Isolating VM's from Local Network

[chlowjow]

Good day people,

I want to isolate my vm's from my local network. It sounds easy, but for me difficult to do.
I have read a lot on the forums. There are basically 3 ways: Vlan, Bridge or Firewall.
Vlan, to difficult and do not have a managed switch and do not have a capable router which can handle Vlan's.

I am trying to configure it via Firewall.
Please see attached Jpeg with the nescesarry steps from Stefan (Oct 2022)

I could follow all steps in the attached jpeg except the one with Out Drop -dest 192.168.0.0/16
I don't know which commands I have to type to get the code in shell or SSH so I am doing these settings all through the GUI.
When I enter Destiniation 192.168.0.0/16 it give me a error, and there is no other possible place to enter the /16 (subnet) please see second attached file.
When I enter it without the /16 it is not giving me a error when I save the settings but nothing changes, my vm's are still able to see the devices in my loca network

Can somebody help me?

 

[andreirapuru]

If you just want to have VMs isolated from the local network, you could create a zone Vxlan, create a vnet on this zone and to attach the network of your VMs to this vnet.

This way this VM won't access you local network.

 

[chlowjow]

If you just want to have VMs isolated from the local network, you could create a zone Vxlan, create a vnet on this zone and to attach the network of your VMs to this vnet.

This way this VM won't access you local network.

Thanks for your reply.
Can you tell me how I can configure this?

 

[andreirapuru]

Thanks for your reply.
Can you tell me how I can configure this?

On Proxmox 8.1.5, go to SDN > Zones > VXLAN. After that go to SDN > VNET > Add VNET and select the zone you create before. Go to SDN and apply your config.

After that just go to the VMs and configure the NIC on the VNET you created.
More information here: https://pve.proxmox.com/pve-docs/chapter-pvesdn.html#pvesdn_config_zone

 

[Darkbotic]

On Proxmox 8.1.5, go to SDN > Zones > VXLAN. After that go to SDN > VNET > Add VNET and select the zone you create before. Go to SDN and apply your config.

After that just go to the VMs and configure the NIC on the VNET you created.
More information here: https://pve.proxmox.com/pve-docs/chapter-pvesdn.html#pvesdn_config_zone

Can you be more specific? I tried this but it's not working.
Here's what I want to do.