Reference

IP Address Tables

Master per-host IP reference for Site A and Site B: Proxmox management, IPMI, Corosync, storage, Ceph, backup, DNS, PBS, and Kubernetes VIP addresses.

Per-host and per-service IP reference for both sites. For the subnet layout and address-block convention, see IP Addressing; for switch port assignments, see Port Tables.

Site A Bootstrap-to-Final Moves

Bootstrap addresses are lifecycle addresses on the one-at-a-time XG6 p4 service lead. XG6 p5/p6 remain disconnected. A3 adopts every XG10 directly on the isolated target tree at its final VLAN-10 address; no XG10 receives a UCG lease or connects to UCG Max/XG6. If factory-default discovery needs DHCP, a short-lived target-side VLAN-10 scope is removed after static .2/.3/.4 assignment.

EndpointBootstrapFinal attachmentFinal address
sa-sw-01none; target-only adoptionedge trunk on sw1 p110.10.10.2
sa-sw-02none; target-only adoptionsw1 p11 ↔ sw2 p1110.10.10.3
sa-sw-03none; target-only adoptionsw1 p12 ↔ sw3 p1210.10.10.4
sa-uos-01192.168.1.40; add target tag-10 vNIC during A3remove bootstrap vNIC in A510.10.10.40
sa-edge-01 IPMI192.168.0.10 on XG6 p4, then disconnectedsw2 p5, VLAN 1010.10.10.10
sa-edge-01 Proxmox192.168.1.10 on XG6 p4sw3 p5, VLAN 2010.10.20.10
sa-stor-01 IPMI192.168.0.20 on XG6 p4, then disconnectedsw3 p2, VLAN 1010.10.10.20
sa-stor-01 Proxmox192.168.1.20 on XG6 p4, then disconnectedsw2 p2, VLAN 2010.10.20.20
sa-cmp-01 Proxmox192.168.1.11 on XG6 p4, then disconnectedsw3 p3, VLAN 2010.10.20.11
sa-cmp-02 Proxmox192.168.1.12 on XG6 p4, then disconnectedsw1 p6, VLAN 2010.10.20.12

The two BMCs and all four Proxmox management links move in A5, before the A8 WAN handoff. IPMI therefore does not stay on the XG6 until final cutover.

Site A Physical Hosts

Supernet 10.10.0.0/16. Hosts hold an L3 address only on the infrastructure VLANs they terminate; VM-service and client VLANs (30, 40, 50, 70, 80, 100, 110, 120) are bridged with no host IP.

HostProxmox Mgmt (VLAN 20)IPMI (VLAN 10)Corosync (VLAN 25)Storage / Ceph public (VLAN 60)Backup / Replication (VLAN 90)
sa-edge-0110.10.20.1010.10.10.1010.10.25.10--
sa-cmp-0110.10.20.11-10.10.25.1110.10.60.1110.10.90.11
sa-cmp-0210.10.20.12-10.10.25.1210.10.60.1210.10.90.12
sa-stor-0110.10.20.2010.10.10.2010.10.25.2010.10.60.2010.10.90.20

sa-cmp-01 and sa-cmp-02 are ThinkPads: no IPMI at any phase. sa-edge-01 carries no storage or backup interfaces; Proxmox migration traffic falls back to VLAN 20.

VLAN 60 addresses are directly attached storage endpoints with no default gateway. Future storage consumers receive a secondary VLAN 60 interface. VLAN 90 remains the routed backup/replication path.

Site B Physical Hosts

Supernet 10.20.0.0/16. Site B adds VLAN 65 (Ceph cluster, no GW) for Ceph replication traffic; it must stay local and must not traverse WireGuard.

