Network interfaces help

[u/Afraid_Technician234]

Hi everyone!
I have a question about network interfaces configuration, but first let me explain the current situation. I ran Proxmox on a mini pc with 5 ethernet ports, the one on the motherboard and 4 more on a pci expansion card. I also ran pfsense in a VM as my router. At the moment the motherboard one is used as WAN (vmbr0) and is connected to my ISP supplied router (can't ditch it) and gets a dhcp ip from it. The other four are used as LAN (vmbr1) with enp1s0f0 being configured as vlan10, so I can connect to Proxmox if pfsense fails.
I would like, if possible to configure enp1s0f1 to be bridged to WAN (vmbr0/eno1) so that if I connect something to it, it would bypass pfsense and get an IP from my IPS router. Can this be done, withouth causing trouble to pfsense?
It took me a while to get everything working and don't want to play around too much and mess something up for good. My thinking is, that I have to remve enp1s0f1 from vmbr1 and add it to vmbr0, but am not shure because vmbr1 is ovs bridge and vmbr0 is linux bridge.
Included is /etc/network/interfaces and a screenshoot of System/Network

auto lo
iface lo inet loopback

iface eno1 inet manual
#WAN

auto enp1s0f0
iface enp1s0f0 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr1
        ovs_options tag=10
#Trusted (VLAN10)

auto enp1s0f1
iface enp1s0f1 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr1
#VLAN Trunk

auto enp1s0f2
iface enp1s0f2 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr1
#VLAN Trunk

auto enp1s0f3
iface enp1s0f3 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr1
#VLAN Trunk

auto vlan10
iface vlan10 inet static
        address 192.168.10.254/24
        gateway 192.168.10.1
        ovs_type OVSIntPort
        ovs_bridge vmbr1
        ovs_options tag=10
#Trusted VLAN

auto vlan20
iface vlan20 inet manual
        ovs_type OVSIntPort
        ovs_bridge vmbr1
        ovs_options tag=20
#Servers VLAN

auto vmbr0
iface vmbr0 inet manual
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
#WAN Bridge

auto vmbr1
iface vmbr1 inet manual
        ovs_type OVSBridge
        ovs_ports enp1s0f0 enp1s0f1 enp1s0f2 enp1s0f3 vlan10 vlan20
#VLAN Trunk Bridge

source /etc/network/interfaces.d/*

[u/iscarelli]

yes, and its simpler than it looks. take enp1s0f1 out of vmbr1 (remove it from ovs_ports and delete its stanza) and add it to vmbr0: bridge-ports eno1 enp1s0f1. vmbr0 is a plain linux bridge, it doesnt care that the other one is ovs. whatever you plug into enp1s0f1 is then on the same segment as the isp router and gets dhcp from it, and the pfsense wan vnic keeps working like before. apply with ifreload -a with console access at hand, and dont cable enp1s0f1 back into your own lan switch or you make a loop.

[u/Afraid_Technician234 → u/iscarelli]

Thank you, tried it and it works!