Network Equipment

Network Equipment#

1 UniFi Network Equipment#

Device name Equipment type Manufacturer Product / model Serial number MAC address Physical location / notes
USW-Aggregation 2 Switch Ubiquiti UniFi Aggregation Switch; USL8A F4E2C6573B61 f4:e2:c6:57:3b:61 House Mechanical Room; matched to UniFi MCP device USW Aggregation 2 (Lab-VM)
USW-Aggregation 1 Switch Ubiquiti UniFi Aggregation Switch; USL8A AC8BA9B4BD26 ac:8b:a9:b4:bd:26 House Mechanical Room; matched to UniFi MCP device USW-Aggregation 1 (Proxmox)
UDM-SE Gateway / controller Ubiquiti UniFi Dream Machine Special Edition; UDMPROSE 70A7419463E5 70:a7:41:94:63:e5 House Mechanical Room; gateway and UniFi controller
USW Flex (Outdoor - Front) Switch Ubiquiti UniFi Switch Flex; USF5P 28704ECD8484 28:70:4e:cd:84:84 Outdoor - Front
U6-Mesh (Shed) Access point Ubiquiti UniFi U6 Mesh; U6M AC8BA9D21C8D ac:8b:a9:d2:1c:8d Shed
USW Aggregation 2 (Lab-VM) Switch Ubiquiti UniFi Aggregation Switch; USL8A F4E2C6573B61 f4:e2:c6:57:3b:61 House Mechanical Room
USW Flex (Shed HQ) Switch Ubiquiti UniFi Switch Flex; USF5P 58D61FC35B45 58:d6:1f:c3:5b:45 Shed HQ
UAP-AC-M (Coop) Access point Ubiquiti UniFi Mesh access point; U7MSH 68D79AD91597 68:d7:9a:d9:15:97 Coop
U6-Enterprise (Basement) Access point Ubiquiti UniFi U6 Enterprise; U6ENT 6022327C1A23 60:22:32:7c:1a:23 Basement
USW Flex XG (Basement) Switch Ubiquiti UniFi Switch Flex XG; USFXG 70A741CDCC60 70:a7:41:cd:cc:60 House Mechanical Room
USW Flex 2.5G (2nd Floor Office) Switch Ubiquiti UniFi Flex 2.5G; USWED35 942A6F4E2D82 94:2a:6f:4e:2d:82 2nd Floor Office
UBB (House - Garage) Wireless bridge Ubiquiti UniFi Building-to-Building Bridge; UBB 58D61F40273F 58:d6:1f:40:27:3f House - Garage
USW Flex Mini (TV Room) Switch Ubiquiti UniFi Flex Mini; USMINI AC8BA9AFC35F ac:8b:a9:af:c3:5f TV Room
USW-Aggregation 1 (Proxmox) Switch Ubiquiti UniFi Aggregation Switch; USL8A AC8BA9B4BD26 ac:8b:a9:b4:bd:26 House Mechanical Room; Proxmox
UPS 2U Switch Ubiquiti UniFi Switch Enterprise 2.5G; USWDA25 1C0B8B3ACA49 1c:0b:8b:3a:ca:49 Named UPS 2U in UniFi
USW Lite 8 PoE (Garage Servers) Switch Ubiquiti UniFi Switch Lite 8 PoE; USL8LP F4E2C65834A4 f4:e2:c6:58:34:a4 Garage Servers
Switch Ultra (Shed) Switch Ubiquiti UniFi Switch Ultra; USM8P F4E2C6AE05A5 f4:e2:c6:ae:05:a5 Shed
USW Pro Max 48 PoE Switch Ubiquiti UniFi Pro Max 48 PoE; USPM48P 9C05D6B08736 9c:05:d6:b0:87:36 Physical location to be confirmed
U6-Mesh (Garage) Access point Ubiquiti UniFi U6 Mesh; U6M AC8BA9D215E5 ac:8b:a9:d2:15:e5 Garage
UDM-SE Gateway / controller Ubiquiti UniFi Dream Machine Special Edition; UDMPROSE 70A7419463E5 70:a7:41:94:63:e5 House Mechanical Room
U6 Mesh (Backyard) Access point Ubiquiti UniFi U6 Mesh; U6M 9C05D6EA32A4 9c:05:d6:ea:32:a4 Backyard
UK Ultra (Shed HQ) Access point Ubiquiti UniFi UK Ultra; U7UKU 9C05D67998AF 9c:05:d6:79:98:af Shed HQ
USW-Flex-Mini (Shed Servers) Switch Ubiquiti UniFi Flex Mini; USMINI F4E2C6515267 f4:e2:c6:51:52:67 Shed Servers
USW Flex (Garage) Switch Ubiquiti UniFi Switch Flex; USF5P 28704ECEC8D8 28:70:4e:ce:c8:d8 Garage
UTR Router Ubiquiti Unifi Travel Router 8c:ed:e1:6a:d3:9b 2nd Floor Office

