Interactive Tools

Network Topology Map

Interactive SVG map of both sites: Site A's OPNsense-routed UniFi L2 fabric, Site B's L2 core and UniFi WAN-transit branch, and the WireGuard link.

The sites are intentionally asymmetric. Site A's approved target is three UniFi L2 switches behind OPNsense, with the UCG Max/XG6 retained only as the bootstrap/rollback island. Site B retains its Netgear L2 core and USG Pro VLAN 253 branch. A future WireGuard tunnel on 10.255.0.0/24 joins the firewalls.

PHYSICAL + LOGICAL MAP · TWO FAILURE DOMAINS

Two Sites. One Routed System.

Select or focus a node. Its routed links brighten while the inspector explains the physical role and logical boundary.

Site A fabric · target

Wire language

  • WAN edge
  • WireGuard route
  • Firewall to core
  • Platform path
  • Client branch
ROUTED TRANSIT

WireGuard

2 active links

WireGuard joins the two OPNsense firewalls while preserving each site as an independent Layer 2, quorum, and storage boundary.

  • sa-fw-01 10.255.0.1
  • sb-fw-01 10.255.0.2
  • No L2, Corosync, or Ceph-cluster stretch
Follow connection

Port Wiring & Switch Faceplates

Combined NIC-to-switch wiring guide and interactive faceplate explorer for Site A's approved L2 target and Site B's unchanged layout.

VLAN Matrix

Interactive VLAN reference with OPNsense-owned Site A gateways, no-gateway networks, native sink VLAN 999, and unchanged Site B VLAN 253.