Issues with guest VLANS

[jcp2mill]

Hi All,

I'm pretty new to proxmox having previosuly used vmware and to a lesser extent xcp-ng. I have a fair bit of experience with debian, ubuntu and centos but this is my first time configuring a VLAN in linux I have an HP DL360 G8 server with an 560 SFP+ 10GB dual fibre card.

On the two 10 G interfaces was has both tagged and untagged traffic and the other is just tagged (the netwrok is too established and with too much hardware for me to easily change the untagged to tagged at this point).

I can talk ping my host on all interfaces but guest VMS can only ping the host and nothing else. As per another post on this forum I've reduced the number of vlan IDs after making my interfaces vlan aware but still no joy, any help that can be offered wopuld be much appreciated My interfaces file is below:

network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

iface ens2f0 inet manual

iface eno1 inet manual

iface eno2 inet manual

iface eno3 inet manual

iface eno4 inet manual

iface ens2f1 inet manual

auto vmbr0
iface vmbr0 inet static
address 192.168.0.176/23
gateway 192.168.0.151
bridge-ports ens2f0
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 5-20

auto vmbr0.18
iface vmbr0.18 inet static
address 172.18.100.176/24

auto vmbr1
iface vmbr1 inet manual
bridge-ports ens2f1
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 17

auto vmbr1.17
iface vmbr1.17 inet static
address 172.17.100.176/24

source /etc/network/interfaces.d/*

 

[jcp2mill]

A bit of additional information I need a single VM to be able to access all three VLANS one untagged for management, two tagged for infrastructure monitoring.
I can ping the gateway on the untagged vlan and the host but that's it.

 

[jcp2mill]

Never mind I think I've found asolution myself switched one of the VLANs to an ovswitch and works straight away.

 

[jcp2mill]

Nope don't know why but now it's not working again the same as with the LInux bridge config I can ping the bridge but not any of the guest VMS.

Config with ovs switch is below:

 

[jcp2mill]

I have it working now I adapted the first ovswitch config here slightly:https://pve.proxmox.com/wiki/Open_vSwitch

To give me:
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto ens2f0
iface ens2f0 inet manual
ovs_bridge vmbr0
ovs_type OVSPort
ovs_options tag=1 vlan_mode=native-untagged
# Alternatively if you want to also restrict what vlans are allowed through
# you could use:
# ovs_options tag=1 vlan_mode=native-untagged trunks=10,20,30,40
ovs_mtu 9000

iface eno1 inet manual

iface eno2 inet manual

iface eno3 inet manual

iface eno4 inet manual

auto ens2f1
iface ens2f1 inet manual
ovs_bridge vmbr1
ovs_type OVSPort
ovs_options tag=1 vlan_mode=native-untagged
# Alternatively if you want to also restrict what vlans are allowed through
# you could use:
# ovs_options tag=1 vlan_mode=native-untagged trunks=10,20,30,40
ovs_mtu 9000

auto vmbr0
iface vmbr0 inet manual
ovs_type OVSBridge
# NOTE: we MUST mention eth0, vlan1, and vlan55 even though each
# of them lists ovs_bridge vmbr0! Not sure why it needs this
# kind of cross-referencing but it won't work without it!
ovs_ports ens2f0 vlan1
ovs_mtu 9000

# Virtual interface to take advantage of originally untagged traffic
auto vlan1
iface vlan1 inet static
ovs_type OVSIntPort
ovs_bridge vmbr0
ovs_options tag=1
address 192.168.0.176
netmask 255.255.254.0
gateway 192.168.0.151
ovs_mtu 1500

auto vmbr1
iface vmbr1 inet manual
ovs_type OVSBridge
# NOTE: we MUST mention eth0, vlan1, and vlan55 even though each
# of them lists ovs_bridge vmbr0! Not sure why it needs this
# kind of cross-referencing but it won't work without it!
ovs_ports ens2f1
ovs_mtu 9000

source /etc/network/interfaces.d/*

 

[jcp2mill]

I seem to be getting intermittent packet loss using open-vswitch anyone know how to get it working with a Linux bridge.

 

[jcp2mill]

This is a diagram of the layout:

 

[jcp2mill]

When I say I'm getting packet loss only the VM is losing packets the host is OK.