Proxmox, routed mode with a block ip not working

[abkrim]

I have a problem with Hetzner in Routed mode since I have to apply a subnet to the server.

According to your docs (one thing) and according to your support (something else) I have this setup.

No matter how hard I try, I can't understand why it doesn't work, even more so when I see the routes and they seem valid to me.

If it's professional support, I don't care. You can make me an offer.

source /etc/network/interfaces.d/*

iface lo inet loopback

iface lo inet6 loopback

car enp41s0
iface enp41s0 inet static
address 85.10.MAIN_IP/27 # IP Server (Verified calculated network)
gateway 85.10.XXX.XX # Gateway server (Verified)
up route add -net 188.34.XX.XX netmask 255.255.255.240 gw 85.10.XX.GATEWAY dev enp41s0 // Block IP
#Routed mode

iface enp41s0 inet6 static
address 2a01:4f8:XXXXX::2/64
gateway fe80::1

car vmbr0
iface vmbr0 inet static
address 85.10.XXX.XXX/32 # IP Server /32 ??
bridge-ports none
bridge stp off
bridge-fd 0

iface vmbr0 inet6 static
address 2a01:4f8:XXXXX::2/64

In proxmox /etc/network/interfaces.d/vm-routes

iface vmbr0 inet static
         #up ip route add 188.34.XXX.XXX/28 dev vmbr0 # Also not work
   up ip route add 188.34.XXX.XXX/32 dev vmbr0
   up ip route add 188.34.XX.XX/32 dev vmbr0
   up ip route add 188.34.XXX.XXX/32 dev vmbr0
iface vmbr0 inet6 static
        up ip -6 route add 2a01:4f8:XXXX:/64 dev vmbr0

Forwarding activated

root@prohe01 /etc/network # sysctl -w net.ipv4.ip_forward=1
net.ipv4.ip_forward = 1
root@prohe01 /etc/network # sysctl -w net.ipv6.conf.all.forwarding=1
net.ipv6.conf.all.forwarding = 1

Proxmox routed​

route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 85.10.XXX.XXX 0.0.0.0 UG 0 0 0 enp41s0
85.10.XXX.xxx-1 0.0.0.0 255.255.255.224 U 0 0 0 enp41s0
188.34.IP_SUB_NET IP_OF_PROXMOX 255.255.255.240 UG 0 0 0 enp41s0
188.34.XXX.XX1 0.0.0.0 255.255.255.255 HU 0 0 0 vmbr0
188.34.XXX.XX2 0.0.0.0 255.255.255.255 HU 0 0 0 vmbr0
188.34.XXX.XX3 0.0.0.0 255.255.255.255 HU 0 0 0 vmbr0

Centos machine guest​

# /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=none
IPADDR=188.34.XXX.XX1
NETMASK=255.255.255.255
SCOPE="peer 85.10.MAIN_IP"
IPV6INIT=no

Route centos​

Destination Gateway Genmask Flags Metric Ref USe Iface
0.0.0.0 85.10.XXX.XXX 0.0.0.0 UG 100 0 0 eth0
85.10.XXX.XXX 0.0.0.0 255.255.255.255 HU 100 0 0 eth0
188.34.IP.GUEST 0.0.0.0 255.255.255.255 UH 100 0 0 eth0

 

[abkrim]

Oh My God
After 4 hours, I put post, and I see the problem.

Configserver firewall is incompatible with Routed mode (with normal configuration)

After disable firewall work fine.

But also, in guest I need stop firewall.