I have a dedicated public server with single physical port eno1
currently i have
I want proxmox node to get a local ip from opnsense using dhcp on vmbr1, i read online that proxmox uses vmbr0 by default, can i change that so it uses vmbr1 instead ?
if not possible to change default vmbr0 can i just change everything to make vmbr0 not bridged to physical eno1 port then make vmbr0 bridged to virtual network card of opnsense vm lan port that has dhcp, and then remove the bridge of eno1 from vmbr0 to vmbr1 which will be the wan port of opnsense VM ?
what is best way to do this ? i also read about SDN but still not sure how they would work out and still reading about them.
I already have vpn access to local network of opnsense so i can access pve admin page and other vm when i am succesful
currently i have
Code:
iface lo inet loopback
iface eno1 inet manual #Physical active port
iface enx7260520e2e2a inet manual #usb nic i assume for kvm/ipmi ?
iface eno2 inet manual #physical port down
auto vmbr0 #default used by pve node and opnsense wan port
iface vmbr0 inet static
address x.x.x.130/29
gateway x.x.x.129
bridge-ports eno1
bridge-stp off
bridge-fd 0
#wan
auto vmbr1 #opnsense lan port and I want pve node to use this port instead so not have public access
iface vmbr1 inet manual
bridge-ports none
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 2-4094
#lan
auto vmbr2 #opnsense lan2 port
iface vmbr2 inet manual
bridge-ports none
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 2-4094
#lan2
source /etc/network/interfaces.d/*
I want proxmox node to get a local ip from opnsense using dhcp on vmbr1, i read online that proxmox uses vmbr0 by default, can i change that so it uses vmbr1 instead ?
if not possible to change default vmbr0 can i just change everything to make vmbr0 not bridged to physical eno1 port then make vmbr0 bridged to virtual network card of opnsense vm lan port that has dhcp, and then remove the bridge of eno1 from vmbr0 to vmbr1 which will be the wan port of opnsense VM ?
what is best way to do this ? i also read about SDN but still not sure how they would work out and still reading about them.
I already have vpn access to local network of opnsense so i can access pve admin page and other vm when i am succesful