Skip to content

Networks

  • By default all LAN ports found in our rooms are not patched. This is intended.
  • VLANs, IP ranges and static IP addresses are documented in Netbox.
  • Everything here is legacy IP (IPv4). We don't do IPv6 as of now.

IP Address schema

10.<VLAN_ID>.42.<CLIENT>

  • The VLAN IDs are 1:1 the tags configured on our LAN switches.

VLANs

LAN aka. "Obi LAN Kenobi"

  • VLAN ID: 10
  • Network: 10.10.42.0/24

Regular clients / users are located in the LAN VLAN by default. All Ethernet ports in our Hackspace and the Obi LAN Kenobi WiFi belong to this VLAN.

All other VLANs are not reachable from the LAN VLAN by default. Of course there are exceptions managed in the Firewall e.g. the access to Homeassistant and Musicassistant.

In case someone needs access to the other VLANs for administrative reasons the Giga VPN must be used. It has access to all network segments.

IOT

  • VLAN ID: 11
  • Network: 10.11.42.0/24

Used for unknown Chinese IoT devices that should get no internet access

Haustechnik

  • VLAN ID: 12
  • Network: 10.12.42.0/24

Used for WLED and other smart/DIY devices

DMZ

  • VLAN ID: 20
  • Network: 10.20.42.0/24

The default NixOS/VM network for internal and external services like infrahorst

Kubernetes

  • VLAN ID: 21
  • Network: 10.21.42.0/24

Network for MetalLB and Talos workers and controllers (see Kubernetes cluster)

Admin

  • VLAN ID: 30
  • Network: 10.30.42.0/24

ILOs and KVM Switches, isolated only for infrastructure admins

PBX

  • VLAN ID: 40
  • Network: 10.40.42.0/24

See PBX.