Howard's personal MSP client documentation folder imported into shared
ClaudeTools repo via /import command. Scope:
Clients (structured MSP docs under clients/<name>/docs/):
- anaise (NEW) - 13 files
- cascades-tucson - 47 files merged (existing had only reports/)
- dataforth - 18 files merged (alongside incident reports)
- instrumental-music-center - 14 files merged
- khalsa (NEW) - 22 files, multi-site (camden, river)
- kittle (NEW) - 16 files incl. fix-pdf-preview, gpo-intranet-zone
- lens-auto-brokerage (NEW) - 3 files (name matches SOPS vault)
- _client_template - 13-file scaffold for new clients
MSP tooling (projects/msp-tools/):
- msp-audit-scripts/ - server_audit.ps1, workstation_audit.ps1, README
- utilities/ - clean_printer_ports, win11_upgrade,
screenconnect-toolbox-commands
Credential handling:
- Extracted 1 inline password (Anaise DESKTOP-O8GF4SD / david)
to SOPS vault: clients/anaise/desktop-o8gf4sd.sops.yaml
- Redacted overview.md with vault reference pattern
- Scanned all 160 files for keys/tokens/connection strings -
no other credentials found
Skipped:
- Cascades/.claude/settings.local.json (per-machine config)
- Source-root CLAUDE.md (personal, claudetools has its own)
- scripts/server_audit.ps1 and workstation_audit.ps1 at source root
(identical duplicates of msp-audit-scripts versions)
Memory updates:
- reference_client_docs_structure.md (layout, conventions, active list)
- reference_msp_audit_scripts.md (locations, ScreenConnect 80-char rule)
Session log: session-logs/2026-04-16-howard-client-docs-import.md
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
174 lines
6.9 KiB
Markdown
174 lines
6.9 KiB
Markdown
# Network Topology
|
|
|
|
## Internet Connections
|
|
### Primary WAN
|
|
- ISP: (not documented in config)
|
|
- Interface: igc0
|
|
- IP Address: 184.191.143.62/30
|
|
- Gateway: 184.191.143.61
|
|
- Type: Static
|
|
|
|
### Secondary WAN (WANCOAX)
|
|
- Interface: igc3
|
|
- IP Address: DHCP
|
|
- Type: Coax backup
|
|
- Monitor: 8.8.8.8
|
|
- Failover: Part of WAN_Group (Tier 1 with primary)
|
|
|
|
## Switches
|
|
|
|
### 1st Floor USW (Core)
|
|
- Model: UniFi USW (48-port PoE)
|
|
- MAC: 28:70:4e:dc:59:8d
|
|
- IP Address: 192.168.3.155
|
|
- Uplink: GbE
|
|
- Location: 1st Floor
|
|
- Clients: 10
|
|
- SFP+ 1: -> Switch 2nd Floor (192.168.2.193)
|
|
- SFP+ 4: -> Switch MemCare (192.168.2.215)
|
|
- Notable ports:
|
|
- Port 8: Epson printer (192.168.2.207)
|
|
- Port 36: USW-16-PoE VoIP switch
|
|
- Port 40: Synology NAS (192.168.0.120)
|
|
- Port 41: AP 103
|
|
- Port 45: Canon printer (192.168.2.230)
|
|
- Port 48: CS-QB (192.168.2.228)
|
|
|
|
### Switch 2nd Floor
|
|
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **PENDING REPLACEMENT**
|
|
- Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:a5:88)
|
|
- IP Address: 192.168.2.193
|
|
- Uplink: SFP+ (GbE) to 1st Floor USW
|
|
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
|
|
- SFP 1: -> 3rd Floor switch
|
|
- SFP 2: -> 1st Floor USW (192.168.3.155)
|
|
|
|
### Switch 3rd Floor
|
|
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **PENDING REPLACEMENT**
|
|
- Previous: UniFi 24-port PoE (same model as floors 2/4/old MemCare)
|
|
- Test unit: USW Pro Max 16 PoE (MAC: 28:70:4e:32:59:24, IP: 192.168.3.134) — to be removed
|
|
- IP Address: 192.168.3.134
|
|
- Uplink: SFP (GbE)
|
|
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
|
|
- SFP+ 1: -> Switch 4th Floor
|
|
- SFP+ 2: -> Switch 2nd Floor
|
|
|
|
### Switch 4th Floor
|
|
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **PENDING REPLACEMENT**
|
|
- Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:a9:a2)
|
|
- IP Address: 192.168.3.65
|
|
- Uplink: SFP+ (GbE) to 3rd Floor switch
|
|
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
|
|
- SFP 2: -> 3rd Floor switch
|
|
|
|
### Spare Switches (powered off)
|
|
- 3x UniFi 24-port PoE (original floor 2, 3, 4 switches)
|
|
- 1x USW Pro Max 16 PoE (3rd floor test unit, MAC: 28:70:4e:32:59:24)
|
|
- Status: Powered off, available as spares if needed
|
|
|
|
### Switch MemCare
|
|
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **REPLACED 2026-04-07**
|
|
- Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:b2:08)
|
|
- IP Address: 192.168.2.215
|
|
- Uplink: SFP+ (GbE) to 1st Floor USW
|
|
- Clients: 9
|
|
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
|
|
- Notable: Serves memory care wing (5th/6th floor APs, dining, nurse station)
|
|
- Installed via UniFi Device Replacement — settings imported from old switch
|
|
|
|
### USW Lite 8 PoE
|
|
- Model: UniFi USW Lite 8 PoE
|
|
- MAC: f4:e2:c6:57:27:87
|
|
- IP Address: 192.168.3.214
|
|
- Location: MemCare/Kitchen area
|
|
- Port 1: Dining Room AP
|
|
- Port 2: Printer (192.168.2.202)
|
|
- Port 3: Kitchen AP
|
|
- Port 7: CHEF-PC (INTERNAL VLAN, 10.0.20.232)
|
|
- Port 8: Uplink to Switch MemCare
|
|
|
|
### USW-16-PoE (VoIP Switch)
|
|
- Model: UniFi USW-16-PoE
|
|
- MAC: d8:b3:70:21:94:5f
|
|
- IP Address: 192.168.3.223
|
|
- Location: 1st Floor (connected to Port 36 of 1st Floor USW)
|
|
- Clients: 9
|
|
- Ports 1-8: AudioCodes VoIP phones (ACL_xxxxx)
|
|
- Port 15: Uplink to 1st Floor USW
|
|
- Port 16: Vertical-Remote (192.168.2.180)
|
|
|
|
## Switch Interconnect Topology
|
|
```
|
|
1st Floor USW (Core - 48 port)
|
|
├── SFP+ 1 ──> Switch 2nd Floor (24 port)
|
|
│ ├── SFP 1 ──> 3rd Floor USW Pro Max 16 PoE
|
|
│ │ └── SFP+ 1 ──> Switch 4th Floor (24 port)
|
|
│ └── SFP 2 ──> 1st Floor USW (loop/redundancy)
|
|
├── SFP+ 4 ──> Switch MemCare (24 port)
|
|
│ └── Port 15 ──> USW Lite 8 PoE
|
|
└── Port 36 ──> USW-16-PoE (VoIP, 16 port)
|
|
```
|
|
|
|
## Wireless Access Points (82 total)
|
|
|
|
### AP Summary by Floor
|
|
| Floor | APs | Offline | Models | Notes |
|
|
|-------|-----|---------|--------|-------|
|
|
| 1 | 16 | 3 (108, 121, 128) | U6-Lite, U7 Pro | Includes Rec Room, Kitchen, Dining |
|
|
| 2 | 13 | 1 (204) | U6-Lite, U7 Pro | Includes 2nd Floor Atrium |
|
|
| 3 | 13 | 1 (335) | U6-Lite, U7 Pro, U6 Pro | Includes 3rd Floor Atrium |
|
|
| 4 | 10 | 3 (406, 441, 450, 4th Fl Atrium) | Various | |
|
|
| 5 | 2 | 0 | U6-Lite | 505, 517 |
|
|
| 6 | 3 | 0 | U6-Lite, U7 Pro | 608, 615, 622 |
|
|
| Common | 6 | 0 | Various | Dining, Kitchen, MemCare areas |
|
|
| Special | 1 | 0 | - | CC Bridge (mesh) |
|
|
|
|
### Offline APs (Needs Attention)
|
|
| AP Name | MAC | Last IP | Uplink | Notes |
|
|
|---------|-----|---------|--------|-------|
|
|
| 108 | 0c:ea:14:3e:55:c6 | 192.168.6.127 | Mesh | Wrong IP range (192.168.6.x) |
|
|
| 121 | 0c:ea:14:3e:5e:ae | 192.168.2.184 | Mesh | |
|
|
| 128 | 0c:ea:14:1b:2e:d1 | 192.168.2.95 | - | No uplink |
|
|
| 204 | 0c:ea:14:3e:5d:42 | 192.168.7.243 | - | Wrong IP range (192.168.7.x) |
|
|
| 335 | 0c:ea:14:3e:54:5a | 192.168.2.206 | - | |
|
|
| 406 | 0c:ea:14:36:aa:01 | 192.168.2.4 | - | |
|
|
| 441 | 0c:ea:14:3e:5e:32 | 192.168.2.200 | - | |
|
|
| 450 | 0c:ea:14:36:72:ad | 192.168.6.207 | - | Wrong IP range (192.168.6.x) |
|
|
| 4th Floor Atrium | 0c:ea:14:36:b3:61 | 192.168.3.28 | - | |
|
|
|
|
### Common Area APs
|
|
| AP Name | MAC | IP Address | Uplink | Clients | Location |
|
|
|---------|-----|-----------|--------|---------|----------|
|
|
| Dining Room | 0c:ea:14:36:85:89 | 192.168.2.177 | GbE | 26 | Main dining |
|
|
| Kitchen | 0c:ea:14:36:af:91 | 192.168.3.73 | GbE | 9 | Kitchen |
|
|
| Memcare Nurse Station | 0c:ea:14:3e:62:3a | 192.168.3.129 | GbE | 8 | MemCare wing |
|
|
| Memcare TV Room | 0c:ea:14:3e:56:16 | 192.168.2.14 | GbE | 7 | MemCare TV room |
|
|
| Memcare Piano | 0c:ea:14:3e:57:fe | 192.168.2.188 | GbE | 1 | MemCare piano area |
|
|
| CC Bridge | 0c:ea:14:36:13:45 | 192.168.2.237 | Mesh | 7 | Bridge/connector |
|
|
| 2nd Floor Atrium | 0c:ea:14:3e:58:5e | 192.168.3.215 | GbE | 18 | 2nd floor common |
|
|
| 3rd Floor Atrium | 0c:ea:14:3e:63:be | 192.168.3.138 | GbE | 8 | 3rd floor common |
|
|
|
|
## Key Infrastructure Devices
|
|
| Device | IP Address | MAC | Location | Notes |
|
|
|--------|-----------|-----|----------|-------|
|
|
| pfSense Firewall | 192.168.0.1 | 00:f1:f5:34:b3:4a | Server room | Primary gateway |
|
|
| CS-SERVER | 192.168.2.254 | 00:22:19:60:50:db | Server room | DC, Hyper-V host (Dell R610) |
|
|
| CS-SERVER iDRAC | 192.168.2.65 | 00:22:19:60:50:e3 | Server room | Dell out-of-band management |
|
|
| Synology NAS (cascadesds) | 192.168.0.120 | 00:11:32:a7:94:10 | 1st Floor USW Port 40 | synology.cascades.local |
|
|
| CS-QB (Hyper-V VM) | 192.168.2.228 | 00:15:5d:02:3b:02 | 1st Floor USW Port 48 | VoIP server |
|
|
| Vertical-Remote | 192.168.2.180 | e4:e7:49:52:3a:06 | USW-16-PoE Port 16 | VoIP management |
|
|
| NurseAssist | 192.168.3.254 | a8:6d:aa:51:d6:55 | — | Nurse call system? |
|
|
|
|
## VoIP Phones (AudioCodes)
|
|
All on USW-16-PoE, ports 1-8:
|
|
| Device | IP Address | Port |
|
|
|--------|-----------|------|
|
|
| ACL_14325765 | 192.168.3.1 | Port 1 |
|
|
| ACL_14827614 | 192.168.2.143 | Port 2 |
|
|
| ACL_14865060 | 192.168.3.185 | Port 3 |
|
|
| ACL_14761438 | 192.168.2.142 | Port 4 |
|
|
| ACL_14761360 | 192.168.2.29 | Port 5 |
|
|
| ACL_14761310 | 192.168.3.192 | Port 6 |
|
|
| ACL_14761385 | 192.168.3.174 | Port 7 |
|
|
| ACL_14761495 | 192.168.3.102 | Port 8 |
|