lacp - bond - vmbr(multiple vlans) - opnsense

[linuxfreak]

Hello,

i am trying to connect a linux bridge with multiple vlans to my opnsense firewall.
I read many threads, blogs and looked youtube tutorials. But i can't find what iam doing wrong.
I am switching from vmware to proxmox. On my esxi host i installed opnsense for testing and the vlans are working.
For testing i created the vmbr30 and vmbr100 interface. If i assign one of this interfaces to an container or vm it get a connection and an ip from the dhcp server.

My setup :
Zyxel 1920-24 Switch -> HP Microserver Gen 8 -> bond0 with 2NICs -> vmbr0 with vlan aware

My Proxymox config

auto ens1f0
iface ens1f0 inet manual

auto ens1f1
iface ens1f1 inet manual

auto bond0
iface bond0 inet manual
        bond-slaves ens1f0 ens1f1
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer2+3

auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

auto vmbr30
iface vmbr30 inet manual
        bridge-ports bond0.30
        bridge-stp off
        bridge-fd 0

auto vmbr100
iface vmbr100 inet manual
        bridge-ports bond0.100
        bridge-stp off
        bridge-fd 0

All vlans are configure like this :


opnsense network config :

 

[TodorPetkov]

Can you try to create/change network interfaces for OPNsense like this:

 

[linuxfreak]

I create a container and connect vmbr0 with the vlan id 30 but they get no ip addr.

 

[mmidgett]

Turn off bridge VLAN aware if your tagging on the NIC inside proxmomx. Having a VLAN-aware bridge is for when you tag internally on the interface of your VM inside OS. This bit me when I moved from OpenVswitch to Linux bridges.

 

[linuxfreak]

I switch to OVS now it works

 

[mmidgett]

Ok great, but you didn't need to use OVS to get this to work. Just uncheck the box for VLAN aware and you would have been golden.