# VLAN Device Assignment Map **Last Updated:** 2026-01-25 **Purpose:** Complete inventory of all network devices with VLAN assignments --- ## VLAN Summary | VLAN | Name | Subnet | Gateway | Purpose | Comment | |------|------|--------|---------|---------|---------| | 1 | Legacy | 192.168.31.0/24 | 192.168.31.1 | Current flat network | To be deprecated | | 10 | Mgmt | 192.168.10.0/24 | 192.168.10.1 | Infrastructure devices | Admin access only | | 20 | Trusted | 192.168.20.0/24 | 192.168.20.1 | Family personal devices | Full network access | | 25 | Trusted | 192.168.20.0/24 | 192.168.20.1 | Kids Devices| Full network access | | 30 | IoT | 192.168.30.0/24 | 192.168.30.1 | Smart home devices | Internet + limited local | | 35 | Cameras | 192.168.35.0/24 | 192.168.35.1 | Security cameras | Isolated, NVR access only | | 40 | Servers | 192.168.40.0/24 | 192.168.40.1 | Servers & printers | Service hosts | | 50 | Guest | 192.168.50.0/24 | 192.168.50.1 | Guest WiFi | Internet only | --- ## VLAN 10 - Management (Infrastructure) | Current IP | Target IP | MAC Address | Device | Notes | Comment | |------------|-----------|-------------|--------|-------|---------| | 192.168.31.1 | 192.168.10.1 | 78:9A:18:2C:A5:48 | HAP1 (hAP ax³) | Router | Gateway for all VLANs | | 192.168.31.4 | 192.168.10.10| 02:42:C0:A8:1F:04 | AdGuard Home | DNS (Unraid) | Secondary DNS | | 192.168.31.6 | 192.168.10.2| 18:FD:74:54:3D:BC | CAP XL ac | Access point | CAPsMAN managed | | 192.168.31.9 | 192.168.10.3 | F4:1E:57:C9:BD:09 | CSS326-24G-2S+ | 24-port switch | Room distribution | | 192.168.31.22 | 192.168.10.4 | 1C:2A:A3:1E:78:67 | ZX1 (ZX-SWTGW218AS) | 8-port 2.5G switch | Server rack | | 192.168.31.2 | 192.168.10.20 | A8:B8:E0:02:B6:15 | XTRM-U (Unraid) | Main server | Docker host, NAS | | 192.168.31.20 | 192.168.10.200 | 48:DA:35:6F:BE:50 | NanoKVM | Remote KVM | IPMI alternative | | 172.17.0.2 | - | 46:D0:27:F7:1F:CA | AdGuard (MikroTik) | DNS (Router) | Primary DNS, DoH/DoT | | 172.17.0.3 | - | 0C:AB:39:8D:8C:FC | Tailscale (MikroTik) | VPN container | Remote access | --- ## VLAN 20 - Trusted (Family Devices) | Current IP | Target IP | MAC Address | Device | Owner | Comment | |------------|-----------|-------------|--------|-------|---------| | 192.168.31.79 | 192.168.20.10 | 82:6D:FB:D9:E0:47 | MacBook Air | Nora | Primary laptop | | 192.168.31.98 | 192.168.20.11 | AA:ED:8B:2A:40:F1 | Samsung S25 Ultra | Kaloyan | Primary phone | | 192.168.31.114 | 192.168.20.12 | F2:B8:14:61:C8:27 | iPhone | Dancho | | | 192.168.31.99 | 192.168.20.13 | 82:EC:EF:B5:F2:AF | MacBook Pro (WiFi) | Kaloyan | Work laptop wireless | | 192.168.31.108 | 192.168.20.14 | 90:91:64:70:0D:86 | Notebook | Kimi | | | 192.168.31.121 | 192.168.20.15 | 2A:2B:BA:86:D4:AF | iPhone | Kimi | | | 192.168.31.95 | 192.168.20.16 | 08:92:04:C6:07:C5 | MacBook Pro (LAN) | Kaloyan | Via Dell KVM dock | | 192.168.31.97 | 192.168.20.17 | 1C:83:41:32:F3:AF | Gaming PC | Kaloyan | Main bedroom | | 192.168.31.107 | 192.168.20.18 | A4:D1:D2:7B:52:BE | iPad | Compusbg | Work tablet | --- ## VLAN 25 - Trusted (Kids Devices) | Current IP | Target IP | MAC Address | Device | Owner | Comment | |------------|-----------|-------------|--------|-------|---------| | 192.168.31.114 | 192.168.20.12 | F2:B8:14:61:C8:27 | iPhone | Dancho | | | 192.168.31.108 | 192.168.20.14 | 90:91:64:70:0D:86 | Notebook | Kimi | | | 192.168.31.121 | 192.168.20.15 | 