Management interface in MGMT VLAN

[niekniek89]

Hello,

I have 3 VLAN's on my UniFi Network:

Client (default): 192.168.178.0/24
IoT: 192.168.177.0/24
MGMT: 192.168.176.0/24

I would like the Proxmox host to get an IP from the MGMT VLAN.
It is currently in default (192.168.178.78/24).
When installing the host, it automatically (like every device here) defaulted to default.
I was able to give the VMs a VLAN tag, so they are all correct.

Where and how can I do this best, without having to restart the host and VMs?

 

[smueller]

There is already a similar post: https://forum.proxmox.com/threads/set-vlan-id-for-proxmox-management-ip-interface.92385/

You have to add a Vlan via GUI or CLI.

From the post (Credit to: ph0x):

Add this device:
Code:

auto vmbr0.10
iface vmbr0.10 inet static
address 192.168.176.xxx/24

With this the host has an address in vlan 10.

Can also be added through the GUI:
node->network->create vlan

 

[niekniek89]

Thanks for you're answer.
Is this all i need to do?

VLAN3 is MGMT

 

[smueller]

This would be the config for your use case:


In name you set the bridge and the vlan example: vmbr0.3

 

[niekniek89]

@smueller

Thanks for your help!
Once I click "Create" do I need to do anything else?
Or will it switch to its new IP right away?

 

[smueller]

@niekniek89

you probably have to delete the gateway from the ‘normal’ vmbr0 and finally save the changes with ‘Apply Configuration’ above.

 

[niekniek89]

@smueller

Thanks for your answer.
I wonder if the host is still reachable, to adjust the gateway, when I create the new VLAN....

 

[smueller]

@niekniek89

If you click on Create, the changes are not yet saved and you can continue to work on them until you click on ‘Apply Configuration’ at the top.
Then the network setings will get applied and the host sould be reachable via the VLAN.

 

[niekniek89]

@niekniek89

you probably have to delete the gateway from the ‘normal’ vmbr0 and finally save the changes with ‘Apply Configuration’ above.

only the gateway, not IP and gateway?

 

[smueller]

Sorry, my mistake, you need to remove both.

Or if you want, you can leave both (Gateway and IP) for now so you can access both. (Since you have two different gateways, I only have one here in my cluster)

 

[niekniek89]

No problem,

if i leave them, it should be reachable on both IP addresses?
192.168.178.8/24 as on 192.168.176.8/24??

 

[niekniek89]

Strangely enough it says I already used the gateway, while it is not in vmbr0... I probably have to clear vmbr0 first?

 

[smueller]

Yes, you have to remove the gateway in vmbr0 and then add it in the VLAN.
(If you removed the gateway in the vmbr0 do NOT apply the changes, otherwise you won't be able to access the host.)

 

[niekniek89]

I just changed it, and applied.
But I can still ping it on the old IP...
On its new IP it doesn't respond.

 

[smueller]

My bad, you have to set eno1 to VLAN aware. I forgot this part. Sorry.

 

[niekniek89]

My bad, you have to set eno1 to VLAN aware. I forgot this part. Sorry.

only this?
I select "VLAN aware.
it still responds to the old IP.

 

[smueller]

the management ui listen on all servers ip, so you have to remove the IP of vmbr0 to only use the VLAN IP

#netstat -an|grep 8006
tcp6 0 0 :::8006 :::* LISTEN

you can define a specific listening ip with

echo 'LISTEN_IP=127.0.0.1' > /etc/default/pveproxy
systemctl restart pveproxy

https://lists.proxmox.com/pipermail/pve-devel/2021-March/047376.html

 

[niekniek89]

Thanks, it worked.
Unfortunately, the host still needed a reboot.
It was no longer pingable on any IP address, until the reboot.