2 Passive Network Hardware#

Equipment Manufacturer / brand Model / part number Serial number Quantity Physical location Condition Notes
Ethernet patch panel Ubiquiti 1 Rack; upper section Brand identified by user; model, port count, and category to be verified
Ethernet patch cables Ubiquiti Rack Brand identified by user; individual cable quantities and specifications not inventoried

3 Other Consoles#

3.1 UNAS-Pro — 10.1.2.2#

3.1.1 Device details#

Field Details
Manufacturer Ubiquiti
Device UNAS-Pro
Management address 10.1.2.2
MAC address 0c:ea:14:ea:28:dc
Serial number To be verified
Physical location House Mechanical Room

3.1.2 Installed drives#

Drive Model Serial number Capacity Rotation Interface Health
/dev/sda ST12000NM0007-2A1101 ZJV0NJJW 12 TB 7200 rpm SATA 3.1, 6.0 Gb/s SMART passed
/dev/sdb ST12000NM0007-2A1101 ZJV0PPDV 12 TB 7200 rpm SATA 3.1, 6.0 Gb/s SMART passed
/dev/sdc ST12000NM0007-2A1101 ZJV0PNQD 12 TB 7200 rpm SATA 3.1, 6.0 Gb/s SMART passed
/dev/sdd ST12000VN0008-2YS101 ZRT097V5 12 TB 7200 rpm SATA 3.3, 6.0 Gb/s SMART passed

3.2 UNVR — 10.1.0.2#

3.2.1 Device details#

Field Details
Manufacturer Ubiquiti
Device NVR / UNVR
Management address 10.1.0.2
MAC address 60:22:32:f1:b9:22
Serial number To be verified
Physical location House Mechanical Room

3.2.2 Installed drives#

Drive Model Serial number Capacity Rotation Interface Health
/dev/sda WDC WD1003FZEX-00MK2A0 WD-WCC3F1CPSRZ9 1 TB 7200 rpm SATA 3.1, 6.0 Gb/s SMART passed
/dev/sdb WDC WD10EZEX-75M2NA0 WD-WCC3FKHLX848 1 TB 7200 rpm SATA 3.1, 6.0 Gb/s SMART passed
/dev/sdc MB001000GWFWK WMC6M0K0DTCT 1 TB 7200 rpm SATA 3.2, 6.0 Gb/s SMART passed
/dev/sdd MB001000GWFWK WMC6M0KA40SA 1 TB 7200 rpm SATA 3.2, 6.0 Gb/s SMART passed

3.3 Shared system media exclusions#

  • Each appliance also exposed approximately 29 GB of USB/SD boot media. These were excluded from the hard-drive inventory.
  • Loop devices and flash/system entries were excluded because they are not separately replaceable hard drives.

4 UniFi Protect Cameras#

Camera name Manufacturer Model IP address MAC address Physical coverage area Physical location / notes
front-camera Ubiquiti G5 Bullet 10.1.4.2 ac:8b:a9:0f:db:bc Front entryway and porch
side-camera Ubiquiti G5 Bullet 10.1.4.3 f4:e2:c6:7c:29:b0 Side house walkway
backyard-camera Ubiquiti G5 Bullet 10.1.4.4 e4:38:83:0b:03:03 Backyard and patio
garage-camera Ubiquiti G5 Bullet 10.1.4.5 f4:e2:c6:78:44:f4 Garage interior and exterior bay
driveway-camera Ubiquiti G5 Bullet 10.1.4.6 ac:8b:a9:9f:80:eb Main driveway and parking area
basement-door-camera Ubiquiti G5 Bullet 10.1.4.7 f4:e2:c6:7b:dc:d5 Basement entry door
shed-hq-camera Ubiquiti G5 Turret Ultra 10.1.4.8 1c:6a:1b:87:aa:4d Shed HQ outbuilding

