Network and firewall
Available networks, every NIC in one table, bulk VLAN moves and a per-VM guest firewall.
Available networks
- The Network page reads the selected cluster live: bridges with type, ports, VLAN awareness, MTU, address and how many project VMs use them.
- SDN VNets are shown with name, zone and tag when the cluster uses software-defined networking.
VM network interfaces
- One searchable table lists every NIC of the project's VMs: VM, NIC, model, bridge, VLAN and MAC.
- Edit a NIC in place (network.edit): pick a bridge and enter a VLAN. Leaving the VLAN empty clears the tag.
- Without network.view.all you only see NICs of VMs you own.
- A Recent network changes card lists the latest network-related audit events.
Bulk moves
- 1Select NICs with the checkboxes and choose Move to bridge.
- 2Pick the target bridge and optionally a VLAN tag (empty keeps the current tag, a dash clears it).
- 3MAC, model and other options are kept. NICs already on the target with no VLAN change are skipped, and the result is reported per batch.
Template default NICs can be edited the same way. Those changes only affect future clones and need network.edit and template.manage.
Guest firewall
- Each VM's Firewall tab has an enable switch, default policies for inbound and outbound traffic (ACCEPT, DROP or REJECT) and an ordered rule list.
- Rules are evaluated top to bottom and the first match wins. Reorder, switch rules on and off, or delete them.
- A rule has direction, action, protocol (TCP, UDP, ICMP or any), source, destination, ports (80, 80,443 or ranges like 1000:2000) and an optional comment.
- Rules are stored in the portal and pushed to the Proxmox VM firewall. Each save reports whether it was pushed, saved in the portal only, or will be retried on the next change.
- Editing needs network.firewall; without it the panel is read-only.
An inbound DROP policy without allow rules blocks every connection, including yours. The browser console keeps working because it does not use the guest network, so you can always undo from there.
Features on this page
- Network discovery
- NIC inventory
- Bulk NIC moves
- Template default NICs
- Guest firewall
- Network change history
More in Virtual machinesAll topics
Create a VMThe seven-step New VM wizard, how names map to VMIDs, placement, and what happens after Create.Power actionsStart, shutdown, reboot, hard stop, suspend and resume, each with its own permission, for one VM or many.The VM page and consoleThe Virtual Machines list, a VM's tabs, and the browser console (noVNC, SSH and RDP).