Configuring 2 Network in Proxmox Without VLAN's

[Thomas M]

Hello,

We are trying to configure the proxmox VE in a way that the Management network is completely Isolated from the VM network. Below are what we are trying;

1. ProxmoxVE node will always be in a LAN network within our DC assets which will be assessible remotely only over LAN via VPN. [ eth0]
2. A second network (Public Internet) is connected to Proxmox which should be used by the VM's to connect to the outside world. [eth1]

What we are trying to achieve is, we don't want to configure a public IP in Proxmox Node to use the public network but the VM's should be able to use it and have a public IP in them. i.e. no one should be able to access Proxmox Management GUI/Shell over internet. The management network should be strictly isolated and only available over LAN network.

The VM's should in no way access the LAN/Management network of Proxmox node. But they can reach the internet through the public network interface eth1.

PS: We don't have VLAN's in our network yet. I did try to create a second bridge interface vmbr1 but it didn't worked since it seems like I will have to assign an IP to make it work.

Anybody who had done the similar setup successfully.

Thanks,
Thomas

 

[spirit]

I did try to create a second bridge interface vmbr1 but it didn't worked since it seems like I will have to assign an IP to make it work.

you don't need ip address on a bridge interface to get it working.
I think your setup should be right.

eth0------vmbr0(lan ip address)
eth1-----vmbr1-------vm(public ip address in your vm)

you don't even need vmbr0, you could have


eth0(lan ip address)
eth1-----vmbr1-------vm(public ip address in your vm)

(and the gateway of your vm, is somwhere on your physical nework after eth1)

(Ip address is setup on vmbr0 by default, because when an interface is enslave in a bridge, you need to setup ip on the bridge)

 

[Thomas M]

you don't need ip address on a bridge interface to get it working.
I think your setup should be right.

eth0------vmbr0(lan ip address)
eth1-----vmbr1-------vm(public ip address in your vm)

you don't even need vmbr0, you could have


eth0(lan ip address)
eth1-----vmbr1-------vm(public ip address in your vm)

(and the gateway of your vm, is somwhere on your physical nework after eth1)

(Ip address is setup on vmbr0 by default, because when an interface is enslave in a bridge, you need to setup ip on the bridge)

Thanks mate. It worked when I configured it from the command line.