VLAN problems - packet loss on VM

[grl]

I've supermicro-server with 2 NICs connected to a Mikrotik CRS309 switch running SwOS.

I would like to use the 2 NICs as bonded channels serving the management gui on VLAN 50 and the VMs on a VLAN configured per VM.

I did the setup below which works for the management gui and for the networking between VMs running on the server.
pinging from the hypervisor to the router works perfectls, pinging between VMs works perfectly
But if I try to ping the router from a VM i get about 90% package loss. Every now and then a package reaches the router (also verified by packet sniffing on the router).

This is my /etc/network/interfaces.

Any idea what I'm doing wrong here?
As the management gui works and the LACP-Tunnel is shown correctly on the switch I'm pretty sure the bonding works.
And I consider it really strange that sometimes a package gets really to the router - if I'm completely wrong I'd expect no package going through...

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

auto eno2
iface eno2 inet manual

auto bond0
iface bond0 inet manual
    bond-slaves eno1 eno2
    bond-miimon 100
    bond-mode 802.3ad
    bond-xmit-hash-policy layer2+3

auto bond0.50
iface bond0.50 inet manual

auto vmbr0
iface vmbr0 inet manual
    bridge-ports bond0
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094

auto vmbr1
iface vmbr1 inet static
    address 10.10.10.10/24
    gateway 10.10.10.254
    bridge-ports bond0.50
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094

Thanks
Lukas

 

[showiproute]

From my point of view your network configuration looks a bit strange to me.

I would create only one bond -> bond0

Then I would create vmbr0 and vmbr0.50 to have VLAN tagging enabled.

 

[spirit]

if you use vlan aware bridge, tag directly the bridge, like

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

auto eno2
iface eno2 inet manual

auto bond0
iface bond0 inet manual
    bond-slaves eno1 eno2
    bond-miimon 100
    bond-mode 802.3ad
    bond-xmit-hash-policy layer2+3

auto vmbr0
iface vmbr0 inet manual
    bridge-ports bond0
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094

auto vmbr0.50
iface vmbr0.50 inet static
    address 10.10.10.10/24
    gateway 10.10.10.254

https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#_vlan_802_1q

 

[ph0x]

Third vote for creating the vlan on top of the bridge and not on the bond.
Hands down.

 

[grl]

Thanks for the replies.
But:
1.) tried that too - same problem
2.) its not what the proxmox-docs say: https://pve.proxmox.com/wiki/Network_Configuration#_vlan_802_1q

regards
Lukas