connection pb using open vswitch


Sep 9, 2019
HI all:

I try to install a new network in my proxmox6 using open vswitch.

I want to use vlan for my lxc container.

when i use the /etc/network/interfaces
auto lo
iface lo inet loopback
allow-ovs vmbr0
 iface vmbr0 inet static
 ovs_type OVSBridge
 ovs_ports enp2s0
 up route add -net netmask gw dev enp2s0
allow-vmbr0 enp2s0
 iface enp2s0 inet manual
 ovs_bridge vmbr0
 ovs_type OVSPort

i can use my lxc container connect on vmbr0 with and then can connect internet with

iptables -t nat -A POSTROUTING -s '' -o vmbr0 -j MASQUERADE
ip route add dev vmbr0

if i use the 2.2.1 exemple (
# Loopback interface
auto lo
iface lo inet loopback

# Bridge for our enp2s0 physical interfaces and vlan virtual interfaces (our VMs will
# also attach to this bridge)
auto vmbr0
allow-ovs vmbr0
iface vmbr0 inet manual
  ovs_type OVSBridge
  # NOTE: we MUST mention enp2s0, vlan1, and vlan55 even though each
  #       of them lists ovs_bridge vmbr0!  Not sure why it needs this
  #       kind of cross-referencing but it won't work without it!
  ovs_ports enp2s0 vlan1 vlan55
  mtu 9000

# Physical interface for traffic coming into the system.  Retag untagged
# traffic into vlan 1, but pass through other tags.
auto enp2s0
allow-vmbr0 enp2s0
iface enp2s0 inet manual
  ovs_bridge vmbr0
  ovs_type OVSPort
  ovs_options tag=1 vlan_mode=native-untagged
# Alternatively if you want to also restrict what vlans are allowed through
# you could use:
# ovs_options tag=1 vlan_mode=native-untagged trunks=10,20,30,40
  mtu 9000

# Virtual interface to take advantage of originally untagged traffic
allow-vmbr0 vlan1
iface vlan1 inet static
  ovs_type OVSIntPort
  ovs_bridge vmbr0
  ovs_options tag=1
  ovs_extra set interface ${IFACE} external-ids:iface-id=$(hostname -s)-${IFACE}-vif
 netmask  26
 mtu 1500

I put my adresse in vmbr0 in vlan i add routing
up route add -net netmask gw dev enp2s0 but nothing.

how can i connect my server to internet and create vlan?
After multiple try I write a simple howto using gui.
  1. remove interface ip v4 and v6
  2. add ovs-bridge and give the ip v4 AND V6. fill the gateway
  3. add ovs-int-port with or without network but no gateway. possible to create tag for vlan
  4. repeat 3 for your vlan
  5. then reboot


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!