Create virtual network (WAN to LAN) with ovs

[M@x1m3]

Hello,

I would like to create a virtual network with a virtual bridge (vmbr0 with proxmox's IP) linked to the WAN (external) and another virtual bridge (vmbr1) linked to four vlans (LAN part).
I have already done a configuration but all the vlans talked to each other and they didn't have access to the internet.

How should I do to manage access to certain vlans and make them have an access to the internet, only with proxmox and OVS?

I join an image to my description to make it easier to see what I need.

Thanks in advance for your help.

 

[Richard]

I would like to create a virtual network with a virtual bridge (vmbr0 with proxmox's IP) linked to the WAN (external) and another virtual bridge (vmbr1) linked to four vlans (LAN part).
I have already done a configuration but all the vlans talked to each other and they didn't have access to the internet.

Can you post the current configuration? Probably all defined in /etc/network/interfaces - or did you run additional commands?

 

[M@x1m3]

Hello Richard, thanks for your reply, here is my /etc/network/interfaces configuration :

# Physical interfaces

auto eth0
iface eth0 inet static
address xxx.xxx.xxx.60
netmask 255.255.255.0
gateway xxx.xxx.xxx.1
pre-up iptables-restore < /etc/iptables.rules

auto eth1
iface eth1 inet manual
post-up ifconfig eth1 up

# Bridges

auto vmbr0
allow-ovs vmbr0
iface vmbr0 inet manual
post-up ifconfig vmbr0 up
ovs_type OVSBridge
ovs_ports eth0

auto vmbr1
allow-ovs vmbr1
iface vmbr1 inet manual
post-up ifconfig vmbr1 up
ovs_type OVSBridge
ovs_ports eth1 vlan1 vlan2 vlan3 vlan4

# Vlans

auto vlan1
iface vlan1 inet static
address 10.10.1.1
netmask 255.255.255.0
ovs_type OVSIntPort
ovs_bridge vmbr1
ovs_options (vlan_mode=access) tag=1

auto vlan2
iface vlan2 inet static
address 10.10.2.1
netmask 255.255.255.0
ovs_type OVSIntPort
ovs_bridge vmbr1
ovs_options (vlan_mode=access) tag=2

auto vlan3
iface vlan3 inet static
address 10.10.3.1
netmask 255.255.255.0
ovs_type OVSIntPort
ovs_bridge vmbr1
ovs_options tag=3

auto vlan4
iface vlan4 inet static
address 10.10.4.1
netmask 255.255.255.0
ovs_type OVSIntPort
ovs_bridge vmbr1
ovs_options tag=4