Combined network solution

[danielnewman]

I'm trying to make work my subnetwork of VM's with official Proxmox Networking model guide
and hosting provider wiki-guide for Proxmox routed KVM. I've tried both solution to make such
scheme to work but with no success.

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 175.219.59.209
gateway 175.219.59.193
netmask 255.255.255.224
post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp

auto vmbr0
iface vmbr0 inet static
address 10.10.0.1
netmask 255.255.0.0
bridge_ports none
bridge_stp off
bridge_fd 0
post-up ip route add 10.10.0.1/24 dev vmbr0

This way I can reach Internet out of my VM's, but can't reach one guest VM out of other VM inside my subnet.

And this way make my VM discoverable in subnet, but no Internet access to update or install anything.

auto vmbr1
iface vmbr1 inet static
address 10.10.0.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.10.0.0/24' -o vmbr1 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.10.0.0/24' -o vmbr1 -j MASQUERADE

Is there a way to combine both solutions without additional eth1 interfaces on VM's and tutorial how to get it work?
Thank you.

 

[p3x-749]

...at first, I don't think that this is living in the right section of the forums, in order to get you help.
Maybe you should ask the mods to move it to the appropriate section.

..second...are you sure about your subnets being used....graphics states "...1./16" and net-config code states "...0./24" ??

 

[danielnewman]

Yup. I will edit this post, it was my mistake.
The second question about "graphical misprinting" in network configuration
but "post-up ip route add 10.10.0.1/24 dev vmbr0" is right and the second
configuration with masquerade is out of official Networking Model guide.
I'm a beginner but see no problem, cause x.x.0.0 and x.x.0.1 are both
in /16 and /24 network space. If I were wrong - please, reply about it.

 

[p3x-749]

...well, if your VMs cannot reach each other but get out to the default route (internet), maybe
if you're using different IPs at the outer range of /16 and /24, where they do match the same network?