Hello together,
in the past we used full tagged network ports for our proxmox servers. In this setup everything was clear:
VM with access to vlan 10:
VM with access to vlan 20:
VM with access to everything (vlan nics in the vm itself):
Now we wan't to use the more unifi standard setup: one native "vlan1" (untagged) and the rest tagged. The native one is used to manage the unifi devices itself. No I'm strugelling with giving some VMs access to the native vlan:
-> this gives access to the native vlan1, but the vm would also be able to get access to every other vlan with just adding a vlan-device. Creating a second vmbr1, which is not vlan aware is not supported
So i tried to play arround and figured out, that adding a vm-nic with tag 1 to the vm does also the trick and it looks like it does not have access to the other vlans:
Is this the right way of restricting the access only to the native vlan? Or how would you solve this?
Thank you and best,
Johannes
in the past we used full tagged network ports for our proxmox servers. In this setup everything was clear:
VM with access to vlan 10:
switch - nic0/nic1 - bond0 - vmbr0 (VLAN aware) - vm-nic (tag 10)VM with access to vlan 20:
switch - nic0/nic1 - bond0 - vmbr0 (VLAN aware) - vm-nic (tag 20)VM with access to everything (vlan nics in the vm itself):
switch - nic0/nic1 - bond0 - vmbr0 (VLAN aware) - vm-nic (no tag)Now we wan't to use the more unifi standard setup: one native "vlan1" (untagged) and the rest tagged. The native one is used to manage the unifi devices itself. No I'm strugelling with giving some VMs access to the native vlan:
switch - nic0/nic1 - bond0 - vmbr0 (VLAN aware) - vm-nic (no tag)-> this gives access to the native vlan1, but the vm would also be able to get access to every other vlan with just adding a vlan-device. Creating a second vmbr1, which is not vlan aware is not supported
So i tried to play arround and figured out, that adding a vm-nic with tag 1 to the vm does also the trick and it looks like it does not have access to the other vlans:
switch - nic0/nic1 - bond0 - vmbr0 (VLAN aware) - vm-nic (tag 1)Is this the right way of restricting the access only to the native vlan? Or how would you solve this?
Thank you and best,
Johannes
