Chris Johnson

chaotic mess of network cables all tangled together

You Get What You Pay For

My first fiber switch turned out to be a L3 managed “switch”. Way cool. But I purchased a cheap switch and found that it completely undocumented.

It has taken me a while to figure things out.

The configuration GUI is an What You See Is All You Get type. There is enough there that you can get the switch up and running, but not enough to fully configure the L3 Switch.

To accomplish that, you need to use the CLI. Not a problem, I like CLI’s.

Of course, there is no documentation but for tab completion and very limited help screens.

I get it mostly working.

After playing with the Free Range Routing Suite (FRR) for a while and getting OSPF working on all of my hosts and the primary router, I was feeling pretty confident.

It seems that FRR took their configuration model almost directly from Cisco’s CLI. The number of times I used a Cisco help page to determine how to configure an OSPF setting is remarkable.

The new L3 switch turns out to have a Cisco like configuration language. And what isn’t Cisco like, is FRR like. Neither Cisco nor FRR, but close.

Today I had a tremendous success, I moved a ceph host from the physical network to the OVN network.

This included moving that segment of the network to a new subnet. And everything sort of worked.

The issue turned out to be a routing issue.

The correct answer is to turn on OSPF within the new physical router. It does support it, after all.

Having played with the damn thing for a few hours, breaking my network multiple times, I was about to give up when I happened to notice a strange value for a setting.

That setting? MTU, of course.

Even though every interface shows an MTU of 9000. Even though jumbo frames are turned on and using a 9000 byte frame.

Even though an MTU of 9000 is very much supported, the MTU of the “VLAN” was set to 1500.

Now, Cisco VLANs are not the same as a tagged VLAN. A tagged VLAN acts like a separate physical network. They are where you place interface settings. These VLANs can then be assigned to a physical port.

The physical port’s MTU overrides the VLAN MTU. This means my jumbo packets from host to host work.

The problem is that the VLAN MTU is maxed out at 2000 bytes. This seems to only affect the OSPF traffic and not the physical interface. But I’m dead in the water or I need to figure out how to do this differently.

Still, I didn’t pay an arm plus a leg for this physical router. I’ll get it to work.

Daniel Penny Is Abused By NYC, Again

In general, people are idiots. In groups, they have a combined IQ of less than 70 and the common sense of a three year old.

Daniel Penny is a US Marine who stepped up and protected the people on the subway. He held a homeless, violent, man until the man could be arrested.

He was then interrogated for hours without a lawyer because the police interrogating him established a relationship, by being an ex-marine.

It is often said that there is no such thing as an ex-marine or a former marine. You are a marine for life. There are exceptions, the cop who interrogated Daniel Penny is an ex-marine.

Having charged and arrested this hero, they are now trying to screw him over, yet again.

Prosecutors have wide latitude in what they charge. One of the standard tricks is to bring multiple charges for the same crime, over charging at least one.

Humans like to think they are being fair and reasonable. One of the oldest and most famous instances of this is when a man was taken before a Roman Governor to be “sentenced” for claiming to be a king above Caesar.

The Governor refused to kill the man, instead sentencing him to be whipped. Even though I’ve found nothing wrong with him, he still had the man flogged. When the mob insisted he be put to death, the Governor replied, I told you — he’s not guilty! I find no reason to condemn him..

The complete tale can be found in John 19:1-25.

In other words, to appease people, an innocent man was flogged.

Prosecutors overcharge in expectations that the jury will often find the accused not guilty of the most serious charge, but to appease the prosecutor, will find the accused guilty of the lesser charge.

They can go home, secure in the knowledge that they didn’t sentence a man to 20-life but only 5 to 10. (made up numbers).

Not really internalizing that 5 to 10 is still too much for an innocent person.

The Jury deadlocked. Some members of the jury found that Daniel was not guilty of second-degree manslaughter, some insisting that he was. When they reported a deadlock, the judge charged them to work harder.

The prosecutor then did Daniel a dirty. He requested that the second-degree manslaughter charge be dismissed.

Why is this dirty pool?

If the Judge accepts the motion to dismiss the second-degree manslaughter charge, then the deadlock goes away. If the deadlock goes away, then the jury will have to deliberate over the second charge of criminally negligent homicide.

Human nature will make it easier for the jury to return a guilty verdict on the lessor charge.

