diff --git a/docs/20-DEVICE-MIGRATION-WORKSHEET.md b/docs/20-DEVICE-MIGRATION-WORKSHEET.md
new file mode 100644
index 0000000..b086047
--- /dev/null
+++ b/docs/20-DEVICE-MIGRATION-WORKSHEET.md
@@ -0,0 +1,161 @@
+# Device Migration Worksheet
+
+**Last Updated:** 2026-02-01
+**Purpose:** Planning worksheet for VLAN/IP reassignment
+
+---
+
+## All Devices by VLAN
+
+### VLAN 10 - Management (Infrastructure)
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| HAP1 (hAP ax³) | 78:9A:18:2C:A5:48 | 192.168.10.1 | 10 | | |
+| CAP XL ac | 18:FD:74:54:3D:BC | 192.168.10.2 | 10 | | |
+| CSS326-24G-2S+ | F4:1E:57:C9:BD:09 | 192.168.10.3 | 10 | | |
+| ZX1 (ZX-SWTGW218AS) | 1C:2A:A3:1E:78:67 | 192.168.10.4 | 10 | | |
+| AdGuard Home (Unraid) | 02:42:C0:A8:1F:04 | 192.168.10.10 | 10 | | |
+| XTRM-U (Unraid) | A8:B8:E0:02:B6:15 | 192.168.10.20 | 10 | | |
+| NanoKVM | 48:DA:35:6F:BE:50 | 192.168.10.200 | 10 | | |
+| AdGuard (MikroTik) | 46:D0:27:F7:1F:CA | 172.17.0.2 | 10 | | |
+| Tailscale (MikroTik) | 0C:AB:39:8D:8C:FC | 172.17.0.3 | 10 | | |
+
+---
+
+### VLAN 20 - Trusted (Family Devices)
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| MacBook Air (Nora) | 82:6D:FB:D9:E0:47 | 192.168.20.10 | 20 | | |
+| Samsung S25 Ultra (Kaloyan) | AA:ED:8B:2A:40:F1 | 192.168.20.11 | 20 | | |
+| iPhone (Dancho) | F2:B8:14:61:C8:27 | 192.168.20.12 | 20 | | |
+| MacBook Pro WiFi (Kaloyan) | 82:EC:EF:B5:F2:AF | 192.168.20.13 | 20 | | |
+| Notebook (Kimi) | 90:91:64:70:0D:86 | 192.168.20.14 | 20 | | |
+| iPhone (Kimi) | 2A:2B:BA:86:D4:AF | 192.168.20.15 | 20 | | |
+| MacBook Pro LAN (Kaloyan) | 08:92:04:C6:07:C5 | 192.168.20.16 | 20 | | |
+| Gaming PC (Kaloyan) | 1C:83:41:32:F3:AF | 192.168.20.17 | 20 | | |
+| iPad (Compusbg) | A4:D1:D2:7B:52:BE | 192.168.20.18 | 20 | | |
+
+---
+
+### VLAN 25 - Kids Devices
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| iPhone (Dancho) | F2:B8:14:61:C8:27 | 192.168.20.12 | 25 | | |
+| Notebook (Kimi) | 90:91:64:70:0D:86 | 192.168.20.14 | 25 | | |
+| iPhone (Kimi) | 2A:2B:BA:86:D4:AF | 192.168.20.15 | 25 | | |
+| iPad (Compusbg) | A4:D1:D2:7B:52:BE | 192.168.20.18 | 25 | | |
+
+---
+
+### VLAN 30 - IoT (Smart Home)
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| GREE Air Conditioner | 50:2C:C6:7A:55:39 | 192.168.30.10 | 30 | | |
+| LG TV (LAN) | B0:37:95:79:AF:9B | 192.168.30.11 | 30 | | |
+| LG TV (WiFi) | DC:03:98:6B:5A:3A | 192.168.30.12 | 30 | | |
