[SOLVED] the function of vmbr0, and where to configure wan and lan addresses

[hongwuding]

vlan with traditional linux birdge

this is the configuration file that confuses me
------------------------------------------------------------------
auto lo
iface lo inet loopback

iface eno1 inet manual

iface eno1.5 inet manual

auto vmbr0v5
iface vmbr0v5 inet static
address 10.10.10.2/24
gateway 10.10.10.1
bridge-ports eno1.5
bridge-stp off
bridge-fd 0

auto vmbr0
iface vmbr0 inet manual
bridge-ports eno1
bridge-stp off
bridge-fd 0
------------------------------------------------------------------

I don't know what vmbr0 does. and i think the VM should bridge directly to vmbr0v5 .

the other is how to configure wan and lan. I'm really not sure what the relevant address in vmbr0v5 means.

this is my first time using pve and I can't find clear examples and explanations online .

 

[B.Otto]

The bridge vmbr0 is the default bridge for untagged (or default) VLANs.

In this config there is another bridge named vmbr0v5 which is attached to the interface eno1 on VLAN 5 (in Linux configured by naming it eno1.5 ).

Thus all traffic through vmbr0 is sent without VLAN tag via interface eno1, while all traffic through vmbr0v5 gets tagged with VLAN 5 and then sent via the same interface eno1.

The 'Proxmox Management IP' is usually given to a bridge interface (default to vmbr0) and here is instead given to vmbr0v5, that puts it in the VLAN 5. It is then only accessible through VLAN 5 and not through another VLAN.

 

[vesalius]

How you set up the proxmox host networks will depend on your network topology. Do you have vlans in use already? Will the proxmox host be behind a physical edge firewall and/or ISP router/firewall? Will the proxmox host have a Firewall/router VM/lxc guest and how would you like that to fit into your network topology?

 

[hongwuding]

The bridge vmbr0 is the default bridge for untagged (or default) VLANs.

In this config there is another bridge named vmbr0v5 which is attached to the interface eno1 on VLAN 5 (in Linux configured by naming it eno1.5 ).

Thus all traffic through vmbr0 is sent without VLAN tag via interface eno1, while all traffic through vmbr0v5 gets tagged with VLAN 5 and then sent via the same interface eno1.

The 'Proxmox Management IP' is usually given to a bridge interface (default to vmbr0) and here is instead given to vmbr0v5, that puts it in the VLAN 5. It is then only accessible through VLAN 5 and not through another VLAN.

That's true. After reading your reply, I have made repeated trials. thank you!

 

[hongwuding]

How you set up the proxmox host networks will depend on your network topology. Do you have vlans in use already? Will the proxmox host be behind a physical edge firewall and/or ISP router/firewall? Will the proxmox host have a Firewall/router VM/lxc guest and how would you like that to fit into your network topology?

I'm still in the testing phase. and I'm not familiar with vlans. The vlan is configured for only one node. this node connect to a Layer 2 switch .No firewall.

 

[vesalius]

I'm still in the testing phase. and I'm not familiar with vlans. The vlan is configured for only one node. this node connect to a Layer 2 switch .No firewall.

to be clear you intend to connect the Proxmox node directly to the internet without a firewall?

connecting to the internet is not the same for everyone. What type of internet service provider (ISP) do you have? Do have modem? Is there a modem and dhcp server connected to the layer 2 switch? Just lots of variables that would impact how Proxmox connects to the internet.

 

[hongwuding]

to be clear you intend to connect the Proxmox node directly to the internet without a firewall?

connecting to the internet is not the same for everyone. What type of internet service provider (ISP) do you have? Do have modem? Is there a modem and dhcp server connected to the layer 2 switch? Just lots of variables that would impact how Proxmox connects to the internet.

Thank you very much! Your opinion is very enlightening to me, now I preliminarily realized the network configuration, also have a deeper understanding.