azcomputerguru/claudetools
1
0
Fork 0
Code Issues 59 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-01 13:22:23

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-01 13:22:23
This commit is contained in:
Howard Enos
2026-07-01 13:23:00 -07:00
parent 7f897ce93f
commit 9e78a153f3
4 changed files with 210 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

78
clients/cascades-tucson/session-logs/2026-07/2026-07-01-howard-vlan20-migration-live-reconcile.md Normal file
View File

@@ -0,0 +1,78 @@
## User
- **User:** Howard Enos (howard)
- **Machine:** Howard-Home
- **Role:** tech
## Session Summary
Picked up the Cascades of Tucson network migration — moving staff machines and printers off the flat old LAN ("CSC ENT", 192.168.0.0/22) onto the isolated Staff VLAN 20 ("CSCNET", 10.0.20.0/24). Howard reported he had moved additional machines and printers since the 2026-06-30 work and asked where things stood. Loaded context from the wiki (clients/cascades-tucson) and the 2026-06-30 VLAN 20 printer-migration session log, then confirmed the terminology: the "CSCNET" target is pfSense VLAN 20, distinct from the WiFi "CSC ENT device-island" track.
Because Howard did not specify which machines/printers he had moved, ran a live GuruRMM reconciliation (delegated the high-volume RMM pull to a sub-agent) to discover current state: a full fleet IP map (10.0.20.x = migrated; 192.168.x = still on old LAN), CS-SERVER print-share/port inventory, and TCP reachability to every VLAN20 printer target. CS-SERVER agent id resolved live = c39f1de7-d5b6-45ae-b132-e06977ab1713 (unchanged).
The live pull showed the migration is much further along than the docs captured: 22 online hosts are now on VLAN 20, with only CS-SERVER (stays by design) plus ~6 stragglers left on the old LAN. Printers lag — only 4 of 15 CS-SERVER shares are repointed to 10.0.20.x. All 7 VLAN20 printer targets are reachable on 9100, including 10.0.20.74 (the MCMedTech target) even though its share still points at the stale 192.168.2.53. The MEMCARE-STATION rename staged on 6/30 has not applied (box still reports RECEPTIONIST-PC).
Reconciled both living docs to the live state: rewrote clients/cascades-tucson/docs/printer-gpo-map.md with the full 15-share inventory + 2 direct-IP printers + the 22-machine VLAN20 roster + a re-prioritized action list, and added a 2026-07-01 progress snapshot to the project_cascades_vlan20_migration_routing memory. No production changes were made this session (read-only investigation + doc updates). Offered to do the safe MCMedTech share repoint (.53 -> .74) but held pending Howard's decision on the GPO silent-install path.
## Key Decisions
- Used the live RMM fleet IP pull as the discovery mechanism for "which machines/printers moved," rather than asking Howard to enumerate them — machines' current IPs directly reveal VLAN20 vs old-LAN membership.
- Delegated the live data-gathering (fleet enumeration + CS-SERVER printer state + reachability) to a sub-agent because it was high-volume RMM tool output; kept the reconciliation and doc writes in the main context.
- Did NOT hand-edit the wiki article (compiled artifact — `/wiki-compile` only); updated the running doc + memory, which is what "update the running map + memory" scopes to.
- Held on the MCMedTech share repoint (safe — target .74 is live/reachable) until Howard decides reboot-test vs pre-stage-drivers for the GPO, to keep printer changes batched with the GPO go-live rather than one-off.
## Problems Encountered
- RMM/coord were initially unreachable from Howard-Home: Tailscale was stuck in `NoState` and disconnecting because unattended mode was off. Sub-agent set `HKLM\SOFTWARE\Tailscale IPN\UnattendedMode = always` and restarted the service — now stable at 100.103.198.108, subnet route to 172.16.3.30 up. Persistent fix; flagged to Howard.
- Docs undercounted migration progress (tracked only a handful of machines/printers). Resolved by the full live pull + doc rewrite.
