Files
infrastructure/docs/03-VLAN-DEVICE-ASSIGNMENT.md
Kaloyan Danchev 0c27218091 Update NanoKVM IP to 192.168.10.200
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-31 13:06:02 +02:00

10 KiB

VLAN Device Assignment Map

Last Updated: 2026-01-25
Purpose: Complete inventory of all network devices with VLAN assignments


VLAN Summary

VLAN Name Subnet Gateway Purpose Comment
1 Legacy 192.168.31.0/24 192.168.31.1 Current flat network To be deprecated
10 Mgmt 192.168.10.0/24 192.168.10.1 Infrastructure devices Admin access only
20 Trusted 192.168.20.0/24 192.168.20.1 Family personal devices Full network access
25 Trusted 192.168.20.0/24 192.168.20.1 Kids Devices Full network access
30 IoT 192.168.30.0/24 192.168.30.1 Smart home devices Internet + limited local
35 Cameras 192.168.35.0/24 192.168.35.1 Security cameras Isolated, NVR access only
40 Servers 192.168.40.0/24 192.168.40.1 Servers & printers Service hosts
50 Guest 192.168.50.0/24 192.168.50.1 Guest WiFi Internet only

VLAN 10 - Management (Infrastructure)

Current IP Target IP MAC Address Device Notes Comment
192.168.31.1 192.168.10.1 78:9A:18:2C:A5:48 HAP1 (hAP ax³) Router Gateway for all VLANs
192.168.31.4 192.168.10.10 02:42:C0:A8:1F:04 AdGuard Home DNS (Unraid) Secondary DNS
192.168.31.6 192.168.10.2 18:FD:74:54:3D:BC CAP XL ac Access point CAPsMAN managed
192.168.31.9 192.168.10.3 F4:1E:57:C9:BD:09 CSS326-24G-2S+ 24-port switch Room distribution
192.168.31.22 192.168.10.4 1C:2A:A3:1E:78:67 ZX1 (ZX-SWTGW218AS) 8-port 2.5G switch Server rack
192.168.31.2 192.168.10.20 A8:B8:E0:02:B6:15 XTRM-U (Unraid) Main server Docker host, NAS
192.168.31.20 192.168.10.200 48:DA:35:6F:BE:50 NanoKVM Remote KVM IPMI alternative
172.17.0.2 - 46:D0:27:F7:1F:CA AdGuard (MikroTik) DNS (Router) Primary DNS, DoH/DoT
172.17.0.3 - 0C:AB:39:8D:8C:FC Tailscale (MikroTik) VPN container Remote access

VLAN 20 - Trusted (Family Devices)

Current IP Target IP MAC Address Device Owner Comment
192.168.31.79 192.168.20.10 82:6D:FB:D9:E0:47 MacBook Air Nora Primary laptop
192.168.31.98 192.168.20.11 AA:ED:8B:2A:40:F1 Samsung S25 Ultra Kaloyan Primary phone
192.168.31.114 192.168.20.12 F2:B8:14:61:C8:27 iPhone Dancho
192.168.31.99 192.168.20.13 82:EC:EF:B5:F2:AF MacBook Pro (WiFi) Kaloyan Work laptop wireless
192.168.31.108 192.168.20.14 90:91:64:70:0D:86 Notebook Kimi
192.168.31.121 192.168.20.15 2A:2B:BA:86:D4:AF iPhone Kimi
192.168.31.95 192.168.20.16 08:92:04:C6:07:C5 MacBook Pro (LAN) Kaloyan Via Dell KVM dock
192.168.31.97 192.168.20.17 1C:83:41:32:F3:AF Gaming PC Kaloyan Main bedroom
192.168.31.107 192.168.20.18 A4:D1:D2:7B:52:BE iPad Compusbg Work tablet

VLAN 25 - Trusted (Kids Devices)

