IrritableTech

Our LEA gave it the name 'transport VLAN'. They need to have an IP address to point all the traffic destined for your network. So lets say your supplier said 10.9.8.0/21 (10.9.8.1 - 10.9.15.254) You might use the following 10.9.8.0/24 Workstations A 10.9.9.0/24 Workstations B 10.9.10.0/24 Wifi 10.9.11.0/25 Printers 10.9.11.128/25 Servers 10.9.15.248/29 'Transport / Link Segment / ISP' VLAN Then you can assign your router the address 10.9.15.249 and their router the address 10.9.15.254. You use 10.9.15.254 as your default gateway on your switch, and they fire all the returning traffic at 10.9.15.249 and your router deals with it from there. Hope that is understandable?

Depends if you need things routing or not. The GS724T will not route, it's layer 2 only I believe. If you don't have anything to route the traffic, you'll need two dhcp servers (or one with 2 nics), two routers to access the internet (or one with 2 ports)... but if you want access to internal stuff (wifi portal, vle, email etc.) then you'll need to think again. If you want to upgrade to something like procurve, you'll need fairly deep pockets to get something layer 3 and which can act as a router for you. But then your netgears should be able to handle the traffic on the edges of your network. What wifi kit are you running?

We've basically copied the permissions that SIMSPERM.BAT applies into a GPO. Works a treat. Got caught out a couple of years ago though when the update failed because the exe wanted to update the short cut on the local start menu. Updated to give our staff permission to that short cut and everything has been fine since.

Our network is VLANed so our domain clients get 8 days (standard windows stuff) and our BYOD VLANs get 8 hours. A device should renew its lease on boot, reconnection or (I think) half way through the lease. It's run smoothly here since its implementation.

What type of HBA are you looking at and what are they connecting to? We use Qlogic QLE4062 HBA's for our iSCSI SAN. Haven't missed a beat (yet) in the three and a half years they've been running.

First thing I would say is education - not technology - will have the largest impact here. The old rule of keeping the family computer in the living room is harder to apply these days, but rules of use and clear sanctions will help. This child needs to know why these sites aren't appropriate at his age. I use K9 on my daughters laptop, more for logging than blocking. It works ok, but didn't get great results in a comparison I read recently. OpenDNS is a good option for home, but quite a few ISPs routers are hard coded to use their own DNS. Although you could change the DNS on the individual machines, it wouldn't take long for a determined youngster to get round this. Check your router - it may have in built content filtering. I think the draytek stuff has a subscription service available. If you contact the ISP, they might have some options. But you can't simply fire and forget - any filtering must be monitored.

Why do you want a local provider? If you're looking at FTTC it's a BT product and the ISP isn't going to be able to fix it - they'll just send BT. Early on in the decision making process you need to decide if you want a one stop shop provider who has created a package to cover most (all?) of your needs, or if you want build your own provision. Then you can compare apples with apples. It's often easier (especially in your absence) if there is a single provider to call if something has gone wrong. For the record we are now using Schools Broadband on a 100mbit fibre, using their hosted environment. Our partner primaries will be going live on their FTTC connections in the new year.

Both those sites you've mentioned @edutech4schools use google to provide results. So I doubt they'd work. Sorry it should have occured to me that if google was blocked you wouldn't be able to see the link I posted. Try this...

The official info from google is here... https://support.google.com/websearch/answer/186669?hl=en Our ISP have set the DNS method for nosslsearch (which my dns servers replicate) and our filter deals with the &safe=active bit. If your authority block google, do they also block bing, yahoo, ask, lycos........

Thanks @elsiegee40 There are some great resources for staff and students around phone safety, premium calls and in app purchases on the phone brain website too... Welcome to PhoneBrain

I was quite careful to say it's getting towards the point where everyone can afford a device. Those that want one of cause.

I'm sure we'll slate the build quality, the version of the OS, the expandability, the speed, the battery life, the.... But goodness - it really is getting towards the point where everyone can truly afford a device, and that's surely a good thing?