## Configuration Changes
- **Modified:** `clients/cascades-tucson/docs/printer-gpo-map.md` — full rewrite reconciled to live 2026-07-01 state (15-share inventory with current port IPs + VLAN20 status, 2 direct-IP printers, 22-machine VLAN20 roster + stragglers/offline, re-prioritized action list, driver traps for MF751/MF743 PCL6 shares).
- **Modified:** `.claude/memory/project_cascades_vlan20_migration_routing.md` — added 2026-07-01 progress snapshot (machines done, printers 4/15, GPO not live, rename pending); mechanics/gotchas retained.
- **Created:** this session log.
- **Machine config (Howard-Home, by sub-agent):** `HKLM\SOFTWARE\Tailscale IPN\UnattendedMode = always` + Tailscale service restart. Not a repo change.
- No changes to CS-SERVER, pfSense, printers, or GPOs this session.
## Credentials & Secrets
- No credentials created or discovered. RMM commands ran as the agent (SYSTEM); no vaulted cred needed for the read-only local queries. Vaulted CS-SERVER admin (`clients/cascades-tucson/cs-server.sops.yaml`) was NOT used this session.
## Infrastructure & Servers
- **CS-SERVER** 192.168.2.248 (SMB) / 192.168.2.254 (Hyper-V vEth) — DC + print server; stays on old LAN by design. GuruRMM agent `c39f1de7-d5b6-45ae-b132-e06977ab1713` (resolved live, unchanged). Holds no DHCP scopes (VLAN20 DHCP served by the UniFi gateway).
- **VLAN 20 ("CSCNET")** 10.0.20.0/24, gw 10.0.20.1 (pings from CS-SERVER).
- **VLAN20 hosts (22 online):** ACCT2-PC .209, ANN-PC .218, ASSISTNURSE-PC .181, CHEF-PC .232 (workgroup), CRYSTAL-PC .205, DESKTOP-DLTAGOI .72, DESKTOP-H6QHRR7 .235 (P&P pilot), DESKTOP-LPOPV30 .100, DESKTOP-MD6UQI3 .222 (workgroup), DESKTOP-N5G1ROO .183, DESKTOP-ROK7VNM .223, DESKTOP-TRCIEJA .184, Health-Services-Director .178, LAPTOP-DRQ5L558 .237, MAINTENANCE-PC .96, MDIRECTOR-PC .71, MEMRECEPT-PC .97 (workgroup), NURSESTATION-PC .180, RECEPTIONIST-PC frontdesk .102 (S/N MJ0KQHNP), RECEPTIONIST-PC memcare .68 (S/N MJ0KQH4R, pending rename), SALES4-PC .203, megan .202.
- **Still on old LAN:** CS-SERVER (by design), ASSISTMAN-PC 192.168.2.38, CascadesProxess 192.168.2.178, Laptop2 192.168.2.118, NurseAssist 192.168.3.254, LAPTOP-8P7HDSEI 192.168.3.101 (roaming), LAPTOP-E0STJJE8 192.168.3.9 (roaming).
- **Offline (last DNS IP):** DESKTOP-F94M8UT 10.0.20.171 (VLAN20), DESKTOP-U2DHAP0 192.168.3.37 (old LAN, seen 2026-07-01), DESKTOP-KQSL232 (decommissioned), Laptop4 (no DNS).
- **CS-SERVER print shares (share -> port IP, VLAN20?):** FrontDesk -> 10.0.20.221 YES; BusinessOffice -> 10.0.20.220 YES; LifeEnrichment -> 10.0.20.94 YES (UFR II); MCReception -> 10.0.20.78 YES; MCMedTech -> 192.168.2.53 NO (target .74 live); NursesPrinter -> 192.168.2.75 NO; HealthServices -> 192.168.1.138 NO (Konica C368); MCDirector -> 192.168.3.52 NO (Canon MF751, PCL6 -> needs UFR II); CopyRoom -> 192.168.2.230 NO; Kitchen -> 192.168.3.232 NO (Canon MF743, PCL6 -> UFR II); CulinaryChef -> 192.168.3.88 NO (Brother 9330, likely redundant w/ Chef direct-IP); Accounting -> 192.168.3.227 NO (Canon MF455); AdminOffice -> 192.168.2.145 NO (Brother 9340); ExecDirector -> 192.168.2.67 NO (Canon MF743, PCL6 -> UFR II); SalesMarketing -> 192.168.3.44 NO (Brother L8900).
