OVS VLAN Tagging


Jan 16, 2019
I'm configuring 5.3 version.
I've setup bond0 ont 2 NIC for management : OK. There is no VLAN because upstream switch is in access on the management vlan.

I want to use 2 other NICS to procvide Storage replication. These NICS are connected to upstream switches on ports configured as trunk 802.1Q.
For the first step, I set up : OVS Bond. This OVS Bond is in an OVSBridge.
I've installed ovs zswitching using apt-get command.

Then I set up an OVSIntPort on vlan 300.

This conf was the same on all of the 3 hosts in my cluster.
But, there is no host able to ping the others using this OVSPort. I think the packet aren't forwared through the OVS Bridge.

Can you help me ?

I've changed configuration to use linux bridges instead of OVS.
Here is the content of interfaces file (on the nodes - just ip address is changed):
auto lo
iface lo inet loopback

auto eno53
iface eno53 inet manual

auto eno54
iface eno54 inet manual

auto eno49
iface eno49 inet manual
        bridge_vids 2-4096

auto eno50
iface eno50 inet manual
        bridge_vids 2-4096

auto bond0
iface bond0 inet static
        bond-slaves eno53 eno54
        bond-miimon 100
        bond-mode active-backup

auto bond1
iface bond1 inet manual
        bond-slaves eno49 eno50
        bond-miimon 100
        bond-mode active-backup

auto vmbr0
iface vmbr0 inet static
        bridge-ports bond1.300
        bridge-stp off

Now, when I use tcpdump -nn -i bond1.300, I can see STP packets from my upstream switches.
But there is no packet between the 2 nodes whe I ping each bond1.300 address.
Can you explain to me what's wrong ?

the bridge_vids belong to the bridge-stanza - not the ethernet stanza - and you need to make the bridge VLAN-aware - if you need that.

If you want to have a tagged bond-interface it should work if you just drop the `bridge_vids` lines.
- please try to do that - reboot and test again.

Regarding the packets not going between the nodes - check on the sending and on the receiving node whether the ping goes out and whether it arrives - like:
`tcpdump -envi bond1` (the packets should show up as having a 300 VLAN-tag.

If it's leaving the source box but not arriving at the destination - it could be that the switch is misconfigured (or simply has vlan 300 as default vlan/untagged)

Hope this helps!
I've just tried to remove bridge-vids lines.
The result is KO.
The bond1.300 interface still see STP packets from my uptsream switches.
When I try to ping from the node I dump the packet, there nothing displayed. It seems that the packets don't go out from the node.
I assume you try to ping something in `ping`..

do you see anything if you sniff on bond1? (or on both ethernet-interfaces)?

please post the output of:
`ip link`
`ip addr`
`ip route`


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!