[SOLVED] SDN error status

etfz

Member
Aug 29, 2025
42
4
8
Hi,

All my nodes are listed with an error status in the SDN overview. I can't find any detailed information. I also have not noticed any actual issues. All nodes have been rebooted multiple times since this started happening, and SDN configuration has been reapplied.

1780481691226.png
 
You can get a more detailed error output by clicking on the zone in the left-hand resource tree.
 
Thanks. It shows error vmbr0 on my three VNets.

/etc/network/interfaces
Code:
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto ens2f1np1
iface ens2f1np1 inet manual

auto ens3f1np1
iface ens3f1np1 inet static
        address 10.5.10.2/24

auto ens2f0np0
iface ens2f0np0 inet manual

auto ens3f0np0
iface ens3f0np0 inet manual

iface eno1np0 inet manual

auto eno2np1
iface eno2np1 inet manual

iface eno3 inet manual

auto eno4
iface eno4 inet static
        address 10.5.20.2/24

auto bond0
iface bond0 inet manual
        bond-slaves eno2np1 ens2f1np1
        bond-miimon 100
        bond-mode 802.3ad
#Frontend

auto bond1
iface bond1 inet static
        address 10.5.30.2/24
        bond-slaves ens2f0np0 ens3f0np0
        bond-miimon 100
        bond-mode 802.3ad
        mtu 9000
#Ceph

auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-512

auto vmbr0.20
iface vmbr0.20 inet static
        address 10.7.20.12/24
        gateway 10.7.20.1
#PVE

source /etc/network/interfaces.d/sdn

/etc/network/interfaces.d/sdn
Code:
#version:40

auto BACKUP
iface BACKUP
        bridge_ports vmbr0.9
        bridge_stp off
        bridge_fd 0
        alias Backup

auto INTERNAL
iface INTERNAL
        bridge_ports vmbr0.12
        bridge_stp off
        bridge_fd 0

auto STAGING
iface STAGING
        bridge_ports vmbr0.19
        bridge_stp off
        bridge_fd 0
 
Can you post the output of


Code:
ifquery -a -c -o json
pvesh get /nodes/hv1/sdn/zones/vm/content
 
Certainly.

