Vlan Tagging

[andrea68]

Hi,

I have 3 nodes on Hetzner with 2 Nic's/each.

I need to configure first nic for internet acces on 3 hosts and navigation for the VM and for the proxmox cluster.
Second NIC only for the storage network.

So I connect 3 hosts to 3 vswitch:
- Public
- Cluster
- Storage

Then I'll try to make a simple configuration of the nic for the storage but i cannot reach private IP's.
This is the conf of the first host proxmox (the other ones are similar):


auto lo
iface lo inet loopback

iface lo inet6 loopback

auto eno1
iface eno1 inet manual

auto enp1s0
iface enp1s0 inet manual

auto eno1.4000
iface eno1.4000 inet manual
mtu 1400
#VLAN STORAGE

auto vmbr0
iface vmbr0 inet static
address [PUBLIC IP]
gateway [GATEWAY]
bridge-ports enp1s0
bridge-stp off
bridge-fd 0
mtu 1400
#INTERNET

auto vmbr1
iface vmbr1 inet static
address 172.16.120.10/24
bridge-ports eno1.4000
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 4000
mtu 1400
#STORAGE

The other one is identical except public IP and private on vmbr1 (172.16.120.20)

Configuration goes OK and host give no error.
Plus I'm able to use proxmox on public IP, BUT on vLAN 4000 the 2 host cannot ping each other on 172.16.120.10 and 172.16.120.20
Obviously I previously created th vswitch on hetzner with VLAN ID 4000...

I'don't understand where is my mistake...
Someone have a working configuration file?
I'll try many examples without success...

Thanks in advance.

 

[andrea68]

... can someone help me?
Tnx...

 

[spirit]

you don't need "
bridge-vlan-aware yes
bridge-vids 4000"

if you are already forcing vlan tag with "bridge-ports eno1.4000"

 

[andrea68]

I'll try that, but still 2 host don't ping each other...

To be sure I also stop the firewall on 2 proxmox.
I don't have any other firewall or IP filter: my plan on Hetzner does'nt have firewall.
Of course, 2 poxmox are in the same vswitch tagged with 4000

I'm pretty sure the configuration is ok, I don't understand where is the problem...

 

[andrea68]

Ok I try to move the tagged interface on the other nic: enp1s0 and it works...
So seems to be a problem on eno1.
WEIRD...!!!

I'll try to talk with support.
Just in case: do you think I miss something...?

Ps.
This is the conf that work:

auto enp1s0.4000
iface enp1s0.4000 inet manual
#VLAN STORAGE

auto vmbr1
iface vmbr1 inet static
address 192.168.100.10
netmask 255.255.255.0
bridge-ports enp1s0.4000
bridge-stp off
bridge-fd 0
mtu 1400
#BRIDGE STORAGE

 

[andrea68]

Support respond: "It sounds that you try to configure a second uplink. Please note that each server has only one uplink. And only this uplink can use the vSwitch."
Well... no... I just want to use second network card for private traffic, is this an uplink? Don't think so...
I am wrong?

 

[bobmc]

from the Hetzner docs, it suggest you need to create a vswitch in your Robot control panel then assign a server/host to this vswitch for them to communicate locallly

https://docs.hetzner.com/robot/dedicated-server/network/vswitch/#how-do-i-setup-a-vswitch

 

[andrea68]

from the Hetzner docs, it suggest you need to create a vswitch in your Robot control panel then assign a server/host to this vswitch for them to communicate locallly

https://docs.hetzner.com/robot/dedicated-server/network/vswitch/#how-do-i-setup-a-vswitch

Already do this...

 

[andrea68]

Finally: seems that eno1 is not usable in our contract... we need another nic...