Problem with CT networking

G

Géraud Tillit

Guest
Hello,

I'm trying to use proxmox 2.0 rc1 on a spare pc inside my home network.

The proxmox host ip address is 192.168.1.1, I've created one container with IP address 192.168.1.253. Adress if the default router (ADSL box) is 192.168.1.254.

On the proxmox host, vmbr0 seems to be correctly configured :

Code:
root@proxmox:~# ip addr show dev vmbr0
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 00:24:1d:c0:70:43 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.1/24 brd 192.168.1.255 scope global vmbr0
    inet6 fe80::224:1dff:fec0:7043/64 scope link
       valid_lft forever preferred_lft forever
Code:
root@proxmox:~# brctl show
bridge name     bridge id               STP enabled     interfaces
vmbr0           8000.00241dc07043       no              eth0
                                                        veth100.0

No problem to ping the gateway or to ping the container :

Code:
root@proxmox:~# ping 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_req=1 ttl=64 time=1.64 ms
64 bytes from 192.168.1.254: icmp_req=2 ttl=64 time=0.445 ms
^C
--- 192.168.1.254 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.445/1.045/1.646/0.601 ms
root@proxmox:~# ping 192.168.1.253
PING 192.168.1.253 (192.168.1.253) 56(84) bytes of data.
64 bytes from 192.168.1.253: icmp_req=1 ttl=64 time=0.036 ms
64 bytes from 192.168.1.253: icmp_req=2 ttl=64 time=0.024 ms
^C
--- 192.168.1.253 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.024/0.030/0.036/0.006 ms

On the container
, eth0 seems to be correctly configured :

Code:
root@ns:/# ip addr show dev eth0
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 2a:3e:61:e0:99:55 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.253/24 brd 192.168.1.255 scope global eth0
    inet6 fe80::283e:61ff:fee0:9955/64 scope link
       valid_lft forever preferred_lft forever
root@ns:/# ip route
192.168.1.0/24 dev eth0  proto kernel  scope link  src 192.168.1.253
default via 192.168.1.254 dev eth0

But I'm only able to ping the proxmox host, nothing else :

Code:
root@ns:/# ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_req=1 ttl=64 time=0.029 ms
64 bytes from 192.168.1.1: icmp_req=2 ttl=64 time=0.019 ms
64 bytes from 192.168.1.1: icmp_req=3 ttl=64 time=0.018 ms
^C
--- 192.168.1.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.018/0.022/0.029/0.005 ms
root@ns:/# ping 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
^C
--- 192.168.1.254 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 1999ms

Any Idea ?
 
I don't know if this is useful, but I'm adding network interfaces configuration.

veth100.0

Code:
root@proxmox:/proc/sys/net/ipv4/conf/veth100.0# tail *
==> accept_redirects <==
1

==> accept_source_route <==
1

==> arp_accept <==
0

==> arp_announce <==
0

==> arp_filter <==
0

==> arp_ignore <==
0

==> arp_notify <==
0

==> bootp_relay <==
0

==> disable_policy <==
0

==> disable_xfrm <==
0

==> force_igmp_version <==
0

==> forwarding <==
1

==> log_martians <==
0

==> mc_forwarding <==

0

==> medium_id <==
0

==> promote_secondaries <==
0

==> proxy_arp <==
1

==> rp_filter <==
0

==> secure_redirects <==
1

==> send_redirects <==
1

==> shared_media <==
1

==> src_valid_mark <==
0

==> tag <==
0

vmbr0

Code:
root@proxmox:/proc/sys/net/ipv4/conf/vmbr0# tail *
==> accept_redirects <==
1

==> accept_source_route <==
1

==> arp_accept <==
0

==> arp_announce <==
0

==> arp_filter <==
0

==> arp_ignore <==
0

==> arp_notify <==
0

==> bootp_relay <==
0

==> disable_policy <==
0

==> disable_xfrm <==
0

==> force_igmp_version <==
0

==> forwarding <==
1

==> log_martians <==
0

==> mc_forwarding <==
0

==> medium_id <==
0

==> promote_secondaries <==
0

==> proxy_arp <==
0

==> rp_filter <==
0

==> secure_redirects <==
1

==> send_redirects <==
1

==> shared_media <==
1

==> src_valid_mark <==
0

==> tag <==
0

eth0

Code:
root@proxmox:/proc/sys/net/ipv4/conf/eth0# tail *
==> accept_redirects <==
1

