The map
Network topology
Everything below is transcribed from the live configs: interface names, addresses, VLAN tags and physical links. Hover or focus a node to trace its links; click a device to open its full sheet.
Overlay
WireGuard + OSPF backbone
A hub-and-spoke WireGuard mesh with OSPFv2 running point-to-multipoint over the shared wg1 interface. The 172.16.20.0/24 transit range is the OSPF fabric; the 10.10.×0.1/32 loopbacks are the router-IDs.
| Node | Role | Router-ID | Transit IP | Status |
|---|---|---|---|---|
| Magikarp | Hub | 10.10.10.1 | 172.16.20.1 | live |
| Jeffrotik | Spoke | 10.10.20.1 | 172.16.20.3 | live |
| Lindarotik | Spoke | 10.10.40.1 | 172.16.20.2 | live |
| Linode | Spoke | 10.10.50.1 | 172.16.20.5 | live |
| Melodyrotik | Spoke | 10.10.30.1 | 172.16.20.4 | live |
The multicast trick: 224.0.0.0/24 carried as AllowedIPs so OSPF hellos survive the tunnel. Get that AllowedIPs entry wrong — duplicate it across peers — and OSPF adjacencies silently fail to form.
Interfaces
Every port, labelled
Interface tables for each routing and switching device, straight from the config alias / port-name fields.
Magikarp — Custom x86 — AMD Ryzen 7 5700G
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| enp16s0f0np0 | WAN | DHCP (Socket) | Transit: ISP WAN | X710 port0 · 10GBASE-T via S+RJ10 |
| enp16s0f1np1 | LAN trunk | 192.168.1.1/24 | Core: Main LAN Trunk | X710 port1 · 850nm SR fibre |
| enp16s0f1np1.20 | VLAN 20 | 192.168.8.1/24 | Customer: VLAN20 Guest-IoT | tagged sub-if |
| enp16s0f1np1.77 | VLAN 77 | 172.20.8.1/24 | Core: VLAN77 HPBX VLAN | tagged sub-if |
| enp42s0 | MGMT | 10.10.0.1/24 | MGMT/ OOB | Realtek 1GbE |
| wg1 | Overlay | 10.10.10.1/32 · 172.16.20.1/24 | Peering: WG hub to all sites | in-kernel WireGuard |
Switchfish2 — Brocade / Ruckus ICX 7450-24P
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| 1/2/1 | 10G SFP+ | uplink | Core: Uplink to Magikarp | DSCP trust · BPDU guard |
| 1/2/2 | 10G SFP+ | downlink | Core: Downlink to Switchfish3 | root-protect |
| ve 10 | SVI | 192.168.1.22/24 | Main mgmt | — |
| ve 20 | SVI | 192.168.8.22/24 | Guest-IoT mgmt | — |
| ve 77 | SVI | 172.20.8.22/24 | HPBX mgmt | — |
| 1/1/1-24 | 1GbE PoE | access/trunk | Access ports | native VLAN 10 |
Switchfish3 — Juniper EX3300-24P
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| xe-0/1/0 | 10G | uplink | UPLINK to Switchfish2 ICX7450 | native VLAN 10 |
| vlan.10 | SVI | 192.168.1.23/24 | Main LAN mgmt | — |
| vlan.20 | SVI | 192.168.8.23/24 | Guest-IoT | — |
| vlan.77 | SVI | 172.20.8.23/24 | HPBX | — |
| ge-0/0/0-23 | 1GbE PoE | trunk | Access ports | Main/Guest/HPBX |
Jeffrotik — MikroTik hAP ax2 · C52iG-5HaxD2HaxD
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| ether1 | WAN | DHCP | Transit: WAN uplink to ISP | to Socket |
| bridge | LAN | 192.168.5.1/24 | Main LAN | ether2-5 + wifi |
| dad | VLAN 60 | 192.168.30.1/24 | Segregated "dad" net | vlan-id 60 |
| wgptp | Overlay | 172.16.20.3/24 · 10.10.20.1 | WG peer to Magikarp | mtu 1440 |
| wgptp (rw) | Road-warrior | 10.10.90.1/24 | VPN client pool | responder peer |
Lindarotik — MikroTik hAP ax3 · C53UiG+5HPaxD2HPaxD
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| ether1 | WAN | DHCP | Transit: WAN uplink to ISP | Socket Telecom |
| bridge | LAN | 192.168.25.1/24 | Main LAN | ether2-5 + wifi |
| wgptp2 | Overlay | 172.16.20.2/24 · 10.10.40.1 | WG peer to Magikarp | mtu 1440 |
melodyrotik — MikroTik hAP ax3 · C53UiG+5HPaxD2HPaxD
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| ether1 | WAN | DHCP | Transit: WAN uplink to ISP | Socket Telecom |
| bridge | LAN | 192.168.6.1/24 | Main LAN | ether2-5 + wifi |
| wgptp3 | Overlay | 172.16.20.4/24 · 10.10.30.1 | WG peer to Magikarp | mtu 1440 |
Linode VPS — Linode (Akamai) virtual machine
| Interface | Type | Address | Label | Notes |
|---|---|---|---|---|
| wg | Overlay | 172.16.20.5/32 · 10.10.50.1 | WG peer to Magikarp | static endpoint |
| eth0 | WAN | static public IP | Datacentre uplink | — |