Problem with VLAN configuration SOPHOS, PROXMOX

Hello!

I'm not familiar with Mikrotik switches, but one thing you're doing wrong is - don't create VLAN's interface at Proxmox, you should think a Linux Bridge = Physical Interface at Sophos-side. (And enable the option "VLAN Aware on each Linux Bridge (Interface) at Proxmox.)

Also, don't create OVS Ports as VLAN's, you should only use Linux Bridge and then select the desired VLAN for the VM/LXC at its own configuration, Example:

At last, what exactly is the issue in here? You created the VLAN, but you're not receiving traffic on the "DMZ" side?

EDIT: I can't answer your private message, as you haven't enabled the option in the Community to accept messages from other members.

Thank you for your reply

The problem is with the DMZ interface ‘enp6s0’ in PROXMOX_MAIN I have a Linux Bridge vmbr2 configured with enp6s0 this is one of my physical network cards.

The goal is to get a DMZ network and VLAN id 1721 on PROXMOX_DMZ
Eventually I want to expose services from VLAN id 1721 to the world but I want them to be separate from the DMZ network.

I can skip the mikrotik switch and connect PROXMOX_MAIN directly to PROXMOX_DMZ ( if you think this is an easier option)

PROXMOX_MAIN (enp6s0 (vmbr2)) ---> (eno1) PROXMOX_DMZ
(I tried before but nothing worked)




With vSwtich this worked fine, but with DMZ I have to use Linux Bridge because one of the systems on the VM does not support vSwitch and I cannot configure the network interfaces configured by vSwitch.

Then my current configuration is ok? It seems to be working now.

I connected directly(without swtich)
PROXMOX_MAIN ----> PROXMOX_DMZ

Probably missing before
eno1.1721

VM SOPHOS


PROXMOX_MAIN

PROXMOX_DMZ