Assuming that you are able to access the ext.IP within the cluster nodes, it looks to be an issue with no routes to the IP range you used within the cluster for the metalLB. You may need to think about adding static routes from the machine ( which is outside the cluster) to the ext.IPs.