Homelab setup test (Suggestions)
---
title: "Final Network Connections - 20G LACP Reference"
aliases:
- "Final 20G Network Map"
- "UniFi LACP Final Reference"
- "Network Final Connection Baseline"
tags:
- network
- unifi
- lacp
- vlan
- homelab
- proxmox
- synology
- ai-server
- final-reference
created: "{{date}}"
status: final-reference
network_prefix: "10.10.0.0/16"
core_switch: "[[Device - USW Pro Aggregation]]"
gateway: "[[Device - UDM Pro Max]]"
---
# Final Network Connections - 20G LACP Reference
> [!important]
> This note is the finalized connection reference for the target network state.
> The reset baseline gets the network online first. This note shows the final 20G LACP topology after adoption, firmware updates, VLANs, and basic internet access are stable.
---
## Purpose
This note defines the final physical and logical connection plan for the UniFi network.
The target design is:
- `10.10.0.0/16` private network plan
- UniFi-managed routing, switching, Wi-Fi, and camera infrastructure
- USW Pro Aggregation as the high-speed core switch
- 20G LACP uplinks between core networking equipment
- 20G LACP links to major servers
- Clean VLAN segmentation
- Dedicated work VLAN for wife’s work-from-home equipment
- Future-ready structure for local AI agents, tools, services, and MCP servers
---
## Related Notes
### Core Network Notes
- [[Network Reset Baseline]]
- [[Project End State]]
- [[VLAN Plan]]
- [[Firewall Rules]]
- [[Wi-Fi Plan]]
- [[Cable Map]]
- [[Rack Layout]]
- [[IP Address Plan]]
### Device Notes To Create
- [[Device - UDM Pro Max]]
- [[Device - USW Pro Aggregation]]
- [[Device - USW Pro XG 10 PoE]]
- [[Device - USW Pro Max 24 PoE]]
- [[Device - Proxmox Server]]
- [[Device - Synology DS1823xs+]]
- [[Device - Puget AI Server]]
- [[Device - U7 Pro Max Downstairs]]
- [[Device - U7 Pro Max Upstairs]]
- [[Device - G4 Doorbell Pro]]
- [[Device - G5 Pro Camera]]
- [[Device - USW Flex Switches]]
---
# Final Topology Summary
## Core Design
The USW Pro Aggregation is the core switch.
All high-speed devices connect back to the USW Pro Aggregation.
The final design uses 20G LACP for:
- USW Pro Aggregation to USW Pro XG 10 PoE
- USW Pro Aggregation to USW Pro Max 24 PoE
- USW Pro Aggregation to Proxmox Server
- USW Pro Aggregation to Synology NAS
- USW Pro Aggregation to Puget AI Server
The UDM Pro Max remains the gateway, firewall, DHCP controller, and UniFi console.
The UDM Pro Max should use a stable 10G SFP+ LAN uplink to the USW Pro Aggregation unless the final WAN layout leaves both SFP+ ports available and a 2x10G LACP gateway uplink is deliberately chosen later.
> [!note]
> 20G LACP means 2x10G aggregate bandwidth.
> It does not guarantee a single file transfer or single TCP session will run at 20G. Most single flows will still use one 10G member link. The value comes from multiple simultaneous clients, services, VM traffic, backups, and storage operations.
