Default gateway for multiple subinterfaces

casalicomputers

Renowned Member
Mar 14, 2015
89
3
73
Hello everyone,

Would a pve that's hosting machines on more than one vlan need to have a different default gateway configured on each vmbr subinterface?

the network is set up like this:

all network devices: firewall, switches, access points, etc.. go on the management network: 10.100.99.0/24 with the firewall's management vlan, tag 99, subinterface as their default gateway: 10.100.99.253

everything else goes on the default vlan and has the firewall's lan interface as a default gateway: 192.168.1.253/24

the pve hosts various services on the default vlan, mail, web, etc..
however i'd like to setup a management console vm that also has access to the management network.

on the vmbr0 i created two subinterfaces: vmbr0.1 and vmbr0.99

Code:
root@pve01:~# cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto eno8303
iface eno8303 inet manual
#Rame Porta 0

auto eno8403
iface eno8403 inet manual
#Rame Porta 1

auto enp23s0f0np0
iface enp23s0f0np0 inet manual
#Scheda Fibra 2 Porta 1

auto enp23s0f1np1
iface enp23s0f1np1 inet manual
#Scheda Fibra 2 Porta 2

auto eno12399np0
iface eno12399np0 inet manual
#Scheda Fibra 1 Porta 1

auto eno12409np1
iface eno12409np1 inet manual
#Scheda Fibra 1 Porta 2

iface idrac inet manual

auto bond0
iface bond0 inet manual
        bond-slaves eno12399np0 enp23s0f0np0
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3
#LACP SFP+ LAN

auto bond1
iface bond1 inet manual
        bond-slaves eno12409np1 enp23s0f1np1
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3
#LACP SFP+ NAS

auto bond2
iface bond2 inet manual
        bond-slaves eno8303 eno8403
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3
#LACP RAME

auto vmbr0
iface vmbr0 inet static
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 98-99

auto vmbr0.99
iface vmbr0.99 inet static
        address 10.100.99.30/24
#MANAGEMENT

auto vmbr0.1
iface vmbr0.1 inet static
        address 192.168.1.30/24
        gateway 192.168.1.253
#LAN

auto vmbr1
iface vmbr1 inet static
        address 10.100.98.30/24
        bridge-ports bond1
        bridge-stp off
        bridge-fd 0
#NAS

auto vmbr2
iface vmbr2 inet manual
        bridge-ports bond2
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

if i try to add the default gateway to the vmbr0.99 subinterface i get error 400:

Parameter verification failed. (400)
gateway: Default gateway already exists on interface 'vmbr0.1'.

I know that i can edit and manually add the firewall's vlan 99 subinterface
to the proxmox vmbr0.99 in the "/etc/network/interfaces" file.

Would having (or not) a default gateway on more than one interface create routing conflicts of any kind for the pve or its hosts?

Thanks for the dedicated time,
Have a good day
 
u can only define more default gateway via ip route command and different priorities.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!