Still no internet on Windows 10 VM

[Yohanson77]

I have been trying to get this working for a week now with numerous attempts.

I have a Hetzner EX41 dedicated server and have installed Proxmox following this Indivar guide. I have also followed nearly every youtube video ranging from Techno Tim to GreyTech. All I want to do is bridge my connection to work on the VMs....does anyone have any guidance? This is what I am always faced with. In all the videos I have watched they all have internet whilst installing.

 

[bobmc]

There's not enough information there to troubleshoot the problem

1) Please post the output of 'cat /etc/network/interfaces' from the proxmox host
2) Please open a command prompt on the Windows 10 VM and post the output of 'ipconfig /all'

 

[Yohanson77]

As requested, hope this helps

 

[Yohanson77]

There's not enough information there to troubleshoot the problem

1) Please post the output of 'cat /etc/network/interfaces' from the proxmox host
2) Please open a command prompt on the Windows 10 VM and post the output of 'ipconfig /all'

I have provided the information, thank you.

 

[Dunuin]

Your host needs to do NAT if you only got one public IP but want your VMs in a private subnet on vmbr1. Look here for an example.

 

[birdy]

I'm not familiair with Hetzner but you need to, at least, do three things:

- Set up NAT on your VMBR1 (so your VM private address is translated to a "real" address)
- change your W10 ip -adress to something else then 192.168.1.1, let's say 192.168.1.2 ( .1 is already assigned to your VMBR1 interface)
- change your W10 gateway address to 192.168.1.1 (via .1 you go to the Internet)

Here is some more info:

https://computingforgeeks.com/create-private-network-bridge-proxmox-with-nat/

 

[theCiscoGeek]

*Necessary disclaimer: The following is my own opinion and does not reflect the views or practices of my employer. It is of a personal capacity only and should not be considered any kind of consultation.*


It appears that you may have a /26 subnet available to you? If that's the case, you could bridge the VM directly to the internet. That's a very bad practice. Personally I would even avoid allowing access directly to proxmox, but because of some legal mumbo-jumbo, details come very close to limitations of my employment contract.

At a high level, setting up a virtual firewall such as OPNsense would be beneficial for several reasons:

• It provides NAT as mentioned above
• It's easy to admin - easier than linux command line for those unfamiliar with iptables and such
• Because it's easier to grasp conceptually, it will likely lead to a more secure network overall
• They have outstanding documentation

If it were my environment, and I was going for something simple, I might set something up similar to the below example:



Keeping a bubble around my virtual assets in the cloud is important to me, because I'd rather not have my machines compromised. The biggest concern in my mind with a proxmox host being connected directly to the internet with public accessibility is that if it were to become compromised, anything hosted on top of it would be "done for" as it were.

Now that's how I might do it. Between the answers above and your Google-Fu, hopefully this provides some visual representation of what someone might do if they were in a similar situation.

 

[Dunuin]

I also think a OPNsense VM going the NAT is the best way. You can also add plugins to OPNsense so it can be used as a reverse proxy if you want to several webservers with just one public IP, it can do intrusion prevention, act as a VPN server, do DNS/DHCP/NTP, route between several isolated DMZs, ...

 

[Yohanson77]

Your host needs to do NAT if you only got one public IP but want your VMs in a private subnet on vmbr1. Look here for an example.

Thank you. I did purchase another IP from Hetzner, could I use that?

 

[Yohanson77]

I'm not familiair with Hetzner but you need to, at least, do three things:

- Set up NAT on your VMBR1 (so your VM private address is translated to a "real" address)
- change your W10 ip -adress to something else then 192.168.1.1, let's say 192.168.1.2 ( .1 is already assigned to your VMBR1 interface)
- change your W10 gateway address to 192.168.1.1 (via .1 you go to the Internet)

Here is some more info:

https://computingforgeeks.com/create-private-network-bridge-proxmox-with-nat/

Thank you I will look at the configuration

 

[Yohanson77]

*Necessary disclaimer: The following is my own opinion and does not reflect the views or practices of my employer. It is of a personal capacity only and should not be considered any kind of consultation.*


It appears that you may have a /26 subnet available to you? If that's the case, you could bridge the VM directly to the internet. That's a very bad practice. Personally I would even avoid allowing access directly to proxmox, but because of some legal mumbo-jumbo, details come very close to limitations of my employment contract.

At a high level, setting up a virtual firewall such as OPNsense would be beneficial for several reasons:

• It provides NAT as mentioned above
• It's easy to admin - easier than linux command line for those unfamiliar with iptables and such
• Because it's easier to grasp conceptually, it will likely lead to a more secure network overall
• They have outstanding documentation

If it were my environment, and I was going for something simple, I might set something up similar to the below example:

View attachment 27285

Keeping a bubble around my virtual assets in the cloud is important to me, because I'd rather not have my machines compromised. The biggest concern in my mind with a proxmox host being connected directly to the internet with public accessibility is that if it were to become compromised, anything hosted on top of it would be "done for" as it were.

Now that's how I might do it. Between the answers above and your Google-Fu, hopefully this provides some visual representation of what someone might do if they were in a similar situation.

I am going to install OPNsense so thank you for the thorough description

 

[Yohanson77]

Also also think a OPNsense VM going the NAT is the best way. You can also add plugins to OPNsense so it can be used as a reverse proxy if you want to several webservers with just one public IP, it can do intrusion prevention, act as a VPN server, do DNS/DHCP/NTP, route between several isolated DMZs, ...

I’m going to install OPNsense on Proxmox. Thank you. If you have any guide recommendations it would be appreciated