Question about network config

[mrbyte]

Hello!!
I'm running Proxmox on a MiniPC with two Ethernet ports.
Now I want to use a firewall as VM, I need two ports, one for wan and another for lan.
I have some doubts about the config needed:


Should I add the enp3s0 interface to the vmbr0 or create a new vmbr1?

Thank you very much and best regards!!

 

[Dunuin]

Create a new vmbr1, attach it to enp3s0, don't give it an IP/gateway and use it for your WAN.
The LAN side of the VM then has to be on vmbr0 and serving the 192.168.3.0/24 subnet so your PVE host can use it to access the internet.

 

[mrbyte]

Create a new vmbr1, attach it to enp3s0, don't give it an IP/gateway and use it for your WAN.
The LAN side of the VM then has to be on vmbr0 and serving the 192.168.3.0/24 subnet so your PVE host can use it to access the internet.

Thank you very much for your help!!

The wan port will be linked to my ISP router, could it be possible to assign and IP static from a 192.168.1.0/24 subnet? It could be useful when I configure the VPN.

Thank you very much again and best regards!!

 

[Dunuin]

Sure but not great for security when your PVE hosts management (SSH/webUI/API) is on the WAN side...even if that WAN side isn't that bad because its still behind your ISPs routers firewall.

 

[mrbyte]

Ok, I see... Understood!!

Thank you very much and best regards!!