I Must Be Doing Something Wrong

[spetrillo]

Hello all,

I would like my PVE server, which has one NIC, to be able to connect to 2 vlans. I have defined this as follows:

auto vmbr0
iface vmbr0 inet manual
bridge-ports eno1
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge vids 1,30

auto vmbr0.1
iface vmbr0.1 inet dhcp

auto vmbr0.30
iface vmbr0.30 inet dhcp

I get connected to vmbr0.1 but I do not get connected to vmbr0.30. I have a managed switched and I have tagged both vlans to the switch port serving this server. Have I configured something wrong? I cannot for the life of me figure out what I am doing wrong. I just used the same config for my PBS and that is working fine.

Thanks,
Steve

 

[Spaneta]

Hello,
If your only DHCP server is in VLAN 1 it can mostly be 2 problems :
- your DHCP server don't have an (active) pool for VLAN 30
- your switch does not forward DHCP requests to your DHCP in VLAN 1
In this case you need to have a L3 switch and enable this feature ("ip helper ..." in Cisco language, "dhcp relay server-select ..." in HP ComWare, or simply "DHCP relay" somewhere in the WebUI of the switch).
- other solution to second point is to have the DHCP server having an interface (and IP) in VLAN 30 but personnaly I would recommend the L3 switch solution.

EDIT: readability

EDIT2: third possible "problem" is that you can only have 1 default gateway so you may access the server in VLAN 30 only from a PC in VLAN 30 because the "outer" trafic is sent through VLAN 1 because of default gateway. Also, I would avoid VLAN 1 like the plague (best practice for both security and stability because some STP chenianigans can arise, mostly between different make of network equipement, or different default config.

 

[spetrillo]

I have DHCP services on all my internal LAN segments, so that should not be the problem. The other thing is that I set my PBS server with the same config and it works fine.

Yes I am aware of vlan 1 but I set that as my mgmt vlan and I do not want to go around and change things.

 

[Spaneta]

Just saw a typo in your first post ... "bridge-vids" (with dash).
Can you check this and compare on the 2 servers ?

 

[spetrillo]

OMG...ding ding ding....you found it! Thanks!

 

[Spaneta]

This is also a side effect of default VLAN 1 ... :/

EDIT: AFAIK you should put the "Solved" label on the first post (but I don't know how to)