Answers about Meetinghouse Internet

 

---

All content on this page is moving to clerksupport.lds.org under the Meetinghouse Technology topic. This page will be deleted at the end of October.

---

Meetinghouse Internet Benefits Policies Requirements Availability Get started Training Local insights Answers Primary Components Internet connectivity Firewall and installation guide Networking Wired Wireless Power line Related Topics Meetinghouse technology Local area implementation plans Products Roles and responsibilities Facilities zone Meetinghouse Webcast

In other languages: English (en) Español (es) Português (pt) Русский (ru) [edit]

General

I've heard that Internet connections are not permitted in meetinghouses. Is this correct?

No. There may be some locations where it is too expensive to install, but generally it is permitted where available at an appropriate cost.

If Internet connectivity is available and it has been implemented in my meetinghouse, does this guarantee that I will have access?

No. Your local priesthood leadership may choose to limit who has access to the Internet.

Who do I need to get permission from to get or to use Internet in a meetinghouse?

Your stake or area presidency or someone who has been delegated this responsibility.

What is the warranty for the components of Meetinghouse Internet?

Warranty information can be found on the Meetinghouse Internet warranty page.

Our meetinghouse is a shared facility with another Church office (FM, Family History Center, etc). Do we need a firewall for each office/service?

No. Departments and organizations are strongly encouraged to share Internet connections and firewalls.

General Troubleshooting

If my device isn't working correctly, what do I do?

1. Try to power cycle or reboot the device causing problems like the ISP modem, the meetinghouse firewall, network switches, and wireless access points. Simply unplug the device for about 60 seconds and then plug it back in. Restarting a computer has the same effect. Experience has shown that many hours of time and effort can be saved if you try this technique first.
2. It's also good to make sure that all of the devices are plugged into power outlets and are properly cabled from one device to another.
3. If at any time you feel unsure about what to do next, contact the Global Service Center

Internet connectivity

Selection

Can we use a wireless ISP such as Wi-Fi, satellite, or cellular?

Wireless options can be good for remote, rural, or less populated areas. Wireless connections are often more expensive for installation and reoccurring costs. Wireless connections also often experience slower speeds and higher latency (see Wikipedia article on latency).

Procurement

What if there are no high-speed ISPs in my location for a reasonable price?

There will be some areas that may not be able to get high-speed Internet for a reasonable price. If this is the case, you may not be able to have high-speed Internet until other options become available. Where justifiable, exceptions will be handled on a case-by-case basis.

What if the ISPs providing service in my location for a reasonable price cannot provide the recommended speeds?

There will be some areas that will not have ISPs that offer the speeds we are recommending. In this case, get the fastest you can get for a reasonable price or choose not to get it at all. To see recommended ISP speeds, visit Meetinghouse Internet connectivity.

What if the speeds I’m receiving from my ISP aren’t meeting my needs, even if they are advertised as meeting the “up to” recommendations?

Work with your ISP to see if they can meet your expectations better. If they can’t, you may want to see if another provider can. To see recommended ISP speeds, visit Meetinghouse Internet connectivity.

Installation

What if I can’t get free installation?

In some cases, free installation will not be possible, especially if the building is far away from ISP offices and other locations where service is offered. In such cases you may have to pay for installation. Make sure to consider how long you will likely use the connection when deciding whether to pay for installation. Also, the more they make you pay for installation, the shorter your contract should be (month-to-month is preferred).

Troubleshooting

What do I do (or have other people do) if I want to troubleshoot why a computer cannot connect to the Internet?

Go through the document Troubleshooting connections to meetinghouse Internet.

Firewall

General

Do I need to use a specific Church-provided firewall?

Yes. The Church provides a standard meetinghouse firewall which is currently the Cisco 881W. Facility Managers are being encouraged to replace older meetinghouse firewalls such as the Cisco PIX 501 or Cisco ASA 5505 no later than the end of 2013. The Cisco 881W firewall allows the Church to centrally manage and update these devices as needed. They are also required for new functionality that will be announced in the coming months. Contact your FM group to plan for their replacement.

Can I use a donated firewall?

Only if it's a Cisco 881, ASA 5505, or PIX 501. But please note that it will be more difficult and time consuming to set it up if it doesn't come through normal distribution channels.

What is the difference between a firewall and a wireless access point?

The meetinghouse firewall is a device used for networking, security, and web filtering. The wireless access point is a device used to allow computers and mobile devices with a wireless network card to access the capabilities of the firewall.

Does the firewall provide protection against inappropriate use of the Internet?

Yes. Meetinghouse firewalls will come equipped with Internet filtering that will prevent most inappropriate uses of the Internet.

