Perform a ping from VM to another node in the cluster

[truc]

status of the firewall

 

[gfngfn256]

Ping from OTHER nodes in cluster TO the VM?

 

[truc]

Ping from OTHER nodes in cluster TO the VM?

This is the error I am facing, cannot ping from vm to other nodes and from other nodes also cannot ping to vm, I want to fix this error

 

[truc]

This is the network configuration on my node, I use vmbr1 for vm

 

[gfngfn256]

I'm thinking, that without a gateway (on the 10.10.10.XXX NIC) Proxmox isn't addressing any outgoing traffic on that NW.

What is the output from PVE Host node1 to PVE Host node2:
traceroute 10.10.10.12 (from 10.10.10.11)

 

[truc]

I created a virtual network and only want the devices in the network such as vms and hosts to talk to each other so there is no need for a gateway.

 

[shanreich]

As gfngfn256 pointed out, I also think the issue lies somewhere within the VM, if the traffic doesn't even show up on the host bridge. Have you checked whether there is any iptables / nftables output?

iptables -L
nft list ruleset

 

[truc]

This is my result

 

[shanreich]

I also think the issue lies somewhere within the VM, if the traffic doesn't even show up on the host bridge.

can you verify this? Start tcpdump:

sudo tcpdump -envi tap100i0 icmp

Then ping

 

[truc]

can you verify this? Start tcpdump:

sudo tcpdump -envi tap100i0 icmp

Then ping

No results returned
but then I created Simple Zone With SNAT and DHCP and I used subnet 10.10.10.x/24 so I could ping out and ping other hosts, this is the result when I changed the vm's network without using vmbr Also using vnet, what does this mean? I think it's a private network solution. Why can I ping outside and ping the internet? However, another problem is that I can't ping the vms in the host. other have the same vnet
My question is:
Why did I create a simple zone, use this zone and vnet can ping out?
Why can't I ping vm between hosts when I use vm?