Proxmox VLAN Configuration: Linux Bridge Tagging, Management IP, and Virtual Machines

[@auslander1026]

6:13 from manual - If you made manual changes directly to the /etc/network/interfaces file, you can apply them by running ifreload -a This will avoid rebooting pve as I understand

[@AhoyCapnLinux]

Another option is `systemctl restart networking`

[@hibbertsa]

This video saved my life! 50+ hours in and you finally helped me. Thanks so much!

[@radiowolf80211]

Can't say this only took me an hour or even two, I struggled getting vPro to work as an out of band interface, but thanks for the video! Great info, this helped me a ton.

[@MrPir84free]

Wish I had seen this weeks or months ago; learned the hard way thru experimentation on some of this; learned other stuff however ; so not a loss. The experimentation was, uh, frustrating because not only had I added a new 4 port NIC, wasn't sure that it was working or not. Was tired of replugging things to move them at a switch; Now back to work.. Thanks for the video.

[@VirtualizationHowto]

Awesome @MrPir84free.....experimenting and learning the hard way is always frustrating, but like you, I feel better for it afterwards...generally sticks that way :) Be sure to join the forums and share your experiences there and help others to pass along the knowledge too: www.virtualizationhowto.com/community

[@dleemt]

Thank you SO much for this video. I was stuck on getting into the web gui on my newly deployed ProxMox server due to needing to have the management IP address on a specific vlan. this was an extremely clear and straightforward tutorial. well done.

[@v6transplant]

This video is spot-on and simple to understand. Thank you for taking the time to illustrate. 🙂

[@fatihakbas8529]

Thank you so much for this video!! I am new to Proxmox and this was the best tutorial for networking part! You are a great instructor!

[@MrSlimbrowser1]

A lot easier than how I tried to do get it to work, thank you!

[@SimonMudd]

When showing reconfigurations do not apply the reconfiguration by rebooting the host. Linux should not require a reboot to take configuration changes. If this were a production system you'd take it down for the time that's needed to do a reboot. Alternatively it might be better to show the specific proxmox configuration to reload the modified network configuration which should be much faster and almost immediate.

[@elduderino7767]

to apply the new network configuration after changing in console just run: ifreload -a

[@WeVloging]

if you do not have a switch just do not follow this videoo and even you want to follow make sure your router support VLAN tagging as well and also you need to create a tag on your router and assign VLAN tag to specific port where your host is connected to. I think every video like this should start with pre-requisite

[@223surf]

Just a note that may come in handy. For larger Xeon servers, such as xeon gold, we ran into a problem with VLANs being broken due to spectre and meltdown mitigation's. I had to disable them. While this may be fixed in Kernel 6.5, I had major production issues with 6.2.

[@VirtualizationHowto]

Please share your findings over on the VHT forums here: www.virtualizationhowto.com/community. Thank you for the comment!

[@Jarek.]

Personally I do this slightly different: create N bridges for all my VLANs and then bind each of them to port enp4s0.X. Then create N Linux VLANs enp4s0.X . I found this more readable to which VLAN my VM is connected to. Having said that - looking forward to see how we can use SDN introduced in recent version of Proxmox.

[@VirtualizationHowto]

@Jarek, thank you for your comment!

[@bobkoss280]

As always, your tutorials are crystal clear. Many thanks for taking the time to make them.

[@Kaffius]

Super helpful. fixed up my issues with my bond0 and truenas networking.

[@jstnumber73]

You are a gentleman and a scholar. Thanks!

[@holgerturck6718]

Thanks very much. This is exactly what I was looking for.

[@jwilk2107]

Thank you very much for this video. Very informative👍

[@jegwebb]

This was sooo good! Thank you very much! :)

[@matthewbennett2844]

worked a treat thanks for this video helped a lot.

[@traviswilliams6140]

I want to see an updated video for VLAN management using the new SDN features with existing externally managed (UniFi) VLANs including tagging the host os

[@NADIRBAACH]

thanks for this video, i like your job, you have my light in this life, juste thanks !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[@Ecker00]

Have you looked at how the new SDN interface in PVE 8.1 works?

