I have the same problem.
I have 2 HOSTS configuration as a cluster (pve-1 is 172.16.140.141 and pve-2 is 172.16.140.142)
Each HOST can ping anything. But the VEs can ONLY ping their respective HOST, but cannot ping anything beyond (including the gateway or the other HOST)
Here are my settings
HOST CONFIGURATION (pve-1 ... i.e. first HOST):
# ip address list
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:0c:29:05:12:66 brd ff:ff:ff:ff:ff:ff
inet6 fe80::20c:29ff:fe05:1266/64 scope link
valid_lft forever preferred_lft forever
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 00:0c:29:05:12:66 brd ff:ff:ff:ff:ff:ff
inet 172.16.140.141/24 brd 172.16.140.255 scope global vmbr0
inet6 fe80::20c:29ff:fe05:1266/64 scope link
valid_lft forever preferred_lft forever
4: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/void
inet6 fe80::1/128 scope link
valid_lft forever preferred_lft forever
5: veth102.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 00:18:51:5a:19:84 brd ff:ff:ff:ff:ff:ff
inet6 fe80::218:51ff:fe5a:1984/64 scope link
valid_lft forever preferred_lft forever
# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.16.140.0 0.0.0.0 255.255.255.0 U 0 0 0 vmbr0
0.0.0.0 172.16.140.2 0.0.0.0 UG 0 0 0 vmbr0
# ping
www.google.com
PING www-notmumbai.l.google.com (72.14.213.106) 56(84) bytes of data.
64 bytes from pv-in-f106.1e100.net (72.14.213.106): icmp_seq=1 ttl=128 time=114 ms
64 bytes from pv-in-f106.1e100.net (72.14.213.106): icmp_seq=2 ttl=128 time=97.6 ms
VE CONFIGURATION (ve-1 inside pve-1):
# ip address list
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: venet0: <BROADCAST,POINTOPOINT,NOARP> mtu 1500 qdisc noop state DOWN
link/void
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether c2:cd:1a:aa:5f:1d brd ff:ff:ff:ff:ff:ff
inet 172.16.140.152/24 brd 172.16.140.255 scope global eth0
inet6 fe80::c0cd:1aff:feaa:5f1d/64 scope link
valid_lft forever preferred_lft forever
# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.16.140.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 172.16.140.2 0.0.0.0 UG 100 0 0 eth0
# ping 172.16.140.141
PING 172.16.140.141 (172.16.140.141) 56(84) bytes of data.
64 bytes from 172.16.140.141: icmp_req=1 ttl=64 time=3.38 ms
64 bytes from 172.16.140.141: icmp_req=2 ttl=64 time=0.098 ms
# ping 172.16.140.142
PING 172.16.140.142 (172.16.140.142) 56(84) bytes of data.
From 172.16.140.152 icmp_seq=1 Destination Host Unreachable
From 172.16.140.152 icmp_seq=2 Destination Host Unreachable
From 172.16.140.152 icmp_seq=3 Destination Host Unreachable
# ping 172.16.140.2
PING 172.16.140.2 (172.16.140.2) 56(84) bytes of data.
From 172.16.140.152 icmp_seq=2 Destination Host Unreachable
From 172.16.140.152 icmp_seq=3 Destination Host Unreachable
From 172.16.140.152 icmp_seq=4 Destination Host Unreachable
What am i missing?