[SOLVED] VMs can steal eachother IPs from same subnet

blcksys

New Member
Sep 13, 2019
20
0
1
36
I searched on the docs here https://pve.proxmox.com/wiki/User_Management#Objects_and_Paths
However, I couldn't find a suitable option.

My problem is the following:
I have a subnet /29 for the VMs, however, every VM are able to set their own IP, and they can "steal" another VM IP on the same subnet simply by changing their network interface.

I searched on the forums, and I see there was many peoples struggling with this, but couldn't find a solution.
The only thing I saw it refers to, is block any other IP, except the assigned on, per VM, so if they try to use a subnet IP different that the one they own, it won't connect them.

However, the user can remove the firewall rule by VM on the webgui.

So, the question is:

Is there a solution to this?
Can I prevent an user on webgui from accessing the firewall there?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!