Re: [Coworking] Network, Server, Authentication Recommendations
Chris, It sounds like you need dedicated IT help and I don't think a remote consultant will cut it. I know that's a tall order but what you are asking for is extensive. It's too much to expect Nexudus (or any software platform) to pick up the slack or that you can just hire someone to build it and then it will hum along without maintenance. I know most spaces do not have an IT person and run in to similar issues. The best strategy I've seen to operate without help is to greatly simplify things. That means giving up on a lot of the things you are asking for here even though they are pretty straight forward. But hosting a dinner for 200 people is straight forward... if you are a catering company. When I get more settled up here in Vancouver I'd like to pull together a collective of IT professionals helping Coworking spaces. If anyone is interested, please reach out. Jacob --- Office Nomads - Individuality without Isolation http://www.officenomads.com - (206) 323-6500 On Wed, Oct 11, 2017 at 4:02 PM, Chris Adams wrote: > Hello, my name is Chris Adams. My business partners and I recently opened > a coworking space in Baton Rouge, Louisiana, and I'm looking for some > advice on network setup. Any suggested companies or people that have an > understanding of coworking and/or are recommended by space owners are > welcome as well. A little bio: We've been open since July 2017, and I have > tried multiple solutions found online without finding the solution that I > believe is right for me. I'm hoping to get advice or information from other > owners and space managers to help determine our space's precise needs, and > we are looking to hire for services and/or professional advice. However, we > are a young company, and I'm trying to waste as little money as possible > and avoid paying for things I do not need. > > *Our Current Setup:* > >- Nexudus Software to manage users, billing, etc. >- Mikrotik router with hotspot for Nexudus wifi checkin >- 1 Managed Ubiquiti Unifi 24-port Switch >- 1 Managed Ubiquiti Unifi PoE Switch >- 4 SIP VoIP Polycom Desktop Phones >- 1 SIP VoIP Polycom Soundstation 5000 Phone >- Xerox WorkCentre 6515 DN MFP connected via LAN >- One on-site Ubuntu server >- Ezeep for printer management w/ Nexudus integration >- Five VLANs (all w/ dedicated subnet & DHCP): > - Our admin VLAN w/ dedicated SSID > - Hotspot VLAN w/ dedicated SSID > - Client1 Admin VLAN w/ dedicated SSID > - Client1 Staff VLAN w/ dedicated SSID > - Client 2 VLAN w/ wired ethernet access only > > *Current Setup Notes:* > >- I hired an IT engineering firm based in Austin to help remotely >because I was having problems with the MikroTik/Ubiquiti combo (i.e. Unifi >software completely stopped working after a couple of weeks, MikroTik >hotspot was buggy) and they fixed those issues at a pretty hefty price. >They hinted that they though my network setup was unusual, but I wanted to >be sure of exactly what needs to change before hiring them (or someone >else) to assist with the process. >- I have a Unifi Security Gateway which was replaced by the MikroTik. >USG was purchased before I chose Nexudus as my management system. >- All users are running either Windows 10 (desktop & mobile), Mac OSX, >and have various mobile devices. >- I chose VLAN setup because my clients brought their own >printers/copiers and wanted to be able to share the printers and files with >each other without the risk of unauthorized access. >- The MikroTik/Nexudus Hotspot is set up to block traffic between >clients connected to that subnet. I could program everything EXCEPT the >Polycom SoundStation to bypass hotspot authentication and connect to the >internet on the hotspot network. I did this to prevent users from >connecting their devices directly to outgoing ethernet ports in the phones >to bypass hotspot authentication. >- I have no ability to track and charge for copies or received faxes >on the WorkCentre. I mistakenly thought the model I purchased supported >document codes and accounting features. It does have user management with >very limited permission options, a very disorganized event log, and support >for common authentication protocols such as LDAP. > > *Plans and Goals:* > >- We're switching from Nexudus to Proximity Space soon, which will >eliminate the eZeep integration and various other features built into >Nexudus. I have two old Microsoft Server boxes with decent storage, ram, >and processors that I would like to use for file and print servers (with >central user authentication, group policies (shared folder size limits, >print limits and policies, etc.), and a CRM. >- I think the server should be Linux based due to the required >compatibility with Windows, Mac OSX, Linux, and mobile device clients. I >don't want anyone to l
[Coworking] Network, Server, Authentication Recommendations