The judge should have declared a mistrial. Instead, he accepted the motion to dismiss. He released the jury until Monday.

On Monday, they will start deliberation on the second charge.

I hope that they deadlock on the second charge as well.

Hospital Doctor Using Spreadsheet For Billing Codes On Desktop

Healthcare

One of the ways the left “wins” arguments is by changing the meaning of the words they use.

When I use a word, it means just what I choose it to mean — neither more nor less.
— Humpty Dumpty

So, what is healthcare?

Healthcare is anything that is caring for your health. That is the skills of a doctor or health professional. The medications you might take for high blood pressure or pain. It is setting a bone or removing a tumor.

Healthcare is about your mental and physical health. Everything from a band-aid to a heart transplant, and everything in between, is health care.

What is access to healthcare?

This is about your ability to get healthcare.

If you are in a vehicle accident, they pick you up, carry you to the hospital, and take care of your injuries. That is access to healthcare.

You are having trouble breathing, walk into the emergency room, they put you on a nebulizer, admit you, and take care of you until you can walk out the door. That is access to healthcare.

You cut your toenail too short, and it becomes an ingrown toenail, badly infected. You walk into the urgent care, and they take half your toenail off and write you a prescription for an anti-biotic. That is access to healthcare.

You think you have a sinus infection, you call your doctor’s office. They schedule you to see your doctor or another later that day. That is access to health care.

Your doctor thinks a skin growth might be cancerous. He refers you to the dermatologist, two weeks later, you are seen, and a biopsy is taken, tested, the results are back to you and your doctor 15 days after first being seen by your doctor.

Being able to get a doctor is part of access to healthcare. So is the ability to get medical tests done in a timely fashion.

In Montreal, CA in 2021, it took 862 days, on average, before you were assigned a family doctor.

As of 2042, on Friday, most of the hospitals emergency rooms in Montreal are over capacity. Most of the over capacity hospitals have had patients on stretchers for over 24 hours, some for over 48 hours. They don’t even bother to give wait times.

A different website gives wait times ranging from just over an hour to more than 6 hours.

The website I found with wait times for US hospitals shows about the same for Boston hospitals. But, a data point that I have is that my local hospital has a listed wait time of 2.2 hours. My personal experience at that hospital is that wait times are generally much less than that. You are normally seen by a triage nurse within a few minutes of arriving.

You can have good healthcare, good access to healthcare, or some mixture of the two.

In the United States, no person can be turned away from an ER because of their ability to pay.

Paying for Healthcare

Paying for healthcare is where things start to get very complex. When a friend came down to visit from Canada, she was horrified with how medical payments were done, here in the states. On the other hand, when she got sick, she was seen by a doctor within 15 minutes of arriving at an urgent care facility. She left with antibiotics, in hand. She had paid in full for her medical service, around $100.

She agreed that her access to healthcare, in the states, was better than it was in Canada. She felt that the quality of her healthcare was better in the states, and she was surprised at how little it cost.

The first issue with healthcare, is that you have no ability to shop for services. Until recently, with the creation of boutique medial services, you didn’t know how much accessing your doctor was going to cost.

I had a slow leak in the rim/wheel of the truck. Not an issue, every other week I gave it another shot of air.

It finally decided to become a fast leak. I called my guy, asked how much to move the current tire to a new rim. He told me. I ordered a new wheel, took it and the truck to him.

At the end of the morning, my truck had a new rim and the cost was within $5 of what he quoted me. The difference being a choice to replace the valve stem.

I came out of my doctor’s office, asked what the cost was. Paid in full. Then three weeks later, gotten a bill for more because they hadn’t coded the office visit correctly. They ate that extra after I made complaints to the administration.

If we agree I have paid, in full, then they don’t get to change the bill later.

Regardless, there is no real way to find out the prices of different procedures, ahead of time.

The next issue with healthcare costs is that the person paying for the procedures/visits is not the person who is getting the procedure. There is no reason for you to shop around when somebody else is going to pay. You will always choose the best quality you can find.

So what about payments?

You can pay at the point of service, or you can pre-pay.

“Point of service” is paying when the service is performed. If you go in to have your car serviced, you are expected to pay for that service before you leave. That is payment at the point of service.

The few times when some vendor or service person has said, “I know you, you’re good for it, come back tomorrow and pay.” has been so few and far between, it sticks in my mind.

My barber only takes cash, no cards. I didn’t know that when I sat down. It got done, found out that I didn’t have enough cash, left my lady as collateral, went and got more cash. I got my lady out of hock and called it a day.

Most healthcare is billed out after service, but is still considered payment at the point of service.

Pre-payment for medical services is when you pay something now for services you might need later.

In America, that is done with insurance. You purchase insurance to cover your healthcare costs.

Originally, health insurance was designed to cover unusual health events. You broke your leg, insurance covered it. You required your appendix removed, insurance covered it. You require a hip replacement, insurance covered it.

If you require an annual physical, insurance doesn’t cover it. Most of the maintenance costs of healthcare were paid out of pocket, not with insurance.

The government broke this model.

The benefits your employer gives you are part of your total compensation package. Only some of those benefits are taxable. One of the things that is not taxed, is your healthcare costs. Nor the amount your employer pays towards your healthcare insurance.

Consider the following, you are offered $50,000/year. You pay $13,000 in health insurance per year. That leaves $37,000. The government takes 30% of that, leaving you $25,900.

A different firm offers you $45,000 per year with matching insurance payments. This means that you will be paying $6,500 in insurance and the company will pay $6,500 for a total of $13,000. Your taxable income is $38,500. The government still takes 30%, leaving you with $26,950.

By taking a lower salary $5000 less, you get to take home just over a $1000 more. Not bad.

These tax games actually changed the face of medical insurance. For healthy, young people, this equation wasn’t as persuasive. So “insurance” started to cover healthcare maintenance. This drastically increased the cost of insurance.

Whereas, before, the insurance company could play the odds, taking money from everybody, knowing they would only have to pay a few, the new model required them to collect money and pay money for everybody.

A healthy 25-year-old didn’t cost the insurance company anything, on average. But now that maintenance is included, even the 25-year-old costs money. All of that had to be paid for.

The other place where the government interferes with insurance pricing, is in boundary limits.

There are places in this country where the side of the street you live on changes the cost of your medical insurance.

While you might think you have “Blue Cross/Blue Shield” insurance, I can promise you that you do not.

If you look at your insurance card, you will find that you have “Blue Cross/Blue Shield of STATE”. This is because medical insurance companies can only offer medical insurance in their state.

This means that there are 50 different Blue Cross/Blue shield insurance companies. Are they inter related? Yes. It is a legal fiction that keeps them separate.

In addition to the visible insurance costs, there are other hidden insurance costs. The federal government of the US takes a part of your income and uses it to fund Medicare and Medicaid.

When people talk about “free healthcare” in the UK or Canada, they are lying. There is no free healthcare in any country.

It is free at the point of service. The citizens of those countries pay for their healthcare via taxes.

The NHS of the UK spent $231.6 Billion on health services in the 2022/2023 budget year. This is out of a budget of $1,551 Billion. The NHS budget was 15% of the total budget.

This puts the price, per person, at about $3,400, or $13,600 per family of 4. Just about the same as the pre-Obamacare cost for family insurance in the United States.

The point is that healthcare in the UK is NOT free.

What they mean by “healthcare”

The left conflates healthcare with paying for healthcare. In the process, we have created a situation where healthcare costs more for most people. Access to healthcare has gone down. And the quality of healthcare seems to be slipping.

But, the left yells that more people have access to healthcare than ever before.

They didn’t really get more access, they just changed how much they pay for healthcare and who pays for healthcare.

I’m reminded of a show I watched a few years ago.

In the show, the couple set out to find out if they could live as a couple at menial labor.

He got a job, but I do not believe she did. His job did not have healthcare benefits. He was working at nearly minimum wage.

She was prone to getting UTIs. About 6 months into this experiment, she came down with what she knew was a UTI.

So they went to the ER to get treated. They ended up with a bill in the thousands.

They held this up as a reason people can’t live on such low wages.

They cheated for their story. First, she could have gotten a job. If they were as good as he said they were, they should have been able to work their way out of that starting wage/position. They didn’t.

Second, the cost of an ER visit is pretty high. The cost of an urgent care visit is much lower. My last urgent care visit included minor surgery. My total cost, before insurance, was less than $200.

