UniFi Network and VLAN Segmentation
MRDTech network edge and switching are managed by UniFi, with the UDM-SE providing routing, firewalling, IDS/IPS, VLAN segmentation, and local controller services.
Repository reference:
Current UniFi device inventory
| Device | IP | Type | Current role |
|---|---|---|---|
| UDM | 10.10.10.1 | UniFi Gateway | Gateway/router, firewall, IDS/IPS, Comcast Business uplink |
| Main-8-Living Room | 10.10.10.7 | UniFi Switch | Uplink GbE to UDM Port 7; parent switch to Lite-8 downstream on Port 3 |
| Flex-5-Kitchen | 10.10.10.5 | UniFi Switch | Uplink GbE to UDM Port 4 |
| Lite-8-Living Room | 10.10.10.8 | UniFi Switch | Downstream of Main-8-Living Room Port 3; Fast Ethernet uplink is expected/currently flagged |
| U6-Extender | 10.10.10.9 | UniFi AP | Meshed off U6-Pro, not wired |
| U6-Pro | 10.10.10.6 | UniFi AP | Uplink GbE to UDM Port 8 |
Segmentation model
| Segment | Purpose |
|---|---|
| Trusted LAN | Admin workstations, servers, and management devices |
| Guest | Guest devices with restricted internal access |
| IoT | Smart-home and appliance devices isolated from management systems |
| VPN / remote access | Remote access path via Tailscale and Cloudflare Zero Trust |
| Server / homelab services | Proxmox, Docker, Wazuh, NAS, and infrastructure services |
Recent operational notes
- UniFi switch port speed monitoring is exported every 5 minutes to NOC dashboard state.
- 100 Mbps links are intentionally flagged as warnings so bad cables, negotiated-down ports, and incorrect uplinks are visible.
- Lite-8-Living Room is documented as downstream of Main-8-Living Room Port 3, not a direct UDM child.
- NOC Dashboard includes UniFi device inventory and switch-port speed monitoring.
- Asset Overview includes a Network Devices section with the six UniFi devices above.
Monitoring paths
- UniFi controller API:
https://10.10.10.1 - NOC Dashboard:
/noc-dashboard - Asset Overview:
http://10.10.10.237:11188 - New-device alerting uses UniFi client data and a stateful baseline.