# Networking

:::tip
We’re moving into Netbox – @imcatwhocode, Sep. 2024

:::


:::tip
Everything on this page describes the Lanskoe site unless stated otherwise.

:::


:::warning
Emphasis on Zero Trust Network in Hackerspace.

:::

# External

## WAN

Etelecom ISP.

* IP: `83.243.68.157`
* Netmask: `255.255.255.240`
* Gateway: `83.243.68.145`
* MAC: `4c:60:de:df:0f:e0`

# Internal

## IPv6

`fd91:652e:271a::/48` – ULA from “registry” (<https://ula.ungleich.ch/>)

`fd2d:f:e7bf:f::/64` – [BKSP-DN42-B](https://wiki.0x08.in/doc/dn42-9bMVf1hS6Y) network prefix for Lanskoe LAN

## Internal

Internal network.

* IPv4: `10.0.2.0/23`
* IPv6 ULA: `fd91:652e:271a:0::/64`
* Internet: yes
* Medium: LAN & WLAN `B4CK` at Lanskoe.

## Guest

Guest network.

* IPv4: `10.0.0.0/23`
* Internet: yes
* Medium: LAN & WLAN `SP4CE` at Lanskoe.

## SIPRNET

Overlay network for external client connections to our PBX.

* IPv6: `fd91:652e:271a:e164::/64`
* Internet: no
* Medium: WireGuard tunnel

## Hackfed0

Nebula mesh for intra-hackerspace telephony. Only on Phonebooth node.

Check <https://hackfed.org> for more info.

* Hackfed ULA prefix – `fd79:7636:1f08::/48`
* Hackfed Nebula subnet – `fd79:7636:1f08:883d::/64`

## Meowcast

Use BKSP ingress as a home-grown Cloudflare LB.

By @[Dmitry Nourell](mention://b30da028-3188-4bba-adbe-7a1e0f703c08/user/298a2e26-87de-4753-a045-717271c8b2f5) x @[Den Afanasyev](mention://f9f21c7c-f4d1-43a0-a1ee-9d16d8ce3c5d/user/5f2b7839-7682-4353-ab36-85f12dff7177) 

* IPv6: `fd6d:5b4f:be76::/48`
* Internet: no

## Tailnet

Primary Tailscale network.

* IPv4: `100.64.86.0/20`
* IPv6: `fd7a:115c:a1e0:8:1337::/64`

## VRUN: b4ck2sp4ce

VPN from *MikroTik hAP lite* `b4ck2sp4ce` back to *~~B4ckSp4ce~~ Runet* (via Lanskoe, `uxie`).

* IPv4 LAN @ hAP: `10.62.78.128/25`
* WireGuard tunnel subnet: `10.16.235.8/30`
* Internet: yes

## VRUN: Virtual RUssian Network

TBD.

* `172.30.64.x`
* `100.64.3.0/24`

## end2sp4ce

VPN from remote endpoints (e.g. laptops) back to *B4ckSp4ce* (via `2sp4ce` interface at `uxie`)

* Subnet: `10.91.66.0/24`
* IPv4 endpoints: `10.91.66.128/25`
* IPv4 @ `uxie`: `10.91.66.129`
* IPv6 endpoints: `fd91:652e:271a:ae16::/64`
* IPv6 @ `uxie`: `fd91:652e:271a:ae16::1`
* Internet: no

## rt2sp4ce

VPN from remote routers back to *B4ckSp4ce* (via `2sp4ce` interface at `uxie`)

* Remote subnets allocated from: `10.91.66.0/25`
* `10.91.66.0/27` — Chaos Constructions 2025 booth, MikroTik RB951G-2HnD with `BKSPIOT` and `B4CK`


* `10.91.66.56/29` — @[Leonid Evdokimov](mention://1d7e753d-8e43-4610-a102-f41cc8696dc5/user/8416174a-5748-4824-ae3c-e96c450e607c), MikroTik hAP ax³: SIP (Nokia E61), Meshtastic (LILYGO T-Beam)

# Wireless

| **ESSID** | **Network** | **Description** |
|-------|---------|-------------|
| B4CK  | Internal | Main network |
| SP4CE | Guest   | Isolated guest network |
| B4CK2BLACK | Internal | Limited access for legacy devices |
| BKSPIOT | Internal | IoT devices |

# VLANs SW01

| VLAN ID | Network |
|---------|---------|
| 10      | Internal |
| 20      | Guest   |
| 30      | CCTV    |

# Core network structure


:::warning
[somewhat] Outdated, as of Dec 2025.

