The map
Network topology
Everything below is transcribed from the live configs: interface names, addresses, VLAN tags and physical links. Hover or focus a node to trace its links; click a device to open its full sheet. Also, every green dot is an indication that the device / link is up thanks to LibreNMS on the Pleco server
Overlay
WireGuard + OSPF backbone
A hub-and-spoke WireGuard mesh with OSPFv2 running point-to-multipoint over the shared wg1 interface. The 172.16.20.0/24 transit range is the OSPF fabric; the 10.10.×0.1/32 loopbacks are the router-IDs.
| Node | Role | Router-ID | Transit IP | Status |
|---|---|---|---|---|
| Magikarp | Hub | 10.10.10.1 | 172.16.20.1 | live |
| Jeffrotik | Spoke | 10.10.20.1 | 172.16.20.3 | live |
| Lindarotik | Spoke | 10.10.40.1 | 172.16.20.2 | live |
| Linode | Spoke | 10.10.50.1 | 172.16.20.5 | live |
| Melodyrotik | Spoke | 10.10.30.1 | 172.16.20.4 | live |
The multicast problem: Does not really work, this is why we set the peers up as P2MP peers. Get that AllowedIPs entry wrong — duplicate it across peers — and OSPF adjacencies fail to form. This is why multicast over wireguard doesn't really work for OSPF.
Interfaces
Every port, labelled
Interface tables for each routing and switching device, straight from the config alias / port-name fields.
Magikarp — Custom x86 — AMD Ryzen 7 5700G
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| enp16s0f0np0 | WAN | DHCP (Socket) | Transit: ISP WAN | X710 port0 · 10GBASE-T via S+RJ10 |
| enp16s0f1np1 | LAN trunk | 192.168.1.1/24 | Core: Main LAN Trunk | X710 port1 · 850nm SR fibre |
| enp16s0f1np1.20 | VLAN 20 | 192.168.8.1/24 | Customer: VLAN20 Guest-IoT | tagged sub-if |
| enp16s0f1np1.77 | VLAN 77 | 172.16.8.1/24 | Core: VLAN77 HPBX VLAN | tagged sub-if |
| enp42s0 | MGMT | 10.10.0.1/24 | MGMT/ OOB | Realtek 1GbE |
| wg1 | Overlay | 10.10.10.1/32 · 172.16.20.1/24 | Peering: WG hub to all sites | in-kernel WireGuard |
Switchfish2 — Brocade / Ruckus ICX 7450-24P
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| 1/4/1 | 10G SFP+ | uplink | Core: Uplink to Magikarp | Main 10G Uplink to firewall |
| 1/2/1 | 10G SFP+ | downlink | Core: Downlink to Feebas | Future RB5009 downstream router |
| 1/2/2 | 10G SFP+ | downlink | Core: Downlink to Switchfish3 | The Juniper access switch |
| ve 10 | SVI | 192.168.1.22/24 | Main mgmt | — |
| ve 20 | SVI | 192.168.8.22/24 | Guest-IoT mgmt | — |
| ve 77 | SVI | 172.16.8.22/24 | HPBX mgmt | — |
| 1/1/1-24 | 1GbE PoE | access/trunk | Access ports | Access ports for the VLANS |
Switchfish3 — Juniper EX3300-24P
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| xe-0/1/0 | 10G | uplink | UPLINK to Switchfish2 ICX7450 | native VLAN 10 |
| vlan.10 | SVI | 192.168.1.23/24 | Main LAN mgmt | — |
| vlan.20 | SVI | 192.168.8.23/24 | Guest-IoT | — |
| vlan.77 | SVI | 172.16.8.23/24 | HPBX | — |
| ge-0/0/0-23 | 1GbE PoE | trunk | Access ports | Main/Guest/HPBX |
Jeffrotik — MikroTik hAP ax2 · C52iG-5HaxD2HaxD
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| ether1 | WAN | DHCP | Transit: WAN uplink to ISP | to Socket |
| bridge | LAN | 192.168.5.1/24 | Main LAN | ether2-5 + wifi |
| dad | VLAN 60 | 192.168.30.1/24 | Segregated "dad" net | vlan-id 60 |
| wgptp | Overlay | 172.16.20.3/24 · 10.10.20.1 | WG peer to Magikarp | mtu 1440 |
| wgptp (rw) | Road-warrior | 10.10.90.1/24 | VPN client pool | responder peer |
Lindarotik — MikroTik hAP ax3 · C53UiG+5HPaxD2HPaxD
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| ether1 | WAN | DHCP | Transit: WAN uplink to ISP | Socket Telecom |
| bridge | LAN | 192.168.25.1/24 | Main LAN | ether2-5 + wifi |
| wgptp2 | Overlay | 172.16.20.2/24 · 10.10.40.1 | WG peer to Magikarp | mtu 1440 |
melodyrotik — MikroTik hAP ax3 · C53UiG+5HPaxD2HPaxD
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| ether1 | WAN | DHCP | Transit: WAN uplink to ISP | Socket Telecom |
| bridge | LAN | 192.168.6.1/24 | Main LAN | ether2-5 + wifi |
| wgptp3 | Overlay | 172.16.20.4/24 · 10.10.30.1 | WG peer to Magikarp | mtu 1440 |
Linode VPS — Linode (Akamai) virtual machine
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| wg | Overlay | 172.16.20.5/32 · 10.10.50.1 | WG peer to Magikarp | static endpoint |
| eth0 | WAN | static public IP | Datacentre uplink | — |