OllieC

Hi Geoff, Thanks for getting back to me... Have installed squid and configured IP tables appropriately but seeing nothing different on the client end and nothing being written to squid log... not sure what I'm missing, pretty new to Squid. Here's my squid conf... eth0 is attached to the server vlan with internet access... the IP of this interface is 10.134.33.101 eth1 is attached to the 22 inline VLAN for devices to connect to. IP range of this interface is 172.16.0.0/22 Outgoing proxy is eduproxy.bgfl.org:80 http_port 3128 transparent hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? cache deny QUERY cache_peer eduproxy.bgfl.org parent 80 0 no-query no-digest acl apache rep_header Server ^Apache access_log /var/log/squid/access.log squid hosts_file /etc/hosts refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 # https, snews acl SSL_ports port 873 # rsync acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 631 # cups acl Safe_ports port 873 # rsync acl Safe_ports port 901 # SWAT acl purge method PURGE acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost acl lan src 10.134.33.101 172.16.0.0/22 http_access allow localhost http_access allow lan http_access deny all http_reply_access allow all icp_access allow all visible_hostname ats-pf-squid never_direct allow all coredump_dir /var/spool/squid IP tables... iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 3128 iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 Anything obvious that I've missed or done wrong? :/ Thanks, Ollie

Thanks for your help so far, Geoff! We've decided to go inline mode for our bring-your-own-device and guest wifi access. We've got packetfence happily handing out IPs to nodes which are able to see the captive portal and then log in with their AD credentials. Our next hurdle is internet access. The packetfence server has a management interface on our server vlan that internet is accessible on, however as our inline interface for connected nodes is a 172.16 range which is outside of the BGFL network so it is not possible to carry eduproxy to it. From my understanding, what is needed here is a form of transparent proxy. Can Squid route between the two networks aaaaand deal with the proxy address that is required for internet access? (eduproxy.bgfl.org) meaning that connected nodes do not need to configure any proxy settings. Does anybody have any experience with this, particularly working with NAC. Thanks

Thanks so far, Geoff.. just being able to confirm these basic points has been a huge help. Apologies for the late reply - have been on holiday. Here's what I've pieced together so far. Registration VLAN Isolation VLAN Authenticated VLAN Authenticated VLAN has an IP range on our DHCP. I'm a little hazy about the MAC detention VLAN that some people have mentioned.. is this something that we need and how does it tie in configuration-wise?.. Also, is it something that needs adding to the interfaces page in the packetfence configuration... as with the three aforementioned.. should all of those be present in the interface configuration? - I ask because packetfence gives you the option for management, isolation, registration or "other" when adding a VLAN to an interface so not sure where our authenticated or this mysterious MAC detection would go? The Extricom wireless Controllers have an SNMP connection to packetfence. I've created a "secure" ESSID on the Extricom wireless controllers that uses WPA/2 Enterprise, AES only with packetfence configured as the Radius authentication server. In accordance with a guide found online I've also created a "public" ESSID that uses MAC Authentication, using the packetfence server for the radius authentication. The secure ESSID is hidden. I'm not entirely sure what the purpose of having two set up is, does packetfence mediate between the two or do they both essentially do the same, one connection just being encrypted? I also have left the VLAN assignment on the ESSIDs blank, assuming that packetfence deals with this entirely with SNMP.. is this correct or do they need attaching to a specific VLAN? Following previous searches on the internet we've added our packetfence server as an IP helper on the core switches for the above mentioned VLANs. Is there any SNMP communication required for these switches as we're only planning on controlling the wireless access.../is the IP helper configuration required in this setup? Thanks again, Ollie

Hi all... We're playing with PacketFence at the moment for BYOD, as we've found that it's compatible with our Extricom wireless controllers and HP switches it seem like the ideal solution - it looks ace when running but we're struggling to get through the configuration. The documentation is a bit painful - it covers configuration options but gives very little actual guidance. Has anyone here had any experience with it? Any advice, tips? Is there anyone around the west mids who's already using it - would be fantastic to get a nosey of an operational system. Thanks

Hmm interesting angle. We've got it set up now so that students connect to an open BYOD SSID, they then open a URL which allows them to login to a terminal server. We use Ericom remote terminal server stuff so it can deliver it as HTML 5 so it works on tablets supposedly. Just tackling auto redirection of pages so they don't have to type in our specific URL... Next step, to radius for the staff ssid and do away with preshared keys!