==> accept_source_route <==
1

==> arp_accept <==
0

==> arp_announce <==
0

==> arp_filter <==
0

==> arp_ignore <==
0

==> arp_notify <==
0

==> bootp_relay <==
0

==> disable_policy <==
0

==> disable_xfrm <==
0

==> force_igmp_version <==
0

==> forwarding <==
1

==> log_martians <==
0

==> mc_forwarding <==
0

==> medium_id <==
0

==> promote_secondaries <==
0

==> proxy_arp <==
0

==> rp_filter <==
0

==> secure_redirects <==
1

==> send_redirects <==
1

==> shared_media <==
1

==> src_valid_mark <==
0

==> tag <==
0

And iptables output :

Code:
root@proxmox:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
 
I've created a KVM with bridged networking, and everything is working fine :

Code:
root@test:~# ping 192.168.1.4
PING 192.168.1.4 (192.168.1.4) 56(84) bytes of data.
64 bytes from 192.168.1.4: icmp_req=1 ttl=64 time=3.64 ms
64 bytes from 192.168.1.4: icmp_req=2 ttl=64 time=0.656 ms
64 bytes from 192.168.1.4: icmp_req=3 ttl=64 time=0.168 ms
^C
--- 192.168.1.4 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 0.168/1.488/3.640/1.534 ms
root@test:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 3a:90:df:b6:68:ad brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.4/24 brd 192.168.1.255 scope global eth0
    inet6 fe80::3890:dfff:feb6:68ad/64 scope link
       valid_lft forever preferred_lft forever
root@test:~# ip route
192.168.1.0/24 dev eth0  proto kernel  scope link  src 192.168.1.4
default via 192.168.1.254 dev eth0

And on the host :

Code:
root@proxmox:~# brctl show
bridge name     bridge id               STP enabled     interfaces
vmbr0           8000.00241dc07043       no              eth0
                                                        tap102i0
                                                        veth100.0
root@proxmox:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 00:24:1d:c0:70:43 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::224:1dff:fec0:7043/64 scope link
       valid_lft forever preferred_lft forever
3: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 00:24:1d:c0:70:43 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.1/24 brd 192.168.1.255 scope global vmbr0
    inet6 fe80::224:1dff:fec0:7043/64 scope link
       valid_lft forever preferred_lft forever
4: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/void
    inet6 fe80::1/128 scope link
       valid_lft forever preferred_lft forever
16: veth100.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 56:54:44:77:c3:e2 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::5454:44ff:fe77:c3e2/64 scope link
       valid_lft forever preferred_lft forever
17: tap102i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500
    link/ether 0e:d9:f4:bc:21:cd brd ff:ff:ff:ff:ff:ff
    inet6 fe80::cd9:f4ff:febc:21cd/64 scope link
       valid_lft forever preferred_lft forever

I don't understand why it's working from the KVM and not from the CT...
 
I've got strange behaviour with other hosts on the network.

I've tried to ping 192.168.1.3 from the CT, at the beginning no answer :

Code:
root@ns:/# ping 192.168.1.3
PING 192.168.1.3 (192.168.1.3) 56(84) bytes of data.
^C
--- 192.168.1.3 ping statistics ---
30 packets transmitted, 0 received, 100% packet loss, time 28999ms

tcpdump output :

Code:
root@proxmox:~# tcpdump -ni vmbr0 host 192.168.1.253
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vmbr0, link-type EN10MB (Ethernet), capture size 65535 bytes
22:35:34.140791 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 1, length 64
22:35:35.140099 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 2, length 64
22:35:36.140098 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 3, length 64
22:35:37.140097 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 4, length 64
22:35:38.140097 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 5, length 64
22:35:39.140099 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 6, length 64
22:35:40.140098 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 7, length 64
22:35:41.140099 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 8, length 64
22:35:42.140096 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 9, length 64

I've seen an arp request on the tcdump and then the ping worked :

Code:
22:36:08.140076 ARP, Request who-has 192.168.1.3 tell 192.168.1.253, length 28
22:36:08.140175 ARP, Reply 192.168.1.3 is-at 00:24:1d:c0:21:95, length 46
22:36:13.952896 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 1, length 64
22:36:13.953060 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 1, length 64
22:36:14.953100 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 2, length 64
22:36:14.953238 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 2, length 64
22:36:15.953098 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 3, length 64
22:36:15.953242 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 3, length 64
22:36:16.953101 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 4, length 64
22:36:16.953239 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 4, length 64
22:36:17.953101 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 5, length 64
22:36:17.953325 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 5, length 64

And I still can't ping the router :