Current IP Target IP MAC Address Device Owner Comment
192.168.31.114 192.168.20.12 F2:B8:14:61:C8:27 iPhone Dancho
192.168.31.108 192.168.20.14 90:91:64:70:0D:86 Notebook Kimi
192.168.31.121 192.168.20.15 2A:2B:BA:86:D4:AF iPhone Kimi
192.168.31.107 192.168.20.18 A4:D1:D2:7B:52:BE iPad Compusbg Work tablet

VLAN 30 - IoT (Smart Home)

Current IP Target IP MAC Address Device Location Comment
192.168.31.139 192.168.30.10 50:2C:C6:7A:55:39 Air Conditioner Living Room GREE Electric
192.168.31.100 192.168.30.11 B0:37:95:79:AF:9B LG TV Living Room LAN (not connected)
192.168.31.118 192.168.30.12 DC:03:98:6B:5A:3A LG TV Living Room WiFi (active)
192.168.31.134 192.168.30.13 D0:E7:82:F7:65:DD Chromecast Living Room Streaming
192.168.31.104 192.168.30.14 B0:4A:39:3F:9A:14 Roborock S7 Vacuum Living Room Needs cloud access
192.168.31.105 192.168.30.20 94:27:70:1E:0C:EE Bosch Smart Oven Kitchen Home Connect app
192.168.31.116 192.168.30.21 C8:D7:78:40:65:40 Bosch Dishwasher Kitchen Home Connect app
192.168.31.117 192.168.30.22 C8:D7:78:D6:DC:FC Bosch Washer Kids Bathroom Home Connect app
192.168.31.106 192.168.30.31 18:DE:50:5B:C8:A6 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.113 192.168.30.32 38:1F:8D:04:6F:E4 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.149 192.168.30.33 D4:AD:FC:BE:13:B0 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.106 192.168.30.34 18:DE:50:5B:C8:A6 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.113 192.168.30.35 38:1F:8D:04:6F:E4 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.149 192.168.30.38 D4:AD:FC:BE:13:B0 Shenzhen Intellirocks - Smart Device
192.168.31.101 192.168.30.39 C8:5C:CC:52:EA:53 Xiaomi Air Purifier - Mi Home app

VLAN 35 - Cameras (Security)

Current IP Target IP MAC Address Device Location Comment
192.168.31.68 192.168.35.10 48:9E:9D:0E:16:F7 Reolink Doorbell Front door PoE powered

VLAN 40 - Servers (Services)

Current IP Target IP MAC Address Device Purpose Comment
192.168.31.19 192.168.40.19 64:4E:D7:D8:43:3E HP LaserJet Network printer Wired connection

VLAN 50 - Guest (Isolated)

Current IP Target IP MAC Address Device Notes Comment
192.168.31.15 192.168.50.10 AC:87:A3:77:8F:BD Apple Device Unknown owner OUI: Apple Inc.
192.168.31.142 192.168.50.11 22:4C:7F:1D:85:8E Unknown Device Random MAC Privacy MAC
192.168.31.109 192.168.50.12 D0:C9:07:92:1A:8E Unknown Device Private vendor Hidden OUI
192.168.31.110 192.168.50.13 D0:C9:07:8C:C9:46 Unknown Device Private vendor Same as .109
DHCP Pool 192.168.50.100-200 - Guest devices Dynamic Internet only

Identified Unknown Devices (Moved to Guest)

Current IP MAC Address Vendor (OUI) Likely Device Assigned VLAN Comment
192.168.31.15 AC:87:A3:77:8F:BD Apple Inc. iPhone/iPad/Mac 50 (Guest) Unknown owner
192.168.31.142 22:4C:7F:1D:85:8E Locally Administered Phone/Laptop 50 (Guest) Random MAC (privacy)
192.168.31.109 D0:C9:07:92:1A:8E Private (IEEE) Unknown 50 (Guest) Hidden vendor
192.168.31.110 D0:C9:07:8C:C9:46 Private (IEEE) Unknown 50 (Guest) Same vendor as .109

MAC Address Quick Reference

By VLAN (for switch port assignment)

VLAN 10 - Mgmt:

