Hi,
My ct has no network acces :
- from fresh jessie install , i add proxmox-ve 4.1-37
- I have 3 cards on host
- eth0 : 10.200.83.85
- eth1 : 10.200.156.95
- eth2 : 10.200.19.86 (this one will be use as vmbr2)
For host :
the first (the only one for now) ct (101) will have the 10.200.19.88 ip
/etc/pve/lxc/101.conf
active network in proc :
part of /etc/network/interfaces for host : :
I make lot's of change, i'm not remenber all, maybe i do good things and (very) bad things, like
- route, actually i have in CT-0
- route in CT-101
- iptables
My ct has no network acces :
- from fresh jessie install , i add proxmox-ve 4.1-37
- I have 3 cards on host
- eth0 : 10.200.83.85
- eth1 : 10.200.156.95
- eth2 : 10.200.19.86 (this one will be use as vmbr2)
For host :
- i can ping all other machine in the same lan
- i can ping the CT
- i can't ping www.google.fr
- i can ping the host
- i can't ping the other machine in the same lan
- i can't ping www.google.fr
the first (the only one for now) ct (101) will have the 10.200.19.88 ip
/etc/pve/lxc/101.conf
arch: amd64
cpulimit: 1
cpuunits: 1024
hostname: gv-batchqlf01-prp
memory: 512
net2: bridge=vmbr2,hwaddr=3A:65:34:35:64:37,ip=10.200.19.88/27,name=eth2,type=veth
ostype: debian
rootfs: AllCT:101/vm-101-disk-1.raw,size=9G
swap: 512
cpulimit: 1
cpuunits: 1024
hostname: gv-batchqlf01-prp
memory: 512
net2: bridge=vmbr2,hwaddr=3A:65:34:35:64:37,ip=10.200.19.88/27,name=eth2,type=veth
ostype: debian
rootfs: AllCT:101/vm-101-disk-1.raw,size=9G
swap: 512
active network in proc :
for i in /proc/sys/net/ipv4/conf/*/forwarding /proc/sys/net/ipv4/conf/*/proxy_arp ; do echo "$(cat $i) = $i" ; done | sort
0 = /proc/sys/net/ipv4/conf/all/proxy_arp
0 = /proc/sys/net/ipv4/conf/default/proxy_arp
0 = /proc/sys/net/ipv4/conf/eth0/proxy_arp
0 = /proc/sys/net/ipv4/conf/eth1/proxy_arp
0 = /proc/sys/net/ipv4/conf/lo/proxy_arp
0 = /proc/sys/net/ipv4/conf/veth101i2/proxy_arp
0 = /proc/sys/net/ipv4/conf/vmbr2/proxy_arp
1 = /proc/sys/net/ipv4/conf/all/forwarding
1 = /proc/sys/net/ipv4/conf/default/forwarding
1 = /proc/sys/net/ipv4/conf/eth0/forwarding
1 = /proc/sys/net/ipv4/conf/eth1/forwarding
1 = /proc/sys/net/ipv4/conf/eth2/forwarding
1 = /proc/sys/net/ipv4/conf/eth2/proxy_arp
1 = /proc/sys/net/ipv4/conf/lo/forwarding
1 = /proc/sys/net/ipv4/conf/veth101i2/forwarding
1 = /proc/sys/net/ipv4/conf/vmbr2/forwarding
0 = /proc/sys/net/ipv4/conf/all/proxy_arp
0 = /proc/sys/net/ipv4/conf/default/proxy_arp
0 = /proc/sys/net/ipv4/conf/eth0/proxy_arp
0 = /proc/sys/net/ipv4/conf/eth1/proxy_arp
0 = /proc/sys/net/ipv4/conf/lo/proxy_arp
0 = /proc/sys/net/ipv4/conf/veth101i2/proxy_arp
0 = /proc/sys/net/ipv4/conf/vmbr2/proxy_arp
1 = /proc/sys/net/ipv4/conf/all/forwarding
1 = /proc/sys/net/ipv4/conf/default/forwarding
1 = /proc/sys/net/ipv4/conf/eth0/forwarding
1 = /proc/sys/net/ipv4/conf/eth1/forwarding
1 = /proc/sys/net/ipv4/conf/eth2/forwarding
1 = /proc/sys/net/ipv4/conf/eth2/proxy_arp
1 = /proc/sys/net/ipv4/conf/lo/forwarding
1 = /proc/sys/net/ipv4/conf/veth101i2/forwarding
1 = /proc/sys/net/ipv4/conf/vmbr2/forwarding
part of /etc/network/interfaces for host : :
iface eth2 inet static
address 10.200.19.86
netmask 255.255.255.224
network 10.200.19.64
gateway 10.200.19.65
auto vmbr2
iface vmbr2 inet static
address 10.200.19.86
netmask 255.255.255.224
gateway 10.200.19.65
#bridge_ports none
bridge_ports eth2
bridge_stp off
bridge_fd 0
address 10.200.19.86
netmask 255.255.255.224
network 10.200.19.64
gateway 10.200.19.65
auto vmbr2
iface vmbr2 inet static
address 10.200.19.86
netmask 255.255.255.224
gateway 10.200.19.65
#bridge_ports none
bridge_ports eth2
bridge_stp off
bridge_fd 0
I make lot's of change, i'm not remenber all, maybe i do good things and (very) bad things, like
- route, actually i have in CT-0
route -n | grep -e vmbr2 -e 0.0.0.0 -e default
0.0.0.0 10.200.19.65 0.0.0.0 UG 0 0 0 vmbr2
10.200.19.64 0.0.0.0 255.255.255.224 U 0 0 0 vmbr2
10.200.83.64 0.0.0.0 255.255.255.224 U 0 0 0 eth0
10.200.156.64 0.0.0.0 255.255.255.192 U 0 0 0 eth1
0.0.0.0 10.200.19.65 0.0.0.0 UG 0 0 0 vmbr2
10.200.19.64 0.0.0.0 255.255.255.224 U 0 0 0 vmbr2
10.200.83.64 0.0.0.0 255.255.255.224 U 0 0 0 eth0
10.200.156.64 0.0.0.0 255.255.255.192 U 0 0 0 eth1
- route in CT-101
10.200.19.64 * 255.255.255.224 U 0 0 0 eth2
- iptables
iptables-save | grep -v -e "#"
*nat
REROUTING ACCEPT [8:504]
:INPUT ACCEPT [8:504]
:OUTPUT ACCEPT [5:300]
OSTROUTING ACCEPT [5:300]
-A POSTROUTING -o vmbr2 -j MASQUERADE
COMMIT
*mangle
REROUTING ACCEPT [599:277933]
:INPUT ACCEPT [599:277933]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [524:366156]
OSTROUTING ACCEPT [524:366156]
COMMIT
*filter
:INPUT ACCEPT [599:277933]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [524:366156]
COMMIT
*nat
REROUTING ACCEPT [8:504]
:INPUT ACCEPT [8:504]
:OUTPUT ACCEPT [5:300]
OSTROUTING ACCEPT [5:300]
-A POSTROUTING -o vmbr2 -j MASQUERADE
COMMIT
*mangle
REROUTING ACCEPT [599:277933]
:INPUT ACCEPT [599:277933]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [524:366156]
OSTROUTING ACCEPT [524:366156]
COMMIT
*filter
:INPUT ACCEPT [599:277933]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [524:366156]
COMMIT