Sheridan Posted October 11, 2012 Posted October 11, 2012 We're still very much in the 'use our own equipment' stage - with the view that out of school access should be via the VLE or other remote access system In school - its a case of use what we provide and we aim to provide enough to make it a workable solution. BYOD is something that will inevitably encroach here but until you're fully VLE based or have the VDI infrastructure in place its a big step to take, unless you just want them to have internet access. Plus I feel BYOD disadvantages students. i.e 30 students using 30 Windows PCs that we provide is a level playing field and can be supported by the teacher. 30 different devices from iphones,ipads and laptops means everyone is working differently. And is the student who can only afford the £50 second hand laptop in a fair environment compared to the student with the latest macbook? I'm not against BYOD but I still see a lot in favour of fixed school equipment.
CyberNerd Posted October 11, 2012 Posted October 11, 2012 Plus I feel BYOD disadvantages students. i.e 30 students using 30 Windows PCs that we provide is a level playing field and can be supported by the teacher. 30 different devices from iphones,ipads and laptops means everyone is working differently. And is the student who can only afford the £50 second hand laptop in a fair environment compared to the student with the latest macbook? I'm not against BYOD but I still see a lot in favour of fixed school equipment. I disagree that BYOD disadvantages students - thats not how things have worked out here and It's still a level playing field. The minimum system requirement we have is to support a) WiFi and b) a modern internet browser. *Everything* is done on-line. We provide laptops for students who have forgotten theirs and a bursary scheme for free nebooks for those that qualify ICT-centric stuff is still done in traditional IT Suites, but instead of those being used by (eg) English classes for writing up essays they are actually being used for IT. Writing up essays is done online.
Sheridan Posted October 11, 2012 Posted October 11, 2012 Thats my point - you have to have moved the majority to a VLE for this to work properly. We're not there yet! If we have most of the curriculum based on our VLE then BYOD would certainly work a lot better (with my original misgivings)
SYNACK Posted October 11, 2012 Posted October 11, 2012 (edited) a) WiFi and b) a modern internet browser. *Everything* is done on-line. What do you classify as modern?? Where is the line. Just wondering if I could smuggle this in http://members.optusnet.com.au/spacetaxi64/WIFI-LAN-C64/WiFi-C64.htm Edited October 11, 2012 by SYNACK
Sheridan Posted October 11, 2012 Posted October 11, 2012 Would you use NAC to stop 'outdated' devices connecting, or is that feasible with the range of devices that may be brought in?
glennda Posted October 11, 2012 Posted October 11, 2012 What do you classify as modern?? Where is the line. Personally I would class it as one that fully supports HTML5
SYNACK Posted October 11, 2012 Posted October 11, 2012 (edited) Personally I would class it as one that fully supports HTML5 Nothing fully supports HTML5 it is still being squabbled over by those large litigious children that pose as IT companies, when it's done it will be because they have moved on to 6. I still wonder if I could get HTML5 up and running on one of these WiFi LAN on Commodore 64 - using FBNET Cartridge and Warpcopy Edited October 11, 2012 by SYNACK
CyberNerd Posted October 11, 2012 Posted October 11, 2012 What do you classify as modern?? Where is the line. this is about the bottom line: Intel Pentium 3 / Athlon 64 or later Free disk space 100 MB RAM 128 MB Chrome system requirements - Google Chrome Help A few bring in £150 tablets which work fine.
10101010 Posted November 5, 2012 Posted November 5, 2012 Thanks for both your answers, seems our aruba system doesn't have that functionality. We have the captive portal but there isnt any option to connect it to AD Which Aruba do you have, I have a 3600 controller and we use the captive portal to authenticate using ad credentials
CyberNerd Posted November 6, 2012 Posted November 6, 2012 What do you classify as modern?? Where is the line. New record. A yr10 girl just brought in a 7" Polaroid android tablet. It cost £80 Connected instantly to wi-fi and immediately synchronised all of her schoolwork (google docs), her email and her calendar.
SYNACK Posted November 6, 2012 Posted November 6, 2012 New record. A yr10 girl just brought in a 7" Polaroid android tablet. It cost £80 Connected instantly to wi-fi and immediately synchronised all of her schoolwork (google docs), her email and her calendar. You could get the power adapter for it here for that, I know it probably charges off any usb port, I'm taking that into account.
SYNACK Posted November 6, 2012 Posted November 6, 2012 Oh and before I forget, I must spend wayyyyy to much time on here Post count:
10101010 Posted November 6, 2012 Posted November 6, 2012 @Roberto and @CyberNerd I am asking these questions to try to pin point some stuff to take into a discussion on another forum (ok ... LinkedIn) looking at the legal aspect of BYOD. The discussion is a tad lengthy at the moment around Risk Assessment and Competent Person ... so I am trying to gather a few more examples of why and how schools have made certain decisions and who in those schools have made them. Some responses when the Qs have been asked elsewhere have indeed been all about the shiny and hype, and it is good to see the quick response from @CyberNerd. Is that forum open to anyone Grumbledook?
zag Posted November 6, 2012 Author Posted November 6, 2012 Which Aruba do you have, I have a 3600 controller and we use the captive portal to authenticate using ad credentials Yes we have the 3600. How did you set this up?