:::

* `uxie` – OPNSense Router & FW, [Uxie](/doc/577e407e-ee06-44a2-9eb3-e8bcfabd8e1d)
* `sw01` – Brocade ICX7250 Core Switch
* `sw03-open-space…` – Noname 2.5GbE/10GbE SFP+ Open Space, unmanaged switch
* ~~SW03 – TP-Link TL-SG105E, Open Space Table Switch~~
* `sw02-openspace-table` – Cisco SG 200-08, Open Space Table, smart-switch
* `sw05-openspace-ac` – Cisco SG 200-08, Open Space next-to-AC, smart-switch
* `~~sw0104~~` ~~– MikroTik RB260GSP, Open Space Table smart-switch + Passive PoE~~
* `sw-04-hwroom…` – D-Link DGS-1016C, Workshop, unmanaged switch
* `sw-07-3d…` – TP-Link LS1005G, Workshop, next-to-`3d-printer` unmanaged switch
* `sw-06-portal…` – MOXA EDS-205, *Seni,* unmanaged 100Mbit switch
* UAP Kitchen – UniFi AC Pro in Kitchen
* UAP Open Space – UniFi 7 Pro in Open Space 
* UAP … – UniFi … in Residential

# Tunnels

## Lanskoe, `uxie` — `flareon`

* WireGuard tunnel subnet: `fd91:652e:271a:38a9:e506:24a8:29de::/112`, `10.16.235.4/30`
* Lanskoe, `uxie`: `fd91:652e:271a:38a9:e506:24a8:29de:1`
* `flareon`: `fd91:652e:271a:38a9:e506:24a8:29de:2`
* :moneybag::question: — ask @[Egor Koleda](mention://4fbdb0c0-c523-487e-b6f6-3eb9cc97b9db/user/66f7e566-0e79-4da0-91d4-44fd1535b9e4) 

## Lanskoe, `uxie` — `netcup`

* WireGuard tunnel subnet: `10.16.235.72/30`
* :moneybag::question: — ask @[Danil ShaTie](mention://7f901300-08ff-4573-b4ae-441cc5d03f82/user/65b17324-1b77-417c-b21b-e76e0ab4f6d7) 

## `10.16.235.x/30` для туннелей

* `10.16.235.4`: `uxie` <→ `flareon`
* `10.16.235.8`: `uxie` <→ `b4ck2sp4ce` MikroTik
* `10.16.235.12`: `451f` <→ `xris`
* `10.16.235.16`: `451f` <→ `anfe`
* `10.16.235.20`: `451f` <→ `tapk`
* `10.16.235.24`: `sail-gw` <→ `sail`
* `10.16.235.28`: `isla-gw` <→ `isla`
* `10.16.235.32`: `posh-gw` <→ `posh`
* `10.16.235.36`: `daxh-gw` <→ `daxh`
* `10.16.235.40`: `effe-gw` <→ `effe`
* `10.16.235.44`: `451f` <→ `t460`
* `10.16.235.48`: `clefable` <→ `t460`
* `10.16.235.52`: `oob` <→ `clefable` (@[Dmitry Nourell](mention://8f2babf3-63c4-4179-9b24-15b3fc000cf9/user/298a2e26-87de-4753-a045-717271c8b2f5), `ru-mur1`, МТС)
* `10.16.235.56`: `oob` <→ `ac2` (@[Dmitry](mention://86f4eaf0-34b6-4e50-adf6-8ad98b925fee/user/9a96b8fc-09e9-435b-87ff-0773ae6ae066) `@SailCast`, SkyNet)
* `10.16.235.60`: `oob` <→ `status-page` (@[Egor Koleda](mention://2e12911f-5482-4323-9e8d-a207898a6f05/user/66f7e566-0e79-4da0-91d4-44fd1535b9e4), RuVDS)
* `10.16.235.64`: `oob` <→ `ax3` (@[Leonid Evdokimov](mention://fafe7cf8-c7c1-4502-9962-d61aacda1d7d/user/8416174a-5748-4824-ae3c-e96c450e607c), П.А.К.Т.)
* `10.16.235.68`: `oob` <→ `ekrt` (@[Egor Koleda](mention://226531d2-95bd-4103-9abb-424d83be77ef/user/66f7e566-0e79-4da0-91d4-44fd1535b9e4), SkyNet)
* `10.16.235.72`: `uxie` <→ `netcup` (@[Danil ShaTie](mention://5cd5f3ee-e856-4125-8b57-a7426fa8e981/user/65b17324-1b77-417c-b21b-e76e0ab4f6d7))

---

**Documents**

- [BKSP 101](https://wiki.bksp.in/s/public/doc/bksp-101-HvrtlzB32F)
- [Проекты](https://wiki.bksp.in/s/public/doc/proekty-yjWZscgTvo)
- [Infrastructure](https://wiki.bksp.in/s/public/doc/infrastructure-VPKsJwVSVh)
- [Пространство](https://wiki.bksp.in/s/public/doc/prostranstvo-UF1eSbQDi5)
- [Equipment](https://wiki.bksp.in/s/public/doc/equipment-t5MYAVJ8l0)
- [Other](https://wiki.bksp.in/s/public/doc/other-uPW1YJQaRt)