Hiya all, Long time, no post... back working in a school in brum. We've recently upgraded our wireless system and we're looking to introduce BYOD support for staff and students. We're currently a little unclear about the birmingham grid for learning's stance on BYOD. Is there anybody who is currently part of BGFL who is already providing BYOD? How do you do it? What obstacles have you faced regarding the grid? From our current understanding, to stick to BGFL's terms of use we would only be able to provide students access to our terminal server gateway on their own devices - accessing the internet through a TS session on our system rather than any direct access to the internet. Ideally we'd want to give them access to the internet - which we can have them authenticate for against our Lightspeed box to provide filtering and logging against their name. Would love to hear from anyone who's already doing BYOD within the grid so we can finally work out which direction to take this in. Is there any official policy or reasoning with the grid that would prevent us from providing the access that we'd like to? Thanks

I've got one promthean serial cable/power job... can drop to you if I'm up in Rochdale anytime soon.

Hey all, having a clearout and noticed a brand new (seems so anyway, still has plastic film over front) 17" RM One TFT. (in display housing). £20 or best offer but needs to be taken off us ASAP. The school's in Sutton Coldfield, Birmingham. (:

As far as I remember, I just resized the region on the layout so it chopped off the controlls.

Casio did a demo for us. Wasn't blown away by the brightness/image quality but the life of the light source and the fact that it doesn't degrade like a traditional projector lamp seemed to outweigh that considerably. Personally, I hate DLP projectors but I'd have no problem if I started seeing them in our school.

Handbrake for PC or Mac, MP4 should do. I would've thought that a Mac would play an mpg anyway... try just giving them VLC?

I was met with strong resistance from SMT about it being played in the canteen - Creates the wrong atmosphere for the time of day apparently, plus, they don't want people loitering once they've eaten. :@ Likewise, there's always been resistence to playing in the atrium area as well but there's less of a valid reason against that, that they can produce, lol.

