_--___-_
                                    /        \
    vps1.wern128.internal -------- | INTERNET | --- Road Warrior
              \                     \__-__--_/      /
               \                      |            /
                \                     |           /
                 \                    |          /
                  \                   |         /
                   \                  |      WireGuard
                WireGuard             |       /
                     \                |      /
                      \               |     /
                       \              |    /
                        \             |   /
                        Mikrotik hAP ax^2 (r2)
                               ||
                               ||
                           LAG trunk
                               ||
                               ||                                      |Lambda 5Ghz o))
                    TV --- HPE 1920-24G JG924A ===trunk=== GL.iNet Opal |LambdaGuest 2.4/5Ghz o))
                           |                 \                \_backup1.wern128.internal
                           |                  \__
                           |                     fs2.ipa.wern128.internal
                omega.ipa.wern128.internal       hv2.ipa.wern128.internal
                kappa.ipa.wern128.internal       hv3.ipa.wern128.internal
                flatmate devices

172.16.1.0/24 - Network devices without WAN Access
172.16.2.0/24 - Servers
172.16.3.0/24 - Clients
172.16.4.0/24 - Guests
172.17.1.0/24 - Road Warrior with WireGuard
172.17.2.0/24 - Various subnets for P2P connections