Files
infrastructure/docs/03-VLAN-DEVICE-ASSIGNMENT.md
XTRM-Unraid 27853d5581
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Identify unknown devices via MAC OUI lookup
- 50:2C:C6 = GREE Electric (AC/appliance) → VLAN 30
- 18:DE:50, 38:1F:8D = Tuya Smart (IoT) → VLAN 30
- D4:AD:FC = Shenzhen Intellirocks → VLAN 30
- AC:87:A3 = Apple Inc. → VLAN 20
- 22:4C:7F = Locally Administered (random MAC) → VLAN 20
- D0:C9:07 = Private vendor → VLAN 30 (assumed IoT)

All 35 devices now categorized.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 19:37:58 +02:00

8.7 KiB

VLAN Device Assignment Map

Last Updated: 2026-01-25
Purpose: Complete inventory of all network devices with VLAN assignments


VLAN Summary

VLAN Name Subnet Gateway Purpose Comment
1 Legacy 192.168.31.0/24 192.168.31.1 Current flat network To be deprecated
10 Mgmt 192.168.10.0/24 192.168.10.1 Infrastructure devices Admin access only
20 Trusted 192.168.20.0/24 192.168.20.1 Family personal devices Full network access
30 IoT 192.168.30.0/24 192.168.30.1 Smart home devices Internet + limited local
35 Cameras 192.168.35.0/24 192.168.35.1 Security cameras Isolated, NVR access only
40 Servers 192.168.40.0/24 192.168.40.1 Servers & printers Service hosts
50 Guest 192.168.50.0/24 192.168.50.1 Guest WiFi Internet only

VLAN 10 - Management (Infrastructure)

Current IP Target IP MAC Address Device Notes Comment
192.168.31.1 192.168.10.1 78:9A:18:2C:A5:48 HAP1 (hAP ax³) Router Gateway for all VLANs
192.168.31.2 192.168.10.2 A8:B8:E0:02:B6:15 XTRM-U (Unraid) Main server Docker host, NAS
192.168.31.4 192.168.10.4 02:42:C0:A8:1F:04 AdGuard Home DNS (Unraid) Secondary DNS
192.168.31.6 192.168.10.6 18:FD:74:54:3D:BC CAP XL ac Access point CAPsMAN managed
192.168.31.9 192.168.10.9 F4:1E:57:C9:BD:09 CSS326-24G-2S+ 24-port switch Room distribution
192.168.31.22 192.168.10.22 1C:2A:A3:1E:78:67 ZX1 (ZX-SWTGW218AS) 8-port 2.5G switch Server rack
192.168.31.20 192.168.10.20 48:DA:35:6F:BE:50 NanoKVM Remote KVM IPMI alternative
172.17.0.2 - 46:D0:27:F7:1F:CA AdGuard (MikroTik) DNS (Router) Primary DNS, DoH/DoT
172.17.0.3 - 0C:AB:39:8D:8C:FC Tailscale (MikroTik) VPN container Remote access

VLAN 20 - Trusted (Family Devices)

Current IP Target IP MAC Address Device Owner Comment
192.168.31.79 192.168.20.10 82:6D:FB:D9:E0:47 MacBook Air Nora Primary laptop
192.168.31.98 192.168.20.11 AA:ED:8B:2A:40:F1 Samsung S25 Ultra Kaloyan Primary phone
192.168.31.114 192.168.20.12 F2:B8:14:61:C8:27 iPhone Dancho
192.168.31.99 192.168.20.13 82:EC:EF:B5:F2:AF MacBook Pro (WiFi) Kaloyan Work laptop wireless
192.168.31.108 192.168.20.14 90:91:64:70:0D:86 Notebook Kimi
192.168.31.121 192.168.20.15 2A:2B:BA:86:D4:AF iPhone Kimi
192.168.31.95 192.168.20.16 08:92:04:C6:07:C5 MacBook Pro (LAN) Kaloyan Via Dell KVM dock
192.168.31.97 192.168.20.17 1C:83:41:32:F3:AF Gaming PC Kaloyan Main bedroom
192.168.31.107 192.168.20.18 A4:D1:D2:7B:52:BE iPad Compusbg Work tablet
192.168.31.15 192.168.20.19 AC:87:A3:77:8F:BD Apple Device ? OUI: Apple Inc.

VLAN 30 - IoT (Smart Home)

Current IP Target IP MAC Address Device Location Comment
- 192.168.30.10 B0:37:95:79:AF:9B LG TV Living Room Not seen recently
192.168.31.134 192.168.30.11 D0:E7:82:F7:65:DD Chromecast Living Room Streaming
192.168.31.104 192.168.30.12 B0:4A:39:3F:9A:14 Roborock S7 Vacuum - Needs cloud access
192.168.31.105 192.168.30.13 94:27:70:1E:0C:EE Bosch Smart Oven Kitchen Home Connect app
192.168.31.101 192.168.30.14 C8:5C:CC:52:EA:53 Xiaomi Air Purifier - Mi Home app
192.168.31.117 192.168.30.15 C8:D7:78:D6:DC:FC Bosch Washer - Home Connect app
192.168.31.116 192.168.30.16 C8:D7:78:40:65:40 Bosch Dishwasher Kitchen Home Connect app
192.168.31.139 192.168.30.17 50:2C:C6:7A:55:39 GREE Appliance - OUI: GREE Electric (AC?)
192.168.31.106 192.168.30.18 18:DE:50:5B:C8:A6 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.113 192.168.30.19 38:1F:8D:04:6F:E4 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.149 192.168.30.20 D4:AD:FC:BE:13:B0 Smart Device - OUI: Shenzhen Intellirocks
192.168.31.109 192.168.30.21 D0:C9:07:92:1A:8E Unknown Device - OUI: Private (hidden vendor)
192.168.31.110 192.168.30.22 D0:C9:07:8C:C9:46 Unknown Device - OUI: Private (same as .109)

