+ Post New Thread
Page 2 of 4 FirstFirst 1234 LastLast
Results 16 to 30 of 46
Netbooks, PDA and Phones Thread, BYOD and wifi network conundrum in Technical; What is your wireless solution? If its anything like Ruckus, make the Apple TV's be tagged from the ruckus box ...
  1. #16
    Tsonga's Avatar
    Join Date
    Oct 2012
    Location
    Dorset
    Posts
    155
    Thank Post
    9
    Thanked 19 Times in 16 Posts
    Rep Power
    7
    What is your wireless solution? If its anything like Ruckus, make the Apple TV's be tagged from the ruckus box for the guest/staff iPad VLAN, then plug it into the network via its ethernet for the rest of the access you might want.

    Also, not thinking of making a third VLAN for BYOD? Get DHCP to dish out appropriate proxy settings so they go through at a certain level of filtering (no auth, wouldn't be able to look at a suer level but at least they would be filtered) or rely on smoothies SSL bypass.

  2. #17

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    Its ad-hoc home made solution using off the shelf netgear wnap200s, network consists of netgear smart switches, it's far from ideal but its done the job. If I can get them to stump up some cash I'll got with ubiquiti soon at the moment its an unmanaged wifi network that I can't do a lot with without a lot of work (logging into each AP etc, tagging on switches etc) powers that be don't realise this, busy enough as it is since they got rid of the NM a few weeks ago!

  3. #18
    Tsonga's Avatar
    Join Date
    Oct 2012
    Location
    Dorset
    Posts
    155
    Thank Post
    9
    Thanked 19 Times in 16 Posts
    Rep Power
    7
    Quote Originally Posted by caffrey View Post
    Its ad-hoc home made solution using off the shelf netgear wnap200s, network consists of netgear smart switches, it's far from ideal but its done the job. If I can get them to stump up some cash I'll got with ubiquiti soon at the moment its an unmanaged wifi network that I can't do a lot with without a lot of work (logging into each AP etc, tagging on switches etc) powers that be don't realise this, busy enough as it is since they got rid of the NM a few weeks ago!
    Woah, bit of a raw deal.

  4. #19

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,225
    Thank Post
    875
    Thanked 2,717 Times in 2,302 Posts
    Blog Entries
    11
    Rep Power
    780
    Quote Originally Posted by tmcd35 View Post
    Surely the devil is in the detail (aka, I can't come up with any better - can you?). I'm sure you can say the same about just about any VPN connection. The questions would be who as physical access/uses the machine(s) with the VPN connection(s), how does the VPN initiate and what does it have access to once it's connected.

    The other answer so far is to put BYOD devices on the domain...
    I'd say an internal dmz for simple shared devices like the appletv but I don't think thats possible as it still uses the non-routable bonjour like they toy it is.

    With a decent IP6 implementation this may be possible, I don't know if Apple have fixed their ip6 stack yet.

    The closest to a remotely secure way would be to have the ipads vpn internally to a dmz where the resources are, putting them on the same subnet and using the vpn system to screen out all but the required traffic.
    Last edited by SYNACK; 12th February 2013 at 02:29 PM.

  5. #20
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    813
    Thank Post
    88
    Thanked 179 Times in 147 Posts
    Rep Power
    66
    Funding must be aligned with ambition.

    I like what your school is trying to achieve however I'd have to ask the question "how many byod devices, in reality, are going to be sharing with the projector in a room?" If the answer is loads, you need some investment to realise the learning potential. If the answer is one or two every now and then...

    I'd suggest pupil owned devices sharing to whiteboards will get limited use, and any BYOD scheme should be device agnostic. Before you can successfully access the learning potential of BYOD, you need to get your infrastructure sorted.

    It's Bring Your Own Device, not Bring Your Own Apple. I actually prefer Prof Stephen Heppell's term "Bring a Browser". Students could collaborate on Google Docs using their own devices (not just apples), and easily show their work from the windows pc at the front of class. Dropbox, wallwisher, evernote, sketch, prezi etc.... all browser tools. That's where a BYOD scheme really starts to take off.

    I'd separate the two schemes. iPads for teachers is a very different scheme to pupils bringing in devices.

    For more thoughts on BYOD in schools, take a look at my blog. This is a good starting point... BYOD: Wifi, Network, Internet, Proxies | IrritableTech

  6. #21

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    I totally agree, however it's SLT decision not mine - personally I'd get the infrastructure sorted first - but no one is listening. SLT are very apple centric, and very quick to jump in regardless of infrastructure, I've just read the half term letter about byod and it only mentions apple, we recently advertised a job for an Ipad technician...
    Don't get me wrong I'm not against this idea at all just under pressure to deliver what I can't do with no budget!
    Projectors aren't totally important to this, even though they do need replacing badly, apps like Socrates are generating a lot of interest here.