5 Notes#

  • Source: rack image supplied for this inventory plus read-only UniFi MCP device inventory.
  • The UniFi MCP returned 21 devices: 13 switches, 6 access points, 1 wireless bridge, and 1 gateway/controller.
  • Only the two USW Aggregation switches and the UDM-SE were matched directly to visible rack labels; the remaining UniFi devices are listed from the controller inventory and should be physically verified.
  • Firmware versions, link state, port assignments, and traffic statistics were intentionally omitted from this physical insurance inventory; the two management addresses above were retained because they were supplied as equipment identifiers.
  • Camera models, serial numbers, mounting details, and exact physical locations should be verified separately for insurance documentation.

Netgear Switch GS110TPv3

Netgear Switch GS110TPv3#

codex resume 019fe6f1-4f8a-7413-be32-70dd7a25a64f

How to reach the switch#

The Netgear GS110TPv3 is managed through the primary UniFi LAN.

  1. Connect the Netgear switch uplink to an available port on a UniFi network switch.

  2. Use the Netgear’s g1 port as the uplink. It carries the management LAN and tagged VLANs.

  3. In the UniFi Network application, configure the UniFi uplink port with:

    • Native Network: LAN (1)
    • Tagged VLAN Management: Allow All (or an equivalent trunk profile)
    • STP: enabled/Auto; BPDU Guard disabled
  4. From a device on the same LAN, browse to:

Home Assistant - Meross Ghost Entity & VLAN Routing Fix

1 Meross Ghost Entity & VLAN Routing Fix#

1.1 The Issue#

When deleting and re-adding a Meross device, Home Assistant might refuse to connect and continuously restore the old ghost entity name while throwing a KeyError and AttributeError: 'NoneType' object has no attribute 'attach' in the logs.

1.2 Why it happens#

  1. The Registry Ghost: When a device is deleted from the UI, Home Assistant sometimes keeps its UUID permanently trapped in the hidden deleted_devices and deleted_entities recycle bins inside the .storage registry. Whenever you re-add the device, HA automatically restores the old, corrupted data.
  2. The Cloud Profile Cache: The meross_lan integration caches the Meross Cloud Profile. If you re-add a device to the Meross app, meross_lan may still use an expired offline cache (e.g., meross_lan.profile.xxxxxx) which lacks the new UUID or MQTT keys, causing a KeyError.
  3. The VLAN Block: If Home Assistant is on a different VLAN than the IoT devices and HTTP (Port 80) is blocked, meross_lan cannot push the local MQTT configuration to the new device, leaving it “Unavailable”.

1.3 The Complete Fix & Automation Script#

Target SSH Host: root@10.1.2.200

Synology Administration Guide

Synology Administration Guide#

1 Syncthing Deployment#

1.1 Synology DSM Implementation (Docker)#

  1. Inotify Limit:
    echo "fs.inotify.max_user_watches=204800" | sudo tee -a /etc/sysctl.d/90-override.conf
    sudo sysctl -p /etc/sysctl.d/90-override.conf
  2. User IDs: Use Task Scheduler to run id > /volume1/docker/id.txt to find UID/GID (e.g., 1027/100).
  3. Docker Compose Highlights:
    environment:
      - PUID=1027
      - PGID=100
      - TZ=America/New_York
    volumes:
      - ./config:/config
      - /volume2/HP3Storage:/volume2/HP3Storage

1.2 Standard .stignore Patterns#

Create a .stignore file in the root of the sync folder:

(?i)#recycle
@eaDir
.DS_Store
.stfolder
.stignore
$RECYCLE.BIN
Thumbs.db
Desktop.ini
.SynologyWorkingDirectory

2 Storage & Maintenance Commands#

2.1 iPerf3#

sudo -i
synogear install
iperf3 -s -p 11111

2.2 Locked Folder Cleanup#

Remove Synology metadata directories when cleaning up a locked folder:

