[SOLVED] Can't SSH into VLAN 10

[ColeTrain]

I created a VLAN 10 in Proxmox and have VM's on it, and I can not SSH to them.

I have two nodes. I have the issue with VM's on both nodes.
I have both nodes on a LACP LAGG to a Unifi Switch.
Using OPNSense, believe to have firewall Open.
Using 192.168.1.1/24 and 192.168.10.1/24 as VLAN10


Listing Troubleshooting steps.

• VM's have internet access and are working fine generally
• Console works, but not SSH.
• Can SSH to VM's on native untagged network from local windows using anything (putty, WSL, terminal) 192.168
• Can NOT SSH to VM's on VLAN 10 from local windows using anything
• From a Ubuntu VM on VLAN 10, can SSH to other node VM on VLAN10 ie VM1101 to VM1102
• Proxmox Datacenter Firewall Off
• Proxmox Node Firewall Off
• UFW Status = Disabled
• Can not PING from non-vlan VM to VLAN 10 VM
• I am wondering if I set up VLANS wrong. All I did was select "VLAN AWARE" and then added the network to the VM.
• From VM on VLAN 10, I can do a traceroute that hits the VLAN gateway and then my ISP
• From VM on VLAN 10, I can do a ping to gateway 192.168.10.1
• From VM on VLAN 10, I can do a ping to firewall 192.168.1.3
• From VM on VLAN 10, I can do a ping to pihole and BIND9 VM
• I can NOT ping gateway 192.168.10.1 from a different VM NOT on VLAN 10

Here is ` /etc/network/interfaces,`

auto bond0
iface bond0 inet manual
        bond-slaves eno1 eno2
        bond-miimon 100
        bond-mode 802.3ad

auto vmbr0
iface vmbr0 inet static
        address 192.168.1.80/24
        gateway 192.168.1.3
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

I am a NOOB with 4 years of failure under my belt, ELI5 and be nice, thank you so much in advance.

 

[ColeTrain]

NEW UPDATE. I left he house and fired up my laptop with wireguard back to the house. SSH works here! This means something, I don't know what, but it means something!

 

[ColeTrain]

I think I got it. On My LAN firewall rule, I had the gateway set to the one that said "WAN & IP" and I changed it to "default" and now it works.