Unable to Access Internet from VM with SDN VXLAN Network in Proxmox

[avinashboddeda]

Hi all,

I am working with a Proxmox environment where we are managing multiple tenants, and I am trying to isolate their networks using SDN with VXLAN. However, I’m facing an issue where a VM assigned an IP address in a dedicated subnet cannot access the internet.

Here is my setup:

• Proxmox IP: 192.168.88.51 (on subnet 192.168.88.0/24)

SDN Configuration:​

1. Zone Configuration:
   • Zone Name: zone1
   • Peer Address List: 192.168.88.51
   • MTU: auto
   • Nodes: ALL
   • IPAM: pve
2. VNET Configuration:
   • Name: vnet1
   • Zone: zone1
   • Tag: 1000
   • VLAN Aware: false
3. Subnet Configuration:
   • Subnet: 192.168.200.0/24
   • Gateway: 192.168.200.1
   • SNAT: enabled
   • DHCP Range: 192.168.200.10 - 192.168.200.50
4. VM Configuration:
   • IP: 192.168.200.10/24
   • Gateway: 192.168.200.1

Problem:​

Despite the VM being correctly configured within the 192.168.200.0/24 subnet, I am unable to ping the internet from the VM. The internal network seems fine, but external access does not work.

• I have verified that the VM's network interface is configured properly.
• I have also checked firewall settings but did not find any blocking rules.

Has anyone faced a similar issue or have any suggestions on what could be wrong with the SDN VXLAN setup?

Thanks in advance for your help!

 

[shanreich]

VXLAN is a layer2 network and as such does not provide any routing functionality - the gateway setting has no effect. You'd need to add a second network device for connecting to the internet or add a gateway VM/CT to the VXLAN that has internet access and can provide routing for that network.

 

[zoujin]

VXLAN is a layer2 network and as such does not provide any routing functionality - the gateway setting has no effect. You'd need to add a second network device for connecting to the internet or add a gateway VM/CT to the VXLAN that has internet access and can provide routing for that network.

Can you explain in more detail? In a VXLAN network, how should I configure the network for the virtual machine so that it can access the internet?