Jump to content

J_Worth

Members
 View Profile  See their activity

  • Posts

    205

  • Joined

  • Last visited

 Content Type 

Everything posted by J_Worth

  1. J_Worth
    Having looked through some Aruba forums, it would appear that you set the ports for the APs to be untagged on a specific VLAN (VLAN 60) and then other VLANs can be tunnelled down through that VLAN. Therefore, the AP gets an IP address within the subnet for VLAN 60 but the SSIDs can be on different VLANs and the controller is connected to the layer 3 switch as a trunk. This probably explains it much better than I have above: Multiple VLAN setup with AP 105's - Airheads Community
  2. J_Worth
    It will be the internal (LAN) side. Something like this: Layer 3 Switch --> pfSense --> LEA Router The layer 3 switch will have a SVI of 10.10.255.253/30 and pfSense LAN interface will have 10.10.255.254/30 The layer 3 switch will have a default route of: 0.0.0.0 0.0.0.0 10.10.255.254 The pfSense box will have static routes back to the individual VLAN subnets. For example: 10.10.10.0 255.255.255.0 10.10.255.253 I have set this up using Cisco Packet Tracer by configuring a router to use NAT (to loosely emulate the pfSense box) and it works as expected, but I wasn't sure if it is the best way to do this. Thanks. Sent from my iPhone using EduGeek
  3. J_Worth
    Hello everyone, We are currently looking at VLANning our school network, and have a couple of questions. First off, I will state what VLANs we want: VLAN 5 - INTERNET_FEED VLAN 10 - SERVERS VLAN 20 - CURRICULUM VLAN 30 - ADMIN VLAN 40 - iMACS VLAN 50 - CASHLESS VLAN 60 - WIRELESS VLAN 99 - MANAGEMENT So, my questions are: 1). Does VLAN 1 (Default) need to be used and should it be untagged on the switch uplinks? 2). For the INTERNET_FEED VLAN, it will consist of a /30 network with one IP on the SVI of the Layer 3 and the other IP on the pfSense box. Is this a viable solution to allowing all VLANS access to the internet? 3). For our Wireless APs (Aruba AP-105) do those links need to be Trunk (Tagged)? What about setting IP addresses on the APs themselves? How would they be able to use an IP in the MANAGEMENT VLAN range? I hope the above makes some sense.
  4. J_Worth
    Thanks. That's cleared all my questions up.
  5. J_Worth
    I found the issue - I stuffed up the Default Gateway IP address on my test client.
  6. J_Worth
    No worries. Thank you for your help anyway, I'm sure I'll get it sorted. It'll be something simple and I'm making it sound over complicated (it's not!).
  7. J_Worth
    I have defined the interfaces and have set one of them as the LAN interface and the other as the WAN. LAN interface: 10.10.10.1 WAN interface: 10.208.208.20 I'm not sure what kind of NAT I need to allow all the hosts in the 10.10.10.0/21 network access to the internet. Is that Outbound NAT which is automatically done as default. The LEA have given us a range of 10.208.208.0/21 and this is not big enough for us, as we want to VLAN and implement BYOD at some point. So we have decided to put a pfSense box in place so that we can use whatever range we want without it having any effect on the LEA. We want it so that, we have a huge amount of IP addresses available for us to use and everything going out to the internet is NAT'd through the pfSense box. And NAT is required as we have no routes to the 10.10.10.0/21 network on the LEA managed router. Secondly, we currently have two internet facing servers and the LEA has given us a public IP address that forwards to: 10.208.208.50 and 10.208.208.51 respectively. We want to bring these in behind the pfSense box so anything coming into 10.208.208.50, gets forwarded to any IP address the other side of the pfSense. I have only specified one VLAN (10.10.10.0/21) as the example. I hope that makes things a little bit clearer.
  8. J_Worth
    Sorry, my initial post was not that clear - I haven't yet managed to implement NAT as I am not sure how to go about doing this. I would like to have the following: WAN interface: 10.208.208.20 WAN Virtual IP: 10.208.208.25 - This will be a web server running on the 10.10.10.0 network and LEA have opened a port to 10.208.208.25 (so requests for 10.208.208.25 will need to be forwarded to 10.10.10.10 WAN Virtual IP: 10.208.208.100 - This will be used for NAT So after I have configured I can then do an "any to any" rule to allow the 10.10.10.0/21 network internet access using NAT?
  9. J_Worth
    Hello everyone, I am currently trialling pfSense on our school network, however, I have an issue that I can't get my head around and was just wondering if anyone out there has any ideas. Here is the setup: 10.10.10.0/21 ---> pfSense ---> 10.208.208.0/21 ---> LEA Router I am currently unable to access the internet on the 10.10.10.0/21 network as I need to have NAT implemented due to the fact that the LEA Router does not know that the 10.10.10.0/21 network exists and we can't change the LEA Router to have a route to 10.10.10.0/21. Therefore, how would I setup NAT on the pfSense box so that everything behind it (in 10.10.10.0/21) has access to the internet? Many thanks. J.Worth
  10. J_Worth
    Thanks!
  11. J_Worth
