1
Environment Overview
Network equipment inventory for the Fairbanks location, based on Vicinity site documentation.
12
Network Devices
6
Wi-Fi Access Points
3
Network Segments
1
Location
2
Network Equipment
Fairbanks, AK (Main Location)
| Device | Type | Model | Location / Role | Status | Notes |
|---|---|---|---|---|---|
| Firewalla Gold Pro | Firewall | 10Gbps security gateway | Network core | Active | Primary security gateway. Sits behind the GCI-owned router. |
| Juniper SRX300 | ISP Router | Juniper SRX300 | Internet handoff | Active | Owned by GCI, the internet provider. |
| Zotac modem | ISP Modem | Zotac | Internet handoff | Active | GCI-provided modem. |
| Cisco Catalyst 2960+ | Switch | WS-C2960+48PST-S, 48-port PoE | Network core | Aging | Over 10 years old. In service with no replacement planned. On our watch list. |
| MFL-AP-Shop | Access Point | Firewalla Access Point 7 | Shop | Active | Wi-Fi coverage |
| MFL-AP-Garage-1 | Access Point | Firewalla Access Point 7 | Garage 1 | Active | Wi-Fi coverage |
| MFL-AP-Garage-2 | Access Point | Firewalla Access Point 7 | Garage 2 | Active | Wi-Fi coverage |
| MFL-AP-Lobby | Access Point | Firewalla Access Point 7 | Lobby | Active | Wi-Fi coverage |
| MFL-AP-Lounge | Access Point | Firewalla Access Point 7 | Lounge | Active | Wi-Fi coverage |
| MFL-AP-Conference | Access Point | Firewalla Access Point 7 | Conference | Active | Wi-Fi coverage |
| APC SMX1500RM2UC | UPS | APC Smart-UPS SMX1500RM2UC | Network rack | Active | Battery backup for the switch, Firewalla, Juniper router and Zotac modem. |
| Xerox VersaLink C405DN | Printer | Xerox VersaLink C405DN MFP | Office | Active | Network multifunction printer. |
3
Segmentation & Remote Access
- Internet: Provided by GCI and delivered through a GCI-owned Juniper SRX300 and Zotac modem.
- Network segments (VLANs): Production, Guest Wi-Fi, and Security Cameras.
- Remote access: None in place. There is no VPN or RDS exposure to the internet.
- Power protection: The network core runs on an APC rack battery backup.
4
Recommendations
- Keep the core switch on the lifecycle watch list. The Cisco Catalyst 2960+ is over 10 years old. It remains in service and we will plan a replacement when the time comes.
- Keep remote access closed unless there is a business need. If remote work becomes a requirement, we recommend a secured VPN solution rather than exposing any service directly.
- Keep VLAN and firewall documentation current. Production, Guest Wi-Fi and Security Cameras segments should stay documented as the network changes.
Open Items
Core switch lifecycle watchOngoing