Proxmox vlan on trunk switch interface

[Probz]

Hello,

My Proxmox server have 2 interface linked on a switch.
The switch interface is configured on trunk with vlan 10, 20, 100 and 200.
Vlan 20 is for server, 100 for DMZ and 200 for management.

I want to fix the ip of the Proxmox host on vlan 200, vlan 20 and 100 will be only used by VMs.
I want to create a bond on my 2 host interface for failover and improve performance, so I create a bond.

Here is the configuration of the Proxmox host :

auto lo
iface lo inet loopback

allow-hotplug enp1s0
iface enp1so inet manual

allow-hotplug eno1
iface eno1 inet manual

auto bond0
iface bond0 inet manual
bond-slaves enp1s0 eno1
bond-miimon 100
bond-mode 802.3ad
bond-xmit-hash-policy layer2+3

auto vmbr0
iface vmbr0 inet static
address 192.168.200.200/24
gateway 192.168.200.254
bridge-ports bond0
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 10 20 100 200

I can't ping my gateway with this configuration, should I create multiple bridge interface wich only 1 vlan for each one ?

I would like to get your opinion about my config, where is my mistake ?

Thanks you !

 

[gurubert]

Create another interface vmbr0.200 and assign the IP configuration to this unterface.

 

[Probz]

Hello,

Creating an other bridge interface with vmbr0.200 have failed for me.
I saw something interesting in documentation and I try that :

auto lo
iface lo inet loopback

iface enp1s0 inet manual

iface eno1 inet manual

#Création du bond
auto bond0
iface bond0 inet manual
bond-slaves enp1s0 eno1
bond-miimon 100
bond-mode 802.3ad
bond-xmit-hash-policy layer2+3

iface bond0.200 inet manual

iface bond0.20 inet manual

iface bond0.100 inet manual

#Création du bridge vlan 200 MGMT
auto vmbr0v200
iface vmbr0v200 inet static
address 192.168.200.250/24
gateway 192.168.200.254
bridge-ports bond0.200
bridge-stp off
bridge-fd 0

#Création du bridge vlan 20 SERVEUR
auto vmbr0v20
iface vmbr0v20 inet static
address 192.168.20.250/24
gateway 192.168.20.254
bridge-ports bond0.20
bridge-stp off
bridge-fd 0

#Création du bridge vlan 100 DMZ
auto vmbr0v100
iface vmbr0v100 inet static
address 192.168.100.250/24
gateway 192.168.100.254
bridge-ports bond0.100
bridge-stp off
bridge-fd 0

auto vmbr0
iface vmbr0 inet manual
bridge-ports bond0
bridge-stp off
bridge-fd 0

Now, I can ping my Proxmox Server with these bridge, but it's not good yet.

First thing : for an ignoring reason, i can't edit vmbr0vX bridge on Proxmox GUI. Maybe the way I go for configuring bridge is different to Proxmox way to go.

Second : except the vmbr0v200 (necessary for the management IP), all others bridge are useless because I don't want to give IP on vlan 20 and 100 to my Promox, but only let these VLAN be used by virtual machines.

 

[spirit]

vmbr0.200 is not a bridge, it's a tagged internal interface with vlan200,

so you just need:

auto vmbr0.200
iface vmbr0.200
     address ...

(no bridge-* option)

see documentation examples
https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_network_vlan

vmbr0v200 is a full bridge, when you don't use vlan aware, where tagging is done on physical interface

 

[gurubert]

Second : except the vmbr0v200 (necessary for the management IP), all others bridge are useless because I don't want to give IP on vlan 20 and 100 to my Promox, but only let these VLAN be used by virtual machines.

You do not have to assign an IP configuration to these bridge interfaces.

 

[Probz]

Hello,

Thanks for your help.
I finally get a good configuration :

auto lo iface lo inet loopback auto enp1s0 iface enp1s0 inet manual auto eno1 iface eno1 inet manual auto bond0 iface bond0 inet manual bond-slaves eno1 enp1s0 bond-miimon 100 bond-mode 802.3ad bond-xmit-hash-policy layer2+3 iface bond0.200 inet manual auto vmbr0 iface vmbr0 inet manual bridge-ports bond0 bridge-stp off bridge-fd 0 bridge-vlan-aware yes bridge-vids 2-4094 auto vmbr0v200 iface vmbr0v200 inet static address 192.168.200.250/24 gateway 192.168.200.254 bridge_ports bond0.200 bridge_stp off

I have my interface on vlan 200 for manage my Proxmox server, and know I juste have to choose "vmbr0" as network interface for my VM and tag the right vlan inside them.
I have a better understanding of network configuration for Proxmox now.