jazzymc/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
60369e6f43eb1901e7978704744f4ce5abf475cb
infrastructure/docs/03-VLAN-DEVICE-ASSIGNMENT.md
Kaloyan Danchev 60369e6f43
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details
Add Settop Box to VLAN 30 device list 
- LAN MAC: FC:D5:D9:EB:6A:82 → 192.168.30.50 (CSS326 Port 23)
- WiFi MAC: 08:FB:EA:61:9D:3A → 192.168.30.51 (XTRM2 2.4GHz)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 15:56:12 +02:00

10 KiB
Raw Blame History

VLAN Device Assignment Map

Last Updated: 2026-02-01
Purpose: Complete inventory of all network devices with VLAN assignments

VLAN Summary

VLAN Name Subnet Gateway Purpose Comment
1 Legacy 192.168.31.0/24 192.168.31.1 Current flat network To be deprecated
10 Mgmt 192.168.10.0/24 192.168.10.1 Infrastructure devices Admin access only
20 Trusted 192.168.20.0/24 192.168.20.1 Family personal devices Full network access
25 Trusted 192.168.20.0/24 192.168.20.1 Kids Devices Full network access
30 IoT 192.168.30.0/24 192.168.30.1 Smart home devices Internet + limited local
35 Cameras 192.168.35.0/24 192.168.35.1 Security cameras Isolated, NVR access only
40 Servers 192.168.40.0/24 192.168.40.1 Servers & printers Service hosts
50 Guest 192.168.50.0/24 192.168.50.1 Guest WiFi Internet only

VLAN 10 - Management (Infrastructure)

Current IP Target IP MAC Address Device Notes Comment
192.168.31.1 192.168.10.1 78:9A:18:2C:A5:48 HAP1 (hAP ax³) Router Gateway for all VLANs
192.168.31.4 192.168.10.10 02:42:C0:A8:1F:04 AdGuard Home DNS (Unraid) Secondary DNS
192.168.31.6 192.168.10.2 18:FD:74:54:3D:BC CAP XL ac Access point CAPsMAN managed
192.168.31.9 192.168.10.3 F4:1E:57:C9:BD:09 CSS326-24G-2S+ 24-port switch Room distribution
192.168.31.22 192.168.10.4 1C:2A:A3:1E:78:67 ZX1 (ZX-SWTGW218AS) 8-port 2.5G switch Server rack
192.168.31.2 192.168.10.20 A8:B8:E0:02:B6:15 XTRM-U (Unraid) Main server Docker host, NAS
192.168.31.20 192.168.10.200 48:DA:35:6F:BE:50 NanoKVM Remote KVM IPMI alternative
172.17.0.2 - 46:D0:27:F7:1F:CA AdGuard (MikroTik) DNS (Router) Primary DNS, DoH/DoT
172.17.0.3 - 0C:AB:39:8D:8C:FC Tailscale (MikroTik) VPN container Remote access

VLAN 20 - Trusted (Family Devices)

Current IP Target IP MAC Address Device Owner Comment
192.168.31.79 192.168.20.10 82:6D:FB:D9:E0:47 MacBook Air Nora Primary laptop
192.168.31.98 192.168.20.11 AA:ED:8B:2A:40:F1 Samsung S25 Ultra Kaloyan Primary phone
192.168.31.114 192.168.20.12 F2:B8:14:61:C8:27 iPhone Dancho
192.168.31.99 192.168.20.13 82:EC:EF:B5:F2:AF MacBook Pro (WiFi) Kaloyan Work laptop wireless
192.168.31.108 192.168.20.14 90:91:64:70:0D:86 Notebook Kimi
192.168.31.121 192.168.20.15 2A:2B:BA:86:D4:AF iPhone Kimi
192.168.31.95 192.168.20.16 08:92:04:C6:07:C5 MacBook Pro (LAN) Kaloyan Via Dell KVM dock
192.168.31.97 192.168.20.17 1C:83:41:32:F3:AF Gaming PC Kaloyan Main bedroom
192.168.31.107 192.168.20.18 A4:D1:D2:7B:52:BE iPad Compusbg Work tablet

VLAN 25 - Trusted (Kids Devices)

Current IP Target IP MAC Address Device Owner Comment
192.168.31.114 192.168.20.12 F2:B8:14:61:C8:27 iPhone Dancho
192.168.31.108 192.168.20.14 90:91:64:70:0D:86 Notebook Kimi
192.168.31.121 192.168.20.15 2A:2B:BA:86:D4:AF iPhone Kimi
192.168.31.107 192.168.20.18 A4:D1:D2:7B:52:BE iPad Compusbg Work tablet

