Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have 3 physical servers (each with 1 NIC) in different datacentres, all of them are interconnected by openvpn bridged private network (10.x.x.x).

Inside this network we have fully functional 3 nodes Proxmox 2.1 cluster. So, actually question is:

Is there any "proper" way to make "global" local network (172.16.x.x) for all VMs inside cluster, so even if we move VM from one node to other we could reach it by static IP regardless of it's physical location?

BTW, we can't add dedicated NIC to each server.

Thanks in advance.


I have tried to make a separate openvpn bridge for 172.16.x.x, now I have at each server two interfaces:

openvpnbr1 -
vmbr0 -

openvpnbr1 -
vmbr0 -

But now there is no connection between those ifaces:

From icmp_seq=2 Destination Host Unreachable

From icmp_seq=2 Destination Host Unreachable

If I shut down vmbr0 interfaces, so there is connection between servers over openvpn, but vmbr0 is used by Proxmox...

Where I am wrong?

share|improve this question
Why can't you do it exactly the same way you do it with the private network? – David Schwartz Jun 27 '12 at 13:02
My thoughts was to build private network (10.x.x.x) just for hardware nodes, all virual nodes should be inside it's own network (172.16.x.x) and this network should not cross bounds of 10.x.x.x, if it possible. – Anton Jun 27 '12 at 14:49
David, I have tried that way. Updated Question – Anton Jun 28 '12 at 10:27
Have you considered using vLANs? What's with the OpenVPN bridging?? – Chris S Jun 28 '12 at 13:36
Unfortunately vLANs are not available over our physical network – Anton Jun 28 '12 at 15:06
up vote 1 down vote accepted

Solution was to use only one bridge (vmbr0) instead of two, and pass it by OpenVPN tunnel.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.