Networking problem at Hetzner

[decibel83]

Hi.
I'm configuring a Proxmox VE on an Hetzner EQ server.
I activated one additional IP address to use on the virtual machine.

123.123.123.66 is the main IP address of the EQ server, and 123.123.123.93 is the additional IP address for the virtual machine.

Reading this document http://wiki.hetzner.de/index.php/Proxmox_VE/en I configured my Proxmox VE as following:

# network interface settings
auto lo
iface lo inet loopback


auto eth0
iface eth0 inet static
        address  123.123.123.66
        netmask  255.255.255.224
        broadcast  123.123.123.95
        gateway  123.123.123.65
        pointopoint 123.123.123.65
        post-up mii-tool -F 100baseTx-FD eth0


auto vmbr0
iface vmbr0 inet static
        address  123.123.123.66
        netmask  255.255.255.224
        broadcast  123.123.123.95
        bridge_ports none
        bridge_stp off
        bridge_fd 0
        up ip route add 123.123.123.93/32 dev vmbr0

I configured the virtual machine (CentOS 5.8) as following:
Interface: eth0 bridged with vmbr0
The MAC address of eth0 is the MAC address that Hetzner configured me in its Robot for the additional IP address.
IP address: 123.123.123.93
Netmask: 255.255.255.224
Gateway: 123.123.123.65

The virtual machine can ping the host machine (123.123.123.66) but it cannot reach Internet. The routing seems to be configured well:

Destination

Destination	Gateway	Genmask	Flags	Metric	Ref	Use	Iface
176.9.17.64	0.0.0.0	255.255.255.224	U	0	0	0	eth0
169.254.0.0	0.0.0.0	255.255.0.0	U	0	0	0	eth0
0.0.0.0	176.9.17.65	0.0.0.0	UG	0	0	0	eth0

Could you help me to find where I'm wrong, please?

Thank you very much for your help!
Bye.

 

[TheReelaatiiv]

Replace eth0 with this:

auto eth0
iface eth0 inet manual

Sent from my GT-I9100 using Tapatalk

 

[decibel83]

Thank you very much. I will try.

A question: is it OK that vmbr0 is not bridged to eth0 (bridge_ports none)?
How it can reach the Internet?

 

[TheReelaatiiv]

No its not. You must bridge it with bridge_ports eth0

Sent from my GT-I9100 using Tapatalk

 

[decibel83]

No its not. You must bridge it with bridge_ports eth0

Thank you very much, I solved my problem.
I was wrong with the "bridge_ports none" declaration as you can see in http://wiki.hetzner.de/index.php/Proxmox_VE/en.
I noticed Hetzner about the error in the documentation.

Thank you very much,
bye.

 

[tsajuk]

I was wrong with the "bridge_ports none" declaration as you can see in http://wiki.hetzner.de/index.php/Proxmox_VE/en.
I noticed Hetzner about the error in the documentation.

The description in the Hetzner-Wiki isn't an error.
It's generally not a good idea to link your bridge with the external interface directly. The bridged setup does not work in all locations at Hetzner.

It is far more reliable to use a routed setup. As you seem to have only one additional address, this should not be a real administrative problem.

have a look here http://forum.hetzner.de/wbb2/thread.php?threadid=13482&hilightuser=2091 for KVM machines

You don't need any bridge for ovz-containers