---
# Final Physical Connection Plan
## Primary Backbone
| Link ID | Source Device | Source Ports | Destination Device | Destination Ports | Link Type | Final Speed | Purpose |
|---|---|---|---|---|---|---|---|
| `CORE-GW-01` | [[Device - UDM Pro Max]] | SFP+ LAN | [[Device - USW Pro Aggregation]] | `AGG-P01` | Trunk | 10G | Gateway to core |
| `CORE-XG-LAG-01` | [[Device - USW Pro Aggregation]] | `AGG-P09` + `AGG-P10` | [[Device - USW Pro XG 10 PoE]] | `XG-SFP11` + `XG-SFP12` | LACP trunk | 20G | 10G workstation switch uplink |
| `CORE-ACCESS-LAG-01` | [[Device - USW Pro Aggregation]] | `AGG-P11` + `AGG-P12` | [[Device - USW Pro Max 24 PoE]] | `PM24-SFP25` + `PM24-SFP26` | LACP trunk | 20G | PoE/access/AP/camera switch uplink |
---
## Server Connections
| Link ID | Source Device | Source Ports | Destination Device | Destination Ports | Link Type | Final Speed | Primary VLAN |
|---|---|---|---|---|---|---|---|
| `CORE-PROXMOX-LAG-01` | [[Device - USW Pro Aggregation]] | `AGG-P03` + `AGG-P04` | [[Device - Proxmox Server]] | `PROX-SFP1` + `PROX-SFP2` | LACP | 20G | VLAN 30 |
| `CORE-SYNOLOGY-LAG-01` | [[Device - USW Pro Aggregation]] | `AGG-P05` + `AGG-P06` | [[Device - Synology DS1823xs+]] | `NAS-10G1` + `NAS-10G2` | LACP | 20G | VLAN 30 |
| `CORE-PUGET-LAG-01` | [[Device - USW Pro Aggregation]] | `AGG-P07` + `AGG-P08` | [[Device - Puget AI Server]] | `PUGET-SFP1` + `PUGET-SFP2` | LACP | 20G | VLAN 30 |
> [!warning]
> The Synology 20G LACP plan assumes the NAS has two usable 10G interfaces.
> If the Synology only has one 10G port available, the NAS cannot run a true 20G LACP bond until a compatible dual-port 10G card or equivalent expansion path is installed.
---
# Final Port Assignment Map
## USW Pro Aggregation
| Port | Connected Device | Link ID | Mode | Native VLAN | Tagged VLANs | Notes |
|---|---|---|---|---|---|---|
| `AGG-P01` | [[Device - UDM Pro Max]] | `CORE-GW-01` | Trunk | 1 | All required VLANs | Gateway uplink |
| `AGG-P02` | Reserved | TBD | Disabled / spare | TBD | TBD | Keep open for recovery or temporary admin |
| `AGG-P03` | [[Device - Proxmox Server]] | `CORE-PROXMOX-LAG-01` | LACP member | 30 | Optional selected VM VLANs later | Proxmox bond member 1 |
| `AGG-P04` | [[Device - Proxmox Server]] | `CORE-PROXMOX-LAG-01` | LACP member | 30 | Optional selected VM VLANs later | Proxmox bond member 2 |
| `AGG-P05` | [[Device - Synology DS1823xs+]] | `CORE-SYNOLOGY-LAG-01` | LACP member | 30 | None initially | NAS bond member 1 |
| `AGG-P06` | [[Device - Synology DS1823xs+]] | `CORE-SYNOLOGY-LAG-01` | LACP member | 30 | None initially | NAS bond member 2 |
| `AGG-P07` | [[Device - Puget AI Server]] | `CORE-PUGET-LAG-01` | LACP member | 30 | Optional selected service VLANs later | Puget bond member 1 |
| `AGG-P08` | [[Device - Puget AI Server]] | `CORE-PUGET-LAG-01` | LACP member | 30 | Optional selected service VLANs later | Puget bond member 2 |
| `AGG-P09` | [[Device - USW Pro XG 10 PoE]] | `CORE-XG-LAG-01` | LACP trunk member | 1 | All required VLANs | XG uplink member 1 |
| `AGG-P10` | [[Device - USW Pro XG 10 PoE]] | `CORE-XG-LAG-01` | LACP trunk member | 1 | All required VLANs | XG uplink member 2 |
| `AGG-P11` | [[Device - USW Pro Max 24 PoE]] | `CORE-ACCESS-LAG-01` | LACP trunk member | 1 | All required VLANs | Access uplink member 1 |
| `AGG-P12` | [[Device - USW Pro Max 24 PoE]] | `CORE-ACCESS-LAG-01` | LACP trunk member | 1 | All required VLANs | Access uplink member 2 |
---
## USW Pro XG 10 PoE
| Port | Connected Device | Mode | Native VLAN | Tagged VLANs | Notes |
|---|---|---|---|---|---|
| `XG-RJ45-01` | Primary workstation | Access | 10 | None | Main trusted workstation |
| `XG-RJ45-03` | Lab workstation | Access or trunk | 30 | Optional selected VLANs | Use only if needed |
| `XG-RJ45-02` | Secondary workstation | Access | 10 | None | Secondary trusted workstation |
| `XG-RJ45-04` | Reserved AI workstation | Access | 30 | None | For local AI / server-adjacent workstation |