2026-07-23 - UniFi WAN Security Audit Report

UniFi UDM-SE WAN, Security & IPv6 Audit Report#

Date: July 23, 2026
Gateway Device: Ubiquiti UniFi Dream Machine Special Edition (UDM-SE)
Firmware Version: 5.1.19.33549
Primary ISP (WAN1): Cogeco Connexion (1000 Mbps Down / 30 Mbps Up)
Failover ISP (WAN2): Vidéotron (Currently Down - Offline)
Secondary Backup ISP (WAN3): Starlink (CGNAT)


1. Executive Summary#

An in-depth audit of the UniFi Dream Machine SE gateway was performed via the UniFi API. The assessment evaluated the primary WAN (WAN1 - Cogeco Connexion), secondary failover WAN (WAN2 - Vidéotron), and backup satellite WAN (WAN3 - Starlink).

2026-07-22 - UniFi Management LAN Network Security Analysis

UniFi Primary LAN & Management Network Security Analysis#

VERDICT: [VERIFIED] SECURE AND HARDENED SECURITY SCORE: 96 / 100 (Grade: A+) An empirical audit of the primary Default LAN network (10.1.0.0/24, interface br0) confirms that all 21 UniFi infrastructure hardware devices (UDM-SE gateway, ProMax switches, 10G aggregation switches, wireless access points, building bridges, and smart UPS) operate on an isolated management subnet protected by enforced Linux kernel firewall rules (iptables), key-only SSH authentication, and strict inter-VLAN boundary drops.

2026-07-21 - UniFi IoT Network Security Analysis

UniFi IoT Network & Wi-Fi Security Analysis#

VERDICT: [VERIFIED] SECURE AND ISOLATED SECURITY SCORE: 97 / 100 (Grade: A+) Live kernel firewall rules and DHCP configurations confirm that the marcoue - IoT Wi-Fi (10.1.3.0/24, VLAN 13) has active inter-VLAN isolation, gateway management blocking, active honeypot detection, mDNS reflection, native Pi-hole DNS Option 6 (10.1.2.8), and local NTP gateway redirection (10.1.3.1:123).


1. Verified Infrastructure & Network Profile#

  • Gateway Device: UniFi Dream Machine Special Edition (UDMPROSE / UDM-SE at 10.1.0.1)
  • Wi-Fi SSID Name: marcoue - IoT
  • Network Name: IoT
  • VLAN ID: 13
  • Subnet: 10.1.3.0/24 (Interface br13)
  • Kernel IPSET Group: UBIOS_CUSTOM1_subnets
  • Wireless Configuration: 2.4 GHz (ng protocol, 20 MHz channel width for stability)
  • Active Devices Observed: Meross Dimmer Switches (10.1.3.178), Aqara Camera Hub G3 (10.1.3.222), smart plugs, smart lighting endpoints.

2. Empirical Firewall Rule Audit (Live Kernel Verification)#

Direct inspection of the UDM-SE Linux kernel firewall (iptables and ipset) verified the following active rule chains for VLAN 13 (UBIOS_CUSTOM1):

KVM - Tripp Lite Java Web Start Fix

Tripp Lite KVM Java Web Start (JNLP) Setup & SSL Fix#

This guide documents the fix for opening the Tripp Lite KVM virtual console (viewer.jnlp) on macOS when modern Java blocks connections due to legacy TLS/SSL cipher handshake failures.


1. Problem Overview#

When launching viewer.jnlp via Java Web Start (javaws), the applet fails with the following errors:

com.sun.deploy.net.FailedDownloadException: Unable to load resource: https://10.1.5.2:443/iClientJ12111.jar@pid=...
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

Cause#

Tripp Lite IP KVM switches (and rebranded ATEN/Avocent devices) rely on legacy SSL/TLS protocols (TLS 1.0 / TLS 1.1) and deprecated ciphers (e.g., 3DES, 1024-bit Diffie-Hellman keys). Modern Java runtimes (Java 8u291+ and newer) disable these protocols by default in java.security.

Starlink

Starlink Emergency Network Backup Playbook#

This document outlines the operational and financial strategy for utilizing a Starlink Mini hardware kit on a Roam subscription tier as an infrastructure-independent secondary WAN failover. This configuration completely bypasses local terrestrial infrastructure dependencies (cell towers and cable/fiber nodes) during extended power grid collapses.


