I'm noticing that when I stop a VM with a network interface tied to an internal "private sub network" it takes down the bridge as well. This means any other VMs on that network don't work either.
It doesn't matter if the VM is using a network interface with e1000 or virtio.
I'm using this method: https://pve.proxmox.com/wiki/Network_Model#Masquerading_.28NAT.29_with_iptables
I have 10+ other Proxmox hypervisors from VE3 to VE5 using this method and they work fine.
Running "service networking restart" fixes it.
Using Proxmox VE 5.1.-36.
It doesn't matter if the VM is using a network interface with e1000 or virtio.
I'm using this method: https://pve.proxmox.com/wiki/Network_Model#Masquerading_.28NAT.29_with_iptables
I have 10+ other Proxmox hypervisors from VE3 to VE5 using this method and they work fine.
Running "service networking restart" fixes it.
Using Proxmox VE 5.1.-36.
Code:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
8: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
link/ether 00:25:90:da:7f:88 brd ff:ff:ff:ff:ff:ff
9: rename9: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 00:25:90:da:7f:89 brd ff:ff:ff:ff:ff:ff
58: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:25:90:da:7f:88 brd ff:ff:ff:ff:ff:ff
inet 10.1.1.22/24 brd 10.1.1.255 scope global vmbr0
valid_lft forever preferred_lft forever
inet6 fe80::225:90ff:feda:7f88/64 scope link
valid_lft forever preferred_lft forever
59: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000
link/ether 36:56:e6:0f:03:ee brd ff:ff:ff:ff:ff:ff
inet 10.10.22.1/24 brd 10.10.22.255 scope global vmbr1
valid_lft forever preferred_lft forever
inet6 fe80::3456:e6ff:fe0f:3ee/64 scope link
valid_lft forever preferred_lft forever
Code:
auto lo
iface lo inet loopback
auto vmbr0
iface vmbr0 inet static
address 10.1.1.22
netmask 255.255.255.0
gateway 10.1.1.1
bridge_ports eno1
bridge_stp off
bridge_fd 0
auto vmbr1
iface vmbr1 inet static
address 10.10.22.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.10.22.0/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.10.22.0/24' -o vmbr0 -j MASQUERADE
iface rename2 inet manual
Last edited:
