Virtual network inside Proxmox

[seemog]

Hello,
I've a question and I hope someone could help with it:

I've a Proxmox server for study. Every virtual machine (VM) that I create inside Proxmox has access to internet and to my home network (I use 192.168.1.0 /24 network).
No, I would like to create a lab network (10.10.10.0 /24) inside proxmox (like in the picture).

For that I've created a second bridge (vmbr1), but I'm getting access to internet from ubuntu server 2.

My Configs:

vmbr0:
IP 192.168.1.20 (with is my proxmox physical NIC address)
Mask 255.255.255.0
gateway 192.168.1.1 (my router address)
autostart yes
Bridge Ports eth1

vmbr1:
IP 10.10.10.1
Mask 255.255.255.0
gateway <left blank>
autostart yes
Bridge Ports <left blank>

ubuntu server 1 (will be my virtual network gateway)
has 2 NIC's
eth0 --- connects to vmbr0 to have access to internet and home LAN
eth1 --- connets to vmbr1 to have access to 10.10.10.0 /24 virtual LAN inside Proxmox

eth0
IP 192.168.1.90 /24
GW 192.168.1.1

eth1
IP 10.10.10.1 /24

route table
default via 192.168.1.0/24 dev eth0
10.10.10.0/24 dev eth1 proto kernel scope link src 10.10.10.1
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.90

ubuntu server 2 (will have ubuntu server 1 as gateway, and access internet through it)
has 1 NIC
eth0 --- connets to vmbr1 to have access to 10.10.10.0 /24 virtual LAN inside Proxmox

eth0
IP 10.10.10.2 /24

route table
default via 10.10.10.1/24 dev eth0
10.10.10.0/24 dev eth0 proto kernel scope link src 10.10.10.2


I hope someone could help me.
Thank you in advance.

 

[pirateghost]

The first problem I see is that you gave your vmbr1 the same IP address as your Ubuntu server 1. Vmbr does not need an IP unless it is your management vmbr, like your vmbr0.

As long as vmbr1 is not connected to an ETH device, it acts as an internal virtual switch for your VMS and will do exactly what you want.

 

[seemog]

Thank you pirateghost,
I've done a few more tests, and ...

I deleted my previus bridge vmbr1, and created a new one (just "create" and "ok". Didn't assign any ip address).

The rest of the config I kept equal.

Tests Report:

ping 10.10.10.1 -- to -- 10.10.10.2 ------- OK (both ways)
ping 192.168.1.90 -- to -- 10.10.10.2 ---- OK (both ways)

ping 10.10.10.2 -- to -- 192.168.1.1 --- FAILED
ping 10.10.10.1 -- to -- 192.168.1.1 --- FAILED

Curious fact:
from the proxmox command line I can ping both virtual machines, because vmbr1 assumed ip 10.10.10.254
so ping from 10.10.10.254 --to--10.10.10.1 (and .2) -- OK
but
ping 192.168.1.20 -- to -- 10.10.10.1 (and .2) --- FAILED

Conclusion:
I've my virtual network lab inside proxmox connected, but without internet access.

 

[redmop]

Does the gateway on 192.168.10.0 have a route to 10.10.10.0?

 

[seemog]

No,
if I create a route in 192.168.1.1 to 10.10.10.0/24 network via 192.168.1.20, I will be able to ping from any host on 192.168.1.0 network to ubuntu server 1 (10.10.10.1) but not to server 2 (10.10.10.2)

 

[pirateghost]

You would need routing or NAT on your 10.10.10.1 subnet


Sent from my iPhone using Tapatalk

 

[seemog]

So, I won't be able to solve this just using ubuntu server 1 , and 2 NIC's, acting as a gateway ?
I'll need something like pfsense in the meadle ???

 

[pirateghost]

You can configure Ubuntu to do either of those things. Ubuntu can act as a router, but it sounds like you are expecting it to automatically route the traffic.


Sent from my iPhone using Tapatalk

 

[seemog]

I have set the routes, but I think the problem is in vmbr`s configs.

 

[pirateghost]

There is nothing to configure in the vmbr. I use a setup similar to this for testing. I use vyos as the router for my internal only domain. It CAN be done.


Sent from my iPhone using Tapatalk

 

[wahmed]

What is the main purpose of Ubuntu 1? Is it going to have any roles other than acting as gateway for Ubuntu 2?
If yes, then setting up a virtual firewall such as pfSense or ClearOS in place of Ubuntu 1 will be most efficient and hassle free way to do it. Both of them have GUI making life easier. But this not to say that using Ubuntu wont work, but you will need to configure routing manually using iptables.

To be honest this is not very complex setup. Easily doable once you understand the virtual networking. Rest assured that you will receive the help you need in this thread.

 

[seemog]

The purpouse of ubuntu 1 is to be in the future a DNS and DHCP server for the 10.10.10.0 network. I'm using ubuntu for learning purposes but indeed pfsense can do all of that in a easier way.

 

[pirateghost]

The purpouse of ubuntu 1 is to be in the future a DNS and DHCP server for the 10.10.10.0 network. I'm using ubuntu for learning purposes but indeed pfsense can do all of that in a easier way.

Try Zentyal