Fairstead House School

• Sage Payroll
• Apple management and ManageEngine MDM
• Updating SchoolBase

Network

• Network 10.1.0.0/16 (VLAN 1)
• VLAN 60 is VoIP (10.10.0.0/24). DHCP from NetManager
• VLAN 192 is CCTV (was old network). 192.168.0.0/24, no DHCP.
• Server rack contains core switch, Netgear switch and Internet switch (rear)
• Core switch (10.1.1.1) 24-port 2540-24G-SFP+ JL356A (not PoE)
• Dephead switch (10.1.1.2) 48-port 2540-48G-SFP+1 PoE JL357A
• Netgear switch (10.1.1.10) 24-port PoE JGS524PE - PoE only on ports 1-12 (used for phones)
• Internet switch (10.1.1.20) 24-port 2510G-24 J9279A - ports 1-20 on Internet, 21-24 on LAN
• 10Gb link from xenserver01 to core switch port 25
• Core switch port 26 uplinked to switch-dephead port 52 (10Gb fibre)
• Core switch port 15 CCTV VLAN 192 untagged
• Core switch port 16 NetManager VLAN 192 untagged (192.168.0.1/24) and VoIP VLAN tagged (10.10.0.1/24)
• Core switch port 18 uplinks to Netgear port 24
• Dephead switch port 28 uplinks to UniFi in-wall AP with integrated switch (staffroom)
• Dephead switch full so 5-port gig switch uplinked from dephead port 16. Sockets S2 (ITSuite Prowise) and B14-B16 (in dephead office) are connected to this
• ITSuite ports 1-24 on top patch panel in dephead office (N.B. These are NOT B-01 to B-24). Connected to ports 1,3,5,7, etc. S1 and S2 ports for staff PC and Prowise. Sockets 4 and 16 unused and unpatched
• Dephead switch port 22 CCTV VLAN 192 untagged for DVR
• Sockets B-01 to B-24 to second patch panel down in dephead cab
• Printers start from IP 10.1.2.1
• Netgear switch password is default of password
• Need code 47474 to enable printing to photocopier
• New wifi SSID: Fairstead House School, password Fa1r5tead

Internet

Old connection's router required VLAN 3981 (NetManager IP: 188.240.164.194). No longer used.

Ubiquiti ER-X EdgeRouter connected to switch-internet. Servers connect to switch-internet

300Mb/1000Mb leased line through Precedence.

• 255.255.255.248 /29 = netmask
• 80.209.150.97 - router (floating with VRRP)
• 80.209.150.98 - primary router
• 80.209.150.99 - to be used for backup connection when implemented
• 80.209.150.100 - NetManager
• 80.209.150.101 - NetScaler Gateway access.fairsteadhouse.co.uk.
• 80.209.150.102 - King's VPN link

Wifi

• Performance Hall, port B-09 (dephead switch port 18)
• Year 2, port B-03 (dephead switch port 6) - upstairs above staff room
• Year 1, port B-06 (dephead switch port 12)
• Main Hall, port B-13 (dephead switch port 26)
• Ponies, port B-02 (dephead switch port 4)
• Yearlings, port B-18 (dephead switch port 36)
• Reception, port V-14 (dephead switch port 10) - room next to playground, loose on windowsill
• Staffroom, direct connect to dephead switch port 28 (cable marked COACHHOUSE CCTV)
• Year 3, port A-33, port 13 on core switch - room above school office
• Science, port A-23, Netgear - loose on desk

Doors

• Performance Hall daisy-chained from AP in B-09
• Front door direct to A-22 on patch panel
• Coach House into staffroom UniFi in-wall HD AP
• Main building rear door into port A-11
• Middle coach house at bottom of stairs daisy-chained from AP in B-06
• Outside kitchen direct to B-11 on 2nd patch panel down in dephead

CCTV

• CCTV server 192.168.0.250 (analogue cameras) - user admin pass 2013, connected to core
• IP CCTV 192.168.0.252 and 192.168.0.253 with a server on 192.168.0.251 (connected port 22 dephead switch)

Sage and banking software

• To access Barclays bank, must use Firefox and install Gemalto Web Signer for Barclays. N.B. this is not the same as Gemalto software in general which appears to not be needed
• To access e-Banking from Sage, must tick Enable e-Banking on Bank tab within Company Settings in Sage: