Phase 1 Plan — Core Infrastructure

Goal

Deploy the minimum infrastructure required to operate the first version of the GNTECH corporate lab.

Scope

Phase 1 includes:

• Proxmox network preparation
• HQ-FW01 OPNsense firewall
• Initial VLAN gateways
• HQ-DC01 Windows Server 2025
• Active Directory Domain Services
• DNS
• DHCP
• HQ-MGMT01 management workstation
• HQ-W11-001 domain client
• Domain join validation

Phase 1 VMs

VM	Role	OS	VLAN	IP
HQ-FW01	Firewall / Router	OPNsense	WAN/LAN	WAN DHCP, VLAN gateways
HQ-DC01	Domain Controller, DNS, DHCP	Windows Server 2025	Servers	172.20.20.10
HQ-MGMT01	Admin workstation	Windows 11 Enterprise	Management	172.20.10.20
HQ-W11-001	Test workstation	Windows 11 Enterprise	Workstations	DHCP

Completion criteria

Phase 1 is complete when:

• corp.gntech.lab exists.
• HQ-DC01 is a healthy domain controller.
• HQ-W11-001 joins the domain.
• DNS and DHCP work.
• Basic firewall segmentation is active.
• The infrastructure inventory is updated.