Problem with bridges and multiple NIC

[zero]

Hi everyone, this may be a dumb problem, but I keep hitting roadblocks.
I’m running OPNsense as a Proxmox VM. I have 5 NIC (vtnet0, igb0, igb1, igb2, igb3) vtnet0 is a bridge that Prxmox creates by default to access to its control panel.

Inside OPNsense the WAN is associated to igb0. I would like to configure the igb1, igb2, igb3 to be the LAN and also to be able to control Proxmox, that’s why I created bridges.

My first approach was to associate igb1 to the LAN and then, create a bridge called bridge0 between LAN and vtnet0. The LAN worked, and I was able to communicate with Proxmox but, as is expected, only by the port igb1.

To solve this, I decided to create a bridge with igb1, igb2, igb3 (bridge1) and I assigned it to the LAN, but I noticed that the previous bridge, bridge0, wasn’t working, so that I had lost the access to Proxmox.

What I'm doing wrong?

Thank you in advance.

[zero]

I attach some screenshots to clarify.
These are my bridges:

bridge1 pretends to act as a switch, and it's assigned to LAN. Bridge0 is to be able to access to proxmox server IP: 192.168.1.200


What I can't understand is why if I disable bridge1 and I associate the LAN to igb1 the bridge0 works, and I'm able to reach 192.168.1.200 but not with bridge1 associated to LAN

[cookiemonster]

I'm not sure if you can bridge two bridges in proxmox but the behaviour you describe is expected. The networkd device can only be a member of one bridge as far as I know but maybe the proxmox forum can have more info.

[zero]

Thank you for your reply.
In fact, it is in OPNsense GUI where I'm bridging the two bridges, not in Proxmox. Maybe is not the best approach.
What would be the way to configure OPNsense to be able to use all my ports and also being able to access Proxmox from any of them?

[cookiemonster]

Sorry, I am not doing bridges so haven't stopped to think about this setup.
If you leave the default proxmox bridge ip in the same network as the one on OPN, then you can reach it but that is single network.
Sorry, not very helpful.