Ok, so we then know that it is most likely something in the connection between the bridge to the DMZ
Please open a shell on proxmox host and post the results of the following commands:
Code:
ip a
ip r
cat /etc/network/interfaces
ping 10.10.11.1 -c 3
traceroute 10.10.11.1
Then after that set up a (free) IP on the vmbr1 in the 10.10.11.X/24 range, no gateway and run the above again, as well as a ping to 10.10.11.24 and/or 10.10.11.100
Here is before the change:
root@pve:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp4s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:85:c2:5a:13:e4 brd ff:ff:ff:ff:ff:ff
3: enp6s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:85:c2:5a:13:e2 brd ff:ff:ff:ff:ff:ff
4: enp3s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:85:c2:5a:13:e6 brd ff:ff:ff:ff:ff:ff
5: enp8s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
link/ether a0:36:9f:43:c7:28 brd ff:ff:ff:ff:ff:ff
6: enp8s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr1 state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
7: wlp5s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether b0:35:9f:d9:93:97 brd ff:ff:ff:ff:ff:ff
8: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:43:c7:28 brd ff:ff:ff:ff:ff:ff
inet 10.10.17.30/24 scope global vmbr0
valid_lft forever preferred_lft forever
inet6 fe80::a236:9fff:fe43:c728/64 scope link
valid_lft forever preferred_lft forever
9: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
inet6 fe80::a236:9fff:fe43:c72a/64 scope link
valid_lft forever preferred_lft forever
10: myDMZ2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
inet 10.10.11.1/24 scope global myDMZ2
valid_lft forever preferred_lft forever
inet6 fe80::cc71:7dff:fe5f:6bc4/64 scope link
valid_lft forever preferred_lft forever
12: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN group default qlen 1000
link/ether 12:7f:e9:cc:c0:94 brd ff:ff:ff:ff:ff:ff
13: ln_DMZvlan@pr_DMZvlan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master DMZvlan state UP group default qlen 1000
link/ether ae:54:51:11:5a:dc brd ff:ff:ff:ff:ff:ff
14: pr_DMZvlan@ln_DMZvlan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1v11 state UP group default qlen 1000
link/ether d2:68:ff:91:72:86 brd ff:ff:ff:ff:ff:ff
15: DMZvlan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether ae:54:51:11:5a:dc brd ff:ff:ff:ff:ff:ff
inet6 fe80::ac54:51ff:fe11:5adc/64 scope link
valid_lft forever preferred_lft forever
16: enp8s0f1.11@enp8s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1v11 state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
17: vmbr1v11: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
inet6 fe80::a236:9fff:fe43:c72a/64 scope link
valid_lft forever preferred_lft forever
18: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master fwbr101i0 state UNKNOWN group default qlen 1000
link/ether 4a:da:b8:5e:61:0d brd ff:ff:ff:ff:ff:ff
22: fwbr101i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether c6:04:4a:b2:77:45 brd ff:ff:ff:ff:ff:ff
23: fwpr101p0@fwln101i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1 state UP group default qlen 1000
link/ether 42:d7:23:fd:a1:5d brd ff:ff:ff:ff:ff:ff
24: fwln101i0@fwpr101p0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master fwbr101i0 state UP group default qlen 1000
link/ether c6:04:4a:b2:77:45 brd ff:ff:ff:ff:ff:ff
root@pve:~# ip r
default via 10.10.17.1 dev vmbr0 proto kernel onlink
10.10.11.0/24 dev myDMZ2 proto kernel scope link src 10.10.11.1 linkdown
10.10.17.0/24 dev vmbr0 proto kernel scope link src 10.10.17.30
root@pve:~# cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!
auto lo
iface lo inet loopback
auto enp8s0f0
iface enp8s0f0 inet manual
iface enp4s0 inet manual
iface enp6s0 inet manual
iface enp3s0 inet manual
iface wlp5s0 inet manual
auto enp8s0f1
iface enp8s0f1 inet manual
auto vmbr0
iface vmbr0 inet static
address 10.10.17.30/24
gateway 10.10.17.1
bridge-ports enp8s0f0
bridge-stp off
bridge-fd 0
auto vmbr1
iface vmbr1 inet manual
bridge-ports enp8s0f1
bridge-stp off
bridge-fd 0
source /etc/network/interfaces.d/*
root@pve:~# ping 10.10.11.1 -c 3
PING 10.10.11.1 (10.10.11.1) 56(84) bytes of data.
