sync: auto-sync from HOWARD-HOME at 2026-06-24 15:23:13

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-24 15:23:13
This commit is contained in:
2026-06-24 15:23:42 -07:00
parent 7055ce6acd
commit 8ddfb33eab
5 changed files with 233 additions and 0 deletions

View File

@@ -94,8 +94,23 @@ Ubuntu/snap based):
---
## CSC ENT is NOT empty — evacuation prerequisite (live 2026-06-24)
A live pull found **149 clients on CSC ENT**, not a near-empty legacy SSID. Only **68 are Helpany
Pauls** (the anchor that stays). The other **~79 must be moved off first** — 14 staff PCs (already
in the domain-migration plan), 11 printers, **11 DIRECTV resident TVs, 11 resident IoT/TVs (Ring/
Echo/LG/Samsung), 15 personal phones/tablets, 17 unknown/randomized**. About **51 clients are on
2.4 GHz** today and would be **dropped immediately by a 5 GHz-only flip** (25 of them non-Helpany).
Full per-device inventory + the resident "help-reconnect" list:
`csc-ent-client-inventory-2026-06-24.md`. **The resident devices (DIRECTV/Ring/Echo/TVs/phones)
are the visible-impact set — they need a relocation/reconnection plan before the flip.**
## Execution sequence
0. **Evacuate the ~79 non-Helpany clients off CSC ENT** to their correct networks (staff -> CSCNet/
INTERNAL via domain migration; printers -> internal; resident TVs/IoT/phones -> CSCNet resident
PPSK or a dedicated resident SSID). Complete the registry with `stat/alluser` first so offline
resident TVs aren't missed. **This is the gating sub-project** — see the inventory doc.
1. **Build VLAN 40** on pfSense (igc1.40, DHCP scope, DNS) + firewall egress rules above; mirror
VLAN 30 isolation.
2. **Enable PPSK on CSC ENT**; add keys: `Ftfd85710#` -> VLAN 40, new voice key -> VLAN 30.