[SOLVED] VMs can steal eachother IPs from same subnet

blcksys

New Member
Sep 13, 2019
20
0
1
37
I searched on the docs here https://pve.proxmox.com/wiki/User_Management#Objects_and_Paths
However, I couldn't find a suitable option.

My problem is the following:
I have a subnet /29 for the VMs, however, every VM are able to set their own IP, and they can "steal" another VM IP on the same subnet simply by changing their network interface.

I searched on the forums, and I see there was many peoples struggling with this, but couldn't find a solution.
The only thing I saw it refers to, is block any other IP, except the assigned on, per VM, so if they try to use a subnet IP different that the one they own, it won't connect them.

However, the user can remove the firewall rule by VM on the webgui.

So, the question is:

Is there a solution to this?
Can I prevent an user on webgui from accessing the firewall there?