Interactive Tools

Port Wiring & Switch Faceplates

Combined NIC-to-switch wiring guide and interactive faceplate explorer for Site A's approved L2 target and Site B's unchanged layout.

Exact NIC-to-port cabling and physical switch faceplates for both sites. Site A's target distributes links across three 10×RJ45 + 2×SFP+ Layer-2 switches joined by an RSTP triangle; Site B remains on its independent design. Select a site, switch, and port to trace the handoff, VLAN profile, and fabric assignment.

Bootstrap and Target Stay Physically Separate

XG6 p4 services one host or BMC at a time; p5/p6 stay disconnected. No XG10 ever connects to UCG Max or XG6, including for adoption. All three are adopted only on final VLAN 10 on the OPNsense-backed target plane.

SITE A · PHYSICAL CUTOVER MAP

Two isolated paths, one controlled handoff.

Select or focus a device. Only its physical cables brighten; the inspector resolves the exact port and phase.

A8 moves WAN only
LIVE / RECOVERYBootstrap island

UCG Max + XG 6 PoE

NO SHARED L2XG10 never connects to UCG Max or XG6
FINAL ADDRESSESTarget fabric

OPNsense + 3× XG10 RSTP

Wire language

  • WAN handoff
  • Bootstrap-only lead
  • OPNsense LAN trunk
  • 10G SFP+ DAC
  • AP PoE link
RECOVERY SWITCH

XG 6 PoE

4 physical links

The XG 6 PoE stays on the bootstrap network. Ports 5 and 6 remain disconnected; no XG10 ever attaches to this switch.

  • p2 → AP until A7
  • p3 → OPNsense WAN until A8
  • p4 → one endpoint · p5/p6 disconnected
Follow cable
  1. A3
    Build + adoptedge nic2 → sw1; add sw2/sw3 through the target-only VLAN-10 tree.
  2. A4
    Commission LANProve the final VLANs, DHCP, DNS, NAT, and policy on the A3 tree.
  3. A6
    Close trianglesa-sw-02 p12 ↔ sa-sw-03 p11 after RSTP validation.
  4. A7
    Move APXG6 p2 → sa-sw-03 p6; validate every SSID and policy.
  5. A8
    Move WANONT leaves UCG Max and lands on sa-edge-01 nic3.
XG6 p5/p6 remain disconnected; every XG10 is adopted only on the OPNsense-backed target plane.

SITE A · CUTOVER WIRING + SIGNAL MAP

Port Wiring & Switch Faceplates

Trace every approved chassis handoff, VLAN profile, and fabric link.

Not deployed

Follow the phase order. Keep XG6 p5/p6 disconnected. Build and adopt the A3 target-only tree through edge nic2→sw1, sw1↔sw2, and sw1↔sw3; no XG10 ever connects to UCG/XG6. Move control endpoints in A5, and add the sw2↔sw3 DAC only in A6. PoE stays off except on commissioned AP ports.

sa-sw-01

UniFi Switch Pro XG 10 PoE · 10× 10GbE RJ45 PoE+++ · 2× 10G SFP+

Management
10.10.10.2
RSTP
4096

PORT WIRING · PHYSICAL TRUTH

The Faceplate Is the Diagram

Select a physical jack or assignment card to resolve its endpoint, VLAN profile, and fabric role without obscuring the hardware.

EXACT HARDWARE GEOMETRY · 10× RJ45 + 2× SFP+

sa-sw-01
PORT 01 · RJ45

sa-edge-01 — nic2 / vmbr2

Connected

A-EDGE-ROUTER · Native 999 · Tagged 10,20,30,40,50,70,80,90,100,110,120 · PoE disabled

Front faceplate of a UniFi Switch Pro XG 10 PoE with ports 1 through 10 as RJ45 and ports 11 and 12 as SFP+

PORT ASSIGNMENT DECK

Every Handoff, One Physical Source of Truth

Select a card or the matching jack above.

  • Endpoint
  • PoE edge
  • Fabric DAC
  • Disabled / spare

Native sink 999 · explicit allow-lists · no LACP · no switch L3

Approved physical port schedule for sa-sw-01
Physical portConnected deviceNetwork assignment
01RJ45sa-edge-01nic2 / vmbr2A-EDGE-ROUTERNative VLAN 999Tagged VLANs 10, 20, 30, 40, 50, 70, 80, 90, 100, 110, 120PoE off
02RJ45sa-edge-01nic1 / vmbr3Access VLAN 25Dedicated Corosync linkPoE off
03RJ45sa-stor-01XL710 port 1Native VLAN 999Tagged VLANs 25, 30, 70, 80PoE off
04RJ45sa-stor-01XL710 port 4Access VLAN 90PoE off
05RJ45sa-cmp-01X550 port 2Native VLAN 999Tagged VLANs 60, 90PoE off
06RJ45sa-cmp-02built-in management interfaceAccess VLAN 20PoE off
07–09RJ45UnassignedNo endpoint connectedA-QUARANTINENative VLAN 999Administratively disabled
10RJ45Emergency administrationMaintenance-only connectionAccess VLAN 10Disabled except during maintenance
11SFP+sa-sw-02SFP+ port 11A-FABRIC10G inter-switch DAC
12SFP+sa-sw-03SFP+ port 12A-FABRIC10G inter-switch DAC

FABRIC MAP · PHASE-GATED REDUNDANCY

How the Three-Switch Fabric Carries Traffic

Read the physical links, trunk profile, and routing boundaries as one system.

PHYSICAL LAYER10G DAC triangle
Three-switch ten-gigabit DAC topologyA3 connects switch 1 port 11 to switch 2 port 11 and switch 1 port 12 to switch 3 port 12. A6 connects switch 2 port 12 to switch 3 port 11, completing the RSTP triangle.P11 ↔ P11A3 · ONLINEP12 ↔ P12A3 · ONLINEP12 ↔ P11A6 · CLOSE LOOPFABRIC ROOTsa-sw-014096SECONDARYsa-sw-028192TERTIARYsa-sw-0312288
  • sa-sw-01 SFP+ 11 connects to sa-sw-02 SFP+ 11
  • sa-sw-02 SFP+ 12 connects to sa-sw-03 SFP+ 11
  • sa-sw-03 SFP+ 12 connects to sa-sw-01 SFP+ 12
LOGICAL LAYERA-FABRIC trunk profile
A-FABRIC10G SFP+ TRUNK
NATIVE999

Unrouted sink

EXPLICIT TAGGED ALLOW-LIST13 VLANs
10202530405060708090100110120
A3Build treesw1↔sw2 + sw1↔sw3
A6Close trianglesw2↔sw3 joins
RSTPVerify blockConfirm actual end
VLAN 999Unrouted sinkNative on infrastructure trunks
DAC △Link redundancyNo host LACP
sa-fw-01All gatewaysSwitch fabric stays L2
VLAN 60VLAN 6560 is L2-only · 65 not carried

IP Mapping by Phase

Interactive Site A A0-A11 address checkpoints, from the UCG Max bootstrap island through final OPNsense routing and platform networks.

Network Topology Map

Interactive SVG map of both sites: Site A's OPNsense-routed UniFi L2 fabric, Site B's L2 core and UniFi WAN-transit branch, and the WireGuard link.