well played SWGFL

[mrbios]

Well this is interesting, we're sat in our office at work having just installed procurve manager....... left it on for a while to pick everything up and whats that i see?

other schools procurve switchs have all poped up on our procurve manager, fully configurable from here, all the schools within stroud and even some as far as gloucestershire have poped up!!

any one from these schools? :twisted: :

stroud high
thomas keeble
cotswolds (who ever you are)
marling school

to name a few time to get on to swgfl and get them to sort that out i think

[Oops_my_bad]

We had the same thing here - except our LEA's network is so flat you could see straight into the corporate bit too. You could cause all kinds of havoc if you wanted to :twisted:

[mrbios]

network wars between schools, funny thing is this schools always been at rivalry with marling school in sports etc

maybe keep it quiet till the day students come back then attack :P if only i was that mean *daydreams about the possibilities*

[Geoff]

This seems to be a typical setup for LEAs/RBCs. It's certainly what we have here too in Lancs. You should think about putting a firewall in between you and the rest of the WAN to stop anyone from other schools probing your network and connected host devices.

[mrforgetful]

You should have your own Firewall anyway.

When this LEA set it up they said it wasn't needed but the company that did our network wisely said they were wrong and installed us a PIX and ISA.
Think about it, who really wants to hack a school network from the outside world?
Kids from rival schools pose the most threat, so having no protectio from other schools is just...silly.

[bishopsgarthstockton]

we got an ISA server installed 2 year ago. my NM taken it out this holiday, says we dont need it. not good

[uk101man]

I can recall a day when I was poking around a schools website via ftp and could access any other schools website in the local area

[K.C.Leblanc]

Hiya, I'm at Stroud High.

[j17sparky]

we got an ISA server installed 2 year ago. my NM taken it out this holiday, says we dont need it. not good

You'll have a Cisco router with ACLs so no need for ISA

[Joedetic]

Whilst a cisco router with ACLs will protect about certain things you cant do URL blacklisting on it so there's an advantage to your own ISA / FOSS solution outright.

Also editing NAS and ACLs on a cisco router isnt for everyone. They can become a bit of a headache. I have to write everything out on paper with diagrams to make double sure i've done it right

[j17sparky]

We (stockton) have cachepilots which do URL filtering.

All ACLs are managed by the RBC.

[bishopsgarthstockton]

We (stockton) have cachepilots which do URL filtering.

All ACLs are managed by the RBC.

is that you craig?

[j17sparky]

Na James

That you kev, or is it john? I always get your schools mixed up.

[bishopsgarthstockton]

I meant to say James lol

hows the ccna coming along?

[Oops_my_bad]

I would love to stick a firewall/box of some sort between us and the LEA - only issue we have here is VLANS. We use 2 VLANS (1 for CCTV to the town hall and one for the rest of the stuff like t'internet). The LEA's switch is configured in a standard way across all schools so that one port has a CCTV uplink from your network and the other port has another uplink from your network for everything else. This then all goes to the LEA via the 10 meg (supposedly) fibre. Is there a solution I could use that would work with VLANS (like a VLAN router maybe?) that could handle this?