[@NicolaCampbell-mm9bg]

sorry i'm confused here, how do i remote into the new vlan IP address if i don't already have a host on that subnet? seems like when i apply those changes in the interfaces file i'm going to lose access to my server all together

[@aaronryder4008]

I have the same question. By any chance did you find a solution for it?

[@cmonspike]

@@aaronryder4008 He forgets to mention the part where if you change to the new vlan IP address, the port to which the Proxmox host connects to on the switch must be a Trunk port and allow traffic for VLAN 149. Your PC should also be connected to a switch on the same network that allows traffic to and from VLAN 149 to reach the Proxmox host. 😄

[@maksymyudin2569]

@@cmonspike Thank you!

[@eoeoeovideos]

Hello, thank for this tutorial! Any idea how to add IP Pools in Promox? Or how to add automatically a next public ip to the next VM that will be created!

[@VirtualizationHowto]

@eoeoeovideos thank you for the comment. Interesting question. I would like to learn more about your use case. Sign up on the forums and create a thread and let's discuss this in more detail: www.virtualizationhowto.com/community

[@CyberCam1969]

I'm still looking for someone on YT to cover the OpenVSwitch configuration in Proxmox. Everyone and their dog does videos on the linux networking, but no one does the OpenVSwitch networking which is suppose to be better. Why? I'm really curious to know?

[@VirtualizationHowto]

create a topic over on the VHT forums here: www.virtualizationhowto.com/community and let's discuss. Thank you for the comment!

[@2008spoonman]

Configuring OVS in Proxmox is very easy. Not sure about KZbin tutorials but there are a few good websites that explain howto configure OVS. Just Google it.

[@BitterRealist27]

kzbin.info/www/bejne/qmjUpWStobhsq6Msi=slU7c-guRg2C58Bw Openvswitch pfsense

[@Rivenlab]

Why do you want it to be covered in YT ? There is tons of tuto on google

[@carbohydratespeter361]

There is like no good video on that I agree

[@shakibhossain4334]

Brother i'd love to know your suggestion about building a small data center for a cloud computing service company running with Proxmox as a core system. Is it a good idea to run with proxmox as the core system? Thank you!

[@jasoncrawford1489]

These steps assume the proxmox host is connected to a managed switch that understands vlan tags?

[@seapro4018]

Good information here. I am trying to configure bonds and vlans, in conjunction with bridges. Basically, I want to create 2 bonds, 1 for the mgmt, and the other for my vm's. I want to have the vlans 'aware' on the vm-network, and not the mgmt bond. I can create the bonds but am having issues creating or assigning the bridge to the vm-network. Any suggestions as to how I might be able to get this done? Thanks for your videos and suggestions you might have

[@VirtualizationHowto]

@seapro4018 thank you for your comment! Hey hop over to the forums if you don't mind and sign up there to create a topic and we can discuss this in more detail: www.virtualizationhowto.com/community

[@jefffontenot1782]

I wish someone could make a video where the installation is clear and makes sense.

[@VirtualizationHowto]

@jefffontenot1782 thank you for the comment! Ping me on the forums if you need more detailed help in your environment: www.virtualizationhowto.com/community

[@igordasunddas3377]

Does any of this change if I want to deploy OPNsense/pfsense and use VLANs in there, too?

[@begamess]

canyou show how to do it with unifi device like what to set up on the router side

[@sereneislandmusic]

Thanks! I have a question about DHCP. If I have an external DHCP server and configure the IP helper on the switch for the respective VLANs, after configuring the VLAN bridge on the host is the VM able to automatically obtain an IP address from the external DHCP?

[@VirtualizationHowto]

Yes absolutely this will work as expected.

[@sereneislandmusic]

@@VirtualizationHowto Thanks!

[@edd7]

What are the downsides of just tagging the vlan ID to each VM's Network Device without doing any of this setup?

[@stevefxp]

If i make a vmbr vlan aware does that mean the corresponding switch port would be setup to tag only the vlans to be passed?

[@DavidGlover-mi1po]

If the VLAN tagging is happening on the switch ports then adding a VLAN configuration in PVE should not be needed, correct?

