Changing Proxmox Management Interface?

[Dowd]

I dunno if I missed something in the documentation but I can't find any info about this.

I have a total of 6 NICs in my existing server, fresh install of proxmox currently sits on vmbr0 which has port eno1 under its ports/slaves, after I get setup I would like to switch promox to vmbr1 which will have port eno2 or possibly vmbr2 which will not have any ports.

I am aware I can change the IPs in the UI and via /etc/network/interfaces, but I don't see how to change management interfaces. How do I go about achieving this?

 

[gurubert]

The management interface of Proxmox will listen on any active IP address.

 

[Dunuin]

The management interface of Proxmox will listen on any active IP address.

Jep, if you don't want the WebUI to be available on one interface just don't give that bridge/NIC a IP. Or if that bridge/NIC needs a IP (because you for example also use PVE as a NAS so you guests need a Proxmox IP in that subnet to access the shares) you can add that IP and then setup the firewall to block the SSH and WebUI ports on that IP. But keep in mind that there is a invisible anti lockout rule so your WebUI will always be available unless you explicitly block that port.

 

[SInisterPisces]

Jep, if you don't want the WebUI to be available on one interface just don't give that bridge/NIC a IP. Or if that bridge/NIC needs a IP (because you for example also use PVE as a NAS so you guests need a Proxmox IP in that subnet to access the shares) you can add that IP and then setup the firewall to block the SSH and WebUI ports on that IP. But keep in mind that there is a invisible anti lockout rule so your WebUI will always be available unless you explicitly block that port.

Does that apply to VLAN setups as well? I've got a management interface on vmbr0.1 (VLAN 1) where I don't want it. Can I just delete the CIDR entry without breaking the VLAN?

 

[Dunuin]

Does that apply to VLAN setups as well? I've got a management interface on vmbr0.1 (VLAN 1) where I don't want it. Can I just delete the CIDR entry without breaking the VLAN?

Yes, then management would only be available on 10.10.5.2.

 

[SInisterPisces]

Yes, then management would only be available on 10.10.5.2.

This worked perfectly. Thanks!