17 Commits
Author SHA1 Message Date
Claude 30d67ebd4f Overhaul README to reflect unified switch + OPNsense management
The tool now actively manages OPNsense alongside the switch. Updated:

- Title: "Switch + OPNsense Network Manager"
- Description: mentions VLANs, firewall, DHCP, DNS, VPN, backups
- Tabs: updated from 8 to 17 with descriptions for all new tabs
  (Dashboard, Network, Firewall, Services, Port Fwd, PoE, Topology,
  Backups, Alerts)
- OPNsense: changed from "optional/read-only" to core integration
- VPN: OPNsense WireGuard as recommended, ControlD DNS auto-applied
- "Does Not Do": removed "does not manage OPNsense" (it does now)
- Files table: added 15 new config files (policies, services,
  backups, schedules, NAT rules, etc.)
- Backup note: back up entire /etc/switch-manager/ directory
- Endpoint count: 34 → ~60
- Component count: 8 tabs → 17 tabs, 38 components

https://claude.ai/code/session_01Do9bsN39MTuy2GVv7yzSrE
2026-03-28 16:57:08 +00:00
Claude e39d0137d1 Fix README: web UI is VLAN 99 / VPN only, not whole network
The web UI runs on the management computer on VLAN 99. It is NOT
accessible from any device on the network — only from VLAN 99 or
via WireGuard VPN with VLAN 99 access. That's the whole point of
management VLAN isolation.

https://claude.ai/code/session_01Do9bsN39MTuy2GVv7yzSrE
2026-03-28 16:39:31 +00:00
Claude 504a55fb2b Increase screen scrollback buffer to 10000 lines
https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 04:23:56 +00:00
Claude 8705d3d7dd Add command reference table and screen scrollback docs
- Table of all read and push commands with confirmed/not-tested/invalid status
- Note that save config caused a reboot on first run
- screen scrollback: Ctrl-A [ to enter copy mode, defscrollback in .screenrc

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 04:21:03 +00:00
Claude f52c2721d0 Note switch default IP (192.168.1.1) means TFTP needs no console prep
Per the ERS 59100 Quick Install Guide, the switch defaults to 192.168.1.1/24
on VLAN 1 if DHCP fails. Method 3 now notes that on a factory/reset switch
you can TFTP without configuring anything via console first.

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 04:17:06 +00:00
Claude fe07079916 Add laptop-as-TFTP-server and XMODEM console upgrade methods
- Method 3: laptop with console + Ethernet can act as temporary TFTP server
- Method 4: XMODEM over console cable when USB broken and no Ethernet available
- Note 3-hour transfer time warning for XMODEM at 9600 baud

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 04:07:26 +00:00
Claude b77f6fd19b Add firmware upgrade section covering USB, SFTP, and TFTP methods
- Document current firmware versions (BOSS 7.9.6.015 / Diag 7.5.0.4)
- Note upgrade rules: one version at a time, diag first, no read-only USB files
- USB method via download command and boot menu option 4
- SFTP and TFTP methods via CLI
- Link to Extreme portal and announcements page for latest version

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 04:03:40 +00:00
Claude 32d512f8e1 Complete boot menu documentation with all options (A, B, C)
https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 03:59:22 +00:00
Claude e4777d72fb Document diagnostic boot menu and improve factory reset instructions
- Add boot menu contents (options 1-9, A-C) with explanation of each
- Method 1: boot menu option 5 (works without knowing password)
- Method 2: CLI method (requires working login)
- Note 60-second window and how to continue normal boot if entered by accident

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 03:58:56 +00:00
Claude fe723ea6e5 Add switch OS description and factory reset instructions to README
- Document BOSS v7.9.6 as the switch firmware in Requirements section
- Add factory reset procedure (boot config flags factory) to Troubleshooting
- Note when a wipe is and is not necessary

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 03:53:18 +00:00
Claude efd3c327d4 Add OS requirements section at top of README
Management computer must run Linux (Ubuntu/Debian); setup script uses
apt, systemd, picocom, and Docker. Browser UI works from any OS.

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 03:50:21 +00:00
Claude ff6e3920c0 Fix Step 6 commands and explain IP conflict / management VLAN design
- Fix save command: copy running-config nvram:config.cfg -> save config
- Fix port format note: remove incorrect 1/1 slot prefix, both models use bare numbers
- Add note explaining why 192.168.1.1 conflict is not a problem (management VLAN 99 is separate subnet)
- Add console commands to change VLAN 1 IP if needed before VLAN 99 is configured

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 03:47:09 +00:00
Claude 8ab9cd9cf6 Add console cable plug-in order warning and console vs SSH note
Cable must be connected before powering on for screen/picocom to work.
Also clarify that console is one-time setup only; script uses SSH over Ethernet.

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 03:44:48 +00:00
Claude 06b87eaaff Fix Ctrl-Y boot instruction — keypress is required, not optional
The ERS 59100GTS-PWR+ will not continue booting without Ctrl-Y.
Previous instruction was incorrect.

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 02:25:35 +00:00
Claude 064d9b358e Add ERS 59100GTS-PWR+ physical setup guide to README
Documents the full first-time hardware setup flow:
- Where the console/service port is on the 59100 and 5952 front panel
- What console cable to buy and how to connect it
- What the Ctrl-Y boot screen means (don't press it, just wait)
- Default login credentials
- Bootstrap VLAN 99 commands including 59100 port numbering (1/1 format)
- Management computer static IP setup
- Consolidates and removes duplicate console/bootstrap sections

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-24 02:21:17 +00:00
Claude 360fbb5606 Add DNS enforcement, ACL templates, local hostnames, ctrld format fix
Features added:
- Port 53 conflict resolution: auto-detect/fix systemd-resolved stub listener
  on Linux; instructions for OPNsense Unbound (ctrld auto-terminates it)
- DNS enforcement ACLs: generate ERS 5952 ACL commands that permit DNS only
  to ctrld IP and block all other port 53/853 traffic per VLAN
- Inter-VLAN routing ACL templates: Staff, IoT, Guest, Camera profiles with
  live preview and parameter inputs (ctrld IP, NVR IP, subnet)
- Local hostname resolution: dnsmasq Docker service for .lan split-horizon DNS;
  manage hostname→IP mappings via UI; generates dnsmasq.conf and ctrld.toml
  upstream.local block
- Fix ctrld.toml format: correct [listener.0], [network.N], [upstream.N] table
  notation (was using wrong [[array]] notation); matches official docs format
- Backend docstrings: added docstrings to all previously undocumented functions
- README: new sections for port 53 conflict resolution, DNS enforcement ACLs,
  ACL templates, and local hostname resolution (dnsmasq)
- Fix Python 3.11 f-string syntax errors in Avaya_5952_setup.py (backslash
  in f-string expressions, same-type quote in dict access); embed now succeeds

https://claude.ai/code/session_01JR2EMK7rwrZJowpstcaxQ6
2026-03-23 13:16:59 +00:00
Outis 81f6afd697 Add files via upload 2026-03-23 08:52:01 -04:00