78:9A:18:2C:A5:48  HAP1
A8:B8:E0:02:B6:15  XTRM-U
18:FD:74:54:3D:BC  CAP XL ac
F4:1E:57:C9:BD:09  CSS326
1C:2A:A3:1E:78:67  ZX1
48:DA:35:6F:BE:50  NanoKVM

VLAN 20 - Trusted:

82:6D:FB:D9:E0:47  Nora MacBook
AA:ED:8B:2A:40:F1  Kaloyan S25
F2:B8:14:61:C8:27  Dancho iPhone
82:EC:EF:B5:F2:AF  Kaloyan MacBook WiFi
90:91:64:70:0D:86  Kimi Notebook
2A:2B:BA:86:D4:AF  Kimi iPhone
08:92:04:C6:07:C5  Kaloyan MacBook LAN
1C:83:41:32:F3:AF  Kaloyan Game PC
A4:D1:D2:7B:52:BE  Compusbg iPad

VLAN 30 - IoT:

B0:37:95:79:AF:9B  LG TV (LAN)
DC:03:98:6B:5A:3A  LG TV (WiFi)
D0:E7:82:F7:65:DD  Chromecast
B0:4A:39:3F:9A:14  Roborock Vacuum
94:27:70:1E:0C:EE  Bosch Oven
C8:5C:CC:52:EA:53  Xiaomi Air Purifier
C8:D7:78:D6:DC:FC  Bosch Washer
C8:D7:78:40:65:40  Bosch Dishwasher
50:2C:C6:7A:55:39  GREE Appliance
18:DE:50:5B:C8:A6  Tuya Device 1
38:1F:8D:04:6F:E4  Tuya Device 2
D4:AD:FC:BE:13:B0  Intellirocks Device

VLAN 35 - Cameras:

48:9E:9D:0E:16:F7  Reolink Doorbell

VLAN 40 - Servers:

64:4E:D7:D8:43:3E  HP LaserJet

VLAN 50 - Guest:

AC:87:A3:77:8F:BD  Apple Device (unknown)
22:4C:7F:1D:85:8E  Random MAC device
D0:C9:07:92:1A:8E  Private Vendor 1
D0:C9:07:8C:C9:46  Private Vendor 2

Device Count Summary

VLAN Device Count Comment
10 - Mgmt 9 Infrastructure only
20 - Trusted 9 Family devices
25 - Kids 4 Kids devices (subset of 20)
30 - IoT 11 Smart home devices
35 - Cameras 1 Security
40 - Servers 1 Services
50 - Guest 4 Unknown/unidentified devices
Total 35 All devices categorized

OUI Lookup Reference

OUI Prefix Vendor Type
B0:37:95 LG Electronics TV/Displays (LAN)
DC:03:98 LG Innotek TV/Displays (WiFi)
50:2C:C6 GREE Electric Appliances (Zhuhai) AC/Appliances
18:DE:50 Tuya Smart Inc. IoT Platform
38:1F:8D Tuya Smart Inc. IoT Platform
D4:AD:FC Shenzhen Intellirocks Tech Smart Devices
AC:87:A3 Apple Inc. Consumer Electronics
D0:C9:07 Private (IEEE hidden) Unknown
22:xx:xx Locally Administered Random/Private MAC

Next Steps

Step Action Comment
1 Identify unknown devices Completed via OUI lookup
2 Decide WiFi strategy Single SSID vs Multiple SSIDs
3 Configure switch ports VLAN tagging on CSS326
4 Test VLAN routing Before full activation
5 Update firewall rules Inter-VLAN traffic control

Quick Assignment Table (Identified Devices)

VLAN IP Comment
30 (IoT) 192.168.31.139 GREE Air Conditioner
30 (IoT) 192.168.31.106 Tuya Smart Device #1
30 (IoT) 192.168.31.113 Tuya Smart Device #2
30 (IoT) 192.168.31.149 Shenzhen Intellirocks Smart Device
50 (Guest) 192.168.31.15 Apple device (unknown owner)
50 (Guest) 192.168.31.142 Privacy MAC device
50 (Guest) 192.168.31.109 Private vendor device
50 (Guest) 192.168.31.110 Private vendor device