The cost of diagnosing a UTI and prescribing an antibiotic is around $100. There are telehealth options available today that are even cheaper.

By making a shitty decision, they cost themselves over $1500 in medical bills, which could have been less than $125.

Conclusion

Make sure you hold them to using the right terms. Don’t let them redefine words to confuse and conflate the different issues at play.

wifi, data, signal

The Network Fails, Silently

In the shadowed depths of night, where silence reigns,
A network, once vibrant, now fades in gloom,
Its circuits, dead, like spectral, ghostly chains,
No longer does it herald or consume.

Oh, how the whispers of the web did cease,
The humming ceased, the lights went dark, then cold,
In digital demise, there found no peace,
But tales of loss and legends yet untold.

The servers, once alive with fervent quest,
Now rest in mute, an eerie, silent crypt,
Where bytes and bits, in deathly dirge, do rest,
And all connection to the world is stripped.

Thus, in this void, where once the data flowed,
The network fails, and in its death, is silent.

— Grok 2

chaotic mess of network cables all tangled together

Maximum Transmission Unit (MTU)

In 1983, CCITT and ISO merged their network definition to create The Basic Reference Model for Open Systems Interconnection.

This is the “famous” seven layer model. Which works for ISO standards but is a poor match for the Internet.

The three layers we are interested in are:

  1. Physical layer
  2. Data link layer
  3. Network layer

1 Physical Layer

The physical layer defines the electrical, mechanical, and procedural interface to the transmission medium. WTF?

Ok, let’s look at this in terms of some real examples. If you have a computer that is more than a few years old, it will have a network connection in it or a port that a network connection can be attached to.

The most common mechanical connection, the socket and connector, is the RJ-45. This is the thing that looks like a big telephone connector. Oh yeah, many of the youngsters don’t remember every plugging a phone into the wall.

This connector consists of 8 connectors. The location and form of these connectors defines part of the mechanical system.

The other part is that those 8 connectors are attached to four pairs of wires. The pairs of wire are twisted and bundled into a single cable. Each of the 8 wires are numbered, and the mechanical definition of the RJ-45 defines which wires are attached to which connector, at both ends.

When I say “numbered”, the physical reality is that the wires are color coded.

The electrical definition defines which wires are used for transmitting and which are used for receiving. It defines if the signals are ground referenced or differences between two wires.

Everything about how to connect the physical devices and how to transmit a signal are specified at Layer 1, the physical layer.

2 Data Link Layer

This layer defines how data is transmitted over the L1 physical network. It defines what how to use the physical layer.

For example, Frame Relay is a data link protocol for connecting distant devices. Each Protocol Data Unit (PDU), consists of a flag field, an address field, an information field, and a frame check sequence, or checksum field.

The information field contains the actual data (information) that is being transmitted.

The Frame Relay standard states that the information field must be at least 262 octets (bytes) and recommends that it support at least 1600 octets.

It is important to note that a length of 262 cannot be (easily) expressed in a single byte. This means that the length field must be at least 2 bytes wide.

While Frame Relay is still in use, today, it is not as common as it used to be. There are better options.

A much more common L2 protocol is Ethernet. This is called a Frame. The Frame consists of a preamble, start frame delimiter, destination address, src address, tag (or zeros), type or length, payload, CRC and a gap.

As originally defined, an Ethernet packet had a maximum length of 1500 octets.

Packet Size

In networking, we talk about sending a packet. A packet is a more generic term for “frame”. We have packets at the data link layer and at the network layer.

Every packet contains enough information to identify the source and destination of the packet, the length of the packet, and the payload. There will often be a header to identify more about the type of the packet.

As a packet moves through a network, it might be “fragmented” as it passes through a network segment which has an MTU smaller than the packet size.

There must be enough information to reconstruct the packet, even when the packet has become fragmented.

Fragmenting is something we want to avoid, if possible.

To that end, a part of the connection process is to discover the MTU for each device.

Consider a simple network segment. A network segment is a piece of the network that is connected at L2.

We have devices A and B. Device A is using a fiber physical layer and device B is using a copper physical layer. B is attached to switch 2, switch 2 is connected to switch 1, and switch 1 is connected to device A.

If all four devices are using old style Ethernet frames, then the MTU will default to 1500. A simple database backup is 3.3 GB. This means we will have to transmit at least 2,305,845 packets.

