Probelm with OpenVz and Vlans

[goomisch]

Hello All,

It's my first post so I would like to say Hello to All Mambers. I'm network engineer since 15 years but my experience is rather in transsmision and data network (like C(D)WDM,SDH, Metro Ethernet etc.), not operating system. I'm trying to establish some Linux machines on PVE and I need separate VLANs for them. I've read quite lot information on Proxmox wiki and formu, OpenVZ pages etc. I've configured test PVE enviroment and network, but it not working properly. Ping sended from contrainer is sended to Vlan interface on Cisco switch (is added to Arp table), but finaly at contrainer I get massage:

PING 10.1.1.97 (10.1.1.97) 56(84) bytes of data.
From 10.1.1.100 icmp_seq=1 Destination Host Unreachable
From 10.1.1.100 icmp_seq=2 Destination Host Unreachable
From 10.1.1.100 icmp_seq=3 Destination Host Unreachable

Switch:
Internet  10.1.1.97               -   e05f.b91e.0343  ARPA   Vlan2
Internet  10.1.1.98               1   0015.6536.7c68  ARPA   Vlan2
Internet  10.1.1.100              1   b8ac.6fc8.26f0  ARPA   Vlan2
Internet  10.1.1.101              1   000e.998e.0369  ARPA   Vlan2

PVE host tcpdump
root@test-prmx:~# tcpdump -e -ni eth0 vlan 2
tcpdump: WARNING: eth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
23:31:14.631011 b8:ac:6f:c8:26:f0 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 2, p 0, ethertype ARP, Request who-has 10.1.1.97 tell 10.1.1.100, length 28  <--- ARP Querry
23:31:14.636230 e0:5f:b9:1e:03:43 > b8:ac:6f:c8:26:f0, ethertype 802.1Q (0x8100), length 64: vlan 2, p 0, ethertype ARP, Reply 10.1.1.97 is-at e0:5f:b9:1e:03:43, length 46  <--- response from L3 switch


Interface configuration on PVE host
# network interface settings
auto lo
iface lo inet loopback

iface eth0 inet static
        address 0.0.0.0
        netmask 0.0.0.0

auto vmbr0
iface vmbr0 inet static
        address  10.1.1.89
        netmask  255.255.255.224
        gateway  10.1.1.65
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0

auto eth0.2
iface eth0.2 inet static
        address 0.0.0.0
        netmask 0.0.0.0

auto vmbr2
iface vmbr2 inet manual
        bridge_ports eth0.2
        bridge_stp off
        bridge_fd 0


Interface configuration on CT
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
        address 10.1.1.100
        netmask 255.255.255.248
        gateway 10.1.1.97

I have no idea where is an error. When I configured interface eth0.2 in CT I seen ARP requests but I didn't get ARP reply from L3 switch.

Best Regards
Marcin