[Michlib-l] segmenting public and staff networks

[Bruce MacDonald]

Have you contacted your library co-op? They probably know more about your
network setup, and might have a quick solution for you.

Bruce A. MacDonald
Assistant Director / Head of Circulation
Peter White Public Library
Marquette, Michigan

On Thu, Apr 9, 2015 at 6:13 PM, Helen Dewey <rhdewey at charter.net> wrote:

>   Bruce,
> I have been trying to find a way to separate the staff network from the
> public network, but I have not found a solution which lets us use only one
> broadband cable feed.  When I tried a switch and 2 routers (diagram I found
> online), the 2 networks were fighting each other for the Internet network
> feed.
> I would greatly appreciate being pointed to information which would help
> me segment the networks.
>
> Helen Dewey
> Accidental Techie
> and
> Benzonia Public Library Board Treasurer
> rhdewey at charter.net
>
>  *From:* Bruce MacDonald <bmacdona at gmail.com>
> *Sent:* Thursday, April 09, 2015 4:00 PM
> *To:* Ms. TJ Smith <shermandirector at winntel.net>
> *Cc:* Michlib-l <michlib-l at mcls.org>
> *Subject:* Re: [Michlib-l] torrenting wireless policies/suggestions?
>
>   Using your connection to pirate movies not only slows your network, but
> could land a library in hot water with the RIAA, who can report the
> activity to your internet service provider.
>
> Even though our wifi requires no password, we do have a "captive portal"
> system in place to display our wireless policy. There are many other
> options to do this.
>
> http://www.securedgenetworks.com/security-blog/Why-is-captive-portal-important-for-wireless-guest-access
>
> In the mean-time, you can dig into the settings in your wireless router. I
> believe you will be able to disable torrenting. Even though there are some
> legit uses for torrenting files, the vast majority is not traffic you want
> on your network, and you can possibly deal with exceptions as they come up
> (if they come up at all).
>
> http://kb.netgear.com/app/answers/detail/a_id/20483/~/set-up-a-netgear-router-to-block-access-to-certain-websites
>
> It sounds as though your staff machines are maybe using the same network
> connection and hardware as your public machines, and wifi. This could also
> create security headaches, and you have already seen with bandwidth needs
> for your ILS strained. Your network should be segmented, with each segment
> inaccessible to the other. This can be done virtually or physically. There
> are expensive and inexpensive ways to do it.
>
> https://www.techsoupforlibraries.org/cookbook-3/networking-and-security/bandwidth-management
>
>  Regards,
> Bruce
>
>   Bruce A. MacDonald
> Assistant Director / Head of Circulation
> Peter White Public Library
> Marquette, Michigan
>
> On Thu, Apr 9, 2015 at 10:40 AM, Ms. TJ Smith <shermandirector at winntel.net
> > wrote:
>
>> We have been seeing a large increase in internet traffic and our wireless
>> setup is simply not holding up. A particular problem is patrons using our
>> wireless for torrents. Do any of you have policies in place regarding a
>> limit on high-bandwidth activities? It is frustrating for our other
>> patrons, many of whom are using the connection for schooling and business
>> purposes, not to mention the staff trying to use VERSO.
>>
>> We currently have 6MB service through our provider (the highest package
>> offered in our area) connected to an old router and switch. We have 5
>> public computers, one catalog computer, and one staff station all
>> direct-wired through the switch and at any given time 2-10 wireless devices
>> attached. Our current router is a Netgear N300 WNR2000v2. We're looking to
>> upgrade and add a wireless access point to allow us better control, but
>> that does not make our current situation any easier to handle.
>>
>> I've been setting the lowest priority QoS for the torrent users when
>> possible to try to make the connection usable by other patrons. Does anyone
>> have any tips on how we can better get by in the meantime?
>>
>>
>> Ms. TJ Smith
>>
>> Library Director
>>
>> Sherman Township Library
>>
>> shermandirector at winntel.net
>>
>> (989) 644-5131
>>
>>
>>
>> _______________________________________________
>> Michlib-l mailing list
>> Michlib-l at mcls.org
>> http://mail2.mcls.org/mailman/listinfo/michlib-l
>>
>
>
> ------------------------------
> _______________________________________________
> Michlib-l mailing list
> Michlib-l at mcls.org
> http://mail2.mcls.org/mailman/listinfo/michlib-l
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail3.mcls.org/pipermail/michlib-l/attachments/20150413/27994ee4/attachment.html>