JPElectron

Ethernet Connectivity Test Equipment - LinkRunner AT Network Auto-Tester | Fluke Networks Pockethernet - The Swiss army knife for Network administrators | Indiegogo ...both do cable length. ...both require a switch or dongle at the end for other tests. Only the really expensive testers will do Mhz rating/certification.

Rather than setup another AP for this, why not create another SSID on the existing CISCO APs - that SSID correlates to a dedicated VLAN with it's own DHCP pool, you could then setup a catch-all captive portal (using DNS Redirector running on the same Windows box would be one way) this way no matter what website you try to go to on that VLAN, you would always be "stuck" at your IIS site with instructions for installing the cert.

You won't be able to do that - for ASA to work as the VPN endpoint it needs to be the default gateway (next hop out) to the Internet. You might look into using a server behind your Smoothwall UTM as the VPN endpoint instead, or fix the problem with the Smoothwall.

I would suggest ReadyNAS by NETGEAR series, very reliable, haven't replaced once yet. Newer models do support AD integration, see: How do I configure active directory mode on my ReadyNAS OS 6 storage system? Alternatively, all models support an internal user/group database - you can use a common username and have several workstations all map a drive letter to that same share, using the same "generic" user. Buffalo Linkstation however, never again, I would like to go all "office space" on the 3 dead units I have besides me... (Note: NSFW / NSFS audio)

Your asking what providers are available in your area? or how to combine them? Personally I like using different providers over different mediums (coax/cable vs. copper/phone vs. fiber) because that way when one goes down or gets hit by a shovel you can still be functioning. I'd look at a Balance Model Comparison | Peplink to combine multiple ISPs - go with whatever ISP is cheapest in your area.

We use this: DNS Redirector - Captive Portal and Internet Filtering software that's scalable and network friendly - requires no subscription if you run it on your own server in-house.

airFiber | Ubiquiti Networks, Inc. might be more appropriate, depending on bandwidth, and if wireless is the way you need to go. A hard line would be best, a directional boring machine, see: https://www.google.com/search?q=directional+boring+machine&tbm=isch can easily run a fiber conduit without breaking up the road. Your cable contractor would be the best one to tell you if this is appropriate, and pull any necessary permits.

We use these... Square 16 Inch X 16 Inch X 3 Inch Clock Guard - MTC399-3 - Track and Field Clocks - Mansion Athletics Note that large spaces between the metal sticks does not adversely effect the wireless signal. The ones where the metal mesh is less than 1" separation you should avoid. We had used plastic covers in the past, but kids would throw basketballs at them and they would crack and fall. Metal holds up much better.

Everything I've used to filter works like that - for certain "big" sites to work there are often a few other domains/URLs you have to allow, usually CDNs or parent companies.

Can you post some details of your copter and video setup?

Client computers get what DNS servers via DHCP? (only existing AD DNS server's I hope) Do you use VLANs anywhere? Cisco or Netgear switches perhaps? (portfast or STP issue)

DNS Redirector here

DNS Redirector can do your first bullet point (collecting name, email, phone, and sending the SMS), not sure about the second - unless you're saying the password they get via SMS is what lets them on the second student SSID? or do they already know their radius/AD credential? You can captive portal them and authenticate to AD pretty easily, but radius takes a little more effort.

I have some schools with 4 lines; sometimes all from the same ISP, just to get more bandwidth - sometimes for redundancy. I often use Peplink devices to combine the throughput or handle failover.

More info on that domain and how the yellow ! works here... Windows 7 Network Awareness: How Windows knows it has an internet connection « Super User Blog

Could be a chrome extension... In any case, blocking by DNS eliminates the problem of "is the proxy set or not" or "is the site HTTPS or not"

You can do a poor mans fault tolerance by simply creating two records for your domain, each with the IP from either ISP line... A website might have 4 A records all together... example.com = IP from ISP 1 example.com = IP from ISP 2 www.example.com = IP from ISP 1 www.example.com = IP from ISP 2 A mail server might use a higher priority MX record for the backup ISP line... example.com = Priority 10 = IP from ISP 1 example.com = Priority 20 = IP from ISP 2 The best way to do this is if your ISP and your end equipment can do BGP, so the same public IPs are available via either line.

Easiest if you can set a switch port to mirror the port of either host in question - then you plug your laptop running Wireshark into the mirrored port and capture all that traffic. Other option is to run Wireshark on the host, then filter the output by the IP of yourself, or the other host, for example Filter: ip.addr == 192.168.3.8 Ghetto option is to get an old hub (not a switch) and plug your laptop running Wireshark and one of the hosts into that, a hub lets you sniff out all traffic passing anything plugged in. Perhaps your proxy is somehow overwhelmed/congested - I have seen a few times where if the proxy is not available IE likes to try other (proxy-less) methods.

Problem... ...so for DNS servers you have an internal address (192.168.X.X) followed by two external ones (AutoExec Computer Systems, Inc) This is NOT how you do it. Internal devices should have internal (Active Directory) servers listed ONLY. Then in your AD DNS server, under properties, forwarding tab, define the ISP's servers. You would be wise to have more than one AD DNS server. Also, you should ensure your Connection-specific DNS Suffix (displayed when you do an ipconfig /all) matches the FQDN of your internal AD domain.

...except that the business world uses PCs. Exception if their in design/tv production/editing/creative fields they will probably use a Mac, but everywhere else is still a PC. You should use whatever platform provides the best apps/learning experience for your students - one that all teachers can get behind - and IT can adequately support with a good level of proficiency/service - don't spread yourself to thin supporting everything that walks in the door. As an aside: Incorporating technology in the classroom should NOT be about learning the OS, it should be about how to effectively use the device as a tool, as an aid to productivity; for research, for learning, for discovery, to produce reports/homework/presentations - and I wish part of this was Internet security/safety/not opening files you don't trust, and general file management (not save everything to the desktop) and how to backup - these are the things you should be worried about "teaching" - not specifically what OS they will be proficient in.

...I say this not just because the initial cost of the device: but when you account for the fact that you... A] need twice as many access points (cause apple devices have the weakest radios) B] more software licensing (some Apple-specific management solution) C] more hardware (iOS print server/xprintserver, Bluetooth keyboards, chargers cause they don't last though the whole school day, cover with a stand, AppleTV/other solutions for streaming to the projector) D] more user support time (cause Apple ID's still don't work right half the time, kids will drop it, now have fun provisioning a new/temporary device for them, etc.) ...If you already have Windows AD in place, using a windows device eliminates allot of this stuff you need to re-create from scratch with Apple. If you're school is already on Google Apps, then Chromebooks or Windows devices running Chome are great.

Surface Pro or Pro2 makes things easy - Windows environment, so manageable via AD - great tablet experience. Built in kick-stand so student's necks don't hurt, looking down at an iPad flat on a desk or needing a flip cover/stand seems so 1999. Samsung Chromebook with the management console is also another, much cheaper, way to go. iPad will be the most expensive route, I saw some articles recently they have a new management solution (to control/deploy apps and device policies), but have not personally played with it (yet)

+1 for PRTG, so long as your equipment supports SNMP, or at the least PING, you can monitor it with PRTG.

I have not heard of MXSweep, but I can highly recommend DNS Redirector

Are these computers getting a DHCP lease in time? meaning they must get an IP before you would expect the logon desktop to load. some switches with port security or STP may inhibit this. When the computer does get a DHCP lease, does it include DNS servers that are ONLY the IP(s) of your domain controllers? Post the output of... Start > Run > cmd > ipconfig /all ...if you are unsure