Default gateway for multiple subinterfaces

casalicomputers

Renowned Member
Mar 14, 2015
91
4
73
Hello everyone,

Would a pve that's hosting machines on more than one vlan need to have a different default gateway configured on each vmbr subinterface?

the network is set up like this:

all network devices: firewall, switches, access points, etc.. go on the management network: 10.100.99.0/24 with the firewall's management vlan, tag 99, subinterface as their default gateway: 10.100.99.253

everything else goes on the default vlan and has the firewall's lan interface as a default gateway: 192.168.1.253/24

the pve hosts various services on the default vlan, mail, web, etc..
however i'd like to setup a management console vm that also has access to the management network.

on the vmbr0 i created two subinterfaces: vmbr0.1 and vmbr0.99

Code:
root@pve01:~# cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto eno8303
iface eno8303 inet manual
#Rame Porta 0

auto eno8403
iface eno8403 inet manual
#Rame Porta 1

auto enp23s0f0np0
iface enp23s0f0np0 inet manual
#Scheda Fibra 2 Porta 1

auto enp23s0f1np1
iface enp23s0f1np1 inet manual
#Scheda Fibra 2 Porta 2

auto eno12399np0
iface eno12399np0 inet manual
#Scheda Fibra 1 Porta 1

auto eno12409np1
iface eno12409np1 inet manual
#Scheda Fibra 1 Porta 2

iface idrac inet manual

auto bond0
iface bond0 inet manual
        bond-slaves eno12399np0 enp23s0f0np0
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3
#LACP SFP+ LAN

auto bond1
iface bond1 inet manual
        bond-slaves eno12409np1 enp23s0f1np1
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3
#LACP SFP+ NAS

auto bond2
iface bond2 inet manual
        bond-slaves eno8303 eno8403
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3
#LACP RAME

auto vmbr0
iface vmbr0 inet static
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 98-99

auto vmbr0.99
iface vmbr0.99 inet static
        address 10.100.99.30/24
#MANAGEMENT

auto vmbr0.1
iface vmbr0.1 inet static
        address 192.168.1.30/24
        gateway 192.168.1.253
#LAN

auto vmbr1
iface vmbr1 inet static
        address 10.100.98.30/24
        bridge-ports bond1
        bridge-stp off
        bridge-fd 0
#NAS

auto vmbr2
iface vmbr2 inet manual
        bridge-ports bond2
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

if i try to add the default gateway to the vmbr0.99 subinterface i get error 400:

Parameter verification failed. (400)
gateway: Default gateway already exists on interface 'vmbr0.1'.

I know that i can edit and manually add the firewall's vlan 99 subinterface
to the proxmox vmbr0.99 in the "/etc/network/interfaces" file.

Would having (or not) a default gateway on more than one interface create routing conflicts of any kind for the pve or its hosts?

Thanks for the dedicated time,
Have a good day
 
u can only define more default gateway via ip route command and different priorities.