Decide on a direction for Proxmox VLANs vs bridge ports

[1Copenut]

UPDATE: open_vSwitch and VLANs are definitely the way to go. These will allow me to create a tap that Security Onion can monitor all traffic and send on to Kibana.

The VLAN option is appealing b/c that's likely the way I'll segment traffic on the real network. Consider how you might use these in the Proxmox pfSense build.

• https://www.laroberto.com/vlans-with-proxmox-and-pfsense/
• https://docs.netgate.com/pfsense/en/latest/firewall/fundamentals.html#stateful-filtering
• https://www.youtube.com/watch?v=t7qt1wlS9uA

Four VLANs

• Management (10)
• SIEM (20)
• Servers (30)
• Vulnerable boxes (40) -> Nothing in, nothing out

[1Copenut]

Finished this step with zero issues.