LAN Layout & Gateway

LAN Layout & Gateway

🌐 Internet Edge

• ISP: AT&T Fiber (1Gbps Up/Down)
• Gateway/ONT: HUMAX BGW320-500 (Located in Sunroom)
• Mode: NOT in Pass-through mode (Routing IPv4 on 192.168.1.0/24)

🛡️ Core Routing (Server Closet)

• Device: Protectli FW2B (Pluto)
• OS: Ubuntu 24.04 LTS (ZFS on Root)
• WAN IP: 192.168.1.x (Static from AT&T Gateway)
• Internal LAN: 192.168.13.0/24

Core Services

• Firewall: nftables
• DHCP: Technitium DHCP
• DNS: Technitium DNS (Split-Horizon, authoritative for *.flora.family)
• VPN: Wireguard for remote access (Auto-joins on Macbook off-LAN)
• Monitoring: Beszel-agent + Vector (Shipping to ClickHouse)
• Backup: Syncoid/Backbot pushing to Luna

📡 Physical Switching & Wireless

• Switch: 24-port Gigabit Managed Switch with 12x PoE+ ports.
• AP: 2x Grandstream Mesh Access Points (PoE powered).
• VLAN Status: Currently flat network; Phase 1 complete. Segmentation planned for Phase 2 (post-2026 Move).