-interface-list=LAN \/tool mac-server mac-winbox set allowed-interface-list=LAN 18.\u041c\u0435\u043b\u043e\u0447\u0438 \/system clock set time-zone-name=Europe\/Moscow \/system identity set name=Miktorik-1<\/code><\/pre>\n
      \u041d\u0430 Miktorik-1, Miktorik-2 \u0434\u0435\u043b\u0430\u0435\u043c \u0432\u0441\u0435 \u0442\u043e\u0436\u0435 \u0441\u0430\u043c\u043e\u0435, \u0442\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u043d\u044f\u044f \u0430\u0434\u0440\u0435\u0441\u0430 VLAN-\u043e\u0432 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0441 \u0430\u0434\u0440\u0435\u0441\u043d\u044b\u043c \u043f\u043b\u0430\u043d\u043e\u043c.<\/p>\n
    VPN \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 \u0431\u0430\u0437\u0435 Debian<\/h2>\n
      <\/p>\n
    XXX.XXX.XXX.XXX - \u0432\u0430\u0448 public IP #sudo apt-get install libgmp3-dev gawk flex bison make #sudo wget https:\/\/download.openswan.org\/openswan\/openswan-latest.tar.gz #sudo tar -xvzf openswan-latest.tar.gz #cd openswan-2.6.51 #sudo make programs #sudo make install  #sudo nano \/etc\/ipsec.conf config setup    nat_traversal=yes    virtual_private=%v4:10.0.0.0\/8,%v4:192.168.0.0\/16,%v4:172.16.0.0\/12    oe=off    protostack=netkey  conn L2TP-PSK-NAT    rightsubnet=vhost:%priv    also=L2TP-PSK-noNAT  conn L2TP-PSK-noNAT    authby=secret    pfs=no    auto=add    keyingtries=3    rekey=no    ikelifetime=8h    keylife=1h    type=transport    left=XXX.XXX.XXX.XXX    leftprotoport=17\/1701    right=%any    rightprotoport=17\/%any     #sudo nano \/etc\/ipsec.secrets XXX.XXX.XXX.XXX %any: PSK "PASSWORD"  #sudo nano \/root\/ipsec #sudo iptables --table nat --append POSTROUTING --jump MASQUERADE #sudo echo 1 > \/proc\/sys\/net\/ipv4\/ip_forward #for each in \/proc\/sys\/net\/ipv4\/conf\/* #do #echo 0 > $each\/accept_redirects #echo 0 > $each\/send_redirects #done #sudo \/etc\/init.d\/ipsec restar  #sudo chmod +x \/root\/ipsec  #sudo sh \/root\/ipsec  #sudo nano \/etc\/xl2tpd\/xl2tpd.conf [global] port = 1701 ipsec saref = yes saref refinfo = 30  [lns default] ip range = 10.1.1.2-10.1.1.100 local ip = 10.1.1.1 refuse chap = yes refuse pap = yes require authentication = yes ppp debug = yes pppoptfile = \/etc\/ppp\/options.xl2tpd length bit = yes name = VPN-1  #sudo nano \/etc\/ppp\/options.xl2tpd require-mschap-v2 ms-dns 8.8.8.8 ms-dns 8.8.4.4 asyncmap 0 auth crtscts lock hide-password modem debug name VPN-1 proxyarp lcp-echo-interval 30 lcp-echo-failure 4  #sudo nano \/var\/log\/syslog  #sudo nano \/etc\/ppp\/chap-secrets user-1 VPN-1 PASSWORD *  #sudo \/etc\/init.d\/ipsec restart sudo \/etc\/init.d\/xl2tpd restart  #sudo ipsec verify  FIREWALL #sudo apt-get install ufw #sudo ufw disable #sudo ufw allow ssh #sudo ufw allow 500\/udp #sudo ufw allow 1701\/udp #sudo ufw allow 4500\/udp #sudo ufw allow from 10.1.1.0\/24 #sudo ufw default allow routed #sudo ufw delete ssh #sudo ufw allow 4444 #sudo ufw enable<\/code><\/pre>\n
      \u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f FW<\/p>\n
    #sudo ufw status verbose <\/code><\/pre>\n
      \u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043b\u043e\u0433\u043e\u0432 \u0435\u0441\u043b\u0438 \u0447\u0442\u043e-\u0442\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f<\/p>\n
    #sudo ufw logging low #sudo tail -f \/var\/log\/ufw.log <\/code><\/pre>\n
      \u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0437\u0430\u0431\u0438\u0432\u0430\u0442\u044c \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0434\u0438\u0441\u043a\u0435<\/p>\n
    #sudo ufw logging off<\/code><\/pre>\n
      \u041c\u0435\u043d\u044f\u0435\u043c \u043f\u043e\u0440\u0442 ssh \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439<\/p>\n
    sudo nano \/etc\/ssh\/sshd_config Port 4444 sudo systemctl restart sshd<\/code><\/pre>\n
      \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0435\u0442 \u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430<\/p>\n
    sudo cat \/var\/log\/auth.log | grep "authentication failure"<\/code><\/pre>\n
      \u0413\u043e\u0442\u043e\u0432\u043e!<\/p>\n
      \u0422\u0435\u043f\u0435\u0440\u044c VPN \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u044c \u0434\u0430\u0436\u0435 \u0441 iPhone \u0447\u0435\u0440\u0435\u0437 4G!<\/p><\/div>\n
     \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438  https:\/\/habr.com\/ru\/post\/531584\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"\n
    \n
    \u041f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u0430\u0434\u0430\u0447\u0438<\/h2>\n
      \u0421\u0434\u0435\u043b\u0430\u0442\u044c Wi-Fi \u0432 2+ \u043a\u043e\u043c\u043d\u0430\u0442\u043d\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0432 \u043b\u044e\u0431\u043e\u0439 \u043b\u043e\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043d\u0435 \u043d\u0438\u0436\u0435 90\u041c\u0431\u0438\u0442\/\u0441 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (IEEE 802.11ac).<\/p>\n
      \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0447\u0442\u043e \u043d\u0430\u0448\u0430 \u0442\u0438\u043f\u043e\u0432\u0430\u044f \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0442\u0438\u043f\u043e\u0432\u043e\u0439 \u043d\u0430\u0431\u043e\u0440 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439:<\/p>\n
      \n
    1. \u041f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u042f\u043d\u0434\u0435\u043a\u0441DNS) <\/li>\n
    2. \u0411\u043e\u044f\u0449\u0430\u044f\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0431\u0430\u0431\u0443\u0448\u043a\u0430 (\u042f\u043d\u0434\u0435\u043a\u0441DNS, \u0431\u0435\u0437 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u0432\u0438\u0440\u0443\u0441\u043e\u0432) <\/li>\n
    3. \u0421\u0442\u0443\u0434\u0435\u043d\u0442 5 \u043a\u0443\u0440\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043d\u0443\u0436\u0435\u043d \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 (\u0432\u044b\u0445\u043e\u0434 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 VPN \u0432 \u0415\u0432\u0440\u043e\u043f\u0443, DNS 8.8.8.8)<\/li>\n
    4. \u0428\u043a\u043e\u043b\u044c\u043d\u0438\u043a 7 \u043a\u043b\u0430\u0441\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0430\u0434\u043e \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432 21:00 \u0447\u0430\u0441 \u043f\u043e \u0431\u0443\u0434\u043d\u044f\u043c \u0438 \u0432 22:00 \u0447\u0430\u0441\u0430 \u043f\u043e \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u043c (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u042f\u043d\u0434\u0435\u043a\u0441DNS \u00ab\u0421\u0435\u043c\u0435\u0439\u043d\u044b\u0439\u00bb \u0438 \u043f\u043e \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0435\u043c\/\u0432\u043a\u043b\u044e\u0447\u0430\u0435\u043c SSID).<\/li>\n<\/ol>\n
        <\/p>\n
      \u0420\u0430\u0434\u0438\u043e \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435<\/h2>\n
        \u041d\u0430\u0447\u043d\u0443 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0435\u0441\u043b\u0438 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0431\u0435\u0442\u043e\u043d\u043d\u044b\u0435 \u0441\u0442\u0435\u043d\u044b \u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043d\u0430\u0442 2 \u0438 \u0431\u043e\u043b\u0435\u0435, \u0442\u043e \u043e\u0434\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Wi-Fi \u0431\u0443\u0434\u0435\u0442 \u043d\u0435 \u043e\u0431\u043e\u0439\u0442\u0438\u0441\u044c, \u0432\u0435\u0434\u044c 20 \u041c\u0431\u0438\u0442\/\u0441 \u043d\u0430 \u0434\u0438\u0432\u0430\u043d\u0435 \u0443 \u043e\u043a\u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0447\u0442\u043e \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0441\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u043e\u043b\u0436\u0435 \u0431\u044b\u0442\u044c \u043d\u0435 \u043d\u0438\u0436\u0435 -65\u0434\u0411.<\/p>\n
        \u0412\u043e\u0442 \u043f\u0440\u0438\u043c\u0435\u0440:
        \u0421\u0442\u0430\u0432\u0438\u043c \u043e\u0434\u043d\u0443 \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043f\u0440\u0438\u0445\u043e\u0436\u0435\u0439, \u0432 5 \u0413\u0413\u0446 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u0437\u043e\u043d\u0430 \u043a\u043e\u043f\u0440\u044b\u0442\u0438\u044f \u0434\u043e -65\u0434\u0411 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a:<\/p>\n
        \"image\" \"image\"
        \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0434\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0435\u0449\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 2 \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n
        \"image\" \"image\"
        \"image\"<\/p>\n
        \u0422\u0430\u043a \u0443\u0436\u0435 \u043b\u0443\u0447\u0448\u0435, \u0441 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c.  <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-314420","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/314420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=314420"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/314420\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=314420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=314420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=314420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}