diff --git a/public_html/admin/downloads/INFRASTRUCTURE-REFERENCE.md b/public_html/admin/downloads/INFRASTRUCTURE-REFERENCE.md index 79694f9..33d8ab5 100644 --- a/public_html/admin/downloads/INFRASTRUCTURE-REFERENCE.md +++ b/public_html/admin/downloads/INFRASTRUCTURE-REFERENCE.md @@ -1,5 +1,5 @@ # INFRASTRUCTURE REFERENCE — COMPLETE SYSTEM MAP -**Last Updated:** 2026-07-06 (Jellyfin API token regenerated same day) +**Last Updated:** 2026-07-06 (added Section 14: full network equipment & client device inventory) **Owner:** Myron Blair — myronblair@outlook.com --- @@ -18,6 +18,7 @@ 11. [SSH Quick Reference](#11-ssh-quick-reference) 12. [Critical Credentials Master List](#12-critical-credentials-master-list) 13. [Git & Repository Management](#13-git--repository-management) +14. [Network Equipment & Client Device Inventory](#14-network-equipment--client-device-inventory) --- @@ -167,6 +168,25 @@ qm guest exec -- bash -c "cmd" # run command inside VM (requires QEMU ag ## 4. ON-PREMISE — VIRTUAL MACHINES +### VM 100 — SynchroNet (PVE1) +| Field | Value | +|-------|-------| +| **IP** | 10.48.200.112 | +| **OS** | Windows | +| **Purpose** | SynchroNet BBS (bulletin board system) | +| **Note** | VM is named "SynchroNet-50" in Proxmox but its real IP is `.112`, not `.50` — `.50` is an unrelated Raspberry Pi 5 hobby device (see Section 14). Confirmed 2026-07-06. | + +--- + +### VM 105 — Nginx Proxy Manager (PVE1) +| Field | Value | +|-------|-------| +| **IP** | 10.48.200.200 | +| **Purpose** | Reverse proxy management (NPM) | +| **Note** | Confirmed 2026-07-06; VM name `NPM-200` matches its IP correctly (unlike SynchroNet/Ollama above). | + +--- + ### VM 101 — Home Assistant (PVE1) | Field | Value | |-------|-------| @@ -882,4 +902,90 @@ sshpass -p 'Joker1974!!!' ssh root@10.48.200.90 \ **Known repo-hygiene issue:** `fusionpbx-config` bloated to ~166-196MB from repeatedly committing a large DB dump straight into history — see Section 10. +--- + +## 14. NETWORK EQUIPMENT & CLIENT DEVICE INVENTORY + +**Compiled 2026-07-06** from a live ARP scan off PVE1 (~90 hosts), MAC-vendor lookups, and direct confirmation from Myron. Built to support a future VLAN segmentation project — see `VLAN-Segmentation-Plan.docx` in the home folder for the full plan; this section is the durable factual record to carry forward (e.g. into JARVIS) independent of that plan's status. + +### 14.1 Core Network Equipment +| Device | Model | Role | +|--------|-------|------| +| Firewall | **FortiGate 60F** | Primary/active firewall — confirmed the top unit in the rack. A second Fortinet unit is stacked below it; its role is not yet identified — not confirmed as an HA pair. | +| Primary switch | **Cisco Catalyst 3560-E Series PoE-48** | 48-port, full PoE, enterprise-managed — full 802.1Q VLAN/trunk support | +| Secondary switch | **FortiSwitch 108F-FPOE** | 8-port PoE, FortiLink-managed | +| KVM switch | **TRENDnet TK-802R** | Physical console access to rack servers — not networked | +| WiFi extender 1 | **TP-Link RE305** — 10.48.200.16 | WiFi clients only, no wired devices | +| WiFi extender 2 | **TP-Link RE305** — 10.48.200.89 | WiFi clients only, no wired devices | +| WiFi extender 3 | **TP-Link RE305** — 10.48.200.93 | Wired network printers plugged into its Ethernet port; no WiFi clients on this unit | +| Wireless bridge | **Good Story Networks WB610H** — 10.48.200.80 | Links the main house network to the storage shed (a detached building). OEM manufacturer is Shenzhen LiWiFi Technology Co., Ltd (rebranded by Good Story Networks). Plan: once fully deployed, this bridge replaces the need for the RE305 units at .16 and .89 — see the VLAN plan doc for details. VLAN/802.1Q trunk capability not yet confirmed — check before relying on it for segmented WiFi. | + +**Note on RE305 units and VLANs:** consumer range extenders like the RE305 generally cannot map multiple SSIDs to separate VLANs over a trunk — they repeat one network. This matters if/when wireless VLAN segmentation is implemented; see the VLAN plan doc's "Wireless VLAN Feasibility" section. + +### 14.2 Client & Peripheral Device Inventory (by category) + +**Printers:** +| IP | Device | +|----|--------| +| 