VLAN 30 - IoT (Smart Home)

Current IP Target IP MAC Address Device Location Comment
192.168.31.139 192.168.30.10 50:2C:C6:7A:55:39 Air Conditioner Living Room GREE Electric
192.168.31.100 192.168.30.11 B0:37:95:79:AF:9B LG TV Living Room LAN (not connected)
192.168.31.118 192.168.30.12 DC:03:98:6B:5A:3A LG TV Living Room WiFi (active)
192.168.31.134 192.168.30.13 D0:E7:82:F7:65:DD Chromecast Living Room Streaming
192.168.31.104 192.168.30.14 B0:4A:39:3F:9A:14 Roborock S7 Vacuum Living Room Needs cloud access
192.168.31.105 192.168.30.20 94:27:70:1E:0C:EE Bosch Smart Oven Kitchen Home Connect app
192.168.31.116 192.168.30.21 C8:D7:78:40:65:40 Bosch Dishwasher Kitchen Home Connect app
192.168.31.117 192.168.30.22 C8:D7:78:D6:DC:FC Bosch Washer Kids Bathroom Home Connect app
192.168.31.106 192.168.30.31 18:DE:50:5B:C8:A6 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.113 192.168.30.5 38:1F:8D:04:6F:E4 Tuya Smart Gateway (JMWZG1) - Requires WPA+TKIP
192.168.31.149 192.168.30.33 D4:AD:FC:BE:13:B0 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.106 192.168.30.34 18:DE:50:5B:C8:A6 Tuya Smart Device - OUI: Tuya Smart Inc.
192.168.31.113 192.168.30.5 38:1F:8D:04:6F:E4 Tuya Smart Gateway (JMWZG1) - Requires WPA+TKIP
192.168.31.149 192.168.30.38 D4:AD:FC:BE:13:B0 Shenzhen Intellirocks - Smart Device
192.168.31.101 192.168.30.39 C8:5C:CC:52:EA:53 Xiaomi Air Purifier - Mi Home app
- 192.168.30.50 FC:D5:D9:EB:6A:82 Settop Box (LAN) Living Room CSS326 Port 23
- 192.168.30.51 08:FB:EA:61:9D:3A Settop Box (WiFi) Living Room XTRM2 2.4GHz

VLAN 35 - Cameras (Security)

Current IP Target IP MAC Address Device Location Comment
192.168.31.68 192.168.35.10 48:9E:9D:0E:16:F7 Reolink Doorbell Front door PoE powered

VLAN 40 - Servers (Services)

Current IP Target IP MAC Address Device Purpose Comment
192.168.31.19 192.168.40.19 64:4E:D7:D8:43:3E HP LaserJet Network printer Wired connection

VLAN 50 - Guest (Isolated)

Current IP Target IP MAC Address Device Notes Comment
192.168.31.15 192.168.50.10 AC:87:A3:77:8F:BD Apple Device Unknown owner OUI: Apple Inc.
192.168.31.142 192.168.50.11 22:4C:7F:1D:85:8E Unknown Device Random MAC Privacy MAC
192.168.31.109 192.168.50.12 D0:C9:07:92:1A:8E Unknown Device Private vendor Hidden OUI
192.168.31.110 192.168.50.13 D0:C9:07:8C:C9:46 Unknown Device Private vendor Same as .109
DHCP Pool 192.168.50.100-200 - Guest devices Dynamic Internet only

Identified Unknown Devices (Moved to Guest)

Current IP MAC Address Vendor (OUI) Likely Device Assigned VLAN Comment
192.168.31.15 AC:87:A3:77:8F:BD Apple Inc. iPhone/iPad/Mac 50 (Guest) Unknown owner
192.168.31.142 22:4C:7F:1D:85:8E Locally Administered Phone/Laptop 50 (Guest) Random MAC (privacy)
192.168.31.109 D0:C9:07:92:1A:8E Private (IEEE) Unknown 50 (Guest) Hidden vendor
192.168.31.110 D0:C9:07:8C:C9:46 Private (IEEE) Unknown 50 (Guest) Same vendor as .109

MAC Address Quick Reference

By VLAN (for switch port assignment)

VLAN 10 - Mgmt:

