Vlans & VMs

Ben McGuire

Member
Sep 14, 2016
30
1
6
By adding bridge_vlan_aware yes to /etc/network/interfaces under each bridge network interface you can use vlan tag as usual again?

Using this configuration do we just need to add a vlan tag to each network interface for each VM so the VM;s are segmented so each cannot communicate with one another?
 
Hi,

yes but your switch have to handle this Vlan.
If you only want isolate the VM's from each other, than use the firewall.
 
We are a little worried that the host is also using the same bridge as the VM's . Our VMs are all on public IPs and everything is using eth0 even though we have eth1 available it is not being used. It maybe a little later to create a bond as we have running VMs which cannot be disturbed. If firewall rules are the answer could you suggest a sample rule based upon the host and all vms using vmbr0?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!