+ Post New Thread
Results 1 to 13 of 13
Hardware Thread, Intergrating Wifi into a wired network in Technical; Hello and good morning, a few months ago I made a post asking about intergrating wireless into our sixth form ...
  1. #1
    joshjacklin's Avatar
    Join Date
    Mar 2010
    Location
    Stevenage
    Posts
    33
    Thank Post
    25
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Intergrating Wifi into a wired network

    Hello and good morning, a few months ago I made a post asking about intergrating wireless into our sixth form common room and I was a bit vague in what I was asking and I thought I would give a comprehensive explanation and hope someone can help me please.

    Basically recently I was asked if we could intergrate wireless into our sixth form common room, untill then our school has literally been all wired.

    The aim of this is to enable the sixth formers to come in with there laptops and we will provide them with the wireless key. They must go through the proxy server to have filtered internet, and access to only 3 shared folders and there home area.

    This room consists of 6 workstations which all use Windows XP and get DHCP addresses from the (server 2008 r2) and a HP Laserjet 2600 printer which uses a static IP, all of the network points in this room connect up to a Gigabit Netgear 24 port switch model number JGS524 for your information.

    We are planning on connecting a Netgear ProSafe Wireless-N access points model number WNAP210.

    Personally I must say I have not ever configured a group policy and will need a little bit of an explanation what to do.

    I have a few questions on this if someone could answer this for me that would be brilliant please.

    How does it work for the clients, because as far as im aware literally usually if we want a client to use the proxy (smoothwall) we have to go to the internet settings and go to the proxy settings and put in the address so that they can access the internet, so how do we have it so they are filtered via smoothwall without having to change any browser settings?

    Usually the Client machines that we own are locked down, how do we set it so that when the students connect to our network with Macbooks, Windows 7 Machines, Windows Vista Machines and such only can have access to the areas we want?

    If you could help I would be immensly greatful!

    So as a summary we want filtered internet access and access to only 3 shared network drives and there documents.

    Thank you very much!

    Josh.

  2. #2
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    824
    Thank Post
    93
    Thanked 186 Times in 151 Posts
    Rep Power
    67
    To start you off... You'll need to look at wpad or proxy.pac files to help your users automatically configure their proxy settings. Most browsers support wpad.

    I would suggest you probably want to VLAN the network and use access control to ensure that the laptops / phones / netbooks etc. can only access the ip addresses you want them to.

    Assuming your pupils have their own log ons to your network, and suitable folder permissions are set, they should be able to browse to their shares and not be able to access anything else.

    You wont be able to configure a Group Policy for them, they wont be fully connected to your domain.

  3. Thanks to IrritableTech from:

    joshjacklin (20th May 2011)

  4. #3
    joshjacklin's Avatar
    Join Date
    Mar 2010
    Location
    Stevenage
    Posts
    33
    Thank Post
    25
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Cool thank you, how would I configure the vlan?

  5. #4


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    126
    Quote Originally Posted by joshjacklin View Post
    Cool thank you, how would I configure the vlan?
    What switches are you using?

  6. Thanks to K.C.Leblanc from:

    joshjacklin (20th May 2011)

  7. #5

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,065
    Thank Post
    629
    Thanked 2,232 Times in 1,020 Posts
    Blog Entries
    23
    Rep Power
    638
    The bumf on the Netgear site state the WNAP210 supports up to 30 users. How many do you anticipate using it at once (including mobile devices)? If it is around, or more than this, then I would suggest a more enterprise orientated access point that will be able to handle the concurrent connections better.

  8. Thanks to Dos_Box from:

    joshjacklin (20th May 2011)

  9. #6

    Join Date
    Apr 2007
    Location
    Christchurch
    Posts
    420
    Thank Post
    41
    Thanked 64 Times in 62 Posts
    Rep Power
    26
    How about proxypal for them to set the proxy settings?

  10. Thanks to Brpilot99 from:

    joshjacklin (20th May 2011)

  11. #7
    joshjacklin's Avatar
    Join Date
    Mar 2010
    Location
    Stevenage
    Posts
    33
    Thank Post
    25
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Cool thank you
    -K.C.Leblanc- The switch we are using in this perticular room is a Gigabit Netgear 24 port switch model number JGS524

    -Dos_Box- As we are an independant school and we never have no where near the maximum number, but if we ever did have to consider a large amount then yeah I agree we would need to go to something a bit more substantial.

    -Brpilot99- proxypal looks amazing but, I wouldnt want to give the kids the option of turning off and on the proxy server because they could just go unfiltered at any given time.

