Is there a way to select what a non-cluster PVE node sees as it's management network?
Because this network (10.122.9.0/24 in this example) is automatically whitelisted in the firewall:
vs
Problem is I'm going to set up a node thats directly connected to the internet and would rater only set the VPN as management.
As you can see I added a crude work around. But I would vastly prefer to get rid of that hack.
Because this network (10.122.9.0/24 in this example) is automatically whitelisted in the firewall:
Code:
root@tschmidt-chimera:~# cat /etc/pve/firewall/cluster.fw
[OPTIONS]
enable: 1
policy_in: REJECT
[IPSET management]
10.122.3.0/24
!10.122.9.0/25
!10.122.9.128/25vs
Code:
root@tschmidt-chimera:~# ipset save
create PVEFW-0-management-v4 hash:net family inet hashsize 64 maxelem 64 bucketsize 12 initval 0xebfc1628
add PVEFW-0-management-v4 10.122.3.0/24
add PVEFW-0-management-v4 10.122.9.128/25 nomatch
add PVEFW-0-management-v4 10.122.9.0/25 nomatch
add PVEFW-0-management-v4 10.122.9.0/24
create PVEFW-0-management-v6 hash:net family inet6 hashsize 64 maxelem 64 bucketsize 12 initval 0x8a3b813fProblem is I'm going to set up a node thats directly connected to the internet and would rater only set the VPN as management.
As you can see I added a crude work around. But I would vastly prefer to get rid of that hack.