| `XG-RJ45-05` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `XG-RJ45-06` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `XG-RJ45-07` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `XG-RJ45-08` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `XG-RJ45-09` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `XG-RJ45-10` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `XG-SFP11` | [[Device - USW Pro Aggregation]] | LACP trunk member | 1 | All required VLANs | Uplink member 1 |
| `XG-SFP12` | [[Device - USW Pro Aggregation]] | LACP trunk member | 1 | All required VLANs | Uplink member 2 |
---
## USW Pro Max 24 PoE
| Port | Connected Device | Mode | Native VLAN | Tagged VLANs | Notes |
|---|---|---|---|---|---|
| `PM24-P01` | [[Device - U7 Pro Max Downstairs]] | AP trunk | 1 | 10, 20, 40, 50, 60 | Downstairs AP |
| `PM24-P02` | [[Device - U7 Pro Max Upstairs]] | AP trunk | 1 | 10, 20, 40, 50, 60 | Upstairs AP |
| `PM24-P03` | [[Device - G4 Doorbell Pro]] | Access | 50 | None | Camera VLAN |
| `PM24-P04` | [[Device - G5 Pro Camera]] | Access | 50 | None | Camera VLAN |
| `PM24-P05` | [[Device - USW Flex Switches]] | Trunk or access | 1 | Selected VLANs only | Do not LACP Flex switches |
| `PM24-P06` | Wife work dock / work device | Access | 20 | None | Stable work VLAN |
| `PM24-P07` | Home wired device | Access | 10 | None | Trusted home VLAN |
| `PM24-P08` | Home wired device | Access | 10 | None | Trusted home VLAN |
| `PM24-P09` | IoT wired device | Access | 40 | None | IoT VLAN |
| `PM24-P10` | IoT wired device | Access | 40 | None | IoT VLAN |
| `PM24-P11` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P12` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P13` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P14` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P15` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P16` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P17` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P18` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P19` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P20` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P21` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P22` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P23` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-P24` | Spare | Disabled | TBD | TBD | Enable only when assigned |
| `PM24-SFP25` | [[Device - USW Pro Aggregation]] | LACP trunk member | 1 | All required VLANs | Uplink member 1 |
| `PM24-SFP26` | [[Device - USW Pro Aggregation]] | LACP trunk member | 1 | All required VLANs | Uplink member 2 |
---
# VLAN Baseline
## Active VLANs
| VLAN ID | Name | Subnet | Gateway | Purpose | Status |
|---|---|---|---|---|---|
| 1 | `MGMT` | `10.10.1.0/24` | `10.10.1.1` | UniFi console, switches, AP management | Active |
| 10 | `HOME` | `10.10.10.0/24` | `10.10.10.1` | Trusted household devices | Active |
| 20 | `WORK` | `10.10.20.0/24` | `10.10.20.1` | Wife work-from-home devices | Active |
| 30 | `SERVERS` | `10.10.30.0/24` | `10.10.30.1` | Proxmox, Synology, Puget AI, storage | Active |
| 40 | `IOT` | `10.10.40.0/24` | `10.10.40.1` | Smart home and untrusted devices | Planned |
| 50 | `CAMERAS` | `10.10.50.0/24` | `10.10.50.1` | UniFi Protect cameras and doorbell | Planned |
| 60 | `GUEST` | `10.10.60.0/24` | `10.10.60.1` | Guest Wi-Fi | Planned |
---
## Reserved VLANs
| VLAN ID | Name | Subnet | Gateway | Purpose | Status |
|---|---|---|---|---|---|
| 70 | `AI-SERVICES` | `10.10.70.0/24` | `10.10.70.1` | Local AI agents, tools, MCP servers, inference APIs | Reserved |
| 80 | `LAB` | `10.10.80.0/24` | `10.10.80.1` | Experimental VMs, temporary services, testing | Reserved |
| 90 | `BACKUP` | `10.10.90.0/24` | `10.10.90.1` | Backup-only network if needed later | Reserved |
> [!note]
> Do not create every reserved VLAN immediately.