Code:
root@ns:/# ping 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
From 192.168.1.253 icmp_seq=2 Destination Host Unreachable
From 192.168.1.253 icmp_seq=3 Destination Host Unreachable
From 192.168.1.253 icmp_seq=4 Destination Host Unreachable
From 192.168.1.253 icmp_seq=6 Destination Host Unreachable
From 192.168.1.253 icmp_seq=7 Destination Host Unreachable
From 192.168.1.253 icmp_seq=8 Destination Host Unreachable

On the host :

Code:
22:40:30.011140 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28
22:40:31.011145 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28
22:40:32.011145 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28
22:40:34.012146 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28

Here is the arp table of the CT and the host, the CT :

Code:
root@ns:/# arp -vn
Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.1.3              ether   00:24:1d:c0:21:95   C                     eth0
192.168.1.254                    (incomplete)                              eth0
192.168.1.248            ether   00:26:24:3a:53:ae   C                     eth0
Entries: 3      Skipped: 0      Found: 3

The host :

Code:
root@proxmox:~# arp -vn
Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.1.3              ether   00:24:1d:c0:21:95   C                     vmbr0
192.168.1.254            ether   00:1f:9f:bc:3c:20   C                     vmbr0
Entries: 2      Skipped: 0      Found: 2

After adding manually the HW adress of the router in the CT, no more luck :

Code:
root@proxmox:~# tcpdump -ni vmbr0 host 192.168.1.253
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vmbr0, link-type EN10MB (Ethernet), capture size 65535 bytes
22:55:09.066315 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 1, length 64
22:55:10.065537 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 2, length 64
22:55:10.977086 IP 192.168.1.248.62473 > 192.168.1.253.41952: Flags [S], seq 476600137, win 5840, options [mss 1460,sackOK,TS val 53887861 ecr 0,nop,wscale 1], length 0
22:55:10.977108 IP 192.168.1.253.41952 > 192.168.1.248.62473: Flags [R.], seq 0, ack 476600138, win 0, length 0
22:55:11.065538 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 3, length 64
22:55:12.065537 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 4, length 64
22:55:13.065536 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 5, length 64
22:55:14.065538 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 6, length 64
22:55:15.065547 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 7, length 64
22:55:16.065544 IP 192.168.1.253 > 192.168.1.254: ICMP echo request, id 635, seq 8, length 64

And if I ping the router from the host :

Code:
root@proxmox:~# tcpdump -ni vmbr0 host 192.168.1.254
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vmbr0, link-type EN10MB (Ethernet), capture size 65535 bytes
22:58:46.246599 ARP, Request who-has 192.168.1.254 tell 192.168.1.6, length 46
22:58:46.260574 ARP, Request who-has 192.168.1.254 tell 192.168.1.6, length 46
22:58:49.519393 IP 192.168.1.1 > 192.168.1.254: ICMP echo request, id 7465, seq 1, length 64
22:58:49.520322 IP 192.168.1.254 > 192.168.1.1: ICMP echo reply, id 7465, seq 1, length 64
22:58:50.519533 IP 192.168.1.1 > 192.168.1.254: ICMP echo request, id 7465, seq 2, length 64
22:58:50.519996 IP 192.168.1.254 > 192.168.1.1: ICMP echo reply, id 7465, seq 2, length 64
22:58:51.271092 ARP, Request who-has 192.168.1.254 tell 192.168.1.6, length 46
22:58:51.285233 ARP, Request who-has 192.168.1.254 tell 192.168.1.6, length 46
22:58:51.300298 IP 192.168.1.254 > 224.0.0.1: igmp query v2
22:58:51.519532 IP 192.168.1.1 > 192.168.1.254: ICMP echo request, id 7465, seq 3, length 64
22:58:51.519994 IP 192.168.1.254 > 192.168.1.1: ICMP echo reply, id 7465, seq 3, length 64
22:58:52.519534 IP 192.168.1.1 > 192.168.1.254: ICMP echo request, id 7465, seq 4, length 64
22:58:52.520017 IP 192.168.1.254 > 192.168.1.1: ICMP echo reply, id 7465, seq 4, length 64
22:58:53.519534 IP 192.168.1.1 > 192.168.1.254: ICMP echo request, id 7465, seq 5, length 64
22:58:53.520035 IP 192.168.1.254 > 192.168.1.1: ICMP echo reply, id 7465, seq 5, length 64
 
Last edited by a moderator:
I've got strange behaviour with other hosts on the network.

