Moving VMBR0 to a VLAN in a trunk

[J-L-A]

Initial install has the PVE web user access on a dedicated interface (Nic1).
Now that I have configured the OPNsense VM running inside the PVE to use all traffic on the LACP/Trunk of the 2 sfp+ connections, is it possible to move (or how hard is it to move) the PVE web access to a dedicated VLAN that is on the LACP? Plan is to put all management ports to a vlan on the LACP line so I can connect the management switch to one of the fiber switch ports and not directly on the PVE hardware.

* did some search but mostly came out how to configure/add vlans on proxmox..

 

[J-L-A]

for context, this is the network config. I want to move webui to a vlan 68 on VMBR1 (LACP/Trunk) and dont use VMBR0 anymore.

auto lo
iface lo inet loopback

iface enp88s0 inet manual

iface enp91s0 inet manual

iface enp3s0f0np0 inet manual

auto enp1s0f0
iface enp1s0f0 inet manual

iface enp3s0f1np1 inet manual

auto enp1s0f1
iface enp1s0f1 inet manual

iface wlp92s0 inet manual

auto bond0
iface bond0 inet manual
        bond-slaves enp1s0f0 enp1s0f1
        bond-miimon 100
        bond-mode 802.3ad
        bond-xmit-hash-policy layer3+4
#LAN Trunk

auto vmbr0
iface vmbr0 inet static
        address 192.168.68.200/24
        gateway 192.168.68.1
        bridge-ports enp88s0
        bridge-stp off
        bridge-fd 0
#MGMT

auto vmbr1
iface vmbr1 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 10 20 30 40 68
#LACP Bridge

source /etc/network/interfaces.d/*