What interface should I enable the Datacentre firewall on?

I'm using PVE 3.4-6

I'd like to firewall off all ports that I don't need on a couple of MVs. Looking at https://pve.proxmox.com/wiki/Proxmox_VE_Firewall, I think (but I'm not sure) that I need to add rules to enable the PVE admin UI and ssh first though.

So I've set up a security group called "admin" on the Datacentre that looks like this:

security-group.png

I now want to add that group to the rules set. But what do I specify for the interface?

add-rule.png

My host's network looks like this:

network.png

Any clues much appreciated.

Attached Images

• security-group.png (49.1 KB)
• add-rule.png (29.7 KB)
• network.png (31.1 KB)