SchoolsBroadband

mMmm sexy kit too, why not We took a look at the Junipers too as they were our second choice in the end. Even though on the whole we preferred the Cisco ASR's, Juniper is still very good kit though. Dave

Here you go. This is one of our test racks in the office. We're missing an ASR in there which is still boxed up but you can get the general idea of it all Dave

I'm not sure if I'm allowed to put this in here but I'm rather excited We've just taken delivery of our new high end carrier grade Cisco 9000 ASR series routers for our new Point of Presence and network upgrade we're going to be installing in the summer. 120Gbit of throughput and full Q in Q along with another pair of top of the range 3000 series Fortigates. There's also going to be a re-design and upgrade to our Lightspeed cluster too. Watch out for a big upgrade near you to all my customers on Edugeek I might post a pic if anyone's interested in seeing what about £400k of kit can get you these days

Hi there, this is to do with HTTPS filtering in non proxy mode. The Fortinet needs to do a "man in the middle attack" and pose as the website you are trying to view. You can turn off HTTPS deep scanning but then you'll find the filter isn't quite as good at blocking things. I'd recommend static DHCP leases if you know the MAC addresses of the devices you are giving out or say that guest wireless always gets xyz ip's and therefore gets abc filtering policy. Google has been difficult now all of its sites are HTTPS. If you don't use the nossl variant to be enforced via DNS servers then safesearch can easily be tampered with and all sorts can be viewed. Thanks Dave

yes makes sense its an easy way to do it

That's a good price. Only just above cost for a BT EAD circuit

I think a draytek 2830 or other model will fit the bill. They are cheap too.

A Fortinet box will do this nicely for you. Pm me if you'd like s quote or to go into more specifics. Thanks Dave

hi Adam, sorry for the late reply. It looks like all is working now though

£5 says LLN will still work tomorrow and nobody will be cut off

ok great. If you need anymore help do let me know Thanks Dave

Hi Nathan, will give you a buzz today. Sorry you've been struggling a bit at the moment. This has been our busiest week ever with lots of schools placing very later orders yet having to go live by 31st March before they get cut off by LA. We'll be back to normal very soon. I'll call you personally. Thanks Dave

Hi James, we do this and can link dozens of sites together so 3 should be pretty easy BTW also take a look at VPLS rather than MPLS so you can run site to site VLANS. MPLS is getting a bit old hat now. I'll send you a PM Thanks Dave

oh yes The words "wood" and "trees" and "coffee required" springs to mind this early hour Dave

I'm a bit mystified as to why they can't do this. We supply hosted Lightspeed and Leased Line connectivity for @Marshall_IT + many other people here on Edugeek and its a doddle to do. if you want it working come send me a PM and move from "the dark side"

Do you / have done it? - yes and we sell it Is call quality good / reliable? - So long as you have a good Internet connection with either plenty of spare capacity or QOS enabled Dedicated line or running over your main internet connection? you can do either both have their benefits / draw backs What if any special configuration did you have to ask from your ISP? Suggest you ask them to prioritise SIP if possible Other people have made a few good points ref separate / same line. The biggest issue of running phones and data down the same line is what if the Internet connection has a problem? That means no Internet, no phones and no way to contact the school for the outside world. Not good. Also look at your average traffic graphs on your broadband connection. If you have spare capacity you know you'll never use the VoIP should be fine over this connection in general. If you max your line out make sure your ISP do network QOS or if you have an onsite firewall prioritise SIP over all other traffic. Sometimes reserving 1 or 2Mbit can be a good idea just for SIP. G729 codec uses a tiny amount of bandwidth and you can happily run 30 concurrent calls on a stable 2Mbit. Much cheaper than an ISDN 30 line!!! If you'd like any advice feel free to PM. Good luck Dave

Good work and you're more than welcome

No that's not quite right. That said school does have a service from us which is in and working. However even though BT's checkers initially said they could get FTTC as the exchange and local cabs were being upgraded that's not going to be the case unfortunately as the school actually has a special "mini cab". Said school has been offered an upgrade to a leased line at my cost instead to give faster speeds and as an apology. It's also my old primary school so I want to make sure the school is 100% happy. I'm also paying for an expedite install free of charge for the schools as well as lots of other extras. Some things don't always go to plan but its how you respond to them which sets your company out from the others. I'm personally doing everything in my power to make this school happy and not penalise them. The school has Internet access from us which will still be working when LLN gets turned off and I'm hopeful that as we have some expedite installs reserved with BT that we'll get an even faster leased line installed in time. The school will not be without Internet access. This would be terrible. I should also point out that the leased line offering is about 25% less than LLN's cost with many more additional extras included in the cost. Dave Dave

oh dear. Well if any of them are here do send them our way as we are still taking orders and are able to provision primary schools no problem. We also have some special "expedite" installs in the bag just in case for new leased line customers. Dave

YouTube and Google changed the way everything works. It's also affected our lightspeed cluster although lightspeed are creating a new patch to fix it which we will apply pretty soon.

possibly. Have you rebooted the switch? Sometimes their MAC tables can go screwy

yes that's a great idea @localzuk We use both Nagios and Cacti to monitor all of our networking equipment at an ISP level. The best thing here is that its free too Dave

Hello, I'd highly recommend the Fortigate 60D (See here for specs Connected UTM for Small Networks | Fortinet) This should fit your specifications very nicely. The fortigates are fantastic firewalls and very good value for money with the number of features you get on them. The RRP for a Fortigate 60D with the UTM bundle is only £835. Do send me a PM if you want an official quote for one as we are official partners of Fortinet with many hundreds installed in schools. Cheers Dave

doh good point

the one thing I'm also not sure of is why do you have persistent routes set on the PC? There is no need for persistent routes as the default gateway is set via DHCP I'd suggest removing them from a test machine. the commands to do in this order route delete 0.0.0.0 ipconfig renew arp flush Also do an "arp -a" command on a machine on the 192.168.0.x range and the 192.168.1.x range. Then see if the MAC address is the same for the 192.168.1.254 (gateway router address). If its not then perhaps you have 2 different routers on the same IP address on the network?! Really clutching at straws here but I've seen odder things. Dave