Sources for the network pages

You want to check a statement on the network pages against the file or record it came from. The list is from the earlier docs page; the entries were not all re-read, and what each file is said to show was not re-checked. Line numbers into the poe scripts are from the earlier page.

In fpgas.online-infra (main)

• VLAN-per-port network design for fpgas.online: the goals and non-goals, the addressing and VLAN formulas and their reading rule, the trunk/access/management port model, the failure-modes list, the fpgas-switch-setup behaviour and ordering rule, the host_vars schema.

• VLAN-per-port network: hardware prototype runbook: stages 6, 7 and 8 (isolation matrix, port identity, quarantine), the per-VLAN gateway IPv6 address, the CLI exit codes, and the commitFailed and two-seconds-per-operation quirks.

• ansible/site.yml: vlan_ports and switch_vlans both gated on when: switches is defined.

• ansible/inventory/group_vars/all/srv.yml: the tftp_root expression, the other place switches is defined decides behaviour.

• ansible/inventory/host_vars/fpgas.online.yml: the switches: list, the confirmed 2026-08-22 cabling and access-port counts, pib_network, pib_network6_base, the /16 eth_local_netmask and why it is not /24, the note that dhcp_range is deliberately absent, the vaulted per-switch write communities.

• ansible/inventory/host_vars/ps1.fpgas.online.yml: the legacy pib_network: 10.21.0, the flat /24 eth_local_netmask and dhcp_range, switch.nos and the 100+port address expression.

• tests/inventory/host_vars/test-vm.yml: the CI VM’s single-access-port switches: entry and switches_manage: false.

• ansible/filter_plugins/port_vlans.py: the single implementation of the per-port formulas.

• ansible/roles/vlan_ports/tasks/main.yml and its templates/: the per-port netdev/network files, the /32 gateway IPv4 and the /64 per-switch gateway IPv6, proxy ARP, the trunk’s 1504-byte MTU.

• ansible/roles/switch_vlans/tasks/main.yml: the CLI venv, /etc/fpgas/switches.yml, the per-switch converge with FPGAS_SWITCH_COMMUNITY from a vaulted variable.

• ansible/roles/firewall/templates/nftables.conf.j2: the switches is defined split, the forward chain’s policy drop with v* to v* falling through to it, both DNAT port formulas.

• ansible/roles/pxe/templates/ports.conf.j2 and dnsmasq-base.conf.j2: one dhcp-range per interface tag, the host-record names, the quarantine pool and its one-hour lease, the deliberate absence of MAC addresses.

• ansible/roles/netif/tasks/main.yml and templates/link.j2: the gateway’s MAC-matched .link files, the Type=ether guard against matching VLAN children, the one-time reboot.

• ansible/roles/site/tasks/snmp.yml: the /etc/environment.exports variables poe.sh needs, pi_ports built from switch.nos, the switch.mpi_port is defined guard, skipped on per-port hosts by design.

• TECHDEBT.md: the onboard-versus-dongle enumeration incident and the eth-uplink / eth-fpga naming that followed.

In other repositories

• fpgas.online-poe: README.md for the fpgas-switch-setup invocation, its owned VLAN range and exit codes, and the SNMP environment variables; scripts/poe.sh (lines 37-88: the sourced env file, the utils.py call, and the dead snmpget.py / snmpset.py block at 67-88, after the exit on line 65), scripts/allpoe.sh (lines 6-14) and scripts/allpoeoff.sh (lines 5-30: the hardcoded seq 1 48 and legacy 10.21.0 / 100 bases, and the commented-out shutdown loop). See The PoE scripts.

• fpgas.online-test-designs: docs/hardware/acorn-pinmap.md, the troubleshooting table, for the 0.4 W wedged-Pi symptom and the manual S3300 PoE cycle; docs/verify-hardware.md for the two-minute power-on-to-SSH figure.

• fpgas.online-setup-pi: README.md for the package contents, nfpm.yaml for where the .link files are installed, and fixpi/etc/systemd/network/{11-eth-uplink,12-eth-fpga}.link for the Path= matches themselves.

• fpgas.online-gw: README.md for the slug-to-address derivation, PoE control by board slug, and the note that the API documentation lands with the implementation on an unmerged branch.

• fpgas-online.github.io: site/index.html, “How It Works”, for the user-facing “isolated networks” claim.

Related pages

Welland (the switches, their management addresses and the board-to-port map), The ps1 gateway and switch (the FS728TPv2 and its port table, its private OID and the 60-second blade recovery under power control), Sites, Netboot and the NFS root.