Disable proxmox host ipv6 dhcp on WAN port

Discussion in 'Linux Admins, Storage and Virtualization' started by Cape, Feb 17, 2019.

  1. Cape

    Cape Member

    Joined:
    Oct 28, 2015
    Messages:
    30
    Likes Received:
    2
    I migrated a node from ESXi to Proxmox today which among other things has a pfSense VM, and therefore a WAN port. I've set the WAN port up as a normal OVS bridge and passed it to pfsense, and everything works as expected.
    However, I just noticed that the vmbr interface on the Proxmox host grabbed a ipv6 dhcp address from my ISP, and happily exposes ssh etc to world :eek:

    I've manually removed it with ip a del 2001:... dev vmbr1 for now, but this was a nasty surprise! The UI doesn't seem to expose a "don't dhcp6" when creating bridges, any drawbacks to setting it in /etc/network/interfaces manually? I suppose there a risk Proxmox will remove it if I use the UI later...
    Any other tips and tricks I should be aware of when having a WAN bridge on Proxmox?
     
    #1
  2. niekbergboer

    niekbergboer Active Member

    Joined:
    Jun 21, 2016
    Messages:
    105
    Likes Received:
    34
    I don't know about DHCPv6, but I had such problems with SLAAC; editing /etc/sysctl.conf and enabling IPv6 forwarding (the comment there says something about SLAAC did the trick.

    I use that in VMs with a single interface, where I don't want them to have a v6 address. YMMV.
     
    #2
Similar Threads: Disable proxmox
Forum Title Date
Linux Admins, Storage and Virtualization Puppet 4.10.12 Exiting; no certificate found and waitforcert is disabled Jul 29, 2019
Linux Admins, Storage and Virtualization Proxmox environment feedback Nov 4, 2019
Linux Admins, Storage and Virtualization Selecting a Proxmox Master Node for Cluster Oct 3, 2019
Linux Admins, Storage and Virtualization Running pfSense virtualized but serving the Proxmox as well Sep 20, 2019
Linux Admins, Storage and Virtualization Proxmox server with separate unraid storage box, is it possible? Aug 19, 2019

Share This Page