1. Core Architecture Strategy#

  • Integrated Router: Router is built directly into the dish panel, featuring a native, weather-sealed RJ45 Ethernet port. No proprietary Ethernet adapters required.
  • Direct WAN Hand-off: Connects directly from the dish into the secondary WAN port of the local gateway/firewall (e.g., UniFi Gateway).
  • Power Efficiency: Draws 25–40 Watts. Capable of native DC power input, making it resilient when running off standard 100W USB-C PD power banks or 12V portable generator setups.

Plan Selection: Roam Tier#

  • Cell Congestion Immunity: Roam plans skip geographic cell capacity checks. If an emergency triggers a mass local reactivation event, the system will block standard Residential activations but will approve Roam activations instantly.
  • Mobility Option: Allows the hardware to be disconnected from the home mount and utilized remotely for off-grid operations or travel.

2. Financial Metrics (CAD)#

  • Standby Mode Base Rate: $15.00 / month
  • Roam 100GB Tier: $75.00 / month
  • Roam Unlimited Tier: $200.00 / month
  • Over-Cap Throttled Speed: 1.0 Mbps Download / 0.5 Mbps Upload
  • Annual Idle Maintenance: $180.00 / year

3. Operational Lifecycles & Playbooks#

Configuration A: Baseline Idle State#

  1. Connect the Starlink Mini to the secondary WAN port of the gateway.
  2. Place the Starlink subscription into Standby Mode via the account portal.
  3. Keep the unit powered on.
    • Result: The dish consumes minimal background data to maintain alignment, pull critical system firmware updates, and pass basic network pings.
    • Bandwidth Cap: Throughput is strictly capped at 500 Kbps in this state. The link remains live just enough to load the Starlink management portal and process two-factor authentication (2FA) emails.

Configuration B: Phase 1 Activation (Short-Term Outage)#

Execute this phase when local terrestrial links drop and an extended power grid outage is confirmed.

Linux - Various Command Lines

Linux & Proxmox Command Line Toolbox#


1 Storage & Disk Management#

1.1 Clean Up & Space Recovery#

# Purge unused packages and clean cache
apt autoremove --purge && apt autoclean
# Reclaim journal log space (limit to 500MB)
journalctl --vacuum-size=500M

1.2 Identify Large Files & Folders#

# List all files with human-readable sizes
ls -lah
# Summary of folder sizes in current directory
du -sh *
# Identify top 10 largest folders on root
sudo du -xh / | sort -rh | head -n 10
# Disk space usage summary (filtered for MB/GB)
du -cha --max-depth=1 / | grep -E "M|G"

1.3 Hugo Project Specifics (Size Checks)#

# Find files larger than 25MB in project
find /home/marc/hugo/canada2argentina -type f -size +25M -exec ls -lh {} +
# Count total files in the public build folder
find /home/marc/hugo/canada2argentina/public -type f | wc -l
# List top 25 largest files in project
find /home/marc/hugo/canada2argentina -type f -exec du -h {} + | sort -rh | head -n 25

1.4 Disk Health & Partitions#

# Wipe all partitions/signatures from a disk (CAUTION)
sgdisk --zap-all /dev/sdX
# Detailed SMART health report
smartctl -a /dev/sda | less
# Deep scan for bad blocks (Takes a long time)
badblocks -v /dev/sda -s

2 Proxmox & Virtualization#

2.1 VM / Container Management#

# Unlock a stuck VM or Container
qm unlock <vmid>
pct unlock <ctid>
# Resize a container disk (Final size, cannot shrink)
pct resize 103 rootfs 16G
# List running LXC containers
pct list | awk 'NR>1'

2.2 High Availability (HA) Fixes#

# Disable HA for a specific VM/CT to allow manual fixes
ha-manager set vm:200 --state disabled
ha-manager set ct:103 --state disabled

2.3 Repository & Templates#

# Update and list available CT templates
pveam update
pveam available
# List all active apt sources
grep -r '' /etc/apt/sources.list*