[@Monster_Rancher]

nice work.

[@VirtualizationHowto]

Thank you! Cheers!

[@truckerallikatuk]

What do you do if checking "Vlan aware" makes your NIC choke up? My Connect-x3 can only listen to 126 vlans at once. I only need 3 vlans.

[@andymok7945]

Thanks.

[@fasti8993]

If I make vmbr0 VLAN aware but don't set a VLAN tag in the network device net0 of a VM, will the latter act as a VLAN trunc so that i could use that VM as a docker host and putt the docker containers on different VLANs using 802.1q MAC VLANs in docker?

[@ronm6585]

Thank you.

[@VirtualizationHowto]

Welcome!

[@rzart47]

and what does the "AWARE" check do?

[@debnathmriganka2010]

Sir, Please help me one thing I am facing issue My PVE is bridge connection and can acess internet but when i install Ubutntu LXC, there is no internet connection. I am very new on linux, canyou please help me.

[@AthelstanEngland]

Erm.. thanks but this puts the VM on the same Vlan as the management of the host. What if you want the management on say 10.0.0.x and different VLANs for your VMs perhaps 192.168.0.x and 192.168.1.x I cannot get that to work. Ping between VMs on the same VLAN works but none of the VMs can get to the firewall (which is on 10.0.0.x) and thus no external traffic.

[@ТервелМетодиев]

Hi i have a problem with configuration on my proxmox VE at the beginning of the installation i freshly install it and can't access the web GUI, i try to ping from another pc the IP address of the proxmox but nothing, get in the router i use and he doesn't see the proxmox too, so im 100% sure the problem is in the proxmox, now my question is how do i fix this i watch a lot of crap suggestions from changing my ip to rewriting the whole network/interface file nothing work can you help mi how proxmox is connecting to the internet wath i have to change DHCP IP or more.

[@matthewbennett2844]

Do you need to set the switch port as a trunk port for this to work

[@VirtualizationHowto]

@matthewbennett2844 yes you would need to make sure your switch ports uplinkng your proxmox host are configured as trunks that pass all VLANs or is tagged with all VLANs you have configured on your Linux VLANs in Proxmox. Let me know if you have any other questions. Sign up on the VHT forums and we can discuss in more detail www.virtualizationhowto.com/community

[@JirkaLottmann]

is it possible use this when i set proxmox to dhcp ip adress not static?

[@VirtualizationHowto]

Absolutely, it should work for either.

[@VirtualizationHowto]

@jirkalottmann let me know if you have more questions, be sure to sign up on the VHT forums here: www.virtualizationhowto.com/community if you want to discuss anything in more detail

[@phybroptyx1999]

Random question: Is Proxmox capable of implementing port mirroring/spanning?

[@VirtualizationHowto]

@phybroptyx1999 join up on the VHT forums and let's discuss this: www.virtualizationhowto.com/community

[@iluvpeanuts7919]

I am having troubles with trying to get a VM in proxmox to communicate with a device outside of proxmox, separated by a L2 switch. I configured the connection from the proxmox server to the switch to be a trunk port and the connection from the switch to the external device to be an access port, accessing vlan 10. As vmbr0 is being used for something else, I created another linux bridge vmbr1, which is linked to a subinterface, ens33.10, of my physical network interface, ens33 (chatgpt told me that I could do this). I then followed your video to create a linux vlan, which creates vmbr0.10 subinterface which is then use by proxmox to communicate with the internal VM. After all this set up, the internal VM is still unable to communicate with the external VM. Any ideas?

[@VirtualizationHowto]

@iluvpeanuts7919 Thank you for the comment! Do you mind creating a forum post under the Proxmox help forum? We can get into more detail to troubleshoot it there. Looking forward to diving in...here is a direct link to the proxmox help forum: www.virtualizationhowto.com/community/proxmox-help/

[@mikebeutler84]

I'm not sure why you resorted to SSH for everything. All of the settings are easily applied through the GUI, including modifications to HOSTS.