Code:
[
  {
    "name": "lo",
    "addr_method": "loopback",
    "addr_family": "inet",
    "auto": true,
    "config": {},
    "config_status": {},
    "status": "pass"
  },
  {
    "name": "ens2f1np1",
    "addr_method": "manual",
    "addr_family": "inet",
    "auto": true,
    "config": {},
    "config_status": {},
    "status": "pass"
  },
  {
    "name": "ens3f1np1",
    "addr_method": "static",
    "addr_family": "inet",
    "auto": true,
    "config": {
      "address": "10.5.10.1/24"
    },
    "config_status": {
      "address": "pass"
    },
    "status": "pass"
  },
  {
    "name": "ens2f0np0",
    "addr_method": "manual",
    "addr_family": "inet",
    "auto": true,
    "config": {},
    "config_status": {},
    "status": "pass"
  },
  {
    "name": "ens3f0np0",
    "addr_method": "manual",
    "addr_family": "inet",
    "auto": true,
    "config": {},
    "config_status": {},
    "status": "pass"
  },
  {
    "name": "eno2np1",
    "addr_method": "manual",
    "addr_family": "inet",
    "auto": true,
    "config": {},
    "config_status": {},
    "status": "pass"
  },
  {
    "name": "eno4",
    "addr_method": "static",
    "addr_family": "inet",
    "auto": true,
    "config": {
      "address": "10.5.20.1/24"
    },
    "config_status": {
      "address": "pass"
    },
    "status": "pass"
  },
  {
    "name": "bond0",
    "addr_method": "manual",
    "addr_family": "inet",
    "auto": true,
    "config": {
      "bond-slaves": "eno2np1 ens2f1np1",
      "bond-miimon": "100",
      "bond-mode": "802.3ad"
    },
    "config_status": {
      "bond-slaves": "pass",
      "bond-miimon": "pass",
      "bond-mode": "pass"
    },
    "status": "pass"
  },
  {
    "name": "bond1",
    "addr_method": "static",
    "addr_family": "inet",
    "auto": true,
    "config": {
      "bond-slaves": "ens2f0np0 ens3f0np0",
      "bond-miimon": "100",
      "bond-mode": "802.3ad",
      "mtu": "9000",
      "address": "10.5.30.1/24"
    },
    "config_status": {
      "bond-slaves": "pass",
      "bond-miimon": "pass",
      "bond-mode": "pass",
      "mtu": "pass",
      "address": "pass"
    },
    "status": "pass"
  },
  {
    "name": "vmbr0",
    "addr_method": "manual",
    "addr_family": "inet",
    "auto": true,
    "config": {
      "bridge-ports": "bond0",
      "bridge-fd": "0",
      "bridge-vlan-aware": "yes",
      "bridge-stp": "no",
      "bridge-vids": "2-512",
      "address": "10.7.20.10/24"
    },
    "config_status": {
      "bridge-ports": "pass",
      "bridge-fd": "pass",
      "bridge-vlan-aware": "pass",
      "bridge-stp": "pass",
      "bridge-vids": "",
      "address": "fail"
    },
    "status": "fail"
  },
  {
    "name": "vmbr0.20",
    "addr_method": "static",
    "addr_family": "inet",
    "auto": true,
    "config": {
      "address": "10.7.20.11/24"
    },
    "config_status": {
      "address": "pass"
    },
    "status": "pass"
  },
  {
    "name": "BACKUP",
    "auto": true,
    "config": {
      "bridge-ports": "vmbr0.9",
      "bridge-stp": "no",
      "bridge-fd": "0",
      "alias": "Backup"
    },
    "config_status": {
      "bridge-ports": "pass",
      "bridge-stp": "pass",
      "bridge-fd": "pass",
      "alias": "pass"
    },
    "status": "pass"
  },
  {
    "name": "INTERNAL",
    "auto": true,
    "config": {
      "bridge-ports": "vmbr0.12",
      "bridge-stp": "no",
      "bridge-fd": "0"
    },
    "config_status": {
      "bridge-ports": "pass",
      "bridge-stp": "pass",
      "bridge-fd": "pass"
    },
    "status": "pass"
  },
  {
    "name": "STAGING",
    "auto": true,
    "config": {
      "bridge-ports": "vmbr0.19 (tap114i0) (tap106i0)",
      "bridge-stp": "no",
      "bridge-fd": "0"
    },
    "config_status": {
      "bridge-ports": "pass",
      "bridge-stp": "pass",
      "bridge-fd": "pass"
    },
    "status": "pass"
  }
]

Code:
┌──────────┬────────┬─────────────┐
│ vnet     │ status │ statusmsg   │
╞══════════╪════════╪═════════════╡
│ BACKUP   │ error  │ error vmbr0 │
├──────────┼────────┼─────────────┤
│ INTERNAL │ error  │ error vmbr0 │
├──────────┼────────┼─────────────┤
│ STAGING  │ error  │ error vmbr0 │
└──────────┴────────┴─────────────┘
 
It seems like you still have an IP address configured on vmbr0: 10.7.20.10/24 which causes the ifquery check to fail.

Is this a leftover from a previous configuration, since you seem to have the same subnet configured as well on vmbr0.20? In that case it should be sufficient to remove the IP address from vmbr0, in order to make the error go away.
Be careful though and make sure that the connection via vmbr0.20 works, since it might be the case that your management access is currently working via vmbr0, instead of vmbr0.20, and it might cease to work if you remove the IP from vmbr0.
 
  • Like
Reactions: etfz
Thanks! 10.7.20.10/24 is actually a virtual keepalive address. I think I might have previously used vmbr0 for PVE management. I have now moved the keepalive configuration to vmbr0.20, which has cleared the SDN errors.