LLDP between VM and Switches

MaKo1978

New Member
May 7, 2025
1
0
1
Hi Experts,

I'm new to Proxmox and I just migrated my ESXi Hypervisor to PVE after all the Broadcom confusions ...
Bottom Line: I should have done that much earlier!

At least I have only one issue that I wasn't yet able to solve with this forum or other sources I found: LLDP between VM and Switches.

First my setup:
LAN <-> eno1 <-> vmbr0 <-> vmbr0.XX <-> vmbrXX <-> VM

To clarify this:
The hardware NIC eno1 is connected to the LAN.
vmbr0 is the bridge between eno1 and multiple VLAN interfaces vmbr0.XX
vmbrXX is a bridge between the VLAN interface and the VM

I build this set up to easily choose a vmbrXX interface in VM creation without keeping in mind to select a correct VLAN tag during VM creation.
I also tested it with a VM directly connected to vmbr0 without success.

I have read discussions and articles like https://forum.proxmox.com/threads/lldp-frames-between-vms-using-linux-bridge.95029/

I see the LLDP packets in a tcpdump on eno1 -> good
after doing echo '0x4000' > /sys/class/net/vmbr0/bridge/group_fwd_mask I also see them in a tcpdump on vmbr0.
But I never see them on vmbr0.27 or vmbr27 or on the VM itself.
Even if the VM is directly connected with a VLAN Tag "XX" to vmbr0, I can't see the lldp packets.
I'm pretty sure in ESXi with a vSwitch I was able to see these packets in a VM.
Since LLDP is a L2 protocol, it should be sent also to the VLAN interfaces but for some reason they are not.
I also tried to set echo "0x4000" > /sys/class/net/vmbr0.XX/brport/group_fwd_mask and echo "0x4000" > /sys/class/net/tapXXXiX/brport/group_fwd_mask but also no success.

I installed the lldpd on the PVE host and I was able to see the local lldp packets from the PVE host sent to the VMs but unfortunately I want the hypervisor to be "invisible" to the network.

Any idea if this is possible with PVE and a Linux bridge?

Thanks a lot,
Marco