docs(network): drop SFP-to-RJ45 module from Lite-8 ↔ CRS309 link

The CRS309's GbE RJ45 port is a full switchport that also accepts
802.3at PoE-in, so a single Cat6 from a Lite-8 PoE+ port to the
CRS309 GbE port carries both the 1G trunk and the power. §7.4
already described this; §7.3, the link table, the topology
mermaid, the migration sequence, the PoE budget, and the BoM
contradicted it by assuming a 1G SFP-to-RJ45 module on a CRS309
SFP+ cage (physically impossible to also pass PoE).

Aligned all of the above with the RJ45-to-RJ45 design and removed
the UACC-CM-RJ45-1G line from the shopping list.
This commit is contained in:
Claude 2026-05-23 21:49:13 +00:00
parent 649325e0fb
commit 928de859a4
No known key found for this signature in database

View file

@ -94,7 +94,7 @@ graph TD
MSA2 -->|"10G SFP+ DAC"| CRS["MikroTik CRS309-1G-8S+IN<br/>10G SFP+ core (PoE-in)"]
CRS -->|"10G SFP+ DAC"| UNAS["UNAS Pro"]
CRS -->|"1G SFP-to-RJ45 + PoE-in"| LITE["UB USW Lite 8 PoE<br/>Access + PoE source"]
CRS -->|"1G RJ45 trunk + PoE-in (single Cat6)"| LITE["UB USW Lite 8 PoE<br/>Access + PoE source"]
LITE -->|"PoE+"| AP["UniFi U6-LR AP"]
LITE -->|"PoE+"| RPI["Raspberry Pi 4B<br/>Technitium DNS"]
@ -135,7 +135,7 @@ Notes:
| ONT ↔ MS-A2 (WAN) | 1G / 2.5G | Terminates on an MS-A2 RJ45 NIC; pfSense VM owns the interface (PCIe passthrough) |
| MS-A2 ↔ MikroTik CRS309 | 10G | 10Gtek SFP+ DAC, MS-A2 SFP+ → CRS309 SFP+ |
| MikroTik CRS309 ↔ UniFi NAS Pro | 10G | 10Gtek SFP+ DAC into NAS Pro's native SFP+ port (no module) |
| MikroTik CRS309 ↔ USW-Lite-8-PoE | 1G | 1G SFP-to-RJ45 module on CRS309; same cable also delivers PoE-in to power the CRS309 |
| MikroTik CRS309 ↔ USW-Lite-8-PoE | 1G | Lite-8 PoE+ RJ45 → CRS309 GbE RJ45 (no SFP module); same Cat6 carries the 1G trunk and 802.3at PoE-in |
| Lite-8 ↔ U6-LR | 1G | AP uplink class is 1G, powered via PoE+ |
| Lite-8 ↔ SLZB-06U | 1G | Powered via PoE from the Lite-8 |
| Lite-8 ↔ Wyse 5070 | 1G | Lite-8 port 7 |
@ -180,13 +180,11 @@ Mount these into the relevant Proxmox VMs. Update `DOCKERSTORAGEDIR` / `DOCKERCO
- Same-VLAN traffic stays switched at L2 on the CRS309 and avoids the pfSense routing path entirely.
- Cross-VLAN bulk transfer hairpins through the pfSense VM and is constrained by VM CPU + any inspection rules.
### 7.3 MikroTik CRS309 is SFP+ only — module choices and thermal
- CRS309-1G-8S+IN has 8× SFP+ cages and 1× GbE RJ45 (management + PoE-in). No 10G RJ45 ports.
- For the Lite-8 uplink use a **1G SFP-to-RJ45 module**, not a 10G copper module.
- The Lite-8 is 1G — a 10G copper module negotiates at 1G anyway (no benefit on this link).
- 10GBASE-T copper SFP+ modules dissipate ~2-2.5W idle and 4-5W under load. The CRS309 is fanless aluminium and MikroTik explicitly warns about 10GBASE-T thermal load.
- A 1G SFP-to-RJ45 module is well under 1W and runs cool.
- If a future access switch with native SFP+ replaces the Lite-8, swap the module then.
### 7.3 MikroTik CRS309 port layout and SFP+ thermal
- CRS309-1G-8S+IN has 8× SFP+ cages and 1× GbE RJ45 (full switchport, also accepts PoE-in). No 10G RJ45 ports.
