School network - Implementing VLANS

[TraineeGeek]

Hello Everyone,

I’d like to get staff & pupils on different IP ranges because using devolved web filtering I can set different levels of filtering for different IP ranges.

 

We already have 3 VLANs setup on our CISCO POP3 (Catalyst 3550) switch, done by the LA. Our admin machines (3) use the admin VLAN (10.121.77.0/24) and their workstations have a static IP config. Both staff and pupils are on 10.74.68.0 -10.74.69.255), I’d like to have our pupils on the 10.74.68.0/23 range and the teaching staff on the 10.74.30.0/24 range but I’m unsure of the following:-

 

 

1) Create VLANS

2) Do we have the correct hardware

3) How to issue DHCP to each VLAN (I Am able to give each WLAN a VLAN number though)?

4) If the teaching staff are on 10.74.30.0/24 how will they be routed through to 10.74.68.0/23?

5) Our AppleTV devices will probably be on 10.74.30.0/24 how will pupil ipads connect to them via AirPlay?

 

A basic diagram.

[ChrisH]

What do you use for logons ? Are they all local accounts ? In your situation I would say it would be simpler to use group membership for the filtering. If you want to make it network based you are going to need a router or layer 3 switch to do the routing which I think might be overcomplicated for your setup.

[TraineeGeek]

Yes local accounts, we don't have a domain controller.

[ChrisH]

How about making 2 simple usernames on the filter for staff and pupils and enforcing log on or make the standard filtering at the pupils level and make staff log on for more access ?

[TraineeGeek]

That may be the answer Chris, it's a Lightspeed web-filter and I think i've seen that option. Thanks

[ChrisH]

We have the same and I was using that method temporarily but linked to AD but the principle was the same, if you get stuck I can point you in the right direction.