5.3.2 - OVS Bridge - not sending data to switch

[niagaro]

Hi,
Just installed proxmox 5.3.2 on a brand new host.
Added an OVS Bridge vmbr1 :

auto vmbr1
iface vmbr1 inet manual
        ovs_type OVSBridge
        ovs_ports eno4

Added a windows VM to it and tagged its network VLAN to 1066:

ovs-vsctl show
afb91225-e477-449b-8b92-1325821ef6cf
    Bridge "vmbr1"
        Port "tap100i0"
            tag: 1066
            Interface "tap100i0"
        Port "vmbr1"
            Interface "vmbr1"
                type: internal
        Port "eno4"
            Interface "eno4"
    ovs_version: "2.6.2"

If i run ovs-vsctl list interface, the vmbr1 bridge does not seem to be transmitting traffic over the physical NIC:

name                : "eno4"
ofport              : 1
ofport_request      : []
options             : {}
other_config        : {}
statistics          : {collisions=0, rx_bytes=0, rx_crc_err=0, rx_dropped=0, rx_errors=0, rx_frame_err=0, rx_over_err=0, rx_packets=0, tx_bytes=0, tx_dropped=0, tx_errors=0, tx_packets=0}

If I ping from the windows machine to another machine, i can see part of the request onthe vmbr1 (ARP, Request who-has 10.0.72.75 tell 10.0.72.71, length 28) but nothing else.

What am I missing to make this configuration work?

Thanks


interface file:

cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

iface eno1 inet manual

iface eno2 inet manual

iface eno3 inet manual

allow-vmbr1 eno4
iface eno4 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr1

iface eno5 inet manual

iface eno6 inet manual

iface eno7 inet manual

iface eno8 inet manual

allow-vmbr1 vlan1066
iface vlan1066 inet manual
        ovs_type OVSIntPort
        ovs_bridge vmbr1
        ovs_options tag=1066

auto vmbr0
iface vmbr0 inet static
        address  172.16.1.21
        netmask  255.255.255.0
        gateway  172.16.1.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

auto vmbr1
iface vmbr1 inet manual
        ovs_type OVSBridge
        ovs_ports eno4 vlan1066
#Virtual Machine Switch

 

[Alexander Pytlev]

Try this:

auto lo
iface lo inet loopback

iface eno1 inet manual
iface eno2 inet manual
iface eno3 inet manual

allow-ovs vmbr1
allow-vmbr1 eno4
iface eno4 inet manual
       ovs_type OVSPort
       ovs_bridge vmbr1
       ovs_options tag=1 vlan_mode=native-untagged
#If you have untagged traffic, set vlan tag for native vlan

iface eno5 inet manual
iface eno6 inet manual
iface eno7 inet manual
iface eno8 inet manual

allow-vmbr1 vlan1066
iface vlan1066 inet manual
       ovs_type OVSIntPort
       ovs_bridge vmbr1
       ovs_options tag=1066

auto vmbr0
iface vmbr0 inet static
       address  172.16.1.21
       netmask  255.255.255.0
       gateway  172.16.1.1
       bridge-ports eno1
       bridge-stp off
       bridge-fd 0

auto vmbr1
iface vmbr1 inet manual
       ovs_type OVSBridge
       ovs_ports eno4 vlan1066

 

[niagaro]

Hi,

I've added the proxmox repository and have openvswitch-switch v2.7 installed now instead of 2.6.2 and allow-ovs is accepted as a command now.

VMs still do not have network access. ovs-vsctl commands do show that vmbr1 is up and running. I also see counters going up and can run tcpdumps on the vmbr1 interface and see the ARP requests.

 

[niagaro]

Latest config file just in case I missed anything:

auto lo
iface lo inet loopback

iface eno1 inet manual

iface eno2 inet manual

iface eno3 inet manual

allow-ovs vmbr1
allow-vmbr1 eno4
iface eno4 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr1
        ovs_options tag=1 vlan_mode=native-untagged

iface eno5 inet manual

iface eno6 inet manual

iface eno7 inet manual

iface eno8 inet manual

auto vmbr0
iface vmbr0 inet static
        address  172.16.1.21
        netmask  255.255.255.0
        gateway  172.16.1.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

allow-vmbr1 vlan1066
iface vlan1066 inet manual
       ovs_type OVSIntPort
       ovs_bridge vmbr1
       ovs_options tag=1066


auto vmbr1
#allow-ovs vmbr1
iface vmbr1 inet manual
        ovs_type OVSBridge
        ovs_ports eno4
#Virtual Machine Switch

 

[Alexander Pytlev]

Show VM config and show, how the switch port is configured in which eno4 is connected.

 

[Alexander Pytlev]

auto vmbr1
#allow-ovs vmbr1
iface vmbr1 inet manual
      ovs_type OVSBridge
      ovs_ports eno4
#Virtual Machine Switch

auto vmbr1
iface vmbr1 inet manual
      ovs_type OVSBridge
      ovs_ports eno4 vlan1066

 

[niagaro]

Thanks, fixed that. Does it matter though? If I understand correctly the doc, OVS should be able to use the VM tag information and the OVSIntPort are only for host usage if I need the host to have an IP on that VLAN?

How do I get the VM configuration command line?

 

[niagaro]

Got it working. Thanks a bunch! Much appreciated