From 751845a119934b7f52ce97924b1670b7484248e7 Mon Sep 17 00:00:00 2001
From: Christoph Emsenhuber <christoph@emsenhuber.com>
Date: Mon, 15 Jun 2026 18:33:06 +0200
Subject: [PATCH] Add memory index: TP2 Topologie, API-Gotchas, Portplan

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 memory/project_tp2_topology.md | 43 ++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 memory/project_tp2_topology.md

diff --git a/memory/project_tp2_topology.md b/memory/project_tp2_topology.md
new file mode 100644
index 0000000..0df71e7
--- /dev/null
+++ b/memory/project_tp2_topology.md
@@ -0,0 +1,43 @@
+---
+name: project-tp2-topology
+description: TP2 Omada Switch + Controller — finale IPs, Portplan, API-Gotchas, offene TP3-Abhängigkeiten
+metadata:
+  type: project
+---
+
+TP2 ✅ abgeschlossen 2026-06-15. Omada ES208G (sw2) adopted, VLANs + Port-Profiles aktiv.
+
+**Finale IPs:**
+- omada-controller: 10.40.41.175 (DS923/macvlan, mbentley 6.2.10.17)
+- omada-mcp: 10.40.41.176 (pve-LXC endpointId=2, ipvlan, Stack 200)
+- pve-mcp: 10.40.41.173 (SSE)
+- sw2 (ES208G): 10.40.41.12 (adopted, FW 1.0.2 Build 20260329)
+
+**Omada Open API Gotcha:**
+- Token-Request: POST /openapi/authorize/token?grant_type=client_credentials (query param!), JSON body: {client_id, client_secret, omadacId}
+- Auth-Header: `Authorization: AccessToken=<token>` (NICHT `Bearer`)
+- URL-Format: `{base}/openapi/v1/{omadacId}/sites/{siteId}/...`
+- omada-mcp Settings-Bug war: doppelter "omada-mcp"-Eintrag in ~/.claude/settings.json (zweiter überschreibt ersten — fixed)
+
+**Omada-MCP Tools:**
+- 84 read-only Tools, OMADA_TOOL_CATEGORIES=all
+- Write (VLAN/Ports) NICHT im MCP implementiert — direkte Open API oder Controller-UI nötig
+- ES-Switch-Pfad: /sites/{siteId}/switches/es/{mac} (nicht /esSwitches/)
+
+**Port-Plan ES208G (final):**
+- Port 1 (uplink) → Trunk-ALL → ALLNET GE8
+- Port 2 (ap2) → Trunk-ALL → hAP ax² #2
+- Port 3 → Access-MAIN
+- Port 4 (dock/monitor) → Access-INFRA
+- Port 5 (drucker) → Access-MAIN
+- Port 6 → Access-MAIN
+- Port 7 (macmini) → Access-INFRA
+- Port 8 (ds923+) → Access-MAIN (2. NAS-Port, absichtlich MAIN)
+
+**VLANs im Controller:**
+VLAN 1 (Default, status=true/mgmt), 10 MAIN, 20 INFRA, 30 IOT, 40 MEDIA, 50 UNTRUSTED, 90 GUEST, 99 MGMT, 100 WAN
+Alle status=false (kein Mgmt-IP konfiguriert) → normal, L3 kommt in TP4.
+
+**Why:** Traffic noch auf VLAN 1, weil TP4 (Router-Cutover, L3-Interfaces auf hAP) aussteht.
+
+**How to apply:** Bei TP3/TP4 Arbeiten: omada-mcp read-only für Status; Writes via Open API (curl mit AccessToken= Header) oder Controller-UI .175:8043.