> Start with MGMT, HOME, WORK, and SERVERS. Add IOT, CAMERAS, GUEST, AI-SERVICES, LAB, and BACKUP only when each has a defined device list and firewall purpose.
---
# Port Profiles
## Core Trunk Profile
Use for:
- UDM Pro Max to USW Pro Aggregation
- USW Pro Aggregation to USW Pro XG 10 PoE
- USW Pro Aggregation to USW Pro Max 24 PoE
Settings:
| Field | Value |
|---|---|
| Profile Name | `TRUNK-CORE-ALL` |
| Native VLAN | `MGMT / VLAN 1` |
| Tagged VLANs | `10, 20, 30, 40, 50, 60` |
| Reserved VLANs | Add `70, 80, 90` only when needed |
| STP | Enabled |
| LACP | Enabled only on LAG links |
---
## AP Trunk Profile
Use for:
- U7 Pro Max Downstairs
- U7 Pro Max Upstairs
Settings:
| Field | Value |
|---|---|
| Profile Name | `TRUNK-AP-MGMT-WIFI` |
| Native VLAN | `MGMT / VLAN 1` |
| Tagged VLANs | `10, 20, 40, 50, 60` |
| Purpose | AP management plus Wi-Fi VLANs |
---
## Server Access Profile
Use for:
- Synology NAS initial configuration
- Proxmox initial management
- Puget AI Server initial management
Settings:
| Field | Value |
|---|---|
| Profile Name | `ACCESS-SERVERS-V30` |
| Native VLAN | `SERVERS / VLAN 30` |
| Tagged VLANs | None initially |
| Purpose | Server management and storage network |
---
## Proxmox Trunk Profile
Use only after Proxmox is stable on VLAN 30.
Settings:
| Field | Value |
|---|---|
| Profile Name | `TRUNK-PROXMOX-SELECTED` |
| Native VLAN | `SERVERS / VLAN 30` |
| Tagged VLANs | `10, 40, 50, 60, 70, 80` as needed |
| Purpose | VM, container, AI agent, MCP, lab, and service VLANs |
> [!warning]
> Do not trunk every VLAN to Proxmox by default.
> Only tag VLANs that a VM, container, local AI service, or MCP server actually needs.