HostProxmox Mgmt (VLAN 20)IPMI (VLAN 10)Corosync (VLAN 25)Ceph public (VLAN 60)Ceph cluster (VLAN 65)Backup / Replication (VLAN 90)
sb-edge-0110.20.20.1010.20.10.1010.20.25.10---
sb-cmp-0110.20.20.2010.20.10.2010.20.25.2010.20.60.2010.20.65.2010.20.90.20
sb-cmp-0210.20.20.2110.20.10.2110.20.25.2110.20.60.2110.20.65.2110.20.90.21
sb-cmp-0310.20.20.3010.20.10.3010.20.25.3010.20.60.3010.20.65.3010.20.90.30
sb-cmp-0410.20.20.3110.20.10.3110.20.25.3110.20.60.3110.20.65.3110.20.90.31
sb-cmp-0510.20.20.3210.20.10.3210.20.25.3210.20.60.3210.20.65.3210.20.90.32

sb-edge-01 carries no Ceph or backup interfaces. VLANs 25, 60, and 65 have no gateway by design. Never route VLAN 60 to VLAN 65.

Infrastructure Management (VLAN 10)

Switches, demoted routers, and APs hold static addresses in the .2-.9 infra band. These supersede the older UniFi XG .11/.12 and USW .11 assignments.

DeviceSite ASite B
Subnet gateway (.1)OPNsense 10.10.10.1OPNsense 10.20.10.1
Switch 1sa-sw-01 10.10.10.2sb-sw-01 10.20.10.2
Switch 2sa-sw-02 10.10.10.3sb-sw-02 10.20.10.3
Switch 3sa-sw-03 10.10.10.4-
UniFi gatewaysa-gw 10.10.10.5 retired/reservedsb-gw 10.20.10.4
sa-ap-01 (UniFi U7 Pro XGS)10.10.10.6-

Service VMs

DNS VMs

Technitium DNS VMs run on VLAN 30 (VM Services). sa-dns-01 and sb-dns-01 are primaries; sa-dns-02 and sb-dns-02 replicate via AXFR.

VMSite ASite B
DNS primary10.10.30.10 (sa-dns-01)10.20.30.10 (sb-dns-01)
DNS secondary10.10.30.11 (sa-dns-02)10.20.30.11 (sb-dns-02)

Secrets & Controller VMs

OpenBao (secrets manager) runs on VLAN 30 in the .40 service band, one instance per site on the edge E200s. The UniFi OS Server controller is Site A-only, on VLAN 10 alongside the devices it adopts.

VMSite ASite B
OpenBao (sa-bao-01 / sb-bao-01, VLAN 30)10.10.30.4010.20.30.40
UniFi OS Server (sa-uos-01, VLAN 10)10.10.10.40- (adopts over WireGuard)

Transit Reservation

Site A does not configure VLAN 253 or VLAN 4040. 10.10.253.0/24 is reserved and unused. Site B keeps VLAN 253 with OPNsense 10.20.253.1 and USG Pro WAN 10.20.253.2.

Proxmox Backup Server

Proxmox Backup Server (PBS) is dual-homed: management on VLAN 30 (VM Services), backup data on VLAN 90 (Backup / Replication). The backup-data NIC sits in the .40 service band to avoid colliding with host addresses in the .10-.39 band.

InterfaceSite A: PBS-ASite B: PBS-B
Management (VLAN 30)10.10.30.2010.20.30.20
Backup data (VLAN 90)10.10.90.4010.20.90.40

Kubernetes VIPs (VLAN 50)

K8s load-balancer and VIP addresses live on VLAN 50 (K8s LB / VIPs). MetalLB pools span .200-.250 at both sites.

PurposeSite ASite B
Kubernetes API VIP10.10.50.1010.20.50.10
Ingress (HTTP/S) VIP10.10.50.1110.20.50.11
MetalLB pool10.10.50.200 - 10.10.50.25010.20.50.200 - 10.20.50.250

Reference

Quick-lookup tables for IP addresses, switch port assignments, hardware inventory, and architectural decisions across both AORXI homelab sites.

Port Tables

Reference entry point for the exact Site A 36-port clean-slate map and Site B's unchanged port tables.