I've been trying to setup a laptop with Proxmox for working on the road.
I have no bridge configured, only a WiFi interface. The laptop is a member of my home development cluster, and everything seems to work perfectly.
The WiFi interface on the laptop and the vmbr0 interfaces on the other cluster members are in the 192.168.1.0/24 subnet.
I setup a simple SDN zone with a 192.168.2.0/24 subnet. A VM on one of the other nodes works perfectly (except I had to manually change /etc/resolv.conf to point to 192.168.1.1 instead of 192.168.2.1 -- DHCP address assignment is working correctly though)
I can SSH into that VM from the host node, and traffic from inside the VM can go out to the internet.
On my laptop, both a container and a VM can't reach the internet, though I can SSH in from my laptop.
What should I be checking? I note that the iptables configuration is only NATting and not masquerading. Wouldn't this be causing the WiFi router to drop the packets from sources other than the laptop itself...?
Some config:
On a node that works:
On the laptop that doesn't work:
I have no bridge configured, only a WiFi interface. The laptop is a member of my home development cluster, and everything seems to work perfectly.
The WiFi interface on the laptop and the vmbr0 interfaces on the other cluster members are in the 192.168.1.0/24 subnet.
I setup a simple SDN zone with a 192.168.2.0/24 subnet. A VM on one of the other nodes works perfectly (except I had to manually change /etc/resolv.conf to point to 192.168.1.1 instead of 192.168.2.1 -- DHCP address assignment is working correctly though)
I can SSH into that VM from the host node, and traffic from inside the VM can go out to the internet.
On my laptop, both a container and a VM can't reach the internet, though I can SSH in from my laptop.
What should I be checking? I note that the iptables configuration is only NATting and not masquerading. Wouldn't this be causing the WiFi router to drop the packets from sources other than the laptop itself...?
Some config:
On a node that works:
Code:
colin@echidna:~$ cat /etc/network/interfaces.d/sdn
#version:9
auto vnet0
iface vnet0
address 192.168.2.1/24
post-up iptables -t nat -A POSTROUTING -s '192.168.2.0/24' -o vmbr0 -j SNAT --to-source 192.168.1.50
post-down iptables -t nat -D POSTROUTING -s '192.168.2.0/24' -o vmbr0 -j SNAT --to-source 192.168.1.50
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
bridge_ports none
bridge_stp off
bridge_fd 0
ip-forward on
On the laptop that doesn't work:
Code:
colin@lip:~$ cat /etc/network/interfaces.d/sdn
#version:9
auto vnet0
iface vnet0
address 192.168.2.1/24
post-up iptables -t nat -A POSTROUTING -s '192.168.2.0/24' -o wlp2s0 -j SNAT --to-source 192.168.1.62
post-down iptables -t nat -D POSTROUTING -s '192.168.2.0/24' -o wlp2s0 -j SNAT --to-source 192.168.1.62
post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
bridge_ports none
bridge_stp off
bridge_fd 0
ip-forward on