I have a cluster with two PVE nodes inside local network. I'm trying to set up access to PVE using port forwarding. Inside local network everything works fine as well as through VPN. From outside it only works to first PVE but the second one is unreachable. They have common firewall rules of a cluster and no individual rules. Hosts has two network links both: one is local, another is external. It's like second PVE drops everything on it's local interface that comes not from local network. And it's CTs also have no access using port forwarding, only form external ethernet connection. I'm sure that port forwarding is set up correctly: I could change port forwarding address to another PVE server's address and have access in no time. One thing is different between nodes: the problem one is originally PBS with PVE installed on top of it's Debian. I've spent several hour trying to figure out what's wrong and still have no idea. What it could be?