PVE & PBS vlan accessibility

[theb2b]

I have both a pve and pbs physical servers, both are on the same vlan. Users are on a different vlan, 50. I have setup what I thought was proper configuration for vlan 50 to access pve and pbs they are unable to. The kicker the VM's on the pve are accessible to the users, smb, http(s), etc but not the management interface's on both pve/pbs. If I place my laptop on the server network all is good.
The bridge are vlan aware, is this a firewall issue? Rather new to Prox but have been through the forums and how-to's here from what I am reading and hearing this should work, what am I missing?

Need more detial please let me know.

 

[SteveITS]

So you enabled the firewall?

There’s an error in the docs I think so I’ll restate it as “If you enable the firewall, traffic [from] all hosts is blocked by default. Only exceptions is WebGUI(8006) and ssh(22) from your local network.”

You can create an ipset named management:
https://pve.proxmox.com/pve-docs/ch..._ip_set_span_class_monospaced_management_span

 

[theb2b]

I have a rule created using the WebGUI to allow SSH through and that works. But when I attempt to create a rule to allow traffic for port 8006, I am unable to get it working.



I have tried several iterations for this rule but none of them worked, sure using built in Macro has some settings I'm not aware of, what am I missing here?