diff --git a/docs/tp15-session-summary-20260808.md b/docs/tp15-session-summary-20260808.md new file mode 100644 index 0000000..0ae3ff3 --- /dev/null +++ b/docs/tp15-session-summary-20260808.md @@ -0,0 +1,95 @@ +# TP15 — Session-Zusammenfassung 2026-08-07/08 + +**Status:** Core-Cutover technisch vollzogen (Routing/DHCP/DNS/NAT/WG auf `crs326-core` live). +**Blocker für WLAN-Neuprovisionierung:** AP-Zugang fehlt / Passwörter müssen konsolidiert werden. +**Nächste Session:** AP-Provisioning (CAPsMAN-Abbau, reine APs) + Passwort-Konsolidierung. + +--- + +## ✅ Heute erledigt + +### Cloudflare WAN-IP-Update +- `bf4.emsenhuber.net` A-Record auf neue Public-IP `90.146.33.177/32` gesetzt. +- CF Access-Policy `bf4` auf `90.146.33.177/32` erlaubt. +- VPN-Endpoint damit für Remote-Seiten (FM/DW) erreichbar. + +### Core L3 funktioniert (crs326-core) +- DHCP-Server + statische Leases aktiviert (vorher disabled). +- DNS-Upstream vorübergehend auf `1.1.1.1,8.8.8.8` plain umgestellt (DoH war blockierend). +- Inter-VLAN-Routing, NAT, WAN über `vlan100` live. +- `crs326-branch` Uplink auf core `#8` funktioniert. + +### Port-Patches auf crs326-core +| Port | Zustand vorher | Zustand nachher | +|---|---|---| +| `#13` (pve) | VLAN1 untagged | **VLAN20 tagged** → `10.40.20.100` wieder erreichbar | +| `#14` (IOT-Gerät) | VLAN1 untagged | **VLAN30 untagged** (PVID=30) | + +### WireGuard Hub +- `wg-hub` bereits auf `crs326-core` migriert, lauscht `51821/udp`. +- **FM-Spoke** connected (aktueller Endpoint `90.146.212.52:52476`). +- **DW/Geli-Spoke** down — deren FB-Peer hat noch den **alten ap1-Hub-Public-Key** `P/bztIk13cAmLHbN6oHGGnWAKLZsqR5TXAbFP+NGGBk=`. Neuer Hub-Key auf core: `GgjCBYIin4sLOojkE/XliV7hjSw654okBLkf+aTgvV8=`. Geli muss Peer-Public-Key updaten. + +### Backups +- ap1 + crs326-core Backups vor dem Cutover erstellt und committed. + +--- + +## ⏸️ Offen / Blockiert + +### 1. AP-Zugang: ap1 REST 401 +- `10.40.10.1` (VLAN10) antwortet, aber das verwendete Passwort `46484b9952#P` (aus `~/.claude.json` / Nautobot-Stack) wird mit **401 Unauthorized** abgewiesen. +- `10.40.41.1` (altes VLAN1-Mgmt) tot. +- Ohne korrektes Admin-Passwort ist kein Remote-Provisioning möglich. + +### 2. ap2 nicht erreichbar +- `10.40.41.2` → `ENETUNREACH` (erwartet: hängt an `crs326-branch` ether24, braucht VLAN99-Mgmt-IP `.99.2`). + +### 3. Passwort-Konsolidierung nötig +- Ich greife auf die CRS326-Switches mit Passwörtern aus `~/.secrets/credentials.env` zu, die der User anscheinend nicht kennt / nicht erwartet hat. +- AP-Passwörter (`46484b9952#P`) sind ebenfalls nicht mehr gültig. +- **ToDo nächste Session:** gemeinsam klären, welche Passwörter gültig sein sollen; ggf. APs resetten und Passwörter in Nautobot + `~/.secrets` synchronisieren. + +### 4. Nautobot down +- `http://10.40.20.30:8080` liefert HTTP 500 auf `/health/` und API. +- Dadurch ist **Nautobot-basiertes Provisioning aktuell blockiert**. +- Container-Healthcheck oder DB-Problem prüfen (siehe `docs/nas-vlan20/stacks/210-nautobot.yml`). + +### 5. dirtyvader-iot offline +- Alle IoT-Geräte hängen am defekten WLAN-Setup (CAPsMAN auf ap1, ap1 macht aber kein Routing/DHCP mehr). +- WLAN muss dringend neu provisioniert werden. + +--- + +## 📋 Empfohlener Plan für die nächste Session + +1. **Passwort-Konsolidierung** + - AP-Admin-Passwörter klären oder APs factory-resetten. + - Switch-Passwörter in `~/.secrets` abgleichen. + +2. **Nautobot wieder hochfahren** + - Container-Logs prüfen, DB-Connection testen. + - Falls schnell nicht möglich: Quick-&-Dirty-Provisioning via lokalem `.rsc`-Skript (kein CAPsMAN, reine APs). + +3. **AP-Provisioning (reine APs)** + - Ziel: ap1 + ap2 als identische, standalone MikroTik-APs. + - VLAN-Trunk auf Uplink-Port (ap1: ether2→ether1 je nach PoE; ap2: ether2). + - Mgmt-IP in VLAN99 (ap1 `.99.3`, ap2 `.99.2`). + - 5 SSIDs: `dirtyvader-main` (VLAN10), `dirtyvader-infra` (VLAN20), `dirtyvader-iot` (VLAN30), `dirtyvader-media` (VLAN40), `dirtyvader-untrusted` (VLAN50), optional `dirtyvader-guest` (VLAN90). + - PSKs neu setzen (User hat die alten selbst geändert und will sie neu vergeben). + +4. **WG-Hub-DW fixen** + - Geli neues Hub-Public-Key mitteilen oder alternativ Core-Hub auf alten Private-Key zurückdrehen (konfliktiert dann mit FM, falls der schon auf neuen Key umgestellt ist). + +--- + +## Offene Sicherheits-/Governance-Punkte + +- **Governance-Ausnahme:** Der heutige Cutover wurde notgedrungen direkt am Switch gemacht, weil Nautobot down ist. Für die AP-Neuprovisionierung sollte Nautobot wieder aktiv sein oder eine neue Ausnahme erteilt werden. +- **Passwörter:** Keine Credentials in Commits. `~/.secrets/credentials.env` ist die