NAT to WiFi interface not working with simple SDN

Colin 't Hart

Well-Known Member
Jan 20, 2017
50
4
48
51
Frösön, Sweden
www.hiawathaavenue.com
I've been trying to setup a laptop with Proxmox for working on the road.

I have no bridge configured, only a WiFi interface. The laptop is a member of my home development cluster, and everything seems to work perfectly.
The WiFi interface on the laptop and the vmbr0 interfaces on the other cluster members are in the 192.168.1.0/24 subnet.

I setup a simple SDN zone with a 192.168.2.0/24 subnet. A VM on one of the other nodes works perfectly (except I had to manually change /etc/resolv.conf to point to 192.168.1.1 instead of 192.168.2.1 -- DHCP address assignment is working correctly though)
I can SSH into that VM from the host node, and traffic from inside the VM can go out to the internet.

On my laptop, both a container and a VM can't reach the internet, though I can SSH in from my laptop.

What should I be checking? I note that the iptables configuration is only NATting and not masquerading. Wouldn't this be causing the WiFi router to drop the packets from sources other than the laptop itself...?

Some config:
On a node that works:
Code:
colin@echidna:~$ cat /etc/network/interfaces.d/sdn
#version:9

auto vnet0
iface vnet0
    address 192.168.2.1/24
    post-up iptables -t nat -A POSTROUTING -s '192.168.2.0/24' -o vmbr0 -j SNAT --to-source 192.168.1.50
    post-down iptables -t nat -D POSTROUTING -s '192.168.2.0/24' -o vmbr0 -j SNAT --to-source 192.168.1.50
    post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
    post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
    bridge_ports none
    bridge_stp off
    bridge_fd 0
    ip-forward on

On the laptop that doesn't work:
Code:
colin@lip:~$ cat /etc/network/interfaces.d/sdn
#version:9

auto vnet0
iface vnet0
    address 192.168.2.1/24
    post-up iptables -t nat -A POSTROUTING -s '192.168.2.0/24' -o wlp2s0 -j SNAT --to-source 192.168.1.62
    post-down iptables -t nat -D POSTROUTING -s '192.168.2.0/24' -o wlp2s0 -j SNAT --to-source 192.168.1.62
    post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1
    post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1
    bridge_ports none
    bridge_stp off
    bridge_fd 0
    ip-forward on
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!