VM is from internet unreachable

miu

Member
Apr 24, 2021
16
1
8
45
Good day

PVE:

Code:
allow-hotplug ens3
iface ens3 inet static
        address  185.244.30.26/24
        pointopoint 185.244.30.1
        gateway  185.244.30.1

        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up echo 1 > /proc/sys/net/ipv4/conf/ens3/proxy_arp

auto vmbr0
iface vmbr0 inet static
        address  185.244.30.26/24
        bridge_ports none
        bridge_stp off
        bridge_fd 0

    #VM IP:
    up ip route add 185.244.30.37/32 dev vmbr0


VM:

Code:
allow-hotplug ens18
iface ens18 inet static

        address  185.244.30.37/32
        pointopoint 185.244.30.26
        gateway  185.244.30.26

current STATE and problem:

  • PVE 185.244.30.26 can reach VM 185.244.30.37
  • VM 185.244.30.37 can reach PVE 185.244.30.26
  • VM 185.244.30.37 can reach internet

BUT from internet i cannot reach VM 185.244.30.37......... :mad:

If someone can help me and tell what is bad or what is corrections for mentioned config to make it working, i will be very gretafull for such help

regards Milos
 
PVE:

Code:
root@8900:~# ip route show
default via 185.244.30.1 dev ens3 onlink
185.244.30.0/24 dev vmbr0 proto kernel scope link src 185.244.30.26
185.244.30.1 dev ens3 proto kernel scope link src 185.244.30.26
185.244.30.37 dev vmbr0 scope link

root@8900:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         185.244.30.1    0.0.0.0         UG    0      0        0 ens3
185.244.30.0    0.0.0.0         255.255.255.0   U     0      0        0 vmbr0
185.244.30.1    0.0.0.0         255.255.255.255 UH    0      0        0 ens3
185.244.30.37   0.0.0.0         255.255.255.255 UH    0      0        0 vmbr0

root@8900:~# ping 185.244.30.37 -c3
PING 185.244.30.37 (185.244.30.37) 56(84) bytes of data.
64 bytes from 185.244.30.37: icmp_seq=1 ttl=64 time=0.286 ms
64 bytes from 185.244.30.37: icmp_seq=2 ttl=64 time=0.264 ms

VM:

image.png


Firewalls are OFF on both PVE and VM too
 
and this config too not working:
- VM is not reachable from internet, and additionally too VM cannot reach internet:

Code:
allow-hotplug ens3
iface ens3 inet static
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up echo 1 > /proc/sys/net/ipv4/conf/ens3/proxy_arp

auto vmbr0
iface vmbr0 inet static
       address 185.244.30.26/24
       gateway 185.244.30.1
       bridge_ports ens3
       bridge_stp off
       bridge_fd 0