SSoT, aber die Switch-AP-Passwörter müssen mit dem User abgeglichen werden. + +--- + +## Commit + +`7d5776a` — TP15: Core-Cutover follow-up (pve #13 VLAN20, IOT #14 VLAN30, APs pending) diff --git a/routeros/ap1-leases-export.json b/routeros/ap1-leases-export.json new file mode 100644 index 0000000..afcf354 --- /dev/null +++ b/routeros/ap1-leases-export.json @@ -0,0 +1,1266 @@ +[ + { + ".id": "*3F", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.10.82", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:56:71:6c:22:e6:a9", + "dhcp-option": "dns 1.1.1.1", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "host-name": "Mac", + "last-seen": "3d10h55m36s", + "mac-address": "56:71:6C:22:E6:A9", + "radius": "false", + "server": "dhcp-v10", + "status": "waiting" + }, + { + ".id": "*40", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.10.196", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:f2:62:4c:e1:af:9", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "host-name": "iPhone", + "last-seen": "1w4d10h41m29s", + "mac-address": "F2:62:4C:E1:AF:09", + "radius": "false", + "server": "dhcp-v10", + "status": "waiting" + }, + { + ".id": "*41", + "active-address": "10.40.40.199", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:48:a6:b8:b:63:10", + "active-mac-address": "48:A6:B8:0B:63:10", + "active-server": "dhcp-v40", + "address": "10.40.40.199", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:48:a6:b8:b:63:10", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h53m53s", + "host-name": "SonosZP", + "last-seen": "6h6m7s", + "mac-address": "48:A6:B8:0B:63:10", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*42", + "active-address": "10.40.40.191", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:34:7e:5c:32:37:96", + "active-mac-address": "34:7E:5C:32:37:96", + "active-server": "dhcp-v40", + "address": "10.40.40.191", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:34:7e:5c:32:37:96", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h53m56s", + "host-name": "SonosZP", + "last-seen": "6h6m4s", + "mac-address": "34:7E:5C:32:37:96", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*43", + "active-address": "10.40.40.192", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:34:7e:5c:32:33:b8", + "active-mac-address": "34:7E:5C:32:33:B8", + "active-server": "dhcp-v40", + "address": "10.40.40.192", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:34:7e:5c:32:33:b8", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h53m56s", + "host-name": "SonosZP", + "last-seen": "6h6m4s", + "mac-address": "34:7E:5C:32:33:B8", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*44", + "active-address": "10.40.40.193", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:78:28:ca:80:2a:f6", + "active-mac-address": "78:28:CA:80:2A:F6", + "active-server": "dhcp-v40", + "address": "10.40.40.193", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:78:28:ca:80:2a:f6", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "14h34m36s", + "host-name": "SonosZP", + "last-seen": "9h25m24s", + "mac-address": "78:28:CA:80:2A:F6", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*45", + "active-address": "10.40.40.195", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:78:28:ca:82:16:c2", + "active-mac-address": "78:28:CA:82:16:C2", + "active-server": "dhcp-v40", + "address": "10.40.40.195", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:78:28:ca:82:16:c2", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "14h34m36s", + "host-name": "SonosZP", + "last-seen": "9h25m24s", + "mac-address": "78:28:CA:82:16:C2", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*46", + "active-address": "10.40.40.201", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:94:9f:3e:49:59:ee", + "active-mac-address": "94:9F:3E:49:59:EE", + "active-server": "dhcp-v40", + "address": "10.40.40.201", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:94:9f:3e:49:59:ee", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h54m10s", + "host-name": "SonosZP", + "last-seen": "6h5m50s", + "mac-address": "94:9F:3E:49:59:EE", + "radius": "false", + "server": "dhcp-v40", + "src-mac-address": "48:A6:B8:0B:63:10", + "status": "bound" + }, + { + ".id": "*47", + "active-address": "10.40.40.196", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:48:a6:b8:16:38:ae", + "active-mac-address": "48:A6:B8:16:38:AE", + "active-server": "dhcp-v40", + "address": "10.40.40.196", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:48:a6:b8:16:38:ae", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h54m13s", + "host-name": "SonosZP", + "last-seen": "6h5m47s", + "mac-address": "48:A6:B8:16:38:AE", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*48", + "active-address": "10.40.40.197", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:48:a6:b8:14:fe:f2", + "active-mac-address": "48:A6:B8:14:FE:F2", + "active-server": "dhcp-v40", + "address": "10.40.40.197", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:48:a6:b8:14:fe:f2", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h54m13s", + "host-name": "SonosZP", + "last-seen": "6h5m47s", + "mac-address": "48:A6:B8:14:FE:F2", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*49", + "active-address": "10.40.40.200", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:48:a6:b8:69:69:7b", + "active-mac-address": "48:A6:B8:69:69:7B", + "active-server": "dhcp-v40", + "address": "10.40.40.200", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:48:a6:b8:69:69:7b", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h54m14s", + "host-name": "SonosZP", + "last-seen": "6h5m46s", + "mac-address": "48:A6:B8:69:69:7B", + "radius": "false", + "server": "dhcp-v40", + "src-mac-address": "48:A6:B8:0B:63:10", + "status": "bound" + }, + { + ".id": "*4A", + "active-address": "10.40.40.194", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:48:a6:b8:14:fe:d0", + "active-mac-address": "48:A6:B8:14:FE:D0", + "active-server": "dhcp-v40", + "address": "10.40.40.194", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 0.9.8", + "client-id": "1:48:a6:b8:14:fe:d0", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "17h54m12s", + "host-name": "SonosZP", + "last-seen": "6h5m48s", + "mac-address": "48:A6:B8:14:FE:D0", + "radius": "false", + "server": "dhcp-v40", + "status": "bound" + }, + { + ".id": "*5B", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.40.198", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "SonosTerrasse", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "host-name": "SonosZP", + "last-seen": "4w5h31m5s", + "mac-address": "78:28:CA:D2:0D:AC", + "radius": "false", + "server": "dhcp-v40", + "status": "waiting" + }, + { + ".id": "*5C", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.202", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s22_kueche_steckdose3-2", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "A0:85:E3:C8:65:34", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*5D", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.203", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s23_dieleug-wohnzimmer_licht", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "AC:15:18:7B:62:20", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*5E", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.205", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s25_bad_lichtschalter", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "98:A3:16:79:38:50", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*5F", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.206", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s20_kueche_steckdosen2", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "98:A3:16:7C:5F:EC", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*60", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.207", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s21_kueche_steckdosen4", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "20:6E:F1:01:F9:F8", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*61", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.208", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s1_weihnachten_kueche", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:D7:C7:A4", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*62", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.209", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s2_weihnachten_terrasse", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "28:37:2F:36:F4:7C", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*63", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.210", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s3_weihnachten_kinderzimmer", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:E4:EF:7C", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*64", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.211", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s4_kueche_mikrowelle", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:E4:0F:30", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*65", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.212", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s5_kueche_backofen", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "D8:85:AC:0C:5C:C8", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