Hetzner Server with Proxmox and Opnsense / Routed secondary IP and IPv6

[SebastianH81]

Hello dear community,

it doesn't work to route a second IPv4 address from Hetzner to the Opnsense on Proxmox.

The following constellation:
xxx.xxx.xxx.125/26 Main IP of the Proxmox server
xxx.xxx.xxx.124/26 Hetzner's second public IP will be Opnsense's WAN IPv4
xxx.xxx.xxx.65 Gateway

xxxx:xxxx:xxxx:xxxd::/64 IPv6 network from Hetzner
xxxx:xxxx:xxxx:xxxd::2/112 Proxmox server network card (working)
xxxx:xxxx:xxxx:xxxd::3/112 Proxmox Server vmbr0 (WAN Opnsense, works)
xxxx:xxxx:xxxx:xxxd::4/112 WAN IPv6 of Opnsense (works)
xxxx:xxxx:xxxx:xxxd::1:1/112 LAN IPv6 of Opnsense (works)

I did it according to the instructions from Hetzner (https://community.hetzner.com/tutorials/install-and-configure-proxmox_ve/de) and from this topic (https://forum.opnsense.org/index.php? topic=21186.0) tried, unfortunately without success. Only the IPv6 network works properly. I can reach the IPv6 addresses of the WAN and also the LAN side of the Opnsense.

The only thing I can't reach is Hetzner's second IPv4 address on the Opnsene WAN side.

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

iface lo inet6 loopback

auto eno1
iface eno1 inet static
        address xxx.xxx.xxx.125
        netmask 255.255.255.255
        gateway xxx.xxx.xxx.65
        pointopoint xxx.xxx.xxx.65

iface eno1 inet6 static
        address xxxx:xxxx:xxxx:xxxd::2
        netmask 128
        gateway fe80::1
        up sysctl -p

auto vmbr0
iface vmbr0 inet static
        address xxx.xxx.xxx.125
        netmask 255.255.255.255
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        up ip route add xxx.xxx.xxx.124/32 dev vmbr0

iface vmbr0 inet6 static
        address xxxx:xxxx:xxxx:xxxd::3
        netmask 112
        up ip -6 route add xxxx:xxxx:xxxx:xxxd::/64 via xxx:xxxx:xxxx:xxxd::4 dev vmbr0

auto vmbr1
iface vmbr1 inet manual
        bridge-ports none
        bridge-stp off
        bridge-fd 0
#Opnsense LAN1

Attached are also the Opnsense WAN settings.

I hope someone can tell me where the error is?
I'm grateful for any help.

greeting
Sebastian

 

[SebastianH81]

Hello everyone,

I found the error! At Hetzner, a different MAC address was stored for the second IP address. Since I deleted it and pointed it back to the server, everything works.

Greetings Sebastian