Page 1 of 2

Static or Dynamic IP?

Posted: Fri Mar 14, 2008 12:14 pm
by bhall
I'm calling various DSL providers in the area in preparation for deploying broadband Internet connections in the Carrollton Texas Stake (Dallas area). I was wondering if it mattered if the connection had a static or dynamic IP address. I would imagine not, but I just wanted to make sure.

On another note, the "LDS-only" connection type seems to be the best option for clerks offices (though not for Family History Centers) because of the obvious dangers presented. Any thoughts regarding this?

Thank you,

Brian Hall
Stake Technology Specialist
Carrollton Texas Stake

Posted: Fri Mar 14, 2008 12:52 pm
by russellhltn
I haven't seen any indication that static/dynamic makes any difference.

As for what connection is best for clerks only, that depends on just what benefit is desired from the connection. While LDS-Only is more secure, some things that you may loose:
  • On-line white pages to locate members who have moved
  • Emergency Preparedness sites
  • Personal emails which may be used for church business

Posted: Fri Mar 14, 2008 2:39 pm
by nelsonjh-p40
Both dynamic and static IP assignments will work fine with the Church-managed firewall. A few things to consider… The Church-managed firewall is configured to look for a dynamic IP automatically. This will result in a very simple install of the firewall.

Static will require some manual programming of the firewall. The Install guide that is included with the firewall will assist, however, the interface to the firewall has changed from the one that is shown in the install guide which will cause some confusion. Adding a static IP will require a console connection and some programming. You will need to contact the Global Service Desk and they will be able to help you.

Posted: Fri Mar 14, 2008 2:57 pm
by jbh001
bhall7 wrote:IOn another note, the "LDS-only" connection type seems to be the best option for clerks offices (though not for Family History Centers) because of the obvious dangers presented. Any thoughts regarding this?
As a ward clerk, I regularly use the post office's website to standardize addresses on ward records. Being able to access this directly from clerk's computer instead of having to take a printout home, update it, and then go back to the church to enter the updates would greatly simplify this.

While the clerks computer does not need to access a huge number of websites, I personally would like the following sites white-listed and accessible from the clerk's computer:

usps.com
canadapost.ca
maps.google.com
mapquest.com
superpages.com
whitepages.com

I also use usps.com a lot to clean up place names and find county names for birth places and marriage places. I do this by entering general delivery for the address line, fill in the city and state, then when the results window pops up, I click on the Mailing Industry Information link to get the county name.

Filtering Options

Posted: Fri Mar 14, 2008 2:58 pm
by danpass
bhall7 wrote:On another note, the "LDS-only" connection type seems to be the best option for clerks offices (though not for Family History Centers) because of the obvious dangers presented. Any thoughts regarding this?
Our Stake President opted for the "LDS Extended Access" option. We decided to place labels on the wall plates where we installed network jacks. The labels state "Internet Connection For Church Use Only". In addition to clerk offices, we installed connections in our chapels, meetinghouse libraries and RS rooms. In the stake center we did the high council room and another building a class room that the wards in that building use for family history classes. When we announced that we now had Internet access in the meetinghouses we also let everyone know that it was filtered. So far, we have not had any problems that I am aware of. The non-clerk office connections have the highest potential for misuse. If we do start having problems, we'll have to disconnect them at the patch panel and only connect them when they are needed for approved uses.

Posted: Fri Mar 14, 2008 3:08 pm
by russellhltn
jbh001 wrote:While the clerks computer does not need to access a huge number of websites, I personally would like the following sites white-listed and accessible from the clerk's computer:
I would like to see the ability to control the white-list at a local level.

Posted: Fri Mar 14, 2008 3:19 pm
by The_Earl
danpass wrote:...The non-clerk office connections have the highest potential for misuse. If we do start having problems, we'll have to disconnect them at the patch panel and only connect them when they are needed for approved uses.
It might be possible to implement MAC filtering on the wired connections as well, depending on what your hardware looks like. It has the same security risks as wireless MAC filtering, but it might allow you to whitelist or blacklist problems without resorting to the patch panel.

Posted: Sat Mar 15, 2008 9:11 pm
by hugh-p40
I think most internet providers are going to charge more for a static IP address, and I can't see that it is needed.

Posted: Sat Mar 15, 2008 9:14 pm
by hugh-p40
danpass wrote:In addition to clerk offices, we installed connections in our chapels, meetinghouse libraries and RS rooms. In the stake center we did the high council room and another building a class room that the wards in that building use for family history classes.

Did you hire a contractor to run the network in the building or did you do it yourself? Were the facilities people involved?

Who ran network wiring

Posted: Sun Mar 16, 2008 8:20 pm
by danpass
hugh wrote:Did you hire a contractor to run the network in the building or did you do it yourself? Were the facilities people involved?
We notified the FM director of our intent to wire the buildings. We were instructed to have the work performed by a licensed contractor and confirm that they carried worker's comp insurance. I don't know if this is church-wide policy of up to the individual FM group.

The electrician pulled all the cables and I did all the termination work to help cut down on the cost.