New VMs have no connectivity if vlan-awareness is enabled

[fcjb]

Hi there,

if we enable vlan awareness using

ip link set vmbr0 type bridge vlan_filtering 1

newly created VMs (tagged vlan) do not have internet connectivity. Already existing VMs with that same tagged VLAN work fine.

Any ideas?

Kernel: 4.15.18-2-pve
Proxmox: 5-2.10

Thanks in advance

 

[spirit]

you need to defined allowed vlans on physical interfaces.

Why don't you configure vlan aware option in /etc/network/interfaces or through proxmox gui? It's doing it for you (bridge-vids X)

 

[fcjb]

you need to defined allowed vlans on physical interfaces.

Why don't you configure vlan aware option in /etc/network/interfaces or through proxmox gui? It's doing it for you (bridge-vids X)

We're trying to do that on a production system and currently don't want to reboot the system / the networking. I'll give bridge-vids a try, thanks.

 

[spirit]

We're trying to do that on a production system and currently don't want to reboot the system / the networking. I'll give bridge-vids a try, thanks.

ok. (If you upgrade to proxmox6, reload configuration is now supported with ifupdown2)

Note that if you already have vms running with vlan configuration in vm nic, and bridge was not vlan-aware, proxmox create new bridges like "vmbr0vX + eth0.X" for each vlan.

If you enable vlan-aware option on bridge, the new vms vlan will be tagged by proxmox on the vmbr0 directly.
But old vms will still use old vmbr0vX.
That's why maybe it's working for you for old vms. (because nothing have change for them).
And vlan-aware is not working for new vms, because missing bridge-vids on physical interface.

You should really reboot or stop/start old vms/ or change/rechange vlans of the old vmnics to use new vlan-aware bridge.