As Udo suggested, your VMs on the 10.x LAN will have their own network configuration, including a correct gateway for their subnet. You don't need an IP on eth1/vmbr1, unless you want to be able to access PVE Web console on the private IP instead of the public one.
Paolo