Sankofa/infrastructure/network/README.md

Network Infrastructure Management

Comprehensive management tools for network infrastructure including switches, routers, VLANs, and network topology.

Overview

This directory contains management components for network infrastructure across Sankofa Phoenix sites, including:

• Switches: Configuration management for network switches
• Routers: Router configuration and routing protocol management
• VLANs: VLAN configuration and tracking
• Topology: Network topology discovery and visualization

Components

Switches (switches/)

Switch management tools for:

• VLAN configuration
• Port configuration
• Trunk/LAG setup
• STP configuration
• Port security
• SNMP monitoring

Routers (routers/)

Router management tools for:

• Routing table management
• BGP/OSPF configuration
• Firewall rules
• NAT configuration
• VPN tunnels
• Interface configuration

VLANs (vlans/)

VLAN management for:

• VLAN creation and deletion
• VLAN assignment to ports
• VLAN trunking
• Inter-VLAN routing
• VLAN tracking across sites

Usage

Switch Configuration

# Configure switch VLAN
./switches/configure-vlan.sh \
  --switch switch-01 \
  --vlan 100 \
  --name "Employee-Network" \
  --ports "1-24"

# Configure trunk port
./switches/configure-trunk.sh \
  --switch switch-01 \
  --port 25 \
  --vlans "100,200,300"

Router Configuration

# Configure BGP
./routers/configure-bgp.sh \
  --router router-01 \
  --asn 65001 \
  --neighbor 10.0.0.1 \
  --remote-asn 65000

# Configure OSPF
./routers/configure-ospf.sh \
  --router router-01 \
  --area 0 \
  --network 10.1.0.0/24

VLAN Management

# Create VLAN
./vlans/create-vlan.sh \
  --vlan 100 \
  --name "Employee-Network" \
  --description "Employee network segment"

# Assign VLAN to switch port
./vlans/assign-vlan.sh \
  --switch switch-01 \
  --port 10 \
  --vlan 100

Network Topology

Discovery

# Discover network topology
./discover-topology.sh --site us-east-1

# Export topology
./export-topology.sh --format graphviz --output topology.dot

Visualization

Network topology can be visualized using:

• Graphviz
• D3.js
• React Flow (in Portal)

Integration with Omada

Network management integrates with TP-Link Omada for:

• Unified network policy management
• Centralized VLAN configuration
• Network analytics

See Omada Management for details.

Configuration

Switch Configuration

switches:
  - name: switch-01
    model: TP-Link T1600G
    ip: 10.1.0.1
    vlans:
      - id: 100
        name: Employee-Network
        ports: [1-24]
      - id: 200
        name: Guest-Network
        ports: [25-48]
    trunks:
      - port: 49
        vlans: [100, 200, 300]

Router Configuration

routers:
  - name: router-01
    model: TP-Link ER7206
    ip: 10.1.0.254
    bgp:
      asn: 65001
      neighbors:
        - ip: 10.0.0.1
          asn: 65000
    ospf:
      area: 0
      networks:
        - 10.1.0.0/24
        - 10.2.0.0/24

VLAN Configuration

vlans:
  - id: 100
    name: Employee-Network
    description: Employee network segment
    subnet: 10.1.100.0/24
    gateway: 10.1.100.1
    dhcp: true
    switches:
      - switch-01: [1-24]
      - switch-02: [1-24]
  
  - id: 200
    name: Guest-Network
    description: Guest network segment
    subnet: 10.1.200.0/24
    gateway: 10.1.200.1
    dhcp: true
    isolation: true

Monitoring

Network monitoring includes:

• SNMP monitoring for switches and routers
• Flow monitoring (NetFlow/sFlow)
• Network performance metrics
• Topology change detection

See Monitoring for details.

Security

• Network segmentation via VLANs
• Port security on switches
• Firewall rules on routers
• Network access control
• Regular security audits

Troubleshooting

Common Issues

Switch connectivity:

./switches/test-connectivity.sh --switch switch-01

VLAN issues:

./vlans/diagnose-vlan.sh --vlan 100

Routing problems:

./routers/diagnose-routing.sh --router router-01

Related Documentation

• Omada Management
• System Architecture
• Infrastructure Management