I've tried to ping 192.168.1.3 from the CT, at the beginning no answer :

Code:
root@ns:/# ping 192.168.1.3
PING 192.168.1.3 (192.168.1.3) 56(84) bytes of data.
^C
--- 192.168.1.3 ping statistics ---
30 packets transmitted, 0 received, 100% packet loss, time 28999ms

tcpdump output :

Code:
root@proxmox:~# tcpdump -ni vmbr0 host 192.168.1.253
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vmbr0, link-type EN10MB (Ethernet), capture size 65535 bytes
22:35:34.140791 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 1, length 64
22:35:35.140099 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 2, length 64
22:35:36.140098 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 3, length 64
22:35:37.140097 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 4, length 64
22:35:38.140097 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 5, length 64
22:35:39.140099 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 6, length 64
22:35:40.140098 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 7, length 64
22:35:41.140099 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 8, length 64
22:35:42.140096 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 432, seq 9, length 64

I've seen an arp request on the tcdump and then the ping worked :

Code:
22:36:08.140076 ARP, Request who-has 192.168.1.3 tell 192.168.1.253, length 28
22:36:08.140175 ARP, Reply 192.168.1.3 is-at 00:24:1d:c0:21:95, length 46
22:36:13.952896 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 1, length 64
22:36:13.953060 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 1, length 64
22:36:14.953100 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 2, length 64
22:36:14.953238 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 2, length 64
22:36:15.953098 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 3, length 64
22:36:15.953242 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 3, length 64
22:36:16.953101 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 4, length 64
22:36:16.953239 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 4, length 64
22:36:17.953101 IP 192.168.1.253 > 192.168.1.3: ICMP echo request, id 437, seq 5, length 64
22:36:17.953325 IP 192.168.1.3 > 192.168.1.253: ICMP echo reply, id 437, seq 5, length 64
Hi,
strange, that the arp-request don't came on beginning, but after knowing the mac-adress all work like expected.
And I still can't ping the router :
...
On the host :

Code:
22:40:30.011140 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28
22:40:31.011145 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28
22:40:32.011145 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28
22:40:34.012146 ARP, Request who-has 192.168.1.254 tell 192.168.1.253, length 28

Here is the arp table of the CT and the host, the CT :

Code:
root@ns:/# arp -vn
Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.1.3              ether   00:24:1d:c0:21:95   C                     eth0
192.168.1.254                    (incomplete)                              eth0
192.168.1.248            ether   00:26:24:3a:53:ae   C                     eth0
Entries: 3      Skipped: 0      Found: 3
...
this shows that the router don't answer on the arp-request. And without mac-address ping can't work.

Do you have any protections on the router that prevent the arp-resolution?

Does ping work with manual set arp on the CT ("arp -s 192.168.1.254 00:1f:9f:bc:3c:20")? Sorry, just see that you always tried that...

For me looks like a problem with the router. can you ping from the router to the CT?

Udo
 
That's strange because the router is correctly answering to arp requests from the host, for testing purpose I've flushed the arp cache on the host and then :

Code:
08:44:23.025635 ARP, Request who-has 192.168.1.254 tell 192.168.1.1, length 28
08:44:23.027813 ARP, Reply 192.168.1.254 is-at 00:1f:9f:bc:3c:20, length 46

Since this morning, I'm able to ping the router from the CT... I don't understand as I haven't changed anything !

Code:
CT100# ping router
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_req=1 ttl=64 time=2.00 ms
64 bytes from 192.168.1.254: icmp_req=2 ttl=64 time=0.594 ms
64 bytes from 192.168.1.254: icmp_req=3 ttl=64 time=0.597 ms
64 bytes from 192.168.1.254: icmp_req=4 ttl=64 time=0.596 ms
64 bytes from 192.168.1.254: icmp_req=5 ttl=64 time=0.584 ms
^C
--- 192.168.1.254 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4001ms
rtt min/avg/max/mdev = 0.584/0.875/2.005/0.565 ms
CT100# arp -vn
Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.1.254            ether   00:1f:9f:bc:3c:20   CM                    eth0
Entries: 1      Skipped: 0      Found: 1

And the ARP requests are working without any problem

Code:
08:47:30.726519 ARP, Request who-has 192.168.1.253 tell 192.168.1.254, length 46
08:47:30.726539 ARP, Reply 192.168.1.253 is-at 2a:3e:61:e0:99:55, length 28

I don't understand...
 
Hello dietmar,

Code:
host# echo 2 > /proc/sys/net/ipv4/conf/all/rp_filter
host# echo 2 > /proc/sys/net/ipv4/conf/default/rp_filter

I'll let you know if I see the problem again
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!