VM's on LAN can't route to internet, but LAN devices can.

[Intone]

I have fresh current proxmox install with two VMs. A pfsense and a Unifi controller.

The machine has 3 network ports, MB and two pci-x cards. The MB has a static IP for the 'management' network and route in the network device setting (not a virtual bridge)

The two other ports are vmbr0 (LAN) and vmbr1(WAN), no entries for IP or gateway in either the network device or bridge.

The pfsense is routing traffic from the LAN (172,20.x.x) to the WAN. WAN is DHCP from internet provider.

devices on the LAN network outside of proxmox can get internet access without problems.

BUT when I add a second VM that only uses the vmbr0 bridge, it can talk to LAN devices, but no WAN access. I can ping the other vmbr0 IP, but not WAN. Before you say pfsense is the problem, again other LAN devices on the same network can.

So what's up with proxmox and vmbr0?

Any ideas?

 

[Intone]

I can provide pics and/or configs if the above is not clear.

My understanding is that the linux bridges are like switches and the iP plumbing happens at the vm level so that I can migrate a VM in a cluster, and the mac/ip travels with it onto the vmbr and still work.

I can do that, and the pfsense vm works well on either node, but alas the second vm using the LAN vmbr (unifi) can't reach the WAN via the LAN gateway..

Is there something in proxmox that would treat the VM -> VMBR0 ->VM traffice different than VMBR0 -> VM?

I have firewall disabled in proxmox for VMBR0 interface.

 

[ce3rd]

Hi, If I understand it right, this should work, maybe post your /etc/network/interfaces, the routing table of pfsense (diagnostic/routes) and VM network config from the non-working VM...