64 bytes from 10.10.11.1: icmp_seq=1 ttl=64 time=0.034 ms
64 bytes from 10.10.11.1: icmp_seq=2 ttl=64 time=0.018 ms
64 bytes from 10.10.11.1: icmp_seq=3 ttl=64 time=0.028 ms
--- 10.10.11.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2075ms
rtt min/avg/max/mdev = 0.018/0.026/0.034/0.006 ms
root@pve:~# traceroute 10.10.11.1
traceroute to 10.10.11.1 (10.10.11.1), 30 hops max, 60 byte packets
1 10.10.11.1 (10.10.11.1) 0.369 ms 0.335 ms 0.317 ms
Here is after I added the free IP:
root@pve:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp4s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:85:c2:5a:13:e4 brd ff:ff:ff:ff:ff:ff
3: enp6s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:85:c2:5a:13:e2 brd ff:ff:ff:ff:ff:ff
4: enp3s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:85:c2:5a:13:e6 brd ff:ff:ff:ff:ff:ff
5: enp8s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 state UP group default qlen 1000
link/ether a0:36:9f:43:c7:28 brd ff:ff:ff:ff:ff:ff
6: enp8s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr1 state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
7: wlp5s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether b0:35:9f:d9:93:97 brd ff:ff:ff:ff:ff:ff
8: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:43:c7:28 brd ff:ff:ff:ff:ff:ff
inet 10.10.17.30/24 scope global vmbr0
valid_lft forever preferred_lft forever
inet6 fe80::a236:9fff:fe43:c728/64 scope link
valid_lft forever preferred_lft forever
9: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
inet 10.10.11.101/24 scope global vmbr1
valid_lft forever preferred_lft forever
inet6 fe80::a236:9fff:fe43:c72a/64 scope link
valid_lft forever preferred_lft forever
10: myDMZ2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
inet 10.10.11.1/24 scope global myDMZ2
valid_lft forever preferred_lft forever
inet6 fe80::cc71:7dff:fe5f:6bc4/64 scope link
valid_lft forever preferred_lft forever
12: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 state UNKNOWN group default qlen 1000
link/ether 12:7f:e9:cc:c0:94 brd ff:ff:ff:ff:ff:ff
13: ln_DMZvlan@pr_DMZvlan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master DMZvlan state UP group default qlen 1000
link/ether ae:54:51:11:5a:dc brd ff:ff:ff:ff:ff:ff
14: pr_DMZvlan@ln_DMZvlan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1v11 state UP group default qlen 1000
link/ether d2:68:ff:91:72:86 brd ff:ff:ff:ff:ff:ff
15: DMZvlan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether ae:54:51:11:5a:dc brd ff:ff:ff:ff:ff:ff
inet6 fe80::ac54:51ff:fe11:5adc/64 scope link
valid_lft forever preferred_lft forever
16: enp8s0f1.11@enp8s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1v11 state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
17: vmbr1v11: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether a0:36:9f:43:c7:2a brd ff:ff:ff:ff:ff:ff
inet6 fe80::a236:9fff:fe43:c72a/64 scope link
valid_lft forever preferred_lft forever
18: tap101i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master fwbr101i0 state UNKNOWN group default qlen 1000
link/ether 4a:da:b8:5e:61:0d brd ff:ff:ff:ff:ff:ff
22: fwbr101i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether c6:04:4a:b2:77:45 brd ff:ff:ff:ff:ff:ff
23: fwpr101p0@fwln101i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1 state UP group default qlen 1000
link/ether 42:d7:23:fd:a1:5d brd ff:ff:ff:ff:ff:ff
24: fwln101i0@fwpr101p0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master fwbr101i0 state UP group default qlen 1000
link/ether c6:04:4a:b2:77:45 brd ff:ff:ff:ff:ff:ff
root@pve:~# ip r
default via 10.10.17.1 dev vmbr0 proto kernel onlink
10.10.11.0/24 dev myDMZ2 proto kernel scope link src 10.10.11.1 linkdown
10.10.11.0/24 dev vmbr1 proto kernel scope link src 10.10.11.101
10.10.17.0/24 dev vmbr0 proto kernel scope link src 10.10.17.30
root@pve:~# cat /etc/network/interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!
auto lo
iface lo inet loopback
auto enp8s0f0
iface enp8s0f0 inet manual
iface enp4s0 inet manual
iface enp6s0 inet manual
iface enp3s0 inet manual
iface wlp5s0 inet manual
auto enp8s0f1
iface enp8s0f1 inet manual
auto vmbr0
iface vmbr0 inet static
address 10.10.17.30/24
gateway 10.10.17.1
bridge-ports enp8s0f0
bridge-stp off
bridge-fd 0
auto vmbr1
iface vmbr1 inet static
address 10.10.11.101/24
bridge-ports enp8s0f1
bridge-stp off
bridge-fd 0
source /etc/network/interfaces.d/*
root@pve:~# ping 10.10.11.1 -c 3
PING 10.10.11.1 (10.10.11.1) 56(84) bytes of data.
64 bytes from 10.10.11.1: icmp_seq=1 ttl=64 time=0.046 ms
64 bytes from 10.10.11.1: icmp_seq=2 ttl=64 time=0.019 ms
64 bytes from 10.10.11.1: icmp_seq=3 ttl=64 time=0.014 ms
--- 10.10.11.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2050ms
rtt min/avg/max/mdev = 0.014/0.026/0.046/0.014 ms
root@pve:~# traceroute 10.10.11.1
traceroute to 10.10.11.1 (10.10.11.1), 30 hops max, 60 byte packets
1 10.10.11.1 (10.10.11.1) 0.375 ms 0.332 ms 0.314 ms
root@pve:~# ping 10.10.11.24 -c 3
PING 10.10.11.24 (10.10.11.24) 56(84) bytes of data.
From 10.10.11.1 icmp_seq=1 Destination Host Unreachable
From 10.10.11.1 icmp_seq=2 Destination Host Unreachable
From 10.10.11.1 icmp_seq=3 Destination Host Unreachable
--- 10.10.11.24 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2082ms
pipe 3