*66", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.213", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s6_kueche_kuehlschrank", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "D0:CF:13:D8:18:FC", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*67", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.214", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s7_kueche_tiefkuehlschrank", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "D0:CF:13:D9:94:E8", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*68", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.215", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s8_kueche_geschirrspueler", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:FA:FD:E0", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*69", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.216", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s9_wohnzimmer_sideboard", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E8:F6:0A:61:88:08", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*6A", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.217", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s10_bad_sonos", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:FC:57:E4", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*6B", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.218", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s11_kinderzimmer_sonos", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:FA:6C:00", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*6C", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.219", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s12_dieleug_steckdosen", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "48:F6:EE:C8:E6:AC", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*6D", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.220", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s13_arbeitszimmer_technik", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "48:F6:EE:DD:6A:F4", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*6E", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.221", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s14_schlafzimmer_bett", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:FC:59:48", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*6F", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.222", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s15_technik_pve", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "E4:B0:63:FA:D5:34", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*70", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.223", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s16_wohnzimmer_steckdosen", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "10:20:BA:FA:F5:40", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*71", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.224", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s17_bad_steckdosen", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "10:20:BA:FB:6D:64", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*72", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.225", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s18_kueche_steckdosen1", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "48:F6:EE:CC:16:E4", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*73", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.226", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s19_kueche_steckdosen3", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "10:20:BA:FB:70:FC", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*74", + "active-address": "10.40.30.227", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:b8:f8:62:9:f2:4", + "active-mac-address": "B8:F8:62:09:F2:04", + "active-server": "dhcp-v30", + "address": "10.40.30.227", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "switchbot-floorlamp", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "12h9m37s", + "host-name": "SwitchBot-floor-lamp", + "last-seen": "11h50m23s", + "mac-address": "B8:F8:62:09:F2:04", + "radius": "false", + "server": "dhcp-v30", + "status": "bound" + }, + { + ".id": "*75", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.228", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "Twinkly_Weihnachtsgirlande", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "host-name": "Twinkly-2CA789", + "last-seen": "2w6d13h46m9s", + "mac-address": "98:F4:AB:2C:A7:88", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*76", + "active-address": "10.40.30.230", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