Home Lab multiple subnet query

[Jocky Wilson]

Hi all,

I own a single Proxmox server. I wish to configure a "Lab in a box" with 3 subnets. Each subnet will have a linux VM host node on it. I also want to configure 2 other VMs as routers between the 3 subnets.

I'm fine with configuring the router VMs, however I'm unclear how I segregate the subnets so that they don't all just see each other via vmbr0. I want all inter subnet traffic to go via the respective router VM.

Am I correct in thinking that this is possible using VLANs?

Is it possible to do this in such a way that the 10.0.1.0/24 subnet can see out to the internet, but the 10.0.2.0/24 & 10.0.3.0/24 subnets could only get to the internet via 10.0.1.0/24? (i.e. default route of each subnet to point at the northbound Router VM).

Alternatively, is it feasible to give each subnet internet connectivity via vmbr0 without creating routing loops?


Apologies for the newbish questions. I'm new to Proxmox.

Jocky

 

[shanreich]

Best way is probably to create a new Linux bridge per subnet and just use a single router VM, that is part of every subnet, to route between them. The uplink could then be either a separate network interface on vmbr0, or you could handle it via the router VM as well and only forward traffic towards the uplink from the specific subnets that you want to allow.