Pi is in VLAN 11, connected to Switch which os passing through VLAN that goes from MikroTik (rt-poz-1 - 10.0.1.30) and reaches the Pi with address 10.0.1.20. I have already one K3s instance on RasberryPi with exactly that setup. In short way what I want to achieve is having a LoadBalancer Service on Kubernetes (MetalLB) accessible from outside cluster - meaning from LAN network (.x) Probably you know something about K3s and MetalLB. It's not even an issue but problem which I want to deal with it. Right now I need to use static.ītw I have another issue to resolve. There is DROP on 53(domain) at UDP protocol.Īnd disabling it after and of course applying between that process a network restart, the SNAT although it's not checked it's still active PVEFW-reject tcp - anywhere anywhere multiport dports epmap,netbios-ssn,microsoft-dsĭROP udp - anywhere anywhere udp dpt:1900ĭROP tcp - anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYNĭROP udp - anywhere anywhere udp spt:domainĪll - anywhere anywhere /* PVESIG:h3DyALVslgH5hutETfixGP08w7c */ PVEFW-reject udp - anywhere anywhere udp spt:netbios-ns dpts:1024:65535 PVEFW-reject udp - anywhere anywhere udp dpts:netbios-ns:139 PVEFW-reject udp - anywhere anywhere multiport dports 135,445

PVEFW-DropBroadcast all - anywhere anywhereĪCCEPT icmp - anywhere anywhere icmp fragmentation-neededĪCCEPT icmp - anywhere anywhere icmp time-exceededĭROP all - anywhere anywhere ctstate INVALID

Routeros 7 beta