Not possible to tag interface in VLAN 1

[jckubiaczyk]

Hello,

When I install the latest update of proxmox, my interface Tagged in VLAN 1 as removed of my hardware list

proxmox-ve: 4.2-48 (running kernel: 4.4.6-1-pve)
pve-manager: 4.2-2 (running version: 4.2-2/725d76f0)

I want to recreate this interface, it's not possible :

Parameter verification failed. (400)

net0: invalid format - unable to parse network options

and a modification in command line config file : xxx.conf not work

What can be done ?

Tanks

 

[Ilya Pollyak]

I've got the same problem on the same versions

proxmox-ve: 4.2-48 (kernel-4.4.6-1-pve)
pve-manager: 4.2-2 (4.2-2/725d76f0)

/etc/network/interfaces:

auto vmbr0
iface vmbr0 inet static
address 10.15.252.104
netmask 255.255.255.0
gateway 10.15.252.254
bridge_ports bond0
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes

GUI: while creating network interface from VM configuration menu can't select vlan tag 1

is it a feature or a bug?

the only way of using vlan 1 i've found - is to create vlan interface and then create bridge for it:

auto vlan1
iface vlan1 inet manual
vlan_raw_device bond0

auto vmbr1
iface vmbr1 inet manual
bridge_ports vlan1

But I don't think it's a right solution

 

[jckubiaczyk]

It's good idea, to resolve temporally my problem

I create a new Linux Bridge interface and tag directly my interface

auto vmbr4
iface vmbr4 inet manual
bridge_ports bond0.1
bridge_stp off
bridge_fd 0

It's another solution

 

[Ilya Pollyak]

I've found an explanation of such proxmox behavior:

https://bugzilla.proxmox.com/show_bug.cgi?id=883

Wolfgang Bumiller 2016-03-30 14:09:11 CEST

Currently neither container nor KVM should be assignable a vlan ID of 1. The reason for this is that this is the default PVID for linux bridges. And now that we provide all 3 variants (bridge per flan / vlan-aware linux bridge / OVS) it seemed reasonable to stay consistent there to avoid issues with mixed configurations. (Basically we assume vlan id 1 to be 'reserved', as the GUI doesn't check what type of bridge the network is on).

so it's not a bug, but a feature

 

[jckubiaczyk]

Hello iilya

For my it's not features, it's a downgrade.

My not tagged vlan is 1024 or 1025 for the security. ☺

I tag directly bond interface. That's ok