Allow 1 user per VLAN

DikkeMoeders_

New Member
Feb 24, 2024
1
0
1
Alright to start off, i have 1 physical server, and lets say 1 interface for now.
I run pfSense before the physical proxmox server with the LAN ip of 10.35.0.254/16
Also in pfSense i did create vlans and added them as interface.
1708807346821.png


In proxmox i did also create VLANs.
1708807571756.png
now my webui runs on 10.35.0.1:8006 as default, and because of the VLANs it also runs on(which is good btw):
10.35.110.1:8006
10.35.120.1:8006
10.35.130.1:8006
10.35.140.1:8006
10.35.150.1:8006
10.35.160.1:8006
10.35.170.1:8006
10.35.180.1:8006
10.35.190.1:8006
10.35.200.1:8006

I also have 10 users named groep1, groep2 and so on with the same password because it is for "testing" purposes.

Now the only problem i have is that every user can login on every webui ip address and that is not what i want.
I want it that like user groep1 only can login on the webui hosted on 10.35.110.1 and the user groep2 only can login on 10.35.120.1 and so on.
This is necessary so they can't just login and change things of each other.

I tried it already with iptables like this "iptables -A INPUT -p tcp --dport 8006 -s 10.35.110.1 -m owner --uid-owner 9110 -j ACCEPT"
the uid 9110 is for user groep1 btw but the problem is that --uid-owner only can be applied on OUTPUT and not INPUT.


Last option i have is running proxmox virtual in proxmox or in another virtualization program i think.
If you need more information of have any ideas please let me know.
Thanks
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!