Jump to content

EmperorPeng

Members
 View Profile  See their activity

  • Posts

    48

  • Joined

  • Last visited

 Content Type 

Everything posted by EmperorPeng

  1. EmperorPeng
    I hope they do it justice, that's one of my favourite audiobooks. Ray Porter is fantastic (yet again). https://www.audible.co.uk/pd/Project-Hail-Mary-Audiobook/B08GB2RLKM
  2. EmperorPeng
    We have: A network map of connections which just shows fibre links between buildings. A list of switches present in each cabinet along with their IP addresses for the GUI. A plan for each room showing network socket locations and which cabinet/switch they are supposed to go to. Switches are set up 'daisy chained' e.g. port 24 of one switch links to port 23 of the next switch, and 24 of that switch links to 23 of the next switch etc. STP is not enabled on the network. We have had 'network loops' before due to students connecting a socket to a socket so this is something that I am looking at implementing. I do have access to the firewall and the switches. The in-house IT support is two people. The company who set up most of the network is no longer viable. We are looking at getting network specialists in to upgrade some switches and redesign the network re: more efficient layout/config and upgrading the fibre links between buildings from 1Gbps to 10Gbps
  3. EmperorPeng
    The guest network is used and gets IP addresses on a different scope to our main network. I don't know what the 'Internet' VLAN is for
  4. EmperorPeng
    No, we have direct fibre and our own firewall. I'm sure there must be a reason for it otherwise why would it be there, right?
  5. EmperorPeng
    This guy gets it!
  6. EmperorPeng
    Various models of D-Link. Some are new, some are going back 10 years such as the 3024s
  7. EmperorPeng
    The guest VLAN is filtered in exactly the same way as the 'normal' VLAN - they both go through our web filter, it's just that the guest VLAN users are seen as 'unauthenticated users' so the filter only recognises them by machine IP address. I have no idea what the 'Internet' VLAN is for given that everything has Internet anyway!
  8. EmperorPeng
    Correct, the 'Guest Users' VLAN is for a guest WiFi network that's on a different IP range.
  9. EmperorPeng
    We had 3rd party network support and they set up a lot of our network infrastructure. I have been tasked with taking over this part of the network and have a query about the switch configs re: VLANS. We have three VLANS (two really I guess, the default one plus an 'Internet' VLAN with an ID of 3 and a 'Guest Users' VLAN with an ID of 5.) The switch is set up so that ports 1-24 are untagged for the default VLAN, ports 1-24 are all tagged for the Internet VLAN (3) and also tagged for the Guest Users VLAN (5) Sorry for the noob question, but what are the implications of having this config? I know next to nothing about VLANS but it seems that doing it like this defeats the object of having a VLAN in the first place? I really could do with an idiots guide to VLANS as it is one area that I am woefully ignorant about. If the above config is fine and I want to add another switch, I would presumably just set the VLANS up in the exact same way? Thanks
  10. EmperorPeng
    Weird, I find SOLUS 3 to be completely pain-free to use. Never have a problem with it.SOLUS 2 on the other hand...Yikes.
  11. EmperorPeng
    Problem solved. The service on two of our DCs was crashing. I removed the software, rebooted the servers, reinstalled the software, rebooted again and set it back up. Everything working flawlessly now. Passwords are in sync within 5-10 seconds. Many thanks to everybody who took the time to respond
  12. EmperorPeng
    I am having real problems synching our AD changes to GSuite. We have both Google Cloud Directory Sync and GSuite Password Sync installed as per requirements. The only way I've gotten it to work at the moment is as follows: 1. Log into pupil Google account 2. Log into pupil AD account 3. Change pupil AD password which then updates the GSuite password If I do it any other way, the password changes do not sync. I really do not want to manually log into 700 GSuite accounts - what am I doing wrong/how do you do it? FYI we are using the standard free version of GSuite for EDU with our LAN using Server 2012/2016/2019 with Windows 10 clients.
  13. EmperorPeng
    We use NetSupport which does not require STAFF permission to connect although I have set a security key to stop staff from viewing other staff. We also use NetSupport DNA which will grab screenshots of anything that we have configured in the Safeguarding section. I also have VNC as a backup for connecting remotely. Our school policy is basically "You have no expectations of privacy whilst using the school network and we reserve the right to monitor staff and resources as we see fit to ensure compliance with relevant school policies." We also have software that I can install which will basically turn the target PC into a huge recorder, capturing screen, audio, keystrokes, keywords the lot. We only ever install this one when we have the Head's authorisation due to how intrusive it is.
  14. EmperorPeng
    Just get a card and fit it. My last motherboard had a nasty issue on the PCI-E slots - the x16 slot was DOA and the secondary slot (x8) only ran at x4. Played all my games perfectly fine with minimal loss of performance. As you're not playing games and only doing light graphics work you'll be perfectly fine with a card only running at x8. -
  15. EmperorPeng
    This has been the bane of my life! Been wrestling with this since January 2018 and our 'solution' was to incorporate Smoothwall's scripts into our own login script. Smoothwall support have been very helpful but didn't get to the root cause. Thank you Tech1, I salute you!
  16. EmperorPeng
    We have a Smoothwall device and both staff and students have the same policy, same restrictions, same https inspection. I make it clear to our users that they have no expectation of privacy whilst using our network and that we reserve the right to monitor everything that they do whilst they are logged on.
  17. EmperorPeng
    Hi Gareth, We looked at a few and finally settled on Claroread Plus. It is good value for money, easy to install and dealing with the company itself was a joy. I can't recommend them enough. Jason
  18. EmperorPeng
    I am based in Cumbria, UK and have the following available: MultiSeries 1000 PoE WLAN Switch x 5 MultiSeries 500 PoE WLAN Switch x 1 EXRP-30n PoE APs x 55 (approx.) Make me an offer! (Apologies if posts like this are not allowed, I looked around for guidelines on what was acceptable and couldn't find anything that forbade it)
  19. EmperorPeng

