CLEO Schools IP setup

[ChrisH]

With all the lightspeed changes coming up and there still being this model of Curriculum and Admin ranges I thought I would put a poll up to see what people are using as the assumption seems to be that we're all using the old model split networks.

[ellsandell]

We use a local firewall with local ranges split into two networks (Curric & Admin).

 

Edit: Secondary in Cumbria btw.

Edited February 26, 2014 by ellsandell

[ChrisH]

We should probably state primary or secondary as well.

 

We have a local firewall with local ranges and we use one CLEO range as our external range and we are secondary.

[Arcath]

All primaries here and we use the splits admin/curriculum ranges with the file/dcs on both networks (through VLANS) and then the SIMS server only on the admin.

[dezt]

We are a secondary, using one CLEO range here, but as we have come away from CLEO for broadband, I think I'll be changing our setup soon, creating local ranges with our on site firewall.

[browolf]

Split and proxied. But we're looking to dispose of our local ranges and proxies before September

[Cache]

Secondary school, single network on the curriculum range here.

[jhothersall]

I have all clients and servers on Curric and my terminal server on admin with unfiltered internet.

[Smed]

Primary, single network on curric ip range, but running out of ips! project for the future is to start to use the admin ip range for staff, but not sure where to start!

[Arcath]

Primary, single network on curric ip range, but running out of ips! project for the future is to start to use the admin ip range for staff, but not sure where to start!

 

You can just request a bigger range from OCL, I went from a /24 to a /22 at one school.

 

If you want to use both admin & curriculum for your domain just put extra network cards (or tag VLANS) into your servers and put them on both IP ranges.

[Smed]

ok thanks, i was hoping i could extend the curric range, but then thought with the new lightspeed filtering now up and running, and the filtering based on the ip used....it would be a good idea for me to move all the staff over to the admin range, then i would also have separate filtering for staff/students in place..

and would probably not need to extent the curric range for now at least....

 

i notice our server already has 2 network cards in (although one is disabled for some reason?) so would i have to run a network cable from the cisco switch to the other network card, then setup a new scope in dhcp in the admin range??

you've completely lost me with the "tag VLAN" bit! Ive never had the need to use vlans so know nothing about them...

also i wouldn't be sure which ports on the cisco switch have been setup for the admin range....

 

a lot to think about!

[buzzard]

If you stick that second card to active and connect it to one of the cisco admin ports, set up a new IP range in dhcp (assuming you want to use dhcp!) and then bind the scopes to the correct card. Theres not much more you'll need to do bar patching some switches into the admin range, if you just want to extend the domain onto what was the admin range, however it might be worth planning it a bit more. As suggested, assigning the new ranges to specific areas or rooms, if you want it on a per user basis for staff like you say, on your wifi I'd have another SSID that jumps onto the admin range to help separate traffic, it's in this more complex setup where the VLAN aspect will kick in, there are good guides on here regarding VLANS. Edited March 11, 2014 by buzzard

[Smed]

thanks buzzard and arcath, plenty for me to think about/get my head round ...

[Kipling]

Single internal range, secondary school.

 

Not happy about oneconnect’s announcement that schools with internal ranges “will limit the functionality and flexibility of the filtering service”

I can’t remember hearing that at the webinar or seeing it in any of their previous documentation. Have I missed something?