Proxmox host cant access internet but vms can

[DarklanternOZ]

Hi All,

I am sure I have done something silly but cant seem to fix it.

Essentially, I run 1 proxmox hypervisor/host that includes a pfsense vm as the home router. The hypervisor has 2 nics, 1 for the WAN port and and for the local network
pfSense has a physical nic dedicated to the WAN

WAN > net0 >eth1 > vmbr1 - Mapped to pfsense WAN.
LAN > net 1 >ETH0 > vmbr0 - Host IP address 192.168.1.30/24

LAN IPrange 192.168.1.0/24

Host can ping any address on the lan, but cannot route to the internet.
All vms have access to internet; pfsense seems to be working properly.
PFsense set up as DHCP and DNS Resolver.
ip route:

default via 192.168.1.1 dev vmbr0
192.168.1.0/24 dev vmbr0 proto kernel scope link src 192.168.1.30

cat /etc/network/interfaces
auto eth0
iface eth0 inet manual
auto eth1
iface eth1 inet manual
#WAN
#auto bond0
#iface bond0 inet manual
# slaves none
# bond_miimon 100
# bond_mode active-backup
auto vmbr0
iface vmbr0 inet static
address 192.168.1.30
netmask 255.255.255.0
gateway 192.168.1.1
bridge_ports eth0
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes
auto vmbr1
iface vmbr1 inet manual
bridge_ports eth1
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes
#WAN

Whole of network works fine but the proxmox host cant update because cant connect to internet. BTW this happened once pfsense was virtualised.

proxmox version 4.4.117-109
pve 4.4-22

Not sure where to look from here.

Any help appreciated.
Thanks
Roger

 

[Richard]

I am sure I have done something silly but cant seem to fix it.

Essentially, I run 1 proxmox hypervisor/host that includes a pfsense vm as the home router. The hypervisor has 2 nics, 1 for the WAN port and and for the local network
pfSense has a physical nic dedicated to the WAN

WAN > net0 >eth1 > vmbr1 - Mapped to pfsense WAN.
LAN > net 1 >ETH0 > vmbr0 - Host IP address 192.168.1.30/24

LAN IPrange 192.168.1.0/24

Host can ping any address on the lan, but cannot route to the internet.
All vms have access to internet; pfsense seems to be working properly.
PFsense set up as DHCP and DNS Resolver.
ip route:

default via 192.168.1.1 dev vmbr0
192.168.1.0/24 dev vmbr0 proto kernel scope link src 192.168.1.30

Whole of network works fine but the proxmox host cant update because cant connect to internet. BTW this happened once pfsense was virtualised.

proxmox version 4.4.117-109
pve 4.4-22

Not sure where to look from here.

Post the host's /etc/network/interfaces

 

[DarklanternOZ]

Post the host's /etc/network/interfaces

Thanks for the interest - interface now in original post as well;

auto eth0
iface eth0 inet manual
auto eth1
iface eth1 inet manual
#WAN
#auto bond0
#iface bond0 inet manual
# slaves none
# bond_miimon 100
# bond_mode active-backup
auto vmbr0
iface vmbr0 inet static
address 192.168.1.30
netmask 255.255.255.0
gateway 192.168.1.1
bridge_ports eth0
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes
auto vmbr1
iface vmbr1 inet manual
bridge_ports eth1
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes
#WAN

 

[Richard]

Thanks for the interest - interface now in original post as well;

auto eth0
iface eth0 inet manual
auto eth1
iface eth1 inet manual
#WAN
#auto bond0
#iface bond0 inet manual
# slaves none
# bond_miimon 100
# bond_mode active-backup
auto vmbr0
iface vmbr0 inet static
address 192.168.1.30
netmask 255.255.255.0
gateway 192.168.1.1
bridge_ports eth0
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes
auto vmbr1
iface vmbr1 inet manual
bridge_ports eth1
bridge_stp off
bridge_fd 0
bridge_vlan_aware yes
#WAN

If you want to reach WAN from host via pfsense you have to specify an address at vmbr1 and specify pfsense as gateway.

Your current configuration tries to reach WAN via vmbr0 and a NAT router at 192.168.1.1

 

[DarklanternOZ]

Thanks @Richard
Apologies for the late reply, but I have been away and only have just returned to this.

I just want to be clear
VMBR1 > Mapped to pfsense WAN port with an public IP (assigned by ISP)
192.168.1.1 is PFsense' internal IP that routes all traffic.

So are you saying that PROXMOX host should have an IP on VMBR1 (e.g.192.168.1.31) and pfsense gateway 192.168.1.1 or Public IP. Can i then remove the VMBR0 IP and gateway?

Thanks
Roger