+| Chromecast | D0:E7:82:F7:65:DD | 192.168.30.13 | 30 | | |
+| Roborock S7 Vacuum | B0:4A:39:3F:9A:14 | 192.168.30.14 | 30 | | |
+| Bosch Smart Oven | 94:27:70:1E:0C:EE | 192.168.30.20 | 30 | | |
+| Bosch Dishwasher | C8:D7:78:40:65:40 | 192.168.30.21 | 30 | | |
+| Bosch Washer | C8:D7:78:D6:DC:FC | 192.168.30.22 | 30 | | |
+| Tuya Smart Device | 18:DE:50:5B:C8:A6 | 192.168.30.31 | 30 | | |
+| Xiaomi Smart Device | 38:1F:8D:04:6F:E4 | 192.168.30.32 | 30 | | |
+| Tuya/Intellirocks Device | D4:AD:FC:BE:13:B0 | 192.168.30.33 | 30 | | |
+| Xiaomi Air Purifier | C8:5C:CC:52:EA:53 | 192.168.30.39 | 30 | | |
+
+---
+
+### VLAN 35 - Cameras (Security)
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| Reolink Doorbell | 48:9E:9D:0E:16:F7 | 192.168.35.10 | 35 | | |
+
+---
+
+### VLAN 40 - Servers (Services)
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| HP LaserJet | 64:4E:D7:D8:43:3E | 192.168.40.19 | 40 | | |
+
+---
+
+### VLAN 50 - Guest (Isolated)
+
+| Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|--------|-------------|------------|--------------|----------|--------|
+| Apple Device (unknown) | AC:87:A3:77:8F:BD | 192.168.50.10 | 50 | | |
+| Unknown Device (Privacy MAC) | 22:4C:7F:1D:85:8E | 192.168.50.11 | 50 | | |
+| Unknown Device | D0:C9:07:92:1A:8E | 192.168.50.12 | 50 | | |
+| Unknown Device | D0:C9:07:8C:C9:46 | 192.168.50.13 | 50 | | |
+
+---
+
+## Summary
+
+| VLAN | Name | Subnet | Device Count |
+|------|------|--------|--------------|
+| 10 | Mgmt | 192.168.10.0/24 | 9 |
+| 20 | Trusted | 192.168.20.0/24 | 9 |
+| 25 | Kids | 192.168.25.0/24 | 4 |
+| 30 | IoT | 192.168.30.0/24 | 12 |
+| 35 | Cameras | 192.168.35.0/24 | 1 |
+| 40 | Servers | 192.168.40.0/24 | 1 |
+| 50 | Guest | 192.168.50.0/24 | 4 |
+| **Total** | | | **40** |
+
+---
+
+## Flat List (All Devices)
+
+| # | Device | MAC Address | Current IP | Current VLAN | New VLAN | New IP |
+|---|--------|-------------|------------|--------------|----------|--------|
+| 1 | HAP1 (hAP ax³) | 78:9A:18:2C:A5:48 | 192.168.10.1 | 10 | | |
+| 2 | CAP XL ac | 18:FD:74:54:3D:BC | 192.168.10.2 | 10 | | |
+| 3 | CSS326-24G-2S+ | F4:1E:57:C9:BD:09 | 192.168.10.3 | 10 | | |
+| 4 | ZX1 (ZX-SWTGW218AS) | 1C:2A:A3:1E:78:67 | 192.168.10.4 | 10 | | |
+| 5 | AdGuard Home (Unraid) | 02:42:C0:A8:1F:04 | 192.168.10.10 | 10 | | |
+| 6 | XTRM-U (Unraid) | A8:B8:E0:02:B6:15 | 192.168.10.20 | 10 | | |
+| 7 | NanoKVM | 48:DA:35:6F:BE:50 | 192.168.10.200 | 10 | | |
