# Network Topology

## Internet Connection
- ISP: Unknown
- Gateway: 10.0.0.1 (MAC: 42:0f:c1:f0:e6:43)
- Type: ISP router — serves as gateway, DHCP server, and only "firewall"
- **No dedicated firewall appliance**

## Network Design
- Single flat subnet: 10.0.0.0/24
- No VLANs
- All devices (server, workstations, printers, APs) on the same broadcast domain

## Switches

### UniFi USW-Lite-16-PoE
- Model: Ubiquiti USW-Lite-16-PoE
- IP Address: 10.0.0.122
- MAC: 0C:EA:14:8A:8D:7F
- Port Count: 16 (PoE)
- Management: Self-hosted UniFi controller (managed by MSP)

## Key Infrastructure Devices

| Device | IP Address | MAC | Notes |
|--------|-----------|-----|-------|
| ISP Router (Gateway) | 10.0.0.1 | 42:0f:c1:f0:e6:43 | Gateway, DHCP, only firewall |
| SERVER (DC) | 10.0.0.5 | — | HPE ProLiant MicroServer Gen11 |
| UniFi Switch | 10.0.0.122 | 0C:EA:14:8A:8D:7F | USW-Lite-16-PoE |

## ARP Table (All Observed Devices)

| IP Address | MAC Address | Identified As |
|-----------|-------------|--------------|
| 10.0.0.1 | 42:0f:c1:f0:e6:43 | ISP Router (Gateway) |
| 10.0.0.5 | — | SERVER (DC) |
| 10.0.0.52 | 00:50:AA:54:8C:EF | Unknown |
| 10.0.0.100 | C4:5A:B1:F9:48:18 | Unknown |
| 10.0.0.105 | 92:CE:74:91:59:AD | Unknown |
| 10.0.0.106 | 5C:47:5E:7E:87:9E | Unknown |
| 10.0.0.110 | 48:25:67:D4:2B:1F | Unknown |
| 10.0.0.117 | 54:E0:19:E2:21:DD | Unknown |
| 10.0.0.120 | A8:9C:6C:58:9C:98 | Unknown |
| 10.0.0.121 | 48:25:67:D4:29:F0 | Unknown |
| 10.0.0.122 | 0C:EA:14:8A:8D:7F | UniFi USW-Lite-16-PoE |
| 10.0.0.123 | C4:5A:B1:F9:B2:9B | Unknown |
| 10.0.0.131 | 54:E0:19:E2:CF:D1 | Unknown |
| 10.0.0.132 | 48:25:67:D4:2A:FB | Unknown |
| 10.0.0.133 | C4:5A:B1:F9:66:BC | Unknown |
| 10.0.0.134 | 78:46:5C:AF:7A:EF | Unknown |
| 10.0.0.144 | 48:25:67:D4:29:3F | Unknown |
| 10.0.0.145 | 54:E0:19:E2:CB:DB | Unknown |
| 10.0.0.152 | E8:65:38:E9:45:CB | Unknown |
| 10.0.0.156 | 5A:37:74:00:8C:37 | Unknown |
| 10.0.0.161 | B0:7B:25:14:3E:F1 | Unknown |
| 10.0.0.162 | A8:9C:6C:4A:0C:78 | Unknown |
| 10.0.0.168 | 48:25:67:D4:29:57 | Unknown |
| 10.0.0.169 | A4:BB:6D:A8:F8:1B | Unknown |
| 10.0.0.171 | 76:8C:A8:6D:60:3C | Unknown |
| 10.0.0.172 | C0:BF:BE:E8:56:1D | Unknown |
| 10.0.0.184 | 22:7B:45:0B:97:9C | Unknown |
| 10.0.0.189 | 30:8D:99:A9:0B:C3 | Unknown |
| 10.0.0.192 | 48:25:67:D4:2B:0D | Unknown |
| 10.0.0.198 | 48:25:67:D4:2B:13 | Unknown |
| 10.0.0.241 | A4:BB:6D:A9:CC:B1 | Unknown |

**Note:** 31 devices observed on the network via ARP. Many are unidentified — need MAC vendor lookups and onsite correlation to map devices to workstations, printers, phones, etc.

## Network Diagram
```
[Internet]
    |
[ISP Router: 10.0.0.1] -- DHCP, Gateway, "Firewall"
    |
[UniFi USW-Lite-16-PoE: 10.0.0.122]
    |
    +-- SERVER (DC): 10.0.0.5
    +-- 7 Workstations (Win11 Pro)
    +-- ~20 other devices (printers, phones, etc.)
```

## Notes
- Flat network with no segmentation — all devices can reach all other devices
- No dedicated firewall — ISP router is the only perimeter device
- MAC 42:0f:c1:f0:e6:43 on the gateway is an unusual/randomized MAC — confirms consumer-grade ISP equipment
- Several MAC prefixes repeat (48:25:67, C4:5A:B1, 54:E0:19, A8:9C:6C) — likely same vendor, possibly UniFi APs, printers, or phones
- Onsite visit needed to correlate ARP entries to physical devices