No access to GUI when using VLANs

[PonyoHam]

Hi all,

This is topic is related to https://forum.proxmox.com/threads/how-do-i-assign-vlans.43948/#post-210768 but as its a different problem I decided to create a new topic.

I'm running proxmox on a Intel NUC with 1 NIC. I'm using pfSense inside proxmox to create VLANs.

Configuration
proxmox
vmbr0
ip 192.168.100.240
subnet 255.255.255.0
gateway 192.168.100.111 (my router)
vlan aware yes

pfsense
vmbr0 configured with the following vlans
wan vlan200 (192.168.100.245)
lan1 vlan10 (172.16.10.111)
lan2 vlan20 (172.16.20.111)

Cisco switch
intel nuc nic connected to trunk port
fa0/1-4 configured as vlan10
fa0/5-8 configured as vlan20
gi0/2 configured as vlan200

Win10 VM inside proxmox
vmbr0 tagged with vlan10

Much to my own surprise after fiddling around a bit I actually got this working. From my physical machine connected to the Cisco switch I can access the router, pfsense and win10 host. Same thing from within the win10 host.

However, I cannot access the proxmox gui. If I look at pfsense's arp table 192.168.100.240 shows up but as assigned to a vlan with the mac incomplete. As proxmox itself isn't being tagged with a vlan I suppose this makes sense.

I created vmbr1 and assigned that with ip 192.168.80.240/24 and assigned it as a second NIC to the win10 host. If I configure a static IP in the 192.168.80.x range I can access the proxmox gui from the host.

Of course this isn't pretty and I want to be able to access the gui directly from a physical machine connected to one of the VLANs.

How can I solve this issue?

 

[spirit]

you can create a vmbr0.xxx interface with vlan tag


iface vmbr0 inet manual
vlan aware yes

iface vmbr0.XXX inet static
addr 192.168.100.240
netmask 255.255.255.0
gateway 192.168.100.111

(where XXX is your vlan)

 

[PonyoHam]

Thanks spirit

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr1 inet manual
        bridge_ports eno1
        bridge_stp off
        bridge_fd 0
        bridge_vlan_aware yes

auto vmbr0.200
iface vmbr0.200 inet static
        address  192.168.100.240
        netmask  255.255.255.0
        gateway  192.168.100.111
        bridge_ports eno1
        bridge_stp off
        bridge_fd 0
        bridge_vlan_aware yes

Are this the correct settings for /etc/network/interfaces?

 

[spirit]

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet manual
        bridge_ports eno1
        bridge_stp off
        bridge_fd 0
        bridge_vlan_aware yes

auto vmbr0.200
iface vmbr0.200 inet static
        address  192.168.100.240
        netmask  255.255.255.0
        gateway  192.168.100.111

vmbr0.200 is like an "management interface" in vmbr0, you must not define bridge_... options i

 

[PonyoHam]

Thanks a million! working perfectly now. I really need to learn more about how Linux handles networking.