[SOLVED] HELP! pve vm show "Connection failed" or "Wired Off"

[tonyadp]

Hello,
---------------------------------
RESOLVED!
just install isc-dhcp-server.
Thanks guys!
---------------------------------
i have installed PVE 6.1 on debian 10 buster,
but after create a centos VM its show Wired Off and will show error "Connection failed" after tried to connect wire manual.
about the network hardware i have tried all model intel E1000 VirtIO VMware wmxnet3. but not working.
PS. sorry for my bad english

my nat config /etc/network/interfaces :

### Hetzner Online GmbH installimage

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback
iface lo inet6 loopback

auto enp2s0
iface enp2s0 inet static
  address 213.239.211.132
  netmask 255.255.255.224
  gateway 213.239.211.129
  # route 213.239.211.128/27 via 213.239.211.129
  up route add -net 213.239.211.128 netmask 255.255.255.224 gw 213.239.211.129 dev enp2s0

iface enp2s0 inet6 static
  address 2a01:4f8:a1:145::2
  netmask 64
  gateway fe80::1

auto vmbr0
iface vmbr0 inet static
  address 10.10.10.1
  netmask 255.255.255.0
  bridge_ports none
  bridge_stp off
  bridge_fd 0
  post-up echo 1 > /proc/sys/net/ipv4/ip_forward
  post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o enp2s0 -j MASQUERADE
  post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o enp2s0 -j MASQUERADE

 

[oguz]

hi,

please post:

* qm config VMID

* relevant network configuration in the VM

 

[tonyadp]

hi,

please post:

* qm config VMID

* relevant network configuration in the VM

i have two VMs one Centos and one MacOS catalina:
centos:

root@myprox ~ # qm config 101
bootdisk: sata0
cores: 2
ide2: local:iso/CentOS-8.1.1911-x86_64-dvd1.iso,media=cdrom
memory: 1024
name: centos
net0: e1000=E2:F8:7E:2F:CC:05,bridge=vmbr0,firewall=1
numa: 0
ostype: l26
sata0: local:101/vm-101-disk-0.raw,size=25G
scsihw: virtio-scsi-pci
smbios1: uuid=89b664ad-5e68-4e6d-bafc-f1bfe577ccf3
sockets: 1
vga: vmware
vmgenid: ec5b61bf-8a59-44bf-b869-e391ee133806

MacOS Catalina:

root@myprox ~ # qm config 100
args: -device isa-applesmc,osk="ourhardworkbythesewordsguardedpleasedontsteal(c)AppleComputerInc" -smbios type=2 -cpu Penryn,kvm=on,vendor=GenuineIntel,+kvm_pv_unhalt,+kvm_pv_eoi,+invtsc,vmware-cpuid-freq=on,+pcid,+ssse3,+sse4.2,+popcnt,+avx,+aes,+xsave,+xsaveopt,check -device usb-kbd,bus=ehci.0,port=2
balloon: 0
bios: ovmf
boot: cdn
bootdisk: ide2
cores: 4
cpu: Penryn
efidisk0: local:100/vm-100-disk-1.raw,size=128K
ide0: local:iso/Catalina-installer.iso,cache=unsafe
ide2: local:iso/clover-r5070.iso,cache=unsafe
machine: q35
memory: 8192
name: catalina
net0: vmxnet3=82:90:EC:28:7C:ED,bridge=vmbr0,firewall=1
numa: 0
ostype: other
sata0: local:100/vm-100-disk-0.raw,cache=unsafe,discard=on,size=512G,ssd=1
scsihw: virtio-scsi-pci
smbios1: uuid=e3a770ac-5971-4d4a-9eb1-adf726bf63f0
sockets: 1
vga: vmware
vmgenid: 7efdae86-307d-4526-8727-e51037d274ff

all of them have the same problem.
Thanks

 

[oguz]

you have NAT setup with firewall enabled so you might have to add these lines to your /etc/network/interfaces:

post-up     iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down   iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

 

[tonyadp]

you have NAT setup with firewall enabled so you might have to add these lines to your /etc/network/interfaces:

post-up     iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down   iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

done,but not working.

 

[oguz]

okay what about the network configurations inside the VMs? possibly the problem could be there

 

[t.lamprecht]

done,but not working.

did you rebooted the server or applied the post-up "iptables ..." rule also manually? As the first time after changing you need to do one of those two..

 

[tonyadp]

did you rebooted the server or applied the post-up "iptables ..." rule also manually? As the first time after changing you need to do one of those two..

yes,did both things

 

[tonyadp]

RESOLVED! just install isc-dhcp-server.
Thanks guys!

 

[cul3r0]

RESOLVED! just install isc-dhcp-server.
Thanks guys!

but how did you install it without network connection lol

 

[t.lamprecht]

but how did you install it without network connection lol

FWICT their PVE host had network access but their guests not, as they did not used static network address configuration in the guests so a DHCP server (not client) on the PVE host solved it as that now responded to the DHCP client requests of the guests.

It may be more worth to open a new thread a state your problem and some setup info there if this doesn't apply to you.