Quantcast
Channel: Proxmox Support Forum
Viewing all articles
Browse latest Browse all 170672

vlans and containers

$
0
0
Hello,

I got stuck with the following:

Two VLANs (1 and 12) are configured on a Proxmox server:
Code:

# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
      valid_lft forever preferred_lft forever
2: eth2: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:25:90:33:ff:fc brd ff:ff:ff:ff:ff:ff
    inet6 fe80::225:90ff:fe33:fffc/64 scope link
      valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:25:90:33:ff:fd brd ff:ff:ff:ff:ff:ff
5: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/void
    inet6 fe80::1/128 scope link
      valid_lft forever preferred_lft forever
20: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 00:25:90:33:ff:fc brd ff:ff:ff:ff:ff:ff
    inet 172.26.1.38/16 brd 172.26.255.255 scope global vmbr0
    inet6 fe80::225:90ff:fe33:fffc/64 scope link
      valid_lft forever preferred_lft forever
21: eth2.1@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP
    link/ether 00:25:90:33:ff:fc brd ff:ff:ff:ff:ff:ff
    inet6 fe80::225:90ff:fe33:fffc/64 scope link
      valid_lft forever preferred_lft forever
22: vmbr12: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 00:25:90:33:ff:fc brd ff:ff:ff:ff:ff:ff
    inet 172.27.1.38/16 scope global vmbr12
    inet6 fe80::225:90ff:fe33:fffc/64 scope link
      valid_lft forever preferred_lft forever
23: eth2.12@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP
    link/ether 00:25:90:33:ff:fc brd ff:ff:ff:ff:ff:ff
    inet6 fe80::225:90ff:fe33:fffc/64 scope link
      valid_lft forever preferred_lft forever
24: tap103i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500
    link/ether 22:38:47:41:4a:27 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::2038:47ff:fe41:4a27/64 scope link
      valid_lft forever preferred_lft forever
25: tap104i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500
    link/ether 4e:43:ab:c8:50:bd brd ff:ff:ff:ff:ff:ff
    inet6 fe80::4c43:abff:fec8:50bd/64 scope link
      valid_lft forever preferred_lft forever

# ip rou
172.27.200.10 dev venet0  scope link
172.26.2.59 dev venet0  scope link
172.26.0.0/16 dev vmbr0  proto kernel  scope link  src 172.26.1.38
172.27.0.0/16 dev vmbr12  proto kernel  scope link  src 172.27.1.38
default via 172.26.1.1 dev vmbr0

# ip rou show table 12
default via 172.27.1.1 dev vmbr12

# ip ru
0:      from all lookup local
32765:  from 172.27.0.0/16 lookup 12
32766:  from all lookup main
32767:  from all lookup default

There are two OpenVZ containers in different VLANs. They use different bridge interfaces - vmbr0 and vmbr12:
Code:

# brctl show
bridge name    bridge id              STP enabled    interfaces
vmbr0          8000.00259033fffc      no              eth2.1
                                                        tap103i0
vmbr12          8000.00259033fffc      no              eth2.12
                                                        tap104i0

Here is an output from inside the containers:
Code:

# vzctl enter 100
# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
      valid_lft forever preferred_lft forever
2: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/void
    inet 127.0.0.1/32 scope host venet0
    inet 172.26.2.59/32 brd 172.26.2.59 scope global venet0:0

# vzctl enter 106
# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
      valid_lft forever preferred_lft forever
2: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/void
    inet 127.0.0.1/32 scope host venet0
    inet 172.27.200.10/32 brd 172.27.200.10 scope global venet0:0

Container #100 works OK, while #106 is the issue. I can ping it from the proxmox host itself only. When I try to ping from somewhere else, I see arp requests on vmbr12 and no replies. tcpdump from inside the container keeps silence.

Any ideas what's wrong with it?

Thanks in advance!

Viewing all articles
Browse latest Browse all 170672

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>