permission denied - invalid PVE ticket (401)

B

brads

New Member
Nov 9, 2025
4
0
1
I am continuing to get this message.

Proxmox 9 version is the same. Time is the same. Firewall ports are set at the datacenter and server levels.

Server 1:
vmbr0 is a 1G Ethernet (set with primary IP, set default gateway, set DNS)
vmbr1 is a 1G Ethernet (set 10.0.0.1/24, nothing else is set.)

Server 2:
vmbr0 is 10G Ethernet (set with primary IP, set default gateway, set DNS)
vmbr1 is a 1G Ethernet (set 10.0.0.2/24, nothing else is set.)

Test #1:
Cluster configured on vmbr1. Failed.

Test #2:
Removed VLAN configuration on switch. Cluster configured on vmbr1. Failed.

Test #3:
Cluster configured on vmbr0. This was successful.

Any ideas on what may be happening on the vmbr1 configuration?

Any help will be greatly appreciated.
--Brad
 
Last edited:
Is this about the datacenter manager? Or about configuring a pve cluster? I think you picked the wrong topic ^^

Anyway. As it works with vmbr0 and the 10G ports, check if the 1G networks on both nodes can ping each other.

Best if you share /etc/network/interfaces from both nodes.

As you said time is the same, when and where exactly do you get this invalid pve ticket error?
 
Hi,

This is about pve cluster.

Using just the 1G Ethernet ports, I was unable to ping between them.

The error happens if I use the 10.0.0.x Linux Bridges (vmbr1).

So yes, there is an issue, but I am unsure if the issue is with the way I configured the bridge or something else.
 
Please send the output of both command on both nodes:

1. cat /etc/network/interfaces
2. ip a

If they cant even ping each other, there most likely is an issue with your network beyond pve or the pve configuration itself. I can rule out the pve configuration if you send me the output of the above commands.
 
auto lo
iface lo inet loopback

iface enp131s0f0 inet manual

auto enp5s0f0
iface enp5s0f0 inet manual
#Cluster NIC

iface enp5s0f1 inet manual

iface enp131s0f1 inet manual

auto vmbr0
iface vmbr0 inet static
address 192.168.0.90/23
gateway 192.168.0.1
bridge-ports enp131s0f0
bridge-stp off
bridge-fd 0

auto vmbr1
iface vmbr1 inet static
address 10.20.0.1/24
bridge-ports enp5s0f0
bridge-stp off
bridge-fd 0
#Cluster Network

source /etc/network/interfaces.d/*


1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp5s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr1 state UP group default qlen 1000
link/ether 00:25:90:f3:2d:38 brd ff:ff:ff:ff:ff:ff
altname enx002590f32d38
3: enp5s0f1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 00:25:90:f3:2d:39 brd ff:ff:ff:ff:ff:ff
altname enx002590f32d39
4: enp131s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
link/ether 00:1b:21:39:29:3a brd ff:ff:ff:ff:ff:ff
altname enx001b2139293a
5: enp131s0f1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 00:1b:21:39:29:3b brd ff:ff:ff:ff:ff:ff
altname enx001b2139293b
6: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:1b:21:39:29:3a brd ff:ff:ff:ff:ff:ff
inet 192.168.0.90/23 scope global vmbr0
valid_lft forever preferred_lft forever
inet6 fe80::21b:21ff:fe39:293a/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
7: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:25:90:f3:2d:38 brd ff:ff:ff:ff:ff:ff
inet 10.20.0.1/24 scope global vmbr1
valid_lft forever preferred_lft forever
inet6 fe80::225:90ff:fef3:2d38/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
 
auto lo
iface lo inet loopback

iface enp131s0f0 inet manual

auto enp5s0f0
iface enp5s0f0 inet manual
#Cluster NIC

iface enp5s0f1 inet manual

iface enp131s0f1 inet manual

auto vmbr0
iface vmbr0 inet static
address 192.168.0.91/23
gateway 192.168.0.1
bridge-ports enp131s0f0
bridge-stp off
bridge-fd 0

auto vmbr1
iface vmbr1 inet static
address 10.20.0.2/24
bridge-ports enp5s0f0
bridge-stp off
bridge-fd 0
#Cluster Network

source /etc/network/interfaces.d/*

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp5s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr1 state UP group default qlen 1000
link/ether 00:25:90:f5:97:d0 brd ff:ff:ff:ff:ff:ff
altname enx002590f597d0
3: enp5s0f1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 00:25:90:f5:97:d1 brd ff:ff:ff:ff:ff:ff
altname enx002590f597d1
4: enp131s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
link/ether a0:36:9f:c5:6f:60 brd ff:ff:ff:ff:ff:ff
altname enxa0369fc56f60
5: enp131s0f1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether a0:36:9f:c5:6f:62 brd ff:ff:ff:ff:ff:ff
altname enxa0369fc56f62
6: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:c5:6f:60 brd ff:ff:ff:ff:ff:ff
inet 192.168.0.91/23 scope global vmbr0
valid_lft forever preferred_lft forever
inet6 fe80::a236:9fff:fec5:6f60/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
7: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:25:90:f5:97:d0 brd ff:ff:ff:ff:ff:ff
inet 10.20.0.2/24 scope global vmbr1
valid_lft forever preferred_lft forever
inet6 fe80::225:90ff:fef5:97d0/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
 
You must log in or register to reply here.
Top Bottom