1. Packages
  2. Packages
  3. Proxmox Virtual Environment (Proxmox VE)
  4. API Docs
  5. firewall
  6. OptionsLegacy
Viewing docs for Proxmox Virtual Environment (Proxmox VE) v8.1.0
published on Sunday, Apr 26, 2026 by Daniel Muehlbachler-Pietrzykowski
Schema (JSON)
muhlba91/pulumi-proxmoxve

proxmoxve.firewall.OptionsLegacy

proxmoxve logo
Viewing docs for Proxmox Virtual Environment (Proxmox VE) v8.1.0
published on Sunday, Apr 26, 2026 by Daniel Muehlbachler-Pietrzykowski
Schema (JSON)
muhlba91/pulumi-proxmoxve

    Manages firewall options on VM / Container level.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as proxmoxve from "@muhlba91/pulumi-proxmoxve";

const example = new proxmoxve.firewall.OptionsLegacy("example", {
    nodeName: exampleProxmoxVirtualEnvironmentVm.nodeName,
    vmId: exampleProxmoxVirtualEnvironmentVm.vmId,
    dhcp: true,
    enabled: false,
    ipfilter: true,
    logLevelIn: "info",
    logLevelOut: "info",
    macfilter: false,
    ndp: true,
    inputPolicy: "ACCEPT",
    outputPolicy: "ACCEPT",
    radv: true,
}, {
    dependsOn: [exampleProxmoxVirtualEnvironmentVm],
});

    import pulumi
import pulumi_proxmoxve as proxmoxve

example = proxmoxve.firewall.OptionsLegacy("example",
    node_name=example_proxmox_virtual_environment_vm["nodeName"],
    vm_id=example_proxmox_virtual_environment_vm["vmId"],
    dhcp=True,
    enabled=False,
    ipfilter=True,
    log_level_in="info",
    log_level_out="info",
    macfilter=False,
    ndp=True,
    input_policy="ACCEPT",
    output_policy="ACCEPT",
    radv=True,
    opts = pulumi.ResourceOptions(depends_on=[example_proxmox_virtual_environment_vm]))

    package main

import (
	"github.com/muhlba91/pulumi-proxmoxve/sdk/v8/go/proxmoxve/firewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := firewall.NewOptionsLegacy(ctx, "example", &firewall.OptionsLegacyArgs{
			NodeName:     pulumi.Any(exampleProxmoxVirtualEnvironmentVm.NodeName),
			VmId:         pulumi.Any(exampleProxmoxVirtualEnvironmentVm.VmId),
			Dhcp:         pulumi.Bool(true),
			Enabled:      pulumi.Bool(false),
			Ipfilter:     pulumi.Bool(true),
			LogLevelIn:   pulumi.String("info"),
			LogLevelOut:  pulumi.String("info"),
			Macfilter:    pulumi.Bool(false),
			Ndp:          pulumi.Bool(true),
			InputPolicy:  pulumi.String("ACCEPT"),
			OutputPolicy: pulumi.String("ACCEPT"),
			Radv:         pulumi.Bool(true),
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleProxmoxVirtualEnvironmentVm,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ProxmoxVE = Pulumi.ProxmoxVE;

return await Deployment.RunAsync(() => 
{
    var example = new ProxmoxVE.Firewall.OptionsLegacy("example", new()
    {
        NodeName = exampleProxmoxVirtualEnvironmentVm.NodeName,
        VmId = exampleProxmoxVirtualEnvironmentVm.VmId,
        Dhcp = true,
        Enabled = false,
        Ipfilter = true,
        LogLevelIn = "info",
        LogLevelOut = "info",
        Macfilter = false,
        Ndp = true,
        InputPolicy = "ACCEPT",
        OutputPolicy = "ACCEPT",
        Radv = true,
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            exampleProxmoxVirtualEnvironmentVm,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import io.muehlbachler.pulumi.proxmoxve.firewall.OptionsLegacy;
import io.muehlbachler.pulumi.proxmoxve.firewall.OptionsLegacyArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new OptionsLegacy("example", OptionsLegacyArgs.builder()
            .nodeName(exampleProxmoxVirtualEnvironmentVm.nodeName())
            .vmId(exampleProxmoxVirtualEnvironmentVm.vmId())
            .dhcp(true)
            .enabled(false)
            .ipfilter(true)
            .logLevelIn("info")
            .logLevelOut("info")
            .macfilter(false)
            .ndp(true)
            .inputPolicy("ACCEPT")
            .outputPolicy("ACCEPT")
            .radv(true)
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleProxmoxVirtualEnvironmentVm)
                .build());

