[SOLVED] VLAN & Bridges conflicting?

[qgrasso]

Hi All,

i'm trying to add our proxmox server ip address to vlan 10 as per below, this works fine apart from when i start a VM which has a interface in vlan 10, i can no longer access the lan via the 10.90.0.10 interface.

Same thing happens when i use a vm with vlan 16 as well.


Any ideas?

Thanks,
Quenten

/etc/network/interfaces
---------------------------------------------
auto lo
iface lo inet loopback


auto eth0
iface eth0 inet manual
post-up ifconfig eth0 mtu 12000


auto eth1
iface eth1 inet manual
post-up ifconfig eth1 mtu 12000


auto eth2
iface eth2 inet manual
post-up ifconfig eth2 mtu 9000


auto eth3
iface eth3 inet manual
post-up ifconfig eth3 mtu 9000


# Internal Bond0
auto bond0
iface bond0 inet manual
slaves eth0 eth1
bond_mode 802.3ad
bond_miimon 100
bond_downdelay 200
bond_updelay 200
post-up ifconfig bond0 mtu 12000


# External Bond1
auto bond1
iface bond1 inet manual
slaves eth2 eth3
bond_mode active-backup
bond_miimon 100
bond_downdelay 200
bond_updelay 200
post-up ifconfig bond1 mtu 9000


auto bond1.16
iface bond1.16 inet static
address 172.20.4.200
netmask 255.255.255.0
gateway 172.20.4.1


auto bond0.10
iface bond0.10 inet static
address 10.90.0.10
netmask 255.255.255.0


auto vmbr0
iface vmbr0 inet manual
bridge_ports bond0
bridge_stp off


auto vmbr1
iface vmbr1 inet manual
bridge_ports bond1
bridge_stp off
---------------------------------------------

 

[dietmar]

Any ideas?

I guess you need to assign the IP to the vlan bridge instead (created when you start the VM with a VLAN). So please
remove the IP address from bond0.10 and use something like:

auto vmbr0v10
iface vmbr0v10 inet static
address 10.90.0.10
netmask 255.255.255.0
bridge_ports bond0.10
bridge_stp off

Does that work?

 

[qgrasso]

Perfect, Thank you very much!

One last thing we were trying to do is put a interface into a KVM VM, as a trunk. so the vlans are handled inside the VM instead of on the vNIC's.

Do you have any tips for this one?

Thanks!
Quenten

 

[dietmar]

Do you have any tips for this one?

Where is the problem?

 

[qgrasso]

Where is the problem?

Example.

We create a KVM Virtual Machine called "MikrotikVM1" we install MikrotikOS etc, we assign a Network card without a tagged vlan.
Now inside the mikrotikvm1 we want to access the network's tagged vlan's without creating 10 interfaces at the proxmox kvm level into the vm.

Currently I'm finding I cannot access the networks vlan's however if i configure 2 mikrotiks the same way I can see each other.

I assume its something like the vmbr0 isn't forwarding the tagged vlans to/from the network?

So in summary I would like the VM to be VLAN aware.

Thanks,
Quenten

 

[dietmar]

I assume its something like the vmbr0 isn't forwarding the tagged vlans to/from the network?

Why should the bridge do that? Try to use tcpdump on vmbr0 to debug package flow.

 

[dietmar]

I assume its something like the vmbr0 isn't forwarding the tagged vlans to/from the network?

Oh, you want to have a mixed setup (some VM manage VLANs on the host, some on the guest)?

I guess that will not work currently, because vmbr0v10 is not connected to vmbr0. This is because we
set vlan tags directly on the used devices (better performance).

I assume this will work if we would use a nested bridge setup, but this does not work with the current kernel.