VM no interwebs / same config on bridge works fine

[justchil]

I'm at my wits end with this issue.

I have about 15 ip's on a /24. My proxmox host works fine. I can't get my VM's to have internet access no matter what I try. I can add the same external IP to a linux bridge and ping it from an external source (very odd). My hosting company provided me with vmac's but it doesn't seem to make any difference.

pve-manager/6.4-6/be2fa32c

Host network config:

auto lo
iface lo inet loopback

iface ens3 inet manual

auto vmbr0
iface vmbr0 inet static
address x.x.249.101/24
gateway x.x.249.1
bridge-ports ens3
bridge-stp off
bridge-fd 0


VM (ubuntu 18.04) network config:

network:
ethernets:
ens18:
addresses:
- x.x.249.5/24
gateway4: x.x.249.1
nameservers:
addresses:
- 8.8.8.8
- 8.8.4.4
version: 2


VM can ping x.x.249.101 but not the gateway. Host can ping VM.

VM off but adding x.x.249.5/24 to a linux bridge: I can ping / traceroute this from outside the network.

I've tried quite a bit.... I have working proxmox servers on OVH and a couple other hosts that work great. Is there something obvious I'm forgetting about or maybe it's a problem with the hosting company? I'm grateful for any advice.

 

[spirit]

I can add the same external IP to a linux bridge and ping it from an external source (very odd).


My hosting company provided me with vmac's but it doesn't seem to make any difference

do you have associated mac-ip in your hosting company config side ?

This is like the isp is filtering the mac from the vms.

 

[justchil]

do you have associated mac-ip in your hosting company config side ?

This is like the isp is filtering the mac from the vms.

Yes I do. That's what I thought too. It's just so weird I can assign those IP's to a bridge and it works (ping/traceroute) at least.

 

[spirit]

Yes I do. That's what I thought too. It's just so weird I can assign those IP's to a bridge and it works (ping/traceroute) at least.

so, I think your provider is lying

do you have tried to force mac-address on your bridge to another mac from the list provided ?

 

[justchil]

so, I think your provider is lying

do you have tried to force mac-address on your bridge to another mac from the list provided ?

Might be. I will have to ask again

Yes, If I apply a different mac to my vmbr0 bridge it breaks the server. If I change the mac on vmbr1 it continues to reply to ping.