Networking, portforwarding

PeterMarcusH.

Member
Apr 5, 2019
99
3
13
29
Hello guys :),

Im hosting a VM with windows and wanted to have a teamspeak server running. Since i know which ports to open, i simply thought to open cmd i my windows VM and portforward those ports? What i've seen and read, people want to create the following (see Capture.PNG).

-When i change the networking device for the VM to use vmbr3...my VM doesnt have any internet and can use the web?...what am i doing wrong? :/

/Thank you in advance!
 

Attachments

  • Capture.PNG
    Capture.PNG
    53.2 KB · Views: 23
vmbr3 has bridge-ports none. So it doesn't connect to any physical interface. And it is on the same network as vmbr0.

It isn't clear to me why you even need NAT here. Both addresses are rfc1918 private addresses so your gateway must be doing NAT to the internet. If you want the VM to be visible from the internet you need to forward the ports there. If you just want it to be visible on your LAN, just don't block those ports.
 
Last edited:
vmbr3 has bridge-ports none. So it doesn't connect to any physical interface. And it is on the same network as vmbr0.

It isn't clear to me why you even need NAT here. Both addresses are rfc1918 private addresses so your gateway must be doing NAT to the internet. If you want the VM to be visible from the internet you need to forward the ports there. If you just want it to be visible on your LAN, just don't block those ports.
Thank you for replying BobhWasatch :). Im pretty much a noob when it comes to this networking :/. The only thing i want is to portforward the listed ports to my specifik VM...and im pretty much clueless and just following what i read. If you maybe could tell me in what direction to look for the needed information or provide me with some more details id be forever greatful :D
 
Thank you for replying BobhWasatch :). Im pretty much a noob when it comes to this networking :/. The only thing i want is to portforward the listed ports to my specifik VM...

The port forwarding discussions on this forum are typically a setup where the Proxmox host is co-located at a data center and only has one public IP for multiple VM's. So it has to do the job a gateway router would normally do. In that scenario if you want to make services available to the Internet you have to do NAT and port forwarding on the Proxmox host. Most home or small office setups won't need to mess with that.

The "vmrbr0" device is a bridge. It is as if your VM's and the Proxmox host and the LAN the host sits on were all plugged into a physical switch you got from Amazon. Only difference is that it is "virtual", done in software. Then you give each VM an IP on the network and they can all talk to each other and also other devices on the network.

For instance, in my home network I have a Proxmox host at 192.168.1.9. The VM's are 192.168.1.10-20. My gateway router is 192.168.1.1. It has a switch with a bunch of ports, one of which has the Proxmox host plugged in along with other stuff like a networked printer.

If I hook up my Chromebook to the wifi, it gets a temporary address of let's say 192.168.1.135. I can then access the VM's on my Proxmox server from the Chromebook as if they were regular devices on the network. My DLNA (media) server VM can stream to my Chromebook, or I can use remote desktop to access the Windows 10 VM, and so forth. Likewise, the Windows VM can print to the network printer.

It all works exactly as if I had a bunch of physical PC's connected together. This is the out-of-the-box configuration. No extra setup is required. However, none of these can be reached directly from the Internet because the gateway router blocks that. Which is normally a good thing.

So if your intent is for other devices on the 192.168.87.x network to be able to connect to ports on the VM's running in Proxmox, you don't need port forwarding at all. Just access the IP of the VM and the port directly. Note that in the case of Windows VM's and some Linux distributions a firewall is set up by default in the VM. Just like on a physical PC. You may need to configure that to allow external access.

If your intent is to allow people on the Internet to be able to access those ports, then you need to do the port forwarding on your gateway router, not on Proxmox (and you may still need to fiddle with the firewall in the VM).

Hope this helps.
 
The port forwarding discussions on this forum are typically a setup where the Proxmox host is co-located at a data center and only has one public IP for multiple VM's. So it has to do the job a gateway router would normally do. In that scenario if you want to make services available to the Internet you have to do NAT and port forwarding on the Proxmox host. Most home or small office setups won't need to mess with that.

The "vmrbr0" device is a bridge. It is as if your VM's and the Proxmox host and the LAN the host sits on were all plugged into a physical switch you got from Amazon. Only difference is that it is "virtual", done in software. Then you give each VM an IP on the network and they can all talk to each other and also other devices on the network.

For instance, in my home network I have a Proxmox host at 192.168.1.9. The VM's are 192.168.1.10-20. My gateway router is 192.168.1.1. It has a switch with a bunch of ports, one of which has the Proxmox host plugged in along with other stuff like a networked printer.

If I hook up my Chromebook to the wifi, it gets a temporary address of let's say 192.168.1.135. I can then access the VM's on my Proxmox server from the Chromebook as if they were regular devices on the network. My DLNA (media) server VM can stream to my Chromebook, or I can use remote desktop to access the Windows 10 VM, and so forth. Likewise, the Windows VM can print to the network printer.

It all works exactly as if I had a bunch of physical PC's connected together. This is the out-of-the-box configuration. No extra setup is required. However, none of these can be reached directly from the Internet because the gateway router blocks that. Which is normally a good thing.

So if your intent is for other devices on the 192.168.87.x network to be able to connect to ports on the VM's running in Proxmox, you don't need port forwarding at all. Just access the IP of the VM and the port directly. Note that in the case of Windows VM's and some Linux distributions a firewall is set up by default in the VM. Just like on a physical PC. You may need to configure that to allow external access.

If your intent is to allow people on the Internet to be able to access those ports, then you need to do the port forwarding on your gateway router, not on Proxmox (and you may still need to fiddle with the firewall in the VM).

Hope this helps.
Hello again BobhnWasatch! :) What you wrote made complete sence, and thats also why it puzzles me, that i still cant seem to connect o_O. I've uploaded 4 images of my ports, where the router portforwarding is "well" know to me, and have hosted many things before, so im sure the error i somewhere in these images :confused:.

- Thank you for your patience
 

Attachments

  • HW.PNG
    HW.PNG
    11.3 KB · Views: 32
  • ipconfig.PNG
    ipconfig.PNG
    102.8 KB · Views: 32
  • ports.PNG
    ports.PNG
    22.4 KB · Views: 31
  • vmbr0Confg.PNG
    vmbr0Confg.PNG
    21.8 KB · Views: 31
FIXED!!
Setting the network Device (autostart: Yes) and rebooting :):):)...many times thank you bobhWasatch!
 

Attachments

  • Capture.PNG
    Capture.PNG
    21.6 KB · Views: 27
Last edited:

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!