+| 8 | AdGuard (MikroTik) | 46:D0:27:F7:1F:CA | 172.17.0.2 | 10 | | |
+| 9 | Tailscale (MikroTik) | 0C:AB:39:8D:8C:FC | 172.17.0.3 | 10 | | |
+| 10 | MacBook Air (Nora) | 82:6D:FB:D9:E0:47 | 192.168.20.10 | 20 | | |
+| 11 | Samsung S25 Ultra (Kaloyan) | AA:ED:8B:2A:40:F1 | 192.168.20.11 | 20 | | |
+| 12 | iPhone (Dancho) | F2:B8:14:61:C8:27 | 192.168.20.12 | 20/25 | | |
+| 13 | MacBook Pro WiFi (Kaloyan) | 82:EC:EF:B5:F2:AF | 192.168.20.13 | 20 | | |
+| 14 | Notebook (Kimi) | 90:91:64:70:0D:86 | 192.168.20.14 | 20/25 | | |
+| 15 | iPhone (Kimi) | 2A:2B:BA:86:D4:AF | 192.168.20.15 | 20/25 | | |
+| 16 | MacBook Pro LAN (Kaloyan) | 08:92:04:C6:07:C5 | 192.168.20.16 | 20 | | |
+| 17 | Gaming PC (Kaloyan) | 1C:83:41:32:F3:AF | 192.168.20.17 | 20 | | |
+| 18 | iPad (Compusbg) | A4:D1:D2:7B:52:BE | 192.168.20.18 | 20/25 | | |
+| 19 | GREE Air Conditioner | 50:2C:C6:7A:55:39 | 192.168.30.10 | 30 | | |
+| 20 | LG TV (LAN) | B0:37:95:79:AF:9B | 192.168.30.11 | 30 | | |
+| 21 | LG TV (WiFi) | DC:03:98:6B:5A:3A | 192.168.30.12 | 30 | | |
+| 22 | Chromecast | D0:E7:82:F7:65:DD | 192.168.30.13 | 30 | | |
+| 23 | Roborock S7 Vacuum | B0:4A:39:3F:9A:14 | 192.168.30.14 | 30 | | |
+| 24 | Bosch Smart Oven | 94:27:70:1E:0C:EE | 192.168.30.20 | 30 | | |
+| 25 | Bosch Dishwasher | C8:D7:78:40:65:40 | 192.168.30.21 | 30 | | |
+| 26 | Bosch Washer | C8:D7:78:D6:DC:FC | 192.168.30.22 | 30 | | |
+| 27 | Tuya Smart Device | 18:DE:50:5B:C8:A6 | 192.168.30.31 | 30 | | |
+| 28 | Xiaomi Smart Device | 38:1F:8D:04:6F:E4 | 192.168.30.32 | 30 | | |
+| 29 | Tuya/Intellirocks Device | D4:AD:FC:BE:13:B0 | 192.168.30.33 | 30 | | |
+| 30 | Xiaomi Air Purifier | C8:5C:CC:52:EA:53 | 192.168.30.39 | 30 | | |
+| 31 | Reolink Doorbell | 48:9E:9D:0E:16:F7 | 192.168.35.10 | 35 | | |
+| 32 | HP LaserJet | 64:4E:D7:D8:43:3E | 192.168.40.19 | 40 | | |
+| 33 | Apple Device (unknown) | AC:87:A3:77:8F:BD | 192.168.50.10 | 50 | | |
+| 34 | Unknown Device (Privacy MAC) | 22:4C:7F:1D:85:8E | 192.168.50.11 | 50 | | |
+| 35 | Unknown Device | D0:C9:07:92:1A:8E | 192.168.50.12 | 50 | | |
+| 36 | Unknown Device | D0:C9:07:8C:C9:46 | 192.168.50.13 | 50 | | |
+
+---
+
+## Notes
+
+- Devices marked with `20/25` in Current VLAN are in both Trusted and Kids VLANs (kids devices with family access)
+- MikroTik containers (AdGuard, Tailscale) use internal Docker IPs (172.17.0.x)
+- Fill in "New VLAN" and "New IP" columns to plan migration