VLAN 35 - Cameras (Security)

Current IP Target IP MAC Address Device Location Comment
192.168.31.68 192.168.35.10 48:9E:9D:0E:16:F7 Reolink Doorbell Front door PoE powered

VLAN 40 - Servers (Services)

Current IP Target IP MAC Address Device Purpose Comment
192.168.31.19 192.168.40.19 64:4E:D7:D8:43:3E HP LaserJet Network printer Wired connection

VLAN 50 - Guest (Isolated)

Target IP Purpose Comment
DHCP Pool: 192.168.50.100-200 Dynamic assignment No static leases
- Internet only No local network access

Identified Unknown Devices (Now Categorized)

Current IP MAC Address Vendor (OUI) Likely Device Assigned VLAN Comment
192.168.31.139 50:2C:C6:7A:55:39 GREE Electric Air Conditioner 30 (IoT) Chinese appliance maker
192.168.31.106 18:DE:50:5B:C8:A6 Tuya Smart Inc. Smart Plug/Sensor 30 (IoT) IoT platform
192.168.31.113 38:1F:8D:04:6F:E4 Tuya Smart Inc. Smart Plug/Sensor 30 (IoT) IoT platform
192.168.31.149 D4:AD:FC:BE:13:B0 Shenzhen Intellirocks Smart Device 30 (IoT) Chinese smart home
192.168.31.15 AC:87:A3:77:8F:BD Apple Inc. iPhone/iPad/Mac 20 (Trusted) Apple device
192.168.31.142 22:4C:7F:1D:85:8E Locally Administered Phone/Laptop 20 (Trusted) Random MAC (privacy)
192.168.31.109 D0:C9:07:92:1A:8E Private (IEEE) Unknown 30 (IoT) Hidden vendor, assume IoT
192.168.31.110 D0:C9:07:8C:C9:46 Private (IEEE) Unknown 30 (IoT) Same vendor as .109

MAC Address Quick Reference

By VLAN (for switch port assignment)

VLAN 10 - Mgmt:

78:9A:18:2C:A5:48  HAP1
A8:B8:E0:02:B6:15  XTRM-U
18:FD:74:54:3D:BC  CAP XL ac
F4:1E:57:C9:BD:09  CSS326
1C:2A:A3:1E:78:67  ZX1
48:DA:35:6F:BE:50  NanoKVM

VLAN 20 - Trusted:

82:6D:FB:D9:E0:47  Nora MacBook
AA:ED:8B:2A:40:F1  Kaloyan S25
F2:B8:14:61:C8:27  Dancho iPhone
82:EC:EF:B5:F2:AF  Kaloyan MacBook WiFi
90:91:64:70:0D:86  Kimi Notebook
2A:2B:BA:86:D4:AF  Kimi iPhone
08:92:04:C6:07:C5  Kaloyan MacBook LAN
1C:83:41:32:F3:AF  Kaloyan Game PC
A4:D1:D2:7B:52:BE  Compusbg iPad
AC:87:A3:77:8F:BD  Apple Device (unknown owner)
22:4C:7F:1D:85:8E  Random MAC device

VLAN 30 - IoT:

B0:37:95:79:AF:9B  LG TV
D0:E7:82:F7:65:DD  Chromecast
B0:4A:39:3F:9A:14  Roborock Vacuum
94:27:70:1E:0C:EE  Bosch Oven
C8:5C:CC:52:EA:53  Xiaomi Air Purifier
C8:D7:78:D6:DC:FC  Bosch Washer
C8:D7:78:40:65:40  Bosch Dishwasher
50:2C:C6:7A:55:39  GREE Appliance
18:DE:50:5B:C8:A6  Tuya Device 1
38:1F:8D:04:6F:E4  Tuya Device 2
D4:AD:FC:BE:13:B0  Intellirocks Device
D0:C9:07:92:1A:8E  Private Vendor 1
D0:C9:07:8C:C9:46  Private Vendor 2

VLAN 35 - Cameras:

48:9E:9D:0E:16:F7  Reolink Doorbell

VLAN 40 - Servers:

64:4E:D7:D8:43:3E  HP LaserJet

Device Count Summary

VLAN Device Count Comment
10 - Mgmt 9 Infrastructure only
20 - Trusted 11 Family + Apple device + random MAC
30 - IoT 13 Smart home + identified unknowns
35 - Cameras 1 Security
40 - Servers 1 Services
Total 35 All devices categorized

OUI Lookup Reference

OUI Prefix Vendor Type
50:2C:C6 GREE Electric Appliances (Zhuhai) AC/Appliances
18:DE:50 Tuya Smart Inc. IoT Platform
38:1F:8D Tuya Smart Inc. IoT Platform
D4:AD:FC Shenzhen Intellirocks Tech Smart Devices
AC:87:A3 Apple Inc. Consumer Electronics
D0:C9:07 Private (IEEE hidden) Unknown
22:xx:xx Locally Administered Random/Private MAC

Next Steps

Step Action Comment
1 Identify unknown devices Completed via OUI lookup
2 Decide WiFi strategy Single SSID vs Multiple SSIDs
3 Configure switch ports VLAN tagging on CSS326
4 Test VLAN routing Before full activation
5 Update firewall rules Inter-VLAN traffic control