2A:2B:BA:86:D4:AF | iPhone | Kimi | | | 192.168.31.107 | 192.168.20.18 | A4:D1:D2:7B:52:BE | iPad | Compusbg | Work tablet | --- ## VLAN 30 - IoT (Smart Home) | Current IP | Target IP | MAC Address | Device | Location | Comment | |------------|-----------|-------------|--------|----------|---------| | 192.168.31.139 | 192.168.30.10 | 50:2C:C6:7A:55:39 | Air Conditioner | Living Room| GREE Electric| | 192.168.31.100 | 192.168.30.11 | B0:37:95:79:AF:9B | LG TV | Living Room | LAN (not connected) | | 192.168.31.118 | 192.168.30.12 | DC:03:98:6B:5A:3A | LG TV | Living Room | WiFi (active) | | 192.168.31.134 | 192.168.30.13 | D0:E7:82:F7:65:DD | Chromecast | Living Room | Streaming | | 192.168.31.104 | 192.168.30.14 | B0:4A:39:3F:9A:14 | Roborock S7 Vacuum | Living Room | Needs cloud access | | 192.168.31.105 | 192.168.30.20 | 94:27:70:1E:0C:EE | Bosch Smart Oven | Kitchen | Home Connect app | | 192.168.31.116 | 192.168.30.21 | C8:D7:78:40:65:40 | Bosch Dishwasher | Kitchen | Home Connect app | | 192.168.31.117 | 192.168.30.22 | C8:D7:78:D6:DC:FC | Bosch Washer | Kids Bathroom| Home Connect app | | 192.168.31.106 | 192.168.30.31 | 18:DE:50:5B:C8:A6 | Tuya Smart Device | - | OUI: Tuya Smart Inc. | | 192.168.31.113 | 192.168.30.32 | 38:1F:8D:04:6F:E4 | Tuya Smart Device | - | OUI: Tuya Smart Inc. | | 192.168.31.149 | 192.168.30.33 | D4:AD:FC:BE:13:B0 | Tuya Smart Device | - | OUI: Tuya Smart Inc. | | 192.168.31.106 | 192.168.30.34 | 18:DE:50:5B:C8:A6 | Tuya Smart Device | - | OUI: Tuya Smart Inc. | | 192.168.31.113 | 192.168.30.35| 38:1F:8D:04:6F:E4 | Tuya Smart Device | - | OUI: Tuya Smart Inc. | | 192.168.31.149 | 192.168.30.38| D4:AD:FC:BE:13:B0 | Shenzhen Intellirocks | - | Smart Device | | 192.168.31.101 | 192.168.30.39 | C8:5C:CC:52:EA:53 | Xiaomi Air Purifier | - | Mi Home app | --- ## VLAN 35 - Cameras (Security) | Current IP | Target IP | MAC Address | Device | Location | Comment | |------------|-----------|-------------|--------|----------|---------| | 192.168.31.68 | 192.168.35.10 | 48:9E:9D:0E:16:F7 | Reolink Doorbell | Front door | PoE powered | --- ## VLAN 40 - Servers (Services) | Current IP | Target IP | MAC Address | Device | Purpose | Comment | |------------|-----------|-------------|--------|---------|---------| | 192.168.31.19 | 192.168.40.19 | 64:4E:D7:D8:43:3E | HP LaserJet | Network printer | Wired connection | --- ## VLAN 50 - Guest (Isolated) | Current IP | Target IP | MAC Address | Device | Notes | Comment | |------------|-----------|-------------|--------|-------|---------| | 192.168.31.15 | 192.168.50.10 | AC:87:A3:77:8F:BD | Apple Device | Unknown owner | OUI: Apple Inc. | | 192.168.31.142 | 192.168.50.11 | 22:4C:7F:1D:85:8E | Unknown Device | Random MAC | Privacy MAC | | 192.168.31.109 | 192.168.50.12 | D0:C9:07:92:1A:8E | Unknown Device | Private vendor | Hidden OUI | | 192.168.31.110 | 192.168.50.13 | D0:C9:07:8C:C9:46 | Unknown Device | Private vendor | Same as .109 | | DHCP Pool | 192.168.50.100-200 | - | Guest devices | Dynamic | Internet only | --- ## Identified Unknown Devices (Moved to Guest) | Current IP | MAC Address | Vendor (OUI) | Likely Device | Assigned VLAN | Comment | |------------|-------------|--------------|---------------|---------------|---------| | 192.168.31.15 | AC:87:A3:77:8F:BD | Apple Inc. | iPhone/iPad/Mac | 50 (Guest) | Unknown owner | | 192.168.31.142 | 22:4C:7F:1D:85:8E | Locally Administered | Phone/Laptop | 50 (Guest) | Random MAC (privacy) | | 192.168.31.109 | D0:C9:07:92:1A:8E | Private (IEEE) | Unknown | 50 (Guest) | Hidden vendor | | 192.168.31.110 | D0:C9:07:8C:C9:46 | Private (IEEE) | Unknown | 50 (Guest) | Same vendor as .109 | --- ## MAC Address Quick Reference ### By VLAN (for switch port assignment) **VLAN 10 - Mgmt:** ``` 78:9A:18:2C:A5:48 HAP1 A8:B8:E0:02:B6:15 XTRM-U 18:FD:74:54:3D:BC CAP XL ac F4:1E:57:C9:BD:09 CSS326 1C:2A:A3:1E:78:67 ZX1 48:DA:35:6F:BE:50 NanoKVM ``` **VLAN 20 - Trusted:** ``` 82:6D:FB:D9:E0:47 Nora MacBook AA:ED:8B:2A:40:F1 Kaloyan S25 F2:B8:14:61:C8:27 Dancho iPhone 82:EC:EF:B5:F2:AF Kaloyan MacBook WiFi 90:91:64:70:0D:86 Kimi Notebook 2A:2B:BA:86:D4:AF Kimi iPhone 08:92:04:C6:07:C5 Kaloyan MacBook LAN 1C:83:41:32:F3:AF Kaloyan Game PC A4:D1:D2:7B:52:BE Compusbg iPad ``` **VLAN 30 - IoT:** ``` B0:37:95:79:AF:9B LG TV (LAN) DC:03:98:6B:5A:3A LG TV (WiFi) D0:E7:82:F7:65:DD Chromecast B0:4A:39:3F:9A:14 Roborock Vacuum 94:27:70:1E:0C:EE Bosch Oven C8:5C:CC:52:EA:53 Xiaomi Air Purifier C8:D7:78:D6:DC:FC Bosch Washer C8:D7:78:40:65:40 Bosch Dishwasher 50:2C:C6:7A:55:39 GREE Appliance 18:DE:50:5B:C8:A6 Tuya Device 1 38:1F:8D:04:6F:E4 Tuya Device 2 D4:AD:FC:BE:13:B0 Intellirocks Device ``` **VLAN 35 - Cameras:** ``` 48:9E:9D:0E:16:F7 Reolink Doorbell ``` **VLAN 40 - Servers:** ``` 64:4E:D7:D8:43:3E HP LaserJet ``` **VLAN 50 - Guest:** ``` AC:87:A3:77:8F:BD Apple Device (unknown) 22:4C:7F:1D:85:8E Random MAC device D0:C9:07:92:1A:8E Private Vendor 1 D0:C9:07:8C:C9:46 Private Vendor 2 ``` --- ## Device Count Summary | VLAN | Device Count | Comment | |------|--------------|---------| | 10 - Mgmt | 9 | Infrastructure only | | 20 - Trusted | 9 | Family devices | | 25 - Kids | 4 | Kids devices (subset of 20) | | 30 - IoT | 11 | Smart home devices | | 35 - Cameras | 1 | Security | | 40 - Servers | 1 | Services | | 50 - Guest | 4 | Unknown/unidentified devices | | **Total** | **35** | All devices categorized | --- ## OUI Lookup Reference | OUI Prefix | Vendor | Type | |------------|--------|------| | B0:37:95 | LG Electronics | TV/Displays (LAN) | | DC:03:98 | LG Innotek | TV/Displays (WiFi) | | 50:2C:C6 | GREE Electric Appliances (Zhuhai) | AC/Appliances | | 18:DE:50 | Tuya Smart Inc. | IoT Platform | | 38:1F:8D | Tuya Smart Inc. | IoT Platform | | D4:AD:FC | Shenzhen Intellirocks Tech | Smart Devices | | AC:87:A3 | Apple Inc. | Consumer Electronics | | D0:C9:07 | Private (IEEE hidden) | Unknown | | 22:xx:xx | Locally Administered | Random/Private MAC | --- ## Next Steps | Step | Action | Comment | |------|--------|---------| | 1 | ✅ Identify unknown devices | Completed via OUI lookup | | 2 | Decide WiFi strategy | Single SSID vs Multiple SSIDs | | 3 | Configure switch ports | VLAN tagging on CSS326 | | 4 | Test VLAN routing | Before full activation | | 5 | Update firewall rules | Inter-VLAN traffic control | --- ## Quick Assignment Table (Identified Devices) | VLAN | IP | Comment | |------|----|---------| | 30 (IoT) | 192.168.31.139 | GREE Air Conditioner | | 30 (IoT) | 192.168.31.106 | Tuya Smart Device #1 | | 30 (IoT) | 192.168.31.113 | Tuya Smart Device #2 | | 30 (IoT) | 192.168.31.149 | Shenzhen Intellirocks Smart Device | | 50 (Guest) | 192.168.31.15 | Apple device (unknown owner) | | 50 (Guest) | 192.168.31.142 | Privacy MAC device | | 50 (Guest) | 192.168.31.109 | Private vendor device | | 50 (Guest) | 192.168.31.110 | Private vendor device |