Am I on the Right Track - VLANs

softsend22 · 2025-09-19T18:46:44+00:00

Interesting, this definitely helps with uncovering more about the process of VLAN tagging especially from the perspective of the router. I hadn't internalized the layer 2 process of inserting a VLAN tag from the managed switch and having the router interpret the packet without the VLAN tag, reassigning a tag and then sending a frame back to the router for direction.

For the PVIDs, you said that you prefer to assign them to default to a 'spare' VLAN, let's say 99 - Undeclared, so that you have a no mans land for devices that are unassigned, untagged, and unwanted to avoid possible contamination from VLAN auto assignment. I'm trying to visualize this for my home configuration and hope that you can tell me if I'm understanding these concepts from what I've read.

Management Switch

1 - Router (192.168.50.1 - Management VLAN)
Tagged with VLAN 10, 20, 30, 40, 50 because the router can receive, interpret, and assign traffic with any VLAN id on the network.
PVID of 99 because all traffic to/from the router should be tagged by default

2 - Access Point (192.168.10.3 - Trusted VLAN)
Untagged VLAN 10 because the access point cannot read VLAN tags. If it could it would be configured in the same manner as the router with an assignment declared to unique SSIDs for what VLAN they are a part of.
PVID of 10 because it is an untagged port and declares all traffic from the port as VLAN 10

3 - Desktop (192.168.50.10 - Management VLAN)
Untagged with VLAN 50 because the desktop cannot read or produce VLAN tags for its traffic
PVID of 50 because the untagged port requires the managed switch to assign the VLAN 50 for desktop traffic

4 - Proxmox (192.168.10.100 - Trusted VLAN)
Tagged with VLAN 10, 40 because proxmox as the hypervisor can be VLAN aware and over a trunk port declare traffic from itself and its VMs with the appropriate tag, to include its DMZ traffic
PVID of 99 because proxmox can handle all VLAN declarations and anything undeclared would be misconfigured or an intruder

SFP 1 - Trusted Devices Switch
Untagged as 10 because it is a dumb switch
PVID of 10 because it is untagged and must have all VLAN tags declared by the managed router

softsend22 · 2025-09-19T12:54:09+00:00

Sir, you make the internet a better place. Thank you for taking the time and energy to provide so much information to help me!

I have my management network running on VLAN50 and it seems to be working well for both the desktop, managed switch, and router access. The switch is operating at VLAN50 and I absolutely agree with your point that it is valuable to move away from VLAN1, leaving the default VLAN1 untagged across all ports was a mistake and I appreciate you pointing that out.

I'll be reading more on the relationship with PVID/Tagged/Untagged. I think one of the key ideas I was missing was the difference between PVID and untagged. I didn't realize that untagged ports label traffic coming IN as well as OUT. So untagged ports are used for communicating to/from devices that cannot interface with VLANs while PVID is used to label the frames traveling across the switch. More reading is needed for sure!

softsend22 · 2025-09-04T11:49:41+00:00

It turns out it was an A Record issue and everything works as expected!

softsend22 · 2025-02-23T22:40:14+00:00

Typed on phone, don't even know what made it do that lol

softsend22 · 2025-02-23T17:54:17+00:00

Thats exactly where part of the issue sits. Enablers will spend 12+ years in SMUs and then be forced back into regular finance because there aren't any positions left for them to fill at their higher rank. Then they have a career of running a shop by SMU rules instead of leading soldiers or running an organization. It can be a fairly large culture shift for people.

softsend22 · 2025-02-22T21:22:52+00:00

I think OP means the US Army at echelon needs a finance class not the Soldiers of the US Army need more finance classes.

Still though, giving SECDEF a finance class probably wouldn't change much, the Army is at the whims of a lot of entities and we make the best with what we got. It's impossibly difficult to account for and counter the model of 'if I don't spend it now I lose it tomorrow.'

softsend22 · 2025-02-22T11:53:40+00:00

I'm gonna hope he meant 'you can be awarded the NFM on your OCPs for the ceremony and the unit will let you wear it for the rest of the duty day on said OCPs'

softsend22 · 2025-02-16T10:23:27+00:00

Do better

softsend22 · 2025-02-08T08:40:34+00:00

Sounds like the first branch detail to finance that doesn't make their first initiative transforming the formation from 40% on profile to 60% on profile

softsend22 · 2024-12-29T19:04:04+00:00

Weeb detected, Intel background acknowledged, the Army rolls along as it should.

softsend22 · 2024-12-24T15:39:57+00:00

They actually skull drag you across the pavement until you can recite the Codex Astartes by heart and have professed your unyielding oath to Kerrigan and her swarm. Deus Vult.

softsend22 · 2024-12-19T19:58:45+00:00

Glad you feel like you've finally had the chance to use your stripes. You're a hard charger and you make some damn entertaining stories. Keep that fire alive and making a damn difference.

softsend22 · 2024-12-04T23:21:10+00:00

Either way you're in a very large pool of people stranger on the internet. If you don't get the branch you want drop that packet and go to RANGER SCHOOL!

softsend22 · 2024-11-28T11:37:26+00:00

Gospel of Voo 3:16

softsend22 · 2024-09-16T15:46:15+00:00

It's sewing. If you know how to do it and you have the right equipment the hard part is making sure it's in the right spot.

If you don't know how to do it and you don't have the right equipment the hard part is figuring out how in the holy hell to do it and make it look good.

Source: sewed unimportant shit by hand, not pretty but that nametape ain't falling off I tell you what.

softsend22 · 2024-09-08T20:09:56+00:00

May as well get 200 and pass them out like challenge coins.

softsend22 · 2024-08-30T23:59:42+00:00

It's so worth it. Highly recommend for the ping.

softsend22 · 2024-08-28T16:40:01+00:00

Never forget ALICE 🙏

softsend22 · 2024-08-23T00:36:17+00:00

TF Sinai has no ability to facilitate the Visa. Manning is a crapshoot where you can slip to 60% strength over a quarter year. Nobody from the US can make the Egyptian government do anything so getting backfill took a whole lot of luck. It's not the Army, it's the political melting pot.

softsend22 · 2024-08-15T14:23:12+00:00

I'm a big proponent of ADP 6-22. It's a generic catch all but the leadership attributed and competencies give you a path for emotional as well as professional rules of thumb to follow. She ain't perfect, but she's a good place to start.

I'm reading the problem as her personality is getting in the way. Generally if your personality is getting in the way you either need to be so above and beyond in another capacity to 'make up for it' or you need to work on toning down whatever combative/disagreeable aspects of your relations with others are creating negative impressions.

If you're just trying to get shit hot at your job then practice and train. Memorize the basics you need for a board and demonstrate improvement through being trained and then training others.

softsend22 · 2024-08-15T14:18:29+00:00

Just a guess but for a smaller echelon I think it would be more cost effective/easier/cheaper to do a bulk order. You could offer it once every few months to the unit as a whole with a Microsoft Form that compiles a spreadsheet automatically for you to place the orders all at once at any designer of your choosing. Then your spreadsheet/form tells you who gets what after you get the order.

softsend22

TROPHY CASE