---
## Work VLAN Access Profile
Use for:
- Wife’s wired work dock
- Wife’s work laptop if wired
- Work-only access port
Settings:
| Field | Value |
|---|---|
| Profile Name | `ACCESS-WORK-V20` |
| Native VLAN | `WORK / VLAN 20` |
| Tagged VLANs | None |
| Purpose | Stable work-from-home network |
---
# LACP Groups
## `CORE-XG-LAG-01`
| Field | Value |
|---|---|
| Devices | [[Device - USW Pro Aggregation]] to [[Device - USW Pro XG 10 PoE]] |
| Aggregation Ports | `AGG-P09`, `AGG-P10` |
| XG Ports | `XG-SFP11`, `XG-SFP12` |
| Mode | LACP |
| Speed | 20G aggregate |
| Port Profile | `TRUNK-CORE-ALL` |
| Purpose | High-speed workstation switch uplink |
---
## `CORE-ACCESS-LAG-01`
| Field | Value |
|---|---|
| Devices | [[Device - USW Pro Aggregation]] to [[Device - USW Pro Max 24 PoE]] |
| Aggregation Ports | `AGG-P11`, `AGG-P12` |
| Pro Max 24 Ports | `PM24-SFP25`, `PM24-SFP26` |
| Mode | LACP |
| Speed | 20G aggregate |
| Port Profile | `TRUNK-CORE-ALL` |
| Purpose | PoE access, APs, cameras, Flex switches |
---
## `CORE-PROXMOX-LAG-01`
| Field | Value |
|---|---|
| Devices | [[Device - USW Pro Aggregation]] to [[Device - Proxmox Server]] |
| Aggregation Ports | `AGG-P03`, `AGG-P04` |
| Proxmox Ports | `PROX-SFP1`, `PROX-SFP2` |
| Mode | LACP |
| Speed | 20G aggregate |
| Initial Profile | `ACCESS-SERVERS-V30` |
| Later Profile | `TRUNK-PROXMOX-SELECTED` |
| Purpose | VM host, containers, AI services, lab services |
---
## `CORE-SYNOLOGY-LAG-01`
| Field | Value |
|---|---|
| Devices | [[Device - USW Pro Aggregation]] to [[Device - Synology DS1823xs+]] |
| Aggregation Ports | `AGG-P05`, `AGG-P06` |
| Synology Ports | `NAS-10G1`, `NAS-10G2` |
| Mode | LACP |
| Speed | 20G aggregate |
| Port Profile | `ACCESS-SERVERS-V30` |
| Purpose | NAS storage, backups, shared datasets, AI model storage |
---
## `CORE-PUGET-LAG-01`
| Field | Value |
|---|---|
| Devices | [[Device - USW Pro Aggregation]] to [[Device - Puget AI Server]] |
| Aggregation Ports | `AGG-P07`, `AGG-P08` |
| Puget Ports | `PUGET-SFP1`, `PUGET-SFP2` |
| Mode | LACP |
| Speed | 20G aggregate |
| Initial Profile | `ACCESS-SERVERS-V30` |
| Later Profile | Optional selected service VLANs |
| Purpose | AI workstation/server, GPU workloads, local inference, model services |
---
# Final IP Assignment Baseline
## Infrastructure
| Device | Note | VLAN | Suggested IP |
|---|---|---|---|
| UDM Pro Max | [[Device - UDM Pro Max]] | 1 | `10.10.1.1` |
| USW Pro Aggregation | [[Device - USW Pro Aggregation]] | 1 | `10.10.1.2` |
| USW Pro XG 10 PoE | [[Device - USW Pro XG 10 PoE]] | 1 | `10.10.1.3` |
| USW Pro Max 24 PoE | [[Device - USW Pro Max 24 PoE]] | 1 | `10.10.1.4` |
| U7 Pro Max Downstairs | [[Device - U7 Pro Max Downstairs]] | 1 | `10.10.1.11` |
| U7 Pro Max Upstairs | [[Device - U7 Pro Max Upstairs]] | 1 | `10.10.1.12` |
---
## Servers
| Device | Note | VLAN | Suggested IP |
|---|---|---|---|
| Proxmox Server | [[Device - Proxmox Server]] | 30 | `10.10.30.10` |
| Synology DS1823xs+ | [[Device - Synology DS1823xs+]] | 30 | `10.10.30.20` |
| Puget AI Server | [[Device - Puget AI Server]] | 30 | `10.10.30.30` |
---
## Future AI Services
| Service Type | Suggested VLAN | Suggested Range | Notes |
|---|---|---|---|
