Strange problems with Hetzner subnet and Proxmox

[Sledge]

Hi,
i got a Rootserver and an /28 Subnet from Hetzner. First of all we setup the Server with Proxmox without any problems.
It works well with an LXC-Ubuntu. But we get a couple of strange problems setting up the network-bridges and a "real" VM.

Hostconfig

auto lo
iface lo inet loopback

iface lo inet6 loopback

auto enp4s0
iface enp4s0 inet static
        address  5.9.16.aaa
        netmask  255.255.255.224
        gateway  5.9.16.161
        up route add -net 5.9.16.160 netmask 255.255.255.224 gw 5.9.16.161 dev enp4s0
# route 5.9.16.160/27 via 5.9.16.161

iface enp4s0 inet6 static
        address  2a01:4f8:160:90a1::2
        netmask  64
        gateway  fe80::1

auto vmbr0
iface vmbr0 inet static
        address  5.9.16.aaa
        netmask  255.255.255.255
        bridge_ports none
        bridge_stp off
        bridge_fd 0
        bridge_stop off
        up ip route add 5.9.134.bbb/32 dev vmbr0
        post-up echo 0 > /proc/sys/net/ipv4/ip_forward
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
# 5.9.134.bbb


auto vmbr1
iface vmbr1 inet static
        address  5.9.16.aaa
        netmask  255.255.255.255
        bridge_ports none
        bridge_stp off
        bridge_fd 0
        bridge_stop off
        up ip route add 5.9.134.ccc/32 dev vmbr1
# 5.9.134.ccc
and so on ...

Clientconfig netplan

# This is the network config written by 'subiquity'
network:
    ethernets:
        ens18:
            addresses:
            - 5.9.134.bbb/32
            gateway5: 5.9.16.aaa
            nameservers:
            addresses:
            - 8.8.8.8
    version: 2

When i try to ping 1.1.1.1 the feedback is "connect: Network is unreachable"
Did you have any idea?

 

[matrix]

Hi,

Are you sure to have disabled the firewall?

 

[toster234]

I've got the same problem, exactly the same, it works on the container and not on the VM. My firewall is off.

 

[Mathiiss]

I have the same problem ..

 

[Mathiiss]

But for virtual machines, the problem comes from netplan I believe

 

[bobmc]

I think the major problem with the config as posted is that the virtual bridges (vmbr) are not mapped to any 'real' network ports and so will not be able to reach outside of the local network.

This would probably be a good starting point

auto lo
iface lo inet loopback

iface lo inet6 loopback

auto enp4s0
iface enp4s0 inet manual


auto vmbr0
iface vmbr0 inet static
        address  5.9.16.aaa
        netmask  255.255.255.224
    gateway 5.9.16.161
        bridge_ports enp4s0
        bridge_stp off
        bridge_fd 0
        bridge_stop off

This should allow the proxmox host to reach the internet

Then create a VM or container with a network connection mapped to vmbr0 and assign an IP within the same subnet and they should be able to reach the internet and they should be reachable from outside.

 

[acs4tec]

the same problem