Linux VLAN Interface On Host Prevents Guest Traffic on Same VLAN

virtualbitz

Member
Nov 6, 2020
39
4
13
33
I have a host with a Linux Bond that I use for inband management and guest traffic. I have a Linux VLAN interface as part of the bridge which I use to access the host. All is well with this part of the config and everything works as expected.

The trouble starts when I have a guest that I want to run on the same VLAN as the host's Linux VLAN interface (VLAN 15). The guest cannot communicate across the bridge at all when a tag of 15 is applied to its VirtIO NIC. PCAPs from the guest show zero traffic coming in.

Code:
root@Ghost:~# cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

iface enx62b2b50d0b96 inet manual

iface enp71s0 inet manual

iface enx12e68fe61287 inet manual

iface enx763d12dc4f29 inet manual

iface enp72s0 inet manual

iface enxf2f20b01e65e inet manual

auto enp69s0f1
iface enp69s0f1 inet manual

iface enp74s0 inet manual

iface enp73s0 inet manual

iface enx56bcb03f2379 inet manual

auto enp69s0f0
iface enp69s0f0 inet manual

auto bond0
iface bond0 inet manual
        bond-slaves enp69s0f0 enp69s0f1
        bond-miimon 100
        bond-mode active-backup
        bond-primary enp69s0f1

auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

auto vlan15
iface vlan15 inet static
        address 192.168.15.75/24
        gateway 192.168.15.1
        vlan-raw-device bond0

auto vlan11
iface vlan11 inet static
        address 192.168.11.75/24
        vlan-raw-device bond0
 
I have a host with a Linux Bond that I use for inband management and guest traffic. I have a Linux VLAN interface as part of the bridge which I use to access the host. All is well with this part of the config and everything works as expected.

The trouble starts when I have a guest that I want to run on the same VLAN as the host's Linux VLAN interface (VLAN 15). The guest cannot communicate across the bridge at all when a tag of 15 is applied to its VirtIO NIC. PCAPs from the guest show zero traffic coming in.

Code:
root@Ghost:~# cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

iface enx62b2b50d0b96 inet manual

iface enp71s0 inet manual

iface enx12e68fe61287 inet manual

iface enx763d12dc4f29 inet manual

iface enp72s0 inet manual

iface enxf2f20b01e65e inet manual

auto enp69s0f1
iface enp69s0f1 inet manual

iface enp74s0 inet manual

iface enp73s0 inet manual

iface enx56bcb03f2379 inet manual

auto enp69s0f0
iface enp69s0f0 inet manual

auto bond0
iface bond0 inet manual
        bond-slaves enp69s0f0 enp69s0f1
        bond-miimon 100
        bond-mode active-backup
        bond-primary enp69s0f1

auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

auto vlan15
iface vlan15 inet static
        address 192.168.15.75/24
        gateway 192.168.15.1
        vlan-raw-device bond0

auto vlan11
iface vlan11 inet static
        address 192.168.11.75/24
        vlan-raw-device bond0
I also faced the problem that there was no network.
Delete vlan15 and create linux vlan interface: vmbr0.15 and then it will work

Settings in my proxmox node (i have use vlan 30)
Code:
auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

auto vmbr0.30
iface vmbr0.30 inet static
        address 10.10.30.13/26
        gateway 10.10.30.1
 
Last edited:
  • Like
Reactions: virtualbitz
I was able to get this to work through the CLI. Is is possible to do this through the GUI?
naturally yes.
In System/Network > New > Linux VLAN
Name vmbr0.15 (15 is your virtual network tag)
And if you need an ip address in the interface, set ipv4.
Vlan raw device will be set automatically to vmrb0 and VLAN Tag will also automatically be assigned 15
1680339746556.png
 
Just a note, in order to get this working please be aware that you might need to restart the vm / container to get this working.

The bellow config works fine but the machine's needed a reboot in order to work.

Code:
auto lo
iface lo inet loopback

iface enp3s0f0 inet manual

iface enp4s0 inet manual

auto enp3s0f1
iface enp3s0f1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.x.x/24
        bridge-ports enp3s0f0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

auto vmbr0.110
iface vmbr0.110 inet static
       address 192.168.x.x/24
       gateway 192.168.x.x
 
Just a note, in order to get this working please be aware that you might need to restart the vm / container to get this working.

The bellow config works fine but the machine's needed a reboot in order to work.

Code:
auto lo
iface lo inet loopback

iface enp3s0f0 inet manual

iface enp4s0 inet manual

auto enp3s0f1
iface enp3s0f1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.x.x/24
        bridge-ports enp3s0f0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

auto vmbr0.110
iface vmbr0.110 inet static
       address 192.168.x.x/24
       gateway 192.168.x.x
Interesting, did ifreload -a not work?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!