Skip to content

Latest commit

 

History

History
44 lines (24 loc) · 982 Bytes

pve-firewall-vm-opts.adoc

File metadata and controls

44 lines (24 loc) · 982 Bytes
dhcp: boolean

Enable DHCP.

enable: boolean

Enable/disable firewall rules.

ipfilter: boolean

Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface’s MAC address. For containers the configured IP addresses will be implicitly added.

log_level_in: (alert | crit | debug | emerg | err | info | nolog | notice | warning)

Log level for incoming traffic.

log_level_out: (alert | crit | debug | emerg | err | info | nolog | notice | warning)

Log level for outgoing traffic.

macfilter: boolean

Enable/disable MAC address filter.

ndp: boolean

Enable NDP.

policy_in: (ACCEPT | DROP | REJECT)

Input policy.

policy_out: (ACCEPT | DROP | REJECT)

Output policy.

radv: boolean

Allow sending Router Advertisement.