Nested virtualisation, got IP but no internet or network

[brenrich101]

I want to try Proxmox before committing a large chunk of cash to this (want to build a HA cluster with Ceph in the end). I'm as new as can be, I do have a little experience with Hyper-V and ESXi and VMware Workstation, so not a complete amateur when it comes to the virtualisation concept.

Currently use ESXi on a Dell VRTX, working well but coming up for replacement in the next year or so and like everyone the boss wants to keep costs low, so looking at Proxmox.

I have installed Promox as a VM itself on ESXi - working well, networking works, can access the UI, all good. Created a Windows VM on Proxmox assuming that the network on the VM would pass through Proxmox, upstream to ESXi, and then upstream to my network. This sort of works - the Windows VM is set to DHCP and does get an IP address on my physical network, however the only thing I can ping from the Windows VM is the Proxmox host itself (using the physical network's IP address), and from the physical network I can see that the Windows VM has a DHCP lease, however I can't ping it.

Physical network: 10.130.0.0/22 - can ping everything from here except the Windows VM
ESXi host: 10.130.3.186/22 - can ping everything from here except the Windows VM
Promox VM: 10.130.2.113/22 - can ping everything from here
Windows VM: 10.130.0.76/22 - can only ping the Proxmox VM

I'm guessing it's either some sort of bridging issue, or possibly firewall. It's a fresh Proxmox install, not fiddled with any settings (yet!).

Do you have any insight as to what might be causing this (I'm aware it could just be a product of my setup)? Thanks in advance

 

[bobmc]

I would guess it's a gateway issue as everything is on the same subnet. Do the proxmox host and the Windows VM use the same gateway? Can they both ping the gateway?

 

[berdux]

I have the exact same issue, all my VMs and CTs are assigned IP from my DHCP, but can only ping between them and the proxmox IP.
They can't ping anything else not even the ESXI IP nor the router itself.

Proxmox itself can ping everything, all of my VMs and CTs and the outside world.
So it appears to be a layer3 issue as layer 2 works.

I have disabled proxmox firewall but it still is not working.

On the logs i see this lines on all of my CTs:
May 17 08:26:05 proxmox kernel: device fwln115i0 entered promiscuous mode
May 17 08:26:05 proxmox kernel: fwbr115i0: port 1(fwln115i0) entered blocking state
May 17 08:26:05 proxmox kernel: fwbr115i0: port 1(fwln115i0) entered forwarding state
May 17 08:26:05 proxmox kernel: fwbr115i0: port 2(veth115i0) entered blocking state
May 17 08:26:05 proxmox kernel: fwbr115i0: port 2(veth115i0) entered disabled state

But they still get assigned IPs from my router when ever their lease expires.

What could be the issue here?

 

[berdux]

For me it was a setting from the ESXI side, inside "vSwitch0" i had to enable "Allow promiscuous mode"