A number of the schools I work with are looking at new telephone systems. I've contacted numerous companies and the difference in call costs has surprised me. I've now got two quotes at a similarly low level of 1p/min to 01/02/03 numbers, and 3p/min to the big five mobile companies. No connection fee and charged per second. How does that compare to what you're paying?

Cheap and reliable don't necessarily go hand in hand - especially with hosting. I prefer to host myself. Some of the plugins I run will not run on wordpress.com. It is however the easiest, quickest and cheapest way to host a wordpress site. I use Vidahost (Affiliate link: http://my.vidahost.com/aff.php?aff=1687 ), and use their cloud which has been very good for me. They have had a few little issues (mainly with email), but they tend to credit me a months fee's if I complain. Their shared web hosting is pretty cheap, but I've not experience on the shared stuff. CSMedia are quite popular round these parts, but I have never used them.

My two biggest issues (after the issues @AngryTechnician outlines) are insurance and the length of the lease. Insurance needs to cover accidental damage - people will drop the things. It's often the same person who drops theirs over and over too. The lease should not be any longer than the device is likely to last for. Many resellers are leasing iPad 2's on three year leases. I can't see apple supporting them with updates for that long. It's not going to go down well when parents are still paying a lease in two and a half years if the item is broken or not able to run the app the teacher requires for the lesson.

As @Jamman960 says you only need the controller to set up and for a guest portal. I have three unifi's at home now, run the windows software on my laptop if I want to update something - which is rare. @jamin100 - It's worth mentioning that the ruckus kit can only run 8 SSID's per access point, although that is twice as much as the unifi.

Hi @mfactor I've sent you a PM with some files and a rough explanation of what we do here.

No sorry, didn't mean to give that impression.

Sorry for the late reply. They are bespoke scripts created by me with a fair bit of help from people here. I'll try and package them up and explain how it all works together for you tomorrow.

Hi @Kyle Hopefully @elsiegee40 will get you sorted, but if not this is something I do fairly regularly too. Staff eSafety training needs to include a number of areas (and probably more than 30 minutes). Staff digital footprint, keeping themselves/passwords/data safe, how to identify eSafety issues with pupils, where to go for help etc. You need to encourage digital confidence in my opinion - try to keep the tone positive. :-) I've got a good prezi on the staff digital footprint and suitable communication methods. PM me if you'd like to see it for some inspiration.

@mfactor - what are you wanting to achieve? We use SSO for moodle authentication then a series of scripts to enrol students into class code courses. The teachers are then able to enrol whole groups of students into their moodle course. Students need their admission number in active directory (we do this on import when they join us), and we have to create (import) class code courses into moodle. After that it runs itself. Obviously this doesn't include time tables in moodle, or attendance or anything else that most of the commercial tools include.

It's slightly confusing but there are two access lists options for your guest SSID. There are the standard access lists and another found in - Configure - Guest Access - Restricted Subnet Access. As long as all your switches are tagged correctly then you should assign the guest vlan tag within the advanced options of your guest SSID.

Have you checked your guest access list? By default it blocks the standard internal ip ranges. Our guest SSID is used to give access to guests with a pass issued by us. Our BYOD SSIDs are standard SSIDs with dynamic pre shared keys and custom access lists applied.

One of our local primary schools is advertising the following position which may be of interest: https://jobs.leeds.gov.uk/JobDetails.aspx/10788/IT_Technician/?SSectors=67&SLocations=_1&Ssimple= Vacancy Title: IT Technician Salary: £19,817 to £21,734 pro rata ClosingDate: 05/12/13 Reference: 2070 Working Pattern: Term time only - Permanent Hours Per Week: 37 (TTO) Location: East Leeds Employer: Kippax Ashtree Primary School

Yes, a WPAD file is a pac file. Rename the extension and it's good to go. You may have to adjust the MIME types your webserver will serve though. Unfortunately as I said in another thread yesterday, WPAD isn't a silver bullet ( http://www.edugeek.net/forums/wireless-networks/127865-byod-ruckus-wireless.html ). We found it only worked on windows machines and those windows machines that had IE setting 'Automatically detect settings' set. It is on usually by default - but sometimes people have turned it off for one reason or another.