Have I got this completely wrong? 2 Nic's 1 public ip

[Jerome Haynes]

Hi,

I'm struggling to get my way around proxmox's way of networking. So perhaps if i post what I want to achieve then you guys can help me and tell me what's what. I've also often found that once I get my head around stuff like this then everything else becomes clear too.

So:

I have:
1x public ip address
2x network cards

I want one of the nic's to be for the management interface and LAN traffic
The other NIC to be the WAN interface

I need to be able to access certain ports/services from the public-ip facing side but every configuration I've tried with masquearading etc hasn't worked.

Am I correct in understanding that as below with masquarading this is the correct setup:

eth0 should be mapped as a slave to vmbr0 and should have a LAN ip address
eth1 should me mapped as a slave to vmbr1 and should provide access to the internet/WAN

Not going to post any configs, I'd rather step back from the whole situation and have a fresh approach of how this should be done.

Maybe I'm mis-understanding the whole bridge network model?

Kind Regards,
Jerome Haynes

 

[wolfgang]

Hi,

You need no vmbr1 on the WAN just use it as a normal NIC.

see
https://pve.proxmox.com/wiki/Network_Model

 

[Jerome Haynes]

I want eth0 (Management NIC) to be accessible via LAN only though?
I want eth1 to handle all VM traffic/internet connectivity?

 

[Jerome Haynes]

Also in the example on your wiki it looks like that's just accounting for 1x NIC/vmbridge. Isn't that assuming all traffic will go over that 1x NIC?

 

[wolfgang]

Yes you have to adapt this example.

In you case

bridge_ports eth0

and the Masquerading goes on eth1

then block port 8006 traffic on eth1
Here is a good wiki about linux networking.
https://wiki.archlinux.org/index.php/iptables