On 2026-10-15 20:01, Drew Weaver wrote:
Hello,
We're using local storage for all VMs so we don't need a storage
network.
You still have the Secondary Storage to deal with, it can use the
Management network if omitted. You need to present an NFS share somehow
for isos, templates, snapshots etc and also have backups to consider
perhaps.
Our guest VMs will be routed by a physical router, they will need some
form of "IP spoofing" protection, and they will all be in a single IP
range attached to VLAN 100.
Create a shared network with Security Groups on VLAN 100.
We need the "non-management NIC" on the console and the secondary
storage SystemVMs to use a totally separate IP range and VLAN 250.
You mean the Public range? You can add a Public range on that VLAN and
dedicate it to System VMs.
Is it possible to create a zone in the UI that meets these
requirements? If so can anyone point me in the right direction?
Yes - go for a regular Advanced zone (not with SG) and then add a Shared
Network with the Security Groups enabled offering.
Thank you,
-Drew
