Problems with vlans

[j0k4b0]

Hi,

I have 3 Proxmox nodes at home (I am just a trainee and would like to learn and understand this).

Now I want to add some vlans. First I want to add 192.168.2.0/24 to the vlan 50.I already read that article, but I still got some trouble...
https://pve.proxmox.com/wiki/Network_Model#Configuring_VLAN_in_a_cluster

- Proxmox Node 1 : 192.168.178.199 (From the fritzbox) and 192.168.1.2 for local the proxmox cluster
- Proxmox Node 2: 192.168.1.3
- Proxmox Node 3: 192.168.1.4

On the first Proxmox Node is a pfSense Firewall wich managed a few ips between my fritzbox network and my 192.168.1.0/24 network:

- 192.168.178.202 over pfSense to 192.168.1.100: Proxmox Node 2, Plesk Test Server
- 192.168.178.203 over pfSense to 192.168.1.51:  Proxmox Node 2 -> NGINX Test Web Server
- 192.168.178.204 over pfSense to 192.168.1.52: Proxmox Node 3 -> NGINX Test Web Server

The pfSense should also manage the vlan rules, so 192.168.2.1 is the pfSense box.

After restarting the networking on proxmox node 1, I found that error in the system log (There are no more informations about the failed network restart):

Failed to start Raise network interfaces.

Without the vmbr1 interface anything is working very well (Expect the vlans, I mean I can restart the network and also be able to work with the 192.168.1.0/24 and public internet).
But the goal should be to keep the 192.168.1.0/24 working and add one more bridge (vmbr1) with the vlan 50.

I only have one network NIC, but I think it should also work.


Maybe someone can help me? Any ideas why it's not working? How should the network be configured?

Thanks you all for your help.


Here is the network config of my proxmox-1-1 node:

root@proxmox-1-1:/etc/network# cat /etc/network/interfaces
auto lo
iface lo inet loopback

iface enp30s0 inet manual

auto bond0
iface bond0 inet manual
        slaves enp30s0
        bond_miimon 100
        bond_mode 802.3ad


auto vmbr0
iface vmbr0 inet static
        address 192.168.178.199
        netmask 255.255.255.0
        gateway 192.168.178.1
        bridge_ports bond0
        bridge_stp off
        bridge_fd 0

auto vmbr0:0
iface vmbr0:0 inet static
        address  192.168.1.2
        netmask  255.255.255.0


auto vlan50
iface vlan50 inet manual
        vlan_raw_device bond0

auto vmbr1
iface vmbr1 inet static
        address  192.168.2.2
        netmask  255.255.255.0
        network  192.168.2.0
        bridge_ports vlan50
        bridge_stp off
        bridge_fd 0
        post-up ip route add table vlan50 default via 192.168.2.1 dev vmbr1
        post-up ip rule add from 192.168.2.0/24 table vlan50
        post-down ip route del table vlan50 default via 192.168.2.1 dev vmbr1
        post-down ip rule del from 192.168.2.0/24 table vlan50

And this is my network config for the node 2 and 3:

auto lo
iface lo inet loopback

iface enp30s0 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.1.3
        netmask 255.255.255.0
        gateway 192.168.1.1
        bridge_ports enp30s0
        bridge_stp off
        bridge_fd 0

 

[Richard]

Here is the network config of my proxmox-1-1 node:

root@proxmox-1-1:/etc/network# cat /etc/network/interfaces
auto lo
iface lo inet loopback

iface enp30s0 inet manual

auto bond0
iface bond0 inet manual
        slaves enp30s0
        bond_miimon 100
        bond_mode 802.3ad


auto vmbr0
iface vmbr0 inet static
        address 192.168.178.199
        netmask 255.255.255.0
        gateway 192.168.178.1
        bridge_ports bond0
        bridge_stp off
        bridge_fd 0

auto vmbr0:0
iface vmbr0:0 inet static
        address  192.168.1.2
        netmask  255.255.255.0


auto vlan50
iface vlan50 inet manual
        vlan_raw_device bond0

auto vmbr1
iface vmbr1 inet static
        address  192.168.2.2
        netmask  255.255.255.0
        network  192.168.2.0
        bridge_ports vlan50
        bridge_stp off
        bridge_fd 0
        post-up ip route add table vlan50 default via 192.168.2.1 dev vmbr1
        post-up ip rule add from 192.168.2.0/24 table vlan50
        post-down ip route del table vlan50 default via 192.168.2.1 dev vmbr1
        post-down ip rule del from 192.168.2.0/24 table vlan50

You have multiple default routes, moreover to define a route for "on-link" addresses at the bridge port is useless.

Remove the "post-up" and "post-down" lines.