This requires each device to handle 2.3 million interrupts.

On the other hand, if we were to use jumbo packets, then we reduce this to around 384,307 packets. This is a huge savings in load on the network segment.

The two switches, as L2 devices, are going to either be store and forward switches, or simple hubs. Nobody uses hubs anymore. So they must be switches.

Each switch receives the packet, storing it, then transmits that packet on a different port.

The switch must be able to store the complete packet/frame. If it can not, it will drop the packet.

When designing your network, you want to make sure that all the switches on the network support the largest MTU you might be using.

Devices A and B will discover what their MTUs are. The smaller will rule. The switches, on the other hand, are transparent. They do not get a say in the MTU discovery.

What this means, is that you can have devices on the network that respond to simple testing, such as sending pings, but which fail for larger packets.

Conclusion of Rant

I accidentally purchased a switch (L2) when I was intending to purchase a router (L3).

This should not have been an issue. I intended to use some switches, regardless.

The specifications look good. MTU is documented as 12000.

I plug everything together and start testing. My first network test is always “ping”. If ping isn’t working, nothing else will work well enough.

That worked perfectly.

Then I attempted to login to the remote site using SSH. This silently failed, before timing out with destination unreachable.

Ping works, SSH doesn’t?

This makes no sense.

Until I found it. SSH does a key exchange with my RSA public key. The key size is 1679 bytes. This is larger than the supported MTU of switch 2 at 1500.

The network fails, silently.

So I have email out to the manufacturer, hoping for a positive response.

Convicted Felon

I wish this were easy. It isn’t.

At issue is the number of people claiming that Donald Trump is a convicted felon.

Like most things legal, the answer is never simple. The reason is that many laws have internal definitions that do not match the definitions in other parts of the law. And there is the use of the common vernacular.

First, the common vernacular, and the language used by the court, is that a person is convicted when they have been adjudicated guilty. This is when the jury returns a guilty verdict or a judge, in a bench trial, finds a person guilty. This also applies to certain pleadings of the defendant, such as a pleading of guilty or nolo contendere plea.

By this definition, Hunter Biden and Donald Trump are both convicted felons.

Second, in some places in the U.S.C., they define “convicted” to mean when found guilty, when sentenced, or both. 41 USC § 8101(a)(3) uses this definition. Chapter 81 of 41 USC is the chapter on a drug-free workplace.

In other words, the definition of convicted, when talking about a drug-free workplace, uses the “when found guilty”.

The Kicker

The Criminal Resource Manual (CRM) has the following:

For fugitives who have been convicted and either escaped or otherwise failed to complete their sentences, extradition treaties dispense with the requirement of establishing the crime through affidavits. Instead, the treaties require proof of conviction. In United States practice, conviction means a finding of guilt (i.e., a jury verdict or finding of fact by the judge) and imposition of sentence. If the defendant fled after the verdict but before sentencing, he or she has not been convicted, and the prosecutor must supply the affidavits described in this Manual at 608, unless the treaty specifically equates conviction with a finding of guilt.

The conviction may be proved by a certified copy of the Judgment and Commitment Order or the equivalent state form. Proof that the fugitive is unlawfully at large may take the form of an affidavit from the warden of the institution from which the fugitive escaped, or from the marshal if the fugitive failed to surrender after sentencing. The time remaining to be served (not counting reductions for good behavior) must be stated.
Justice Manual | 609. Evidence Of Conviction | United States Department of Justice, (last visited Dec. 4, 2024)

So what does this mean?

In my NON-lawyer opinion? Donald Trump is a convicted felon who is seeking reversal on appeal. Until he is sentenced, he is not convicted per international law.

In addition, the judgement is currently stayed, pending the outcome of the appeal.

Hunter Biden is a convicted felon who has been pardoned.

Photo of horrified worried person hands fingers touch cheeks grin teeth empty space isolated on blue color background.

Let’s talk about it…

When I was a small kid, I would get in fights with the neighbor kid across the street from me. The parents were cool about it, but were unhappy with the bare knuckle part of the fighting. So, we were issued boxing gloves and went at it with all the grace of two gangly 3rd graders.

Plenty of swings, plenty of hits, but no real damage. Jimbo won all but one of those fights.

After every lose, I would think about what had happened and vowed to get better. Only to be beat in our next confrontation.

