[SOLVED] I have a small problem

[ph0x]

Because you have to configure it to do so. The guide is in the wiki page above. And you're welcome to post actual problems. But »it doesn't work« is not enough information to give you a hint what to do. So either you have to be a bit more specific and provide some more info or you go back to the basics and try with a local installation where you can work with a bridge and subnets rather than a single address only.

 

[DjBomberpilot]

I did everything according to these instructions
https://adminforge.de/virtualisierung/pve/proxmox-ve-kvm-bridge-mode-bei-aktiver-port-security/

I can ping the VM from my host system but not the other way around

in the picture you can see what i entered in the vm

 

[DjBomberpilot]

but when I do ipconfig it comes

 

[Dunuin]

You gateway is outside of the subnets.

If you got IP 10.10.30.2 and Subnetmask of 255.255.255.0 your Gateway needs to be between 10.10.30.1 and 10.10.30.254. Same problem for your other subnet.

 

[ph0x]

That's normal since your gateway doesn't lie in the /24 subnet of your ip address. Adress 10.10.30.2 and gateway 10.10.10.1 cannot work. It's either 10.10.10.2 as the address or 10.10.30.1 as the gateway or 255.255.0.0 as the subnet mask.
I guess you didn't follow your tutorial close enough, since you seem to have mixed up configuration of the host with configuration of the guest. I suggest to work through it once again and follow the instructions closely.

 

[DjBomberpilot]

It would really help me if I knew that at least the interfaces are set correctly

# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!


auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
broadcast 85.93.89.255
gateway 85.93.89.1

auto eth0:1
iface eth0:1 inet static
address 85.93.89.20
netmask 255.255.255.255
post-up ifconfig eth0 10.10.30.2 netmask 255.255.255.0 up

auto eth0:1
iface eth0:1 inet static
address 85.93.89.20
netmask 255.255.255.255
post-up ifconfig eth0 10.10.30.2 netmask 255.255.255.255 up


# The primary network interface
iface eth0 inet static
address 85.93.89.20
netmask 255.255.255.0
broadcast 85.93.89.255
network 192.168.10.0
gateway 85.93.89.1


auto lo
iface lo inet loopback

auto vmbr0
iface vmbr0 inet manual
bridge-ports none
bridge-stp off
bridge-fd 0

auto vmbr1
iface vmbr1 inet static
address 10.10.30.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
post-up route add -host 85.93.89.20/32 dev vmbr1

 

[Dunuin]

You are using 2x eth0:1 thats bad.
And you are using 4x the IP 85.93.89.20...bad too.
And you are using 2x lo...also wrong.
Vmbr0 isn't used at all for anything

 

[DjBomberpilot]

So it's best to first delete the eth: 1 with the 255.255.255.255?

the 85.93.89.20 is my only public ip that I have

 

[Dunuin]

"Punkt 1" and "Punkt 2" of your link are setting you should do on your proxmox host. "Punkt 3" are things you should do inside your guest (for example your Win VM), not on your host.

 

[Dunuin]

According to the tutorial your proxmox hosts /etc/network/interfaces should look something like this:

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
    address 85.93.89.20
    netmask 255.255.255.0
    broadcast 85.93.89.255
    gateway 85.93.89.1

auto vmbr1
iface vmbr1 inet static
    address  10.10.30.1
    netmask  255.255.255.0
    bridge_ports none
    bridge_stp off
    bridge_fd 0
    post-up route add -host 85.93.89.20/32 dev vmbr1

But you will need to do a lot of complex network stuff inside the guest and the tutorial is written for linux guests. If you want to do the same thing with a Windows guest you should look for another tutorial if you don't know how to add routes, create your own firewall rules and assign multiple IPs to a single interface on Windows. For example a tutorial on how to setup a OPNsense VM to work as a router for your guests.

 

[DjBomberpilot]

ok thanks that helps me a little further anyway

so i just have to find such a guide because i'm finished on the host?

 

[Dunuin]

ok thanks that helps me a little further anyway

so i just have to find such a guide because i'm finished on the host?

No, another tutorial will tell you to do other stuff on the host. There are many way to do it but all are complex and require you to understand the network basics.

Easiest should be to do it like the documentation ("3.3.6. Masquerading (NAT) with iptables") is recommending it on how to let Proxmox do the routing and NAT.

 

[DjBomberpilot]

you mean such an extension?

auto vmbr1
iface vmbr1 inet static
address 10.10.10.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
# post-up echo 1> / proc / sys / net / ipv4 / ip_forward
post-up iptables -t nat -A POSTROUTING -s '10 .10.10.0 / 24 '-o vmbr0 -j MASQUERADE
post-up iptables -t nat -A POSTROUTING -s '10 .10.10.0 / 24 '! -d '10 .10.10.0 / 24 '-o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10 .10.10.0 / 24 '-o vmbr0 -j MASQUERADE

just an example

 

[Dunuin]

No, more like this:

Your Host:

auto lo
iface lo inet loopback

auto eth0
#real IP address
iface eth0 inet static
        address  85.93.89.20
        netmask  255.255.255.0
        gateway  85.93.89.1

auto vmbr1
#private sub network
iface vmbr0 inet static
        address  10.10.10.1
        netmask  255.255.255.0
        bridge-ports none
        bridge-stp off
        bridge-fd 0

        post-up   echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up   iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE

And give your Win guest a static IP like 10.10.10.2 with subnetmask of 255.255.255.0 and 10.10.10.1 as gateway.

 

[DjBomberpilot]

ok one moment please i will try

 

[DjBomberpilot]

:-(

 

[Dunuin]

Did you reboot the host? And did you set a valid DNS server inside your guest? Like 8.8.8.8? And did you make sure that your virtual NIC is attached to the right bridge?

 

[DjBomberpilot]

host I restarted a dns server I also have to set up lol that was not yet included in any German description

 

[DjBomberpilot]

how do you set that up?

 

[Dunuin]

how do you set that up?