[SOLVED] Firewall ignores traffic vlan

hawat

Member
Dec 11, 2017
5
0
6
34
Hi,

PVE - 6.3-3
Guest OS - Ubuntu 20.04.2 LTS
netplan config:

Code:
---
network:
  version: 2
  ethernets:
    ens19:
        dhcp-identifier: mac
        dhcp4: true

  vlans:
    vlan5:
        accept-ra: false
        addresses:
        - 192.168.100.125/24
        id: 5
        link: ens19

For ens19 interface traffic, PVE firewall works correctly.
For vlan5, firewall rules are ignored.

Tcpdump from the tap interface, firewall works

Code:
14:19:20.940916 f2:75:57:4c:5f:39 > be:70:19:a3:8c:a6, ethertype IPv4 (0x0800), length 98: 192.168.0.16 > 192.168.0.254: ICMP echo request, id 7, seq 1, length 64
14:19:21.950212 f2:75:57:4c:5f:39 > be:70:19:a3:8c:a6, ethertype IPv4 (0x0800), length 98: 192.168.0.16 > 192.168.0.254: ICMP echo request, id 7, seq 2, length 64

does not work

Code:
14:19:23.496525 f2:75:57:4c:5f:39 > 0a:31:11:5b:61:33, ethertype 802.1Q (0x8100), length 102: vlan 5, p 0, ethertype IPv4, 192.168.100.125 > 192.168.100.150: ICMP echo request, id 8, seq 1, length 64
14:19:23.497458 0a:31:11:5b:61:33 > f2:75:57:4c:5f:39, ethertype 802.1Q (0x8100), length 102: vlan 5, p 0, ethertype IPv4, 192.168.100.150 > 192.168.100.125: ICMP echo reply, id 8, seq 1, length 64
14:19:23.497479 0a:31:11:5b:61:33 > f2:75:57:4c:5f:39, ethertype 802.1Q (0x8100), length 102: vlan 5, p 0, ethertype IPv4, 192.168.100.150 > 192.168.100.125: ICMP echo reply, id 8, seq 1, length 64

How can this be fixed?
thank
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!