The opposite, vmbr0 on the public network, vmbr1 on the private network!
Indeed the opposite would have been smarter, but too late the damage is done, there is a fifty VM, and I do not feel the courage to reconfigure all!
That is why I replaced in / usr/share/perl5/PVE/Config.pm and...