Use one main MAC address of the server for all IP machines

[NabiKAZ]

I have a server from hetzner, and install proxmox on it.

My configuration is simple, and it's my "/etc/network/interfaces" file:

auto lo
iface lo inet loopback

iface enp6s0 inet manual

auto vmbr0
iface vmbr0 inet static
        address XX.YY.ZZ.TT
        netmask 255.255.0.0
        gateway XX.YY.ZZ.DD
        bridge_ports enp6s0
        bridge_stp off
        bridge_fd 0
        bridge_maxwait 0

And also I have one additional subnet /28, and can use these IP range in VMs and works well for few months.
And you know that each machine has a different and independent MAC address.

Today my server was suspended!

This is email from hetzner:

We have noticed that you have been using other MAC addresses in addition to the allowed at your Robot account.

Allowed MAC addresses:
XX:XX:XX:XX:XX:XX
not allowed MAC addresses:
YY:YY:YY:YY:YY:YY
ZZ:ZZ:ZZ:ZZ:ZZ:ZZ
TT:TT:TT:TT:TT:TT


We see wrong MACs on your switchport at this very moment:

YY:YY:YY:YY:YY:YY D - ge-0/0/39.0<<<---not allowed
XX:XX:XX:XX:XX:XX D - ge-0/0/39.0

The Problem is that you use this MAC towards our Switch.

For your subnet IPs you need to use the Main MAC of the Server to communicate towards the internet in order to solve the problem.

You should apply a routed setup for your additional subnet.

Please check this with tcpdump on your server.

I assigned the main MAC address to the virtual machine, but the virtual machine gave timeout, and it seems that the machine MAC should not be the same with the main server MAC address.

This is an emergency problem.
How can I solve the problem please?

 

[wolfgang]

Hi,

Hetzner does not allow VMs directly to communicate with there switches.

You must set up a routed setup.
https://wiki.hetzner.de/index.php/Proxmox_VE/en
https://pve.proxmox.com/pve-docs/pve-admin-guide.html#sysadmin_network_configuration