Vlan issues with proxmox and icx6450

sh4d0w0lf

Member
Aug 25, 2021
1
0
6
37
Hi, I've been having issues with getting my proxmox host to work with vlans over a 802.3ad lag interface to an icx 6450 switch and wondering if someone could point me in the right direction regarding my config.

The host is a HP DL380p with the 530flr-sfp+ adapter with both 10gb sfp's installed and setup to form a lag. I can access the server when the switch doesn't have a vlan trunk enabled on the lag but as soon as I enable it I loose all access to the server and I can't access anything over the vlan either.

My proxmox /etc/networking/interfaces file is as follows:

Code:
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

auto eno2
iface eno2 inet manual

iface ens2f0 inet manual

iface ens2f1 inet manual

auto bond0
iface bond0 inet manual
        bond-slaves eno1 eno2
        bond-miimon 100
        bond-mode 802.3ad

auto vmbr0
iface vmbr0 inet static
        address 10.10.10.2/24
        gateway 10.10.10.1
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#Server Management Interface

auto vlan10
iface vlan10 inet static
        address 10.10.10.3/24
        vlan-raw-device bond0
And my current switch config minus the vlan being added to the lag interface is:
Code:
Current configuration:
!
ver 08.0.30hT311
!
stack unit 1
  module 1 icx6450-48p-poe-port-management-module
  module 2 icx6450-sfp-plus-4port-40g-module
!
!
!
lag LAG01 dynamic id 1
 ports ethernet 1/2/1 ethernet 1/2/3 
 primary-port 1/2/1
 deploy
!
!
vlan 1 name DEFAULT-VLAN by port
!
vlan 10 name core by port
 untagged ethe 1/1/24 
!
!
!
!                                                                 
!
optical-monitor
aaa authentication web-server default local
aaa authentication enable default local
aaa authentication login default local
enable aaa console
ip address 10.10.10.30 255.255.255.0
no ip dhcp-client enable
!
username ****** password .....
!
!
interface ethernet 1/1/5
 inline power
!
!
!
!
!
!
!
!
end

Any help is very much appreciated.
 
I used the ICX 6450 with Proxmox for years and was able to use multiple vlans. I never set up a separate vlan at the Proxmox network level though.

10.10.10.2 and 10.10.10.3 are in the same subnet are you trying to get them both on vlan 10?

Are you adding vlan 10 to the 6450 lag untagged or tagged?
 
Last edited:
Hi,
If you use vlan-aware bridge, I would avoid to tag physical bond0 directly.
best way is to create an internal bridge vlan interface like

Code:
auto vmbr0
iface vmbr0 inet static
        address 10.10.10.2/24
        gateway 10.10.10.1
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#Server Management Interface

auto vmbr0.10
iface vmbr0.10 inet static
        address 10.10.10.3/24

Also, why do you need 2 ips address in 10.10.10.0/24 ?

you could have simply


Code:
auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#Server Management Interface

auto vmbr0.10
iface vmbr0.10 inet static
        address 10.10.10.3/24