{"url":"https://nexovirt.com/features/networking","title":"Proxmox network management: IP pools, NAT, firewall · NexoVirt","description":"Proxmox network management in one panel: next-free IP allocation from IP pools, NAT for private guests, every firewall in one view and a network map.","markdown_url":"https://nexovirt.com/features/networking.md","sections":[{"heading":"Proxmox network management: IP pools, NAT and firewall in one panel","content":"NexoVirt brings Proxmox network management into the panel: IP pools that give each new guest the next free address, NAT and port forwarding for private guests, and a readable view of the firewall rules running on the host. The agent applies the rules, and they survive reboots.\n\n[Install free](https://docs.nexovirt.com/getting-started/installation/) [Read the Networking & IPAM guide](https://docs.nexovirt.com/guides/networking/)\n\n![Networking & IPAM in the NexoVirt panel](https://nexovirt.com/assets/img/screenshots/networking-light.webp?v=1792068738)"},{"heading":"What it does","content":"IP pools, NAT and port forwarding, firewall inspection and a network map.\n\n- ### IPAM with subnet math\n\nDefine IPv4 or IPv6 zones. The panel enumerates the range, reserves the gateway and IPs already in use, and hands out the next free address at create time.\n- ### NAT and port forwarding\n\nPrivate guests reach the internet through masquerading, and port forwards expose them. The agent writes only its own NEXOVIRT chains and restores them at boot.\n- ### Firewall inspection\n\niptables, nftables, ufw, firewalld and pve-firewall are parsed into one rule model and shown as readable tables with a NAT map.\n- ### Network map\n\nBridges classified as WAN, private or internal, the guests on each matched by IP, and the NAT overlay on top.\n- ### Per-guest firewall\n\nPer-guest rules with reusable presets for admins, and optionally for customers in the portal."},{"heading":"Why not just use the Proxmox web UI?","content":"Proxmox VE runs the virtualization. NexoVirt adds the layer around it. Networking & IPAM, task by task:\n\n| Task | Proxmox web UI | NexoVirt |\n|---|---|---|\n| Give a private VM internet access | post-up iptables lines in /etc/network/interfaces | Enable NAT on the host page and click Apply |\n| Forward a public port to a VM | Hand-written DNAT rules | One row: protocol, public port, guest IP and port |\n| Pick a free IP for a new VM | A spreadsheet, or SDN IPAM inside SDN zones | The next free address from a zone, set in the wizard |\n| See every firewall rule on a host | pve-firewall rules only | iptables, nftables, ufw, firewalld and pve-firewall in one view |"},{"heading":"How to use it","content":"Up and running in 3 steps, all in the panel.\n\n1. Create an IP zone in Settings, IP zones. The panel detects your bridges and does the subnet math.\n2. On a host's Networking page, enable NAT, add port forwards and click Apply.\n3. Click Analyze to read the host's live firewall, and open the Map tab to see what sits where.\n\n[Networking & IPAM: step-by-step guide in the docs](https://docs.nexovirt.com/guides/networking/)"},{"heading":"See it in the panel","content":"Real screenshots from NexoVirt, with demo data.\n\n![IP zones with subnet math and per-zone allocation.](https://nexovirt.com/assets/img/screenshots/ip-zones-light.webp?v=1792068738)\n\nIP zones with subnet math and per-zone allocation."},{"heading":"Networking & IPAM FAQ","content":"How do I set up port forwarding to a Proxmox VM?Enable NAT for the host with its WAN bridge and private subnet, add a port forward (for example TCP 2222 to 10.10.0.5 port 22) and click Apply. The agent writes the DNAT rule into its own iptables chain.\n\nDo NAT rules survive a reboot of the Proxmox host?Yes. The agent writes a restore script and a systemd unit, nexovirt-nat.service, that applies the rules again at boot.\n\nDoes NexoVirt change my existing firewall rules?No. It only creates and flushes its own NEXOVIRT chains and jumps into them. Built-in chains and the Proxmox firewall are never flushed."},{"heading":"Related pages","content":"- [ Proxmox IPAM IP pools with next-free allocation, in detail. ](https://nexovirt.com/proxmox-ipam)\n- [ Proxmox NAT and port forwarding guide The manual setup, made reboot-safe. ](https://nexovirt.com/blog/proxmox-nat-port-forwarding)\n- [ SDN projects SDN templates and projects: a VNet, subnet and IP pool per project. ](https://nexovirt.com/features/sdn)\n- [ Multi-host & onboarding Every Proxmox host and cluster in one panel, fresh or already running. ](https://nexovirt.com/features/multi-host)\n- [ Guest management Every VM and container across all hosts in one searchable list with bulk actions. ](https://nexovirt.com/features/guests)\n- [ Users, access & security Admins and customers, guest ownership, TOTP 2FA, impersonation and an audit log. ](https://nexovirt.com/features/security)\n- [ All features Everything NexoVirt adds to Proxmox VE. ](https://nexovirt.com/features)"},{"heading":"Start running NexoVirt today","content":"Free for homelabs with unlimited VMs on up to 2 nodes. Running a hosting business? Upgrade in place when you grow, no migration.\n\n[Install free](https://docs.nexovirt.com/getting-started/installation/) [See pricing](https://nexovirt.com/pricing)"}],"faq":[{"question":"How do I set up port forwarding to a Proxmox VM?","answer":"Enable NAT for the host with its WAN bridge and private subnet, add a port forward (for example TCP 2222 to 10.10.0.5 port 22) and click Apply. The agent writes the DNAT rule into its own iptables chain."},{"question":"Do NAT rules survive a reboot of the Proxmox host?","answer":"Yes. The agent writes a restore script and a systemd unit, nexovirt-nat.service, that applies the rules again at boot."},{"question":"Does NexoVirt change my existing firewall rules?","answer":"No. It only creates and flushes its own NEXOVIRT chains and jumps into them. Built-in chains and the Proxmox firewall are never flushed."}]}