Bridge - host trunk and access ports


New Member
Nov 14, 2023
Hi, I have network bridge consisting of 2 hardware nic's (ports). I would like to set one port as trunk (this works on enp2s0) and the other as access port (for selected vlan on iface enp3s0). Currently both ports/nic work as trunk ports and I can't find solution for above. Traffic reaching this bridge is tagged traffic from VM (opnsense) and my goal is:
  • to connect trunk port to switch - like I said it works
  • and connect access port directly to device.

How to set it in pve node?

Current config:
auto lo
iface lo inet loopback

iface enp2s0 inet manual

iface enp1s0 inet manual

iface enp3s0 inet manual

iface enp4s0 inet manual

auto enp3s0.12
iface enp3s0.12 inet manual

auto vmbr23
iface vmbr23 inet static
        bridge-ports enp2s0 enp3s0.12
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#LAN trunk

auto vmbr4
iface vmbr4 inet static
        bridge-ports enp4s0
        bridge-stp off
        bridge-fd 0
#extra mgmnt

auto vmbr1
iface vmbr1 inet manual
        bridge-ports enp1s0
        bridge-stp off
        bridge-fd 0


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!