-mac-address": "00:24:E4:40:2A:72", + "active-server": "dhcp-v30", + "address": "10.40.30.230", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "Withings_waage", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "3h30m51s", + "last-seen": "20h29m9s", + "mac-address": "00:24:E4:40:2A:72", + "radius": "false", + "server": "dhcp-v30", + "status": "bound" + }, + { + ".id": "*77", + "active-address": "10.40.30.231", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-mac-address": "A4:7E:FA:18:2C:64", + "active-server": "dhcp-v30", + "address": "10.40.30.231", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "Withings_blutdruck", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "6h56m28s", + "last-seen": "17h3m32s", + "mac-address": "A4:7E:FA:18:2C:64", + "radius": "false", + "server": "dhcp-v30", + "status": "bound" + }, + { + ".id": "*78", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.232", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "pve-homematic-raspi-ccu", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "BC:24:11:8E:0A:57", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*79", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.233", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s26_bad_luefter", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "98:A3:16:7A:A3:54", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*7A", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.236", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "lichterkette", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "A4:F0:0F:5F:D0:EC", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*7B", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.237", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "lichterkette-mini", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "24:DC:C3:9B:89:64", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*7C", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.241", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "NukiSmartlock", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "28:DB:A7:09:7B:54", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*7D", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.244", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "NukiBridge", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "24:62:AB:B1:63:F4", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*7E", + "active-address": "10.40.30.8", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-mac-address": "54:F2:9F:12:51:F0", + "active-server": "dhcp-v30", + "address": "10.40.30.8", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "DTUBI-414392337823", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "19h24m12s", + "host-name": "DTUBI-414392337823", + "last-seen": "4h35m48s", + "mac-address": "54:F2:9F:12:51:F0", + "radius": "false", + "server": "dhcp-v30", + "status": "bound" + }, + { + ".id": "*80", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.20.10", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "nas-bf", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "90:09:D0:58:20:F9", + "radius": "false", + "server": "dhcp-v20", + "status": "waiting" + }, + { + ".id": "*81", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.40.11", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "tv", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "last-seen": "2w2d11h53m25s", + "mac-address": "70:AF:24:B8:C9:86", + "radius": "false", + "server": "dhcp-v40", + "status": "waiting" + }, + { + ".id": "*91", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.5", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "P750W", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "host-name": "P750W", + "last-seen": "1w4d4h11m32s", + "mac-address": "4C:EB:BD:E3:25:F2", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*28B", + "active-address": "10.40.30.103", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:7c:88:99:6:7:ec", + "active-mac-address": "7C:88:99:06:07:EC", + "active-server": "dhcp-v30", + "address": "10.40.30.103", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "android-dhcp-8.1.0", + "client-id": "1:7c:88:99:6:7:ec", + "dhcp-option": "", + "disabled": "false", + "dynamic": "true", + "expires-after": "21h9m49s", + "host-name": "SONOFF-NSPanelPro", + "last-seen": "2h50m11s", + "mac-address": "7C:88:99:06:07:EC", + "radius": "false", + "server": "dhcp-v30", + "status": "bound" + }, + { + ".id": "*30E", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.180", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:e4:bc:96:1f:b2:81", + "comment": "Airfryer", + "dhcp-option": "dns 