VLAN Setup

[reggles10]

Hi,
I've been battling this for a while and seem to get it working for a bit and then it fails and I can't get it back! This is my setup:

Host: in vlan 10
Guest: In vlan 50

Host Interfaces:



Guest Interface:


My guest is configured using netplan:

  network:
    version: 2
    renderer: networkd
    ethernets:
      ens18:
        routes:
          - to: default
          via: 10.x.x.x

    vlans:
      vlan50:
        id: 50
        link: ens18
        accept-ra: no
        addresses:
          - 10.x.x.x/24
        nameservers:
          addresses:
            - 10.x.x.x

From the host I can ping the gateway of both vlans but I can't ping the guest. And the guest has no network access at all. For testing, I've turned off the Proxmox firewall at all levels. I've tried setting and not setting the vlan tag in the network device (unsure because the Proxmox bridge interface uses a vlan, so is that tagging already? I read somewhere that multiple tagging could be a problem - so do i need to add the vlan tag in the network device and create a vlan in the guest? I've researched a lot and still can't seem to get it to work. Any help would be welcome! Thank you

 

[reggles10]

I just gave the ens18 interface an ip address and am now able to ping the gateway for the vlan (pfsense interface) but I still don't have network access. It seems to be a routing problem as I got a 'no route to host' error when trying apt update.

 

[Mr.Doubt]

The tagging is on your physical Interface, wich is member of the bridge. In the ct/vm config you don't need a VLAN Tag. In the config of your client OS you don't need the VLAN tag.
The bridge, in your example vmbr0v50 acts like a switch wich tags the port to VLAN 50 transparent for to client.

Seems like you have a problem with your pfSense. Are you able to ping adresses like 8.8.8.8?
Is the net on the interface VLAN 50 in the pfSense allowd to access the internet?

 

[reggles10]

Thank you, that helped clarify things for me. I'm new to networking and didn't realise the bridge would do the tagging! I've reconfigured and currently it's working