Having an issue with VMs and LXCs not being able to get onto the network (outside cluster) or get DHCP over a bridge, either directly on the bridge or through SDN VNet. Initially, the firewall was disabled. I enabled it (proxmox-firewall) and added rules for DHCP, but this has not changed the behavior at all. Either way, disabled or enabled with rules, it still fails to get DHCP. I also set the default input policy to ACCEPT. Another thing, assigning a static IP doesn't fix it either. This was all working until two days ago. No changes have been made to the Proxmox hosts other than what was stated, and the network has been unchanged for months. Here is some information I gathered during troubleshooting:
tcpdump on bridge (vmbr0), DHCP request seen:
Firewall logs:
Any help or direction would be greatly appreciated!
tcpdump on bridge (vmbr0), DHCP request seen:
Code:
tcpdump -i vmbr0 port 67 or port 68 -vv
tcpdump: listening on vmbr0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
21:56:12.447408 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 312)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:76:1f:97 (oui Unknown), length 284, xid 0x63c95641, secs 1, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:76:1f:97 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Client-ID (61), length 7: ether bc:24:11:76:1f:97
Parameter-Request (55), length 17:
Subnet-Mask (1), Time-Zone (2), Domain-Name-Server (6), Hostname (12)
Domain-Name (15), MTU (26), BR (28), Classless-Static-Route (121)
Default-Gateway (3), Static-Route (33), YD (40), YS (41)
NTP (42), Unknown (119), Classless-Static-Route-Microsoft (249), Unknown (252)
RP (17)
MSZ (57), length 2: 576
Hostname (12), length 6: "rhel-1"
21:56:15.095691 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 312)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:76:1f:97 (oui Unknown), length 284, xid 0x1738b82, secs 2, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:76:1f:97 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Client-ID (61), length 7: ether bc:24:11:76:1f:97
Parameter-Request (55), length 17:
Subnet-Mask (1), Time-Zone (2), Domain-Name-Server (6), Hostname (12)
Domain-Name (15), MTU (26), BR (28), Classless-Static-Route (121)
Default-Gateway (3), Static-Route (33), YD (40), YS (41)
NTP (42), Unknown (119), Classless-Static-Route-Microsoft (249), Unknown (252)
RP (17)
MSZ (57), length 2: 576
Hostname (12), length 6: "rhel-1"
21:56:19.479876 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 312)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:76:1f:97 (oui Unknown), length 284, xid 0x8b2562ea, secs 7, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:76:1f:97 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Client-ID (61), length 7: ether bc:24:11:76:1f:97
Parameter-Request (55), length 17:
Subnet-Mask (1), Time-Zone (2), Domain-Name-Server (6), Hostname (12)
Domain-Name (15), MTU (26), BR (28), Classless-Static-Route (121)
Default-Gateway (3), Static-Route (33), YD (40), YS (41)
NTP (42), Unknown (119), Classless-Static-Route-Microsoft (249), Unknown (252)
RP (17)
MSZ (57), length 2: 576
Hostname (12), length 6: "rhel-1"
21:56:27.624224 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 312)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:76:1f:97 (oui Unknown), length 284, xid 0xadeead38, secs 15, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:76:1f:97 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Client-ID (61), length 7: ether bc:24:11:76:1f:97
Parameter-Request (55), length 17:
Subnet-Mask (1), Time-Zone (2), Domain-Name-Server (6), Hostname (12)
Domain-Name (15), MTU (26), BR (28), Classless-Static-Route (121)
Default-Gateway (3), Static-Route (33), YD (40), YS (41)
NTP (42), Unknown (119), Classless-Static-Route-Microsoft (249), Unknown (252)
RP (17)
MSZ (57), length 2: 576
Hostname (12), length 6: "rhel-1"
21:56:44.604723 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 312)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:76:1f:97 (oui Unknown), length 284, xid 0x77d2d682, secs 32, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:76:1f:97 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Client-ID (61), length 7: ether bc:24:11:76:1f:97
Parameter-Request (55), length 17:
Subnet-Mask (1), Time-Zone (2), Domain-Name-Server (6), Hostname (12)
Domain-Name (15), MTU (26), BR (28), Classless-Static-Route (121)
Default-Gateway (3), Static-Route (33), YD (40), YS (41)
NTP (42), Unknown (119), Classless-Static-Route-Microsoft (249), Unknown (252)
RP (17)
MSZ (57), length 2: 576
Hostname (12), length 6: "rhel-1"
21:56:46.565679 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:4d:53:e6 (oui Unknown), length 300, xid 0x28ca236f, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:4d:53:e6 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Hostname (12), length 11: "cloudflared"
Parameter-Request (55), length 13:
Subnet-Mask (1), BR (28), Time-Zone (2), Default-Gateway (3)
Domain-Name (15), Domain-Name-Server (6), Unknown (119), Hostname (12)
Netbios-Name-Server (44), Netbios-Scope (47), MTU (26), Classless-Static-Route (121)
NTP (42)
Client-ID (61), length 19: hardware-type 255, 11:4d:53:e6:00:01:00:01:2f:67:31:d0:bc:24:11:4d:53:e6
21:56:54.849391 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from bc:24:11:4d:53:e6 (oui Unknown), length 300, xid 0x28ca236f, secs 8, Flags [none] (0x0000)
Client-Ethernet-Address bc:24:11:4d:53:e6 (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Discover
Hostname (12), length 11: "cloudflared"
Parameter-Request (55), length 13:
Subnet-Mask (1), BR (28), Time-Zone (2), Default-Gateway (3)
Domain-Name (15), Domain-Name-Server (6), Unknown (119), Hostname (12)
Netbios-Name-Server (44), Netbios-Scope (47), MTU (26), Classless-Static-Route (121)
NTP (42)
Client-ID (61), length 19: hardware-type 255, 11:4d:53:e6:00:01:00:01:2f:67:31:d0:bc:24:11:4d:53:e6
^C
7 packets captured
7 packets received by filter
0 packets dropped by kernel
Firewall logs:
Code:
0 7 host-in 18/Nov/2025:22:27:45 -0600 ACCEPT: IN=vnet220 MAC=ff:ff:ff:ff:ff:ff:bc:24:11:76:1f:97:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=312 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=292
0 7 host-in 18/Nov/2025:22:27:47 -0600 ACCEPT: IN=vnet220 MAC=ff:ff:ff:ff:ff:ff:bc:24:11:76:1f:97:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=312 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=292
0 7 host-in 18/Nov/2025:22:27:52 -0600 ACCEPT: IN=vnet220 MAC=ff:ff:ff:ff:ff:ff:bc:24:11:76:1f:97:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=312 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=292
0 7 host-in 18/Nov/2025:22:28:00 -0600 ACCEPT: IN=vnet220 MAC=ff:ff:ff:ff:ff:ff:bc:24:11:76:1f:97:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=312 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=292
0 7 host-in 18/Nov/2025:22:28:16 -0600 ACCEPT: IN=vnet220 MAC=ff:ff:ff:ff:ff:ff:bc:24:11:76:1f:97:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=312 TOS=0x00 PREC=0x00 TTL=64
ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=292
Any help or direction would be greatly appreciated!
Last edited: