No.120 Ratwittaya School (Ti Ming), Tak
# Network troubleshooting and configuration at Ratwittaya School (Ti Ming), Tak
The problems we found:
1. The internet worked fine on its own, but behind the firewall it became very slow. Speed tests on the LAN behind the firewall dropped to 100-200 Mbps on a 1000/500 Mbps package. The ISP checked and found nothing wrong: their speed test reached full speed.
2. The WiFi (UniFi AC Pro access points) had such a weak signal that it was almost unusable. In the end the school asked for a separate internet line for each room, until it had almost 20 AIS circuits and was paying about 20,000 baht a month for internet.
(These access points actually work very well. The problem was that the previous installer configured the UniFi controller wrongly, and used a UniFi Cloud Key (UC-CK) as the controller, which tends to hang after running for a long time.)
3. There were no VLANs separating WiFi and LAN. When something went wrong, the teacher in charge could not tell where the problem was, because the whole building was a single /23 subnet. I was stunned when I first logged in remotely. It is a private school with thousands of students, plus teachers and staff, and interactive touch screens (Android / Windows) that the teachers use in class.
All of this was the puzzle we had to analyse and solve. We discussed it with the school's IT teacher and agreed how to start: since the previous installer had tried and failed to fix it, the school asked us to configure building 4 first, to see whether it would work well after the new configuration.
After we reset the firewall and UniFi controller configuration, the problems were gone: behind the firewall the internet ran at full speed, and the WiFi signal was stronger and worked well. The school immediately asked us to configure building 3 as well.
Summary of the configuration changes:
1. Cleared the old firewall configuration and split the network into VLANs: vlan222 computer room, vlan223 WiFi for teachers, vlan224 WiFi for students, vlan225 WiFi for IoT devices and smart screens.
2. Removed the UniFi Cloud Key (UC-CK) and moved the controller to the cloud.
3. And then? With the configuration done, how could the teacher in charge keep an eye on the system? We built a cloud monitoring system for them. If we do it, we do it all the way.
# Need a complex system set up? Get in touch.
# Tel +66 84-1710630
# Cloud by DigitalOcean
# Cloud UniFi Server
# Cloud Monitor
# Solo config by "Psycho;"
The problems we found:
1. The internet worked fine on its own, but behind the firewall it became very slow. Speed tests on the LAN behind the firewall dropped to 100-200 Mbps on a 1000/500 Mbps package. The ISP checked and found nothing wrong: their speed test reached full speed.
2. The WiFi (UniFi AC Pro access points) had such a weak signal that it was almost unusable. In the end the school asked for a separate internet line for each room, until it had almost 20 AIS circuits and was paying about 20,000 baht a month for internet.
(These access points actually work very well. The problem was that the previous installer configured the UniFi controller wrongly, and used a UniFi Cloud Key (UC-CK) as the controller, which tends to hang after running for a long time.)
3. There were no VLANs separating WiFi and LAN. When something went wrong, the teacher in charge could not tell where the problem was, because the whole building was a single /23 subnet. I was stunned when I first logged in remotely. It is a private school with thousands of students, plus teachers and staff, and interactive touch screens (Android / Windows) that the teachers use in class.
All of this was the puzzle we had to analyse and solve. We discussed it with the school's IT teacher and agreed how to start: since the previous installer had tried and failed to fix it, the school asked us to configure building 4 first, to see whether it would work well after the new configuration.
After we reset the firewall and UniFi controller configuration, the problems were gone: behind the firewall the internet ran at full speed, and the WiFi signal was stronger and worked well. The school immediately asked us to configure building 3 as well.
Summary of the configuration changes:
1. Cleared the old firewall configuration and split the network into VLANs: vlan222 computer room, vlan223 WiFi for teachers, vlan224 WiFi for students, vlan225 WiFi for IoT devices and smart screens.
2. Removed the UniFi Cloud Key (UC-CK) and moved the controller to the cloud.
3. And then? With the configuration done, how could the teacher in charge keep an eye on the system? We built a cloud monitoring system for them. If we do it, we do it all the way.
# Need a complex system set up? Get in touch.
# Tel +66 84-1710630
# Cloud by DigitalOcean
# Cloud UniFi Server
# Cloud Monitor
# Solo config by "Psycho;"
