Network Topology

Physical wiring, VLANs, and the software paths (DNS sync, reverse proxy, VPN, metrics) layered on top — hand-maintained reference for the XMSystems homelab.

Zen · 1 Gbps FTTP UniFi Debian 13 10.36.100.0/24

Physical & Logical Topology

ISP GATEWAY SWITCHES HOSTS & DEVICES SERVICES WAN · Port 5 Zen Internet City Fibre · 1 Gbps FTTP · symmetrical docs ↗ XAN-CGU 10.36.100.1 UniFi Cloud Gateway Ultra · firewall · VLAN routing docs ↗ Port 2 Port 3 XAN-USW-DOWNSTAIRS 10.36.100.11 USW Lite 16 PoE · ground floor docs ↗ XAN-USW-UPSTAIRS 10.36.100.10 USW Lite 16 PoE · first floor docs ↗ P15 P16 P4 P10 P5 P7 · PoE P3 P4 · PoE P6 · PoE P5 Tethys 10.36.100.152 Monitoring host 11 containers ↗ Titan 10.36.100.150 Primary server 30 containers ↗ NCC-1702 10.36.100.2 Pi-hole · primary + PiVPN ↗ Phobos 10.36.100.151 NAS · secondary 23 containers ↗ VLAN 102 Reolink 10.36.102.225 Indoor PoE cam motioneye ↗ U7-Pro-XG 10.36.100.253 WiFi 7 · PoE Ground floor ↗ WiFi VLAN 102 Tapo C121 10.36.102.227 Int-Kitchen · WiFi cam motioneye ↗ NCC-1703 10.36.100.3 Pi-hole · replica Upstairs ↗ U6-Enterprise 10.36.100.254 WiFi 6 · PoE Upstairs ↗ UAP-AC-LR 10.36.100.252 WiFi 5 · PoE Upstairs ↗ VLAN 102 Dahua 10.36.102.222 Outdoor PoE cam motioneye ↗ nebula-sync · DNS PiVPN · WireGuard Traefik · reverse proxy Prometheus · metrics scrape DNS · Pi-hole Fleet NCC-1702 · NCC-1703 · NCC-1704 (Docker, Phobos) Synced via nebula-sync · network-wide ad-blocking Upstream: Unbound recursive resolver External Access Traefik reverse proxy — Titan PiVPN · WireGuard — NCC-1702 TLS via Let's Encrypt · VLAN-aware entrypoints Monitoring · Tethys Prometheus · Grafana · Unpoller Uptime Kuma (Phobos) Scrapes Titan · Phobos · Tethys · UniFi · Pi-hole docs ↗
LAN is 10.36.100.0/24; all three cameras sit isolated on 10.36.102.0/24 (VLAN 102), unable to reach the LAN or the internet directly — Reolink and Dahua over wired PoE, the Tapo C121 over the hidden XanderC WiFi network, locked to the U7-Pro-XG. Solid arrows are wired switch ports; dashed arrows are PoE/VLAN-tagged links or software-level relationships layered on top of the physical wiring. Click any device for its full write-up.
Network · gateway / switches / access
WiFi access points
Servers
DNS · Pi-hole
Monitoring
Cameras · VLAN 102

