VLANS on PVE 8.x

[nashaden]

Hi,

So far, I've been running PVE without VLANs. Since I have just rebuilt my home network to support VLANs (family, guests, IOT) I have to use vlans on PVE as well to keep the networks separated. Some of the VMs are for family use, some for IOT, and some need access to both networks (mainly docker VM in which some docker images will be on family network and some on iot netowrk). What I want to achieve is in attached jpeg.

Up until now I've only messed with GUI of proxmox, but I guess this setup will require some CLI, right? Any good pages with examples of such setup?

Assigning a VM to a VLAN seems pretty straightforward via the GUI (enter VLAN id on network device tab). What is a mystery to me is:
1. how to make PVE itself a member of a certain vlan?
2. how to pass both VLANS to a certain VM?

 

[Dunuin]

2. how to pass both VLANS to a certain VM?

You give that VM two virtio NICs each tagged with another VLAN.

1. how to make PVE itself a member of a certain vlan?

By adding a new VLAN interface like described here (the "vmbr0.5" part): https://pve.proxmox.com/wiki/Network_Configuration#sysadmin_network_vlan

 

[nashaden]

You give that VM two virtio NICs each tagged with another VLAN.

By adding a new VLAN interface like described here (the "vmbr0.5" part): https://pve.proxmox.com/wiki/Network_Configuration#sysadmin_network_vlan

As for PVE itself, I got it working thanks to your hint.

auto lo
iface lo inet loopback

iface enp0s25 inet manual

auto vmbr0.12
iface vmbr0.12 inet dhcp

auto vmbr0
iface vmbr0 inet dhcp
        bridge-ports enp0s25
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

Making a VM a part of certain VLAN can be done via GUI. Easy.

As for passing all VLANS to VM, I'll try it tomorrow. The VM i need it for has too many docker containers to mess with it now. I need them to be running 24/7.

Thank you for your help.