Julian

You could trunk them together using 4 * 1Gb (or more) links to get a 4GB link, not as good as 10GB link, but you do not have to buy anything.

Google search gave me https://www.microsoft.com/en-gb/download/details.aspx?id=10056 Kodu is below the Windows 10 advert

Please get your switch to print out its routing table, by from telnet command line doing "show ip route". This should help see where packets are being directed.

You will find the following helpful http://www.cps.gov.uk/publications/docs/mousexoffences.pdf Memorandum of Understanding Between Crown Prosecution Service (CPS) and the Association of Chief Police Officers (ACPO) concerning Section 46 Sexual Offences Act 2003 Basically it has been realised that backups are rarely accessed, and that they also hold financial information, that has to be retained, so that you do not have to wipe all tapes / backups, provided that access controls in place keep the material secure.

Google philosophy is that Chrome is a “Safe Secure Browser”, if your data source does not show that it is safe, then Chrome does not want to talk to it! You can try using a different browser IE will usually work, Firefox can usually be instructed to ignore the risk. You might also see if there is an update for your Unifi controller.

Your routing table is empty. Which is why your switch can not route the data. Sorry that I can not give much more advise my knowledge of layer 3 routing is limited. I can tell you that for HP Switches, you configure the routing table, the access control lists, and the ip helper address (required for DHCP server) from the command line. Please find below a working HP switch configuration, for many vlans We paid a expert to do the configuration. We are using one vlan per end location, broadcast storms only take down one vlan! Running configuration: ; J8692A Configuration Editor; Created on release #K.15.16.0005 ; Ver #06:74.fc.7f.ff.3f.ef:de hostname "HP-3500YL-CORE-0" module 1 type j86xxa module 3 type j9312a console idle-timeout 600 console idle-timeout serial-usb 600 fault-finder broadcast-storm sensitivity high fault-finder bad-driver sensitivity high fault-finder bad-transceiver sensitivity high fault-finder bad-cable sensitivity high fault-finder too-long-cable sensitivity high fault-finder over-bandwidth sensitivity high fault-finder loss-of-link sensitivity high fault-finder duplex-mismatch-hdx sensitivity high fault-finder duplex-mismatch-fdx sensitivity high trunk 11-14 trk1 lacp trunk 21,24 trk2 lacp trunk A3-A4 trk3 trunk power-over-ethernet pre-std-detect ports 1-10,15-19 qos protocol ip priority 4 timesync sntp sntp unicast sntp server priority 1 172.16.199.201 stack commander "HP-3500YL-CORE" stack member 1 mac-address c4346b-a41d00 time daylight-time-rule western-europe ip access-list extended "101" exit ip default-gateway 192.168.248.49 no ip ssh ip directed-broadcast ip route 0.0.0.0 0.0.0.0 192.168.248.49 ip routing interface 11 no power-over-ethernet exit interface 12 no power-over-ethernet exit interface 13 no power-over-ethernet exit interface 14 no power-over-ethernet exit interface 18 name "Meru" exit interface 20 name "HGfL Router" no power-over-ethernet speed-duplex 100-full exit snmp-server community "netAdmin" unrestricted snmp-server host 192.168.0.251 community "public" snmp-server host 192.168.0.248 community "public" snmp-server host 192.168.0.151 community "public" snmp-server contact "Mr J Hill" location "ICT Server Room" vlan 1 name "DEFAULT_VLAN" no untagged 2-4,6-8,16,20 untagged 1,5,9-10,15,17-19,22-23,A1-A2,Trk1-Trk3 ip igmp exit vlan 99 name "VLAN99" no ip address exit vlan 100 name "IT" tagged 10,Trk1-Trk3 ip address 172.16.200.30 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 101 name "OldMusicArea" tagged Trk1,Trk3 ip address 172.16.196.126 255.255.255.192 ip address 172.16.200.62 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 102 name "6thFormBlock" tagged 17,Trk3 ip address 172.16.200.94 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 103 name "MediaStudies" tagged 22,Trk3 ip address 172.16.200.126 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 104 name "MathsClassrooms" tagged Trk3 ip address 172.16.200.158 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 105 name "Art_Drama" tagged Trk3 ip address 172.16.200.190 