Dual Network Interface Dual (2) NIC traffic routing

[BigBird]

I have a pre-production Proxomox Server running with pve-manager 1.5 (4674) 2.6.24-10-pve kernel.

Have 2 network interface installed
Have 2 group of Internet IPs (let's call it A and B);

I have configure an IP from Group A to eth0; an IP from Group B to eth1 at the HN;
Only Group A IPs are internet I/O accessible; containers (openvz/kvm) are accesible from the internet for Group A IPs. But, can only access the HN Group B IP from Group B subnet and any Group B IP set to container is not accessible from the Internet.

My Questions:
1. Is it normal and supposed to be so? OR I have not properly configure them?
2. I hope to be able utilize both the Group A and Group B IP with full internet accessiblity for both the HN and the containers inside. Is that possible? How should I configure that OR where should I look into?

Thx for your advices in advance

 

[udo]

I have a pre-production Proxomox Server running with pve-manager 1.5 (4674) 2.6.24-10-pve kernel.

Have 2 network interface installed
Have 2 group of Internet IPs (let's call it A and B);

I have configure an IP from Group A to eth0; an IP from Group B to eth1 at the HN;
Only Group A IPs are internet I/O accessible; containers (openvz/kvm) are accesible from the internet for Group A IPs. But, can only access the HN Group B IP from Group B subnet and any Group B IP set to container is not accessible from the Internet.

My Questions:
1. Is it normal and supposed to be so? OR I have not properly configure them?
2. I hope to be able utilize both the Group A and Group B IP with full internet accessiblity for both the HN and the containers inside. Is that possible? How should I configure that OR where should I look into?

Thx for your advices in advance

Hi,
i would say, that not normal.
But you should use only a IP from one Group for the host. Otherwise you got trouble with the routing (default-gateway).
If your /etc/network/interface looks similar like this, ith should work to use IPs from both ranges:

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
    address 0.0.0.0
    netmask 0.0.0.0

auto eth1
iface eth1 inet static
    address 0.0.0.0
    netmask 0.0.0.0

auto vmbr0
iface vmbr0 inet static
    address 1.2.3.4
    netmask 255.255.255.0
    gateway 1.2.3.1
    bridge_ports eth0
    bridge_stp off
    bridge_fd 0

auto vmbr1
iface vmbr1 inet static
    address 0.0.0.0
    netmask 0.0.0.0
    bridge_ports eth1
    bridge_stp off
    bridge_fd 0

Hope it's helps

Udo

 

[BigBird]

Thx Udo!
Sorry I was not able to respond to your advices as I was out of town for a site work until Sunday (GMT+8).

"do not attempt" to have VMs with mix of Group A and B IPs to "avoid troubles with default routes" NOTED. Point taken.

My /etc/network/interfaces looks a bit different when I encounter that Group A IP can only reachable within the Group A subnet problem.

I attempted your suggested configuration, and presuming that those 0.0.0.0 are really 0.0.0.0 but not requiring subsitution of real IP addresses (correct my if I were wrong). I end up with only either Group A or Group B accessible/usable.

I will do more scenarios, as well as posting the original configurations in my next post when I return to my base (Monday GMT +8)

Thx again Udo