speakercon

As we have now moved to Arbor I'm thinking about what to do with the SIMS VM. We still need access to it for data retention purposes and a couple of staff still use it from time to time to look up historic data. To be honest I'd quite like it off the network both for security reasons and it seems a waste of server resources to have it there when it is seldom used. I'm been thinking about how I can bring it offline but still allow it be accessible by a couple of certain staff if needed. Has anyone else been thinking about this or have come up with a good solution?

Thanks everyone for your input. I'm thinking out loud here, what do you do about those few nuisance devices that you are asked to connect to the internet such as xbox's, firesticks ect... From the looks of it these would fall to the default policy (can a firestick display a splash page!?) or guest policy and as such these policies would have to allow the streaming websites category (or equivalent) on the whole policy. I currently create a custom policy for things like this and apply it just to the IP of that device. I'm know I'm being very nitty gritty but I'm thinking of scenarios have come up and its more valuable to have a real word answer than a sales answer.

So I guess you would need to put the Smartpac on servers too in order to whitelist these from filtering? Okay so anything without the extension or proxy you would be prompted for account log in and then you'll get the relevant user policy. The guest policy requires no log in, if you don't have another external IP you would set the guest vlan DNS address' in DHCP to theirs? Thanks again

Ah I see, we're not using it at the moment I'm investigating how it would work with our setup so this is all usefull info. So for Chromebooks you use the browser extension, Windows devices use the SMARTPac agent. Any other devices where these options are not available DNS filtering is used but all of these would fall under the default policy, its not possible to seperate based on internal IP address. But you can have a seperate guest policy. Have I got all that correct?

Sorry to tag onto an old thread, but... From what I can see any devices that don't have the browser extension installed all fall to guest policy is that correct? For example a group of devices (eg android box's built into ITV's) on their own vlan, it would not be possible to aim a policy as these specifically based on their internal IP address the way you can on a hardware appliance?

I'm on the hunt a for a web-based booking system for our before/after school and holiday clubs. We have been using Abror but we have pupils that attend from other schools which makes this difficult so we are looking for a nice solution where parents can book spaces at the clubs and pay through the same system whether they attend our school or are external. I’ve done some googling as too what is out there but I do love a good real world recommendation. Would anyone have any recommendation?

Try 'show running-config' on the 3750. This will show you the full config of the switch including the configured vlans and if they have IP helper address'. I would assume (but not a 100% given) the dhcp will be done on your domain controller so maybe have a look on there what/how the scopes are setup.

I'm glad I'm not the only one who does tech spotting in shops! I noticed Asda used to be cisco but seems to have moved to Aruba, IKEA still has cisco and the coop has Meraki.

We currently have Unify (50 Waps) and it does everything we need it too. You can pick the U6-PRO's up for about £130 each and it's very easy to setup and manage using the (virtual) controller.

I've never heard of a CV21 protocol, if the router presents a normal analogue phone line I can't see why the FXO gateway wouldn't work (but you never know, it might be a waste of money) but maybe you could ask them about porting the number away and see if you will have to pay anything, it would be allot easier to just use another sip provider.

As Rob says your best bet would to try and get the SIP info from virgin and register it as a trunk in 3CX, you may even be able to get that info from the settings in your router? Alternatively you would have to use an FXO adapter to convert the analogue line back to SIP, but this a bit messy going from voip to analogue and back to voip again! I've used Cisco/Linksys FXO adapters before but that was with freePBX, you'd probably want to go for a supported device to enure you can get it working - https://www.3cx.com/voip-gateways/

If you want to use your 3CX system for your internal phones I would port your landline number to a SIP provider (I use Sipgate at home) and register it as a trunk in 3CX. You can setup a free Sipgate trunk and register it in 3CX and then port your number over once your happy with it.

I've not had any futher issues with this (toutch wood!). I'm still blaming updates tbh.

I'm sure School ICT would be able to help with this.