[@antropology721]

Thank you so much, but you shouldn't reboot pve machine after making changes. It's enough to restart networking service

[@raul230285]

Cool

[@fbifido2]

@5:34 - why only 2 to 4094 ? does it not have vlan 1? (0 & 4095 is revs.) what about vxlan ?

[@pepeshopping]

VLAN 1 is the default untagged vlan.

[@fbifido2]

@@pepeshopping so, the command in that config file tells Proxmox to tagged vlan 2 to 4094?

[@dieselwelds8645]

​​@@fbifido2vlan1 by default is the native vlan. Native vlan means the frames are untagged. So the command vlan 2-4094 is permitting all frames tagged within that range. If you changed it to say vlans 20, 40, & 60, but the network had vlans 10, 20, 30, 40, 50, & 60, the vswitch will block/drop any frames tag as 10, 30, & 50 while allowing vlans 20, 40, & 60. Thing of a trunk port as an access port, but instead of access vlan X it's native vlan X and any other vlan frames allowed on the trunk are tagged so the switch knows how to forward them

[@VirtualizationHowto]

@fbifido2, thanks for the comment! Create a topic over on the VHT forums here: www.virtualizationhowto.com/community and let's discuss.

[@dieselwelds8645]

one thing to add to that too is if you do a pcap of a 802.1q trunk interface you will see frames in the pcap with 802.1q with the vlan ID listed.

[@sudan911]

i get blank screen when i use nano /etc/network/interface also at the top of your shell cli its an IP# PUTTY my say GNU NANO 7.2 help?

[@StorytimeClubTube]

/etc/network/interfaceS you missed the S

[@edufur]

This did not work for me. It actually made it so I could no longer access my PVE at all. I triple checked everything and I did not get it wrong. I had to access from the console to put it back in order to gain access again.

[@basudebbhanja1144]

Showing error Nested Virtualization Using Windows 11 and VMWare workstation When power on Eve in VMWARE showing error VMware Workstation Error whie powering on: VMware Player does not support nested virtualization on this host. Module 'HV power on faied. Faled to start the virtual machine.

[@basudebbhanja1144]

Want to load Eve Ng and run Qemu in it but showing error

[@VirtualizationHowto]

@basudebbhanja1144 hop over and sign up on the VHT forums and let's discuss this: www.virtualizationhowto.com/community

[@alexanderwenger9304]

I used the same management IP as before and now I cant access my ProxMox anymore :(

[@VirtualizationHowto]

@alexanderwenger9304 hey sign up over on the forums and I we can discuss it further to troubleshoot: www.virtualizationhowto.com/community.

[@RK-ly5qj]

And thats why prox isnt popular on enterprise as ESXI is. I know what happen with vmware, but man, its much much better managed then prox. Simple things like vlans/taggs, untaggs, and u still need crafting in CLI :p

[@ianemenaja4222]

How to config 2 nic and 2 Switch with vlan trunking. Port channel.😊😊

[@netbin]

First!

[@roylavender7241]

You really should learn a little about creating videos. All the cuts and the continuous auto focus are really distracting. With a little preparation, these should be easy to avoid.

[@VirtualizationHowto]

@roylavender7241 Thank you for the comment and the constructive criticism. Always trying to get better, unfortunately video is not one of my strengths, but still learning :)

[@roylavender7241]

@@VirtualizationHowto The content was great. It really amazes me that Proxmox is still so un-polished when it comes to supporting something as simple as VLANs. I must admit I was dumbfounded that you had to jump through these hoops so I looked in a bunch of other places. Sure enough, this is what you need to do. I mean the CLI commands aren't difficult but come on, if you make a GUI for your product, you'd think it would support these basic functions. Especially after all this time. Anyway, thank you for the content.

[@roylavender7241]

Oh, and for your next video, just change the setting on your camera from continuous auto focus to single auto focus. Unless you are moving around a lot (which you aren't in videos like this), continuous auto focus is horrible. Its a simple, one-click, setting and makes the video look much more professional IMHO.

[@edufur]

Get over it. He took out all the stuff that didn't need to be in the video so that we only got the important stuff. Who cares about the cuts. I care about useful content only. He shouldn't have to re-film it for a fringe group of picky Karens.