Network patching problem!

[markman]

Either me or the technician here have patched our curriculum network into the curriculum. We run 2 IP ranges to keep them seperate, we use static addressing for curriculum but we have DHCP enabled on the admin network.

 

Now the little toads have got their Ipods running wirelessly through our curriculum network out unfiltered onto the Net!!

 

Does anyone know of a way to figure this one out??

 

I don't believe we have done this!

[rasssp]

make your wireless secure? mac filtering and wpa key?

[powdarrmonkey]

Either me or the technician here have patched our curriculum network into the curriculum.

 

..should there be another word in there?

 

Now the little toads have got their Ipods running wirelessly through our curriculum network out unfiltered onto the Net!!

:

 

Block all outgoing connections at your router unless their source is your filter.

[benIT]

If the network IPs are on same network cabling / Switches (no VLANs setup), they will still be able to talk to each other. A router between the two networks may help here, but this may not be an option given site layout / cables.

 

If its just problem with wireless, I would secure the wireless! However this may not help if they plug into a network socket somewhere. Therefore I would make the internet access secure - perhaps linked into active directory for authentication - Look at MS ISA for example or in the forum on here for firewalls.

 

hope this helps

[Jamman960]

If they are both using the same switches and the only seperation is via IP addressing then it sounds as though their devices are simply picking up IP's from DHCP. Initially I'd secure the wireless to stop the kids getting in that way.

 

To be honest it sounds as though you've done it the wrong way round, if your going to rely on IP addressing to seperate the two networks you really need to have the curriculum network setup to use DHCP and the admin to use static otherwise anyone bringing a laptop in and plugging it into one of your ports is going to be put on the admin network by default until you set them up with a static ip for the curric network.

[markman]

Cheers, lots to think about here. There shouldn't actually be any physical link between the networks, well there wasn't until recently! The curriculum network uses AD authentication through Censornet but we never bothered with the admin side.