Need help with VLANs

[Elfy]

Hey all, I have a relatively uncomplicated setup but I can't for the life of me figure out how to pass tagged traffic from a VM through Proxmox. Probably something dumb but I'd love another set of eyes to help me debug.

I have 2 nics on my server: eno1 and eno2.

I want untagged VLAN11 (11U) to pass through eno1, and tagged VLAN10 & VLAN12 (10T,12T) to pass through eno2.

I've tagged the switchports and set up the VLANs in the firewall respectively (and have tested with another device).

Here's my /etc/network/interfaces:

Spoiler: /etc/network/interfaces

auto lo
iface lo inet loopback

iface eno1 inet manual

iface eno2 inet manual

auto vmbr1
iface vmbr1 inet static
        address 10.11.0.4/28
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
#Storage

auto vmbr0
iface vmbr0 inet manual
        bridge-ports eno2
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#Servers

auto vlan10
iface vlan10 inet static
        address 10.10.0.4/24
        gateway 10.10.0.1
        vlan-raw-device eno2
#Storage

auto vlan12
iface vlan12 inet static
        address 10.12.0.4/28
        vlan-raw-device eno2
#Cluster

How it appears in GUI:


Each proxmox host is able to ping the respective gateways (and each other) at 10.10.0.1, 10.11.0.1, 10.12.0.1 respectively.


I've added a NIC to a VM, and tagged it for 10:


However from within the VM I cannot ping anything on the 10.10.0.0/24 network:


Can anyone help me debug?

 

[spirit]

if you use vlanaware bridge and you need ip address on proxmox host on specific vlan,

you need to do

auto vlan10
iface vlan10 inet static
        address 10.10.0.4/24
        gateway 10.10.0.1
        vlan-raw-device vmbr0
#Storage

auto vlan12
iface vlan12 inet static
        address 10.12.0.4/28
        vlan-raw-device vmbr0
#Cluster

or

auto vmbr0.10
iface vmbr0.10 inet static
        address 10.10.0.4/24
        gateway 10.10.0.1

#Storage

auto vmbr0.12
iface vmbr0.12 inet static
        address 10.12.0.4/28
#Cluster

With you current config, when you define the raw-device eno2 for vlan10, the traffic is going to eno2.10 , and never reach the vmbr0.

 

[Elfy]

@spirit That did the trick, thanks for explaining! Simple solution.