VMs unreachable after adding private lan vmbr1

chrismfz

Renowned Member
Aug 6, 2015
3
0
66
Hello people. I am using Proxmox with routed setup. I got a interfaces conf looking like this:
I got a /29 subnet so I added it except broadcast and network IPs.

auto lo iface lo inet loopback iface enp35s0 inet manual auto vmbr0 iface vmbr0 inet static address x.x.x.101 netmask 255.255.255.192 gateway x.x.x.65 broadcast x.x.x.127 bridge_ports enp35s0 bridge_stp off bridge_fd 0 up ip route add x.x.56.121/32 dev vmbr0 up ip route add x.x.56.122/32 dev vmbr0 up ip route add x.x.56.123/32 dev vmbr0 up ip route add x.x.56.124/32 dev vmbr0 up ip route add x.x.56.125/32 dev vmbr0 up ip route add x.x.56.126/32 dev vmbr0

I've tried to add network and broadcast IPs the same way (/32) but suddenly everything went unreachable but hey let's ignore that for a while.

I tried to add a vmbr1 with private lan 10.10.10.1/24 to add a second NIC to every VM. I would like to open services or ssh only on private lan for specific VMs but also I would like to have both private and public IPs.

So I added:

auto vmbr1 iface vmbr1 inet static address 10.10.10.1 netmask 255.255.255.0 bridge_ports none bridge_stp off bridge_fd 0 post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE

And I restarted networking.

I added one IP from proxmox, , let's say 10.10.10.100/24 on the 100 ID VM. Used the proxmox, add network, add vmbr1, and IP 10.10.10.100/24 with gw 10.10.10.1
I could ping it, but then I couldn't ping anything on the public subnet. Not even one VM not only the only that I added the IP.
Every VM lost connectivity. Couldn't ping anything from the internet or inside host. I only had ping with the one VM that I added the second private bridge.

I immediately removed the NIC from the VM, nothing, I then removed the vmbr1 from interfaces and restart networking, still nothing.
After a reboot it was OK.

What am I missing here ?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!