[SOLVED] Fresh Install - Unable to Access Management Interface

[gnulab]

Hi,

I have tried following the steps outlined here (since I am using Vultr)
https://www.vultr.com/docs/how-to-install-proxmox-virtual-environment-on-debian-11/

Then I stumbled upon another set of instructions, here
https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_11_Bullseye

Then I combined steps from both sources.

1. change hostname (vultr)
2. change hosts (vultr)
3. change network configuration (vultr)
4. add repository (proxmox)
5. apt update && apt full-upgrade
6. install kernel PVE
7. remove Debian kernel
8. update-grub
9. remove os-graber
10. reboot

Results: can connect via ssh, but cannot connect to the management interface at 8006.
What settings am I missing?

Then I look at dmesg and there is an entry

[   66.418074] [UFW BLOCK] IN=vmbr0 OUT= MAC=3c:ec:ef:b9:f1:22:90:0a:84:53:fd:3c:08:00 SRC=My_IP_Address DST=Proxmox_IP_Address LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=44045 DF PROTO=TCP SPT=55332 DPT=8006 WINDOW=64240 RES=0x00 SYN URGP=0
[   85.295835] [UFW BLOCK] IN=vmbr0 OUT= MAC=3c:ec:ef:b9:f1:22:90:0a:84:53:fd:3c:08:00 SRC=My_IP_Address DST=Proxmox_IP_Address LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=44059 DF PROTO=TCP SPT=55349 DPT=8006 WINDOW=64240 RES=0x00 SYN URGP=0
[  107.649449] [UFW BLOCK] IN=vmbr0 OUT= MAC=3c:ec:ef:b9:f1:22:90:0a:84:53:fd:3c:08:00 SRC=My_IP_Address DST=Proxmox_IP_Address LEN=52 TOS=0x00 PREC=0x00 TTL=119 ID=44069 DF PROTO=TCP SPT=55491 DPT=8006 WINDOW=64240 RES=0x00 SYN URGP=0

Is the firewall blocking me thus I cannot access the management interface?

Yet, the ufw status is

root@prox:~# ufw status
Status: active

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW       Anywhere
22/tcp (v6)                ALLOW       Anywhere (v6)

So what is missing?


Thanks

 

[bbgeek17]

if those are firewall rules, then only port 22 is allowed as evident by 22/tcp.
As the PVE UI is exposed on port 8006 (DPT=8006 in log), you need to update your firewall.
Consider the consequences of exposing your server to "anywhere".

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[gnulab]

The culprit is the UFW. Allow port 8006 and now I am able to access the management interface.

ufw allow 8006

Someone should add to the wiki (https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_11_Bullseye) about allowing port 8006 to access the management interface.

 

[jaminmc]

You may want to only allow port 8006 for your IP address... You don't want someone to brute force it. Also, use SSH keys for ssh access.