PDM Beta VM - Network is not working.

[jpop]

We are running PDM beta as a VM on a Proxmox host and I cannot get basic network functionality. I can't even ping 1.1.1.1, but DNS does resolve despite pings failing to get out to even yahoo.com. This PDM is a freshly installed VM (only running a few days) and is running right next to 26 other machines on the same subnet under the same Proxmox VE host that all can reach the internet without issue. So I'm quite puzzled. Any ideas?

root@dcmgr:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute
       valid_lft forever preferred_lft forever
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether bc:24:11:a1:54:82 brd ff:ff:ff:ff:ff:ff
    altname enp6s18
    altname enxbc2411a15482
    inet 192.168.122.208/24 scope global ens18
       valid_lft forever preferred_lft forever
    inet6 fe80::be24:11ff:fea1:5482/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever

Everything looks good so far.

root@dcmgr:~# ip r
default via 192.168.122.1 dev ens18 proto kernel onlink
192.168.122.0/24 dev ens18 proto kernel scope link src 192.168.122.208

Routes look fine as does DNS resolvers.

root@dcmgr:~# cat /etc/resolv.conf
search knowelltech.net
nameserver 1.1.1.1         # External
nameserver 192.168.10.2    # Internal
nameserver 192.168.122.1   # Default

But as I said at the top, I can't ping by IP, nor by DNS even though it resolves.

root@dcmgr:~# ping google.com
PING google.com (142.250.68.14) 56(84) bytes of data.
^C
--- google.com ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5157ms

 

[dcsapak]

hi,

you probably already checked, but is there a firewall active (e.g. on the PVE host?) that would prevent this traffic?
if not, wha'ts the output of

traceroute google.com

?

 

[jpop]

hi,

you probably already checked, but is there a firewall active (e.g. on the PVE host?) that would prevent this traffic?
if not, wha'ts the output of

traceroute google.com

?

Thanks for replying. I verified that my Proxmox PVE does not have a firewall as it is internally hosted with a dedicated firewall appliance.

192.168.122.1 is my vm gateway
10.71.1.1 is my primary firewall

traceroute to google.com (142.250.68.78), 30 hops max, 60 byte packets
 1  192.168.122.1 (192.168.122.1)  0.294 ms  0.236 ms  0.205 ms
 2  10.71.1.1 (10.71.1.1)  0.248 ms  0.180 ms  0.173 ms
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

My firewall activity shows traffic being allowed:

 

[jpop]

OK I fixed it, but I don't think I should have had to do it this way. I added an explicit outbound firewall rule for my virtual network and am allowing IPv6 now. One of those two changes fixed things. Thanks for helping drive me in the right direction.