pve-firewall-vm-opts.adoc

   1 `dhcp`: `boolean` ::
   2
   3 Enable DHCP.
   4
   5 `enable`: `boolean` ::
   6
   7 Enable/disable firewall rules.
   8
   9 `ipfilter`: `boolean` ::
  10
  11 Enable default IP filters. This is equivalent to adding an empty
  12 ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain
  13 sane default restrictions such as restricting IPv6 link local addresses to
  14 the one derived from the interface's MAC address. For containers the
  15 configured IP addresses will be implicitly added.
  16
  17 `log_level_in`: `(alert | crit | debug | emerg | err | info | nolog | notice | warning)` ::
  18
  19 Log level for incoming traffic.
  20
  21 `log_level_out`: `(alert | crit | debug | emerg | err | info | nolog | notice | warning)` ::
  22
  23 Log level for outgoing traffic.
  24
  25 `macfilter`: `boolean` ::
  26
  27 Enable/disable MAC address filter.
  28
  29 `ndp`: `boolean` ::
  30
  31 Enable NDP.
  32
  33 `policy_in`: `(ACCEPT | DROP | REJECT)` ::
  34
  35 Input policy.
  36
  37 `policy_out`: `(ACCEPT | DROP | REJECT)` ::
  38
  39 Output policy.
  40
  41 `radv`: `boolean` ::
  42
  43 Allow sending Router Advertisement.
  44