It was soul crushing. At the same time, I was dealing with a bully who would chase me home after school, every day.

After each battle, as I lay on the ground, crying, humiliated, he would taunt me.

The last time we fought, I won. I had learned enough to actually beat him. When he was about to go down, I went at him even harder.

He went down, and I took a step back, started to taunt him.

His brothers and sister immediately stepped in to cool things off. It was about sportsmanship. Being the better man. Doing the honorable thing.

As a 3rd grader, it was difficult, but I did manage it.

That was our last fight. He was no longer interested in fighting, preferring to talk about it instead.

President Obama listened to Republican gripes about his stimulus package during a meeting with congressional leaders Friday morning – but he also left no doubt about who’s in charge of these negotiations. “I won,” Obama noted matter-of-factly, according to sources familiar with the conversation.
Justice Manual | 609. Evidence Of Conviction | United States Department of Justice, (last visited Dec. 4, 2024)

When the Democrats lost control of the congress, Obama was famously quoted as saying, “I have a pen and a phone.” Telling the world that he was going to use executive powers to do what congress had not authorized him to do, sort of like a dictator.

From the moment that Trump was declared the victor of the 2024 election, there have been two loud groups of Democrats and leftists.

The first is calling me stupid because of how I voted, cutting their hair to spite Trump voters (huh? I don’t get it), wishing that the economy will crash, and in general exhibiting all the standard symptoms of TDS.

The other group is making speeches, telling me that we have to remember the other half of the country, that we have to work to end the divide between us, to allow the losers a place at the table.

In other words, don’t do to them what they do to us, every time.

Ally was very upset that Merrick Garland wasn’t given a chance to testify before the Senate Judicial committee, to find out if he was a good person for the Supreme Court.

I pointed out that the best that Merrick could be was worse than anybody a Republican would nominate. She is still upset that he didn’t get a full hearing.

There is no reason for the Trump administration to put wolves in with the flock. There is no reason for him to trust the olive branch that is handed to him. There is no reason to try to temper the response that is coming.

Here’s the thing, it is time for a scorched earth response. It is a time to clean out the rat’s nest that is the unelected bureaucracy of the Federal Government.

I’m looking forward to hearing about the RIFs that are going to happen. I’m looking forward to higher ups that are not fired, but offered positions in Nome, Alaska. I’ve been offered that choice, I could find a position elsewhere in the company, in the next six weeks, or I could resign.

It is not fun. It happens to many people.

I’m also looking forward to true investigations of the criminal activities against The People, against Trump, and against my country.

I don’t remember what the statute of limitations is on mishandling classified materials, but if it is long enough, Mrs Clinton should be charged. She was investigated, the acting director of the FBI determined that she wasn’t guilty because her purpose was pure.

Nobody else with a security clearance would get that pass.

Or the serial leaker.

Or the people who refused to show up for congressional subpoenas. I have a strong feeling that the Democrat party is going to have a tough few years.

Cybersecurity IT engineers are working on protecting networks from cyber attacks from hackers on the Internet. Secure access to online privacy and personal data protection

There is a reason…

The problem that people have been attempting to solve, for years, is the lack of space in the IPv4 addresses space.

There are currently more devices attached to the Internet or “the network” than there are addresses in the IPv4 space. This requires address overlap.

The smallest section of a network is the “subnet”. A subnet can hold anywhere from 2 to over a million devices.

Consider a small business network. They have three networks, a network that is connected to the Internet, labeled DMZ, a network for the security cameras, labeled CCTV, and the working network, labeled Internal.

They have a router between the Internal network and the DMZ. There is another router that takes traffic from the DMZ and transfers it to the Internet.

The CCTV network does not need to ever touch the DMZ network, nor does it really need to touch the Internal network. So they run a completely separate physical network so that CCTV traffic is never available on the Internal or DMZ networks.

This could become costly. Consider a situation where you need to connect multiple buildings. Maybe some of those buildings can be connected with fiber, but others are using radio links. Radio links are expensive.

The traffic is low enough that there is no justification for a second radio link. Besides, it is difficult to run two radio links side-by-side.

The solution that was implemented is the Virtual LAN, or VLAN.