Procurement

How do I order the meetinghouse firewall?

The meetinghouse firewall can only be purchased by facilities management groups via LDS eMarket.

Installation

How do I make sure a meetinghouse firewall is set up and configured properly?

1. Make sure the firewall is physically secured. It should be installed in a non-public area behind a locked door with limited access.
2. Make sure the connection to the Internet is plugged directly into the firewall or in other words that no devices are inserted in between it and the ISP allowing connections that bypass the firewall.
3. Check to make sure the filtering is turned on by going to http://filteraudit.cjclds.net. This site should be blocked. Example of blocked page
4. If you need additional assistance, contact the GSC.

Does the meetinghouse firewall need to be placed right next to the ISP modem?

No. In most cases it's preferred to have the meetinghouse firewall close to the ISP modem for convenience of setup and troubleshooting, but in some cases it may make sense to place the meetinghouse firewall in a different location. An example of this would be if you want to optimize the location of the integrated Wi-Fi that the 881W has. In such a case you would just need to make sure that you still have a network connection between the two devices (not to exceed 300 feet).

Can the meetinghouse firewall be mounted?

Yes. The Cisco 881W has two holes on the bottom that can be used for mounting. Older meetinghouse firewalls may require a mounting kit.

Should the meetinghouse firewall be plugged into a surge protector?

Yes.

Activation

Can I activate an 881W at one location and then move it to its permanent location?

Yes, if the ISPs at both locations use DHCP without PPPoE and you make sure to select the location where it will be located permanently. If either location requires the firewall to have a static IP address or to use PPPoe, this cannot be done.

Why do I keep getting an "Internet Connection Not Found" page when I try to activate my new meetinghouse firewall?

If the Cisco 881W meetinghouse firewall does not detect an Internet connection, the first screen you will see is the "Internet Connection Not Found" page where you have a few options to customize your connection to the Internet. This typically only happens if the ISP is not providing a dynamic IP address (DHCP). The options you can then customize are PPPoE, Static IP and CradlePoint.

Troubleshooting

What do I do if my meetinghouse firewall stops working?

Contact the Global Service Center to troubleshoot the problem or to order a replacement, if necessary.

Filtering

How do I make sure filtering is configured and working correctly?

While connected to the desired firewall, go to http://filteraudit.cjclds.net. This site should be blocked. Example of blocked page

If filtering does not seem to be working correctly at a meetinghouse, what do I do?

1. Make sure the computer you are testing from is going through the meetinghouse firewall.
2. Restart the meetinghouse firewall.
3. If it still doesn’t appear to be working correctly, contact the Global Service Center.

What if somebody is able to get to a site that I feel should be blocked?

You should never purposefully attempt to go to a website with inappropriate content, even for the purposes of testing to make sure the system is working correctly. The Church uses a service that specializes in prohibiting inappropriate sites. If Meetinghouse Internet is set up properly, you can trust that the Internet filter will block most inappropriate content. Beyond that, if there is a specific site that you wish to make sure is being blocked, you may do the following:

1. Send an email to WebFilter@sites.ldschurch.org with the following information:
2. Subject: Request to block website
3. Your name
4. Your E-mail address (you must include this in order to be notified if your request is approved)
5. The full URL of the website you are requesting to be blocked (not just the domain)
6. Description of Website
7. Reasons why it should be blocked

What if a site is blocked that I don't think should be blocked?

You should never purposefully attempt to go to a website with inappropriate content, even for the purposes of testing to make sure the system is working correctly. The Church uses a service that specializes in prohibiting inappropriate sites. If Meetinghouse Internet is set up properly, you can trust that the Internet filter will block most inappropriate content. Beyond that, if there is a specific site that you wish to make sure is being blocked, you may do the following:

1. Send an email to WebFilter@sites.ldschurch.org with the following information:
2. Subject: Request to unblock website
3. Your name
4. Your E-mail address (you must include this in order to be notified if your request is approved)
5. The full URL of the website you are requesting to be unblocked (not just the domain)
6. Description of Website
7. Reasons why it should be unblocked

Networking

How do I retro-fit an existing meetinghouse for high-speed Internet?

There are myriad of ways to retro-fit existing meetinghouses. The best solution will be based largely on what you are trying to achieve and what type of meetinghouse you have. In the near future we hope to have general best practices posted for all meetinghouses and specific recommendations posted for the most common types of meetinghouses. In the meantime, contact the Global Service Center to consult with a support representative or to schedule time with a meetinghouse technology engineer.

From whom do I need to get approval to begin implementing a meetinghouse network, including drilling holes in meetinghouse walls, mounting equipment on walls or ceilings, etc.?

