VPN not stable or not working in virtual machine

[sheshman]

Hi,

I'm using PIA vpn, i've two identical windows 10 computer with exact same updates and patches on esxi and proxmox ve 8.2.2, on esxi pia vpn works as expected but on proxmox ve it's having hard time to connect to vpn server, no internet if even connects or it keep disconnecting.

Both esxi and proxmox virtual computers uses INTEL E1000 nic and Firewall option unchecked on proxmox vm, both vm getting internet from same router with same rules.

I was wondering why my proxmox vm having trouble with PIA vpn? I've found some threads with similiar sceneraios and almost all was advising the uncheck the Firewall tick but in my case it didn't solve it.

Also tried with virtio ethernet but it didn't helped.

Where else i should debug, which commands i can use it for debug to find what's wrong?

 

[sheshman]

any ideas?

 

[sheshman]

my network configuration as below;

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

iface eno2 inet manual
#MODEM

iface eno3 inet manual

iface eno4 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.2.15/24
        gateway 192.168.2.254
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
#FORTI_NETWORK

auto vmbr1
iface vmbr1 inet static
        address 192.168.1.16/24
        bridge-ports eno3
        bridge-stp off
        bridge-fd 0
#MODEM_NETWORK

source /etc/network/interfaces.d/*

I've installed windows7-windows10-windows11& ubuntu 22.04 Desktop, problem persist in all

 

[sheshman]

anyone?

 

[aschrijver]

Try to enable promiscuous on your VM NIC. Certain VPN won't work without it.

 

[sheshman]

Try to enable promiscuous on your VM NIC. Certain VPN won't work without it.

i don't know if i did correctly but no effect

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

iface eno2 inet manual
#MODEM

iface eno3 inet manual

iface eno4 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.2.15/24
        gateway 192.168.2.254
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
#FORTI_NETWORK

auto vmbr1
iface vmbr1 inet static
        address 192.168.1.16/24
        bridge-ports eno3
        bridge-stp off
        bridge-fd 0
        up /sbin/ip link set eno3 promisc on
#MODEM_NETWORK

source /etc/network/interfaces.d/*

is it enough to add this "up /sbin/ip link set eno3 promisc on" and reboot the vm or should i restart some services to be affective?

 

[aschrijver]

Run this from the bash and it is active immediately:

ip link set eno3 promisc on

check if applied:

 ip link show eno3

 

[sheshman]

Run this from the bash and it is active immediately:

ip link set eno3 promisc on

check if applied:

 ip link show eno3

it shows PROMISC when i run ip link show eno3 but still nor working,

I just realised that vpn app can't get ip and windows ip settings are empty, with same app and identical OS can connect on esxi without any problem and it's really strange for me.

 

[sheshman]

solved just change the data encrypiton setting as AES-256 and you'll be able to connect without any problem.
Why? - Damn me if i know

 

[_gabriel]

set VM CPU type to host should works too.