posted
This is the year where I get my hands dirty with computers. I have been doing all sorts of stuff. I was able to set up a functional 2003 environment thanks to our computer gurus here.
I am now going to tackle my last big project for the year. I took a week long intensive CCNA class and now that I have my MCP I am going to break my study routine and get my CCNA before I continue with my MCSA/MCSE.
Here's the deal. I have 2 non contiguous public ip ranges. I have a router, four main switches, and then all the little bestbuy switches in the classrooms. I use DHCP.
Since I am on one giant physical segment, a lot of traffic is having to be routed. We have several classrooms with lots of programs that just LOVE to broadcast.
I am going to set up several VPNs to manage traffic. I have verified that our main switches and router have the 802.1q protocol. Well, the state CCNA trainer who taught my class and is over our router had to update the router with the 802.1q protocol. But I am set now.
Obviously each VPN needs its' own subnet. So....
I am thinking of converting to using the private subnet range, NAT, and giving one of our public ranges back to the district.
The state and district are all rooting for me. No one at the district has done this or knows how, but I will submit my plans and programming in text to our state for them to check and verify before I implement it.
I am practicing on Routersim. It is a $185 program, but it is REALLY COOL!
However, one person at the state thinks the district will not be able to monitor our AUP (Acceptable Use Policy) if we are on private networks.
I will win the argument, BUT...can't they monitor anyway? Surely other schools use VPNs, private ip addresses, and have functional AUPs.
My important question is...why would anyone besides large companies like AT&T subnet if private ip ranges are so versatile? If you subnet are your ip ranges still public? Do they need NAT to get off network?
I am thinking of just going private, but if subnetting is the more viable option I can certainly do that.
Posts: 2445 | Registered: Oct 2004
| IP: Logged |
Printer-friendly view of this topic
