I have a Proxmox server ruing several containers, some with exteal and inteal networks, some with only inteal. The Proxmox server itself has OpenVPN server installed on it, and I can coect to it and ping/traceroute the server itself, as well as containers with only an inteal network. However, trying to reach any container that has an exteal network doesn't work. Traceroute from the VPN client shows one hop to the VPN server, then times out.
The containers with only the inteal network can successfully coect to the containers with two networks, and vice versa. The Proxmox host can coect to both types, and vice versa. The only place I'm having trouble is from the VPN client to containers with 2 networks.
Here are some configurations to explain what I'm doing (abbreviated):
Proxmox ifconfig (vmbr0 is bridged to eth0)
vmbr0 Link encap:Etheet HWaddr x:x:x:x:x:x
inet addr:149.x.x.x Bcast:149.x.x.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
vmbr2 Link encap:Etheet HWaddr x:x:x:x:x:x
inet addr:10.55.55.254 Bcast:10.55.55.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Proxmox route (VPN routes also shown, VPN network is 10.5.0.0/24):
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 149.x.x.254 0.0.0.0 UG 0 0 0 vmbr0
10.5.0.0 10.5.0.2 255.255.255.0 UG 0 0 0 tun0
10.5.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.55.55.0 10.55.55.254 255.255.255.0 UG 0 0 0 vmbr2
10.55.55.0 0.0.0.0 255.255.255.0 U 0 0 0 vmbr2
149.x.x.0 0.0.0.0 255.255.255.0 U 0 0 0 vmbr0
1-network container ifconfig:
eth0 Link encap:Etheet HWaddr 66:63:38:39:32:65
inet addr:10.55.55.3 Bcast:10.55.55.3 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
1-network container route:
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.55.55.254 0.0.0.0 UG 0 0 0 eth0
10.55.55.254 0.0.0.0 255.255.255.255 UH 0 0 0 eth0
2-network container ifconfig:
eth0 Link encap:Etheet HWaddr x:x:x:x:x:x
inet addr:149.x.x.x Bcast:149.x.x.66 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
eth1 Link encap:Etheet HWaddr 36:33:30:39:64:62
inet addr:10.55.55.1 Bcast:10.55.55.1 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
2-network container route:
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 149.x.x.254 0.0.0.0 UG 0 0 0 eth0
10.55.55.0 10.55.55.254 255.255.255.0 UG 0 0 0 eth1
10.55.55.254 0.0.0.0 255.255.255.255 UH 0 0 0 eth1
149.x.x.254 0.0.0.0 255.255.255.255 UH 0 0 0 eth0
VPN client ifconfig:
eth0 Link encap:Etheet HWaddr fc:aa:14:99:f9:13
inet addr:192.168.100.105 Bcast:192.168.100.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.5.0.6 P-t-P:10.5.0.5 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
And finally, VPN client route:
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.100.1 0.0.0.0 UG 0 0 0 eth0
10.5.0.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.5.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.55.55.0 10.5.0.1 255.255.255.0 UG 0 0 0 tun0
149.56.19.201 192.168.100.1 255.255.255.255 UGH 0 0 0 eth0
192.168.100.0 0.0.0.0 255.255.255.0 U 1 0 0 eth0
I have tried making a route on Proxmox host to direct all requests for 10.55.55.0/24 to vmbr0 but it didn't change anything. I'm a web developer by trade, so I'm not super familiar with networking. Any help would be appreciated!
برچسب:
نویسنده: استخدام کار