dmj

Take care with this and make sure it's on a personal device. Knowing Broadcoms latest tactics they'll use the data gathered by the application to force schools and companies into expensive litigation if they spot it on an enterprise network.

Could something else have the IP address and traffic is being routed to that instead? yeah, sorry for being facetious. I couldn't resist.

There's this newfangled automatic thing from that prevents ip mis-configurations and issues like this. It works by suggesting to a server an address and the server responding with a 'yes' or a different address. You should try it. It's been well battle tested over the last 30 years.

Apologies, I'm not familiar with TrueNAS or NextCloud. Just trying to give some generic advise about container management.

It's fairly common to setup stuff like this behind a reverse proxy or load balancer, assign the certificate to the proxy and configure the target to receive traffic from the proxy as a trusted source. You can then use this proxy for traffic to any pod, and setup any sort of auth you like on it. Sorry not familiar with this particular app, but this would be my general approach.

You guys should know by now that Edugeeks only want to use what everyone else is using!! My money would definitely be with KVM on ZFS to be honest, it's what all the major players are using. Interestingly, whilst on the subject of history, Xen (the underlying system for XCP-NG, Citrix et al) was originally developed at Cambridge University in 2003 with sponsorship from Microsoft.

It's because they limited their free version

You can get this in Google Meet if you turn on workspace labs https://support.google.com/docs/answer/13447104 https://support.google.com/meet/answer/14754931

The Government forced BT to allow other companies to use their telegraph poles. When we got fibre they ran a fibre cable from the closest pole to the house. The poles are starting to look a bit messy with 3 different companies equipment on them, but can't complain having 900Mb/s for £30/month.

They keep basing their consumer products on windows. they got a winner with Azure because they based the infrastructure on Linux.

What does wireshark show it doing? a DOS attack, brute forcing the SNMP passwords? Re-image the machine.

Suppose the question is how did it get past the procurement process? Random deputy head like the idea....

The DHCP server/mac addresses seem like a red herring to me, that unauthorised clients can access a server on the network (the DHCP) is a symptom of a misconfiguration, not the cause. To address it, as @Oaktech correctly points out, you need to configure your RADIUS server to only accept known clients onto the internal network that also authenticated as a user. It sounds like you are using user authentication but you need to authenticate users and known devices onto that network.

I think we I did it back in 2014/2015 or something, moved to chromebooks

Why not just choose a tool that better suits your needs? There's plenty of stuff available that deploys a registry key or script, which is essentially all it's doing.

Nice. A couple of comments - mostly around styling. If you use argpass you could make the scripts more generic, so that you can hardcode your centerID/filepath but allow others to override these with a flag on the cli - also global variables should be uppercase Make more use of functions, and use the __main__ function - Use a double line to signify the end of a function (makes things much more readable) and use docstrings to document the individual functions format the files with black (there's tonnes of whitespace at the end of lines) lint with pylint you're importing sys in rename-files.py but not using it (also rename-files.py should be snake case) the logging module is awesome, instead of just printing errors. This would be useful if you automated these scripts based on a trigger - you'd want the logs to go to a system log rather than print to stdout. sys.exit() should be sys.exit(1) if you intend to quit on an error so the operating system know the exit code. Hope that wasn't too harsh. The senior python developers at my company really rip into my code - it's all part of the learning process.

Many, many years ago I've cleaned these with a cotton bud and acetone. Isopropyl alcohol would also work.

^ definitely this. Combine the staff and student SSID's into a single "staff and students" SSID and then, based upon the type of device they login with (school owned or BYOD) and their groupID assign them into a VLAN using a RADIUS server. We used to use a 'dirty' VLAN that we essentially treated as the internet for all BYOD, then an internal one that staff could access and another that students could access.

Agree with @Rob_D that any RADIUS server should be able to assign VLAN's based on whatever criteria you choose. The SSID's aren't relevant here, and adding more just complicates things.

So 25% cheaper on list prices. Sounds like a win to me.

They are enterprise switches, so centrally managed software defined. Use the controller:

Apologies I'm not really sure I follow, you need more than eight 10GB/s for edge switches? I was partly replying based on the OP's requirement for a primary school rather than a datacenter This is the TP-link enterprise range (Jetstream/Omada) https://www.tp-link.com/uk/business-networking/omada-switch-l3-l2-managed/ They are roughly equivalent in throughput to the Ubiquiti 'pro' range which is perfect for edge IMO, but with more of the features of Ubiquities higher ranges for less money.

I used to use Ubiquiti, but nowadays TP-Link have more than an edge over Ubiquiti: many more features for a much lower price.

It's super easy to put an MTA on the network for older devices to connect to and relay to exchange via oauth. This change shouldn't affect anyone.

We're running a vintage 1975 model dmj. Memory is starting to fail, and i/o uptake definitely a lot slower than newer sysadmins. Generally reliable, with a few quirks. Seems to work more efficiently on *nix than windows.