    Anyway that's veered ever so slightly off topic ;p

    So basically without chew it can't really be done - I'll recommend against any domain joining (which is what I told them in the first place!)

  7. #22

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    Thrashed out a possible working idea,
    Move all teaching machines to the guest vlan, it's a tonne of work and a there's few kinks to work out but might just be a possibility.

  8. #23
    Tsonga's Avatar
    Join Date
    Oct 2012
    Location
    Dorset
    Posts
    155
    Thank Post
    9
    Thanked 19 Times in 16 Posts
    Rep Power
    7
    You need to have a good sit down with the SLT. If you start messing about too much you might start to compromise sensitive data just to get an iPad working.

    Should direct them this way, see what all of us have said about what you're trying to do

  9. #24

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    Indeed but I don't get much choice in the matter, i'm employed to come up with solutions cheaper the better!, but plan is to move all teacher / classroom pc's off the main domain (the MIS is cloud based anyway).
    Plan :-
    Have domain only for resources and support / admin.
    mail / teacher resources / home drives will eventually be all on gapps soon hopefully.
    So classroom pc's will have no logon to domain options - just a standalone pc that can connect to the internet.
    I've got a lot of work ahead of me it seems ! But this seems the only way, especially seeing SLT want rid of desktops from the classroom eventually.
    Maybe this is the future?

    Just weighing up pros and cons now.

  10. #25
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,464
    Thank Post
    10
    Thanked 496 Times in 436 Posts
    Rep Power
    113
    Remember to keep an eye on licensing with BYOD. such things aren't covered by the standard EES (but there *is* a student option). Not that this should be a problem with all Apple stuff! As long as you aren't using dhcp, dns or AD credentials, windows file servers etc.

  11. #26
    SwedishChef's Avatar
    Join Date
    Apr 2006
    Location
    Plymouth
    Posts
    115
    Thank Post
    15
    Thanked 11 Times in 8 Posts
    Rep Power
    19
    Just to add my two pennies.

    We had something simular, in order to get one vlan to recognise the airplay/airserver to the other vlan we used an UBUNTU gateway, which can act as a bonjour gateway.

    http://www.cisco.com/en/US/products/...ml#deploysteps

    Would that help you ?

  12. Thanks to SwedishChef from:

    caffrey (27th February 2013)

  13. #27

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    Hrrm thanks for that, that may just work, just got to dig out some old hardware now to test with (and some time)
    wonder if a raspberry pi would work.
    Last edited by caffrey; 27th February 2013 at 04:04 PM.

  14. #28

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    Got the bonjour gateway set up, I can see the device across networks, however the mirroring isn't working

  15. #29
    SwedishChef's Avatar
    Join Date
    Apr 2006
    Location
    Plymouth
    Posts
    115
    Thank Post
    15
    Thanked 11 Times in 8 Posts
    Rep Power
    19
    Quote Originally Posted by caffrey View Post
    Got the bonjour gateway set up, I can see the device across networks, however the mirroring isn't working
    Is there anything to route between the networks that may block the connection?

  16. #30

    Join Date
    May 2010
    Posts
    1,053
    Thank Post
    106
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    I'm starting to suspect that's what it is, just not sure where to start looking, it's either one of the two smoothwalls I have or something on the ubuntu install, not even sure what logs to look at!

SHARE:
+ Post New Thread
Page 2 of 4 FirstFirst 1234 LastLast

Similar Threads

  1. 2 wireless networks and wired network
    By in forum Network and Classroom Management
    Replies: 9
    Last Post: 23rd November 2007, 01:12 PM
  2. SIMS and admin network support - Buckinghamshire
    By SpecialAgent in forum Educational IT Jobs
    Replies: 0
    Last Post: 13th July 2007, 10:12 AM
  3. Replies: 1
    Last Post: 30th April 2007, 06:10 PM
  4. *CRYING* Help with a BroadBand Router and our Network
    By ninjabeaver in forum Wireless Networks
    Replies: 25
    Last Post: 2nd December 2005, 10:50 AM
  5. Admin and Curriculum networks seperate?
    By woody in forum Wireless Networks
    Replies: 49
    Last Post: 2nd December 2005, 10:43 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •