// as2.no — network

Physical topology, switches, access points, firewall.

arild@as2.no:~/network$ cat topology.md

# Topology

                                      ___________
                                     /  Telenor  \
                                     \  Internet /
                                      ─────┬─────
                                           │
                    ┌──────────────────────┴─────────────────────┐
                    │ STUE                                       │
                    │    ASUS router       .1                    │
                    │    C2960CX-1         .4                    │
                    │    AP4800-1 (WLC ME) .7  /  .120           │
                    └──────────────────────┬─────────────────────┘
                                           ┊  wireless backhaul
               ┌───────────────────────────┼───────────────────────────┐
               ┊                           ┊                           ┊
   ┌───────────┴──────────┐    ┌───────────┴──────────┐    ┌───────────┴──────────┐
   │ KJELLERSTUE          │    │ BOD                  │    │ KONTOR               │
   │    C2960CX-2    .5   │    │    C2960CX-3    .2   │    │    C2960CX-4    .6   │
   │    AP4800-2     .152 │    │    AP4800-3     .132 │    │    AP4800-4     .105 │
   └──────────────────────┘    └───────────┬──────────┘    └──────────────────────┘
                                           │
                                      ┌────┴────┐
                                      │ Proxmox │
                                      │   .20   │
                                      ├─────────┤
                                      │ ░░░░░░░ │
                                      │ ░░░░░░░ │
                                      └─────────┘

Single flat L2 segment on 192.168.10.0/24. The ASUS router, C2960CX-1 and AP4800-1 all sit in Stue; AP4800-1 runs the embedded WLC (ME) and acts as the wireless root, providing a wireless backhaul to AP4800-2 (Kjellerstue) and AP4800-3 (Bod). Each remote AP feeds its room's 2960CX switch — including Kontor, where C2960CX-4 reaches the LAN over AP4800-4's wireless backhaul. The Kontor pair (AP4800-4 + C2960CX-4) is now online.

arild@as2.no:~/network$ cat switches.md

# Switches — Cisco Catalyst 2960CX

IP	Hostname	Location	IOS	Status
192.168.10.2	C2960CX-3	Bod	15.2(7)E14	up
192.168.10.4	C2960CX-1	Stue	15.2(7)E14	up
192.168.10.5	C2960CX-2	Kjellerstue	15.2(7)E14	up
192.168.10.6	C2960CX-4	Kontor	15.2(7)E14	up

SSH key auth (RSA) configured on all four switches. Uniform fleet: WS-C2960CX-8PC-L hardware running IOS 15.2(7)E14 (C2960CX-UNIVERSALK9-M). C2960CX-4 (Kontor) is normally powered off.

arild@as2.no:~/network$ cat wireless.md

# Wireless — AP 4800 family

Hostname	Mgmt IP	Location	MAC	Notes
AP4800-4	192.168.10.107	Kontor	78:72:5D:3F:89:2C
AP4800-3	192.168.10.132	Bod	78:72:5D:FB:8F:F6
AP4800-2	192.168.10.152	Kjellerstue	78:72:5D:3F:9A:C2
AP4800-1	192.168.10.7	Stue	78:72:5D:FB:8F:EA	Hosts the embedded WLC (Mobility Express) — controller VIP .7

Cisco AP 4800 access points joined to an embedded WLC running on AP4800-1 (AireOS 8.10.196.0), reachable at 192.168.10.7. Each room pairs a 2960CX switch with an AP4800; the Kontor pair (AP4800-4 + C2960CX-4) is now online, with the switch reaching the LAN over AP4800-4's wireless backhaul.

arild@as2.no:~/network$ sudo ufw status

# Firewall — UFW (on as2.no server)

HTTP/HTTPS (80, 443): restricted to 192.168.10.0/24 — LAN only
DNS (53/tcp+udp): restricted to 192.168.10.0/24 — for dnsmasq
WireGuard (51820/udp): open to internet
SSH (22): restricted to LAN

arild@as2.no:~/network$ cat wan.md

# WAN

Public IP: 85.165.99.110 (dynamic, tracked by domeneshop-ip-updater)
Public domains: as2.no, arildsorli.no
Inbound from internet: WireGuard 51820/udp only
For full subnet/device map see ip-plan

arild@as2.no:~/network$ ls ../

index.html — homepage

wiki.html — server wiki

monitoring.html — metrics & logs

hardware.html — hardware specs

ip-plan.html — IP plan

games.html — browser games

arild@as2.no:~/network$ cd ..