I'm having a very strange issue. I have 3 sites connected together with IPsec VPNs through a Fortigate at each site. A printer at a remote site is unable to connect to the papercut server back at the main site (however you can print to the printer fine, just cannot log into PC on the printer to copy/scan). This looks to be caused by some sort of delay on the network (the error message says network timeout) and then trying to access the printers gui on the sever it loads very slowly. However, when I access the gui on my windows 10 desktop and laptop on the same site/subnet as the print server it loads fine. The same thing happens when trying to load the gui of an IP phone and a switch at the remote site. I've tried on a verity of servers (VM's & hosts) ranging from 2012-2022 and they all do the same thing, however a windows 10 VM on the same host loads the gui fine. Ping times from both servers and clients are bytes=32 time=24ms TTL=62 which seems reasonable for a remote site device. I have an identical printer at the same site as the server and the gui loads fine on both servers and clients. It looks like the issue is a combination of the remote site but only seems to effect sever os. I've tried disabling the antivirus completely and have even setup a fresh server with nothing extra installed but still has the issue. Any ideas very welcome!

I use EE business for ours, you get a nice dashboard you can manage the plans & download invoices.

Senso filtering works well for off site devices, not overly expensive either for a hand full of devices & also allows remote access for support.

I imagine the total load would be around 15-20 watts? So should be fine. How long is the cable run? I had a situation once where a POE phone was working, but cut out and rebooted as soon as the speakerphone was used. This turned out to be a badly punched down cable on the patch pannel and the speakerphone caused the voltage to drop too low so it just cut out becouse of the dogdy cable termination, so I'd probably try another cable (is there another nearby data point you could try, or just trail a temp cable for testing?).

Thanks everyone, I've resolved this now, it turned out that googlevideo.com was in the block list on the student filtering policy, and I overlooked it It must have been added many years ago as it was near the top but only recently seems to have made a difference. The F12 error report was very useful as it showed that URL unable to load.

Oh yes, many many errors when SSL is enabled. Mainly "Failed to load resources: the server responded with a status of 403 (Forbidden)" & "Failed to load resource: net::ERR_FAILED".

Currently having an issue with our Fortigate's stopping youtube videos from loading. The page itself loads okay but the video does not load (as shown in the screenshot). If I disable the SSL inspection the video loads fine, so it must be that which is causing it. I've made sure the SSL certificates are up to date, but it makes no difference. There have been no config changes recently, this has just started randomly, it started on one fortigate then started happening on the others maybe a week or so later. Hoping someone else has experienced this and knows a fix! Thanks

I've not had any more since last week... strange. If/when I get another one I'll try the driver roll back & report back.

We are on unifi wireless, is this a common theme for others with the isssue? I've not checked the DHCP logs but will next time I get one with the problem. They are mainly the DfE HP G7's & G8's, but I have also had the problem on an old Lenovo G550. I did try an ipconfig /release and renew but this did not work for me.

This week I've had a hand full of laptops (different makes and models) that are connected to the wireless but have not picked up an IP address (they have a 169 address). DHCP is definitely working and has plenty of spare IP's (I connected a couple of ipads to that SSID and they picked up an IP and worked fine. I tried the following, but did not resolve the issue: · Rebooting. · Disconnecting from the SSID and reconnecting. · Forgetting the SSID and reconnecting. The following 'fixes' the problem: · Giving the laptop a static IP (works) and then removing the static, it then gets an IP from DHCP. · Connecting to a different SSID, the laptop then gets an IP and then I can connect back to the original SSID and the laptop gets an IP. · Plugging the laptop in via ethernet, the wired adapter gets an IP straight away and the 169 address on the wireless adapter goes away and the laptop gets an IP from DCHP. I'm pretty sure there is no issue with the wireless, network or DHCP. The issue is isolated to windows laptops. My thinking is it might be an update that has caused the problem, the only fix seems to be the laptops needs to connect the network/internet through a method other than a DCHP lease on the SSID it was on. Has anyone else experienced anything similar recently? We are running version 1809.

Has anyone else found the web version of Zoom to cause poor video/audio quallity?