- The Lite-8 uplink lands on the CRS309's GbE RJ45 port directly (Cat6 RJ45-to-RJ45) — same port also receives PoE-in (see §7.4). **No SFP-to-RJ45 module is used or needed for this build.**
- Thermal note for any future SFP+ copper module: 10GBASE-T copper SFP+ modules dissipate ~2-2.5W idle and 4-5W under load. The CRS309 is fanless aluminium and MikroTik explicitly warns about 10GBASE-T thermal load — relevant if §11.2's "mGig copper module" path is ever taken.
- If a future access switch with native SFP+ replaces the Lite-8, move the uplink to an SFP+ cage and free the GbE port for management/PoE-in only.
### 7.4 Power the CRS309 via PoE-in from the Lite-8 (no DC PSU)
- CRS309 accepts 18-57V PoE-in on its GbE RJ45 — the same port used as the Lite-8 uplink.
@ -200,7 +198,7 @@ USW-Lite-8-PoE has **4× PoE+ (802.3at) ports with a 52 W total PoE budget**. Po
|---|---:|---|
| UniFi U6-LR AP | ~12.95 W | 802.3af class |
| Raspberry Pi 4B + PoE HAT | ~5-7 W | Typical / peak |
| MikroTik CRS309-1G-8S+IN | ~10-12 W | Includes 2× SFP+ DAC + 1× SFP-RJ45 1G module populated |
| MikroTik CRS309-1G-8S+IN | ~9-11 W | 2× SFP+ DAC populated; GbE RJ45 used as Lite-8 uplink + PoE-in |
| SMLIGHT SLZB-06U | ~2-3 W | 802.3af class |
| **Total** | **~30-35 W** | Of 52 W budget |
@ -264,7 +262,7 @@ Optional use for the 3rd DAC: a second MS-A2 ↔ CRS309 link as **LACP** for red
2. Validate WAN cutover from Netgate 1100 to MS-A2 pfSense VM during a maintenance window. Leave Netgate cabled but unplugged for fast rollback.
3. Rack the MikroTik CRS309. Power it via PoE-in from a Lite-8 PoE+ port (single Cat6 carries trunk + power).
4. Bring up the 10G DAC between MS-A2 and CRS309. Verify 10G full duplex on both ends.
5. Migrate the Lite-8 uplink onto the CRS309 (1G SFP-RJ45 module). Confirm VLANs and AP/Pi adoption still work.
5. Migrate the Lite-8 uplink onto the CRS309's GbE RJ45 port (same Cat6 that powers it via PoE-in). Confirm VLANs and AP/Pi adoption still work.
6. Rack the UniFi NAS Pro 2U. Connect the second 10G DAC to the CRS309. Validate 10G link.
7. Install UniFi Network Application on the NAS Pro. Adopt the Lite-8 and U6-LR.
8. Provision UNAS Pro NFS shares (`media`, `downloads`, `appdata-backups`).
@ -460,10 +458,9 @@ Core subtotal: **TBD**
| Item | Qty | Unit Price (incl. VAT) | Subtotal | Buy link |
|---|---:|---:|---:|---|
| 10Gtek SFP+ Passive DAC, 1m (`XDACBL1M`-compatible) | 3 | Already owned | — | — |
| Ubiquiti SFP to RJ45 1G (`UACC-CM-RJ45-1G`) — for Lite-8 uplink | 1 | R404 | R404 | [GeeWiz](https://www.geewiz.co.za/new-items/481072-ubiquiti-125g-sfp-to-rj45-gigabit-ethernet-module-uacc-cm-rj45-1g.html) |
| Cat6 patch lead (PoE-in + uplink to CRS309) | 1 | Already owned / negligible | — | — |
| Cat6 patch lead (PoE-in + 1G uplink, Lite-8 PoE+ → CRS309 GbE) | 1 | Already owned / negligible | — | — |
Accessories subtotal: **R404** (DACs already in hand)
Accessories subtotal: **R0** (DACs and Cat6 patch already in hand; no SFP-to-RJ45 module required — Lite-8 ↔ CRS309 is RJ45-to-RJ45)
### 13.3 Estimated total
**Grand total (incl. VAT): TBD** — fill in once MS-A2, CRS309, and UNAS-Pro quotes are confirmed.