ProxMox - No Internet on Guest VM.

plumberg

@Falzo said:

@dwnewyork5 said:

okay, thx. so I'd try to change on the host:

iface enp2s0 inet6 static
>         address  2a01:4f8:111:222::2
>         netmask  128
>         gateway  fe80::1

(change netmask to 128 for setting the hostroute correctly)

and use this as bridge-setting. subnet spec'd, no further gateway setting:

iface vmbr0 inet6 static
>     address 2a01:4f8:111:222:333::2
>     netmask 100

after changing/rebooting, check first if the host still can reach public internet via ipv6.

then change on the guest accordingly:

iface ens18 inet6 static
>         address 2a01:4f8:111:222:333::123
>         netmask 100
>         gateway 2a01:4f8:111:222:333::2
> 

see if you can ping6 to the host address which is used as gateway and if that succeeds and the forwarding is enabled you also should reach everything else ;-)

Changing netmask to 100 at host solved the problem, thank you thank you so much.

netomx

You're mixing:

-A POSTROUTING -s 192.168.0.0/24 -o enp2s0 -j MASQUERADE
-A POSTROUTING -s 192.168.0.0/24 -o enp2s0 -j SNAT --to-source 136.aa.bb.cc
-A POSTROUTING -s 192.168.0.0/24 -o enp2s0 -j MASQUERADE

Just use 1 of them

msg7086

How could it be so hard given I already provided a full tutorial covering NAT IPv4 (MASQUERADE and port forwarding) and routed IPv6 (npd6) in my blog post.

I suppose the IPv6 implementation at hetzner is not more frustrating than OVH, or is it?

TL;DR for IPv6 you need

1. An IP that belongs to you and not intersects with the following (2.) range, for your host.

2. An IP range belongs to you and not intersects with the above (1.) IP and designated gateway, for your guests.

3. A ndp proxy, one the easiest choices is ndp6.

Eg, Pick ::1:0:0:1/128 as host IP, static route to ::ffff the gateway, and pick ::2:0:0:0/80 for your guests.

Or, Pick ::1/80 as host IP, natural route to ::ffff the gateway, and pick ::1:0:0:0/80 for your guests.

Etc etc.

Falzo

msg7086 said: How could it be so hard

because of two people asking in the same thread with probably slightly different setups and things getting mixed up therefore? ;-) ;-) ;-)