- **Direct-IP printers (workgroup):** Dining Canon MF743CDW 10.0.20.228 (DESKTOP-MD6UQI3, UFR II); Chef Brother MFC-9330CDW 10.0.20.236 (CHEF-PC); MedTech Brother L8900CDW 10.0.20.74 (memcare box + DESKTOP-LPOPV30).
- **Howard-Home:** Tailscale 100.103.198.108 (now unattended/stable).
## Commands & Outputs
- VLAN20 printer reachability from CS-SERVER (TCP 9100, 2s timeout): 10.0.20.221 True, .220 True, .94 True, .78 True, .74 True, .228 True, .236 True. Gateway 10.0.20.1 ping True. No asleep/off false negatives.
- Data sources: live `Get-NetIPAddress` + `Win32_BIOS` serial on 29 online agents; CS-SERVER DNS zone for offline hosts; CS-SERVER `Get-Printer`/`Get-PrinterPort`.
## Pending / Incomplete Tasks
- **Decide the GPO silent-install path:** reboot-test vs pre-stage-drivers (recommended). This is the blocker to taking `CSC - Point and Print (CS-SERVER)` fleet-live (currently pilot-scoped to DESKTOP-H6QHRR7).
- **Repoint MCMedTech share 192.168.2.53 -> 10.0.20.74** (safe; target live) — offered, held for Howard's go.
- **Repoint remaining stale caregiver-GPO shares** as printers re-IP: NursesPrinter (.75), HealthServices (.138), MCDirector (.52, +UFR II), CopyRoom (.230).
- **Repoint `CSC - Life Enrichment Printers` GPO** `RecRoom-Canon` -> `LifeEnrichment`.
- **Re-IP + repoint remaining old-LAN shares:** Kitchen (+UFR II), Accounting, AdminOffice, ExecDirector (+UFR II), SalesMarketing.
- **Reconcile CulinaryChef (192.168.3.88) vs Chef direct-IP (.236)** — retire redundant share if same device.
- **Apply MEMCARE-STATION rename** (needs reboot; memcare box still reports RECEPTIONIST-PC).
- **Domain-join workgroup machines** (DESKTOP-MD6UQI3, CHEF-PC, MEMRECEPT-PC, MEMCARE-STATION, DESKTOP-LPOPV30) -> switch direct-IP printers to `\\CS-SERVER\<share>` + GPO.
- **Optional:** save a harness memory for the Howard-Home Tailscale UnattendedMode fix.
- Cascades printer skill (Howard's idea) — package the migration how-to into a reusable skill.
## Reference Information
- Running map: `clients/cascades-tucson/docs/printer-gpo-map.md`.
- Migration memory: `.claude/memory/project_cascades_vlan20_migration_routing.md`.
- Prior session: `clients/cascades-tucson/session-logs/2026-06/2026-06-30-howard-vlan20-printer-migration.md`.
- GuruRMM API: http://172.16.3.30:3001 (vault `infrastructure/gururmm-server.sops.yaml`).
- P&P GPO: `CSC - Point and Print (CS-SERVER)` guid `{BFAB721A-513D-4C14-8255-DEB1D4266830}`.
- UFR II driver for Canon MF741/743/751: `Canon Generic Plus UFR II V250`, INF `cnlb0ma64.inf`.
- pfSense LAN routing fix (6/30): top LAN pass rule src 192.168.2.248 -> dst 10.0.20.0/24, gw=default.
- Syncro customer 20149445; 0 open tickets, 37.5 prepaid hrs (as of 2026-06-30).