Firstly, thanks for the help you’ve given me so far with my previous posts, it’s nice that there’s a community as such that offers help.
I have a question in regard to the internet proxy on the VMs running in the Virtual Lab.
I’ve set the internet proxy address to one of our backup proxies given it has internet access and can ping externally, and on the VM running in the lab within the ‘Connections’ within ‘Internet Options’ referenced the virtual lab proxy (is this correct?) along with the port specified.
Proxy Config / Internet Proxy ConfigVirtual Lab VM > Internet Options (references the Proxy appliance address (not the internet proxy referenced above)
How based on the above I’m unable to both ping the Virtual Proxy appliance or even get out to the internet.
Pinging Proxy appliance from VM within Virtual Lab
I’ve done all of the above based on https://www.veeam.com/kb1165 but I’m not sure why it’s not working - any ideas here as I wish to test a VM by applying Windows updates before doing this in production (of course requiring internet to do so).
Many thanks,
LGH
Page 1 / 1
Hi @lgh check this
Is the proxy appliance in the same network as the veeam server? Aa new route table on the VBR will be created automatically.
On the other hand, if the appliance has an IP on a different network you have to manually add the new route on the router in production network
Try traceroute to 10.11.9.239 that does not ping a telnet 10.11.9.239 8080
Hi @lgh could you also provide Screenshots of your Settings for your isolated Networks?
I’m normally not working with an Internet Proxy for SureBackups - could be end up with a lot of trouble, maybe if some isolated Workloads send Data to some external Services...
Can your Isolated networks communicate to other isolated networks? Did you checked the “Route network between vNIC”s box?
Hi @lgh check this
Is the proxy appliance in the same network as the veeam server? Aa new route table on the VBR will be created automatically.
On the other hand, if the appliance has an IP on a different network you have to manually add the new route on the router in production network
Try traceroute to 10.11.9.239 that does not ping a telnet 10.11.9.239 8080
The backup server is on the same network as that of the appliance proxy (both sit on 10.11.9.x/24)
However, the VM within the isolated environment sits on another cluster with an IP of 172.20.120.90 hence setting the masquerade address to 172.31.252.90 (this may be wrong as I am an novice here - but trying to learn).
So it got a bit tricky - when it came to the networking stuff. We added a route on the gateway to punt any traffic that goes to 172.31.252.90 (masquerade address) to 172.20.121.90 (IP of VM). I defined this is static mapping so users could RDP onto the isolated VM to perform tests.
Therefore I can RDP to 10.12.9.90 and it takes me to 172.20.120.90 (the isolated VM).
Apologies if I’m not explaining this well but I’ll include some screenshots below.
Hi @lgh could you also provide Screenshots of your Settings for your isolated Networks?
I’m normally not working with an Internet Proxy for SureBackups - could be end up with a lot of trouble, maybe if some isolated Workloads send Data to some external Services...
Can your Isolated networks communicate to other isoltaed networks? Did you checked the “Route network between vNIC”s box?
Hi @Dynamic , thanks for the reply.
I only have one entry under Networking settings, see below.
The isolated network above is the production network from which the VM I’m spooling up sits on. 172.20.120.xx however, the proxy has been spun up on another cluster due to storage constraints - hence the proxy address being a 10.11.9.xx address.
I may have vastly confused things with my setup but as far as I’m concerned it works (so far). I can RDP onto the static mapping I’ve created but the only thing I can’t do now is access the internet.
It may be an issue with internal routing possibly, but with it working I now just need to give it internet access.
Hope this helps. I’ve commented on the previous comment from @Link State with some more information (waiting for moderator approval) which may help with my answer too.
