Restrict IP usage for specific VM

[BNexus]

So what I'm trying to accomplish is a way to restrict VMs to be able to use only one of many available IPv4 addresses. I was thinking of trying to set up the firewall to use implicit deny unless the source IP was the IP I want to allow the VM to use. Is this feasible as a way to restrict IPv4 address usage, or is there an easier way to do this?

 

[spirit]

So what I'm trying to accomplish is a way to restrict VMs to be able to use only one of many available IPv4 addresses. I was thinking of trying to set up the firewall to use implicit deny unless the source IP was the IP I want to allow the VM to use. Is this feasible as a way to restrict IPv4 address usage, or is there an easier way to do this?

Hi, see:
https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#pve_firewall_ipfilter_section

 

[BNexus]

Hi, see:
https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#pve_firewall_ipfilter_section

Forgive me if I'm wrong, but wouldn't this require me to create a new bridge for each vm?

 

[spirit]

Forgive me if I'm wrong, but wouldn't this require me to create a new bridge for each vm?

proxmox is doing it for you when you enable firewall on an nic interface (fwbrX bridge)