Files
claudetools/clients/cascades-tucson/docs/network/topology.md
Howard Enos 8d975c1b44 import: ingested 160 files from C:\Users\howar\Clients
Howard's personal MSP client documentation folder imported into shared
ClaudeTools repo via /import command. Scope:

Clients (structured MSP docs under clients/<name>/docs/):
- anaise       (NEW)  - 13 files
- cascades-tucson     - 47 files merged (existing had only reports/)
- dataforth           - 18 files merged (alongside incident reports)
- instrumental-music-center - 14 files merged
- khalsa       (NEW)  - 22 files, multi-site (camden, river)
- kittle       (NEW)  - 16 files incl. fix-pdf-preview, gpo-intranet-zone
- lens-auto-brokerage (NEW) - 3 files (name matches SOPS vault)
- _client_template    - 13-file scaffold for new clients

MSP tooling (projects/msp-tools/):
- msp-audit-scripts/ - server_audit.ps1, workstation_audit.ps1, README
- utilities/         - clean_printer_ports, win11_upgrade,
                       screenconnect-toolbox-commands

Credential handling:
- Extracted 1 inline password (Anaise DESKTOP-O8GF4SD / david)
  to SOPS vault: clients/anaise/desktop-o8gf4sd.sops.yaml
- Redacted overview.md with vault reference pattern
- Scanned all 160 files for keys/tokens/connection strings -
  no other credentials found

Skipped:
- Cascades/.claude/settings.local.json (per-machine config)
- Source-root CLAUDE.md (personal, claudetools has its own)
- scripts/server_audit.ps1 and workstation_audit.ps1 at source root
  (identical duplicates of msp-audit-scripts versions)

Memory updates:
- reference_client_docs_structure.md (layout, conventions, active list)
- reference_msp_audit_scripts.md (locations, ScreenConnect 80-char rule)

Session log: session-logs/2026-04-16-howard-client-docs-import.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-16 19:43:58 -07:00

6.9 KiB

Network Topology

Internet Connections

Primary WAN

  • ISP: (not documented in config)
  • Interface: igc0
  • IP Address: 184.191.143.62/30
  • Gateway: 184.191.143.61
  • Type: Static

Secondary WAN (WANCOAX)

  • Interface: igc3
  • IP Address: DHCP
  • Type: Coax backup
  • Monitor: 8.8.8.8
  • Failover: Part of WAN_Group (Tier 1 with primary)

Switches

1st Floor USW (Core)

  • Model: UniFi USW (48-port PoE)
  • MAC: 28:70:4e:dc:59:8d
  • IP Address: 192.168.3.155
  • Uplink: GbE
  • Location: 1st Floor
  • Clients: 10
  • SFP+ 1: -> Switch 2nd Floor (192.168.2.193)
  • SFP+ 4: -> Switch MemCare (192.168.2.215)
  • Notable ports:
    • Port 8: Epson printer (192.168.2.207)
    • Port 36: USW-16-PoE VoIP switch
    • Port 40: Synology NAS (192.168.0.120)
    • Port 41: AP 103
    • Port 45: Canon printer (192.168.2.230)
    • Port 48: CS-QB (192.168.2.228)

Switch 2nd Floor

  • Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — PENDING REPLACEMENT
  • Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:a5:88)
  • IP Address: 192.168.2.193
  • Uplink: SFP+ (GbE) to 1st Floor USW
  • UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
  • SFP 1: -> 3rd Floor switch
  • SFP 2: -> 1st Floor USW (192.168.3.155)

Switch 3rd Floor

  • Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — PENDING REPLACEMENT
  • Previous: UniFi 24-port PoE (same model as floors 2/4/old MemCare)
  • Test unit: USW Pro Max 16 PoE (MAC: 28:70:4e:32:59:24, IP: 192.168.3.134) — to be removed
  • IP Address: 192.168.3.134
  • Uplink: SFP (GbE)
  • UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
  • SFP+ 1: -> Switch 4th Floor
  • SFP+ 2: -> Switch 2nd Floor

Switch 4th Floor

  • Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — PENDING REPLACEMENT
  • Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:a9:a2)
  • IP Address: 192.168.3.65
  • Uplink: SFP+ (GbE) to 3rd Floor switch
  • UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
  • SFP 2: -> 3rd Floor switch

Spare Switches (powered off)

  • 3x UniFi 24-port PoE (original floor 2, 3, 4 switches)
  • 1x USW Pro Max 16 PoE (3rd floor test unit, MAC: 28:70:4e:32:59:24)
  • Status: Powered off, available as spares if needed

Switch MemCare

  • Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — REPLACED 2026-04-07
  • Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:b2:08)
  • IP Address: 192.168.2.215
  • Uplink: SFP+ (GbE) to 1st Floor USW
  • Clients: 9
  • UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
  • Notable: Serves memory care wing (5th/6th floor APs, dining, nurse station)
  • Installed via UniFi Device Replacement — settings imported from old switch

USW Lite 8 PoE

  • Model: UniFi USW Lite 8 PoE
  • MAC: f4:e2:c6:57:27:87
  • IP Address: 192.168.3.214
  • Location: MemCare/Kitchen area
  • Port 1: Dining Room AP
  • Port 2: Printer (192.168.2.202)
  • Port 3: Kitchen AP
  • Port 7: CHEF-PC (INTERNAL VLAN, 10.0.20.232)
  • Port 8: Uplink to Switch MemCare

USW-16-PoE (VoIP Switch)

  • Model: UniFi USW-16-PoE
  • MAC: d8:b3:70:21:94:5f
  • IP Address: 192.168.3.223
  • Location: 1st Floor (connected to Port 36 of 1st Floor USW)
  • Clients: 9
  • Ports 1-8: AudioCodes VoIP phones (ACL_xxxxx)
  • Port 15: Uplink to 1st Floor USW
  • Port 16: Vertical-Remote (192.168.2.180)

Switch Interconnect Topology

1st Floor USW (Core - 48 port)
├── SFP+ 1 ──> Switch 2nd Floor (24 port)
│                ├── SFP 1 ──> 3rd Floor USW Pro Max 16 PoE
│                │               └── SFP+ 1 ──> Switch 4th Floor (24 port)
│                └── SFP 2 ──> 1st Floor USW (loop/redundancy)
├── SFP+ 4 ──> Switch MemCare (24 port)
│                └── Port 15 ──> USW Lite 8 PoE
└── Port 36 ──> USW-16-PoE (VoIP, 16 port)

Wireless Access Points (82 total)

AP Summary by Floor

Floor APs Offline Models Notes
1 16 3 (108, 121, 128) U6-Lite, U7 Pro Includes Rec Room, Kitchen, Dining
2 13 1 (204) U6-Lite, U7 Pro Includes 2nd Floor Atrium
3 13 1 (335) U6-Lite, U7 Pro, U6 Pro Includes 3rd Floor Atrium
4 10 3 (406, 441, 450, 4th Fl Atrium) Various
5 2 0 U6-Lite 505, 517
6 3 0 U6-Lite, U7 Pro 608, 615, 622
Common 6 0 Various Dining, Kitchen, MemCare areas
Special 1 0 - CC Bridge (mesh)

Offline APs (Needs Attention)

AP Name MAC Last IP Uplink Notes
108 0c:ea:14:3e:55:c6 192.168.6.127 Mesh Wrong IP range (192.168.6.x)
121 0c:ea:14:3e:5e:ae 192.168.2.184 Mesh
128 0c:ea:14:1b:2e:d1 192.168.2.95 - No uplink
204 0c:ea:14:3e:5d:42 192.168.7.243 - Wrong IP range (192.168.7.x)
335 0c:ea:14:3e:54:5a 192.168.2.206 -
406 0c:ea:14:36:aa:01 192.168.2.4 -
441 0c:ea:14:3e:5e:32 192.168.2.200 -
450 0c:ea:14:36:72:ad 192.168.6.207 - Wrong IP range (192.168.6.x)
4th Floor Atrium 0c:ea:14:36:b3:61 192.168.3.28 -

Common Area APs

AP Name MAC IP Address Uplink Clients Location
Dining Room 0c:ea:14:36:85:89 192.168.2.177 GbE 26 Main dining
Kitchen 0c:ea:14:36:af:91 192.168.3.73 GbE 9 Kitchen
Memcare Nurse Station 0c:ea:14:3e:62:3a 192.168.3.129 GbE 8 MemCare wing
Memcare TV Room 0c:ea:14:3e:56:16 192.168.2.14 GbE 7 MemCare TV room
Memcare Piano 0c:ea:14:3e:57:fe 192.168.2.188 GbE 1 MemCare piano area
CC Bridge 0c:ea:14:36:13:45 192.168.2.237 Mesh 7 Bridge/connector
2nd Floor Atrium 0c:ea:14:3e:58:5e 192.168.3.215 GbE 18 2nd floor common
3rd Floor Atrium 0c:ea:14:3e:63:be 192.168.3.138 GbE 8 3rd floor common

Key Infrastructure Devices

Device IP Address MAC Location Notes
pfSense Firewall 192.168.0.1 00:f1:f5:34:b3:4a Server room Primary gateway
CS-SERVER 192.168.2.254 00:22:19:60:50:db Server room DC, Hyper-V host (Dell R610)
CS-SERVER iDRAC 192.168.2.65 00:22:19:60:50:e3 Server room Dell out-of-band management
Synology NAS (cascadesds) 192.168.0.120 00:11:32:a7:94:10 1st Floor USW Port 40 synology.cascades.local
CS-QB (Hyper-V VM) 192.168.2.228 00:15:5d:02:3b:02 1st Floor USW Port 48 VoIP server
Vertical-Remote 192.168.2.180 e4:e7:49:52:3a:06 USW-16-PoE Port 16 VoIP management
NurseAssist 192.168.3.254 a8:6d:aa:51:d6:55 Nurse call system?

VoIP Phones (AudioCodes)

All on USW-16-PoE, ports 1-8:

Device IP Address Port
ACL_14325765 192.168.3.1 Port 1
ACL_14827614 192.168.2.143 Port 2
ACL_14865060 192.168.3.185 Port 3
ACL_14761438 192.168.2.142 Port 4
ACL_14761360 192.168.2.29 Port 5
ACL_14761310 192.168.3.192 Port 6
ACL_14761385 192.168.3.174 Port 7
ACL_14761495 192.168.3.102 Port 8