Under the direction of the stake or area presidency, you must coordinate and get approval from your local facilities manager.

Can it be appropriate to have devices with static IP addresses connected to the firewall?

Yes. Static addresses are appropriate for devices that you may want to access via IP address such as printers, servers, and Internet enabled appliances (IEAs).

How many static and dynamic IP addresses are available for use with the meetinghouse firewall?

The default setup of the 881W includes 9 static addresses and 52 dynamic addresses. The available static addresses are the next 9 addresses after the gateway/firewall address. 52 addresses are available immediately after that through DHCP. If you need more addresses for any meetinghouse firewall, contact the connectivity team at the Global Service Center. With the older meetinghouse firewalls (PIX and ASA), the number of current addresses varies from location to location. You may contact the connectivity team at the Global Service Center if you need help determining IP addressing for a particular location.

Wireless

Is wireless allowed?

Yes, wireless 802.11 (Wi-Fi) is authorized.

Where should I install the wireless access point(s) in the building?

The best location for wireless access point(s) will vary by building configuration, building materials, and need.

In some meetinghouses a wireless device installed in a clerk's office or technology closet may provide all the wireless coverage needed. In some buildings, there may be attic space that will allow you to easily set up multiple access points in various locations. Stakes should conduct their own assessment of wireless coverage and consult with local FMs before major installation efforts.

How should a meetinghouse wireless device be configured?

Wireless devices should be set up by the Stake Technology Specialist (STS) or another individual designated by local leaders. The STS should ensure that wireless transmissions are encrypted using at least WPA, but preferably WPA2. Strong pass-phrases should be used and shared only with those whom local leaders wish to grant access.

If we install a wireless access point, does it still need to go through the firewall?

Yes. The wireless access point should always go through the firewall. If it does not, the connection will not be protected from intruders, will not have web filtering, and will be out of compliance with Church Internet policy.

Our meetinghouse is a shared facility with another Church office (FM, Family History Center, etc). Should we install the LDS Workforce wireless option or the meetinghouse wireless option?

When Church employees regularly work at the co-located facility, the LDS Workforce Wireless option should be implemented. When the co-located facility is a volunteer center (such as a family history center), then either the LDS Workforce Wireless option or the Meetinghouse Wireless option may be used.

How do I troubleshoot a wireless connection problem?

In order to get the Internet on a wireless device, there are several elements that need to be functioning properly. If any of the following are not, then you might have problems with your wireless connection: The ISP connection, the firewall, the access point, your computer/device, and the cabling between them. The best way to figure out what the problem is to figure out what is working correctly. If you can systematically figure out what isn't causing the problem, it will point you towards what is causing it.

For example, if I find that the Internet is not working on my laptop computer connecting to the meetinghouse wireless, one thing I could do is check to see if others are able to connect. If all of the other computers can connect, that means the problem is likely with just my computer and I should focus my troubleshooting on my wireless card and software. However, if other computers cannot connect to the Internet over wireless, there is likely something more systemic and I can continue testing elements until I figure out where the problem is and act accordingly.

How can I tell whether the wireless access point has failed or if it is an issue with the firewall?

You can connect a laptop or computer directly into one of the open ports on the back of the firewall. If the laptop or computer has network access and your wireless access point does not, the issue is with your wireless access point or the connection leading to it. You can also request that the Global Service Center (GSC) ping your firewall to verify that it is up and running properly. If it is, this indicates that the issue is likely with your wireless access point.

Once I've narrowed down the problem to the wireless access point, what other things can I do to troubleshoot the problem?

Once you're sure the problem is with the access point itself, consult the documentation that came with your access point for further troubleshooting steps. This will give you the best methods for troubleshooting and perhaps a support line to call for additional help. You can also look for additional support and documentation online by searching for the make and model of your wireless device.

Powerline

Are powerline networking solutions allowed in meetinghouses?

Yes, with approval from the facilities manager, if within the bounds of a stake's technology plan, powerline networking is authorized and is commonly used, especially in situations where conventional network cabling or wireless are especially difficult, expensive, or just won't work.

Can I use powerline adapters to connect wireless access points such as the 1041N to the meetinghouse firewall?

Yes, though it is preferable to connect wireless access points to the meetinghouse firewall with a wired network connection, using powerline may be a better workable solution in some cases. Note: Power over Ethernet can not be run through the powerline adapters.

Is there a limit to the number of powerline adapters or devices that can be attached to them on the same network?

This may vary but there is generally a limit of around ten devices which hopefully is more than enough to cover most needs.

Will powerline networking work with both PCs and Macs?

Yes, powerline simply delivers the network signal.