Yes, this can be tricky, if you only have one interface available. What I am always doing is to bind the IP to the vmbr instead of the real interface. Afaik, you can remove the host IP from enp2s0 and attach it to the vmbr0, along with the rest of the IP config (dns, gateway). When you're...