Virtual network inside Proxmox

seemog

New Member
Aug 5, 2012
8
0
1
Hello,
I've a question and I hope someone could help with it:

I've a Proxmox server for study. Every virtual machine (VM) that I create inside Proxmox has access to internet and to my home network (I use 192.168.1.0 /24 network).
No, I would like to create a lab network (10.10.10.0 /24) inside proxmox (like in the picture).
proxmox_help_2015.jpg
For that I've created a second bridge (vmbr1), but I'm getting access to internet from ubuntu server 2.

My Configs:

vmbr0:
IP 192.168.1.20 (with is my proxmox physical NIC address)
Mask 255.255.255.0
gateway 192.168.1.1 (my router address)
autostart yes
Bridge Ports eth1

vmbr1:
IP 10.10.10.1
Mask 255.255.255.0
gateway <left blank>
autostart yes
Bridge Ports <left blank>

ubuntu server 1 (will be my virtual network gateway)
has 2 NIC's
eth0 --- connects to vmbr0 to have access to internet and home LAN
eth1 --- connets to vmbr1 to have access to 10.10.10.0 /24 virtual LAN inside Proxmox

eth0
IP 192.168.1.90 /24
GW 192.168.1.1

eth1
IP 10.10.10.1 /24

route table
default via 192.168.1.0/24 dev eth0
10.10.10.0/24 dev eth1 proto kernel scope link src 10.10.10.1
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.90

ubuntu server 2 (will have ubuntu server 1 as gateway, and access internet through it)
has 1 NIC
eth0 --- connets to vmbr1 to have access to 10.10.10.0 /24 virtual LAN inside Proxmox

eth0
IP 10.10.10.2 /24

route table
default via 10.10.10.1/24 dev eth0
10.10.10.0/24 dev eth0 proto kernel scope link src 10.10.10.2


I hope someone could help me.
Thank you in advance.
 
Last edited:

pirateghost

Member
Apr 25, 2013
454
10
18
The first problem I see is that you gave your vmbr1 the same IP address as your Ubuntu server 1. Vmbr does not need an IP unless it is your management vmbr, like your vmbr0.

As long as vmbr1 is not connected to an ETH device, it acts as an internal virtual switch for your VMS and will do exactly what you want.
 

seemog

New Member
Aug 5, 2012
8
0
1
Thank you pirateghost,
I've done a few more tests, and ...

I deleted my previus bridge vmbr1, and created a new one (just "create" and "ok". Didn't assign any ip address).

The rest of the config I kept equal.

Tests Report:

ping 10.10.10.1 -- to -- 10.10.10.2 ------- OK (both ways)
ping 192.168.1.90 -- to -- 10.10.10.2 ---- OK (both ways)

ping 10.10.10.2 -- to -- 192.168.1.1 --- FAILED
ping 10.10.10.1 -- to -- 192.168.1.1 --- FAILED

Curious fact:
from the proxmox command line I can ping both virtual machines, because vmbr1 assumed ip 10.10.10.254
so ping from 10.10.10.254 --to--10.10.10.1 (and .2) -- OK
but
ping 192.168.1.20 -- to -- 10.10.10.1 (and .2) --- FAILED

Conclusion:
I've my virtual network lab inside proxmox connected, but without internet access.
 
Last edited:

seemog

New Member
Aug 5, 2012
8
0
1
No,
if I create a route in 192.168.1.1 to 10.10.10.0/24 network via 192.168.1.20, I will be able to ping from any host on 192.168.1.0 network to ubuntu server 1 (10.10.10.1) but not to server 2 (10.10.10.2)
 

seemog

New Member
Aug 5, 2012
8
0
1
So, I won't be able to solve this just using ubuntu server 1 , and 2 NIC's, acting as a gateway ?
I'll need something like pfsense in the meadle ???
 

pirateghost

Member
Apr 25, 2013
454
10
18
You can configure Ubuntu to do either of those things. Ubuntu can act as a router, but it sounds like you are expecting it to automatically route the traffic.


Sent from my iPhone using Tapatalk
 

pirateghost

Member
Apr 25, 2013
454
10
18
There is nothing to configure in the vmbr. I use a setup similar to this for testing. I use vyos as the router for my internal only domain. It CAN be done.


Sent from my iPhone using Tapatalk
 

symmcom

Renowned Member
Oct 28, 2012
1,081
29
68
Calgary, Canada
www.symmcom.com
What is the main purpose of Ubuntu 1? Is it going to have any roles other than acting as gateway for Ubuntu 2?
If yes, then setting up a virtual firewall such as pfSense or ClearOS in place of Ubuntu 1 will be most efficient and hassle free way to do it. Both of them have GUI making life easier. But this not to say that using Ubuntu wont work, but you will need to configure routing manually using iptables.

To be honest this is not very complex setup. Easily doable once you understand the virtual networking. Rest assured that you will receive the help you need in this thread.
 

seemog

New Member
Aug 5, 2012
8
0
1
The purpouse of ubuntu 1 is to be in the future a DNS and DHCP server for the 10.10.10.0 network. I'm using ubuntu for learning purposes but indeed pfsense can do all of that in a easier way.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE and Proxmox Mail Gateway. We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!