10.48.200.76 | Epson ET-3750 | +| 10.48.200.204 | HP LaserJet 500 Color MFP M570dn (wired to the RE305 at .93) | +| 10.48.200.205 | HP LaserJet M1536dnf MFP (wired to the RE305 at .93) | +| 10.48.200.201, .202 | Unidentified — likely more printers/peripherals on the same RE305 port, given the pattern above (not yet confirmed) | + +**Storage:** +| IP | Device | +|----|--------| +| 10.48.200.249 | Synology NAS | +| 10.48.200.41 | WD My Cloud — a second NAS alongside the Synology | + +**AV / Entertainment:** +| IP | Device | +|----|--------| +| 10.48.200.42, .72 | Vizio smart TVs | +| unknown | Pioneer VSX-822 AV Receiver — real MAC confirmed as `74:5E:1C:0E:7C:0B` (verified genuine Pioneer Corporation OUI), but this MAC never appeared in the 2026-07-06 ARP scan, so its current IP is unknown (likely idle/standby at scan time). **Correction:** it was initially misattributed to 10.48.200.100 based on a different vendor's MAC (Shenzhen Xunman Technology) found at that IP — that was wrong; .100 and .64 (which share that same Shenzhen Xunman MAC) remain unidentified. | + +**Smart home / IoT:** +| IP | Device | +|----|--------| +| 10.48.200.38 | Samsung SmartThings hub (MAC vendor: Physical Graph Corporation, the original SmartThings company) | +| 10.48.200.250, .251 | Goalake Smart Switch 1 and 2 | +| 10.48.200.5, .7, .8, .9, .36, .61, .74 | Generic ESP32/ESP8266-based smart plugs/sensors (Espressif chipset) | +| 10.48.200.14, .60 | Tuya Smart plugs/switches | +| 10.48.200.34 | Bouffalo Lab-chipset IoT device | +| 10.48.200.116 | FN-LINK-chipset IoT device | +| 10.48.200.6, .10, .15, .23, .24, .27, .28, .30, .31, .32, .37, .62, .82, .86, .87, .105 | TP-Link Tapo smart devices (16 total) | +| 10.48.200.17, .39, .40, .46, .53, .68, .71, .106, .115, .118 | Amazon devices (Echo/Fire TV/Kindle) | + +**Security cameras:** +| IP | Device | +|----|--------| +| 10.48.200.57, .78, .94, .95, .101, .103, .104 | Reolink cameras + NVR (7 addresses total — one of these is the NVR itself, not confirmed which). Cameras are PoE-connected directly to the Catalyst 3560-E, not cabled to the NVR; the NVR pulls streams over the network like any other client. Feeds are viewed both locally on the LAN and remotely via the Reolink app. | +| 10.48.200.21, .22 | Ring doorbell/camera — also viewed both locally and via the Ring app remotely | + +**VoIP (Yealink) — see Section 8 for extension details:** +`.2, .3, .43, .65, .83, .85` + +**Personal computers / hobby devices:** +| IP | Device | +|----|--------| +| 10.48.200.54 | Apple device (iPhone/iPad/Mac) | +| 10.48.200.66 | Dell PC | +| 10.48.200.52 | Intel-NIC PC | +| 10.48.200.45 | Microsoft device (Surface or Xbox — not yet confirmed which) | +| 10.48.200.50 | Raspberry Pi 5 — hobby/tinkering only, no production workload | + +**Still unidentified as of 2026-07-06** (MAC vendor lookup only, no direct confirmation yet): +| IP | Vendor signature | Notes | +|----|----|----| +| 10.48.200.13 | Murata Manufacturing | Embedded WiFi module — device unknown | +| 10.48.200.59 | Guangzhou Shiyuan Electronic | Often AV/display equipment — device unknown | +| 10.48.200.119 | Macherey-Nagel GmbH & Co. KG | A lab-equipment brand (chromatography/filtration) — unusual on a home network, device unknown | +| 10.48.200.77 | Liteon Technology | Could be a PC PSU with network mgmt, or a peripheral — device unknown | +| 10.48.200.64, .100 | Shenzhen Xunman Technology | Device unknown — NOT the Pioneer receiver (see AV section above) | +| 10.48.200.201, .202 | (shares MAC with the RE305 at .93 and the confirmed printers at .204/.205) | Likely more printers/peripherals, not confirmed | + +**Minor known artifact, low priority:** MAC `7a:e1:7e:44:08:29` is shared across 10.48.200.93 (RE305), .204/.205 (confirmed printers, benign RE305 bridge-mode behavior), and .251 (Goalake Smart Switch 2 — does NOT fit the "wired to the RE305" explanation, so this one specific overlap looks like a genuine duplicate/cloned MAC, common in ultra-budget IoT hardware). Worth a quick check of the Goalake switch's real MAC via its own admin UI at some point; not urgent. + +--- + *This document contains sensitive credentials. Store securely and do not share.*