# data[].attributes.body
Idjsjsjsj

# data[].attributes.attachment_link.title
Jisc community - An overview of VPN technology - 2012-03-12

# data[].attributes.body
THIS PART OF THE NETWORK PLAN IS NOW IN PLACE

PLEASE CHECK IT AGAIN TOMORROW AT 1PM TO CHECK FOR ANY CHANGES.

HAS TO BE DONE FOR MONDAY  !!!!!!!!!!!!!!!!!!!!!!!!!!

# data[].attributes.body
Firewall (as software) is configured at the router (hardware) to prevent unauthorised access to the network.

Configuration of ports using Stateful Packet Inspection Packet filtering – Ports: 119, 137, 138, 139 to deny access to server resources.

The firewall will sit in front of the wireless access point monitoring all requests from the internet and within the LAN.

Router (hardware) may have DCHP settings built in. The access point is the point of distribution for the wireless service/connection.

The access point may be a multifunction device - so router/ firewall/DHCP /WAP in one.

It is likely that you would choose to use a Wireless Access Point then a separate router with firewall built in and then either DHCP in the router, or DHCP as a server in the Server (machine/ hardware).

YOU MUST STATE THAT THERE WILL BE A guest account for patients to log into and a separate account for staff, using the tablets. See the section below and the suggestion that two WAP's wireless access points are installed rather than just one.

# data[].attributes.body
Note there will be Backup software listed in the Software Section of the plan - but this details how the whole service will be configured.

Back-up in place. It must be secure and backed up regularly using an automated back up routine. Key part of a disaster recovery plan. What to back up to – Tape, NAS (Network Attached Storage , Cloud Backup. Type of backup to run – either Normal or Incremental. Incremental will only backup those files that have the archive bit showing or flagged on the file. So the file has been used during that day and needs to be backed up. The files can be backed up to a tops drive and this can take place at the end of the day.  Should use tape rotation approach so backup three days in a row and then start from the first one again. That way you have two copies clear and you are limiting the number of tapes needed.  Replace between 3 and 5 tapes in use twice a year. Perform a check after backup – where the backup software within (windows / linux OS) will run a check of the data on the tape and check it matches that planned to be  backed up. If not it is run again until the data matches. Practice manager sole user to run backups – account for doing so. Store backups in safe, in locked room.

# data[].attributes.headline
Ethernet Connection - wired LAN. Background notes

# data[].attributes.subject
Ethernet Connection - wired LAN. Background notes

# data[].attributes.body
Ethernet connection established within Windows 10 settings control panel and the Ethernet properties Window on each machine. Alternately this can be achieved at the command prompt – selecting the correct TCP/IPversion, DNS server and IP addresses are configured.

Access to the control panel and command line is then disabled once all tested and connected.

# data[].attributes.headline
The LAN - background notes and discussion points. Closely related to the block on Ethernet Connection on Wired LAN. 

# data[].attributes.subject
The LAN - background notes and discussion points. Closely related to the block on Ethernet Connection on Wired LAN. 

# data[].attributes.body
PC’s connect to the LAN client-server model facilitated by TCP/IP and DHCPv6. Settings on each PC are configured The range The range of IPv6 addresses supplied for connecting to the network is then established. The number of devices connecting to the network is small. A class C address provides sufficient number of IP addresses to cover this number. The range could be set between 50 and 100 assignment is dynamic. Static assignment for the printers firewall and file server.

Tablets are configured to access only patient records using the primary WiFi service. All other features are disabled and locked by network admin / practice manager.

Routing in facilitated by RIPv1 classful routing protocol Class C. More than enough addresses can be assigned using this protocol. RIPv2 would provide the ability to use sub-nets not needed?

Service provided by the DNS system will flag the network and from there the PC’s on the network, with IPv6 addressing and DCHP server providing dynamic assignment for the PC’s on the LAN, running from the same server in the same space as the file server.

# data[].attributes.body
WI-FI internet connection (page 99) – tablets for staff and connection to the network, and connection to the WI-FI in reception for patients.

o   Staff Access - connect to a wireless access point (WAP) configured for their access to the practice network the WLAN or wireless local area network via a dedicated primary Wi-Fi network for all devices on the network used by staff. No other users will be able to access the Wi-Fi service on this primary network provided by the access point and therefore access to the network restricted. Staff are expected to use the guest user account if they bring their own devices to the practice.

o   Patients Access are provided with the opportunity to connect to WI-FI in reception with a guest access login to the network https://www.linksys.com/gb/support-article?articleNum=140727#q13

WiFI - configuration of the WAP for the patients must ensure that they are not able to connect to the practice network, server and files held within that network. This can be achieved by using the guest feature in the software configuration mentioned below. The SSID can be the same – the same access point but with a guest suffix. The patients are provided with the login required to access the guest account. Between 30 and 50 guest users can connect to the access point using this login.

Installation - When the wireless access point is installed – connecting the RJ45 socket to the Ethernet network cable on the network one of the first things that must be done is change the WAP administrator password as it will come in the box with a default user name and password. Only the practice manager should have access to this. The SSID name for the WAP device can be set at Wireless_Access or similar name. Guest mode is set to enabled. WPA (Wi-Fi protected access) or WPA2 is enabled.

o   Location of the access point – logically outside of the firewall so all requests for access to the network have to pass through the network firewall. This is not an issue for the patients and people waiting in the reception – they will just be granted access to the wired LAN. However it will be a problem for the staff with tablets wanting to connect to the network wirelessly so they access the network using the primary wireless access. It may be that there are two access points - one for staff access and one isolated for use by patients. Physically – in the reception area assuming that the AP has the capability to broadcast to reach the three treatment rooms and also provide a service to patients in the waiting room. If this is not the case, one AP can be established in the reception/waiting area and one where the server is based with improved wireless access signal likely in this way. Note for discussion - that it is possible to provide the entire network through a WLAN rather than a wired LAN. This has the drawback that if the wireless access point goes down, access in each of the treatment rooms will be lost. There are implications for managing a service like this - given that there is no network manager / technician on site.

o   Software configuration via a web interface with the WAP – knowing the IP address of the WAP this can be typed into a browser and the settings configured. The key setting will be enabling the DHCPv6 server to provide dynamic addressing for connection of patient devices wirelessly to the WAP. The WAP will be set up in infrastructure mode.

o   It may be that during testing of the signal and connection to that signal it is determined that the 802.11b channel needs to be changed to ensure the best signal is delivered. 1- 11 channels available, again configured via the web interface.

o   Consider multifunction access point