Smartcache and vlans

[the_quick]

HI Guys

 

Just finished with reconfiguring network to use vlans (before just one), now I have multiple vlans for pupils PCs. The problem is that smartcache only works for the computers that are on the same vlan as smartcache box.

 

I have change config file, but still no luck, can some one suggest anything? Below my config:

 

	192.168.1.106
	255.255.252.0


     255.255.252.0
     192.168.8.0
     192.168.11.254
   

     255.255.252.0
     192.168.4.0
     192.168.7.254
   

     255.255.252.0
     192.168.12.0
     192.168.15.254
   

     255.255.252.0
     192.168.16.0
     192.168.19.254
   

     255.255.252.0
     192.168.20.0
     192.168.23.254
   

     255.255.252.0
     192.168.24.0
     192.168.27.254
   

     255.255.252.0
     192.168.28.0
     192.168.31.254
   
192.168.3.254
dns1
dns2
my_proxy.com
0

	0
	
	
	

SchoolName
11111
NTP Server
post.smartcache.va.ifl.net

0

[ITGuyWestMidlands]

hi. Smartcache is now end of life and its block lists are no longer maintained. Id get rid now. You should also be looking at something to allow https inspection!

[GeekyPete]

From an old RM Tech Doc:

 

This is what you need to add another subnet:

 

255.255.255.0

62.171.75.66

192.168.0.3

 

routing_ip is not mandatory but should be specified if an additional range is routed through a particular device in either the Primary or Secondary range.

the routing_ip_port will be automatically set to "1" if the IP specified belongs to the range calculated from the Secondary NIC's IP and Subnet Mask.

the routing_ip_port will be automatically set to "0" if the IP specified belongs to the range calculated from the Primary NIC's IP and the Default Gateway.

 

This is working with this config file:

192.168.0.2

255.255.255.0

10.0.0.2

255.255.255.0

255.255.255.0

62.171.75.66

192.168.0.3

255.255.255.0

67.212.33.1

10.0.0.3

192.168.0.1

194.238.48.2

194.238.48.3

isdncache.rmplc.co.uk

0

0

myschool

123456

ntp.smartcache.va.ifl.net

post.smartcache.va.ifl.net

0

 

At a glance it would appear that you need to set the 192.168.1.107 to the port the traffic is going out or atleast in the same subnet as the port. You've set it to the DFG in each subnet. In the example I have it's set to one IP address above the port IP so if I were you I'd that first. 192.168.1.107

 

Also, really must agree with ITGuyWM Smartcache is end of life. It's not fit for purpose anymore. It not a supportable solution you need to upgrade.

[the_quick]

Thanks to you both for your input. All ip routing addresses are gateways for each ip range, I though that what it needs. and even with your example Pete, as it is in same subnet it should work.

 

We don't really use smartcache for any sort of filtering, we just use it to record pupils activity, what website they have visited, for that is works fine. For all blocking we still use SafetyNet - so far it worked well for us. Huge resistance here to get any more advance solution (ie smoothwall or lightspeed or similar) mainly because of costs involved.

 

One more thing that bugs me, I can't ping smartcache from any other subnet than it's own. I guess possibility is, it can't reach gateway for some reason

I might give RM a ring

Edited August 5, 2015 by the_quick

[GeekyPete]

I think you misunderstand, or I do... It's not in the same subnet. Have you tried changing 192.168.7.254 for 192.168.1.107 and the same again for each subnet. E.g. 192.168.15.254, 192.168.19.254, 192.168.23.254. Changing each of then for 192.168.1.107. This is the Ethernet port for the device NOT the DFG for the subnet.

 

The config file defines Port 0 at the top. Each Subnet needs access to an IP in the same subnet as Port 0 to route. It looks like you can use the same IP address for each subnet. So you use 192.168.1.107 in every subnet.

 

Can you ping other devices across the subnets?

[the_quick]

Thanks Pete, I will try that. Does this new routing IP have to be assigned to some device or should be free? I'm not sure I understand how smartcache is going to use this IP.

 

Kris

[GeekyPete]

I would say it need to be free.

[GeekyPete]

I would say it need to be free. Smartcache will be using it.

[the_quick]

Unfortunately it did not work. RM changes safety net and it will offer used based filtering, so it will cover what we do with smartcache. So for now I'm leaving it. Thanks for your help again. Kris

[GeekyPete]

No Problem, It was worth a shot I guess. It's been unsupported for a while now.

[PotNoodleTech]

It doesn't surprise me - I think I am right in saying the Smartcache was born before VLANS existed.