VMs cannot reach neither physical network nor internet

[qu4k3r]

Hi everydoby.

I'm new to PVE but I like networking a lot and I really want to understand how PVE internally manages networking so I downloaded pve-admin-guide and read these subjects completly:

1.5 Flexible networking
3.3 Network Configuration, which is exactly the same you can find at https://pve.proxmox.com/wiki/Network_Configuration
10.2 Virtual Machine Settings, with special emphasis on 10.2.7 Network Device

PVE is running on Virtualbox with a single network adapter in Bridge Mode so it can communicate with my network without problems.

Main Router: 192.168.1.1/24
PVE: 192.168.1.69/24, GW:192.168.1.1
VM1: 192.168.1.70/24, GW: 192.168.1.1
VM2: 192.168.1.71/24, GW: 192.168.1.1
VM3: 192.168.1.72/24, GW: 192.168.1.1

PVE can reach (ping) all its VMs, also reach every single device on my network (router, switch, pcs, etc.) and external IPs like 8.8.8.8

Every VM can reach another VMs and also PVE, but they cannot reach the physical network.

I changed VMs network adapter from Virtio to E1000, but the issue stays the same.

The file from "/etc/network/interfaces" says as follows:
auto lo iface lo inet loopback iface enp0s3 inet manual auto vmbr0 iface vmbr0 inet static address 192.168.1.69/24 gateway 192.168.1.1 bridge-ports enp0s3 bridge-stp off bridge-fd 0

1)What I understood from the diagram of "Default Configuration using Bridge" is that each VM must have its network interafces attached to a bridge (vmbr0, vmbr1, etc.) which in linked to the physical NIC of PVE (enp0s3).

So I guess, I must modify the interface file from above by adding the VM's network interface name to the bridge-ports section of the interface file, or am I wrong?

If so, where can I locate the name of the VM's network interface?
Which I suppose must be something like em0, em1, igb0, igb1 or so.

If not, would you enlight me please?

2)Let's suppose I want to add a pfSense VM to the mix, and all the others VMs will be behind of pfSense.
So, pfsense WAN interface must be bridged at vmbr0 with enp0s3, and pfsense LAN interface must be bridge to a new bridge vmbr1 with the interfaces of the others VMs but without enp0s3, right?

Thanks for your help and your time.
Have a nice day/afternon/night

 

[Deleted member 93625]

@qu4k3r This sounds like a VirtualBox question rather than Proxmox question. Is there any reason why you put PVE as a VirtualBox VM? PVE itself is a hypervisor so just want to know with my curiosity. Cheers.

Eoin

 

[qu4k3r]

@qu4k3r.... Is there any reason why you put PVE as a VirtualBox VM? PVE itself is a hypervisor so just want to know with my curiosity...

Becuase I dont have a pc where to install PVE baremetal. I mean I have second 2 pc and tryied to install it on her but didn't work due to video card issues, monitor displays "out of sync" message. That's the reason why I put PVE as VitualBox VM.

 

[Deleted member 93625]

@qu4k3r Are your VMs inside PVE or VirtualBox? This may need to be clarified first. Also, what's the OS of VMs? Is it Linux or Windows or something else?

 

[qu4k3r]

@qu4k3r Are your VMs inside PVE or VirtualBox? This may need to be clarified first. Also, what's the OS of VMs? Is it Linux or Windows or something else?

Yes, I'm referring to VMs inside of PVE.
Their OS are linux distros for ultra-low-specs systems (Antix, Trisquel Mini, Slax) with just the minimum for basic connnectivity (terminal + web browser).

 

[Deleted member 93625]

@qu4k3r Okay, so if I understood your model correctly, I think you are right. Connect your pfSense WAN to vmbr0, and LAN to vmbr1. Connect all other VMs to vmbr1. If all the VMs are sitting in one PVE node, I think you don't need to bridge any interface to a bridge but maybe I'm wrong, check with others.