Proxmox VM: Port Forwarding Issues?

[oguruma]

I want to replace my 3CX PBX server (currently running on a bare metal server) with a Proxmox VM.

The firewall rules are already configured, and I have verified they work. I simply altered the rules to point to the Proxmox VM I made, instead of the old server.

I created the VM, however none of the traffic is reaching the VM (ports 5060-5061, 5090, 5001, and 9000-10999).

I created a Bridge for an unused NIC on the motherboard, and assigned it to the VM. The VM can ping the outside world without issue.

So, I'm assuming there is some configuration that most be done on the Proxmox Host to forward traffic to the specific VMs, however I am at a loss for what that is....

Can somebody point me in the right direction? Assuming the configuration of the router is correct (it is) what do I have to do to let traffic reach the VM?

 

[oguz]

hi,

I created the VM, however none of the traffic is reaching the VM (ports 5060-5061, 5090, 5001, and 9000-10999).

what error are you receiving?

is firewall activated on the vm?

So, I'm assuming there is some configuration that most be done on the Proxmox Host to forward traffic to the specific VMs, however I am at a loss for what that is....

yes, you must enable portforwarding. take a look at here[0]

[0]: https://pve.proxmox.com/wiki/Networ...ith_tt_span_class_monospaced_iptables_span_tt

 

[oguruma]

hi,



what error are you receiving?

is firewall activated on the vm?


yes, you must enable portforwarding. take a look at here[0]

[0]: https://pve.proxmox.com/wiki/Networ...ith_tt_span_class_monospaced_iptables_span_tt

3CX has a built-in firewall checker tool, and the VM is failing all of the tests for each port....

The firewall isn't turned on on the VM, no. I also forgot to mention that I installed from the 3CX custom ISO, which takes care of all of the configuration, itself.

 

[oguruma]

Also, is it possible to just give the VM an entire NIC (as in, without having to create a bridge), so that Proxmox itself has no say in forwarding traffic at all?

 

[oguz]

Also, is it possible to just give the VM an entire NIC (as in, without having to create a bridge), so that Proxmox itself has no say in forwarding traffic at all?

yes it's possible, you can use pci passthrough[0] to achieve that

[0]: https://pve.proxmox.com/wiki/Pci_passthrough

 

[oguruma]

yes it's possible, you can use pci passthrough[0] to achieve that

[0]: https://pve.proxmox.com/wiki/Pci_passthrough

I see... Is that stable in Proxmox? Is it possible to pass through just an integrated NIC without adding a PCI card?

 

[oguz]

yes, it's pretty stable.

you can pass the integrated NIC as well (just make sure you don't pass the wrong one)

EDIT:

i'll have to mention that using pci passthrough will make you unable to use live-migration capabilities (migrating vms while they're online)

backup/restore procedures are also affected by this.

it's probably more preferable if you go for the masquerading network setup