1.1.1.1", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "host-name": "espressif", + "last-seen": "3d5h25m58s", + "mac-address": "E4:BC:96:1F:B2:81", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*353", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.204", + "address-lists": "", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "comment": "shelly-s24_bad_spiegelschrank", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "last-seen": "never", + "mac-address": "14:33:5C:D8:2D:7C", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*3E3", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "address": "10.40.30.150", + "address-lists": "", + "age": "2w1d9h29m35s", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:fc:ee:11:3:32:26", + "comment": "Ender3V3KE-3226", + "dhcp-option": "", + "disabled": "false", + "dynamic": "false", + "expires-after": "0s", + "host-name": "ingenic-3226", + "last-seen": "2w1d9h24m7s", + "mac-address": "FC:EE:11:03:32:26", + "radius": "false", + "server": "dhcp-v30", + "status": "waiting" + }, + { + ".id": "*3FB", + "active-address": "10.40.50.199", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:0:bb:3a:2c:e:e6", + "active-mac-address": "00:BB:3A:2C:0E:E6", + "active-server": "dhcp-v50", + "address": "10.40.50.199", + "address-lists": "", + "age": "2d1h42m26s", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "class-id": "udhcp 1.28.3", + "client-id": "1:0:bb:3a:2c:e:e6", + "dhcp-option": "", + "disabled": "false", + "dynamic": "true", + "expires-after": "22h17m32s", + "last-seen": "1h42m28s", + "mac-address": "00:BB:3A:2C:0E:E6", + "radius": "false", + "server": "dhcp-v50", + "status": "bound" + }, + { + ".id": "*3FC", + "active-address": "10.40.10.185", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:8:c7:b5:91:ba:61", + "active-mac-address": "08:C7:B5:91:BA:61", + "active-server": "dhcp-v10", + "address": "10.40.10.185", + "address-lists": "", + "age": "6h10m22s", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:8:c7:b5:91:ba:61", + "dhcp-option": "", + "disabled": "false", + "dynamic": "true", + "expires-after": "23h41m42s", + "host-name": "iPhone-Carlos", + "last-seen": "18m18s", + "mac-address": "08:C7:B5:91:BA:61", + "radius": "false", + "server": "dhcp-v10", + "status": "bound" + }, + { + ".id": "*3FD", + "active-address": "10.40.10.194", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:b8:b4:9:1a:ec:ab", + "active-mac-address": "B8:B4:09:1A:EC:AB", + "active-server": "dhcp-v10", + "address": "10.40.10.194", + "address-lists": "", + "age": "5h19m57s", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:b8:b4:9:1a:ec:ab", + "dhcp-option": "", + "disabled": "false", + "dynamic": "true", + "expires-after": "23h18m46s", + "host-name": "MacBook-Air-M5", + "last-seen": "41m14s", + "mac-address": "B8:B4:09:1A:EC:AB", + "radius": "false", + "server": "dhcp-v10", + "status": "bound" + }, + { + ".id": "*3FE", + "active-address": "10.40.10.187", + "active-agent-circuit-id": "", + "active-agent-remote-id": "", + "active-client-id": "1:c0:c7:db:de:71:be", + "active-mac-address": "C0:C7:DB:DE:71:BE", + "active-server": "dhcp-v10", + "address": "10.40.10.187", + "address-lists": "", + "age": "5h19m30s", + "agent-circuit-id": "", + "agent-remote-id": "", + "blocked": "false", + "client-id": "1:c0:c7:db:de:71:be", + "dhcp-option": "", + "disabled": "false", + "dynamic": "true", + "expires-after": "23h18m15s", + "host-name": "MacBook-Air-M5", + "last-seen": "41m45s", + "mac-address": "C0:C7:DB:DE:71:BE", + "radius": "false", + "server": "dhcp-v10", + "status": "bound" + } +] \ No newline at end of file diff --git a/routeros/ap1-pre-core-cutover-20260806-041627.backup b/routeros/ap1-pre-core-cutover-20260806-041627.backup new file mode 100644 index 0000000..0853c43 Binary files /dev/null and b/routeros/ap1-pre-core-cutover-20260806-041627.backup differ diff --git a/routeros/ap1-pre-core-cutover-20260806-073616.backup b/routeros/ap1-pre-core-cutover-20260806-073616.backup new file mode 100644 index 0000000..e8d6e52 Binary files /dev/null and b/routeros/ap1-pre-core-cutover-20260806-073616.backup differ diff --git a/routeros/crs326-core-pre-cutover-20260806-041719.backup b/routeros/crs326-core-pre-cutover-20260806-041719.backup new file mode 100644 index 0000000..d537536 Binary files /dev/null and b/routeros/crs326-core-pre-cutover-20260806-041719.backup differ diff --git a/routeros/crs326-core-pre-cutover-20260806-073712.backup b/routeros/crs326-core-pre-cutover-20260806-073712.backup new file mode 100644 index 0000000..10ec4bb Binary files /dev/null and b/routeros/crs326-core-pre-cutover-20260806-073712.backup differ