    }
}

    resources:
  example:
    type: proxmoxve:firewall:OptionsLegacy
    properties:
      nodeName: ${exampleProxmoxVirtualEnvironmentVm.nodeName}
      vmId: ${exampleProxmoxVirtualEnvironmentVm.vmId}
      dhcp: true
      enabled: false
      ipfilter: true
      logLevelIn: info
      logLevelOut: info
      macfilter: false
      ndp: true
      inputPolicy: ACCEPT
      outputPolicy: ACCEPT
      radv: true
    options:
      dependsOn:
        - ${exampleProxmoxVirtualEnvironmentVm}

    Create OptionsLegacy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new OptionsLegacy(name: string, args: OptionsLegacyArgs, opts?: CustomResourceOptions);
    @overload
def OptionsLegacy(resource_name: str,
                  args: OptionsLegacyArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def OptionsLegacy(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  node_name: Optional[str] = None,
                  input_policy: Optional[str] = None,
                  enabled: Optional[bool] = None,
                  container_id: Optional[int] = None,
                  ipfilter: Optional[bool] = None,
                  log_level_in: Optional[str] = None,
                  log_level_out: Optional[str] = None,
                  macfilter: Optional[bool] = None,
                  ndp: Optional[bool] = None,
                  dhcp: Optional[bool] = None,
                  output_policy: Optional[str] = None,
                  radv: Optional[bool] = None,
                  vm_id: Optional[int] = None)
    func NewOptionsLegacy(ctx *Context, name string, args OptionsLegacyArgs, opts ...ResourceOption) (*OptionsLegacy, error)
    public OptionsLegacy(string name, OptionsLegacyArgs args, CustomResourceOptions? opts = null)
    public OptionsLegacy(String name, OptionsLegacyArgs args)
public OptionsLegacy(String name, OptionsLegacyArgs args, CustomResourceOptions options)

    type: proxmoxve:firewall:OptionsLegacy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args OptionsLegacyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OptionsLegacyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OptionsLegacyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OptionsLegacyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OptionsLegacyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    OptionsLegacy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The OptionsLegacy resource accepts the following input properties:

    NodeName string
    Node name.
    ContainerId int
    Container ID. Exactly one of vmId or containerId must be specified.
    Dhcp bool
    Enable DHCP.
    Enabled bool
    Enable or disable the firewall.
    InputPolicy string
    The default input policy (ACCEPT, DROP, REJECT).
    Ipfilter bool
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    LogLevelIn string
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    LogLevelOut string
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    Macfilter bool
    Enable/disable MAC address filter.
    Ndp bool
    Enable NDP (Neighbor Discovery Protocol).
    OutputPolicy string
    The default output policy (ACCEPT, DROP, REJECT).
    Radv bool
    Enable Router Advertisement.
    VmId int
    VM ID. Exactly one of vmId or containerId must be specified.
    NodeName string
    Node name.
    ContainerId int
    Container ID. Exactly one of vmId or containerId must be specified.
    Dhcp bool
    Enable DHCP.
    Enabled bool
    Enable or disable the firewall.
    InputPolicy string
    The default input policy (ACCEPT, DROP, REJECT).
    Ipfilter bool
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    LogLevelIn string
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    LogLevelOut string
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    Macfilter bool
    Enable/disable MAC address filter.
    Ndp bool
    Enable NDP (Neighbor Discovery Protocol).
    OutputPolicy string
    The default output policy (ACCEPT, DROP, REJECT).
    Radv bool
    Enable Router Advertisement.
    VmId int
    VM ID. Exactly one of vmId or containerId must be specified.
    nodeName String
    Node name.
    containerId Integer
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp Boolean
    Enable DHCP.
    enabled Boolean
    Enable or disable the firewall.
    inputPolicy String
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter Boolean
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    logLevelIn String
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    logLevelOut String
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter Boolean
    Enable/disable MAC address filter.
    ndp Boolean
    Enable NDP (Neighbor Discovery Protocol).
    outputPolicy String
    The default output policy (ACCEPT, DROP, REJECT).
    radv Boolean
    Enable Router Advertisement.
    vmId Integer
    VM ID. Exactly one of vmId or containerId must be specified.
    nodeName string
    Node name.
    containerId number
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp boolean
    Enable DHCP.
    enabled boolean
    Enable or disable the firewall.
    inputPolicy string
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter boolean
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    logLevelIn string
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    logLevelOut string
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter boolean
    Enable/disable MAC address filter.
    ndp boolean
    Enable NDP (Neighbor Discovery Protocol).
    outputPolicy string
    The default output policy (ACCEPT, DROP, REJECT).
    radv boolean
    Enable Router Advertisement.
    vmId number
    VM ID. Exactly one of vmId or containerId must be specified.
    node_name str
    Node name.
    container_id int
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp bool
    Enable DHCP.
    enabled bool
    Enable or disable the firewall.
    input_policy str
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter bool
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    log_level_in str
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    log_level_out str
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter bool
    Enable/disable MAC address filter.
    ndp bool
    Enable NDP (Neighbor Discovery Protocol).
    output_policy str
    The default output policy (ACCEPT, DROP, REJECT).
    radv bool
    Enable Router Advertisement.
    vm_id int
    VM ID. Exactly one of vmId or containerId must be specified.
    nodeName String
    Node name.
    containerId Number
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp Boolean
    Enable DHCP.
    enabled Boolean
    Enable or disable the firewall.
    inputPolicy String
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter Boolean
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    logLevelIn String
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    logLevelOut String
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter Boolean
    Enable/disable MAC address filter.
    ndp Boolean
    Enable NDP (Neighbor Discovery Protocol).
    outputPolicy String
    The default output policy (ACCEPT, DROP, REJECT).
    radv Boolean
    Enable Router Advertisement.
    vmId Number
    VM ID. Exactly one of vmId or containerId must be specified.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OptionsLegacy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing OptionsLegacy Resource