| Local AI agents | 70 | `10.10.70.10-10.10.70.49` | Use if agents need isolation from server management |
| MCP servers | 70 | `10.10.70.50-10.10.70.99` | Use for tool-facing service endpoints |
| Inference APIs | 70 | `10.10.70.100-10.10.70.149` | Ollama, vLLM, text-generation services, etc. |
| Web UIs | 70 | `10.10.70.150-10.10.70.199` | Open WebUI, dashboards, admin panels |
| Temporary lab services | 80 | `10.10.80.10-10.10.80.199` | Experimental only |
---
# Wi-Fi Baseline
## Initial SSIDs
| SSID | VLAN | Purpose | Status |
|---|---|---|---|
| `Home` | 10 | Trusted home devices | Active |
| `Work` | 20 | Wife work-from-home devices | Active |
---
## Later SSIDs
| SSID | VLAN | Purpose | Status |
|---|---|---|---|
| `IoT` | 40 | Smart home devices | Planned |
| `Guest` | 60 | Guest internet only | Planned |
| `Cameras` | 50 | Only if Wi-Fi camera devices require it | Optional |
---
# Firewall Baseline
## Address Groups
| Group Name | Members |
|---|---|
| `RFC1918` | `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16` |
| `LOCAL_NETWORKS` | `10.10.0.0/16` |
| `INFRASTRUCTURE` | `10.10.1.0/24` |
| `SERVERS` | `10.10.30.0/24` |
| `AI_SERVICES` | `10.10.70.0/24` |
---
## Rule Intent
| Source | Destination | Action | Notes |
|---|---|---|---|
| MGMT | All local VLANs | Allow | Admin control |
| HOME | SERVERS | Allow initially | Tighten later |
| HOME | AI-SERVICES | Allow selected services later | Do not open everything permanently |
| WORK | Internet | Allow | Keep wife’s work connection stable |
| WORK | Local VLANs | Block | Allow only DHCP/DNS/NTP to gateway |
| IOT | Internet | Allow | Limit local access |
| IOT | Local VLANs | Block | Add exceptions only as needed |
| CAMERAS | UniFi Protect / UDM | Allow | Required for Protect |
| CAMERAS | Internet | Block later | Allow temporarily for updates if needed |
| GUEST | Internet | Allow | Guest-only access |
| GUEST | Local VLANs | Block | No LAN access |
| LAB | Local VLANs | Block by default | Temporary exceptions only |
---
# Final Topology Diagram
```mermaid
flowchart TD
ISP[ISP ONT / Modem] --> UDM[UDM Pro Max<br/>Gateway / Firewall / UniFi Console<br/>10.10.1.1]
UDM -- "10G SFP+ trunk<br/>CORE-GW-01" --> AGG[USW Pro Aggregation<br/>Core Switch<br/>10.10.1.2]
AGG -- "20G LACP<br/>CORE-XG-LAG-01" --> XG[USW Pro XG 10 PoE<br/>10G Workstation Switch<br/>10.10.1.3]
AGG -- "20G LACP<br/>CORE-ACCESS-LAG-01" --> PM24[USW Pro Max 24 PoE<br/>PoE Access Switch<br/>10.10.1.4]
AGG -- "20G LACP<br/>CORE-PROXMOX-LAG-01" --> PROX[Proxmox Server<br/>10.10.30.10<br/>VLAN 30]
AGG -- "20G LACP<br/>CORE-SYNOLOGY-LAG-01" --> NAS[Synology DS1823xs+<br/>10.10.30.20<br/>VLAN 30]
AGG -- "20G LACP<br/>CORE-PUGET-LAG-01" --> PUGET[Puget AI Server<br/>10.10.30.30<br/>VLAN 30]
XG --> WS1[Primary 10G Workstation<br/>VLAN 10]
XG --> WS2[AI / Lab Workstation<br/>VLAN 30 or 70]
PM24 --> AP1[U7 Pro Max Downstairs<br/>10.10.1.11]
PM24 --> AP2[U7 Pro Max Upstairs<br/>10.10.1.12]
PM24 --> WORK[Wife Work Dock / Laptop<br/>VLAN 20]
PM24 --> CAMS[UniFi Cameras / Doorbell<br/>VLAN 50]
PM24 --> FLEX[USW Flex Switches<br/>Single uplink only]
AP1 --> HOME[Home SSID<br/>VLAN 10]
AP1 --> WORKSSID[Work SSID<br/>VLAN 20]
AP2 --> HOME
AP2 --> WORKSSID