I have what essentially equates to a L2 FW deployment flow, and I'm seeing some issues with the client not receiving traffic when return L2 FW rewrites the MAC with it's VE MAC. The following is my current setup, where all players exist within Proxmox:
I initially had everything on vmbr1, but...