    Hello everyone, I am currently trying out pfSense (as recommended on here) and think it is great - much more feature packed than others I have looked at. My question is: I have a web server sat behind the pfSense firewall, and want to be able to access from "outside". My network setup is as follows: 10.0.10.0/24 -> pfSense -> 10.208.208.0/21 -> router. The 10.208.208.0/21 is our LEA assigned range. The LEA have opened up a port so that when we type https://intranet.school.lea.sch.uk it goes through to 10.208.208.40. I would like it so that when requests for the website come through to 10.208.208.40, they are forwarded through the pfSense to 10.0.10.20 for example. Is this possible, and can it be done without having to implement NAT on the pfSense box? I have tried setting up a rule as follows: Protocol: IPv4 TCP Source: 10.208.208.40 Port: 80 (HTTP) Destination: 10.0.10.20 Port: 80 (HTTP) But can't get it to work I hope that the above makes sense to someone. Many thanks. J.Worth.
  12. J_Worth
    Our internet connection is provided by our LEA so this would technically be a second firewall. Our main reason for this, is so we can VLAN the network and not be limited to the IP range that our LEA have provided us with.
  13. J_Worth
    Thanks for all the replies - I will give pfSense a go!
  14. J_Worth
    Hello everyone, Firstly I should say they I have never implemented VLANs on a production network before but I have the theory knowledge behind them having studied CCNA3. We have been looking into VLANning our network and was wondering what the best methodology of doing it is. We are firstly going to tidy the switch cabinets and use different coloured patch leads to identify what is on what VLAN. This is such a noob question:- What is the next thing we should start with next? Finally, I have seen switches online that are L2+ and they state that they can do static routing between VLANs. Does anyone have any experience with these and if so how would you rate them? Many thanks in advance. J_Worth. Sent from my iPhone using EduGeek
  15. J_Worth
    Hello everyone, Just a question: what would you recommend to use as an open source Firewall appliance? I have been looking at Smoothwall Express and IPCop. A firewall appliance with fairly intuitive web based management is pretty much a must. Many thanks. J_Worth.
  16. J_Worth
    +1 - Please add as this would be useful. An example for use - we need to mention to staff that SIMS.net remote app will down for maintenance for a couple of hours, etc. We don't want this to be shown to students.
  17. J_Worth
    I thought you needed to have a Reverse Lookup Zone so that server:"SERVER_NAME" would appear rather than "UnKnown" as when you do nslookup it looks up the hostname associated with the IP address of your DNS server.
  18. J_Worth
    Got it working! I didn't have Windows & SQL Authentication selected on the properties of the SQL Instance. Once I changed it to that, it worked straight away! Thank you very much for all your help - much appreciated. J.Worth.
  19. J_Worth
    I have now changed it to SQLConnectionString in hapConfig.xml. However, I am now getting a Login Failed error. I have double checked the password and the hapDB_user has owner permissions to the HAP database. Are there any other permissions/configuration that needs to be done. Your help is very much appreciated. Thanks again.
  20. J_Worth
    Attached to this post is a screenshot showing the tables that have been created in the HAP database. Below is the tracker section from the hapConfig.xml file: Thanks for your prompt reply
  21. J_Worth
    Hello, Been trying to get SQL Login Tracker working but for some reason the following page is displayed when logging on to the site. The SQL database is hosted on a different server to the HAP server. I have put the following into the Web.config to specify the SQL Connection to no avail: "SQLConnectionString" connectionString="Server=SQL2\HAP;Database=hap_DB;User Id=hapDB_user;Password=;" If anyone has any bright ideas, I would be most grateful. J.Worth
  22. J_Worth
    Hello everyone, A couple of questions regarding our Aruba Controller 3400 Managed Wireless system with 24 AP-105's. 1. We have been quoted for a 16 AP license upgrade to enable us to get one of the blocks on the Aruba system (Its currently on a 3COM system). Part of the quote has "Policy Enforcement Firewall" and "Wireless Intrusion Protection Module". These have added a considerable amount to the quote. My question is, are they required for the APs to work or can they be removed? 2. Does the 3400 controller support NAT? I only ask as our LEA provided Network Addresses are 10.208.208.0/21 so that only gives us 2,046 IP addresses. Therefore, to allow us the flexibility of providing BYOD capabilities, it would be good to be able to use another range of addresses, such as, 192.168.x.x. Would this be a feasible solution/idea? Any help and advice on these above points would be gratefully received. Thanks in advance. J_Worth.
  23. J_Worth
    Hello everyone, We have HAP+ working well. We also have RemoteApps listed on Home Access Plus+ available to staff. My question is there anyway of having SSO so that when a user signs into the HAP+ site, they don't need to enter any credentials to login to a RemoteApp? Thanks in advance. J.Worth
  24. J_Worth
    Just wanted to say thanks for the information that you gave me regarding restoring our SharePoint site - it worked a treat. Thanks again. J.Worth
  25. J_Worth
    We have ours running on a Virtual Machine under HyperV - with a dual core processor, 2048mb of memory and 40GB VHD running Server 2008 R2 SP1. The performance with these specs is more than sufficient for us. I guess it depends on the size of the school and the number of expected simultaneous users. Hope this helps.
×
×
  • Create New...