Vmbr0 using iptables camouflage (NAT) PVE cannot communicate with virtual machines

[runing]

PVE network configuration


Network configuration of virtual machine


PVE cannot communicate with virtual machine

 

[shrdlicka]

Hi,

what might be missing from /etc/network/interfaces config is the "auto vmbr0" part:

auto vmbr0
iface vmbr0 inet static
...

before you edit that can you call ifup vmbr0 and check again if you can ping the host.

If this doesn't work can you post this command from you PVE host:

ip a

 

[runing]

晉語

/etc/network/interfaces 配置中可能缺少的是“auto vmbr0”部分：

[代码]
自动 vmbr0
iface vmbr0 inet static
...
[/代码]

在编辑之前，您可以调用 ifup vmbr0 并再次检查是否可以 ping 主机。

如果这不起作用，您可以从PVE主机发布以下命令：
[代码]
ip a
[/代码]

can ping the host

Add iptables rules in the network configuration. Do you want to use the iptables Save command to save and take effect？

 

[shrdlicka]

I would keep those iptables rules in the network configuration

 

[runing]

I would keep those iptables rules in the network configuration

How to save and take effect iptables' rules?

 

[shrdlicka]

I'm not sure what you want to do. The iptables rules will be applied when the network config is loaded.

 

[runing]

I'm not sure what you want to do. The iptables rules will be applied when the network config is loaded.

Yes
After adding iptables rule, execute ifdown vmbr0 && ifup vmbr0 command. But the iptables rule does not take effect. Only after I reboot the system, will the iptables rule take effect.
How to make iptables rules take effect without restarting the system?

 

[shrdlicka]

Hi,
how did you determin that they don't have an effect? Did you check this:

iptables -t nat -L

 

[runing]

Hi,
how did you determin that they don't have an effect? Did you check this:

iptables -t nat -L

Iptables rules can be checked But are not sure if the iptables rules are valid?