    Thank you all for your input, so literally what do I do lol ive got the general concept of where I need to be going do I need to configure the router other than the fact that I need to set a form of encryption with a passcode and set the router with a static IP, do I need to do anything to my proxy server?

    And what do I need to configure for the vlan? literally I know these seem simplistic questions but I have only ever configured a small wireless netgear router at home, and you have to start off somewhere.

  12. #8


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    126
    Quote Originally Posted by joshjacklin View Post
    Cool thank you
    -K.C.Leblanc- The switch we are using in this perticular room is a Gigabit Netgear 24 port switch model number JGS524
    Since it's an unmanaged switch it won't do vlans.

  13. #9

    Join Date
    Apr 2007
    Location
    Christchurch
    Posts
    420
    Thank Post
    41
    Thanked 64 Times in 62 Posts
    Rep Power
    26
    "I wouldnt want to give the kids the option of turning off and on the proxy server because they could just go unfiltered at any given time"

    If the only route to the outside world goes via your smoothwall box then if they turn of the proxy setting then the internet should simply not work atall ..

  14. #10


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    turning off the proxy in the browser would only allow direct internet connection if your firewall is misconfigured.

  15. #11
    clareq's Avatar
    Join Date
    Dec 2005
    Location
    Doncaster
    Posts
    734
    Thank Post
    53
    Thanked 190 Times in 126 Posts
    Rep Power
    101
    "I wouldnt want to give the kids the option of turning off and on the proxy server because they could just go unfiltered at any given time"
    If turning of the proxy allows unfiltered Internet, what's stopping them from connecting a network cable to their laptop and surfing to their heart's content now?

  16. #12
    joshjacklin's Avatar
    Join Date
    Mar 2010
    Location
    Stevenage
    Posts
    33
    Thank Post
    25
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    yes, that is true as we have admin users of which do not go through the proxy as present so literally it renders our plan pretty much useless as if we turned around and forced all users to go through the proxy management would over rule us as soon as someone complains, unless there is a way of configuring smoothwall to allow internet via mac address of the machine, so if one of the sixth form gave a student the key for the wireless, they couldnt use it unless we had added there mac address to smoothwall or even the router, ok putting the internet filtering to the side for a second, how do I have it so the users can only access there home areas?

  17. #13


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    126
    Quote Originally Posted by joshjacklin View Post
    yes, that is true as we have admin users of which do not go through the proxy as present so literally it renders our plan pretty much useless as if we turned around and forced all users to go through the proxy management would over rule us as soon as someone complains, unless there is a way of configuring smoothwall to allow internet via mac address of the machine, so if one of the sixth form gave a student the key for the wireless, they couldnt use it unless we had added there mac address to smoothwall or even the router, ok putting the internet filtering to the side for a second, how do I have it so the users can only access there home areas?
    You could either use web folders (which will be easier if you apply some firewalling) or the can just map their work area to a drive letter like you'd do. The only different it they'd have to provide credentials.

    You say you have a smoothwall, my only experience of smoothwall is express so I'm not 100 % sure your setup will support this. But smoothwall lets you route traffic between different networks (or subnets). You could create a separate subnet for your wireless, and then connect it to the smoothwall. You can then use transparent proxying to prevent users connecting straight to the internet. Hopefully Tom from smoothwall will see this thread and be able to give a better explanation. This should also keep the wireless network contained and give your network a degree of protection.

  18. Thanks to K.C.Leblanc from:

    joshjacklin (20th May 2011)

SHARE:
+ Post New Thread

Similar Threads

  1. [News] http://www.wired.com/playbook/2010/02/massive-network-is-an-olympian-feat/
    By localzuk in forum Jokes/Interweb Things
    Replies: 6
    Last Post: 24th February 2010, 12:09 PM
  2. Securing Wired Network
    By netadmin in forum Wireless Networks
    Replies: 2
    Last Post: 20th February 2010, 01:34 PM
  3. [Website] 25 Hilarious WiFi Network Names
    By mattx in forum Jokes/Interweb Things
    Replies: 15
    Last Post: 14th December 2009, 03:05 PM
  4. [MS Office - 2007] Intergrating SP2 into Installation share
    By Geoff in forum Office Software
    Replies: 1
    Last Post: 23rd July 2009, 02:17 PM
  5. 2 wireless networks and wired network
    By in forum Network and Classroom Management
    Replies: 9
    Last Post: 23rd November 2007, 01:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •