Unable to ping VM from host with vzNAT network

[jrajahalme]

Description

limactl version 1.0.3
macOS 14.7.2 / Macbook Pro M3

According to the docs (https://lima-vm.io/docs/config/network/) vzNAT network should be able to "Connect to the VM IP from Host". I have a Ubuntu 22.04 VM running with the vz driver and vzNAT network.

In the VM, the only IP address that looks like it could be routable (locally) is on eth0 (no IPv4 address on lima0):

$ ip addr show dev eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:55:55:a9:bf:8d brd ff:ff:ff:ff:ff:ff
    inet 192.168.5.15/24 metric 200 brd 192.168.5.255 scope global dynamic eth0
       valid_lft 3529sec preferred_lft 3529sec
    inet6 fe80::5055:55ff:fea9:bf8d/64 scope link
       valid_lft forever preferred_lft forever

$ ip addr show dev lima0
3: lima0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:55:55:b9:10:e0 brd ff:ff:ff:ff:ff:ff
    inet6 fd2c:49b2:7e20:a3c8:5055:55ff:feb9:10e0/64 scope global dynamic mngtmpaddr noprefixroute
       valid_lft 2591944sec preferred_lft 604744sec
    inet6 fe80::5055:55ff:feb9:10e0/64 scope link
       valid_lft forever preferred_lft forever

On the host:

 % ping 192.168.5.15
PING 192.168.5.15 (192.168.5.15): 56 data bytes
92 bytes from internetbox.home (192.168.1.1): Destination Net Unreachable
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 5533   0 0000  40  01 9dac 192.168.1.106  192.168.5.15
 
 % ifconfig | grep 192.168.
        inet 192.168.1.106 netmask 0xffffff00 broadcast 192.168.1.255
        inet 192.168.106.1 netmask 0xffffff00 broadcast 192.168.106.255

So there is no network device on 192.168.5 in the host.

[AkihiroSuda]

eth0 (192.168.5.15) is not pingable, but lima0 should be pingable

$ lima ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:55:55:9b:04:50 brd ff:ff:ff:ff:ff:ff
    inet 192.168.5.15/24 metric 200 brd 192.168.5.255 scope global dynamic eth0
       valid_lft 3580sec preferred_lft 3580sec
    inet6 fe80::5055:55ff:fe9b:450/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
3: lima0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:55:55:99:a0:bf brd ff:ff:ff:ff:ff:ff
    inet 192.168.64.5/24 metric 100 brd 192.168.64.255 scope global dynamic lima0
       valid_lft 3580sec preferred_lft 3580sec
    inet6 fd21:a20d:ee48:a4d5:5055:55ff:fe99:a0bf/64 scope global dynamic mngtmpaddr noprefixroute 
       valid_lft 2591999sec preferred_lft 604799sec
    inet6 fe80::5055:55ff:fe99:a0bf/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever

$ ping 192.168.64.5
PING 192.168.64.5 (192.168.64.5): 56 data bytes
64 bytes from 192.168.64.5: icmp_seq=0 ttl=64 time=0.579 ms
^C
--- 192.168.64.5 ping statistics ---
1 packets transmitted, 1 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.579/0.579/0.579/0.000 ms

[jrajahalme]

No IPv4 address on lima0:

% limactl shell dev2 ip a
bash: line 1: cd: /Volumes/dev/isovalent/cilium: No such file or directory
bash: line 1: cd: /Users/jarnor: No such file or directory
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:55:55:a9:bf:8d brd ff:ff:ff:ff:ff:ff
    inet 192.168.5.15/24 metric 200 brd 192.168.5.255 scope global dynamic eth0
       valid_lft 2700sec preferred_lft 2700sec
    inet6 fe80::5055:55ff:fea9:bf8d/64 scope link
       valid_lft forever preferred_lft forever
3: lima0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:55:55:b9:10:e0 brd ff:ff:ff:ff:ff:ff
    inet6 fd2c:49b2:7e20:a3c8:5055:55ff:feb9:10e0/64 scope global dynamic mngtmpaddr noprefixroute
       valid_lft 2591995sec preferred_lft 604795sec
    inet6 fe80::5055:55ff:feb9:10e0/64 scope link
       valid_lft forever preferred_lft forever
4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 02:42:92:c6:73:e5 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever

Any hints on why this may be the case?