    sonic-pi

    EmperorPeng replied to sted's topic in Windows

    I don't know about anybody else, but when I run the script it loads Sonic Pi. All well and good. The problem being that the rest of the script doesn't run until Sonic Pi has been closed. e.g. Close Sonic Pi manually and the PING 1.1.1.1 line then runs....
  20. EmperorPeng
    A simple .bat file placed into C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup reversing the drive mapping should work.
  21. EmperorPeng
    I love ESET and have used it at home for probably a decade now, but do NOT use it on your servers! It murdered ours, even with all the exclusions added (and there are a LOT of exclusions depending on server role).
  22. EmperorPeng
    Hi all, Currently using our local GFL for broadband but we're switching to BT soon. I was under the impression that our BT-supplied router was firewalled, but it is not - even though it has the capability built-in. Am now looking at solutions, and notice that people are recommending pfSense a lot. Am I right in thinking that this is a free, open-source firewall that I can just install on my own hardware? I have a reasonably decent server going spare with a couple of Xeons in it, would that be suitable enough? 1000 users (approx. 250 concurrent at any one time), approximately 500 PCs, 80 laptops, 50 iPads and some Galaxy Tab 3s. Thanks for any and all suggestions!
  23. EmperorPeng
    The list of hosts that you have to allow through BLOXX includes a few sites not mentioned in Apple's support pages. I don't have the list to hand, but BLOXX support will be able to help you.
  24. EmperorPeng
    What's the problem with it?
  25. EmperorPeng
    Depends on job spec I guess? I'm directly responsible for 18 servers, CCTV, 650+ PCs and Laptops, the WLAN, the LAN, 1000+ users and anything else that has a 3-pin electric plug attached to it and I get £16K per year. I must be mad.
×
×
  • Create New...