Hi Chris, Just curious why you had a bad experience with Nexudus? The platform integrates nicely with MikroTik devices. We’re experimenting with getting MT to play well with non-MT routers but if it works should be good all around system for Management & security of any shared work space. https://disqus.com/home/discussion/nexudusspaceshelp/nexudus_spaces_helps_you_manage_and_promote_your_coworking_space_grow_your_network_build_a_profe_601/ -- You received this message because you are subscribed to the Google Groups "Coworking" group. To unsubscribe from this group and stop receiving emails from it, send an email to coworking+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[Coworking] Network, Server, Authentication Recommendations
Hello, my name is Chris Adams. My business partners and I recently opened a coworking space in Baton Rouge, Louisiana, and I'm looking for some advice on network setup. Any suggested companies or people that have an understanding of coworking and/or are recommended by space owners are welcome as well. A little bio: We've been open since July 2017, and I have tried multiple solutions found online without finding the solution that I believe is right for me. I'm hoping to get advice or information from other owners and space managers to help determine our space's precise needs, and we are looking to hire for services and/or professional advice. However, we are a young company, and I'm trying to waste as little money as possible and avoid paying for things I do not need. *Our Current Setup:* - Nexudus Software to manage users, billing, etc. - Mikrotik router with hotspot for Nexudus wifi checkin - 1 Managed Ubiquiti Unifi 24-port Switch - 1 Managed Ubiquiti Unifi PoE Switch - 4 SIP VoIP Polycom Desktop Phones - 1 SIP VoIP Polycom Soundstation 5000 Phone - Xerox WorkCentre 6515 DN MFP connected via LAN - One on-site Ubuntu server - Ezeep for printer management w/ Nexudus integration - Five VLANs (all w/ dedicated subnet & DHCP): - Our admin VLAN w/ dedicated SSID - Hotspot VLAN w/ dedicated SSID - Client1 Admin VLAN w/ dedicated SSID - Client1 Staff VLAN w/ dedicated SSID - Client 2 VLAN w/ wired ethernet access only *Current Setup Notes:* - I hired an IT engineering firm based in Austin to help remotely because I was having problems with the MikroTik/Ubiquiti combo (i.e. Unifi software completely stopped working after a couple of weeks, MikroTik hotspot was buggy) and they fixed those issues at a pretty hefty price. They hinted that they though my network setup was unusual, but I wanted to be sure of exactly what needs to change before hiring them (or someone else) to assist with the process. - I have a Unifi Security Gateway which was replaced by the MikroTik. USG was purchased before I chose Nexudus as my management system. - All users are running either Windows 10 (desktop & mobile), Mac OSX, and have various mobile devices. - I chose VLAN setup because my clients brought their own printers/copiers and wanted to be able to share the printers and files with each other without the risk of unauthorized access. - The MikroTik/Nexudus Hotspot is set up to block traffic between clients connected to that subnet. I could program everything EXCEPT the Polycom SoundStation to bypass hotspot authentication and connect to the internet on the hotspot network. I did this to prevent users from connecting their devices directly to outgoing ethernet ports in the phones to bypass hotspot authentication. - I have no ability to track and charge for copies or received faxes on the WorkCentre. I mistakenly thought the model I purchased supported document codes and accounting features. It does have user management with very limited permission options, a very disorganized event log, and support for common authentication protocols such as LDAP. *Plans and Goals:* - We're switching from Nexudus to Proximity Space soon, which will eliminate the eZeep integration and various other features built into Nexudus. I have two old Microsoft Server boxes with decent storage, ram, and processors that I would like to use for file and print servers (with central user authentication, group policies (shared folder size limits, print limits and policies, etc.), and a CRM. - I think the server should be Linux based due to the required compatibility with Windows, Mac OSX, Linux, and mobile device clients. I don't want anyone to lose their current local user accounts on their systems. I'm hoping there's a possibility for my server user to match their local user and work together. - I tested JumpCloud's Directory as a Service on my machine, and it took over my local user account which worked out great except for the fact I can no longer manage the local user account from my PC. I'm not sure members would like that. JC also offers Radius as a Service, which I thought may be beneficial to me in some way. - Is there an option other than VLANs and/or separate subnets to segregate network sharing? Do VLANs require a dedicated subnet? My server will not ping a client in another VLAN/subnet, but the client can ping my server from VLANS outside of the hotspot. I haven't tried to ping my server from clients in the hotspot. - I would like to have a dedicated VoIP network that only allows either voice only traffic or mac address authentication. - Security is a major concern for me. I do not understand linux's command line firewall configuration or MikroTik firewall configuration. QoS setup i