Skip to main content

LAN Layout & Gateway

LAN Layout & Gateway

🌐 Internet Edge

  • ISP: AT&T Fiber (1Gbps Up/Down)
  • Gateway/ONT: HUMAX BGW320-500 (Located in Sunroom)
  • Mode: NOT in Pass-through mode (Routing IPv4 on 192.168.1.0/24)

🛡️ Core Routing (Server Closet)

  • Device: Protectli FW2B (Pluto)
  • OS: Ubuntu 24.04 LTS (ZFS on Root)
  • WAN IP: 192.168.1.x164 (Static from AT&T Gateway)
  • Internal LAN: 192.168.13.0/24 (Native), 10.13.x.y (VLANs - Deploying)

Core Services

  • Firewall: nftables (v2 production Ruleset active)
  • DHCP: Technitium DHCP (192.168.13.0/24 scope active)
  • DNS: Technitium DNS (Split-Horizon,DNS-over-TLS authoritativeenabled forvia *.flora.family)Cloudflare/Google)
  • VPN:Identity: Wireguard for remote accessJumpCloud (Auto-joins on Macbook off-LAN)Active)
  • Monitoring: Beszel-agent + Vector (Shipping to ClickHouse)
  • Backup: Syncoid/BackbotSanoid pushing(OS snapshots and replication to LunaLuna)

📡 Physical Switching & Wireless

  • Switch: 24-port Gigabit Managed Switch with 12x PoE+ ports.
  • AP: 2x Grandstream Mesh Access Points (PoE powered).
  • VLAN Status: Currently flat network; Phase 1 complete. Segmentation planned for Phase 2Complete (post-2026Migration Move)to Ubuntu/ZFS). Transitioning to 10.13.x.y segmentation layout.
Back to top