From 0b35b6da6e2318a33ef6dcd261beac704ecad63f Mon Sep 17 00:00:00 2001
From: kurogeek <kurogeek@lmvhaus.com>
Date: Fri, 18 Sep 2026 06:19:24 +0000
Subject: [PATCH] router: stellio lan1 (2.5G) as untagged mgmt port

---
 inventories/router.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/inventories/router.nix b/inventories/router.nix
index cc67a3d..a33f3cc 100644
--- a/inventories/router.nix
+++ b/inventories/router.nix
@@ -42,12 +42,12 @@ in
 
       # 2.5G port carries all VLANs tagged (towards a managed switch / AP).
       trunkPorts = [ "lan1" ];
-      # 1G ports: untagged client ports on lan. lan5 is the pre-cutover
-      # staging uplink: DHCP client into the old LAN (routers/white-house),
-      # SSH only, no VLAN membership. At cutover set stagingPort = null and
-      # hand lan5 back as the untagged mgmt recovery port (accessPorts.lan5 =
-      # "mgmt").
+      # lan1 (2.5G): untagged mgmt port for on-site recovery. lan2-lan4 (1G):
+      # untagged client ports on lan. lan5 is the pre-cutover staging uplink:
+      # DHCP client into the old LAN (routers/white-house), SSH only, no VLAN
+      # membership; set stagingPort = null at cutover.
       accessPorts = {
+        lan1 = "mgmt";
         lan2 = "lan";
         lan3 = "lan";
         lan4 = "lan";