# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

iface eno2 inet manual

auto eno1
iface eno1 inet dhcp
        pre-up /etc/network/preup.sh
        post-down /etc/network/postdown.sh
        post-up   echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up iptables -t nat -A PREROUTING -i eno1 -p tcp -m multiport ! --dport 22,8006 -j DNAT --to 10.0.0.
        post-up iptables -t nat -A PREROUTING -i eno1 -p udp -j DNAT --to 10.0.0.2


auto vmbr0
iface vmbr0 inet static
        address 172.31.1.25/16
        bridge-ports eno2
        bridge-stp off
        bridge-fd 0
        hwaddress ac:1f:6b:e9:7e:60
#robonet

auto vmbr1
iface vmbr1 inet static
        address 10.0.0.1/30
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        hwaddress ac:1f:6b:e9:7f:61
        post-up   iptables -t nat -A POSTROUTING -s '10.0.0.0/24' -o eno1 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '10.0.0.0/24' -o eno1 -j MASQUERADE
#NAT going OUT


auto vmbr2
iface vmbr2 inet static
        address 192.168.5.25/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0
#VM-Netzwerk