VLAN Tagging

[bradmc]

Hello, I have a healthy three-node PVE 3.2 cluster running. I want to implement VLAN tagging so that I can virtualize hosts that are on a different VLAN where the IP's cannot change. The hosts are Windows 2008R2.

On the VM config I define the VLAN tag of 618 when creating the network config. The Windows server boots and PVE creates two network interfaces on the PVE host: bond0.618 and vmbr0v618. The host boots, and the network is configured for the 618 VLAN, but it does not have network access.

I'm told by the network admins that the 618 VLAN has been trunked to the native VLAN/port that the PVE host is on. All of the network gear is Cisco managed switches.

The bonded interface of bond0 comprises two interfaces, eth0 and eth1 in active-backup mode. vmbr0 is bridge to bond0 on the 437 VLAN, and is functioning as expected. All other VM's on the 437 VLAN function correctly.

Am I missing a step? Can anyone give me a clue what might be wrong? Thanks!

 

[spirit]

hello,

"vmbr0 is bridge to bond0 on the 437 VLAN"


so, you have bond0.437->vmbr0 in your setup ? (not sur it'll work in this case, because you can't create vlan from proxmox gui )

because, if you want to have bond vlan 437 and 618, you need a trunk on your network switch, and you need to tag vlans for both vlan inside your guest.


maybe can you try

[/COLOR]auto bond0.437
iface bond0.437 inet static
        address X.X.X.X  ---> your proxmox host ip here
        netmask 255.255.255.0
        gateway X.X.X.X


auto vmbr0
iface vmbr1 inet manual
        bridge_ports bond0
        bridge_stp off
        bridge_fd 0

then configure a trunk on your cisco switch

 

[bradmc]

Here's my default network config. The native VLAN for the PVE server is the 437 VLAN.


auto lo
iface lo inet loopback

iface eth0 inet manual

iface eth1 inet manual

iface eth2 inet manual

iface eth3 inet manual

auto bond0
iface bond0 inet manual
slaves eth0 eth1
bond_miimon 100
bond_mode active-backup

auto bond1
iface bond1 inet manual
slaves eth2 eth3
bond_miimon 100
bond_mode active-backup

auto vmbr0
iface vmbr0 inet static
address 156.74.237.68
netmask 255.255.255.192
gateway 156.74.237.65
bridge_ports bond0
bridge_stp off
bridge_fd 0

auto vmbr1
iface vmbr1 inet static
address 156.74.237.10
netmask 255.255.255.192
bridge_ports bond1
bridge_stp off
bridge_fd 0

 

[bradmc]

When I define the tag number in the VM network config, the VM will then boot and create two more interfaces: bond0.618 and vmbr0v618. I can see the VM requesting the mac address of the default router for the 618 VLAN using tcpdump.

I must be missing something basic that isn't documented; maybe something that is assumed to be setup before trying this. I'm new to this VLAN tagging, so help is very much appreciated.