create a VLAN without having a physical switch or changing anything in the router

[moshe.aa]

Hi,
I want to create a VLAN in my Proxmox,
I have a router provided by my ISP and all of it's ports are used, one of them is connected to my Proxmox server.
By checking my ISP router, it's seems like id doesn't support managing VLAN's.
The goal is to have my VMs and LXC containers on their own VLAN so they are not affected by the router’s DHCP, and so I don’t need to assign static IPs inside the router’s range.

How can I achieve that ?

 

[Michiel_1afa]

Hi moshe, you have 2 options here, you enable vlan support on the first (default) bridge vmbr0. it you will put vm's on vlan 1, they will be able to communicate with router, vlan1 is the default vlan in most (all) netwerk equiptment.
If you put any other vlan besides 1, they can only communicate with other machines on that vlan.

another option,if you only have 1 PVE machine is to make a 2nd bridge device with no hardware network adapters linked, you can use that bridge to create a network that stays within that PVE host.

 

[moshe.aa]

Hi moshe, you have 2 options here, you enable vlan support on the first (default) bridge vmbr0. it you will put vm's on vlan 1, they will be able to communicate with router, vlan1 is the default vlan in most (all) netwerk equiptment.
If you put any other vlan besides 1, they can only communicate with other machines on that vlan.

another option,if you only have 1 PVE machine is to make a 2nd bridge device with no hardware network adapters linked, you can use that bridge to create a network that stays within that PVE host.

If I use the first option suggested, does it means I need to manually configure the network in a vm / lxc to use the vlan1 tag ?

 

[Michiel_1afa]

If I use the first option suggested, does it means I need to manually configure the network in a vm / lxc to use the vlan1 tag ?

You often do not have to, but I would consider it good practice to do anyway so you have a clear indication of what lan these vms are on.

 

[moshe.aa]

You often do not have to, but I would consider it good practice to do anyway so you have a clear indication of what lan these vms are on.

I tried this, but then realized I want my VMs and LXCs to have internet access.
Assigning them a static IP on a VLAN and using the home router as the gateway did not work.
Does this mean I need to use a VM as a router (gateway) and route/NAT the VLAN traffic through it?

 

[Michiel_1afa]

That is unfortunate. But yes, you might want to make a 2nd bridge device, and a vm or container to act as a router between the 2 bridges.