When you define a VLAN, you set a tag in the Ethernet frame, identifying which VLAN this frame belongs to. Now, we can put all the CCTV traffic on a VLAN and use the same physical network as we use for the Internal network. All is good.

This isn’t a complete solution, it is possible to configure a network card to listen to a particular VLAN, even if that device isn’t supposed to be on the VLAN. It is also another configuration point which smaller devices might not support.

As an example, I’ve never found a method to put my cell phone on a particular VLAN. It is likely possible, I’ve just never found it.

Same with my CCTV cameras. They exist only on the default, untagged, network.

One of the very nice parts of using a VLAN, is that you can have overlapping address space. I can have 192.168.88.0/24 on the physical network and 192.168.89.0/22 on the same physical network but with a VLAN tag of 87. They are overlapping address spaces, but they do not interfere with each other.

The solution was to allow a L2 switch port to be tagged. Now, by device which only uses the untagged frame can be plugged into a tagged port. All traffic coming from that port will have a VLAN tag added to it. All traffic sent to that port will have the VLAN tag stripped from it.

This means that a CCTV device sends and receives on the default (no tag) network. It reaches the switch and the packet is now on a VLAN. Another device on the Internal network is also on the same VLAN. That device, a monitoring station, can now see the CCTV footage.

If a port receives a frame that is tagged, it drops the frame. This keeps VLANs from leaking from their approved segment.

If there is a need for a port to accept multiple VLANs, it is configured as a trunk.

Thursday, I attempted to move ceph to an OVN network. This would eliminate the need for a VLAN and would give me a single subnet across multiple physical subnets. It failed.

Friday, I attempted to put a new L2 switch into place. The good news was that I didn’t need to break my entire network to do the testing.

The test computer has two NIC’s. One is connected to the management physical network. The other to the back plane network. I was able to establish a connection to the management port.

Once there, I could establish that I had full bandwidth to other nodes on the physical network, using the physical subnet. I could even reach multiple subnets using that same interface.

Then I tried the VLAN. The VLAN failed. There was no network traffic passing through.

It also looks like they do not have a large enough MTU.

Conclusion

I’m still black boxing this thing. It has been a painful trip. I have more than a few more tests to run. It is just overly painful trying to get there.

Cheering For the Loss

I did not want Jimmy Carter to win. Neither did my parents. When he was elected, we were willing to cheer for him to succeed.

He didn’t. As much as Biden and Clinton messed up this country, no single President comes close to Jimmy. Most of the mess in the Middle East can be laid directly on him.

When Clinton was elected, I was unhappy. He did not strike me as a good person for the job. Still, I cheered for my country. I wished him success in bringing good things to our country.

It turns out that Bill is a morally bankrupt person. The rumors of people taking the “w” key from all the keyboards in the White House? My boss at the time was responsible for replacing all the vandalized keyboards.

I was extremely disappointed when Biden won the election. Because numbers are a gigantic part of my life, I looked at the numbers and knew that these were questionable numbers. Not that they were proof of cheating, but that they were indications that the event should be audited.

No court heard any of the Trump challenges on the merits.

Larry Correia wrote a great article regarding how auditors find fraud, —Justice Manual | 609. Evidence Of Conviction | United States Department of Justice, (last visited Dec. 4, 2024).

My issue was how it felt like “they” were out to punish “us” for speaking up.

Still, I hoped that we would make it through 4 years of Joe without too much damage. We are still here.

They Want Us to Fail

An article caught my attention, A Trump judge blocked overtime pay for 4 million workers in TEXAS….

Having been reading and following court cases, I was interested in what was going on.

First, Trump appointed the judge. That doesn’t mean the judge was wrong, nor does it mean that the judge acted in a biased way. But they had to hang this on Trump, so “Trump judge”.

To anyone in Texas that voted Blue and is affected. I am so sorry… To anyone in Texas that voted Red and is affected… Fuck you, you got what you voted for…

I’m on salary… but I wanted yall to have it. But folks voted for this.

Trump voters are about to find out the hard way and I will laugh the entire 4 yrs as their broke ass’s get on interviews begging for help!

The actual ruling? Judge blocks Biden administration’s rule to expand overtime pay for millions

Sounds to me like it was a judge following the law.

Conclusion

They want the economy to tank. They want everybody to be hurting more than we are now.
They want it out of spite. They are evil and like most evil people, think they are on the side of good.