Device Reference

XAN-CGUGateway
10.36.100.1
Model: UniFi Cloud Gateway Ultra
WAN: City Fibre · 1 Gbps FTTP · Port 5
Downstairs switch: Port 2 · Upstairs switch: Port 3
USW-DownstairsPoE switch
10.36.100.11
Model: USW Lite 16 PoE
Uplink: CGU Port 2
Ports: Titan P16 · Phobos P10 · Tethys P15 · NCC-1702 P4 · U7-Pro-XG P7 · Reolink P5
USW-UpstairsPoE switch
10.36.100.10
Model: USW Lite 16 PoE
Uplink: CGU Port 3
Ports: NCC-1703 P3 · U6-Ent P4 · Dahua P5 · UAP-AC-LR P6
TitanPrimary server
10.36.100.150
CPU: Intel i5-12600 · 64GB DDR4
GPU: NVIDIA Quadro RTX 4000
Storage: 32TB RAID6 (6×8TB SAS) + 2TB NVMe
Debian 13 · headless · 30 containers
PhobosSecondary · NAS
10.36.100.151
CPU: Intel i5-10400 · 32GB DDR4
Case: Jonsbo N4 NAS
Storage: 4×8TB + 1×4TB WD Red
Debian 13 · headless · 23 containers
TethysMonitoring host
10.36.100.152
CPU: Intel i5-6500 · 16GB DDR4
Model: HP 280 G2 SFF
Stack: Prometheus · Grafana · Unpoller · MySQL
Debian 13 · headless · 11 containers
NCC-1702Pi-hole primary
10.36.100.2
Hardware: Raspberry Pi 4
Role: Primary DNS · ad-blocking · WireGuard VPN
Resolver: Unbound · recursive DNS
Switch: Downstairs Port 4
NCC-1703Pi-hole replica
10.36.100.3
Hardware: Raspberry Pi 3B
Role: Secondary DNS · ad-blocking
Resolver: Unbound · recursive DNS
Switch: Upstairs Port 3
U7-Pro-XGWiFi 7 AP
10.36.100.253
Model: UniFi U7 Pro XG
Standard: WiFi 7 (802.11be)
Location: Ground floor
Switch: Downstairs Port 7 (PoE)
U6-EnterpriseWiFi 6 AP
10.36.100.254
Standard: WiFi 6 (802.11ax)
Bands: 2.4GHz · 5GHz
Location: Upstairs
Switch: Upstairs Port 4 (PoE)
UAP-AC-LRWiFi 5 AP
10.36.100.252
Standard: WiFi 5 (802.11ac)
Bands: 2.4GHz · 5GHz
Roaming: Seamless with U7-Pro-XG & U6-Enterprise
Switch: Upstairs Port 6 (PoE)
ReolinkIndoor camera
10.36.102.225
VLAN: 102 · cameras (isolated)
Location: Internal · downstairs
Switch: Downstairs Port 5 (PoE)
NVR: MotionEye on Phobos
DahuaOutdoor camera
10.36.102.222
VLAN: 102 · cameras (isolated)
Location: External · upstairs
Switch: Upstairs Port 5 (PoE)
NVR: MotionEye on Phobos
Tapo C121Indoor camera
10.36.102.227
VLAN: 102 · cameras (isolated)
Location: Internal · kitchen (int-kitchen)
WiFi: XanderC (hidden SSID) · locked to U7-Pro-XG
NVR: MotionEye on Phobos

Zigbee Network

COORDINATOR LQI 94 LQI 152 LQI 142 direct · LQI 121 via Big Light · LQI 176 Zigbee Coordinator 10.36.100.124 SMLIGHT SLZB-06U · Ethernet/PoE PAN 0xFE4F · Ch 25 docs ↗ LIVING ROOM Table Lamp innr RB 262 Router Big Light innr RB 282 C Router Floor Lamp innr RB 262 Router Temp-LR eWeLink SNZB-02P End device DINING ROOM Temp-DR eWeLink SNZB-02P End device
Managed through Home Assistant's ZHA integration on Titan, grouped here by the room each device covers. Solid lines are mains-powered routers, always listening and extending mesh coverage; dashed lines are battery end devices, which sleep between reports and each attach to a single parent — Temp-DR talks directly to the coordinator, Temp-LR routes through Big Light despite being in the same room as the coordinator's other direct links. LQI (Link Quality Indicator) is read live from ZHA's neighbor table, 0-255 scale.
Zigbee · coordinator, routers & end devices
Zigbee CoordinatorSLZB-06U
10.36.100.124
Network: PAN 0xFE4F · Channel 25
Chip: Texas Instruments CC2652
Connection: Ethernet/PoE · standalone on LAN
Integration: Home Assistant ZHA (Titan)
Big LightRouter
innr RB 282 C
Location: Living Room
LQI to coordinator: 152
Capabilities: Brightness + colour temperature
Floor LampRouter
innr RB 262
Location: Living Room
LQI to coordinator: 142
Capabilities: Brightness
Table LampRouter
innr RB 262
Location: Living Room
LQI to coordinator: 94
Capabilities: Brightness
Temp-DREnd device
eWeLink SNZB-02P
Location: Dining Room
Parent: Coordinator (direct) · LQI 121
Measures: Temperature, Humidity
Temp-LREnd device
eWeLink SNZB-02P
Location: Living Room
Parent: Big Light (router) · LQI 176
Measures: Temperature, Humidity