Hi,
I believe with just one port for opnsense (on a min-pc) we can still do vlans (with tagging I believe?) but how effective is that for segregating and isolating proxmox machines?
Say I want to keep a VPN machine isolated, from other virtual machines? How would you do that? Do you have any tips for running such a system?
It’s perfectly effective, they become fully isolated from each other. Yes vlans would work if they’re all on the same host. If they’re not on the same host you would need a vlan capable switch, or at least one that’ll pass tagged packets through.