Proxmox. How to set up vlan and nat?

Question

Network administration

There are three servers and you need to make a virtual network so that VMs and containers from different machines see each other, can go to the Internet, but do not see other virtual networks and physical machines. I configured one of the servers as follows:

vlan2 should use virtual machines, vmbr1 is tied to a physical interface, and through 10.10.11.1 you can get to the Internet.
How to make nat now?
Now 192.168.2.1 and 10.10.11.4 are being pinged from the virtual machine.

Answer 1

Clans are not needed here; configure everything through bridges, access and Nat through the iptables firewall