78:9A:18:2C:A5:48  HAP1
A8:B8:E0:02:B6:15  XTRM-U
18:FD:74:54:3D:BC  CAP XL ac
F4:1E:57:C9:BD:09  CSS326
1C:2A:A3:1E:78:67  ZX1
48:DA:35:6F:BE:50  NanoKVM

VLAN 20 - Trusted:

82:6D:FB:D9:E0:47  Nora MacBook
AA:ED:8B:2A:40:F1  Kaloyan S25
F2:B8:14:61:C8:27  Dancho iPhone
82:EC:EF:B5:F2:AF  Kaloyan MacBook WiFi
90:91:64:70:0D:86  Kimi Notebook
2A:2B:BA:86:D4:AF  Kimi iPhone
08:92:04:C6:07:C5  Kaloyan MacBook LAN
1C:83:41:32:F3:AF  Kaloyan Game PC
A4:D1:D2:7B:52:BE  Compusbg iPad

VLAN 30 - IoT:

B0:37:95:79:AF:9B  LG TV (LAN)
DC:03:98:6B:5A:3A  LG TV (WiFi)
D0:E7:82:F7:65:DD  Chromecast
B0:4A:39:3F:9A:14  Roborock Vacuum
94:27:70:1E:0C:EE  Bosch Oven
C8:5C:CC:52:EA:53  Xiaomi Air Purifier
C8:D7:78:D6:DC:FC  Bosch Washer
C8:D7:78:40:65:40  Bosch Dishwasher
50:2C:C6:7A:55:39  GREE Appliance
18:DE:50:5B:C8:A6  Tuya Device 1
38:1F:8D:04:6F:E4  Tuya Smart Gateway (JMWZG1)
D4:AD:FC:BE:13:B0  Intellirocks Device
FC:D5:D9:EB:6A:82  Settop Box (LAN)
08:FB:EA:61:9D:3A  Settop Box (WiFi)

VLAN 35 - Cameras:

48:9E:9D:0E:16:F7  Reolink Doorbell

VLAN 40 - Servers:

64:4E:D7:D8:43:3E  HP LaserJet

VLAN 50 - Guest:

AC:87:A3:77:8F:BD  Apple Device (unknown)
22:4C:7F:1D:85:8E  Random MAC device
D0:C9:07:92:1A:8E  Private Vendor 1
D0:C9:07:8C:C9:46  Private Vendor 2

Device Count Summary

VLAN Device Count Comment
10 - Mgmt 9 Infrastructure only
20 - Trusted 9 Family devices
25 - Kids 4 Kids devices (subset of 20)
30 - IoT 11 Smart home devices
35 - Cameras 1 Security
40 - Servers 1 Services
50 - Guest 4 Unknown/unidentified devices
Total 35 All devices categorized

OUI Lookup Reference

OUI Prefix Vendor Type
B0:37:95 LG Electronics TV/Displays (LAN)
DC:03:98 LG Innotek TV/Displays (WiFi)
50:2C:C6 GREE Electric Appliances (Zhuhai) AC/Appliances
18:DE:50 Tuya Smart Inc. IoT Platform
38:1F:8D Xiaomi Smart Home Devices
D4:AD:FC Shenzhen Intellirocks Tech Smart Devices
AC:87:A3 Apple Inc. Consumer Electronics
D0:C9:07 Private (IEEE hidden) Unknown
22:xx:xx Locally Administered Random/Private MAC

Next Steps

Step Action Comment
1 ✅ Identify unknown devices Completed via OUI lookup
2 Decide WiFi strategy Single SSID vs Multiple SSIDs
3 Configure switch ports VLAN tagging on CSS326
4 Test VLAN routing Before full activation
5 Update firewall rules Inter-VLAN traffic control

Quick Assignment Table (Identified Devices)

VLAN IP Comment
30 (IoT) 192.168.31.139 GREE Air Conditioner
30 (IoT) 192.168.31.106 Tuya Smart Device #1
30 (IoT) 192.168.31.113 Tuya Smart Gateway (JMWZG1)
30 (IoT) 192.168.31.149 Shenzhen Intellirocks Smart Device
50 (Guest) 192.168.31.15 Apple device (unknown owner)
50 (Guest) 192.168.31.142 Privacy MAC device
50 (Guest) 192.168.31.109 Private vendor device
50 (Guest) 192.168.31.110 Private vendor device
Reference in New Issue View Git Blame Copy Permalink