Yep. That’s why a lone but shadow port is taken from the high-end of ports … just for SSH (on the inside). Two interfaces. No bridge. Raw Netdev.
Almost like an overglorified but managed hub.
If you like your MAC, you get to keep your MAC.
Almost like an overglorified but managed hub.
If you like your MAC, you get to keep your MAC.
Let me give you an example - I have a "port 22 slug" and what it does is block all traffic of all kinds except for TCP22. That's it. It does nothing else and it does it transparently without having an IP address of its own. If I wanted to reconfigure it, I would connect with a serial console.
Make sense ?