Davit2005

Yep with Unifi and some other APs you normally untag (or native) the management then tag (or trunk) the vlans that are being used by the SSIDs. Our APs work a bit different as are the controllers do all the work and the APs once setup are paperweights without the controllers. The APs in our case form a tunnel to the controller but they can be on any vlan. Separating devices into different vlans splits up your network into broadcast domain limiting effect of switching loops although using spanning tree should prevent them.

The Unifi concept is a good one but you have the issue that if the password is compromised you could have students and staff on the same vlan as far as I see into the unifi method unless I am misunderstanding how it works? And as some OS versons make it easy to share the password I would not rely on it personally.

Not really, what I meant was to have the vlan assigned on a user/group basis but the same SSID for example. There might be more efficient ways to do it however these days.

You want to try and limit SSIDs to as little as possible 3 max is ideal. Allocating vlan per role, device, access, etc would be ideal. Rather than having a SSID per vlan. Do you have control over your IP space or is it under LEA/ISP. i.e. are you free to use any internal IP subnet you want. I assume you have no layer 3 switch doing routing and all vlan gateways are on the ISP router/firewall

I have in the past used a Windows 7 PC and given it only read access to a share and no other network/Internet access to get around issues whilst rebuilding the controller, purely so I could get GCODE to the CNC without even using a USB key. Even the relatively new CNC was only USB and I could not get a win10 driver for it. Since ditched USB in favour of ethernet controller so I don't have to USB Plug and Pray :-)

You might be better posting on one of the CNC machine forums. I did find something that looked similar yesterday on a forum but for the life (google failing) of me cannot find it now, lol. For example https://www.mycncuk.com/ It will potentially be a lot of work no matter what, coming from someone that has replaced nearly all the electronics and modified a cheap desktop CNC machine including controller, PSUs, stepper drivers.

OK so you are part there by the sounds of it :-). So if you get on the firewall (and core switch if you have one) and start with a logical diagram i.e. Internet vlan gateway on Core switch has this IP, BYOD/guest vlan gateway on firewall has this IP, etc. Setting up STP will help if the switches support it but make sure you stick with one protocol and should not mix RSTP with MSTP etc. as @mavhc says implementing STP should be low risk. Use of vlans will break up the site into smaller broadcast domains which will lessen the impact of switching loops to the area rather than the whole network.

Is there any documentation at all for the network? If not I'd get on with making some. Even if it jus means drawing something up rough. Do you have access to the firewall and all the switches? You want to get some documentation done incase you have a problem for one. Is the org supported by the in house IT dept. with no 3rd party support setup?

Still running HP 2650 switches in a few places. They are been replaced as part of project, still under warranty but becoming more and more unreliable 90% of problems are power issues, 10% random issues with traffic pass through, MAC address related issues i.e. DHCP.

I'd check with the SIP trunk if they need a static IP. I'd also check with Sky whether this would work, potentially the forums. Been running 3cx at home for 5+ years. Unfortunately free 3cx self hosted it not a thing anymore and the cloud hosted free version is limited i.e. on trunks.

Personally I'd only have vlans on ports that need it, so this set up sounds like they have configured every port the same for ease of admin i.e. could put an AP in any port. Trunk ports should not have any client vlans untagged either in my view. Good practice should be used whether it is seen as necessary or not in my own opinion but maybe that is jus me :-) Below and other YouTube videos might get you started

Personally I'd Either remove the share or make the share RO. That way you can leave NTFS permissions alone till you know that it will not be needed anymore.

This could be a number of issues. But I think you will need some more info from the user. i.e. Do other people have any issue Can they browse the internet when they have the issue, ask user to browse a website they have not been on before to make sure it is not cached etc Are they able to ping their default gateway Can they ping the server Just a note though ping might not be specifically allowed so it might not necessarily work (If I had a pound for every time some dev said a service don't work because they can't ping the server I'd be having smoked salmon every day) I think you should rule out an issue on the client device before anything else personally and that could include network connectivity as overs have mentioned above especially if only one device is having the issue.

