I have the following issue. Vms in virsh net2 are fine.

Vms in net1 connect everywhere but the host. They can ping and connect to each other including vms in net1. Vms in net2 can only connect to the host using internal ip (192.168.X.X).

Example from the host:

Ping vm internal ip:

ping 192.168.100.134
PING 192.168.100.134 (192.168.100.134) 56(84) bytes of data.
64 bytes from 192.168.100.134: icmp_seq=1 ttl=64 time=0.370 ms
64 bytes from 192.168.100.134: icmp_seq=2 ttl=64 time=0.432 ms
Ping same vm WAN ip:

ping 100.x.x.x
PING 100.x.x.x (100.x.x.x) 56(84) bytes of data.
From 100.x.x.x icmp_seq=1 Destination Host Unreachable
From 100.x.x.x icmp_seq=2 Destination Host Unreachable
ssh vm wan ip:

ssh 100.x.x.x
ssh: connect to host 100.x.x.x port 22: No route to host
In other words, the vm above can connect and receive connections to/from anywhere but the host. I has internet connection and it is able to accept connections from any place other than the host.

I tried UFW disable and got same results, which I assume takes firewall off the issue.

You are providing too little and way too sloppy information.

What is the IP of the host?
What is the IP of the VMs
What is net1 and what is net2
How are your NICs configured in the VMs

So it seems there is significance in what is net1 and net2 and where you VMs are located?

Do you think we are waiting for mystery games?

jlinkels