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 106 name "AdminBlock" tagged 17,Trk3 ip address 172.16.196.190 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 107 name "ICT_Staff_Staffroom" tagged Trk1,Trk3 ip address 172.16.200.254 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 108 name "D&TBlock" tagged 23,Trk3 ip address 172.16.196.254 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 109 name "MFL_Geography" tagged 10,Trk3 ip address 172.16.201.62 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 110 name "H3" tagged Trk1,Trk3 ip address 172.16.201.94 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 111 name "H4" tagged Trk3 ip address 172.16.201.126 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 112 name "EnglishLib" tagged 17,Trk3 ip address 172.16.201.190 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 113 name "CR3" untagged 2,6,16 tagged 19,Trk1,Trk3 ip address 172.16.201.254 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 114 name "CR1" tagged Trk1,Trk3 ip address 172.16.202.62 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 115 name "CR2" tagged 9,Trk3 ip address 172.16.202.126 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 116 name "S11" tagged Trk2-Trk3 ip address 172.16.202.190 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 117 name "NewMusic" tagged Trk3 ip address 172.16.202.254 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 118 name "CR4" tagged Trk1,Trk3 ip address 172.16.203.62 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 119 name "S13" tagged Trk2-Trk3 ip address 172.16.203.126 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 120 name "Wireless" tagged 18,Trk1,Trk3 ip address 172.16.203.222 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 121 name "Servers" tagged Trk1-Trk3 ip address 172.16.203.254 255.255.255.224 ip helper-address 172.16.199.201 exit vlan 122 name "FoodTechLSD" tagged Trk1,Trk3 ip address 172.16.203.190 255.255.255.192 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 123 name "SchoolHouse" tagged Trk1,Trk3 ip address 172.16.196.30 255.255.255.224 ip helper-address 172.16.199.202 ip helper-address 172.16.199.201 exit vlan 124 name "EPOS" tagged Trk1,Trk3 ip address 172.16.200.222 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 125 name "PE" tagged 17,Trk3 ip address 172.16.201.30 255.255.255.224 ip helper-address 172.16.199.201 ip helper-address 172.16.199.202 exit vlan 199 name "HGfLRouter" untagged 20 tagged Trk3 ip address 192.168.248.50 255.255.255.252 exit vlan 201 name "Servers2" untagged 3-4,7-8 tagged Trk2-Trk3 ip address 172.16.199.254 255.255.255.192 exit vlan 202 name "Student-W" tagged 10,18,22-23,Trk2-Trk3 no ip address ip helper-address 10.0.41.252 exit vlan 203 name "Staff-W" tagged 10,18,Trk2-Trk3 no ip address ip helper-address 10.0.43.252 exit vlan 300 name "Telephone" tagged 10,17 ip address 172.17.54.253 255.255.255.0 exit spanning-tree spanning-tree Trk1 priority 4 spanning-tree Trk2 priority 4 spanning-tree Trk3 priority 4 no autorun password manager

We also have had this with 2 of computers with Smart boards. Nice to know that we are not alone.

On a Microsoft network, include something about "Group Policy". What is GPO loopback processing, and when\why would you use it?

I agree about a separate vlan, for devices over which you have no control.

You do NOT need both domains to be at the same active directory level, I have a one way trust set up between a Win 2003 active directory domain, and a Win2k active directory domain. According to my tome (Mastering Windows Server 2003 by Mark Minasi) the usual problem in setting up trusts is due to DNS not working between the two domains. Certainly my experience was that I could not get the trust to work, until I got them to see each other in DNS.

Yes we are using HTTPS externally (only installed today!!). We do need to get a digital certificate (IE7 currently give nasty red message). Given the recent data loses, having pupils name, address, age, and picture over the internet unencrypted is asking for problems. I do not know if you have read the recent BBC news item -Teachers 'put pupil data at risk' (http://news.bbc.co.uk/1/hi/education/7171740.stm). Perhaps the journalist would like to do a follow up article, giving some schools publicity they will not like!!