LAN Layout & Gateway
LAN Layout & Gateway
🌐 Internet Edge
- ISP: AT&T Fiber (1Gbps Up/Down)
- Gateway/ONT: HUMAX BGW320-500 (Located in Sunroom)
- Mode: NOT in Pass-through mode (Routing IPv4 on 192.168.1.0/24)
🛡️ Core Routing (Server Closet)
- Device: Protectli FW2B (Pluto)
- OS:
opnSenseUbuntu 24.04 LTS (ZFS on Root)
- WAN IP: 192.168.1.x (Static from AT&T Gateway)
- Internal LAN: 192.168.13.0/24
Core Services
DHCP: KeaTechnitium DHCP
(Managing 192.168.13.100-254)
DNS: UnboundTechnitium DNS
with(Split-Horizon, Overridesauthoritative for
internal domain access (*.flora.family)
VPN: Wireguard for remote access (Auto-joins on Macbook off-LAN)
Monitoring: Beszel-agent + Vector (Shipping to ClickHouse)
Backup: Syncoid/Backbot pushing to Luna
📡 Physical Switching & Wireless
- Switch: 24-port Gigabit Managed Switch with 12x PoE+ ports.
- AP: 2x Grandstream Mesh Access Points (PoE powered).
- VLAN Status: Currently flat network;
segmentationPhase 1 complete. Segmentation planned for Phase 2 (post-2026 Move.Move).
