VM can ping host but not gateway

[rltackett]

Hi. New to proxmox and looking for some help. I have proxmox installed and I'm trying to set up a VM but I can't the VM to ping anything outside the host. Any and all help will be greatly appreciated.

 

[Dunuin]

You need to give us some more information...

What does your /etc/network/interfaces look like?
It is a homeserver or somewhere in a datacenter?
How does your network look like?
Are any firewalls active?
Does the host got a valid gateway entry?
...

 

[rltackett]

You need to give us some more information...

What does your /etc/network/interfaces look like?
It is a homeserver or somewhere in a datacenter?
How does your network look like?
Are any firewalls active?
Does the host got a valid gateway entry?
...

Thanks for responding. Sorry it took me so long to get back to you. It's been a crazy week. For my proxmox system, it's a home server (see diagram). I pull internet service from Verizon Fios and I'm using their cable modem. the Verizon cable modem has the wireless turned off and is connected to a Netgear Orbit wireless mesh router running in Wireless Access Point Mode. The orbit is connected to an unmanaged 24 port gigabit switch. The Proxmox server is directly connected tot he unmanaged switch.
The /etc/network/interface for the Proxmox if below

auto lo
iface lo inet loopback

auto enp4s0
iface enp4s0 inet manual
address 192.168.1.200
netmask 255.255.255.0
gateway 192.168.1.1


auto vmbr0
iface vmbr0 inet static
address 192.168.1.15/24
gateway 192.168.1.1
bridge-ports enp4s0
bridge-stp off
bridge-fd 0

The /etc/network/interface for the MineCraft Server is as below
auto lo
iface lo net loopback

auto etc0
iface eth0 net static
address 192.168.1.200
net mask 255.255.255.0
gateway 192.168.1.1
dns-nameservers 192.168.1.1

Pinging results:
Ping from MineOs to Proxmox Host: good
Ping from MineOs to Verizon router (gateway): bad
Ping from MineOs to Netgear Orbi router : bad

Ping from Proxmox to Verizon Router (gateway) good
Ping from Proxmox to MineOs Hosed server: good

Ping from other computer on network to Proxmox server: good
Ping from other computer on network to MineOs hosted server: bad

I have the firewall on the Verizon router set to it's lowest level. the Firewall on Proxmox is off.

Thanks again for your help.

 

[ph0x]

You cannot define gateways in two interfaces. Plus, don't define the same subnet on the bridge and the underlying NIC.
Just set enp4s0 to inet manual without further settings and you should be fine.

 

[rltackett]

You cannot define gateways in two interfaces. Plus, don't define the same subnet on the bridge and the underlying NIC.
Just set enp4s0 to inet manual without further settings and you should be fine.

Thank you! Just to be sure, my settings on the VM should be:
auto enp4s0
inet manual

 

[rltackett]

Thank you! Just to be sure, my settings on the VM should be:
auto enp4s0
inet manual

I tried your suggestion with no change. Thanks for responding, though.

 

[ph0x]

That's because the line has to be

auto enp4s0
iface enp4s0 inet manual

on the host.
The VM config from above looks good.

 

[rltackett]

That's because the line has to be

auto enp4s0
iface enp4s0 inet manual

on the host.
The VM config from above looks good.

I tried that and still no joy. Below are the updated /etc/network/interfaces
HOST:
auto lo
iface lo inet loopback

auto enp4s0
iface enp4s0 inet manual



auto vmbr0
iface vmbr0 inet static
address 192.168.1.15/24
gateway 192.168.1.1
bridge-ports enp4s0
bridge-stp off
bridge-fd 0

VM:
auto lo
iface lo inet loopback

auto eth0
iface etho inet static
address 192.168.1.200
netmask 255.255.255.0
gateway 192.168.1.1
dns-nameservers 192.168.1.1

 

[ph0x]

Don't know if this is a typo here in the forum but you typed etho instead of eth0 in the VM's config.

 

[rltackett]

Don't know if this is a typo here in the forum but you typed etho instead of eth0 in the VM's config.

Yes, that's a typo. Should I have DHCP enabled on the host or the guest? I'm guessing no.

 

[ph0x]

That depends on your setup.
Usually the hypervisor has a static address and the guests sometimes use dhcp, but that's up to you.

From what I see I would say the error lies outside of Proxmox. The config that you posted last should work. So it's either maybe router preventing access for unknown devices or something else.

 

[rltackett]

That depends on your setup.
Usually the hypervisor has a static address and the guests sometimes use dhcp, but that's up to you.

From what I see I would say the error lies outside of Proxmox. The config that you posted last should work. So it's either maybe router preventing access for unknown devices or something else.

Any ideas on how to troubleshoot traffic outside of proxmox? Wire shark?

 

[ShortSkimper]

Can you pull DHCP (as a test) from DHCP scope with VM?

I ask this because I've ran in to an issue recently with a NIC card that registered in proxmox and you could ping the vmbr that it was attached to. But would not allow VM's to talk outside the bridge. Swapped NIC's. Boom. Problem gone. What NIC chipset is your host running?

I'd spin up a container with DHCP and see if it can pull an IP. With the host /etc/network/interfaces at its current state. If the container can't pull an ip. You more than likely have a bigger issue. hardware/driver related.

 

[ph0x]

Well, wireshark is very low level but can help a lot if you know how to interpret the packets.
I'd start with checking router and/or switch setup.

 

[rltackett]

Can you pull DHCP (as a test) from DHCP scope with VM?

I ask this because I've ran in to an issue recently with a NIC card that registered in proxmox and you could ping the vmbr that it was attached to. But would not allow VM's to talk outside the bridge. Swapped NIC's. Boom. Problem gone. What NIC chipset is your host running?

 

[rltackett]

Not sure about the chipset for the NIC bur this is what I found on the MBs website

Intel® I225-V 2.5Gb Ethernet
ASUS LANGuard

 

[ph0x]

Hm, wasn't there an issue with this NIC in the 5.4 kernel? Maybe you should try the 5.11 kernel.

 

[ShortSkimper]

I would do some research on that nic card and find out if you can compile some drivers for it. I'd suspect it's the NIC (drivers).

Or as ph0x suggested and try the 5.11 kernel.

 

[rltackett]

I would do some research on that nic card and find out if you can compile some drivers for it. I'd suspect it's the NIC (drivers).

Or as ph0x suggested and try the 5.11 kernel.

I'd love to try it.. how do I do it? Sorry... NOOB here.

 

[ShortSkimper]

To install 5.11 kernel:
apt update
apt install pve-kernel-5.11
reboot

In regards to compiling a new set of drivers. Hopefully someone else can take this question on as I have been unsuccessful with my problem NIC in doing this.