[SOLVED] Ssh from host, no route to host

[petitminion]

Hey

A very strange thing is happening. After reboot, When I try to ssh from my proxmox host to my home, I have a "no route to host" error. But when I use the same command on a lxc container in that same host, I can connect perfectly...

So I though the problem come from the ssh client of the host. So i tried to uninstall a reinstall the package but when I do "sudo apt install openssh-client" apt want to delete pve-manager package "The following packages will be REMOVED: openssh-client openssh-server openssh-sftp-server proxmox-ve task-ssh-server"

Before rebooting I was trying to set dropbear to unlock luks container remotely, maybe there is a connection..

Any ideas ?

thx

 

[aaron]

"no route to host" sounds like a networking issue not like a problem with the packages.
Can you ping the host?

 

[Kubicz]

Please provide further information related to Your network setup and try to describe Your L3 scenario in order to be capable to help more directly. Proving output of ip a s && ip r l should be a good start. Output of traceroute {destination} from Your Proxmox may give us some hint as well.

Generally speaking, as You can connect from LXC over SSH, problem is not in routing VM/LXC traffic via Your primary uplink and RCOTI shouldn't lie in firewall rules at border router of Your home as source IP should be the same. But it really depends on Your actual networking settings within the Proxmox host.

Obfuscated output of cat /etc/network/interfaces can help as well.

 

[petitminion]

thx a lot for your help

I can't ping my host. That's so strange because all my containers work just fine with there webapps oO

ip r l

default via 192.168.1.1 dev eno1 
192.168.1.0/24 dev vmbr0 proto kernel scope link src 192.168.1.16 
192.168.1.0/24 dev eno1 proto kernel scope link src 192.168.1.16

ip a s

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
    link/ether 10:98:36:9f:b6:b9 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.16/24 brd 192.168.1.255 scope global dynamic eno1
       valid_lft 73999sec preferred_lft 73999sec
3: eno2: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether 10:98:36:9f:b6:ba brd ff:ff:ff:ff:ff:ff
4: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 10:98:36:9f:b6:b9 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.16/24 brd 192.168.1.255 scope global vmbr0
       valid_lft forever preferred_lft forever
    inet6 2a01:cb04:6d4:3500:1298:36ff:fe9f:b6b9/64 scope global dynamic mngtmpaddr 
       valid_lft 1764sec preferred_lft 564sec
    inet6 fe80::1298:36ff:fe9f:b6b9/64 scope link 
       valid_lft forever preferred_lft forever
6: veth100i0@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master fwbr100i0 state UP group default qlen 1000
    link/ether fe:1f:6c:be:d7:ef brd ff:ff:ff:ff:ff:ff link-netnsid 0
7: fwbr100i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 7e:50:d1:4e:b7:17 brd ff:ff:ff:ff:ff:ff
8: fwpr100p0@fwln100i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr0 state UP group default qlen 1000
    link/ether fa:ef:a4:42:6e:82 brd ff:ff:ff:ff:ff:ff
9: fwln100i0@fwpr100p0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master fwbr100i0 state UP group default qlen 1000
    link/ether 7e:50:d1:4e:b7:17 brd ff:ff:ff:ff:ff:ff

traceroute

traceroute to 82.226.14.246 (82.226.14.246), 30 hops max, 60 byte packets
 1  lovelovekoeurs.home (192.168.1.16)  3071.853 ms !H  3071.841 ms !H  3071.837 ms !H

Interfaces

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

allow-hotplug eno1

iface eno1 inet dhcp
# This is an autoconfigured IPv6 interface

iface eno1 inet6 auto

iface eno2 inet manual

auto vmbr0
iface vmbr0 inet static
        address  192.168.1.16
        netmask  255.255.255.0
        gateway  192.168.1.255
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

 

[aaron]

You have the same IP configured on the eno1 and vmbr0 interface. The vmbr0 is using the eno1 interface as bridge-port.

Change the line

iface eno1 inet dhcp

to

iface eno1 inet manual

Then reboot your server.

Having the same IP on two interfaces can lead to all kinds of unexpected behavior.

 

[petitminion]

that worked, thx a lot

 

[petitminion]

Hey ! I re-oppen this because I just figured I can't ssh to my promox host outside the LAN :s

I can ssh from my computeur to proxmox in the LAN, but when I tried from the outside a get a timeout :s

I'v changed my config :

Interface :

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

allow-hotplug eno1

iface eno1 inet dhcp
# This is an autoconfigured IPv6 interface

iface eno1 inet6 auto

iface eno2 inet manual

auto vmbr0
iface vmbr0 inet static
    address  192.168.1.17
    netmask  255.255.255.0
    gateway  192.168.1.255
    bridge-ports eno1
    bridge-stp off
    bridge-fd 0

ip r l

default via 192.168.1.1 dev eno1
192.168.1.0/24 dev vmbr0 proto kernel scope link src 192.168.1.17
192.168.1.0/24 dev eno1 proto kernel scope link src 192.168.1.16

ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
    link/ether 10:98:36:9f:b6:b9 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.16/24 brd 192.168.1.255 scope global dynamic eno1
       valid_lft 85562sec preferred_lft 85562sec
3: eno2: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether 10:98:36:9f:b6:ba brd ff:ff:ff:ff:ff:ff
4: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 10:98:36:9f:b6:b9 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.17/24 brd 192.168.1.255 scope global vmbr0
       valid_lft forever preferred_lft forever
    inet6 2a01:cb04:6d4:3500:1298:36ff:fe9f:b6b9/64 scope global dynamic mngtmpaddr
       valid_lft 1769sec preferred_lft 569sec
    inet6 fe80::1298:36ff:fe9f:b6b9/64 scope link
       valid_lft forever preferred_lft forever

 

[petitminion]

find it, it was my gateway who wasn't the good one

the final config I use is with eno1 in manual

thx again