Went through 2 pumps on my old XR3i. The fuel filter turned out to be blocked :-( . Car would run for 30mins but gradually would run for less and less then failing to start completely. Also the same issue I had on the Volvo as suspected from what the seller said I was joined to the AA so jus went and picked up the car and course it broke down and AA said the fuel pressure was down :-)

I'm dredding going back to 2nd hand 10+ year old cars after having lease vehicles for last 8. Thought I'd had the last of been underneath a car in the winter/rain and or dark trying my best to keep knuckle skin realising I need the car the next day. Sure research can help a lot, knowing a good reputable garage that won't rip you off, etc. I'm looking at a jap car (Honda, Toyota), the last car I bought was a 12 year old Volvo and that did me proud. Must be the only car that I never lost much money on even though I paid £500 for it as a near non runner.

Similar experience with CC3 to Vanilla. School would not pay for CC so we had no choice. This was back with Windows 7 so a bit of a while ago. We rebuilt a DC without CC components, seem to remember a service account that kept on enforcing CC mgmt tools policies and once we disabled the account we had control. We swapped to MDT, setup scripts to create accounts direct from SIMS, setup printers as scripts, done away with roaming profiles, etc. etc. If you are moving jus list everything that CC does that you will need an alternative for of course if they are saying it will be no more then there will be no choice but to move away.

WiFi and wireless use the same switches? I'd suggest you monitor the links as @TechMonkey mentions and get more precise timings for the issues happen and what they are. Do you have any services on site that are also effected, if possible can you monitor those too. Intermittent issues are by far the most difficult to troubleshoot :-( @pete makes a good point. Is this jus effecting certain software that only those departments use.

You don't really want to be creating extra WiFi networks where it is not necessary or jus adhoc, as this will be taking up air space and could degrade wifi for other users, You ideally want at max 3 SSIDs from an AP. The easy solution is to ask the user to use the USB. If you do have an IoT wifi network, put the device on that and control who has access to it and what the 3d printer can access.

If you are talking about putting a RJ45 on the end of solid cable in a patch panel then using keystone couplers I'd defo be looking at punch down instead. Personally find punching down far easier than crimping plugs, my fingers are not designed for the latter :-) Besides, clips can get damaged on the ends of cables leading to failed connections. And you have an extra point of failure as others have mentioned.

PSTN is going to be switched off in 2025. You might be better putting effort into a VOIP solution. https://business.bt.com/help/article/phone-line-and-services/move-from-traditional-lines-to-the-cloud/the-pstn-and-isdn-switch-off-what-it-means-for-you/ A VOIP system might give you a lot more options on top i.e. Office hours, voicemail, notification to users via email if they have missed a call etc. I use 3cx but there are other solutions.

Another plus for Ventoy. You can jus add different ISOs and you get a choice of which one to boot from. Use it quite a bit and very handy as some Windows ISOs very big these days and PCs don't always have CD-Rom drives

Could be ping is blocked on the smoothwall. For that matter is DNS allowed between the two interfaces on the smoothwall? Confessing not knowing much about the smoothwall but is return (established) traffic allowed by default

I assume you have put a route on the Smoothwall to route traffic destined to the 10.10.x.1 network via the ip address of the layer 3 switch as the DC works when it's gateway is the layer 3 switch. Does sound possibly like some sort of routing issue. The clients on the 10.10.x.1 network are they able to ping the DC when the DC has it's gateway on the Smoothwall. Is the DC able to resolve DNS queries or ping external IP addresses i.e. 8.8.8.8 try using NSLOOKUP on the DC and specify an external server and see if it resolves DNS.

I'm going more local first approach especially when it comes to Home Assistant and automations, a few suppliers have closed off APIs although the community is fighting back on some of them. https://www.reddit.com/r/homeassistant/comments/197xc0m/haier_is_shutting_down_the_hacs_integration_hon/ https://community.home-assistant.io/t/removal-of-myq-integration/637342/62?page=4

Jus wondering if you meant some form of Policy based routing? i.e. traffic from here goes there.