2.4 Proxmox Boot & Kernel#

# List and pin a specific kernel
proxmox-boot-tool kernel list
proxmox-boot-tool kernel pin 6.8.8-4-pve

3 Networking & Connectivity#

3.1 Troubleshooting & Discovery#

# Check DNS resolution
nslookup google.com
nslookup pi.hole
# Check open listening ports
ss -lntu
netstat -plant
# Performance test (Client mode, 8 parallel streams)
iperf3 -c 10.1.1.11 -P8

3.2 SSH & Remote Access#

# View real-time system logs for USB/Kernel errors
dmesg -w
dmesg -T | grep usb
# Clear "Remote Host Identification Changed" error
nano ~/.ssh/known_hosts

3.3 File Transfers (SCP)#

# Copy local images from Mac to Hugo site on Server
scp -v /Users/marc/Downloads/to_convert/* root@10.1.2.202:/home/marc/hugo/canada2argentina/static/images/
# Backup and transfer a folder between servers
tar -czvf "$(date +%Y-%m-%d_%Hh%M)_PangolinBackup.tar.gz" pangolin/
scp pangolin.tar.gz root@72.11.147.220:/home/marc/docker-compose

4 System & Hardware Info#

4.1 RAM & CPU#

# Clear RAM cache (Drop caches)
sync && echo 3 | tee /proc/sys/vm/drop_caches
# Check ZFS ARC summary and free RAM
arc_summary -s arc && free -h

4.2 BIOS & Hardware#

# Get BIOS version and serial info
sudo dmidecode -t bios
# List SCSI and PCIe hardware
lsscsi -u
lspci

4.3 Legacy iLO3 Fix (Firefox)#

  1. Type about:config in address bar.
  2. Search: security.tls.version.enable-deprecated.
  3. Set to: true.

5 Miscellaneous Utilities#

5.1 Permissions & Scripts#

# Make script executable and run
chmod +x ./unifi-9.0.114.sh && ./unifi-9.0.114.sh

5.2 Scheduling & Processes#

# Instant test of cron behavior (Sends message to all terminals)
* * * * * echo "Hello from cron" | wall
# Cancel a pending shutdown
shutdown -c

5.3 Print the path of the folder you are in#

# Print the path of the folder you are in
pwd

6 SSD SMART Testing on Proxmox#

6.1 Identify the drive#

# Display the drive model, serial number, capacity, and type.
lsblk -d -o NAME,MODEL,SERIAL,SIZE,TYPE /dev/sdX

6.2 View the current SMART report#

# Display the complete SMART health report.
smartctl -x /dev/sdX

6.3 Run a short self-test#

# Start a short, read-only SSD self-test.
smartctl -t short /dev/sdX

6.4 Check the test status#

# Check whether the self-test is still running or has completed.
smartctl -c /dev/sdb
echo "===== /dev/sdb ====="; smartctl -c /dev/sdb | grep -E "Self-test execution|remaining"

6.5 Check the test status if many disks tests running#

#One disk check of test
echo "===== /dev/sdk ====="
smartctl -x /dev/sdk | grep -iE "Self-test execution status|remaining|Background long"
# Multi Check whether the self-test is still running or has completed.
for d in /dev/sdb /dev/sdc /dev/sdd /dev/sde; do
  echo "===== $d ====="
  smartctl -x "$d" | grep -iE "Self-test execution status|remaining|Background long"
done

6.6 Run an extended self-test#

# Start an extended, read-only SSD self-test.
smartctl -t long /dev/sdX
#many
for d in /dev/sda /dev/sdb /dev/sdc /dev/sdd /dev/sde; do
  echo "===== Starting long test on $d ====="
  smartctl -t long "$d"
done

6.7 Check the extended test status#

# Check whether the extended test is complete.
smartctl -c /dev/sdX

6.8 Abort#

# Stop the test (this will stop all test if multiple started together)
smartctl -X
#If multiple
for d in /dev/sda /dev/sdb /dev/sdc /dev/sdd /dev/sde /dev/sdf /dev/sdg /dev/sdh; do
  echo "===== $d ====="
  smartctl -X "$d"
done

6.9 View the final report#

# Display the final SMART report, including self-test results.
smartctl -x /dev/sdX

6.10 Save the report#

# Save the SMART report to a text file.
smartctl -x /dev/sdX > sdX-smart-report.txt