Sorry if I'm repeating anything else that's been mentioned. I'll just go throuh what we've got in our radio studio and stuff that it's been used for in the past... Fairly out of date website can be found here ATR Our setup includes a baaasic Sempron machine running Sam Party DJ with a a fairly decent sound card acquired from music and a dual monitor config. There's an ancient P4 RM machine hidden behind the desk running win2k with Real Encoder (external streaming through the LEA Helix server) and Windows Media Encoder. Those two machines are hooked up to a KVM. We've got a 1tb network drive and another 1tb USB drive connected to the network drive.... the network drive is meant to backup to the USB drive (doesn't atm ) which also provides us with a more portable copy of the music if doing stuff at sports day or suchlike. There's a Mac Mini as well for general use or admin. We've got a Yamaha O1V96 mixer, dual CD player, 3 Rode NT1 mics (2 used). JBL control 1 studio monitors and Behringer headphone amp/splitter and audio splitter - the audio splitter sends the main mix to the streaming machine and back to the playout machine's onboard input for recording (Audacity or Cool Edit/Adobe Audition). I forget what the amp we use is but it's reasonably decent, acquired from performing arts. Also recently had speakers installed in the large open atrium that lead directly back to the studio. We have a keyword text number (ATR + message to 60300) from http://www.itagg.com/ which I believe is £50 a year but also offers things like polls and suchlike, quite nice. For future use we also have a 6m FM antenna directly above the studio with cable leading back to the studio - when it's used, transmission gear will be hired due to 2 week a year RSL restrictions, cost of equipment and technical expertise that comes with equipment when hiring. The school has run 3 RSL broadcasts before using this setup. Obviously this is quite an expensive set up, most stuff being bought over the years as funding has been made available. It can be done just as effectively for a lot less. I like Sam Party DJ (we've never found a need for Broadcaster) and the streaming provided by our LEA seems pretty good. I'd recommend having some kind of mixer in there, even if it's just a cheap 4 channel Behringer job as it's considerably easier for students to have a physical means of controlling levels imo. Definitely two computers as well although they don't need to be anything that fancy imo. We can broadcast on the school tannoy system when required, for parents evening and suchlike. Just got a spare thin client in the cab with all the tannoy gear in. Streaming doesn't get any simpler than Windows Media Encoder imo. Errr, also use a few Marantz solid state recorders that have a Sennheiser mic in each case. PRS and PPL licenses as well. We've previously taken basic kit (portable PA, laptop, small mixer, music drive and a radio mic from performing arts) to events outside the school- primaries we work with, sports day and also set up equipment on our field for things like sport relief mile. We once employed someone to work with the primary schools and the radio station, some really good stuff was produced which also generated positive interest from local press. Also in the past, trips have been run for students involved to BRMB and BBC Birmingham. BBC School Report is a good project to get a school radio station embedded in the curriculum. You even get a BBC mentor who visits and helps out. I ran this project with an English teacher in my school for the first time this year and it was reasonably successful. Things like revision podcasts by teachers are a really nice way of using it as an educational platform... podcasts using the equipment also form good lesson tasks. pixx xD http://i48.tinypic.com/330tx82.jpg http://i50.tinypic.com/2wfihpx.jpg Sorry for launching into all that waffle, another local school has a similar kind of setup as well. (:

I'm allowed to take a few mins to browse the internet. ;P

I've had a quick scour round the forums... Some useful looking posts.... http://www.edugeek.net/forums/windows/41798-proxy-pac-file.html#post386743 http://www.edugeek.net/forums/scripts/43079-pac-file-problem.html#post398051 I'm sure someone else will know exactly what to do but I guess there's something for you to play around with there.

They used to do tours of Aldwych/Strand... pretty gutted they don't anymore, would also love to have a look round a closed station.

Fantastic! Must be rather awesome to stumble upon something like that.

Just spent some time flicking through it... xD

I decided to give it up this month... was drinking far too much of the stuff.

This is the first one to really irritate me. The iMac G4 was a challenge... well, reattaching the screen is but I think even that was easier than this powerbook has been.

We're planning on using iPlayer, tvguide.co.uk and we've got a machine with a tuner and windows media encoder. Overprepared much? xD Any matches on during lesson times in the afternoon have the goahead to be put on for classes at the teacher's choice.

At least you can use screwdrivers for the rest of them. I've got one of my school's 12" Powerbooks on my bedroom floor at the moment... it needed a new backlight inverter. I had to remove EVERY component from it just to take the screen off. It's horrible to put back together, there's little channels in the framework for wires and it's just a horrible mess. xD (http://i50.tinypic.com/291j4fb.jpg *stab stab stab*) Anywho, I'll stop hijacking this thread now. I agree a mac mini would be a sensible route to take, one of our DT teachers got a second hand intel one off ebay to use for xcode and it didn't cost him too much.

No experience of smart in linux but here's something to try... in the terminal run "xev". Then press the buttons on the smartboard, if they register as events in linux then they should show some information in the terminal. With that information you can assign those buttons to actually do something. I'm afraid I don't know know how to do this but there's plenty of stuff out there that should help: How to get special keys to work - ThinkWiki

Moving buildings is fun We have plastic crates so no such fun for us. xD The gems you find clearing out rooms though! I found an activboard behind a load of old display boards in an office. Must've been there for years. That's now in a classroom being used. ^_^

They're just a b**ch to open up... had to get DT teacher to make me a tool to open up school's. xD