10101010 Posted November 6, 2012 Posted November 6, 2012 what OS version you on - can't remember when, but I needed to upgrade OS to get this to work. I'm currently on 6.1.3.4. I created an LDAP server on the Aruba config (see below) On the LDAP server (2008R2) under Network Policy Server I created a policy to allow a specific AD Group combined with a NAS port type (Wirless IEEE 802) to allow only permitted users to logon.
zag Posted November 6, 2012 Author Posted November 6, 2012 We actually have a 3400 controller here after I checked. Also on firmware 5.0.4.7 due to us using old 61 AP's Thanks though, good to know it is possible in the future.
Dragon Posted November 6, 2012 Posted November 6, 2012 I would be interested what people are using for network access control and making sure devices are complying with AV and update policies.
10101010 Posted November 6, 2012 Posted November 6, 2012 (edited) At the time I couldn't afford one - looked seriously at Network Sentry 500VM Network Control and Application Server, but best part of 20k + ongoing so opted not to bother at the moment. Completely vlan'd off, devices unable to communicate with other devices, Ericom web connect solution used to allow any device to connect to a rdp session via a browser using html 5, so not overly concerned about updates and av at the moment. forgot to say just about to trial aruba clearpass - will update post after trial. NAC - the other way might just be to upgrade dhcp server to 2012 which allows you to filter ip's based on MAC for a specific vlan. Edited November 6, 2012 by 10101010
GrumbleDook Posted November 6, 2012 Posted November 6, 2012 Is that forum open to anyone Grumbledook? The group owner has set it as a closed group on LinkedIn but any member of the group can invite you in. If you are on LinkedIn then drop me line and I'll invite you in (as can a number of others).
zag Posted November 20, 2012 Author Posted November 20, 2012 (edited) Just to update this I think we are finally getting to a good solution. I tried implementing a transparent proxy but it slowed things down too much for normal users as they were filtered twice. So what we have done is order a new Talk Talk line with IP based filtering, they call it "homesafe". I now have the aruba guest wireless using that as a gateway to a seperate talk talk internet line. It works quite well and seperates the guest users from the main network over a VLAN. Basically I have built an entire 2nd network for this but hopefully it works in the real world. Time to find out.... Edited November 20, 2012 by zag
CyberNerd Posted November 20, 2012 Posted November 20, 2012 Just to update this I think we are finally getting to a good solution. I tried implementing a transparent proxy but it slowed things down too much for normal users as they were filtered twice. So what we have done is order a new Talk Talk line with IP based filtering, they call it "homesafe". I now have the aruba guest wireless using that as a gateway to a seperate talk talk internet line. It works quite well and seperates the guest users from the main network quite well over a VLAN. Basically I have built an entire 2nd network for this but hopefully it works in the real world. Time to find out.... A good solution. With redundant leased lines you've got no excuse not to put it all in the cloud now
zag Posted November 22, 2012 Author Posted November 22, 2012 (edited) Project is complete!! Guest network SSID [complete] Captive Portal [complete] Acceptable usage policies [complete] Portal branding [still to do] New internet line installed and activated [complete] Route VLAN to the new gateway and internet line [complete] Set IP based filtering (thankyou talk talk for being innovative in this area) [complete] So when I try to access a naughty site we now get this And can manage it all on-line without any extra hardware like this: So basically we are nearly there. The only question is do we create the users manually or link them to the active directory. Edited November 22, 2012 by zag
IrritableTech Posted November 22, 2012 Posted November 22, 2012 Thanks for the update @zag. How does talk talk system deal with monitoring? If a pupil hits a block, is it recorded, flagged?
zag Posted November 22, 2012 Author Posted November 22, 2012 (edited) Thanks for the update @zag. How does talk talk system deal with monitoring? If a pupil hits a block, is it recorded, flagged? No monitoring at all unfortunately. That would be an awesome feature though. I guess it will come in time. This is still all very innovative to be doing it on the IP level. But as its a "guest network" is totally out of my hands what they look at. I explained this to SMT as the biggest downside but they insisted it was still a good idea. Edited November 22, 2012 by zag
RabbieBurns Posted November 22, 2012 Posted November 22, 2012 I've noticed in Australia and New Zealand this is quite common, any ideas what it hasn't become popular over here? An article in todays paper: Schools dilemma on BYO technology I wonder how to get hold of the original Dell report?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now