66 lines
5.3 KiB
Markdown
66 lines
5.3 KiB
Markdown
---
|
|
tags: [netzwerk, heimnetz, übersicht]
|
|
---
|
|
|
|
# IP-Übersicht Heimnetz
|
|
|
|
Stand: 2026-05-25 (abgeglichen mit OPNsense-Config). VLAN-Details siehe [[03 Bereiche/Heimnetz/Netzwerk/VLANs]].
|
|
|
|
## Uplink & Firewall
|
|
|
|
| Gerät | Port / Rolle | IP | Notiz |
|
|
| -------------------- | ------------------------- | ------------------------------------------------------------------------------- | ------------------------------------------------------ |
|
|
| FritzBox alt (DSL) | WAN | Telekom IP | [[03 Bereiche/Heimnetz/Netzwerk/Fritzbox DSL]] |
|
|
| FritzBox alt (DSL) | LAN → OPNsense-WAN | 192.168.178.1 (DHCP-Server für 192.168.178.0/24) | |
|
|
| OPNsense (Terra) | WAN (igc1) | 192.168.178.21 (DHCP) | [[Terra Firewall OPNsense]] |
|
|
| OPNsense (Terra) | LAN (igc0) | [192.168.1.1](https://192.168.1.1:55443/) / [AdGuard](http://192.168.1.1:3000/) | OPNsense 26.1.3 |
|
|
|
|
## Virtuelle IPs auf OPNsense
|
|
|
|
| IP | Zweck |
|
|
| -------------- | -------------------------------------------------- |
|
|
| 10.40.0.201/16 | HAProxy VIP `HAProxy40_lan_wan` (intern + extern) |
|
|
| 10.40.0.202/16 | HAProxy VIP `HAProxy40_lan` (nur intern) |
|
|
| 10.123.123.1 | WireGuard Server (Interface wg0, UDP 51820 extern) |
|
|
|
|
## Switches & APs (VLAN 1 — 192.168.1.0/24)
|
|
|
|
| Gerät | IP | Notiz |
|
|
| --------------------- | ---------------------------------------- | -------------------------------------------------------------- |
|
|
| LANCOM GS-2310 | [192.168.1.2](http://192.168.1.2/) | [[03 Bereiche/Heimnetz/Netzwerk/LANCom Switch GS-2310]] |
|
|
| DIGITUS Switch Keller | [192.168.1.111](http://192.168.1.111/) | [[03 Bereiche/Heimnetz/Netzwerk/DIGITUS DN-95331]] |
|
|
| FritzBox Neu (WLAN) | [192.168.1.103](http://192.168.1.103/#/) | [[03 Bereiche/Heimnetz/Netzwerk/Fritzbox WLAN]] — Mesh-Master |
|
|
| FritzBox Repeater OG1 | 192.168.1.163 | Mesh |
|
|
| FritzBox Powerline EG | 192.168.1.141 | Mesh |
|
|
|
|
## Server & Geräte
|
|
|
|
| Gerät / Dienst | VLAN | IP : Port | Doku |
|
|
| ---------------------- | ------------- | ---------------------------------------------------------- | ----------------------------------------------------- |
|
|
| Home Assistant (Pi) | 1 | [192.168.1.192:8123](http://192.168.1.192:8123/) | [[03 Bereiche/Heimnetz/Server/Home Assistant]] |
|
|
| NAS (KBNAS, Bare-IP) | 1 + 40 | 192.168.1.124 / 10.40.0.134 | [[03 Bereiche/Heimnetz/Server/NAS]] |
|
|
| NAS (Docker-Bridge) | 41 | 10.40.10.94 | Bridge fürs Docker-LAN |
|
|
| Gitea (Container) | 41 | 10.40.10.130:3000 | [[03 Bereiche/Heimnetz/Server/Gitea]] |
|
|
| Paperless (Container) | 41 | 10.40.10.131:8000 | [[03 Bereiche/Heimnetz/Server/Paperless]] |
|
|
| Immich (Container) | 41 | 10.40.10.132:2283 | [[03 Bereiche/Heimnetz/Server/Immich]] |
|
|
| Nginx Proxy Manager | 41 | 10.40.10.134:81 | [[03 Bereiche/Heimnetz/Server/Nginx Proxy Manager]] |
|
|
| EMMA (HEMS) | 1 | 192.168.1.178 | [[I: Huawai EMMA 🗄️]] |
|
|
| HUE Bridge | 1 | 192.168.1.137 (MAC `00:17:88:69:AD:F8`) | |
|
|
| LG webOS TV | 1 | 192.168.1.102 | |
|
|
| Ring Intercom 20 | 1 | 192.168.1.131 | |
|
|
|
|
## DNS-Kette
|
|
|
|
```
|
|
Client → AdGuard Home :53 (auf OPNsense) → Unbound :5353 → Upstream (Quad9 / Google DoH/DoT)
|
|
↓ Sonderfall internal.home
|
|
DoT 127.0.0.1:53053 → AdGuard (für dnsmasq-Hostnamen)
|
|
```
|
|
|
|
DHCP-Reservierungen liegen in dnsmasq (`<dnsmasq>/<hosts>`, ~25 statische Einträge).
|
|
|
|
## Extern erreichbar
|
|
|
|
Öffentlich offene Ports an WAN: TCP **80/443** → HAProxy VIP `10.40.0.201`; UDP **51820** → WireGuard.
|
|
WAN blockiert Bogons, Private-Nets, Alias `suspicious_WAN_hosts`.
|