    Get an existing OptionsLegacy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: OptionsLegacyState, opts?: CustomResourceOptions): OptionsLegacy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        container_id: Optional[int] = None,
        dhcp: Optional[bool] = None,
        enabled: Optional[bool] = None,
        input_policy: Optional[str] = None,
        ipfilter: Optional[bool] = None,
        log_level_in: Optional[str] = None,
        log_level_out: Optional[str] = None,
        macfilter: Optional[bool] = None,
        ndp: Optional[bool] = None,
        node_name: Optional[str] = None,
        output_policy: Optional[str] = None,
        radv: Optional[bool] = None,
        vm_id: Optional[int] = None) -> OptionsLegacy
    func GetOptionsLegacy(ctx *Context, name string, id IDInput, state *OptionsLegacyState, opts ...ResourceOption) (*OptionsLegacy, error)
    public static OptionsLegacy Get(string name, Input<string> id, OptionsLegacyState? state, CustomResourceOptions? opts = null)
    public static OptionsLegacy get(String name, Output<String> id, OptionsLegacyState state, CustomResourceOptions options)
    resources:  _:    type: proxmoxve:firewall:OptionsLegacy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ContainerId int
    Container ID. Exactly one of vmId or containerId must be specified.
    Dhcp bool
    Enable DHCP.
    Enabled bool
    Enable or disable the firewall.
    InputPolicy string
    The default input policy (ACCEPT, DROP, REJECT).
    Ipfilter bool
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    LogLevelIn string
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    LogLevelOut string
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    Macfilter bool
    Enable/disable MAC address filter.
    Ndp bool
    Enable NDP (Neighbor Discovery Protocol).
    NodeName string
    Node name.
    OutputPolicy string
    The default output policy (ACCEPT, DROP, REJECT).
    Radv bool
    Enable Router Advertisement.
    VmId int
    VM ID. Exactly one of vmId or containerId must be specified.
    ContainerId int
    Container ID. Exactly one of vmId or containerId must be specified.
    Dhcp bool
    Enable DHCP.
    Enabled bool
    Enable or disable the firewall.
    InputPolicy string
    The default input policy (ACCEPT, DROP, REJECT).
    Ipfilter bool
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    LogLevelIn string
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    LogLevelOut string
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    Macfilter bool
    Enable/disable MAC address filter.
    Ndp bool
    Enable NDP (Neighbor Discovery Protocol).
    NodeName string
    Node name.
    OutputPolicy string
    The default output policy (ACCEPT, DROP, REJECT).
    Radv bool
    Enable Router Advertisement.
    VmId int
    VM ID. Exactly one of vmId or containerId must be specified.
    containerId Integer
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp Boolean
    Enable DHCP.
    enabled Boolean
    Enable or disable the firewall.
    inputPolicy String
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter Boolean
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    logLevelIn String
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    logLevelOut String
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter Boolean
    Enable/disable MAC address filter.
    ndp Boolean
    Enable NDP (Neighbor Discovery Protocol).
    nodeName String
    Node name.
    outputPolicy String
    The default output policy (ACCEPT, DROP, REJECT).
    radv Boolean
    Enable Router Advertisement.
    vmId Integer
    VM ID. Exactly one of vmId or containerId must be specified.
    containerId number
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp boolean
    Enable DHCP.
    enabled boolean
    Enable or disable the firewall.
    inputPolicy string
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter boolean
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    logLevelIn string
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    logLevelOut string
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter boolean
    Enable/disable MAC address filter.
    ndp boolean
    Enable NDP (Neighbor Discovery Protocol).
    nodeName string
    Node name.
    outputPolicy string
    The default output policy (ACCEPT, DROP, REJECT).
    radv boolean
    Enable Router Advertisement.
    vmId number
    VM ID. Exactly one of vmId or containerId must be specified.
    container_id int
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp bool
    Enable DHCP.
    enabled bool
    Enable or disable the firewall.
    input_policy str
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter bool
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    log_level_in str
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    log_level_out str
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter bool
    Enable/disable MAC address filter.
    ndp bool
    Enable NDP (Neighbor Discovery Protocol).
    node_name str
    Node name.
    output_policy str
    The default output policy (ACCEPT, DROP, REJECT).
    radv bool
    Enable Router Advertisement.
    vm_id int
    VM ID. Exactly one of vmId or containerId must be specified.
    containerId Number
    Container ID. Exactly one of vmId or containerId must be specified.
    dhcp Boolean
    Enable DHCP.
    enabled Boolean
    Enable or disable the firewall.
    inputPolicy String
    The default input policy (ACCEPT, DROP, REJECT).
    ipfilter Boolean
    Enable default IP filters. This is equivalent to adding an empty ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain sane default restrictions such as restricting IPv6 link local addresses to the one derived from the interface's MAC address. For containers the configured IP addresses will be implicitly added.
    logLevelIn String
    Log level for incoming packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    logLevelOut String
    Log level for outgoing packets (emerg, alert, crit, err, warning, notice, info, debug, nolog).
    macfilter Boolean
    Enable/disable MAC address filter.
    ndp Boolean
    Enable NDP (Neighbor Discovery Protocol).
    nodeName String
    Node name.
    outputPolicy String
    The default output policy (ACCEPT, DROP, REJECT).
    radv Boolean
    Enable Router Advertisement.
    vmId Number
    VM ID. Exactly one of vmId or containerId must be specified.

    Import

    VM Firewall Options

    Use the import ID format: vm/<node_name>/<vm_id> Example uses node name pve and VM ID 100.

    Example:

    $ pulumi import proxmoxve:firewall/optionsLegacy:OptionsLegacy vm_firewall_options vm/pve/100

    Container Firewall Options

    Use the import ID format: container/<node_name>/<container_id> Example uses node name pve and container ID 100.

    Example:

    $ pulumi import proxmoxve:firewall/optionsLegacy:OptionsLegacy container_firewall_options container/pve/100

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    proxmoxve muhlba91/pulumi-proxmoxve
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the proxmox Terraform Provider.
    proxmoxve logo
    Viewing docs for Proxmox Virtual Environment (Proxmox VE) v8.1.0
    published on Sunday, Apr 26, 2026 by Daniel Muehlbachler-Pietrzykowski
    Schema (JSON)
    muhlba91/pulumi-proxmoxve
      Try Pulumi Cloud free. Your team will thank you.